last executing test programs: 7.40506931s ago: executing program 1 (id=2829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x17, 0xa, 0x201, 0x0, 0x0, {0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x40) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x5, 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r4, 0x605, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) 7.129005664s ago: executing program 1 (id=2833): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22ec00, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22ec00, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) (async) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) 6.928197563s ago: executing program 1 (id=2838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x20000400) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1, &(0x7f0000001d40)=""/4080, 0xff0}, 0x40000222) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xd4, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb3, 0x6, "f18e190bf6e5639b76877dc265196439a0cee722bc0aada594b933d508ba6f5d0e33882c6a562b206afa98a1da056301205d8765af786a100187275e0d17d40531a91101577513fec9d59fb84f22df3823680d564e49bed1937a2e0bc2a0bea981c067f2b8022e810ed796135b6714b3fa93d747d4a044c4cefb68d4ae2e8ceeb0cc2cc2ca948bf1903391740d4cb3581a4fe0603a7c31560debd8ad750b3648368e5d1ad1d78e3cdbf88aad7909ee"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x18c}}, 0x0) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x3, 0x5) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="8c050000130001002bbd7000fb0e002508005400", @ANYRESDEC=r5, @ANYRESOCT], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) getpid() r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 6.033578185s ago: executing program 1 (id=2848): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000000020000000200000000000000000000000000000903000000070000000000001200000000000000000000002e"], 0x0, 0x51}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000540)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)="c8f6eb8fb1078827ff5d908884595808e35504960626e6f33a850661d1f2e32dad4513325d0b60b721a7d1e1f479ac19cdfcb7eea00900bd9628ad5fcf3d7125ef4ba6c3abdba1c2041b19e51a64519a65a656f424f0e76b5dd7f5cfb3a10537d3bc65345ca520c7f2883a6636fc4b30377c66", &(0x7f0000000780)="9024f22c39d48054ba070f5ad88b112b4194b680a1473cf08b7b326c09d5a1ddbeb198a11ebc35f036a249d220dd90a0d756805069cf4a7ca902000000365b17043666674b4dae83c442ac75be72e3b40aee5e249d552d3cd3f183dbd08766205fe4af5e977e519aa4ad2c8eec9c0bad2d200dcea60e3bf2986326d95a51d0eb6d2e8bd5c948c1b5a5", 0xd1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000b644319479d5aed8e220ff76a06a4b3f634e5c900000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.876613114s ago: executing program 1 (id=2850): r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xffff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r1, &(0x7f0000000480)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="090000000400000006000000010001", @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, 0x0, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007740)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x20, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.392938072s ago: executing program 1 (id=2856): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x2, 0x6, 0x4000}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc, 0x0, 0x0, 0x0, 0xe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000380)={0x247, 0x0, 0x9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x14, 0x400, 0x70bd2b, 0x25dfdbff, {0xb, 0xf}}, 0xffffffffffffff17}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000064000100bdffffff0000000002000000010000070000000008000b0047000078dc000100ac1414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00f98cc19bec1dfcb085208b02118b45a49ccd6efc0b9e1ab1152c684c0f02e94febfd2381473d653f5f6107d0631d96c7124f2f9b1d8608f2bfc2e9734f1de2bcda87d9a18d67a180f1e53c183bdf469af92648f8dca45863df93aa707eb2317d79a581d981f7248f45e55f42691f4639289ec1168a1d56c96d1d0f8383d0cae9b92cf742b66b84d7ed8852104420592597f74f052b06f7338f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x1c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000001000000b7050000080000004608f0ff760000007d980000010000005608004e000000008500000005000000b70000000000dfff9400000000000000488b6d5f0e49d9e4ae430a16bcf13d163b7e7c415ea75cda77875518134f4727973fa654429995f68ab33ca3cdd30795cc"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.800013473s ago: executing program 3 (id=2870): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, 0xffffffffffffffff, 0x100000000) syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5c, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7ae"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5c}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000500), 0x0}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffcfc, 0x0}, 0x400000a0) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='xprtrdma_post_recvs\x00', r7, 0x0, 0x9}, 0x18) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0xfffffffd}, 0x10) recvmmsg$unix(r8, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1}, 0xff}], 0x1, 0x10182, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x4000885}, 0x4040084) 2.779076171s ago: executing program 2 (id=2879): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x80000001, @empty, 0xef0}, @in6={0xa, 0x4e21, 0x49d, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @in6={0xa, 0x4e22, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e21, 0x5, @private0, 0xfba}], 0x70) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x21d8, 0x4, 0x8202, 0x6, 0x2, 0x200, 0x7ff, 0x3ff, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x5, @remote}]}, &(0x7f0000000180)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="8c114996cad33b", 0x7) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x121480, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000240)=0x8001) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a80)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000840)=[{&(0x7f00000002c0)="303f540250b001c25946c129fa2a9655c63ae2cd0bb887e7608f370498377ed8c7c89d01dac82e248537c22dc59cb357d4bb9ecc2cf8c3fa324f3bcc12ec8f8121c05729728eb72c093bcb1d727f7efd698c68b1794291be0af67092b9933c02be34472deebe3c07", 0x68}, {&(0x7f0000000340)="cf9f24d55b8dd723ead71f3b9e51c388130cbfac57ef2761117d9ed13b1931f976cbb40aba40b1df88669e3979363631c661591559e39a9dce5fd314f27de57b6b3d1e5f48fd8f45887a4f074008a18b6300ae41eab351d52a8450ab57352704270b639314bef5d0883cb4a252eb6baf3d523d169bb534c500c5429d13e2bd1a17c5d9eb8d42dc6e6a4ba3f76c42581e48fc64a040a0d2ed6e61f79dcfdfb0c131e3b86bec1c6015aca3d3b043ab3833dc57f3e1cf47751b005e4cc3130845512fda05bc3a7bc663a5b3cb7a6b82d42fb8f8756f14f251388a85092cc69c3b7f0dda7f66788bb13ad22a69e239ffca", 0xef}, {&(0x7f0000000440)="68809665cbcf4eefb8e73c5d113bca6788d7bbaa55130c9f295828108ce97f4972c76832bdf9297494336832f8c11e11503085614d14ad02b289519c46e922a00de73d2b669ba69f4e1ba0c6aeb5414e592818e5ee0d3207ba9959f5afea844093282b9db4bf711e45699f0aa2464d80d70f3cf34111a2e853c2e09a7eabdb2fe816ac35b33472c77d50d9053d33564cb31d6f57433f16664b3c5a067e8d76c3", 0xa0}, {&(0x7f0000000500)="5a2c12844339b663054ae43092922e747c071244cb60e77fe1bb83e27a685c34f27e000d8b80583307fb8fe64f4133f43b324cb705d57954c004ea9221a67de0bd67f0c0579677b0dc959eab1048ed809654ea2ea39598dd62246059f6f3e897b7e0b48b822c2b3c7fc0f490fa36bd47d14899db0676a047cc9415d301e5609e844856eed5ce4ede5fd2b9ae1cfdca9b24d08a2522388f66b86dc5d30ba0d15145b977873bb9df928c67645ba21e0a51ca931814e9300c259636416fd58a5be64d2d1cfcf044c12beae47f8aa815eeb603c09f969059e4bb6292b6530c2d2efe645453", 0xe3}, {&(0x7f0000000600)="8edc1194f4779039a3565e153c9b1100f6860f370494af610c010af5119fea7a3eba3f81e9ca942337aa729fb58dd44b79bf0490ade4ded47de1c65231969576b81ca7e5e38f450d7d1a29c3063dc12dd2449eb739e22465dce929003312faa3e85c11da1baf6b0d34c0bd2cd23b644f03b909fbdd9a0fb1888e5384c34c264164778d2356431261e005f7cd8d575e3270d775b39d4b83dc0605bced49f727ca8aa88c1dc3efd9be1fdc65e7ed09b94f39d0b28e8bb2248b11", 0xb9}, {&(0x7f00000006c0)="5b0f2f4fff2ba1387b9f5272195d03808ba1f01ef2de5d233705c422b5701d99e107cdd06d6937d101a8f7ad46063c603abb25496cd1b7d464c8fc6f7e2174fcea142bc4c216b324b1c7a33cb2904b78015541ca0b2a23fbb7958478", 0x5c}, {&(0x7f0000000740)="fabbdbe92ca0bc35c57953edd779f2ef1827195a84d433692a052a5ebd4ed45e3211d3d23dea83624bdd2ebcee107023d7f519ea5757539b53c112775bbab2ce5d36cdba1107d881d10d859542d5342d6917995e36feefda9e51df9e17f08eecd0b015741ab30803ee2b702d3d25059565c88ead0dc145331105d1ac6e96d383f7db18d8b76678d3059aec8db7d1413809a44fcca11e4bad76afe596569fdd4355a845a031ff166650399bfa120ca812d88bffa4c72c6150019171933a", 0xbd}, {&(0x7f0000000800)="b70c0dce1c5a729f51b3323b826987b8b675e87e6d1739fe4ca5038e584cca4e924e0f897328cba4708280c6c70ba3f2fe220c4cba2a7b8478f7bd6874", 0x3d}], 0x8, &(0x7f00000008c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x44, 0x1, 0x3, 0x1, r1}}], 0x38, 0x24008001}, {&(0x7f0000000900)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000940)="43df2a3f0802149cf03e70c369e502d5c1632ea15d8461eddab798b1d30a44aa1feb57c6fc5d04652a682b17a04ade2989bf9689359c46aafb042f0ce7bf5269a0fa426b1c9ef2b5fd2f26c8261af2ca175d0915900c94a3ea091244eb494d83a05f2dd525b140093fba85a645a3d3733f019eca0f6b403ef3cf253c9c360e4187267401ae9cb30916a457c23c7ec2ae34b1b23b9c075ec344da5a3022a70cd884f9ff4d0d515b4ce5cbb3ff184a2f81d19278d464f05b0100b9bbc98c1b7b69fee7da44dcdc75795f8908f31f2bfb244ffa2759c73a62caed67937bb0b11dbe6ee74e7e12f465efcdad71c8e041260e7a38edc6cda800dfa357649e254fc9c1e96f1283e6e1746d6dcddc88d95395619433f752596386e9cf5a6875eec7a351a920963f7430c24b713c0276df8ff8541a42c34de0e6b55bb8c6bcec2918a699dc571dcd56efae4d827dd63c927d01279ecd6459057bd5f0a4d8ce77a8c432e358032dba2b052747aceef73eb41886728836c4f563d2bf024f73cb8a78f1116947c2f979e2e722a6b6c7d4c02929eddf83bf3018507b3ed154c31b07a7d2d5618b77075b803c385edaaa2b94cc1db9188196d18b4db21888ad36cd4471ac8438520f4a84e1330cb6739f0a6ffcc89ee5f1b79d4f2c5b4a8cb35ed5aef7ad8348ef9d8d756851ad8a9692d815fc7778296160e5708b5fae906a5126688548b6b506c3fbed03dcc95d7735debbf7d9de93024c442228f2d7c6a4604310d7b79c5428b33f0c6ab77f36a8e7421c232e1416a23e1f5fe0a2e7bc998855a1603b7ae5c9dfb92a83b35ee9c49f56873e743359b1a463161524a0466492043cfa7a1f4407c80c6d5b1a17c62e159c385daa9af44686a48a3f8cf202ff459fca48f8c2a55ee0fcc0536837ea6b7a8a6cd5561b9a29dd4c2e1528921daae5d3bc7f7b938edac52b4cb743303c017b8c42219a9cecbe948d976815e02367edee16dd19a05a77ae6cf73c8dbb584232dd12e74420c439f0da59ef2171008699dca7a50b0a250b65b84cecdf6460310a20122cb95bb8f9a1d8297dc615f265f0c3fbbd084ffd2261adf3c1e7ab945b1e513fb3b5ca88487f9760dd5fddc91633ff6bd67343dd7bdc9021fe9d6c364fad54623cd3dbeb4e4f0d0646cc816d9d3b63f3ce41ec82fef1bd31544691b4690a5036e28649f51eb7a586d384920240293e7cd607361dc8c42749f889920d13411bdd8f8fdcb478ff1a65d0e203e720978b8aff00fb4315dcc619bb01d8643f02bb7e59414ddde8222ddca708c4f0b02767b3857cf0f7f247aba31dc476149b8122663980a3315b3e1e31c78c33d514d0f23407547df4f0eb4eb99c905c8c115e2ba32f648b29903ca3cfc9fc900acb0ebd5504f9ae67873369bc4112c728c75b5a05d093eb8de53b7e09c72ab1b9244d11c8e4021ae73000fd5965b624ef9c91858f187720d094f4ecfaa5da7059ca2862c2eb38ed1c9792047993ea16516921a2fc3374583494192bbc7d482a1f95255b4b10c01bca89dcc57558f35717ff75515f6a466a4ee2e461489103d6fc068f73d67f993c50b81aa4a9639ce10a381fe43556b59b38690de74f3ccf50366e5651f2952ce30468b70b851c4f18accf62b4afb814179e82343ca7bba2be71ec94a31bb9d32717bda24cb19006f1898f07afa528b9d5a29c555dc1c8bd0adba79fbd1ce059c5aafa68ac7a4bdf5262ebb00850dfa149c47b95768d468f925cd2b128749bf10aea098dfdf63801e6fb85557b93ab1f93d745d4617fe5d330720d9b17d9816422c5521088354cf866b234b08f336280efd97cbd98656e46d98bdc8ba862a9b8d1987e00eb29886132b28ca73b4a060bfc270d71ecf49b05eb9ceb45c848073e9a639a4d65189ce1a95b2ab63788046c78146c6205423c6de5bc08c3700e68b9438caf90d822303d97321a57ce268b492184d0507a82084066f73d378abba899921715f92fe5eda906a0e3c2b98ec57118325475be51529ebcb6e7325682f0a597168f3f6691ed4d57277c3dca86a203c845ce62291f35230831b2cd8386ad5ed69e67c39f564a5acb1d1cc27c4dacbc0e3da915ce7c5d4fc672fa763b0850dae55ea142ae328f1ff4d15e8e2f82b6e9cff20c376aa4fffcf19622ec0900109c17861ff0777e435ce8cbf43002515a24967d0471414fc180ce7b8227e59688e075e0c5cb7735f5cbd3ebea082ed7c735e161d422d0b525196cfdc14afc3f43b472845a762e2d06622db3f7454a99dbf2cb7f9f18562c424e9bcda83c7e1c8a1e53a8156abb6bf8615d824e8d528885888ad7819c8b7dfda097625b7d19ba5e7966b916d4ca0e6d1e92d019df34be3000ce263040b6ac2e17c89cc63e0dc94ee03ba10e19eb1645a9b5bc2b3892c0c85af37afbf088f894c44a5eb7f013491fdf53815f720b8cbc162d40519603da3b499740ab4e13dc269b9139746eb5127a90c177f5b59aebcb75fb96d5ae25f41c67796793dde96ad44e91e06502a9e956dd008c9559e8faaaf085819dd29132b9e53eb3dc7cb13f3c4e37906ab24de2ab20cf90e6b0eb8d2e14e2b92c8b77c437d1a4f1753c58bdc58727a59c137ccac9d11febeed21908b60b14f1533ddda85ed78cb758bcf6140136d53b4f0f1fcbfefdb81d90274da224a900cf7e386fe19c7af8cf66adcf2ab1d2ed3a0ef6f0fb41572108d86cc514df2f53230a96c720c55ba0732a03c8651358ba7e15e2283bfcca6468749559538ed873f252fdc71235c7f5a804145c28832b66be7f9c47fa7a0ce7a30ad313b8352cf765b586169e93406323d2daf513cd230e6b78db52ac73cd60ac3adb3400852d3b75fc2dfc7b8392c315ecb307ec89882be2c82b301699b37e08a7fa6ed7b82c750d1e30884cec1e23cfefbe781e1db322384f21583e919083a5777bd3fc99086b5452e7fff99fb95e79a5b52d49dcf586dc2f6793c79f1d304533246ee8dcb9598533cc9532b498c42b2358761805a7a237dd5d3eee44765eaba8cf3a3a70e901c96b516179f0947bbd8fd1770f22f22483f663cef8c1115bbd9adde3c5f584bdd7423dcdb73023b8f52aa821eb2d4b2c146e07d60bd438dffbea5930cfc8410cb2c3607c042dc74a0381cac29ba12aa51b2ed01a523189700a12bf7f5489e1aeb44bd225cd8304e4694096511058cd8f52e2cf407517f9f97af89ce962325ff3274bac9a82ac42f491edf18863184ec901b409f74b5bbf33d22fd8c94c963f45571b5bebf9718d2d79f92ff2039c028b2dfd317aa72c40a08242fa4a35344bf373ce52fb938728d02ff38a58f9972b41e0c208f9798a6031532e40a1f9bed78b5b8b555baf2f1885c4231c8f43366d9abe87ddb5eb10b52559840c5321088b2840096f8ff7d383293a285a0f7788a8796c7bb8340c99bf25626d7b5ea52305ab500e6d2806c96603d0f9f39ba84d1c2a5aeabf079689500fa6c743b1d8f7413c80524cb034e260f037b7e16d31069d7c5cc2e32c7a02e6e5da2bcf6ce644a2f924539eb2b6cc2958d6b8e2ea3127771bbcaa3cce6724a40cbcd506ab303fabf099e9a9ef06d0b86d247ec002fdbbedde080973e8964d11ab68264744173b8b401bff7b1b2c12516738e68b014d78fcfdc4f4625566055831384c0de7282f936740b414cf0de89064735d370e185842b66c4f21fe6f60e8d50b0b278bdd26d3a03d0ebe837d0c4d761d06352c2a81eaba5486bb6bf563ad212cbe91f4476fac7bb8ef102aa20a33841417fd2a70d42bc3776261ae20885728a0b6fb57a87ff4fccc537bb2d3c6f739cb189ac43a9baae2dbb8a135c823faab36f567dc7761a6a25e2780f2bb2f4d7b32ff3e5bb6809a791add903af4ab400b9907f21bde1b0867e7ad235c1c0e7da374aca2de8fd96926f088229674c827e6f3b49ba8dfb6e44e5df978f4fe8adc9a3765f7f1d87b6cc05fa0bfb5c43fb0b4587dae90ca3ec89fa1688577155e97152c33e9e2e641e1a66fec19cd4cb5825c7af866e08b2e26b14997192fd96ae9c271cf9d1d3ff5bee64910f489e607e10a5c0f469941784b690119eaa3abb25579c3fc938aa32bf0d454470509df3c401fa6f6cf82c26ac642d5af72b4dc8291271a5bb1949049fada79e969b756e2abb6c60f62335ebcc89e92ca5df4354959871b2b0ef5eed3c1d5bed44df53c34f74a670bb993821227056d31145164e0a8bece5384aa12e5fb652a3bdc6b027054a6003f52606442a8da82896d880d78d47b33f31669a4869474e3a0e12ff6dc34e010ef0a48029485ba345db02860dacbf8dfe75043f5fbe03f391c010e7d4e9a83627b16d0e91ab8ed12ab50f497242fe86c39ebe09667ba24628595ff79fb447140fc9fd027883b05fa0e9ecf9a760e59145de297070249e25c856580547d77a698777ace5debe657cff300fb5a9f7506891d1143552e565473740180f0bc5dbda00a41abc62e6c0bd3cf63321c30a4780631f81dfabf688b363705d9ba35b3c9732742d9c423b13b8e8db9779fe6471e13fe1d7a8ba17235eeb3c8cd551e1f649243b6ec1bc174ffe37d58ca0189ab15519d38e3156dcc7c8c289c0ab51202d57d6047cb1abf60b3543a667f7635f568bdfe69c3348f05203ce3378e1065a074312f4abfe9998261c75e52b5f6ed15fff8abb345e4ac766172d693784c5a8502ed47c3c7a59b9e3e66b90ebc3dcacacd83a0d7cd508394d2cba3e5459fd830c9ef5e55c9fc9ecfa2d185e1b10ef79fb91de3da2ea990ae2b8d1da51298c25c020eb005c14dec51a7dcd479630b3117af0b8f695349caab45f88fa8c43a0b53cd8337addc811dcef7bdf8eb17df88d28af089ed27eca7d5dcf7ed9cb0e89f8c1f706c12834b2070b1224f67de43a3f72598114582cf8209fb4c82179f7e81f1a32e59975ef2d70b734ed8577480aa97e36126ce5a170c96c847e887370641a9510c211ffb4edcafa12cffdd798c46391d302ef5d7151599d99dbef2bc6221ebbb772031c87ffd2e98eb9ad86dd76aedbc9f3f243993aa6e413614538ee9ee387d0bb13f36580bb2e3928728f859f519545572f1d6ada101c87a4325112d9270cb0cd6003b0ff95e165b382bf3bd735464bd05c8f94f9012b242b3b5d78e43d7b0a9282bddc32f4be3893e4506ec64ba3cea5ef4fabd2d2b8ac4dde2f6b2a5b47a2a2160526e02b8bef1498340e96af3bf066e1844443c41307c52f8641224fa1386905a15b027add0eb95bd3626f6f9a17c520319859403cc3687d0bc5cbb4a8f9c13dfa36db6dad9ef4c7e723ef4877ac0409ded8d482c7ee74f594830de6838eea2d1948984176a97aa1ba367abb9af83043e1abab667e6d931d898af4010ad457307b9fbc7512767563592a2a93fffb9959abd69f1321c4bb4682d8bf7ce80ff562b40fb07a951be8ede551895038a1b439555a424873f0c2f91dd0a5cca96b49d3e0c950e555503e0c29c4623fa2ec9759935cb151a9bfa93c63c595ee8859307c4b192d2f2da109569abc5a442d05b5c6e0f893990beba1cb792617266a883ae269a965b6c9144d29a20c17d73381a02efb0d602d48361d68f23191a33e21d5b3714e213df13b55e04075cb2dd18f661bf03a65f533bed90a855f883f9075281135005d63cdfa0b0ebdbed746a551f0666296e19fbd3689811b87d92c10bb26e1c1f0a5b40ea77d36639d0036859c2dccabe3c5f600f57345b0343f4ca291b9588893a2b678a3641101c3ca765a9bf8bf5d73b05c29eaa7ef6b413944d6e59", 0x1000}, {&(0x7f0000001940)="95746580f4a228e8d823da30a6cdb1434c92cff03a46c5e596c2e610ab3a3ee33154c6b43eeaa91e244479fac4a97453212fe8f213f59d25be32de724efa3d1932f9ad0535d2009ea6461a88c5b841585c001328ef6424529afe214e829b93c61b3c1d2245e21410877ac6bc1a7484d33b9724e7d56ae3c8b231487f0e1b3dfea9341830bc8cc94c976d7ef0e8", 0x8d}], 0x2, &(0x7f0000001a40)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x400}}], 0x18, 0x40000c1}], 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001b80)={0x0, @multicast2, @multicast2}, &(0x7f0000001bc0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c00)={0x0, @rand_addr, @empty}, &(0x7f0000001c40)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001cc0)={'gre0\x00', &(0x7f0000001c80)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x6, 0x0, {{0x6, 0x4, 0x3, 0x23, 0x18, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d80)={'syztnl1\x00', &(0x7f0000001d00)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x8001, 0x0, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x2}, @end, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0x8, "582d225b798d"}, {0x7, 0x3, 'q'}, {0x0, 0x9, "b14963a39f75de"}, {0x7, 0xb, "eafc764d1c70e60b9b"}, {0x7, 0xc, "50feceae3377d0fb228c"}]}, @end, @lsrr={0x83, 0xf, 0x43, [@loopback, @loopback, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001ec0)={'ip_vti0\x00', &(0x7f0000001dc0)={'gretap0\x00', 0x0, 0x40, 0x8, 0x800, 0x2, {{0x31, 0x4, 0x3, 0x0, 0xc4, 0x65, 0x0, 0xb, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@cipso={0x86, 0x3e, 0x0, [{0x5, 0x10, "b55490fc2abf74a536e32a1a8029"}, {0x1, 0xb, "863a4e1a0c3a78e54a"}, {0x6, 0xc, "02aa44a07038c31dccc9"}, {0x6, 0x8, "53541957a4ba"}, {0x7, 0x6, "cc4aa4a6"}, {0x6, 0x3, "db"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x3}, {@multicast1, 0x322}, {@loopback, 0x2}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0xfffffffb}, {@multicast1, 0xf3}]}, @timestamp={0x44, 0xc, 0x7a, 0x0, 0xf, [0x5, 0xffff]}, @lsrr={0x83, 0xb, 0x23, [@empty, @multicast2]}, @timestamp={0x44, 0x10, 0x20, 0x0, 0x5, [0x4, 0x3, 0x4]}, @lsrr={0x83, 0xb, 0x5b, [@rand_addr=0x64010102, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001f00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000002100)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f40)={0x14c, r5, 0x20c, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000002180)={'erspan0\x00', &(0x7f0000002140)={'syztnl1\x00', r9, 0x8000, 0x8, 0x300000, 0x0, {{0x7, 0x4, 0x0, 0x2d, 0x1c, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @private=0xa010101, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000021c0)='cgroup.kill\x00', 0x0, 0x0) sendmsg$can_bcm(r13, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x3, 0x384, 0x10, {0x0, 0x2710}, {0x77359400}, {0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "1598129b8ae0905a66e477dc093624cca780ed765ed3499977a25c2107f9867ddb9e79d80d6201821141dbaf122b84a7599e85e78771c2d3d90630280266830b"}}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x4800) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000002300), &(0x7f0000002340)=0xe) sendto$inet6(r13, &(0x7f0000002380)="f1efcbab9bdcc833f99b4cbf0361ff5db9f6b0d7d897524a7313c65c19f29139e27423967e2bc41cbde2774d11ca42e454ca319d0fade91f721c920c6582b485600d5646c2f02c7c1a512f3040f248868cde036fe7f6c277f893438619c2ee952c6dc3860545256a571415f86c3ddc97cf9b9baeb5006f29cea82479e430880b6abea623901e16ea985ea17fd24624ab94c74c9c1115c02848", 0x99, 0x880, &(0x7f0000002440)={0xa, 0x4e20, 0x51053845, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x139b}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000024c0)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f00000025c0)=0xe8) sendmsg$nl_xfrm(r13, &(0x7f00000026c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)=@report={0x58, 0x20, 0x1fa86eea81d68da0, 0x70bd26, 0x25dfdbfb, {0x2b, {@in=@multicast2, @in=@multicast1, 0x4e21, 0x9, 0x3, 0x3, 0x2, 0x0, 0x0, 0x84, r9, r14}}, [@mark={0xc, 0x15, {0x35075b, 0x7c471bec}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0xb0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x101}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0xfffffffd}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0x12, 0x0, @random="8da6baf90521408ab68819ef82f7"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002880)={'batadv_slave_0\x00'}) 2.745485923s ago: executing program 3 (id=2880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000010001a80080002a1050000c004002d80"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 2.380052299s ago: executing program 4 (id=2883): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc011}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 2.182721984s ago: executing program 4 (id=2884): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='workqueue_activate_work\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) pipe(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES16=r5, @ANYBLOB="f9ffffffffffff000000000000082df33051c7a1a2c2b1000300ac1414aa080006000600000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000b8ad", @ANYRES16=r8, @ANYBLOB="010025bd700000000000070000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r9 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r9, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x2000000, @rand_addr, 0xd}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x498, 0xffffffff, 0x288, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xff000000], 'veth0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2e, 0xd3, 0x5, 0x33}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x4, "740e50c256c0ba73c47fa01480ba270c922f492a7c819c698bb54240ca45"}}}, {{@ipv6={@local, @loopback, [0xffffffff, 0xff000000, 0x80800000], [0x0, 0xff, 0xffffffff, 0xff000000], 'xfrm0\x00', 'netdevsim0\x00', {}, {0xff}, 0x32, 0xb3, 0x5, 0x56}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x3a, 0x4, 0x0, 0xb, 0x5bc0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xff, 0xff], [0xffffffff, 0x0, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xff000000], 0x2, 0x10}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "53f46d69f7fead3682d611c856eee3c1e04908e9ad7b3c9a7c3b41feccaa"}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x0, 0x0, [0x18, 0xa, 0x7, 0x5, 0x1, 0x5, 0x401, 0x8001, 0x2c, 0x3, 0x9, 0x1, 0xfff, 0x100, 0x4ad6, 0x9], 0xc}}, @common=@icmp6={{0x28}, {0xb, "8e56"}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) socket$netlink(0x10, 0x3, 0x14) 942.05915ms ago: executing program 2 (id=2885): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @rand_addr=0x64010100}, {0x306, @random="e15c7f1c3f46"}, 0x20, {0x2, 0x4e22, @empty}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x17c, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x15c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x17c}}, 0x0) 809.120227ms ago: executing program 3 (id=2886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d114}]}, 0x28}}, 0x0) 739.204305ms ago: executing program 0 (id=2887): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x4000800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x8, 0x679d, 0x8d, 0x4, 0x3, 0x2, 0x6}, &(0x7f00000000c0)=0x9c) 737.410501ms ago: executing program 2 (id=2888): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 725.680672ms ago: executing program 4 (id=2889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e5edde68db68a231f83505c1a41d53ce5771db4c2ab175afc7bb1045af41e563cb14c9c04ffda10c262ca9ebffba81b282db5b023e9d632d2b01f6778bd5a454eec33b56e35014372ef312393860779452def2"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000052ef366d7274097000000000050000000900030073797a3000000000090003002fcf7a31000000000900020073797a300000000005000100070000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000811}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000400000f0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r5, &(0x7f0000000640)="e8b770", 0x3, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 679.380728ms ago: executing program 0 (id=2890): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) (async) socket$igmp(0x2, 0x3, 0x2) recvmsg(r2, 0x0, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935", 0x8d}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) (async) r3 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x9c) (async) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) (async) bind$llc(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000180)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/6, 0x6}], 0x1}, 0x5}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f00000006c0)=""/140, 0x8c}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/59, 0x3b}], 0x5, &(0x7f0000000900)=""/171, 0xab}, 0xe176}], 0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r7, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 611.133686ms ago: executing program 3 (id=2891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000000000200000000000000000000000000000000200"/72], 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a090000000000000000000200000009000200000000010000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000240)=0x897f, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r4, 0xba, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080006400000000105000200000000000900010073797a30000000000900020073797a3200000000140000e60000000000000000000000000000000a"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100008142f917b3ef4f87f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r6, 0xe4}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="d0f0008032ed00000000000000faffffffffffff0daa", 0x16}, {&(0x7f00000003c0)="63c6ffe4", 0x4}, {&(0x7f0000000b80)="72aeee5eae63e0a597e285887c2eca8a5f9d55b4b0456265535815d95a65dcd90bac0c67db7fc03bd4048a600338611a866cfa641a438d65a532c5d16fe1e0b403b8b288a632d82b6fff5a8af3fc660a8f231ff0857002bcfebad8f140552dfcdc33b0f0380b873f54a56ae5937e74f207b6e188f4189e8892ba51f6336343ce7346774417b1c50d96e7c5fa189ca967cd6fa1e6395d09946650c22835c966a1fe5222591f", 0xa5}], 0x3, 0x0, 0x0, 0x48010}], 0x1, 0x5) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10122) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000104050000283af96e07ba4d9b36ee4cad2f000000000600064000030000050001000100000000000000009a5931d2350cbcc35be8af150000000000"], 0x24}}, 0x0) 558.600973ms ago: executing program 2 (id=2892): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0xd, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x41c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x328, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xf8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2da2243e6aa54c35}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x13c}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}]}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x3d2b, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008045}, 0x4000) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x38, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x7, 0x6, 0xcf14}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x38}}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x2, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 535.896198ms ago: executing program 0 (id=2893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x67, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x6, 0xd4a}, 0x2c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2000000000000002) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605200700000000000000000000000c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404) 531.697815ms ago: executing program 4 (id=2894): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x0, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) (async) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="eab0aee06f82957d90d9d8a9a0ea8a7798cff524d11547984eb389c57c2f51bf88fff014a25eb61da1a1c15030718d5b5a800c7c2e46a6ff1a4c636c8e4c64c6e5b25c7ecfa27b2dddf603494d897c4aa7eb2fedf2810279048e7621bf458a4747a14de1b3c5bd574a89dbc15c89feb2ec3cd8a802521a488435b216a855072c959a7dd2314fae196a82f35ececd8cddc16dd764d09ab582dc7f64131562b228af9c995b648a06b721d99651c025ba020587438870f5b968040ccf451549f3bec936", 0xc2}, {&(0x7f0000000180)="62291fb8ce13d2301b081960b35b8089d966b5e489c00d9272c3fa2e985c4c4b1f2f52a7dc7f410e219470389445c2faf2c132a2180f2f46312e1504be0ead39c97d10e2867559a3777c0587e1b9eee06f733c4f9ee09f1fa42d4ad8c436a709c82868b410bbc4f11318778ca469aabe0d630e84bd69d783e1835d6d57bec1afdd0f64679a4b6e37e43ee1db044fb2c8e2a999f6da79f9c806dc82a27b2fb9660e4065d6a69244e47cd62ef2a8557fd96437c3f972daec9e14f4129d0eb3f2b194c03de96ada", 0xc6}, {&(0x7f0000000280)="21dada5e0c3b74d39cbfc40820fc3bf7bd68018623c9817b415d9d911a0d43f852238a3ff72d66551be76ac9a6126eabb340b0b819d156db605840a4dcf3265cfa0e2cfb80150d5024e892a7356c20ddfe8f34c426db7d34a9318c96a9e188e68f5db5b818800451e815168d942066ae56315e5ca4950a27c0498125f96d369716b870085b8b5a5f681084411edcdbd4c7c3b04fa205fedbb90126256005fa1266bdf49c9306265b38199cd10832c1be2e7c0f858e677501df6f575ba79806bb2260e12977fe5ace1ba69a75d169edd2a6299289e4be355e5f3a72ce831ae4537d755197", 0xe4}], 0x3, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x501c8b69}}, @txtime={{0x18, 0x1, 0x3d, 0x31}}], 0x48}, 0x4) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000580)={r0, 0x5c, 0x8000, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000540), &(0x7f00000005c0)=r5}, 0x20) (async) recvfrom$inet(r5, &(0x7f0000000640)=""/168, 0xa8, 0x100, &(0x7f0000000700)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) bind$alg(r5, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c8c0) (rerun: 32) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000003780)=[{{&(0x7f00000008c0)={0xa, 0x4e21, 0x6, @loopback, 0xc0e}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000900)="9baed8536ea2be129d563a883fa9c9f7165b9fd3245c228cadc802968e7c04419e0697cd9247ece089dda5516c3abf48bcfa75d5bc0e4d53a7850bdce9a5bd8688f7542fc11974623ae4e083eada258be9cbec7e58965528fc32431a57f90f2ae7a6d94c322918907ffcaf307b12b0e4ae0d4e68bb1b686a0863eeb5e54286017b2e978b8241fcf714bc4620d4aa73b7905417cbfeedb6975e987ef17c7bd226f374d396bf4d00f9", 0xa8}, {&(0x7f00000009c0)="d2733af0ea1cd0693244906ab03882db6fb484", 0x13}], 0x2}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x5, @mcast1, 0x9}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000a80)="1bc14c6ed0ee30", 0x7}, {&(0x7f0000000ac0)="6d8a3c78c6aa878dc3b5e951b11981b5a781d4c185e0ed422f7a7b311030e8643f4becaa48a82d897cad5076a0e7a9c1d4385968b524cf91f2ce8e66040111b32ca805e61b5109bc4d91fe037de3b0f5623e6599020f416a071c4fc709dbee5670463faae0f37c390ef09b1e041dc0fbc6d74aa66cf2d88c7c8084b988cc1a012c588ecccc928629150012358991034b619c57905589de12a73a12b46a44bf395b25d2cfe11372959acb90c331877a32f6e8f908f93e5b68edba37202f69fd7c69c9a550", 0xc4}, {&(0x7f0000000bc0)="24709f9d6f9f7f8c65bb5e9a5bba5f9adeea73ee97aa14ceaac324b78ebef440e12ca9221940dca1d797cc173fe0e7b76f2d", 0x32}, {&(0x7f0000000c00)="80170e480fddf20df5e846151061ebdbf93a175c714cdf83997705402fa7ca741541ded706118f8bebdbc0dce1a69c68b58f50c6fd539be58d36d0a4954cd82edc318434a7062bd026c1b925e1dcadb3bcb2e108cf3fbf593c4ab81910", 0x5d}, {&(0x7f0000000c80)="3bb166385cec2c30cdd337615adecd189ee8da1b663fba2014b821878486b5c8c79fcc994f347a08b80a481215bc294db19f27b9d550b5b058795a89c0a37c167628989b18f4e34470de6783631475d2fd273f340f1733", 0x57}, {&(0x7f0000000d00)="987d7183714e49ba7ecf61b8026d6b34223cebd8945cab1934eafbc160fb79b728753fc799ad99862665b1ed88b2eb3a5c490e66869e7c59221d137e3f1ff8c6582f9712eba81abc0a38631a0d1337f5a4fd9002c00814106c25130dcaa8a55480c4078ddcbd01edafebf3309ae07cfad81812a2e1ba5f3112480a4ba2fa3b245d9c4c962a0e7b22", 0x88}], 0x6, &(0x7f0000000e40)=[@flowinfo={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x62, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x9, [0x0, 0x6]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}, @dstopts={{0x88, 0x29, 0x37, {0x2, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0xf7, 0xfffc, [0x6, 0x0, 0xb8, 0x115188ce]}}, @jumbo={0xc2, 0x4, 0x401}, @enc_lim={0x4, 0x1, 0x10}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0xf7, 0xca52, [0x8, 0x2d58, 0xbf75, 0xb2a]}}]}}}], 0x148}}, {{&(0x7f0000000fc0)={0xa, 0x4e23, 0x9d38, @local, 0x7}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001000)="78f164a4fc7b3c8d526a4a8d8b544017d8c38c003a8cce2edcd56cc1d960ee7c068a456faf6beb1df938e4f14267b0936f86d1d7da194fc5bc5e955a7db6ed1e5794677e8dc418d985e89a728f51fc09040722996ffd0e50936d1f49bc998cd198f70d783ec56c994d4a6d0338773a99e6d7ea0c03d98734a508a7fd79c3f0e6ac7c178d57dfe030cb21942135731cba7b463e3616e2ac60607ae606ae5bba8b14a34c6ecb7a678807e4ef356fd6cc3426462e23d56a1439a3057920b41679a855d65be6bd43bc507ff0b1f83ae7a6e889a2e1f268744a", 0xd7}, {&(0x7f0000001100)="7ce64defbca24db019f9f318182270a195750570a9cbe8ce766c771fd8ae6450b924ca8d3b74cf486a4c24ce08a6fd889750b3d73dc74cb7b9fd51960262f30358d240768e9d60e72a129fb6e6f04bef53ace1d22747ab9d9c3118c927f6565c52f2047a5c5590008891dfee2abcebd06c6003220b6ee35f21433c8eb1c7c4791834530c4cd52217a90454cf2e20999eb9c143f7bdea6de58d3787b9e70db1274cf5cb1477925627548445ba4dd7ec0c786803500574ec402ee16b1808577e5d2d4ca73938f4354a412602889e136e19ac94b7bf17d0f2f0795c4c1401b4a26e37d93939180dd25a1b2c", 0xea}, {&(0x7f0000001200)="75d975ad1650e19e15e335797e140b060ea5e1cbe8ca3c48db90a46188ed639c69d112690acca1a10611ed63f478a10495d2ebf05789190f6b7256db19e1e32a8ef40afc179429d0fd148cb8fc694d9323074012257d41d71f04c309b6209034d3eaf50cd6b07c40dba1e509460382f2786e8dd5a1cd143d8339a6c5714f485f16f777b974fa560db9e748c8ab815100b791da89cae6a2fa836047031ebf781c03320f06a48993232499ae18e49122fd0af5055f93213274c375b3553ca372d7e14696188f5c7ca7e71927fe2e9e947f09368267f61ff16f5c0853", 0xdb}, {&(0x7f0000001300)="84f28e4019d0bd9da3423dfb57e4b02310d932818d63682d4491b0c7ff68b721b9ad4eff0f716f5073d3fee4bd671f0602ba807d817326d941c74b91fac2d05df53cd12f3902005ce6f6c422cfda786a99c3fce3b8181766862cb5aa5e5c2e6fe0290b7ac121602d554e36b2a17ab083f61dce936d2bb02e0dd225d370727540259e1313b9394c0c232961c2e5b6712b6b676dbe67dc59c56d1e8d8bbadffc5e1ba4621a0303", 0xa6}, {&(0x7f00000013c0)="df2551b0123c9127f7c366b19b830236cadc025295ec798af8fe40292b3da22469473b194455b5c1db0f078ae2461a1831840cc3c1b79a771348fa49b2416549791f6011e56e06ca692d3d98891c09b9d137e7a1b9de1cc9516adaa2e26a192a6052bc2997fb4a574cb707584e23c9e9796554a55c387f", 0x77}, {&(0x7f0000001440)="d03a4ea660ea2ffe965537ef7108c65e754c043d83c70629253942acd953d9a78df6ea7777deb5b48cc0dc2ee9654dba2f5d85a93a94da2b0f63f5dd0009ac32168f4cd0d77e571ea623baa8427095cb7ab19a5a9a45622190cecdf5365e6cf74341847c92cc22b55b4dee8781463444f4df", 0x72}, {&(0x7f00000014c0)="55ffb905236ea3d4c7d4387f2772a8fb6674307befaf579e63b1774e0b5b8cf422e3527c2ccaf420bbb6ebce62c82fadd233de68ba4efe3a0cad003e524fa87e7a436d0a44d064e6e995c605136092c25bf4d269150ac53a8df082d6d0eb8055a2cdb3c5268334b666e061a4f70d83721773b980af4c3b301d81e345636dc80c13aec099c0485774", 0x88}, {&(0x7f0000001580)="c60dfdd7b7ec0e12146d89ed5b7d5d267830cd70d9d4aea4b2eb92da6248e90cf58edb61b92baf1f512467e041595d0f29f4ed0968e63bbd084b7c82b3dcf48dd3001b234d7cd1d583f31418edda3c2dbf79f87a15682e1f1e0edbdc61f0bf94dbec21eace6d4447def7edd3f7f1dfea78b7685dbd5a18b4b01e1e4b7cbd", 0x7e}, {&(0x7f0000001600)="f6e0feea7e1a2189e09cd93c98c3b8f0983fd82f271c1e8ed71e1e38c86e2b386f6c88e1435896f3f7dd4deb3d894a59fa13f73d7ff8064edb2f8e24d820c1b9789e5ccba7db0553c0b6fbd04d56542ee16d2500e1e8808d481268e0dfef0a85daacfdf835c81f63d863145cae2a4712407a0fba3df4750b159cc5c528", 0x7d}, {&(0x7f0000001680)="70a010ed755beadade15fd18", 0xc}], 0xa}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001780)="f0e8711bd6d52524656ec6586f2a7133ba53f40fb5975999", 0x18}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="b4dec4a4576f5015b4490f56b172debb5e20a3a7edbabf03", 0x18}, {&(0x7f0000002800)="c84ca09140588f9f794c56bdae757ac251137b4644a6fff6094af047cbd7e543db7524434b992b3bd58e09b15055fc80f785b4d410ae6508d4120864b4ac02a57ff911ec461f34068d9c0583d56554deb8bf8c03573839c232e08a1c8c7141967b0ef2b80bea64a4bb705d437b6864ac1fbfd77dfc953c21a4091c6013059f987e0394b5f881fa7525d637ff9ff524a3d46d57cb", 0x94}, {&(0x7f00000028c0)="beb7a31b20bdc4e91cf82508445551e8d3f3c772122d43e95493df6ef5a0dd25544193a7d315fc8f71ba4f80f2525cd2f2e8b9033e136f5c3bf9a7e45d69ee1887b62658f9abc1a7c114da942f924eeb211d05bda0beed731fcc3f242dcce28942bab5f634ab8bf35301", 0x6a}, {&(0x7f0000002940)="ce263530433e7825dc56a87fe86b3dd68d886f16eaa9244bfa38ff03e641b012ffa6f0b6509def2126a207c8b5668b4a355dcac5765183109f938e730fbfe0d90a18a4c03f77aa6e8510f97e8cb0207583121e1315d06e39dcfcafa0ba9ed762dab846e7dc", 0x65}, {&(0x7f00000029c0)="972bae1a7dc881f90840ed9f8c3dc3801361fd18f6999446770d128504fa4ee69398c0fda1446201ca9a1fde4206f6f0279af7592590aeffbb896f41c50412cbae0218cfea27f70e603866141b6c0043e6d62c89629f832fcb5b151370d90f46e7e5492edb20698e36860883099ccb96eada6453a1db23ebb435796b4db2a9d65839f9b5c1eaf0656db07c31cd95d728b8a2e318bd993a6ffc0d0edbf7c965e43e15648c7369bd3646281a53f5b12785bf87af858d44416e7930204eb9c779352b6c45cc080cf7f98ff910a85b25eb5510c0714ef304c7a4", 0xd8}, {&(0x7f0000002ac0)}], 0x8, &(0x7f0000002b80)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x87, 0x7, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0xb, 0x1d, "af57bf01b436e51c08daae5031cd3ff8af7c6e8a90a10bcc93347cc32e"}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x33, 0x9, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x3, [0x9, 0x7]}}, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0xfa, 0x5, [0xfff, 0x7fff, 0x493e]}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2c, 0xe, 0x2, 0x5e, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @hopopts={{0x130, 0x29, 0x36, {0x3b, 0x23, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x741}, @generic={0x0, 0xf9, "ef3bf41bc2a82d72a1aa5c91b8d67511c125f6d32e5aa79d3c8a487a1a2eae18c5a94384e03e8e173294878856db24141b4d24b83ca34d63e76cc16e5cff8a271f130472e78d2d0803cfe83d299c4184b78956ae5aa5426549e4c2f990ffed20ee669ab74423f11bec412a5dfaf315b1a68da76383f0b47e8578bd999d555e427ae4138c14caf01728b3bc3f12b77de98166c8061d334ef1146ebd7edc289a4e27b8caeb0b165c5fd7e843e664695f48f8c3dda9637ae5dd7f958dd78d82b36b73cebb0d841f0b9471a0fc300f3d344f31c4048368a3c96ef862d3ca60b83521348169b211411ad2d88e7e1d699fdcf9848fdc982a58177b5a"}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}], 0x278}}, {{&(0x7f0000002e00)={0xa, 0x4e22, 0x100, @remote, 0xa6b}, 0x1c, &(0x7f0000003280)=[{&(0x7f0000002e40)="56e0d6fd06891ee8195ff088ef449702a93bc5ace8c386417d4c279c9dd7c9872ea195634ea58af959638944af0d0b992d95dcc251b0b1acde9ab3f875d16f767c00098ce363bab9e2f69c7b63b23a5fd8ddd3a1eb24d876ff270b0638", 0x5d}, {&(0x7f0000002ec0)="eb564ccd17d9b74a6c764a49a972511abea37ae54c4f95f0454cb74edff73377f6c76ed671230c0730bd8807d269330d1c486cce0df5da46d73538769bb8682c6a1cc0aa92ff4d5cced3bf9e012652837572a3be248e126e0664f94d7bd13c3d929e9edd8985be1c88417c3382555c7331571f6c820856c171710246ee1efad5d1535b3fee188b7630da5fe4739234fc1e62b41b535f64a0310cdef12dd214a793c291caf5653c421be994912f5e2b9bb976d4070c6f5d85825bb5e263ba72", 0xbf}, {&(0x7f0000002f80)="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", 0xfe}, {&(0x7f0000003080)="8d3d2ea3dfef356cf6fc3592015cd7685f119eadfa6845499cb51023c2db3688d50f4fd3c76504224de76526f9b2c8e2d47fa7da7a02f968c1e07645cafaa90bbf6a20dd3e3e9f3e143bba0398006dffe0c5d64568cee01fa5225ed789eedcd7fbcd7c254f68f86a62faa2a68853b8ef512a211f4d43a9b0a816eb5e77036ac0d46ed2afbd8cfa5a7ce085968bf5a4b7c58f94a4e368ec95b28420769000a2952e8d768e13524e7b0022a4996a6dbbf45c48b2584f4339e158ba710af0b767a92279677a37e36d963019b58186149d7d413ee1180843", 0xd6}, {&(0x7f0000003180)="d10b7961ffd9624bc5ec93df2212773e001bd4873b2cb414", 0x18}, {&(0x7f00000031c0)="d897548b0ccf39ffd75343a15b55bd611f42c3d2d48db71188e58ef0589593ef1450f17c5b15f70a6355b81656", 0x2d}, {&(0x7f0000003200)="ddd5c72abc2eea0c41249052db3473f005d343f650", 0x15}, {&(0x7f0000003240)="babc4492d839bceaf663978b97", 0xd}], 0x8, &(0x7f0000003300)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffff024}}], 0x18}}, {{&(0x7f0000003340)={0xa, 0x4e23, 0x101, @remote, 0x4}, 0x1c, &(0x7f0000003540)=[{&(0x7f0000003380)="f1c1a9e91081007653a08a0663bed3ce0498be9cca0ec047a005d5908a053186bc4bc2c993b25e73b0f07d7ccf4a3edeeda607c979175e666f362a02de6dbd03adca885b827bfe38053c120e7c6275976d3563cfb75b4d07777e5d40b5736b24a872c11853fdd815fc9be168cccd529bed08396f2222f997bd203ccf76b5d029168d218f6cc8971179c2c9beace615964c25d17bcfd9af6b1017c99fc92af8a90499fccf5ce346aea0735448f782433719d6f72ac6a27a72ce0b1fa80cda241b0d7eb58d89ec68b612a2f30e40b4953714c7229a07a64b446441", 0xda}, {&(0x7f0000003480)="b0b17e8d13911dd0bd3195b5cee63576998081175bed46d1a6959606ea7fd660aff493001fb343b62cc937d0ae35c5904bdee262c6d0f9bcd8e70499a187f02d5d709cb1d81866774511bab062e54cd554ffda927bb5e3a7d2f1feb2c52b3880684aabddce", 0x65}, {&(0x7f0000003500)="e1e63f86145988d9675b99dba898", 0xe}], 0x3, &(0x7f0000003580)=[@dstopts_2292={{0x20, 0x29, 0x4, {0xf4, 0x0, '\x00', [@pad1, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r3}}}, @hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0xff, 0x17, '\x00', [@jumbo={0xc2, 0x4, 0x1000}, @generic={0xc, 0xb4, "45d18d09ca7d96e0b45b14d842cee63e46e6dd2a226dd9fd7e5843a220680e7b2e51a20fe2c8f0c2eb288d04c8df3ea0d070102e113c03f41fe9694f7feffff567895c9d47fe7f0e726ff18036e6f78713610076e1c404acaa56975058930191628ddc1fd1d2706e353efb44e9c2ab2bfbe9c283fde819b42e8912d4506da8a8454881f05dd395cd8aaaa97d89076be5815393d9d03cff0a4d81d79d3f0169f8be3b82e28a85424d5b8592a986814838972d6e9a"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r3}}}, @hopopts={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xa}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff8}}], 0x1d8}}], 0x6, 0x4040080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003900)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r5, &(0x7f0000003940)={0x8, 0x97, "aaa987ae15de89d21540666122a9c250263a5ad61c1984e9eecb37fa3b65a45e82b554dff397f08b9fe7b06bb779883ef70f4ff6f75f3ce7bda35cdd774b4fb89a0fd95809e6088e1bb8c532c59da068bbd253208b3699e5699ab723b158c592320a0c5005e0"}, 0x6e, 0x40, &(0x7f00000039c0)={0x22, 0x5, 0x10, 0x38, 0x2}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003a00)) (async) getsockname$l2tp6(r5, &(0x7f0000003a40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000003a80)=0x20) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003ac0), 0x2, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000003b00)={r8, r5}) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003b80), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000003e40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003e00)={&(0x7f0000003bc0)={0x20c, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x81, 0xa8, @random="17deb3faf348b425ebc306b3a90877ebf5193bcc8d38b299136c3781bcdf3d8421921403dffb5a95665635a637062f869c0502236566664ac8e9e45441777bfa6097b88ad5b993396a392fa07f0258f97ae271f6c59cd1b76beaf4fa41dc8509ef9eac705d2d792a035e6b6e0203894b3c7865d6657ee6c429f6adc35c"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd7, 0xa9, @random="c9c5f709ebc71c19f927621ca5b1d3d0770bb98e727b56c1521d21cc9b9bc78313d2e69ed89de30f7068112d9981ca9da21a841197530fa5b4fd40184cb04422d13759081b35ef575415f5b21da68b94c9f5b2b406359556a6788c5dc3702e91586ad12e73f86b9d7fd2a3b730aa88f6f3c4c63b40c17cdb8f071774bc126d6319411868580c6c4d27f02efd26b90630193f75e84ab0c7b393a152a97e3ee98687aafe65f7a49ed6434a22e7a6bea48b853533150cced85c792098a28dc641621284cf71c33c4e7006e12501bcca09ab509cb9"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) sendmsg$nl_route(r8, &(0x7f0000003f40)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)=@getaddr={0x14, 0x16, 0x2, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40003) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003fc0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000004200)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004000)={0x1a0, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x60}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x31}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}]}]}, @NL80211_ATTR_REG_RULES={0xa8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3137}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x94}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1cb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9cfb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf382}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4) (async) recvmmsg(r7, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004240)=""/30, 0x1e}, {&(0x7f0000004280)=""/193, 0xc1}, {&(0x7f0000004380)=""/58, 0x3a}], 0x3, &(0x7f0000004400)=""/203, 0xcb}, 0x2}], 0x1, 0x2001, &(0x7f0000004540)={0x77359400}) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004580)={0x0, 0xea60}, 0x10) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004600)={'veth0_macvtap\x00', &(0x7f00000045c0)=@ethtool_test={0x1a, 0x3e49, 0x9, 0x2, [0x10000, 0xffffffffffffff7b]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000004640), r5) 371.310048ms ago: executing program 0 (id=2895): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f425"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xf) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)={r3, 0x66, "1cfeefa474408e460fdaa48f71dc21513403f262e8e72bb82de33d12570092f10982fb9d7421f7f6f05939a9218ce74153d5f60c4640aedfa06e63a308a9cd030c80caf5e2100dca46cdd40674ba6cdb085ea3f69c66aa9633bc7d19f742f3fdc879d3a2d57b"}, &(0x7f0000000180)=0x6e) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0xfff9, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r4, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) socket$kcm(0x29, 0x2, 0x0) 278.812813ms ago: executing program 4 (id=2896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10, 0x11}}], 0x20}, 0x8000) (async) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10, 0x11}}], 0x20}, 0x8000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x8, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r8 = socket(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003b00000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r11, 0x0, 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r11, 0x0, 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@fallback, r10, 0x2e, 0x1c}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@fallback, r10, 0x2e, 0x1c}, 0x20) write(r8, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @private0, 0x1}}, 0xc7, 0x1, 0x2, 0x1, 0x8, 0x6, 0x2}, &(0x7f0000000180)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @private0, 0x1}}, 0xc7, 0x1, 0x2, 0x1, 0x8, 0x6, 0x2}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000540)={r12, @in={{0x2, 0x4e21, @private=0xa010101}}, [0x9, 0x4, 0xc597, 0x6, 0x7, 0x7, 0x3, 0x1ff, 0x81, 0x8000000000000001, 0x2, 0x9, 0x7, 0x3, 0x7f]}, &(0x7f0000000300)=0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de05640000000000006929a72cd24065"}, 0x3a) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000007000000300002"], 0x44}, 0x1, 0x0, 0x0, 0x8040001}, 0x0) 277.464642ms ago: executing program 3 (id=2897): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x24, 0x5, 0x800000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@deltclass={0xc7c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xb, 0x6}, {0x7, 0x4}}, [@tclass_kind_options=@c_htb={{0x8}, {0xc50, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x401}, @TCA_HTB_CTAB={0x404, 0x3, [0x738, 0xfffffffa, 0x9, 0xfe0b, 0x3016, 0x7, 0x100, 0x3, 0x1, 0x0, 0x981, 0x7, 0xb, 0x3, 0x4, 0x4, 0x40, 0x5, 0x8, 0x0, 0x6, 0x5, 0x9, 0x4, 0x7, 0x3, 0x4, 0x5, 0xd, 0x1, 0x400, 0x2, 0x1, 0x101, 0x4, 0x8, 0x1, 0x0, 0x7, 0x3bb, 0x4, 0x40, 0x2, 0x285, 0xa, 0x7, 0xf5f, 0x5a6, 0x2, 0x1, 0x6, 0x7, 0xfffffffd, 0x1, 0xbf17, 0x0, 0x2f, 0x5, 0x3e3, 0x7, 0x4, 0x4, 0x8, 0x5, 0x40, 0x55af, 0x5, 0x80, 0x2665, 0x6, 0x0, 0x18, 0x30db, 0x2, 0x7849, 0x80, 0xffff7fff, 0x9, 0x7, 0x6, 0x8, 0x57df, 0x9e6, 0xfffffff9, 0xd5, 0x8, 0x62b, 0xd74c49ac, 0x3, 0x4, 0xe, 0x2, 0x8, 0x9, 0x9a3, 0x1, 0x2, 0x3, 0x6, 0x9, 0x0, 0x3, 0xa1, 0x0, 0x4, 0xff, 0x6, 0x1, 0x7, 0x3, 0x81, 0x6, 0x9, 0x6, 0x7, 0x9, 0x7, 0x2, 0x1, 0x5454, 0x3, 0x3f5a0a2, 0x3, 0x3, 0x7, 0x7fffffff, 0x40, 0x4, 0xff, 0x7ff, 0xfffffffa, 0x836, 0x0, 0x0, 0xff, 0x3bcd, 0x2, 0x9, 0xe4c, 0x1, 0xfffffff8, 0x555, 0x300, 0x940b, 0x3, 0x2409, 0x4, 0x8000, 0xcf, 0x5, 0xf, 0x0, 0x0, 0x1, 0x8, 0x400, 0x2e66, 0xfffffffa, 0xa1, 0x5, 0x9, 0x8001, 0x9, 0x5, 0x9, 0x10000, 0x81, 0x10, 0x81, 0x2, 0x7, 0xffff8001, 0xffff254a, 0x1, 0x0, 0x4, 0xa, 0xbf, 0x4, 0x4, 0x58c9, 0x7f, 0x7, 0x6, 0x8, 0x88e, 0x4, 0x17, 0xd1, 0x5, 0x5, 0x401, 0x9, 0x5, 0x8, 0x2c, 0x5, 0xf, 0xea6, 0x9, 0x4, 0x5, 0x99, 0xd6, 0x2, 0x9, 0x6ba1, 0x1c, 0x3, 0x2, 0x360, 0xffffff80, 0x1, 0xb9, 0x0, 0x4, 0x7, 0x9, 0x80000001, 0xb3d, 0x3, 0x6, 0x1, 0xef4, 0x0, 0x1e8, 0xffffffff, 0x8, 0x71, 0x6, 0x1, 0x7, 0x6, 0x8, 0x2, 0x2, 0xbe, 0xfffffff8, 0xc, 0xfffffffc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x4, 0xfffffffc, 0x6, 0x0, 0xa, 0x6, 0x2, 0x5, 0x85, 0x200, 0x6]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xd, 0x1, 0x1, 0x4, 0x8, 0x800}, {0x5, 0x0, 0x9, 0x8000, 0x5, 0x94}, 0x101, 0x6, 0x4ffb, 0x7, 0x3ff}}, @TCA_HTB_CTAB={0x404, 0x3, [0x9, 0x1, 0x1, 0x2, 0x0, 0x1, 0xd074, 0x1, 0x8001, 0x2000, 0x2, 0x9, 0x7, 0x5, 0x0, 0x3, 0xfffffff5, 0x10001, 0x2, 0x2, 0x5, 0x5, 0x26da, 0x0, 0xdc, 0xaa, 0x7, 0x9, 0x5, 0x3, 0x4, 0xffff, 0xff, 0x1, 0x9, 0x3, 0x200, 0x9, 0x3, 0x1, 0xa, 0x3, 0x7, 0x8000, 0x6, 0x2, 0x6, 0x3, 0x10, 0x9, 0x85b, 0xffff0045, 0x1, 0x1b41, 0x9, 0x7ff, 0x7ff, 0x3, 0x2, 0x9, 0x9, 0x7, 0x0, 0x40, 0x7, 0x8, 0xb480, 0x6, 0x8, 0x5, 0x1, 0x2, 0x4, 0x5, 0x80000001, 0x8, 0xc, 0xa, 0x0, 0x8, 0x2, 0xeca, 0xee0e, 0x101, 0x5, 0x10001, 0x0, 0x6, 0x3, 0x302, 0x5, 0x9, 0x4, 0x4, 0xe, 0x1, 0xb, 0x6, 0x8, 0x4, 0x2, 0x6, 0x1, 0x7f, 0xb, 0x1, 0x7, 0xef, 0xfffffff4, 0x8000, 0x224c7ab4, 0x2b25, 0x51, 0x6, 0x5, 0x8, 0x2, 0x1, 0x9, 0x5, 0x56e5, 0x7, 0x2, 0x0, 0x9, 0x81, 0x3, 0x4, 0x180000, 0x5, 0x401, 0x6, 0x4, 0x7, 0x8000, 0x4, 0xfffff894, 0x5, 0x2, 0x0, 0xff, 0x1, 0x9, 0x8, 0x282, 0x0, 0x1, 0x4, 0x1, 0x1, 0xfffffff3, 0x2, 0x0, 0x90000, 0x24674129, 0x4, 0x1f8, 0xdfe, 0x7fff, 0x7, 0x2, 0x1, 0xfd6e, 0x9, 0x1, 0x8001, 0xfffff6cd, 0x5, 0x5, 0x7, 0x47f8, 0x2, 0xfffff8fb, 0x0, 0x7, 0x7d6e, 0x3, 0x0, 0x7fff, 0xa1e, 0xda7, 0x4, 0x5f, 0x100, 0x3, 0x7, 0xe999, 0x6be, 0x0, 0xe, 0x68ca23a4, 0x7, 0x3, 0x7, 0x0, 0x80000000, 0x5, 0x4, 0x4c9, 0x4, 0x2, 0xffff7fff, 0x0, 0x7f, 0x0, 0x9, 0x8000, 0xfffffff9, 0x3, 0x0, 0xe30, 0x5, 0x9, 0x9b3, 0x1ff, 0x7, 0x4, 0x1ff, 0xfc9, 0x3, 0xff, 0xf, 0x0, 0x47, 0x3, 0x9, 0x0, 0x9, 0x5, 0x100, 0xf, 0x1ff, 0x401, 0x8, 0x2, 0x9, 0x1, 0x9f, 0x9, 0x2, 0x6, 0x42d, 0x8, 0x13300000, 0x8, 0x100, 0xaa4f, 0x21, 0x200, 0x2, 0x3, 0x1, 0x401, 0x1, 0x5, 0x5]}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0x6, 0x4, 0xffffffde, 0x4, 0x2, 0x2, 0xfff, 0x4, 0x3, 0x1, 0x7f, 0x8001, 0x7, 0x0, 0x10, 0x5, 0xa5, 0x8001, 0x7, 0x4, 0xe, 0x8, 0xffff, 0x80, 0x9, 0x5, 0x3de, 0x5, 0x42b, 0x959, 0x1, 0x2, 0x5c1f, 0x0, 0x8, 0x3c, 0x7fffffff, 0x8, 0x3ff, 0x10, 0x2, 0x3, 0x1, 0x2, 0x189bec37, 0x4, 0x7, 0x4, 0x4, 0x1, 0x1, 0x5, 0xfffffff9, 0x74c, 0x7f, 0x7, 0x6, 0x1, 0x1, 0x23, 0x7, 0x3, 0x9, 0x0, 0x4, 0xffff, 0xf, 0x7, 0xfffffffb, 0xa, 0x7, 0x98, 0x7, 0x7, 0x3, 0x7, 0xe48, 0x4, 0x2, 0x0, 0x7, 0x5, 0x2, 0x5, 0x200, 0xdaf1, 0x9, 0x3ff, 0x9, 0xb, 0x3a93, 0x2, 0x6, 0x8, 0x1000003, 0xff, 0x60, 0x7, 0xfff, 0x8, 0x0, 0x0, 0x41, 0x8, 0x8, 0x7, 0x7, 0x3, 0xc0cc, 0x0, 0xf5c8, 0xc, 0x4, 0x1cf7, 0x6, 0x6, 0x8, 0x2, 0x8, 0x8, 0x36, 0x1, 0x1, 0x8, 0x4, 0xd00000, 0x5, 0x0, 0x5, 0x1, 0x5, 0x9, 0x2, 0xfffffffd, 0x0, 0x18, 0x6, 0x9, 0x71, 0x9, 0x70, 0xffff, 0x2, 0x3, 0x2, 0x3, 0x9, 0x7, 0xffffff81, 0x800, 0x7f, 0x7, 0x2, 0xa, 0x3987, 0x6, 0x3c096321, 0x5, 0x9, 0x2, 0xfffff762, 0x6, 0x38, 0x6, 0x0, 0x400, 0xff, 0x3, 0x4, 0x40, 0x5b1b, 0xfffffffe, 0x400000, 0x6, 0x6, 0x7, 0x800, 0x4, 0x5, 0x8, 0x4, 0x2, 0xff, 0x3ff, 0xfffffff8, 0x1000, 0x5, 0xffff, 0x0, 0x3, 0xa, 0x4, 0x8d5, 0x7, 0x5a, 0x1f685b5a, 0x1, 0x8001, 0x0, 0x2, 0xaa77, 0xb, 0x0, 0xff, 0x8001, 0x0, 0x3, 0x0, 0x80005, 0xffff, 0x6, 0x3, 0x4, 0x4, 0x8001, 0x6, 0x5, 0xfff, 0x1ff, 0x1000, 0x5, 0x20000, 0x8001, 0x9, 0xffffffff, 0x6, 0x101, 0x7, 0x4, 0xe69, 0xe, 0x8, 0x3, 0x0, 0x3ff, 0x2e, 0x3, 0x0, 0x1, 0x9, 0x6, 0x4f23, 0x800, 0x7, 0x80, 0x7d1c9db, 0x1, 0x1, 0x0, 0x706e, 0x8, 0xf, 0x7ff, 0x2, 0x1000]}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0xc7c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000634eee32714540f6f646e1fd5f747b7d8df5980e334eb958fbdeff8c359dfa0b39456d89b1018dd42335139a11f96405a7c6e1b359ef79", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000180)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r11}, 0x10) close(r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010028fd", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) 249.30308ms ago: executing program 0 (id=2898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000d7ddee778585c514ccac10aff7a76b44234f60f277286d816afbd1e58fea8b207030aaf97e953f76a8adcd7e5cdb3071acc551a503bdfa41f18315a041df282727f379872ae7f43c5f73623e8240161e62adecef48365279aec3469e10a84b72ec99acd39e50b10a1b8cf017b231a38b9ea3f2fba582ea71f6faef6c8751350ea4d3389bd0b11815fd456bd146d4b6399ae33a971db621bd2cec6148be06818ea6f4362f924a23e918f7", @ANYRES16=r1, @ANYBLOB="21032cbd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback={0x300, 0xffff888101827518}, 0x8000, 0x7, 0xffffffff}}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}, {&(0x7f0000001e80)={0x1578, 0x40, 0xf33, 0x70bd29, 0x25dfdbfd, "", [@generic="4243d52258b5093fc4693183e91375c74c9550fc052449d5e0a22fe66564978f2868b97b10c7701cf1e368a82b4623c501255c6b8e92b3cef38240162b36f4748051186af355fa4bd6dc6e86c20d4cdb1eda108c7c361d45413a2b47398b8909a1c48ae1e67d7c12acc43ec5edc0f577ef15192b0d8a5662b824f0c30a8a2700b902ba591ff6823b53b0291161250c5ce2ea8236197cbd9860ec9fc0ff9eadbe2794a0929fe3774a889fe4904e62282008d1a5733e89d619f201eeca5cdd08da840a5576b720202f89474e996f6b3fea7240ccb3d0d4a344d1a086bf5fd5a5a125e6bfbdf2a31fda1bca3449165489540387cdcb354c532e3ed28141333d551f7e32bcaf32fe8a0ed4215a71f8ede14cdffb07c8add0e5daf1ccf209e9ffb89772502c60fdfc76c80fab06c92276453f55fc8fc5d83ac7c66d36ec8b248744867292ee3988e4e1f601acb8c030afd20e024b5932a0d149fdf06f5da5dbf2c1908c478f6c34768d25bed7d21f092f3e3fd2d40ad1bd3229308194bf8394cdfd5a0fa8087673cf9724bf94ad3a3c20d94fbbd554e3eafe1befcdfd4809d3541d334d3f5287bff2949583ee84bd8a0b5a52853a435f8b5ac432a09be1dc60f6c0a91586cfcda75bd3e82cc9d341a054b5c9e8b3720deb8dd21da46c4d7066fbf14a4b4ae88ba29f35194b9911b9ca561cace95cb30fd385bb455db372e575b0708cce2dcd74ce2276193dbb8de408e300f684d27e0df34f41814af684b4446f72f9ffa60ba27fdd1cf90141489c50a47f52f4aeccff3dca46575c68fb925d9015a1565c1243f07c63ee1942d1ffd28d4f22c4afd0db7dd5262d43620d38c90b201452d76eb1e7aa110e6621f246b951b90e25dd4494917d4b6dc8edbe3884a1be66a88b501a992d4e1b13e93deac9b893fe7f6b149609269e8aa700aad871309559a0d3404838e449f2cc3b840a1720303c0e5ecccebddd37d6cfae35bd491314fc160f1c29dc076d70f7de61ce9d556eb0be2eb2dd57fdbd8c0d1c8cddcbc8546ecca20d92036ec825cecd7eaf957258d434cd81020860389605eb591157781544418aef53f24bcf44e44244c0489dd1785d73a00bfda53c691b2c86eac110bd8401d949352d137ecbc99890f41f845ae539cb5adc772222ee998701a872f546a439b46bbfa35da4612190b111e6e6e519282327489044aba1c09b84043c28adcd55815e03d907e4fb4e9dd30625aa58000f5a9f1b82cd8402da582adc4672e92b5e523d419007465a18ceb7e0aec9e013623751285561f4bb51ff7562710e3e05906ea59d7bea1ca03760c0db88433f97a5fa06e11a81e23a612ae160fdd8b0bc849dca01444b02f6aea2ce3fec8853e6d121e1da5b0638ef05b662f59c9ab07d58c7a525adef227d20ba57c8fea41810442186f8911e5e962317d65203b3a6a614865540f49cf5bb848aa9e31cb1ca9a7e85e97aaeb67e70dfc51ea5b70946e6ff2d414767d18d6832ee6d273f76daa53873e735c3ff3022381609f6f011cea6302257fc7bac3c6d87ab41cbff8ea22f01ecc33f445ea20215937626c25772b346f597f56a065de85d4e7f8de83c1e32a0d38e51521b892ef1d352187597a457a61bfc1ff89fc6854423f57b80c5c5deda2a527b0cd75ea2c314601471c36a376f757a41a4b94f0efe23fe48f0c13003b4614a2372a2176002459889e6a958916f14abed8b2b8f495b54719ab2b6e7d69ac8325c7e8fb8cae36cda52e0abeefb72213c7a07a9214bd843a02cad2f9830e96d5dae4c4b7aca7dcb93c8f994feb9e48469bedcdb102bd2a822ee7233f0b404e055121e2c72c56aba47f2f630aee1aa9baec6821b27754e4094bbfb25b90514b10a9945255e9a85bfcc38ef93e5a7484506eaa38c25fef0b6c59e6848e50374b1255f5db4424158e0bd984414d3e4baf040b68b14a286445954bec393cfd027e600959ba6707815e338409da5c1200ce909bb65d0e653c782c8719cd07dde2300f774411b8d600d45cb6871c76afe9346eaf5d8b0388032742647fa56dc935b97bd0b854f5b10a983283b709e8f86841364242b569d66fed64bbd343fa968ec0e2f2dbb0f2e6aa28630b70c9be24528d70ac363c5ead1999b4d881bc0be5132c34992dcfc65734b4ea6113aec35299e8f0ad99869ebb22a3ea61b0c382ba4b3ea65833fbf157255b3081fc622f07451cfe2995d2022206838f9347a49177f038b750accba0a2c2bb1363055aba211ccb9d7b88868a27f55dc88cbdd08a32ac8ce3d980902234915c608c8520feefa8ac9f21afc526fc7cb01c3d94a0eae5269a36bee6c0a84824c63ff0bc80a7acffd682e6767280fa267830a78b7774bfa94f31fcdbb95f31e69d078b8836b76ad017bfd73207d88140c4e11caf713f76beb56862e537ab34e14a89be99e6d0a2388f38d2812e338b85e291010788fd02f591265b63fb5858f3950eec155d8974f83e92d28cc8195738d9802b17cd17abc707b52169ac267ade6faafbe4c86f82ec6ad05ee4b2b0a63964a9696d26befe98ae8b27c7bb0c9eef7c3c78dc564c99ab95ed8f1afcf0971c7c64dbad5aef88a3d842b602916eb068d428bd9e0694489a13f067db4ee06e36fcbdde460eedc8c7f2a6723030332204ae8a5815fdcc188af328c1a731a2df5f138b57afc42c3f2dbdfdb10466e18d98113f4b90af8ef59ed186aee0a937fd3c2e01efb3081108e810801738dc5c3946233bbfa0b9d1e94409addc259e194e3d52e6ee000696fea5f26da5a2763bfe1f4c9e755dfcaf7b15c2b0c1143f601f7a768675f7d6e3d3109898828cf825b4d9c976aadb53aafdc1963ceca8726084c1101c28b91d3b6ba507a5d6f4359e2a3b859007378e7d00d025a712bc7d3429a220c41aa15291953c684b88b3da63cb4e6be85073461f173fdee0dddd31816c7c54381fccd6eccb5a9e88c9301dd3aabf8f77e5a56b8f4216247478e2514e785a1dacba69a9fba774dead1e2791961513115dd17d095177a1b8903008defb55d5ef104b1b98b81747215b6ccda888c82a8f9577c9dedb615c1bd793931698f81127a486f032278f3e4622236a815c0ab84f91174a7d393dc4858c089db2f441870eaff9902afc8e7627d32e6c47d2aaaaaddf7c1efee63f9b35140d6ad962a8be2b7a331648d1c6054c81a791bc7784d5aa7732f6af73e3b9937f1f051de25c3d0a70f2225013443cf383089607b45711c89b945f70780b7354dee7dedcc6deef2ca23f7866f53bb638989c5a57b215743bdf6e017204ca24653adca6e765f9addf6cefe9604914a8562a54c9259a85017b304d6d464be4f9ed71159159650c743faa9fb2bd074649db55ee1508dc2cd7f5199182d92cd812452d81d0e847df79bc8acb082bf7fa163ce067eb056dead20267ec91583253ad34a06659ce3f95349f6b42d2a9677f399ed1da24f1d701cc49d5428d848ab1932eadfd725aef8307761dd716283601207af7cc48d0e4f8f00166b5e76c4377719ef98a600f2721ce25f58f403b3e13ed88f628745c570ab9fd671ad2954e60978beb6250d9b9a3a2e79a2a4b17a85bf439aab7eb5147287f78ca21bbf449574deadfb8a6bf45e1aa08b6abaae66f2dfde10a715e0adad62b7d91f02c17e21b0e7709accbba772c9bfab1d734f5451562bcf7c7c4dcac4fc3248a4843846e1abae532d2c739aa5b952da3f95a98b1e0fcafc4755b2f73a0920436d21e2fbdd77bf0ee026b49328e4dac1fbaf4246e69406dddd16c44a3964b521cfe11273327c9070acda97c71ea3f0a1224b38e139cf235fde0743d68ff24bc8500ae51eb8da3be07b43b737a212f68f44eec793bff80404cd59f186002a465579ad077afe7b9c0ab009b4436bae8004c724eaf738aa8ccfbc722e8d741a1539dbf5e1bac8a3fb51c894f1d4478326e74575d0a247cb6c9bf55f3acd461f3440ee49774456ce17042487aefa2ce371f626a5ca872bf8f21094c007959f09f8984c5aa9115fa5311ee754ac0b38901a5b0a8390dedf757802eab69433f5cd7033db876a8e90eb8e1cbfcd5a728d95a4426aca856c89b1e3dedd8da7b80cc1430b1f369d2a42545cb879352220e62cd4443bf49135b7410049d386a1d6ea6ba2d0a213cf8ee92ce7b3a84b8d23e5175b831f66e6a3beb8df36bd3f333f173557f478f6aff631d8a634b9f39e949ed2ecf4c37bda5a8355909ac1ccd1790522638fa871819515e44add21dcdd6e7d9bf3f205fb6c861c614aa289615f92f08cd4fecedca80f310cf49334595628e1be10ca66068b59ae619019f418b161f10b207a101ebe7bbb79b64b731a0d33febe8011b251ccd7575d7d93c8b295fe892df9dc559c6902ff44e88ab694b27ab18169508c4f0d8a50383494a62d1a1cb7d8678c0934d777e757342f27f7522e6e244713d88c01f04dd386399b75e1cdf98422465d290e1be1675edf69488206d2ac4cadc6ce9c8f0a206504ce5ae2cf839e06f347fc73b3e69eb19b168f2d149faa16c044f26821e514fb632ff5155120185fff0758acc74e6c0b0c6330dad8f9690f968a2281ce06fbd4ee8a6bebd89dbf165a16a677b8d1426470c0765ff95de0e45f3feab867291cc228f3e62717d232bdc2d4176f9f02acd2f67d21287d35e12ef64a06bee1df546cd39b7730e51a2c8661d44c244433e9420c5cab505473e79b6469d8b27d74c07e84a564a00d5e4413f9bfb9cbca53f3682e9d7cf501ac0932c1013f93a2ac8c14a5fde5222795c7bb45456d0ad62e4b89fd28970162a0ddbfad01d9d71f4353f32a8e62c5994da264355c50d158bf65d8abc0496f0eb06a7b48eb28b13a14d378f2a070de2110ca4599076fe0fb353c3f4c597a661b609df91077d7da52285ea09b52aac223e110ddf147ae80f80d7331bb308a68a3e7c45ac9ca8dc43678324be9990ae8e69a3c752fcc274dc42362b44d23ac8cd2057103514fa8dc2ef9d28c38f7624c496400b087730e79a19411cf6a7381090c2e2eb6dd28babb2d57e1e29035b06040b38cd5a6edfafdefb9868925c6390bceb707214adcafa6a799c38404d82d245677d77743d6eb6dc762bf9da06083d31ea9513718f52c3fe72c9e96f28ffc0fe58e8108009da94fc5aea11f48fe530e03e6a592224cd1c7b838be647e16d9f9f26dc058cfcbbf559398f99f66459b95c357ceb41786292828b63df9a15d5647f83caa47d1e5542ab17efd5e2f8752eb90a27a1bd1e915fa303369d0e67974971df3c72a03454f4fc2aa5d8dc893a4d830472923b67e499fcecc93adcc3012576128090bb7f3d8a9a59ed712b4321b11bb93e7e93cfd69b757e5886783a8067c0f700b654a4ec25bc2cdab6ea2c72576ecf37bc0f479db2f5eb69074ff6089d32a248d2dbe35d5810a9a63ee45c00f8959aac32360c96fc903eb8d741391b212a98ece6238f1546778eafd34447a372682365b37b62e8f5397e324e79186879aa65167130b3064cb4293ff941313b87a44c6bc7852065c8b2e191a74bac02e3929306d07666e7016faa27acbc12a662e6cda0825c1a87d3dc953177d45cbe6a9f3086ac873d051f47b1c1e6b961e5257f4026e6b491079f6d73d93a25b15aa7a80585ec0613ff3ec287cbd67f87d7bd637fab3752bdc1c6e92169d881c2a583d26d3ac5e80064fa15e33a43f6d169f2107cca452f6dfa412be7916c9b225103d2286d880f1abde65ec9325d5c1fd0e21dcad6a1cdd22291484216e46c04c894858fcd16d08a3f9d33cd2e7", @typed={0x8, 0x36, 0x0, 0x0, @u32=0x4}, @generic="f6249620f2ef881633ec66a0db97bf1d84181b911fb2e0cd83604a76362ca7c7818b83e6e2aac5a730e7a9b38f5b129094c8d407443cc6ec9123247690cac474f82ed19c63654d044c44b4a2403bf4ccfdf03152b7e3161418afbe267fa3ef4fbca544524bfbac1545a088f0b7dec89e0453444083bd9f1038211ab310fa932d38e5750b6e09f3603ea5785ddba0af24ad6026ea800c3306ab24e7e13c7dd1766e43f8528340eb31af", @generic="04cdb7bf1c94f587c3e4aa2e78579b2c459cc35d985db21475374b0a5691bbd746510510a1e09da1a96a07a60e9855630b4f35952b15a4d76d622d72ecbee2ae36da6425ba90812087ec5143c8a0d07fb47bb8e02a55c3fa3649d0f5a0a9d14f9a7fa36265890b7f5cf0593f6d1975cd23849d3b2df42381dc6e743c8f500cb819fd511db3750744db5c86f506e7771eb3efe4e5bab95502c67a1147f62b8712bc50d94ecea2f1f4fd2cd5160738d229b6d1ed07768b", @generic="a9387d8c03adf36bf9db16d2f2017b097a8a00ad29c56f813d65624455bb584cb4226b53cc21aec723b20d72ffa2ed5e75657e8f58c0ed189ccfe84ddecd2d51ee7d49004e9fb2a266e3ffe3494c1d142bbe29fa021e0afbcfb361b325ffbdfb94359eaa957607c363ef1b529bcc1d5d86b042e193245d325cfb7f90f93e5d03e85df3ce8b56bd5c89ca", @nested={0x374, 0xc4, 0x0, 0x1, [@nested={0x4, 0x57}, @generic="afbfd30b1e34fb4eb91de3f8249885789ea39acbdab87aac3968a92b934847417fc3cd42f53edfb8dbed665cc99acc05e39067190fbeeac6e45e8332d44078efd39e21495fea2fa5904fcc0a3f0644ad77afb419e5689bbb1851dda342c9bef4770d8da0e4d0c7d2a42a232c1e8d9b8e3d16e017d9c701cdd481537117ab5d8fd584f285aa9126fd6c698d0a17c06be684aa379df6e77e85f5b400f857f560b5", @typed={0x4, 0x14f}, @generic="85eb628c7107cebe2b013e4a8f2193bf18db5f405eff9789c0b0bf537965879a76b046744c7e565932d8cfc2c33cb8119fa937acfa12741d423411d49a0dfad07264c2e4e4854209036dd9aec075ef711f911ddf466a76bbded77ae31f12c15da155d9e326ce21bbe756dc54cb93cef92a185dff9412a1b38e7743b1798b98ab3b439c0553ab7ab1c244fa00280c69cdd97e308510670395f8bf751e5591b5a0a5279b9718c14104ca83f3d6e8c36db8b5f765837b9aa46ec0c448860156912701c7a63a2750e6efe75af100fee280a9e0b6e4be6a36ef0917b56c923a2dff3950", @typed={0x8, 0x102, 0x0, 0x0, @uid=r4}, @generic="07ec07d131c1228d0bf678addd578165499ac4b7bfd4bcb2cca28c728348a25ff52ddd8b412bf7d0ce609ec21efa0257833e7c1de26763a46ef6ca0814c61484ab543d705f597ee31fd43dc4b022783bfc325db11c664313fa4dbba6060cea9093e1713075d2a999b440acc327a25f748f44af7988b2801a237aa65a97df1689000253da664d2d38993228c181ea956db0d11614e0589812bb2e49e58f99a6b2e01831a78793a6a3a512a3c1ee2d8ff374144e26b20e704fb2379d06f83be17310aab4630327a3b404b08cce7547a748099dcecacd87aee435ade77ff058b6680ef91e2de3829ce28d7718197531c29c", @generic="e4d37435ff1194f9e9664ac145ebee9bcc7b4f03b867f5fe7f01d89acd2363e787622bff8090f4546b7c68ad3ec1d364d184e59dd5b61521287886a50c2a56607ed7cf67d7715c9c9264193e12434e595605d961799584e5aebc2d86af866ce41ef54bbb0b5526a3fcefb261c3ca1ec51dc9f8c58471f9e54567b7cb3d09f9680ca625191de6339606f500712238ccfdc11932ea2d1436eec39dccf1ea230dfc234cca10111c1e7431c4efc3432d26c187347276775825a504c467138ad2f3d98e49dd6c8ac973335ea9450ae3be08e24850ca6b70e4c5d851946f7e93ec9c425f9f46c3a907af2a3e91ba", @nested={0x4, 0x23}]}]}, 0x1578}], 0x2}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r6, 0x1, 0x33, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@dev, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r7, 0x2f, 0x3, 0xb, 0xcd, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0xb5e, 0x80000000}}) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, @remote}]}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001600010028bd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t'], 0x20}}, 0x24048850) 180.206956ms ago: executing program 2 (id=2899): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) 91.009847ms ago: executing program 4 (id=2900): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}) sendmmsg$inet(r0, &(0x7f0000004a40)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x1, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 87.900302ms ago: executing program 0 (id=2901): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0x118, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x4e20, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x6c, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private2, @in6=@local, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180100001000130429bd70000000000000000000000000000000000057000040fc010000000000000000007f9f379e23eee9d6890000000000000000004e230000000000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ff010000000000000000000000000001ff03000000000000feffffffffffffff000000000000000000000000000000000300000000000000000008000000000081000000000000000000000000000000070000000000000005000000000000000000000000000000060000040000000000000001f9ffffff2000080000000000013500000a00048168000000000000000c000f0004000000000000001c00040003004e244e210000ffffffff00"/208], 0x118}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r4, 0x201, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4002000}, 0x4c000) socket$nl_route(0x10, 0x3, 0x0) 634.922µs ago: executing program 2 (id=2902): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 0s ago: executing program 3 (id=2903): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040bdf144ba"], 0x3c}}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x4) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}}, 0x40000d4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x5d7, 0x200, 0x8, 0x1000, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={r7, 0x7, 0x2, [0x0, 0x0]}, 0xc) kernel console output (not intermixed with test programs): check. [ 472.832419][T11919] openvswitch: netlink: Duplicate key (type 21). [ 472.916679][ T24] lo speed is unknown, defaulting to 1000 [ 472.932725][ T24] syz2: Port: 1 Link ACTIVE [ 473.293296][T11948] x_tables: ip_tables: osf match: only valid for protocol 6 [ 473.360548][T11956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.384579][T11953] __nla_validate_parse: 9 callbacks suppressed [ 473.384599][T11953] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1494'. [ 473.880211][T11989] tipc: Resetting bearer [ 473.892877][T11989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.005652][T11992] netlink: 'syz.4.1506': attribute type 13 has an invalid length. [ 474.037332][T11991] netlink: 'syz.4.1506': attribute type 13 has an invalid length. [ 474.060769][T11992] netlink: 'syz.4.1506': attribute type 17 has an invalid length. [ 474.074104][ T30] audit: type=1107 audit(1763780296.686:9): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¹ðmæ Ï_› iUžÑbEåVFšÐ‰„¦4Oj£‚JÃrðR>úS܃œ4w–ê ³×t'q‘̵†Š'ƒ?àO—¤¦Ö' [ 474.079978][T11991] netlink: 'syz.4.1506': attribute type 17 has an invalid length. [ 474.114431][T11997] vlan2: entered promiscuous mode [ 474.179168][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1507'. [ 474.454235][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.473774][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.492152][T11992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.516998][T11991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.628452][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 474.805193][T12022] lo speed is unknown, defaulting to 1000 [ 475.004135][T12038] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 475.071623][T12038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.074194][T12041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.090638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.116877][T12038] bond5: (slave ip6erspan0): making interface the new active one [ 475.143780][T12038] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 475.312778][T12047] syzkaller0: entered promiscuous mode [ 475.318749][T12047] syzkaller0: entered allmulticast mode [ 475.329838][ T30] audit: type=1800 audit(1763780297.936:10): pid=12052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1522" name="memory.events" dev="tmpfs" ino=1569 res=0 errno=0 [ 475.429811][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'. [ 475.468084][T12054] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 475.488998][T12057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.497454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.516796][T12057] tipc: Enabled bearer , priority 0 [ 475.524446][T12057] syzkaller0: entered promiscuous mode [ 475.529960][T12057] syzkaller0: entered allmulticast mode [ 475.588324][T12056] tipc: Resetting bearer [ 475.625721][T12056] tipc: Disabling bearer [ 475.997237][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 476.041674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.050316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.347616][T12091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1535'. [ 476.347922][T12086] lo speed is unknown, defaulting to 1000 [ 476.440502][T12095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1535'. [ 476.538596][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1538'. [ 476.592146][T12102] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1538'. [ 476.728451][T12113] netlink: 'syz.2.1542': attribute type 10 has an invalid length. [ 476.737826][T12113] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 476.761675][T12115] netlink: 'syz.2.1542': attribute type 10 has an invalid length. [ 476.872862][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 477.360162][T12144] bridge3: entered allmulticast mode [ 477.550097][T12155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.635872][T12157] bridge0: port 3(gretap0) entered disabled state [ 478.013133][T12157] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 478.031813][T12157] ip6gre2: left promiscuous mode [ 478.036797][T12157] ip6gre2: left allmulticast mode [ 478.054571][T12157] bridge3: left allmulticast mode [ 478.064589][ T10] lo speed is unknown, defaulting to 1000 [ 478.075499][ T10] syz2: Port: 1 Link DOWN [ 478.082322][T12171] netlink: 'syz.3.1556': attribute type 12 has an invalid length. [ 478.501727][T12195] xt_hashlimit: size too large, truncated to 1048576 [ 478.756409][T12203] vlan0: entered promiscuous mode [ 478.772042][T12203] vlan0: entered allmulticast mode [ 478.784984][T12203] hsr_slave_1: entered allmulticast mode [ 479.332487][T12215] netlink: 'syz.3.1572': attribute type 96 has an invalid length. [ 479.341149][T12215] tipc: Enabling of bearer rejected, already enabled [ 479.354876][T12215] syzkaller0: entered promiscuous mode [ 479.391318][T12215] syzkaller0: entered allmulticast mode [ 479.403200][T12215] tipc: Resetting bearer [ 480.170544][T12256] netlink: 'syz.0.1580': attribute type 10 has an invalid length. [ 480.179405][T12256] veth1_vlan: entered allmulticast mode [ 480.186315][T12256] veth1_vlan: left promiscuous mode [ 480.192856][T12256] team0: Device veth1_vlan failed to register rx_handler [ 480.378414][T12266] __nla_validate_parse: 6 callbacks suppressed [ 480.378435][T12266] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1582'. [ 480.473162][T12267] lo speed is unknown, defaulting to 1000 [ 480.523108][T12272] delete_channel: no stack [ 481.307308][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'. [ 481.489120][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1590'. [ 481.573685][T12298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.586224][T12305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.596297][T12305] bond3: (slave bond0): Enslaving as an active interface with an up link [ 481.609605][T12298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1590'. [ 481.623949][T12309] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 481.791230][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 481.832764][T12321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.840034][T12321] IPv6: NLM_F_CREATE should be set when creating new route [ 481.864102][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1599'. [ 482.283147][T12338] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.366004][T12340] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.1602'. [ 482.513385][T12347] netlink: 'syz.2.1606': attribute type 4 has an invalid length. [ 482.799204][T12353] netlink: 'syz.0.1607': attribute type 1 has an invalid length. [ 482.846399][T12353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.001142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.020613][T12370] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 483.163460][T12370] bond7: (slave geneve3): making interface the new active one [ 483.193357][T12370] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 483.222164][ T9355] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.245327][ T9355] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.282204][ T9355] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.304924][ T9355] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.453081][T12383] lo speed is unknown, defaulting to 1000 [ 483.585534][T12395] netlink: 212232 bytes leftover after parsing attributes in process `syz.4.1615'. [ 483.608386][T12389] lo speed is unknown, defaulting to 1000 [ 484.597444][T12436] tipc: New replicast peer: 255.255.255.255 [ 484.620629][T12436] tipc: Enabled bearer , priority 10 [ 484.676580][T12436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'. [ 484.711198][T12436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'. [ 484.747172][T12442] netlink: 'syz.3.1627': attribute type 11 has an invalid length. [ 484.768177][T12442] netlink: 'syz.3.1627': attribute type 11 has an invalid length. [ 484.873381][T12436] netlink: 'syz.3.1627': attribute type 4 has an invalid length. [ 484.933099][T12436] bridge4: entered promiscuous mode [ 484.938363][T12436] bridge4: entered allmulticast mode [ 485.313297][T12466] can: request_module (can-proto-0) failed. [ 485.674195][T12493] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 485.760285][T12493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.829225][T12498] veth5: entered promiscuous mode [ 485.839273][T12498] bond0: (slave veth5): Enslaving as an active interface with an up link [ 485.856569][T12495] __nla_validate_parse: 3 callbacks suppressed [ 485.856587][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 486.014795][T12513] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1644'. [ 486.024100][T12513] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1644'. [ 486.033383][T12513] netlink: 'syz.1.1644': attribute type 6 has an invalid length. [ 486.042951][T12513] netlink: 'syz.1.1644': attribute type 5 has an invalid length. [ 486.050803][T12513] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1644'. [ 486.124601][T12518] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1644'. [ 486.156528][T12518] netlink: 'syz.1.1644': attribute type 4 has an invalid length. [ 486.200231][T12518] netlink: 'syz.1.1644': attribute type 4 has an invalid length. [ 486.291750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.377685][T12521] bond8: Removing last arp target with arp_interval on [ 486.481340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.731822][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.740803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.777945][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.786616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.795670][T12556] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1656'. [ 486.842003][T12556] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1656'. [ 486.965778][T12561] netlink: 'syz.3.1659': attribute type 3 has an invalid length. [ 486.985582][T12561] netlink: 'syz.3.1659': attribute type 3 has an invalid length. [ 487.081744][T12574] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 487.450916][T12589] bond0: option xmit_hash_policy: invalid value (9) [ 487.461363][T12591] tipc: Enabled bearer , priority 0 [ 487.527362][T12593] syzkaller0: entered promiscuous mode [ 487.533855][T12593] syzkaller0: entered allmulticast mode [ 487.587577][T12591] tipc: Resetting bearer [ 487.625783][T12591] tipc: Disabling bearer [ 487.648462][T12601] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 487.669006][T12601] netlink: 'syz.0.1669': attribute type 10 has an invalid length. [ 487.697946][T12601] bond0: (slave dummy0): Releasing backup interface [ 487.705289][T12601] dummy0: left promiscuous mode [ 487.714371][T12601] dummy0: entered promiscuous mode [ 487.722274][T12601] team0: Port device dummy0 added [ 487.778692][T12603] lo speed is unknown, defaulting to 1000 [ 487.916670][T12621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1673'. [ 488.543152][T12658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.572927][T12663] xt_ecn: cannot match TCP bits for non-tcp packets [ 488.752611][T12659] bridge0: entered promiscuous mode [ 488.795194][T12663] netlink: 'syz.1.1688': attribute type 2 has an invalid length. [ 488.831936][T12659] bridge0: left promiscuous mode [ 488.853361][T12683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1692'. [ 488.882839][T12659] Bluetooth: MGMT ver 1.23 [ 488.922329][T12686] lo speed is unknown, defaulting to 1000 [ 488.990311][T12683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1692'. [ 489.321503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.677791][T12716] netlink: 'syz.3.1698': attribute type 11 has an invalid length. [ 489.691265][T12716] netlink: 'syz.3.1698': attribute type 11 has an invalid length. [ 489.797814][T12714] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 489.896210][T12703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.354435][T12749] lo speed is unknown, defaulting to 1000 [ 490.625078][T12767] lo speed is unknown, defaulting to 1000 [ 490.662164][T12770] validate_nla: 2 callbacks suppressed [ 490.662182][T12770] netlink: 'syz.4.1716': attribute type 13 has an invalid length. [ 490.695959][T12770] netlink: 'syz.4.1716': attribute type 17 has an invalid length. [ 490.790012][T12770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.884250][T12778] bond9: entered promiscuous mode [ 490.889731][T12778] bond9: entered allmulticast mode [ 490.895693][T12778] 8021q: adding VLAN 0 to HW filter on device bond9 [ 490.960135][T12779] netlink: 'syz.4.1716': attribute type 7 has an invalid length. [ 490.973645][T12779] netlink: 'syz.4.1716': attribute type 8 has an invalid length. [ 491.018225][T12791] __nla_validate_parse: 5 callbacks suppressed [ 491.018244][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 491.034111][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1723'. [ 491.045801][T12777] lo speed is unknown, defaulting to 1000 [ 491.045926][T12783] netlink: 'syz.2.1719': attribute type 4 has an invalid length. [ 491.139093][T12783] netlink: 'syz.2.1719': attribute type 4 has an invalid length. [ 491.227792][ T24] lo speed is unknown, defaulting to 1000 [ 491.242834][ T24] syz2: Port: 1 Link ACTIVE [ 491.313062][T12800] tipc: Enabled bearer , priority 0 [ 491.457314][T12800] syzkaller0: entered promiscuous mode [ 491.466804][T12800] syzkaller0: entered allmulticast mode [ 491.509627][T12814] FAULT_INJECTION: forcing a failure. [ 491.509627][T12814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.527137][T12803] lo speed is unknown, defaulting to 1000 [ 491.551375][T12814] CPU: 0 UID: 0 PID: 12814 Comm: syz.3.1728 Not tainted syzkaller #0 PREEMPT(full) [ 491.551404][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.551420][T12814] Call Trace: [ 491.551428][T12814] [ 491.551436][T12814] dump_stack_lvl+0x189/0x250 [ 491.551469][T12814] ? __pfx____ratelimit+0x10/0x10 [ 491.551489][T12814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.551513][T12814] ? __pfx__printk+0x10/0x10 [ 491.551531][T12814] ? __might_fault+0xb0/0x130 [ 491.551568][T12814] should_fail_ex+0x414/0x560 [ 491.551601][T12814] _copy_from_user+0x2d/0xb0 [ 491.551627][T12814] __sys_bpf+0x1e3/0x860 [ 491.551649][T12814] ? __pfx___sys_bpf+0x10/0x10 [ 491.551683][T12814] ? ksys_write+0x22a/0x250 [ 491.551713][T12814] ? __pfx_ksys_write+0x10/0x10 [ 491.551741][T12814] __x64_sys_bpf+0x7c/0x90 [ 491.551769][T12814] do_syscall_64+0xfa/0xfa0 [ 491.551788][T12814] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.551807][T12814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.551825][T12814] ? clear_bhb_loop+0x60/0xb0 [ 491.551848][T12814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.551870][T12814] RIP: 0033:0x7fea8eb8f749 [ 491.551889][T12814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.551907][T12814] RSP: 002b:00007fea8fb01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.551928][T12814] RAX: ffffffffffffffda RBX: 00007fea8ede5fa0 RCX: 00007fea8eb8f749 [ 491.551943][T12814] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 491.551965][T12814] RBP: 00007fea8fb01090 R08: 0000000000000000 R09: 0000000000000000 [ 491.551979][T12814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.551991][T12814] R13: 00007fea8ede6038 R14: 00007fea8ede5fa0 R15: 00007ffdc343c2b8 [ 491.552025][T12814] [ 491.828369][T12818] bridge0: port 1(veth0_to_bridge) entered blocking state [ 491.853624][T12818] bridge0: port 1(veth0_to_bridge) entered disabled state [ 491.864406][T12818] veth0_to_bridge: entered allmulticast mode [ 491.874483][T12818] veth0_to_bridge: entered promiscuous mode [ 491.925562][T12799] tipc: Resetting bearer [ 491.976626][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 491.987642][T12799] tipc: Disabling bearer [ 491.996508][T12826] IPv6: Can't replace route, no match found [ 492.010121][T12830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 492.085657][ T5836] block nbd0: Receive control failed (result -32) [ 492.117039][T12830] xfrm0: entered promiscuous mode [ 492.154110][T12830] xfrm0: entered allmulticast mode [ 492.175500][T12838] FAULT_INJECTION: forcing a failure. [ 492.175500][T12838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.196096][T12838] CPU: 1 UID: 0 PID: 12838 Comm: syz.3.1734 Not tainted syzkaller #0 PREEMPT(full) [ 492.196132][T12838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.196144][T12838] Call Trace: [ 492.196151][T12838] [ 492.196159][T12838] dump_stack_lvl+0x189/0x250 [ 492.196190][T12838] ? __pfx____ratelimit+0x10/0x10 [ 492.196214][T12838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.196239][T12838] ? __pfx__printk+0x10/0x10 [ 492.196269][T12838] should_fail_ex+0x414/0x560 [ 492.196303][T12838] _copy_to_user+0x31/0xb0 [ 492.196328][T12838] simple_read_from_buffer+0xe1/0x170 [ 492.196362][T12838] proc_fail_nth_read+0x1b3/0x220 [ 492.196389][T12838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.196413][T12838] ? rw_verify_area+0x2a6/0x4d0 [ 492.196434][T12838] ? __lock_acquire+0xab9/0xd20 [ 492.196450][T12838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.196472][T12838] vfs_read+0x200/0xa30 [ 492.196497][T12838] ? fdget_pos+0x247/0x320 [ 492.196519][T12838] ? __pfx___mutex_lock+0x10/0x10 [ 492.196541][T12838] ? __pfx_vfs_read+0x10/0x10 [ 492.196568][T12838] ? __fget_files+0x2a/0x420 [ 492.196589][T12838] ? __fget_files+0x3a0/0x420 [ 492.196606][T12838] ? __fget_files+0x2a/0x420 [ 492.196633][T12838] ksys_read+0x145/0x250 [ 492.196663][T12838] ? __pfx_ksys_read+0x10/0x10 [ 492.196693][T12838] ? do_syscall_64+0xbe/0xfa0 [ 492.196717][T12838] do_syscall_64+0xfa/0xfa0 [ 492.196735][T12838] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.196754][T12838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.196773][T12838] ? clear_bhb_loop+0x60/0xb0 [ 492.196795][T12838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.196810][T12838] RIP: 0033:0x7fea8eb8e15c [ 492.196828][T12838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 492.196843][T12838] RSP: 002b:00007fea8fb01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.196861][T12838] RAX: ffffffffffffffda RBX: 00007fea8ede5fa0 RCX: 00007fea8eb8e15c [ 492.196875][T12838] RDX: 000000000000000f RSI: 00007fea8fb010a0 RDI: 0000000000000007 [ 492.196886][T12838] RBP: 00007fea8fb01090 R08: 0000000000000000 R09: 0000000000000000 [ 492.196897][T12838] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 492.196909][T12838] R13: 00007fea8ede6038 R14: 00007fea8ede5fa0 R15: 00007ffdc343c2b8 [ 492.196943][T12838] [ 492.609087][T12850] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 492.649747][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.935491][T12865] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 493.004057][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.012699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.041879][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.043158][T12870] netlink: 'syz.3.1745': attribute type 2 has an invalid length. [ 493.130840][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'. [ 493.139569][T12877] lo speed is unknown, defaulting to 1000 [ 493.146873][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'. [ 493.242464][T12870] : entered promiscuous mode [ 493.750027][T12906] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 493.883361][T12911] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 493.883807][T12881] net_ratelimit: 3 callbacks suppressed [ 493.883822][T12881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.895125][T12911] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 493.900044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.938933][T12906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'. [ 494.070231][T12906] bond3: (slave bridge6): Enslaving as an active interface with a down link [ 494.084023][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 494.114887][T12911] macvlan3: entered promiscuous mode [ 494.120354][T12911] macvlan3: entered allmulticast mode [ 494.127146][T12911] bond3: entered promiscuous mode [ 494.136918][T12911] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 494.147843][T12911] bond3: left promiscuous mode [ 494.324134][T12923] syzkaller1: entered promiscuous mode [ 494.329686][T12923] syzkaller1: entered allmulticast mode [ 494.372513][T12927] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 494.380130][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 494.516144][T12927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.537658][T12940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1760'. [ 494.607562][T12946] Cannot find del_set index 1 as target [ 494.734470][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 494.754955][T12952] lo speed is unknown, defaulting to 1000 [ 494.765804][T12953] lo speed is unknown, defaulting to 1000 [ 494.827788][T12961] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 495.064734][T12969] lo speed is unknown, defaulting to 1000 [ 495.879522][T13004] netlink: 'syz.2.1778': attribute type 11 has an invalid length. [ 496.334118][T13013] __nla_validate_parse: 5 callbacks suppressed [ 496.334137][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1779'. [ 496.386058][T13013] bond8 (unregistering): Released all slaves [ 496.418599][T13019] lo speed is unknown, defaulting to 1000 [ 496.826792][T13045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1787'. [ 496.927537][T13052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1787'. [ 497.200466][T13066] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1791'. [ 497.244904][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1792'. [ 497.348378][T13068] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 497.407917][T13080] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1795'. [ 497.525927][T13088] netlink: 'syz.4.1797': attribute type 3 has an invalid length. [ 497.571894][T13095] x_tables: ip_tables: osf match: only valid for protocol 6 [ 497.601517][ T5836] block nbd1: Receive control failed (result -32) [ 497.637822][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1798'. [ 497.674088][T13099] vlan2: entered allmulticast mode [ 497.679250][T13099] hsr0: entered allmulticast mode [ 497.703522][T13099] hsr_slave_0: entered allmulticast mode [ 497.709210][T13099] hsr_slave_1: entered allmulticast mode [ 497.805728][T13113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1801'. [ 497.943681][T13103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1801'. [ 498.065498][T13122] lo speed is unknown, defaulting to 1000 [ 498.089912][T13124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1802'. [ 498.149186][T13125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.315975][T13124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.322441][T13131] netlink: 'syz.3.1805': attribute type 13 has an invalid length. [ 498.347507][T13131] netlink: 'syz.3.1805': attribute type 17 has an invalid length. [ 498.359358][T13133] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 498.432363][T13131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.609187][T13141] lo speed is unknown, defaulting to 1000 [ 498.769540][T13130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.799241][T13169] pim6reg: entered allmulticast mode [ 498.822356][T13170] team0: entered allmulticast mode [ 498.829182][T13170] team_slave_0: entered allmulticast mode [ 498.835092][T13170] team_slave_1: entered allmulticast mode [ 498.842254][T13170] geneve0: entered allmulticast mode [ 498.847574][T13170] dummy0: entered allmulticast mode [ 498.861305][T13171] team0: left allmulticast mode [ 498.866534][T13171] team_slave_0: left allmulticast mode [ 498.872671][T13171] team_slave_1: left allmulticast mode [ 498.878263][T13171] geneve0: left allmulticast mode [ 498.883723][T13171] dummy0: left allmulticast mode [ 498.888903][T13171] pim6reg: left allmulticast mode [ 499.020149][T13174] lo speed is unknown, defaulting to 1000 [ 499.082152][T13182] netlink: 'syz.0.1819': attribute type 5 has an invalid length. [ 499.179731][T13187] sch_tbf: burst 1023 is lower than device lo mtu (1294) ! [ 499.463562][T13198] netlink: 'syz.1.1822': attribute type 6 has an invalid length. [ 499.480660][T13198] netlink: 'syz.1.1822': attribute type 5 has an invalid length. [ 499.641986][T13205] netlink: 'syz.1.1822': attribute type 4 has an invalid length. [ 499.710376][T13211] netlink: 'syz.1.1822': attribute type 4 has an invalid length. [ 499.899061][T13216] bridge_slave_1 (unregistering): left allmulticast mode [ 499.913069][T13216] bridge_slave_1 (unregistering): left promiscuous mode [ 499.920612][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.218864][T13227] tipc: Enabling of bearer rejected, already enabled [ 500.292944][T13234] tipc: Resetting bearer [ 500.399365][T13241] netlink: 'syz.0.1832': attribute type 3 has an invalid length. [ 500.472286][T13237] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 500.484535][T13237] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 500.597148][T13247] bond2: (slave bridge5): Enslaving as an active interface with a down link [ 500.622785][T13246] 8021q: adding VLAN 0 to HW filter on device bond11 [ 500.644165][T13249] 8021q: adding VLAN 0 to HW filter on device bond11 [ 500.651681][T13249] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 500.663565][T13249] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 500.694443][T13237] gretap1: entered promiscuous mode [ 500.701579][T13237] gretap1: entered allmulticast mode [ 500.709712][T13237] bond2: (slave gretap1): making interface the new active one [ 500.719746][T13237] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 500.791901][T13255] lo speed is unknown, defaulting to 1000 [ 501.018459][T13265] lo speed is unknown, defaulting to 1000 [ 501.403264][T13279] tipc: Resetting bearer [ 501.466651][T13283] __nla_validate_parse: 14 callbacks suppressed [ 501.466673][T13283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1841'. [ 501.506108][T13277] lo speed is unknown, defaulting to 1000 [ 501.584862][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 501.594246][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 501.659866][T13288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1842'. [ 501.718361][T13286] netlink: 996 bytes leftover after parsing attributes in process `syz.2.1843'. [ 501.829761][T13290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1842'. [ 502.481755][ T24] IPVS: starting estimator thread 0... [ 502.591227][T13327] IPVS: using max 25 ests per chain, 60000 per kthread [ 502.792553][T13318] lo speed is unknown, defaulting to 1000 [ 503.301152][T13351] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1859'. [ 503.415047][T13362] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1858'. [ 503.549612][T13362] lo speed is unknown, defaulting to 1000 [ 503.863784][T13372] wg1 speed is unknown, defaulting to 1000 [ 503.876010][T13374] batadv_slave_1: entered promiscuous mode [ 503.917125][T13372] wg1 speed is unknown, defaulting to 1000 [ 503.945647][T13372] wg1 speed is unknown, defaulting to 1000 [ 503.970102][T13372] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 504.002856][T13372] wg1 speed is unknown, defaulting to 1000 [ 504.014337][T13372] wg1 speed is unknown, defaulting to 1000 [ 504.020718][T13381] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1863'. [ 504.027566][T13372] wg1 speed is unknown, defaulting to 1000 [ 504.040618][T13372] wg1 speed is unknown, defaulting to 1000 [ 504.051788][T13372] wg1 speed is unknown, defaulting to 1000 [ 504.060130][T13372] wg1 speed is unknown, defaulting to 1000 [ 504.061610][T13381] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1863'. [ 504.076135][T13374] siw: device registration error -23 [ 504.108322][T13373] batadv_slave_1: left promiscuous mode [ 504.267657][T13394] ip6t_srh: unknown srh invflags 4000 [ 506.468562][T13399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.547145][T13417] lo speed is unknown, defaulting to 1000 [ 506.563181][T13417] wg1 speed is unknown, defaulting to 1000 [ 506.866488][T13451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.875238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.892060][T13445] tipc: Enabling of bearer rejected, failed to enable media [ 506.892124][T13451] __nla_validate_parse: 1 callbacks suppressed [ 506.892137][T13451] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1882'. [ 506.902246][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 506.964393][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1884'. [ 507.024749][T13463] validate_nla: 3 callbacks suppressed [ 507.024767][T13463] netlink: 'syz.4.1884': attribute type 10 has an invalid length. [ 507.286720][T13471] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 507.378640][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 507.454138][T13480] vlan2: entered promiscuous mode [ 507.584991][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 507.605462][T13486] netlink: 'syz.3.1893': attribute type 9 has an invalid length. [ 507.647608][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 507.710651][T13486] macvlan3: entered promiscuous mode [ 507.729183][T13486] hsr0: entered promiscuous mode [ 507.745753][T13499] netlink: 'syz.4.1894': attribute type 83 has an invalid length. [ 507.761258][T13486] macvlan3: entered allmulticast mode [ 507.776843][T13486] hsr0: entered allmulticast mode [ 507.803170][T13486] hsr_slave_0: entered allmulticast mode [ 507.833481][T13486] hsr_slave_1: entered allmulticast mode [ 507.869527][T13501] tipc: Enabled bearer , priority 0 [ 507.887664][T13503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1897'. [ 507.916962][T13494] tipc: Disabling bearer [ 507.936800][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1897'. [ 508.439903][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 509.045745][T13547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1912'. [ 509.057970][T13548] tipc: Enabling of bearer rejected, already enabled [ 509.857446][T13596] netlink: 'syz.2.1926': attribute type 2 has an invalid length. [ 509.882290][T13587] svc: failed to register nfsdv3 RPC service (errno 512). [ 509.890219][T13587] svc: failed to register nfsaclv3 RPC service (errno 512). [ 510.313010][T13609] xt_CT: No such helper "snmp_trap" [ 510.507486][T13627] ip6tnl0: Caught tx_queue_len zero misconfig [ 510.565331][T13630] tipc: Enabled bearer , priority 0 [ 510.582785][T13630] syzkaller0: entered promiscuous mode [ 510.588559][T13630] syzkaller0: entered allmulticast mode [ 510.793314][T13630] tipc: Resetting bearer [ 510.806359][T13650] netlink: 'syz.0.1940': attribute type 3 has an invalid length. [ 510.818358][T13652] lo: entered allmulticast mode [ 510.830643][T13629] tipc: Resetting bearer [ 510.881900][T13629] tipc: Disabling bearer [ 510.949081][T13652] lo: left allmulticast mode [ 510.971664][T13666] tunl0: Caught tx_queue_len zero misconfig [ 511.203880][T13686] tipc: Enabled bearer , priority 0 [ 511.237500][T13686] : renamed from syzkaller0 [ 511.274435][T13686] tipc: Disabling bearer [ 511.471639][T13696] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.491108][T13696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.549809][T13701] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 511.591529][T13705] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 511.609883][T13696] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 511.617250][T13696] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 511.677788][T13705] 8021q: adding VLAN 0 to HW filter on device bond12 [ 511.732277][T13708] bond12: (slave ip6gretap2): making interface the new active one [ 511.777793][T13708] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 511.831669][T13705] erspan0: entered allmulticast mode [ 511.865950][T13705] bond12: (slave erspan0): Enslaving as an active interface with an up link [ 511.868242][T13719] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 511.891068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.080843][T13729] netlink: 'syz.2.1962': attribute type 30 has an invalid length. [ 512.097802][T13733] __nla_validate_parse: 12 callbacks suppressed [ 512.097836][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 512.130216][T13733] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1963'. [ 512.278821][T13741] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 512.316027][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 512.439492][T13745] veth7: entered promiscuous mode [ 512.657645][T13763] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1968'. [ 512.671710][T13760] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1970'. [ 512.687830][T13760] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1970'. [ 512.704085][T13760] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1970'. [ 512.738730][T13766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'. [ 512.740635][T13760] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1970'. [ 512.758268][T13760] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1970'. [ 512.921031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.960338][T13775] pim6reg: entered allmulticast mode [ 512.967688][T13775] pim6reg: left allmulticast mode [ 513.092506][T13780] batadv1: entered promiscuous mode [ 513.223544][T13789] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 513.239420][T13790] netlink: 'syz.1.1978': attribute type 6 has an invalid length. [ 513.261282][T13790] netlink: 'syz.1.1978': attribute type 6 has an invalid length. [ 513.283831][T13791] lo speed is unknown, defaulting to 1000 [ 513.295644][T13791] wg1 speed is unknown, defaulting to 1000 [ 513.358769][T13798] netlink: 'syz.4.1980': attribute type 4 has an invalid length. [ 513.365666][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803186f800: rx timeout, send abort [ 513.375064][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803186f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 513.693002][T13813] Cannot find del_set index 1 as target [ 513.895852][T13816] lo speed is unknown, defaulting to 1000 [ 513.904396][T13816] wg1 speed is unknown, defaulting to 1000 [ 513.961040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.136403][T13842] lo speed is unknown, defaulting to 1000 [ 514.156224][T13842] wg1 speed is unknown, defaulting to 1000 [ 514.318728][T13850] tipc: Resetting bearer [ 514.413802][T13850] gtp0: entered promiscuous mode [ 514.415392][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.418913][T13850] gtp0: entered allmulticast mode [ 514.430799][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.465681][T13850] lo speed is unknown, defaulting to 1000 [ 514.473469][T13850] wg1 speed is unknown, defaulting to 1000 [ 514.506769][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.552608][T13859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.813289][T13850] tipc: Resetting bearer [ 514.907105][ T1348] tipc: Resetting bearer [ 514.920716][T13877] bond0: invalid ARP target 0.0.0.0 specified for addition [ 514.952030][T13877] bond0: option arp_ip_target: invalid value (0) [ 515.036937][T13883] tipc: Resetting bearer [ 515.055813][T13883] tipc: Enabling of bearer rejected, already enabled [ 515.236031][T13888] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.247857][T13888] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 515.316647][T13888] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.352092][T13888] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 515.418661][T13896] batadv_slave_0: entered promiscuous mode [ 515.474954][T13888] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.497249][T13888] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 515.550784][T13894] batadv_slave_0: left promiscuous mode [ 515.600677][T13888] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.610736][T13888] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 515.751638][ T9355] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.759857][ T9355] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 515.836615][ T60] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.858470][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 515.909317][ T60] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.922154][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 515.996382][ T9355] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.005252][ T9355] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 516.344289][T13934] tun0: tun_chr_ioctl cmd 1074025675 [ 516.359485][T13934] tun0: persist disabled [ 517.236186][T13977] lo speed is unknown, defaulting to 1000 [ 517.245682][T13977] wg1 speed is unknown, defaulting to 1000 [ 517.372009][T13980] __nla_validate_parse: 70 callbacks suppressed [ 517.372030][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2032'. [ 517.584351][T13987] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2034'. [ 517.594345][T13987] net_ratelimit: 6 callbacks suppressed [ 517.594364][T13987] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 517.771336][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2035'. [ 517.810205][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2035'. [ 518.252334][T14013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.268929][T14014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.310048][T14016] netlink: 'syz.0.2042': attribute type 7 has an invalid length. [ 518.572507][T14035] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2047'. [ 518.644128][T14039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.699576][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 518.747300][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 518.813309][T14052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.830080][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 518.839379][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 518.872436][T14054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2055'. [ 518.976524][T14058] lo: entered promiscuous mode [ 518.995104][T14058] tunl0: entered promiscuous mode [ 519.004618][T14058] gre0: entered promiscuous mode [ 519.015360][T14058] gretap0: entered promiscuous mode [ 519.022541][T14058] erspan0: entered promiscuous mode [ 519.027953][T14058] erspan0: left allmulticast mode [ 519.034064][T14058] ip_vti0: entered promiscuous mode [ 519.040864][T14058] ip6_vti0: entered promiscuous mode [ 519.047875][T14058] sit0: entered promiscuous mode [ 519.057658][T14058] ip6tnl0: entered promiscuous mode [ 519.065919][T14058] ip6gre0: entered promiscuous mode [ 519.074711][T14058] ip6gretap0: entered promiscuous mode [ 519.083030][T14058] vcan0: entered promiscuous mode [ 519.092101][T14058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.102927][T14058] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.112410][T14058] nlmon0: entered promiscuous mode [ 519.119304][T14058] caif0: entered promiscuous mode [ 519.124996][T14058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.800196][T14084] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 519.881531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.926990][T14086] x_tables: duplicate underflow at hook 1 [ 520.012045][T14091] bridge10: entered allmulticast mode [ 520.310773][T14100] tipc: Enabling of bearer rejected, already enabled [ 520.458261][T14106] lo speed is unknown, defaulting to 1000 [ 520.479627][T14106] wg1 speed is unknown, defaulting to 1000 [ 520.509902][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.533664][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.542520][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.552685][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.560850][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.571697][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.582411][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.592348][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.600663][T14109] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 520.921095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.958828][T14121] lo speed is unknown, defaulting to 1000 [ 521.965611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.988367][ T1166] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.047802][T14121] wg1 speed is unknown, defaulting to 1000 [ 522.052263][ T1166] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.211282][ T1166] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.229151][ T1166] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.313388][T14185] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 522.404144][T14189] __nla_validate_parse: 15 callbacks suppressed [ 522.404163][T14189] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2088'. [ 522.405312][T14191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2088'. [ 522.503866][T14191] bridge0: port 3(gretap0) entered disabled state [ 522.762103][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 522.796003][ T5879] lo speed is unknown, defaulting to 1000 [ 522.808782][ T5879] syz2: Port: 1 Link DOWN [ 522.965634][T14209] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig [ 523.112774][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 523.175085][T14239] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2097'. [ 523.241915][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2098'. [ 523.320896][T14249] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 523.339681][T14251] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2100'. [ 523.362890][T14249] bridge6: entered allmulticast mode [ 523.382093][T14251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2100'. [ 523.417974][T14244] vlan2: entered allmulticast mode [ 523.431538][T14244] bridge0: entered allmulticast mode [ 523.451583][T14244] bridge4: port 1(vlan2) entered blocking state [ 523.468898][T14244] bridge4: port 1(vlan2) entered disabled state [ 523.478644][T14244] vlan2: entered promiscuous mode [ 523.487219][T14244] bridge0: entered promiscuous mode [ 523.521656][T14244] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 523.535750][T14244] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 523.626984][T14263] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.637786][T14239] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2097'. [ 523.707862][T14263] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.710206][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 523.736813][T14272] validate_nla: 25 callbacks suppressed [ 523.736833][T14272] netlink: 'syz.4.2103': attribute type 39 has an invalid length. [ 523.813793][T14263] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.848859][T14276] netlink: 'syz.2.2107': attribute type 2 has an invalid length. [ 523.885061][T14276] : entered promiscuous mode [ 523.899165][T14263] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.042739][ T9358] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.071604][ T9358] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.107719][ T9358] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.140372][ T138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.280223][T14295] tipc: Resetting bearer [ 524.504399][T14293] tipc: Resetting bearer [ 524.823085][T14309] netlink: 'syz.4.2117': attribute type 8 has an invalid length. [ 524.861962][T14312] netlink: 'syz.1.2114': attribute type 11 has an invalid length. [ 524.892070][T14312] netlink: 'syz.1.2114': attribute type 11 has an invalid length. [ 524.925179][T14313] bridge7: entered promiscuous mode [ 525.029243][T14315] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 525.052411][T14315] syzkaller1: Refused to change device type [ 525.151688][T14320] netlink: 'syz.4.2120': attribute type 12 has an invalid length. [ 525.169475][T14317] lo speed is unknown, defaulting to 1000 [ 525.181679][T14317] wg1 speed is unknown, defaulting to 1000 [ 525.221578][ T9355] tipc: Resetting bearer [ 525.289294][T14325] netlink: 'syz.2.2123': attribute type 10 has an invalid length. [ 525.322207][T14300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.619036][T14344] syzkaller0: Caught tx_queue_len zero misconfig [ 525.688876][T14347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.763579][T14350] tipc: Resetting bearer [ 526.093187][T14358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.102486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.158578][T14366] xt_l2tp: invalid flags combination: 0 [ 526.183701][T14358] vlan3: entered promiscuous mode [ 526.189220][T14358] batadv0: entered promiscuous mode [ 526.326596][T14377] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 526.553148][T14389] syzkaller1: entered promiscuous mode [ 526.558709][T14389] syzkaller1: entered allmulticast mode [ 526.648138][T14396] bridge7: entered promiscuous mode [ 526.663020][T14396] bridge7: entered allmulticast mode [ 526.909041][T14404] lo speed is unknown, defaulting to 1000 [ 526.915745][T14406] netlink: 'syz.2.2150': attribute type 4 has an invalid length. [ 526.961730][T14404] wg1 speed is unknown, defaulting to 1000 [ 526.963883][T14408] lo speed is unknown, defaulting to 1000 [ 527.023984][T14408] wg1 speed is unknown, defaulting to 1000 [ 527.072753][T14414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.513948][T14431] __nla_validate_parse: 17 callbacks suppressed [ 527.513966][T14431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2156'. [ 527.534975][T14429] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2157'. [ 527.548456][T14429] netlink: 175 bytes leftover after parsing attributes in process `syz.2.2157'. [ 528.000514][T14449] netlink: 'syz.3.2161': attribute type 2 has an invalid length. [ 528.008649][T14449] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2161'. [ 528.029266][T14452] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 528.086111][T14452] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 528.096433][T14452] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 528.108541][T14452] bond4: (slave vcan1): making interface the new active one [ 528.117710][T14452] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 528.129441][T14454] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2162'. [ 528.138780][T14454] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 528.163341][T14452] bond4: (slave vcan2): The slave device specified does not support setting the MAC address [ 528.175744][T14452] bond4: (slave vcan2): Enslaving as a backup interface with an up link [ 528.192991][T14452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.363004][T14462] syzkaller0: entered promiscuous mode [ 528.370629][T14462] syzkaller0: entered allmulticast mode [ 528.385974][T14465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2167'. [ 528.404519][T14464] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2165'. [ 528.421214][T14464] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2165'. [ 528.456983][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2165'. [ 528.526670][T14468] lo speed is unknown, defaulting to 1000 [ 528.545068][T14468] wg1 speed is unknown, defaulting to 1000 [ 528.825460][T14500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.834935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.118043][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 529.669450][T14559] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 529.791341][T14564] macsec0 (unregistering): left allmulticast mode [ 529.799789][T14564] macsec0 (unregistering): left promiscuous mode [ 529.834832][T14564] bridge0: port 4(macsec0) entered disabled state [ 530.225844][T14594] bridge8: port 1(veth9) entered blocking state [ 530.246299][T14594] bridge8: port 1(veth9) entered disabled state [ 530.258748][T14594] veth9: entered allmulticast mode [ 530.266377][T14594] veth9: entered promiscuous mode [ 530.276625][T14595] bridge8: port 2(veth0_to_bond) entered blocking state [ 530.285198][T14595] bridge8: port 2(veth0_to_bond) entered disabled state [ 530.292997][T14595] veth0_to_bond: entered allmulticast mode [ 530.301883][T14595] veth0_to_bond: entered promiscuous mode [ 530.526822][T14617] IPVS: Scheduler module ip_vs_sip not found [ 530.784262][T14638] lo speed is unknown, defaulting to 1000 [ 530.793021][T14638] wg1 speed is unknown, defaulting to 1000 [ 531.285055][T14670] tipc: Resetting bearer [ 531.298282][T14673] netlink: 'syz.4.2223': attribute type 29 has an invalid length. [ 531.342855][T14668] tipc: Resetting bearer [ 531.447608][T14212] tipc: Resetting bearer [ 531.659729][T14696] bond4 (unregistering): Released all slaves [ 531.980858][T14725] ipt_ECN: cannot use operation on non-tcp rule [ 531.993748][T14718] bond3: entered promiscuous mode [ 531.999327][T14718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.059363][T14730] lo speed is unknown, defaulting to 1000 [ 532.067246][T14730] wg1 speed is unknown, defaulting to 1000 [ 532.120130][T14734] openvswitch: netlink: Message has 8 unknown bytes. [ 532.202313][T14740] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.212813][T14740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 532.315602][T14740] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.326062][T14740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 532.400190][T14740] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.435772][T14740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 532.562147][T14756] netlink: 'syz.2.2244': attribute type 23 has an invalid length. [ 532.571358][T14757] netlink: 'syz.2.2244': attribute type 23 has an invalid length. [ 532.624113][T14740] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.671297][T14740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 532.769238][T14754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.795896][T14770] __nla_validate_parse: 15 callbacks suppressed [ 532.795914][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2247'. [ 532.895606][T14770] bond4: entered promiscuous mode [ 532.901903][T14770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.933145][T14775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 532.942691][T14775] bond5: entered promiscuous mode [ 532.948597][T14775] bond4: (slave bond5): Enslaving as an active interface with an up link [ 532.953782][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'. [ 532.968977][T14774] netlink: 'syz.2.2248': attribute type 3 has an invalid length. [ 532.980487][T14774] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2248'. [ 533.124926][ T9358] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.136218][ T9358] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 533.150054][T14779] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 533.163371][T14779] netlink: 'syz.1.2249': attribute type 3 has an invalid length. [ 533.171767][T14779] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2249'. [ 533.182103][T14779] NCSI netlink: No device for ifindex 813332851 [ 533.210230][ T9358] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.219483][ T9358] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 533.229177][ T9358] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.237808][ T9358] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 533.256206][ T9358] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.269284][T14786] netlink: 'syz.2.2250': attribute type 8 has an invalid length. [ 533.277370][T14786] netlink: 'syz.2.2250': attribute type 9 has an invalid length. [ 533.285991][T14786] netlink: 'syz.2.2250': attribute type 10 has an invalid length. [ 533.294640][ T9358] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 533.303843][T14786] netlink: 'syz.2.2250': attribute type 11 has an invalid length. [ 533.312476][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 534.318317][T14837] lo speed is unknown, defaulting to 1000 [ 534.331341][T14837] wg1 speed is unknown, defaulting to 1000 [ 534.419921][T14846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.511522][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2271'. [ 534.634932][T14852] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 534.822238][T14863] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2276'. [ 534.891169][T14868] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2276'. [ 534.927531][T14869] : renamed from bond_slave_0 [ 535.025114][T14873] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 535.165373][T14875] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2279'. [ 535.362655][T14891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2283'. [ 535.390763][T14890] syzkaller1: entered promiscuous mode [ 535.398577][T14890] syzkaller1: entered allmulticast mode [ 535.490396][T14899] tipc: Enabling of bearer rejected, already enabled [ 535.752393][T14906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.771211][T14910] nbd2: detected capacity change from 0 to 127 [ 535.841686][T14909] nbd4: detected capacity change from 0 to 127 [ 535.884120][ T5836] block nbd2: Receive control failed (result -32) [ 535.885363][ T5837] block nbd4: Receive control failed (result -32) [ 535.913386][T14908] lo speed is unknown, defaulting to 1000 [ 535.921203][T14908] wg1 speed is unknown, defaulting to 1000 [ 536.254998][T14932] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 536.442161][T14942] gtp0: entered promiscuous mode [ 536.453617][T14942] gtp0: entered allmulticast mode [ 536.574286][T14944] lo speed is unknown, defaulting to 1000 [ 536.611680][T14944] wg1 speed is unknown, defaulting to 1000 [ 537.372412][T14992] No such timeout policy "syz0" [ 537.475635][T14992] veth0: entered promiscuous mode [ 537.483522][T14991] veth0: left promiscuous mode [ 537.554702][T14999] FAULT_INJECTION: forcing a failure. [ 537.554702][T14999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.604255][T14999] CPU: 0 UID: 0 PID: 14999 Comm: syz.3.2316 Not tainted syzkaller #0 PREEMPT(full) [ 537.604305][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.604328][T14999] Call Trace: [ 537.604343][T14999] [ 537.604352][T14999] dump_stack_lvl+0x189/0x250 [ 537.604384][T14999] ? __pfx____ratelimit+0x10/0x10 [ 537.604405][T14999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.604431][T14999] ? __pfx__printk+0x10/0x10 [ 537.604452][T14999] ? __might_fault+0xb0/0x130 [ 537.604493][T14999] should_fail_ex+0x414/0x560 [ 537.604530][T14999] _copy_from_user+0x2d/0xb0 [ 537.604557][T14999] ___sys_sendmsg+0x158/0x2a0 [ 537.604583][T14999] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.604646][T14999] ? __fget_files+0x2a/0x420 [ 537.604664][T14999] ? __fget_files+0x3a0/0x420 [ 537.604694][T14999] __x64_sys_sendmsg+0x19b/0x260 [ 537.604721][T14999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.604755][T14999] ? __pfx_ksys_write+0x10/0x10 [ 537.604785][T14999] ? do_syscall_64+0xbe/0xfa0 [ 537.604810][T14999] do_syscall_64+0xfa/0xfa0 [ 537.604830][T14999] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.604851][T14999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.604870][T14999] ? clear_bhb_loop+0x60/0xb0 [ 537.604894][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.604913][T14999] RIP: 0033:0x7fea8eb8f749 [ 537.604930][T14999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.604946][T14999] RSP: 002b:00007fea8fb01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.604966][T14999] RAX: ffffffffffffffda RBX: 00007fea8ede5fa0 RCX: 00007fea8eb8f749 [ 537.604980][T14999] RDX: 0000000004008040 RSI: 0000200000000200 RDI: 0000000000000003 [ 537.604993][T14999] RBP: 00007fea8fb01090 R08: 0000000000000000 R09: 0000000000000000 [ 537.605006][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.605018][T14999] R13: 00007fea8ede6038 R14: 00007fea8ede5fa0 R15: 00007ffdc343c2b8 [ 537.605051][T14999] [ 537.879112][T15007] SET target dimension over the limit! [ 537.887034][T15007] veth1_virt_wifi: entered promiscuous mode [ 537.893396][T15007] veth1_virt_wifi: entered allmulticast mode [ 537.902899][T15007] __nla_validate_parse: 7 callbacks suppressed [ 537.902919][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2318'. [ 537.988465][T15016] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2321'. [ 538.116770][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 538.240556][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 538.285067][ T5837] Bluetooth: hci0: command tx timeout [ 538.304924][T15032] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2325'. [ 538.324471][T15032] tipc: Enabled bearer , priority 0 [ 538.406959][T15032] syzkaller0: entered promiscuous mode [ 538.413902][T15032] syzkaller0: entered allmulticast mode [ 538.420135][T15032] tipc: Resetting bearer [ 538.433160][T15040] x_tables: ip_tables: ah match: only valid for protocol 51 [ 538.441415][T15023] tipc: Resetting bearer [ 538.476634][T15043] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2329'. [ 538.571545][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2330'. [ 538.810071][T15058] validate_nla: 4 callbacks suppressed [ 538.810090][T15058] netlink: 'syz.3.2332': attribute type 13 has an invalid length. [ 538.811810][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'. [ 538.823972][T15058] netlink: 'syz.3.2332': attribute type 17 has an invalid length. [ 539.530830][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'. [ 540.748912][T15023] tipc: Disabling bearer [ 540.807863][T15062] lo speed is unknown, defaulting to 1000 [ 540.836303][T15062] wg1 speed is unknown, defaulting to 1000 [ 541.078876][T15101] lo speed is unknown, defaulting to 1000 [ 541.103188][T15101] wg1 speed is unknown, defaulting to 1000 [ 541.205664][T15102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2338'. [ 541.662485][ T5837] block nbd5: Receive control failed (result -32) [ 541.740685][T15146] netlink: 'syz.4.2346': attribute type 1 has an invalid length. [ 541.755317][T15140] bond13: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 541.825518][T15140] bond13 (unregistering): Released all slaves [ 542.187268][T15147] lo speed is unknown, defaulting to 1000 [ 542.307591][T15147] wg1 speed is unknown, defaulting to 1000 [ 542.637532][T15181] openvswitch: netlink: Message has 6 unknown bytes. [ 542.696905][T15179] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 542.712519][T15179] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 542.789830][T15183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.806478][T15183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.817341][T15183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.831557][T15179] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 542.843497][T15179] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 542.957680][T15188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.969935][T15188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.975107][T15179] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 542.979173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.997272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.012543][T15179] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 543.041399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.051315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.076546][T15179] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 543.089514][T15179] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 543.208058][T14235] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 543.243424][T14235] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 543.300517][T14213] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 543.310091][T14213] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 543.456803][T14212] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 543.470384][T14212] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 543.491568][T14212] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 543.505411][T14212] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 543.751496][T15196] lo speed is unknown, defaulting to 1000 [ 543.759793][T15196] wg1 speed is unknown, defaulting to 1000 [ 544.034836][T15217] netlink: 'syz.4.2367': attribute type 8 has an invalid length. [ 544.068116][T15217] __nla_validate_parse: 1 callbacks suppressed [ 544.068135][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 544.089451][T15216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2369'. [ 544.119330][T15217] bond0: entered promiscuous mode [ 544.125587][T15217] team0: entered promiscuous mode [ 544.133281][T15218] netlink: 'syz.4.2367': attribute type 8 has an invalid length. [ 544.141795][T15217] geneve0: entered promiscuous mode [ 544.147501][T15217] dummy0: entered promiscuous mode [ 544.153981][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 544.165733][T15224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2369'. [ 544.187991][T15217] bond0: left promiscuous mode [ 544.193754][T15217] team0: left promiscuous mode [ 544.199399][T15217] geneve0: left promiscuous mode [ 544.204835][T15217] dummy0: left promiscuous mode [ 544.286401][T15218] bond0: entered promiscuous mode [ 544.298290][T15218] team0: entered promiscuous mode [ 544.310432][T15218] geneve0: entered promiscuous mode [ 544.317007][T15218] dummy0: entered promiscuous mode [ 544.332062][T15218] bond0: left promiscuous mode [ 544.338513][T15218] team0: left promiscuous mode [ 544.349991][T15218] geneve0: left promiscuous mode [ 544.362762][T15218] dummy0: left promiscuous mode [ 544.388578][T15231] tipc: Enabling of bearer rejected, already enabled [ 544.408736][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 544.618775][T15236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2375'. [ 544.762936][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'. [ 544.824377][T15254] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2380'. [ 544.837546][ T5837] block nbd6: Receive control failed (result -1) [ 545.406715][T15286] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2387'. [ 545.488107][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 545.708980][T15309] netlink: 'syz.4.2391': attribute type 139 has an invalid length. [ 545.885244][T15316] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 545.930325][T15316] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 545.942025][T15316] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 545.949180][T15321] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 545.949340][T15320] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 545.996822][T15323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.014599][T15323] bond6: (slave bridge9): Enslaving as an active interface with a down link [ 546.031521][T15323] macvlan3: entered promiscuous mode [ 546.037079][T15323] macvlan3: entered allmulticast mode [ 546.044601][T15323] bond6: entered promiscuous mode [ 546.050500][T15323] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 546.060134][T15323] bond6: left promiscuous mode [ 546.123547][T15328] netlink: 'syz.2.2396': attribute type 2 has an invalid length. [ 546.135684][T15328] netlink: 'syz.2.2396': attribute type 2 has an invalid length. [ 546.172392][T15328] lo speed is unknown, defaulting to 1000 [ 546.180216][T15328] wg1 speed is unknown, defaulting to 1000 [ 546.295247][T15333] syzkaller0: left promiscuous mode [ 546.309514][T15333] syzkaller0: left allmulticast mode [ 546.336062][T15333] tipc: Resetting bearer [ 546.411103][T15339] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 546.586886][T15346] gretap0: left allmulticast mode [ 546.596320][T15346] gretap0: left promiscuous mode [ 546.618873][T15346] bridge0: port 3(gretap0) entered disabled state [ 546.641590][T15346] bond3: (slave bond0): Releasing backup interface [ 546.657132][T15346] ¾x9ÿ: left allmulticast mode [ 546.671882][T15346] ¾x9ÿ: left promiscuous mode [ 546.706782][T15346] bridge0: port 1(1¾x9ÿ) entered disabled state [ 546.829517][T15346] bond0: (slave bond_slave_0): Releasing backup interface [ 546.850914][T15346] bond0: (slave bond_slave_1): Releasing backup interface [ 546.862876][T15346] C: left promiscuous mode [ 546.869691][T15346] team0: Port device C removed [ 546.877319][T15346] team_slave_1: left promiscuous mode [ 546.884595][T15346] team0: Port device team_slave_1 removed [ 546.890836][T15346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.948978][T15359] lo speed is unknown, defaulting to 1000 [ 546.985271][T15359] wg1 speed is unknown, defaulting to 1000 [ 547.364714][T15391] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 547.846046][T15414] lo speed is unknown, defaulting to 1000 [ 547.848770][T15411] tipc: Enabled bearer , priority 0 [ 547.882191][T15414] wg1 speed is unknown, defaulting to 1000 [ 547.902299][T15413] lo speed is unknown, defaulting to 1000 [ 547.909748][T15413] wg1 speed is unknown, defaulting to 1000 [ 547.943970][T15411] syzkaller0: entered promiscuous mode [ 547.949489][T15411] syzkaller0: entered allmulticast mode [ 548.124767][T15418] tipc: Resetting bearer [ 548.153710][T15416] lo speed is unknown, defaulting to 1000 [ 548.312851][T15431] tipc: Resetting bearer [ 548.318722][T15416] wg1 speed is unknown, defaulting to 1000 [ 548.325847][T15415] tipc: Resetting bearer [ 548.385076][T15415] tipc: Disabling bearer [ 548.397244][T15430] tipc: Resetting bearer [ 548.453629][T15442] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 548.644857][T15452] lo speed is unknown, defaulting to 1000 [ 548.703326][T15452] wg1 speed is unknown, defaulting to 1000 [ 549.026324][T14221] tipc: Resetting bearer [ 549.070312][T15479] syzkaller1: entered promiscuous mode [ 549.076066][T15479] syzkaller1: entered allmulticast mode [ 549.085009][T15479] __nla_validate_parse: 8 callbacks suppressed [ 549.085029][T15479] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2431'. [ 549.334592][T15497] ip6t_REJECT: ECHOREPLY is not supported [ 549.362120][T15498] netlink: 'syz.0.2435': attribute type 21 has an invalid length. [ 549.380687][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 549.380697][T15498] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2435'. [ 549.399762][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 549.412315][T15498] netlink: 'syz.0.2435': attribute type 5 has an invalid length. [ 549.430720][T15498] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2435'. [ 549.637460][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'. [ 549.862895][T15522] xt_bpf: check failed: parse error [ 549.880481][T15524] net_ratelimit: 4 callbacks suppressed [ 549.880499][T15524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.899021][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2443'. [ 549.929999][T15522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2443'. [ 549.970211][T15524] lo speed is unknown, defaulting to 1000 [ 550.004579][T15524] wg1 speed is unknown, defaulting to 1000 [ 550.408354][T15554] netlink: 'syz.3.2453': attribute type 83 has an invalid length. [ 550.536724][T15554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2453'. [ 550.587772][T15554] nbd: must specify at least one socket [ 550.681780][T15561] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 550.787997][T15561] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 550.825782][T15561] batadv_slave_0: entered promiscuous mode [ 550.854612][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 551.083299][T15584] netlink: 'syz.1.2458': attribute type 10 has an invalid length. [ 551.317866][T15599] netlink: 'syz.1.2463': attribute type 3 has an invalid length. [ 551.420350][T15601] lo speed is unknown, defaulting to 1000 [ 551.438302][T15601] wg1 speed is unknown, defaulting to 1000 [ 551.450154][T15602] lo speed is unknown, defaulting to 1000 [ 551.493856][T15602] wg1 speed is unknown, defaulting to 1000 [ 551.584231][T15614] 8021q: adding VLAN 0 to HW filter on device bond7 [ 551.614574][T15616] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 551.629400][T15616] bond7: (slave macvlan3): Enslaving as a backup interface with an up link [ 551.670903][T15614] bridge_slave_0: left allmulticast mode [ 551.676823][T15614] bridge_slave_0: left promiscuous mode [ 551.682747][ T9358] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 551.698314][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.709474][T15614] bridge_slave_1: left allmulticast mode [ 551.715510][T15614] bridge_slave_1: left promiscuous mode [ 551.722142][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.738852][T15614] veth0_to_bond: left allmulticast mode [ 551.745663][T15614] veth0_to_bond: left promiscuous mode [ 551.751770][T15614] bridge8: port 2(veth0_to_bond) entered disabled state [ 551.768750][T15614] team0: Port device team_slave_0 removed [ 551.778174][T15614] team0: Port device team_slave_1 removed [ 551.796644][T15614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.804416][ T138] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 551.816578][T15614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.825821][T15614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.837742][T15629] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002 [ 551.914536][T14213] bond7: (slave macvlan3): link status up again after 0 ms [ 551.952025][T14213] bond7: (slave macvlan3): link status up again after 0 ms [ 551.991704][T14213] bond7: (slave macvlan3): link status up again after 0 ms [ 552.007683][T15631] lo speed is unknown, defaulting to 1000 [ 552.014093][T14213] bond7: (slave macvlan3): link status up again after 0 ms [ 552.037096][T15631] wg1 speed is unknown, defaulting to 1000 [ 552.043602][ T138] bond7: (slave macvlan3): link status up again after 0 ms [ 552.050860][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 552.477263][T15653] tipc: Enabling of bearer rejected, already enabled [ 552.492147][T15653] syzkaller0: entered promiscuous mode [ 552.501468][T15653] syzkaller0: entered allmulticast mode [ 552.508268][T15653] tipc: Resetting bearer [ 552.533337][T15658] lo speed is unknown, defaulting to 1000 [ 552.541004][T15658] wg1 speed is unknown, defaulting to 1000 [ 552.637896][T15661] tipc: Resetting bearer [ 552.696845][T15660] tipc: Resetting bearer [ 553.562591][T14235] tipc: Resetting bearer [ 554.961250][T14213] net_ratelimit: 23 callbacks suppressed [ 554.961273][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.081159][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.191183][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.301158][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.411194][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.521197][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.631176][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.741118][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.851199][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 555.961621][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.031514][ T138] net_ratelimit: 36 callbacks suppressed [ 560.031536][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.151171][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.261228][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.371217][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.491195][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.601616][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.711172][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.821186][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 560.931200][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 561.041200][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.141335][T14234] net_ratelimit: 36 callbacks suppressed [ 565.141359][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.261279][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.371165][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.481236][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.601229][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.711169][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.821257][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 565.931131][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 566.041318][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 566.151620][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.151332][T14213] net_ratelimit: 35 callbacks suppressed [ 570.151354][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.271208][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.381374][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.491198][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.601361][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.711241][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.831244][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 570.941177][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 571.051225][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 571.161364][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 575.261284][ T138] net_ratelimit: 36 callbacks suppressed [ 575.261306][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 575.381238][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 575.501167][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 575.611180][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 575.721286][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 575.831207][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 575.941291][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 576.051187][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 576.161222][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 576.271140][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 580.351205][T14213] net_ratelimit: 36 callbacks suppressed [ 580.351228][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 580.471159][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 580.581275][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 580.691211][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 580.801325][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 580.911248][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 581.021259][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 581.131184][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 581.241768][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 581.351349][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 585.381310][ T9358] net_ratelimit: 35 callbacks suppressed [ 585.381332][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 585.501372][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 585.611178][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 585.721192][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 585.831174][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 585.941251][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 586.051155][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 586.161142][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 586.271149][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 586.381187][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 590.471358][T14213] net_ratelimit: 36 callbacks suppressed [ 590.471379][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 590.591228][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 590.701234][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 590.811125][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 590.921476][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 591.041358][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 591.151185][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 591.261196][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 591.371194][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 591.481208][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 595.561326][ T138] net_ratelimit: 36 callbacks suppressed [ 595.561356][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 595.681189][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 595.791141][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 595.901190][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 596.011123][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 596.121295][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 596.231274][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 596.341203][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 596.451247][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 596.561241][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 600.631227][ T9358] net_ratelimit: 36 callbacks suppressed [ 600.631249][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 600.751180][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 600.861200][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 600.981223][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 601.091175][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 601.201230][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 601.321321][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 601.431373][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 601.541325][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 601.651364][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 605.731306][ T9358] net_ratelimit: 36 callbacks suppressed [ 605.731327][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 605.851221][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 605.961269][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 606.071176][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 606.181171][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 606.291190][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 606.401194][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 606.511237][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 606.621220][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 606.731146][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 608.942614][T15669] __nla_validate_parse: 6 callbacks suppressed [ 608.942632][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'. [ 609.044254][T15669] 8021q: adding VLAN 0 to HW filter on device bond8 [ 609.129671][T15685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2486'. [ 609.144787][T15685] nbd: socks must be embedded in a SOCK_ITEM attr [ 609.154495][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 609.169281][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 609.179019][T15685] netlink: 'syz.2.2486': attribute type 18 has an invalid length. [ 609.691239][T15669] bond8 (unregistering): Released all slaves [ 609.720429][T15690] tipc: Resetting bearer [ 609.764652][T15689] tipc: Resetting bearer [ 610.083988][T15715] netlink: 'syz.4.2492': attribute type 21 has an invalid length. [ 610.103777][T15715] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2492'. [ 610.120099][ T138] tipc: Resetting bearer [ 610.130686][T15715] netlink: 'syz.4.2492': attribute type 4 has an invalid length. [ 610.146318][T15715] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2492'. [ 610.152708][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'. [ 610.166993][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 610.181256][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 610.201373][T15721] netlink: 'syz.0.2495': attribute type 15 has an invalid length. [ 610.461665][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 610.510777][T15740] tipc: Enabling of bearer rejected, failed to enable media [ 610.558071][T15738] Unknown options in mask b7f2 [ 610.765860][T15746] lo speed is unknown, defaulting to 1000 [ 610.786278][T15746] wg1 speed is unknown, defaulting to 1000 [ 610.811146][ T9358] net_ratelimit: 29 callbacks suppressed [ 610.811167][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 611.018625][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 611.097231][T14235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.151053][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 611.260776][T15764] lo speed is unknown, defaulting to 1000 [ 611.267101][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 611.285751][T15764] wg1 speed is unknown, defaulting to 1000 [ 611.411350][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 611.626020][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 611.781598][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 611.992945][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 612.030405][T15801] lo speed is unknown, defaulting to 1000 [ 612.094360][T15801] wg1 speed is unknown, defaulting to 1000 [ 612.158089][T15811] netlink: 'syz.2.2521': attribute type 11 has an invalid length. [ 612.228376][T15811] netlink: 'syz.2.2521': attribute type 13 has an invalid length. [ 612.231649][ T9358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.449556][T15826] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 612.473889][T15827] netlink: 'syz.4.2524': attribute type 12 has an invalid length. [ 612.592863][T15825] lo speed is unknown, defaulting to 1000 [ 612.685737][T15825] wg1 speed is unknown, defaulting to 1000 [ 612.955499][T15850] x_tables: duplicate underflow at hook 1 [ 613.156029][T15852] lo speed is unknown, defaulting to 1000 [ 613.175665][T15858] tipc: Resetting bearer [ 613.184426][T15852] wg1 speed is unknown, defaulting to 1000 [ 613.185524][T15858] syzkaller0: left promiscuous mode [ 613.198684][T15858] syzkaller0: left allmulticast mode [ 613.243283][T15856] tipc: Resetting bearer [ 613.489532][T15876] veth11: entered promiscuous mode [ 613.547378][T15878] syzkaller0: entered promiscuous mode [ 613.554046][T15878] syzkaller0: entered allmulticast mode [ 615.214556][T14234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.223661][T14234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.239264][ T138] tipc: Resetting bearer [ 615.478295][T15882] lo speed is unknown, defaulting to 1000 [ 615.523985][T15882] wg1 speed is unknown, defaulting to 1000 [ 616.012680][T14213] net_ratelimit: 15 callbacks suppressed [ 616.012702][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 616.267522][T15891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.276527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.361425][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 616.496098][T15915] lo speed is unknown, defaulting to 1000 [ 616.502589][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 616.532216][T15915] wg1 speed is unknown, defaulting to 1000 [ 616.617844][T15921] __nla_validate_parse: 11 callbacks suppressed [ 616.617865][T15921] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2548'. [ 616.642485][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 616.751469][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 616.791776][T14234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.812662][T15931] tipc: Resetting bearer [ 616.887148][T15931] tipc: Resetting bearer [ 616.901661][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 616.985992][T15944] sctp: [Deprecated]: syz.0.2554 (pid 15944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.985992][T15944] Use struct sctp_sack_info instead [ 617.042483][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 617.286653][T15954] lo speed is unknown, defaulting to 1000 [ 617.302619][T15954] wg1 speed is unknown, defaulting to 1000 [ 617.584298][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 617.592554][T15973] lo speed is unknown, defaulting to 1000 [ 617.622718][T15973] wg1 speed is unknown, defaulting to 1000 [ 617.714300][T15984] sctp: [Deprecated]: syz.1.2567 (pid 15984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.714300][T15984] Use struct sctp_sack_info instead [ 617.736746][T15984] sctp: [Deprecated]: syz.1.2567 (pid 15984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.736746][T15984] Use struct sctp_sack_info instead [ 617.756223][T15985] sctp: [Deprecated]: syz.1.2567 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.756223][T15985] Use struct sctp_sack_info instead [ 617.779640][ T9358] tipc: Resetting bearer [ 618.298393][T16025] lo speed is unknown, defaulting to 1000 [ 618.305984][T16025] wg1 speed is unknown, defaulting to 1000 [ 618.824661][T16047] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2582'. [ 618.834071][T16048] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2582'. [ 618.842186][T16044] netlink: 'syz.0.2581': attribute type 10 has an invalid length. [ 618.851039][T16044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2581'. [ 618.868594][T16047] IPv6: sit1: Disabled Multicast RS [ 618.895487][T16047] sit1: entered allmulticast mode [ 618.971489][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 618.990787][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2586'. [ 619.012264][T16057] tipc: Enabled bearer , priority 0 [ 619.026863][T16057] syzkaller0: entered promiscuous mode [ 619.036012][T16057] syzkaller0: entered allmulticast mode [ 619.136189][T16057] tipc: Resetting bearer [ 619.163962][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2589'. [ 619.199543][T16055] tipc: Resetting bearer [ 619.242707][T16055] tipc: Disabling bearer [ 619.355869][T16086] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 619.561657][T16098] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2598'. [ 619.930612][T16098] vlan2: entered promiscuous mode [ 619.936554][T16098] bond0: entered promiscuous mode [ 619.943940][T16098] team0: entered promiscuous mode [ 619.960135][T16098] geneve0: entered promiscuous mode [ 619.977777][T16098] dummy0: entered promiscuous mode [ 620.126931][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 620.271844][T16126] veth7: entered promiscuous mode [ 620.341636][T14234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.349889][T14234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.736032][T16151] netlink: 'syz.1.2610': attribute type 8 has an invalid length. [ 620.772065][T16153] lo speed is unknown, defaulting to 1000 [ 620.779502][T16153] wg1 speed is unknown, defaulting to 1000 [ 621.034470][T14235] net_ratelimit: 28 callbacks suppressed [ 621.034490][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.182363][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.261585][T14221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.291665][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.366891][T16177] can: request_module (can-proto-4) failed. [ 621.402224][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.511452][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.641055][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.751628][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.871283][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 621.941241][T16205] __nla_validate_parse: 2 callbacks suppressed [ 621.941261][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2626'. [ 621.988560][T16208] x_tables: duplicate underflow at hook 3 [ 621.992992][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 622.038836][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2628'. [ 622.825743][T16266] netlink: 'syz.1.2642': attribute type 4 has an invalid length. [ 623.097863][T16273] netlink: 'syz.4.2643': attribute type 10 has an invalid length. [ 623.145525][T16273] netlink: 'syz.4.2643': attribute type 1 has an invalid length. [ 623.402107][T16280] lo speed is unknown, defaulting to 1000 [ 623.409637][T16280] wg1 speed is unknown, defaulting to 1000 [ 623.524780][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2646'. [ 623.534762][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 623.767543][T16300] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2648'. [ 623.788239][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2648'. [ 623.911967][T16307] bridge_slave_0: entered promiscuous mode [ 623.928372][T16307] bridge_slave_0: entered allmulticast mode [ 624.125942][T16325] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2655'. [ 624.188151][T16331] netlink: 'syz.3.2656': attribute type 13 has an invalid length. [ 624.197533][T16331] netlink: 'syz.3.2656': attribute type 17 has an invalid length. [ 624.220168][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.905411][T16360] tipc: Resetting bearer [ 625.033743][T16364] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.044059][T16364] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 625.098477][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 625.158841][T16365] ip6gretap0: entered promiscuous mode [ 625.184628][T16365] ip6gretap0: left promiscuous mode [ 625.265208][T16364] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.275627][T16364] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 625.331396][T16359] tipc: Resetting bearer [ 625.369005][T16364] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.421447][T16364] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 625.475738][T16367] netlink: 'syz.3.2669': attribute type 6 has an invalid length. [ 625.499577][T16364] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.519777][T16364] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 625.547422][T16367] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2669'. [ 625.659239][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'. [ 625.679976][T14221] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.711182][T14221] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 625.757101][T14234] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.778960][T14234] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 625.843375][T16364] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.880133][T16364] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 626.214496][T16364] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.241320][T16364] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 626.409525][T14213] tipc: Resetting bearer [ 626.421118][T14213] net_ratelimit: 32 callbacks suppressed [ 626.421140][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 626.561100][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 626.614100][T16409] netlink: 'syz.4.2679': attribute type 5 has an invalid length. [ 626.671195][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 626.759396][T16417] tipc: Enabling of bearer rejected, already enabled [ 626.801587][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 626.842062][T16420] bridge13: entered promiscuous mode [ 626.847531][T16420] bridge13: entered allmulticast mode [ 626.913206][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 627.063934][T16423] bond8: option arp_validate: invalid value (18446744073491447809) [ 627.074334][T16423] bond8 (unregistering): Released all slaves [ 627.113258][T16426] __nla_validate_parse: 4 callbacks suppressed [ 627.113276][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 627.128998][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 627.155028][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 627.244094][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 627.304788][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 627.316653][T16436] netlink: 'syz.1.2688': attribute type 5 has an invalid length. [ 627.358624][T16439] netlink: 'syz.2.2689': attribute type 11 has an invalid length. [ 627.366721][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 627.378229][T16439] netlink: 'syz.2.2689': attribute type 11 has an invalid length. [ 627.387412][T16439] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2689'. [ 627.415701][T16444] netlink: 'syz.4.2687': attribute type 4 has an invalid length. [ 627.488482][T16450] tipc: Resetting bearer [ 627.505133][T16434] tipc: Enabling of bearer rejected, already enabled [ 627.568750][T16439] bridge10: entered promiscuous mode [ 627.588840][T16439] bridge10: entered allmulticast mode [ 627.695262][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 627.712025][T16460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2692'. [ 627.731171][T16454] tipc: Resetting bearer [ 627.812059][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 627.856256][T16471] netlink: 'syz.3.2696': attribute type 12 has an invalid length. [ 628.527436][T14221] tipc: Resetting bearer [ 628.703457][T16514] lo speed is unknown, defaulting to 1000 [ 628.734898][T16514] wg1 speed is unknown, defaulting to 1000 [ 629.075793][T16537] lo speed is unknown, defaulting to 1000 [ 629.088351][T16537] wg1 speed is unknown, defaulting to 1000 [ 629.197316][T16537] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2715'. [ 629.226345][T16544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2716'. [ 629.712701][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'. [ 629.796959][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 629.927314][T16573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2722'. [ 630.540253][T16596] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 630.559412][T16596] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 630.726976][T16599] syzkaller0: entered promiscuous mode [ 630.737905][T16599] syzkaller0: entered allmulticast mode [ 630.817666][T16612] syzkaller0: entered promiscuous mode [ 630.841780][T16612] syzkaller0: entered allmulticast mode [ 630.848796][T16612] tipc: Resetting bearer [ 631.008193][T16623] netlink: 'syz.3.2739': attribute type 15 has an invalid length. [ 631.047466][T16614] netlink: 'syz.1.2737': attribute type 12 has an invalid length. [ 631.279627][T16642] syz.3.2744 uses old SIOCAX25GETINFO [ 631.297457][T16643] netlink: 'syz.1.2743': attribute type 10 has an invalid length. [ 631.347446][T16644] bond12: (slave erspan0): Releasing active interface [ 631.362260][T16644] ip6gretap2: entered promiscuous mode [ 631.385046][T16644] bond0: (slave team0): Releasing backup interface [ 631.418536][T16644] team0: Port device dummy0 removed [ 631.436864][T16644] bond0: (slave bond_slave_0): Releasing backup interface [ 631.445613][T16644] bond_slave_0: left promiscuous mode [ 631.454377][T16644] bond0: (slave bond_slave_1): Releasing backup interface [ 631.463924][T16644] bond_slave_1: left promiscuous mode [ 631.479408][T16644] team_slave_0: left promiscuous mode [ 631.490560][T16644] team0: Port device team_slave_0 removed [ 631.497231][T16644] team_slave_1: left promiscuous mode [ 631.506066][T16644] team0: Port device team_slave_1 removed [ 631.512457][T16644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.520731][T16644] net_ratelimit: 24 callbacks suppressed [ 631.520748][T16644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 631.547732][T16643] team0: Port device geneve0 added [ 631.561537][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 631.681729][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 631.747575][T16664] tipc: Resetting bearer [ 631.801715][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 631.904215][T16664] tipc: Resetting bearer [ 631.924313][T14213] bond7: (slave macvlan3): failed to get link speed/duplex [ 631.939751][T16671] lo speed is unknown, defaulting to 1000 [ 631.952920][T16671] wg1 speed is unknown, defaulting to 1000 [ 632.089892][T16681] lo speed is unknown, defaulting to 1000 [ 632.097686][T16681] wg1 speed is unknown, defaulting to 1000 [ 632.219541][T16680] lo speed is unknown, defaulting to 1000 [ 632.225938][T16690] __nla_validate_parse: 9 callbacks suppressed [ 632.225958][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2757'. [ 632.236775][T16680] wg1 speed is unknown, defaulting to 1000 [ 632.243707][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2757'. [ 632.247548][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 632.524398][T14221] bond7: (slave macvlan3): failed to get link speed/duplex [ 632.555481][T16697] netlink: 'syz.4.2758': attribute type 21 has an invalid length. [ 632.564665][T16697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2758'. [ 632.642769][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 632.771715][T16691] netlink: 'syz.1.2755': attribute type 6 has an invalid length. [ 632.831091][T14235] bond7: (slave macvlan3): failed to get link speed/duplex [ 632.927387][T14235] tipc: Resetting bearer [ 633.011452][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 633.467001][T16732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2768'. [ 633.523169][T16731] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 633.531308][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'. [ 633.550879][T16735] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 633.773137][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2770'. [ 634.110308][T16760] lo speed is unknown, defaulting to 1000 [ 634.119568][T16760] wg1 speed is unknown, defaulting to 1000 [ 634.373348][T16773] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2781'. [ 634.405820][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2781'. [ 634.442703][T16770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2779'. [ 634.576973][T16785] tipc: Enabled bearer , priority 0 [ 634.593598][T16785] syzkaller0: entered promiscuous mode [ 634.599920][T16785] syzkaller0: entered allmulticast mode [ 634.634851][T16785] tipc: Resetting bearer [ 634.675805][T16779] tipc: Resetting bearer [ 634.700579][T16779] tipc: Disabling bearer [ 634.741367][T16796] lo: left promiscuous mode [ 634.747688][T16796] netlink: 'syz.0.2786': attribute type 5 has an invalid length. [ 634.963455][T16801] netlink: 'syz.4.2788': attribute type 21 has an invalid length. [ 634.988764][T16801] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2788'. [ 635.002041][T14234] wlan1: Trigger new scan to find an IBSS to join [ 635.012316][T16801] tipc: Enabling of bearer rejected, already enabled [ 635.206828][T16810] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 635.215527][T16810] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 636.020236][T16829] tipc: Resetting bearer [ 636.029342][T16829] syzkaller0: left promiscuous mode [ 636.035508][T16829] syzkaller0: left allmulticast mode [ 636.054706][T16829] bridge2: left promiscuous mode [ 636.110508][T16829] bridge4: left promiscuous mode [ 636.122508][T16829] bridge4: left allmulticast mode [ 636.137135][T16829] gretap1: left promiscuous mode [ 636.142653][T16829] gretap1: left allmulticast mode [ 636.157643][T16829] hsr0: left allmulticast mode [ 636.169511][T16829] hsr_slave_0: left allmulticast mode [ 636.175277][T16829] hsr_slave_1: left allmulticast mode [ 636.180674][T16829] hsr0: left promiscuous mode [ 636.186573][T16829] macvlan3: left promiscuous mode [ 636.191998][T16829] macvlan3: left allmulticast mode [ 636.202379][T16829] gtp0: left promiscuous mode [ 636.207101][T16829] gtp0: left allmulticast mode [ 636.229471][T16829] bridge6: left allmulticast mode [ 636.255419][T16829] bridge7: left promiscuous mode [ 636.282260][T16829] bond3: left promiscuous mode [ 636.318088][T16829] sit1: left allmulticast mode [ 636.481378][T16831] hsr_slave_0: left promiscuous mode [ 636.502399][T16831] hsr_slave_1: left promiscuous mode [ 636.655371][T16842] net_ratelimit: 22 callbacks suppressed [ 636.655390][T16842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 636.688958][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 636.751966][ T9358] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.760451][ T9358] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 636.795608][ T9358] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.805344][ T9358] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 636.871286][ T9358] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.882616][ T9358] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 636.892823][ T9358] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.913872][ T9358] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 636.942620][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 637.083004][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 637.213605][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 637.267620][T16876] syzkaller0: entered promiscuous mode [ 637.283170][T16876] syzkaller0: entered allmulticast mode [ 637.321423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.342255][ T138] bond7: (slave macvlan3): failed to get link speed/duplex [ 637.395179][T16848] lo speed is unknown, defaulting to 1000 [ 637.409133][T16848] wg1 speed is unknown, defaulting to 1000 [ 637.542480][T16881] nbd7: detected capacity change from 0 to 127 [ 637.641725][ T9355] bond7: (slave macvlan3): failed to get link speed/duplex [ 637.669836][ T5837] block nbd7: Receive control failed (result -32) [ 637.799077][T16888] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 637.919127][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 637.939222][T16894] __nla_validate_parse: 5 callbacks suppressed [ 637.939242][T16894] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2811'. [ 638.052662][ T9358] bond7: (slave macvlan3): failed to get link speed/duplex [ 638.339377][T16917] nbd: nbd0 already in use [ 638.344637][T16921] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 638.352014][T16920] block nbd0: NBD_DISCONNECT [ 638.368373][T16920] block nbd0: Send disconnect failed -32 [ 638.383128][T16920] block nbd0: shutting down sockets [ 638.429357][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2820'. [ 638.451352][T16922] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2819'. [ 638.472425][T16915] bond14: entered promiscuous mode [ 638.477717][T16915] bond14: entered allmulticast mode [ 638.483802][T16915] 8021q: adding VLAN 0 to HW filter on device bond14 [ 638.493654][T16928] netlink: 'syz.1.2821': attribute type 1 has an invalid length. [ 638.522851][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2821'. [ 638.534093][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2821'. [ 638.735969][T16938] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 638.774286][T16938] batadv2: entered promiscuous mode [ 638.788192][T16938] team0: Port device batadv2 added [ 638.861501][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2825'. [ 638.913304][T16946] wg1 speed is unknown, defaulting to 1000 [ 638.919223][T16946] wg1 speed is unknown, defaulting to 1000 [ 638.959229][T16946] wg1 speed is unknown, defaulting to 1000 [ 639.022277][T16946] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 639.065277][T16955] xt_TCPMSS: Only works on TCP SYN packets [ 639.078781][T16946] wg1 speed is unknown, defaulting to 1000 [ 639.081699][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 639.144359][T16954] veth7: entered promiscuous mode [ 639.153589][T16946] wg1 speed is unknown, defaulting to 1000 [ 639.162216][T16946] wg1 speed is unknown, defaulting to 1000 [ 639.170400][T16946] wg1 speed is unknown, defaulting to 1000 [ 639.180432][T16946] wg1 speed is unknown, defaulting to 1000 [ 639.270789][T16962] tipc: Enabling of bearer rejected, failed to enable media [ 639.292282][T16964] tipc: Enabling of bearer rejected, failed to enable media [ 639.308508][T16969] netlink: 'syz.3.2834': attribute type 6 has an invalid length. [ 639.550602][T16981] lo speed is unknown, defaulting to 1000 [ 639.565211][T16981] wg1 speed is unknown, defaulting to 1000 [ 639.571724][T16977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2836'. [ 639.586208][T16977] netlink: 245 bytes leftover after parsing attributes in process `syz.0.2836'. [ 639.595593][T16981] wg1 speed is unknown, defaulting to 1000 [ 639.776662][T16988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2839'. [ 640.125692][T17000] tap0: tun_chr_ioctl cmd 1074025677 [ 640.133048][T17000] tap0: linktype set to 1 [ 640.141734][T16999] tap0: tun_chr_ioctl cmd 1074025673 [ 640.410083][T17015] lo speed is unknown, defaulting to 1000 [ 640.442119][T17015] wg1 speed is unknown, defaulting to 1000 [ 640.530869][T17015] wg1 speed is unknown, defaulting to 1000 [ 640.738348][T17023] lo speed is unknown, defaulting to 1000 [ 640.761416][T17023] wg1 speed is unknown, defaulting to 1000 [ 640.784861][T17023] wg1 speed is unknown, defaulting to 1000 [ 641.356377][T17053] lo speed is unknown, defaulting to 1000 [ 641.454937][T17053] wg1 speed is unknown, defaulting to 1000 [ 641.473477][T17053] wg1 speed is unknown, defaulting to 1000 [ 641.566345][T17065] lo speed is unknown, defaulting to 1000 [ 641.595971][T17065] wg1 speed is unknown, defaulting to 1000 [ 641.660820][T17065] wg1 speed is unknown, defaulting to 1000 [ 641.671408][T17082] tipc: Enabling of bearer rejected, already enabled [ 641.735647][T17084] tipc: New replicast peer: 172.30.1.3 [ 641.851165][ T9355] net_ratelimit: 126 callbacks suppressed [ 641.851186][ T9355] bond7: (slave macvlan3): failed to get link speed/duplex [ 642.072405][T17097] netlink: 'syz.4.2866': attribute type 10 has an invalid length. [ 642.187245][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 642.203761][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.227157][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.258372][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.270233][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.288513][ T9355] bond7: (slave macvlan3): failed to get link speed/duplex [ 642.303471][T17097] batadv_slave_0: entered promiscuous mode [ 642.316281][T17097] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link [ 642.375759][T17094] lo speed is unknown, defaulting to 1000 [ 642.402294][ T9355] bond7: (slave macvlan3): failed to get link speed/duplex [ 642.432464][T17103] Bluetooth: MGMT ver 1.23 [ 642.460537][T17094] wg1 speed is unknown, defaulting to 1000 [ 642.467021][T17100] lo speed is unknown, defaulting to 1000 [ 642.494087][T17094] wg1 speed is unknown, defaulting to 1000 [ 642.503325][T17100] wg1 speed is unknown, defaulting to 1000 [ 642.527782][T17100] wg1 speed is unknown, defaulting to 1000 [ 642.699448][ T9355] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.786050][T17112] netlink: 'syz.0.2871': attribute type 1 has an invalid length. [ 642.787932][ T9355] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.851153][T14234] bond7: (slave macvlan3): failed to get link speed/duplex [ 642.997291][ T9355] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.146476][ T9355] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.193562][T17100] chnl_net:caif_netlink_parms(): no params data found [ 643.254458][T17143] netlink: 'syz.0.2877': attribute type 2 has an invalid length. [ 643.268034][T17143] __nla_validate_parse: 7 callbacks suppressed [ 643.268053][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 643.292796][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 643.463093][ T30] audit: type=1800 audit(1763780466.076:11): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2876" name="memory.events" dev="tmpfs" ino=2955 res=0 errno=0 [ 643.532412][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 643.569624][T17100] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.593164][T17100] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.607159][T17100] bridge_slave_0: entered allmulticast mode [ 643.629868][T17100] bridge_slave_0: entered promiscuous mode [ 643.682756][ T9355] veth9: left allmulticast mode [ 643.688083][ T9355] veth9: left promiscuous mode [ 643.693270][ T9355] bridge8: port 1(veth9) entered disabled state [ 643.705344][ T9355] tipc: Resetting bearer [ 644.089654][ T9355] team0: Port device geneve0 removed [ 644.213594][ T9355] tipc: Disabling bearer [ 644.222678][T17175] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2884'. [ 644.361315][ T5836] Bluetooth: hci2: command tx timeout [ 644.443286][ T9355] bond3 (unregistering): (slave bridge6): Releasing active interface [ 644.602960][ T9355] bond6 (unregistering): (slave bridge9): Releasing active interface [ 644.655978][ T9355] bond1 (unregistering): Released all slaves [ 644.668752][ T9355] bond2 (unregistering): Released all slaves [ 644.787792][ T9355] bond7 (unregistering): (slave macvlan3): Removing an active aggregator [ 644.797680][ T9355] bond7 (unregistering): (slave macvlan3): Releasing backup interface [ 644.811408][ T9355] bond0 (unregistering): (slave veth5): Releasing backup interface [ 644.821774][ T9355] bond0 (unregistering): Released all slaves [ 644.836543][ T9355] bond3 (unregistering): Released all slaves [ 644.974122][ T9355] bond4 (unregistering): (slave bond5): Releasing backup interface [ 644.983252][ T9355] bond5 (unregistering): left promiscuous mode [ 644.990141][ T9355] bond4 (unregistering): Released all slaves [ 645.121335][ T9355] bond5 (unregistering): Released all slaves [ 645.236323][ T9355] bond6 (unregistering): Released all slaves [ 645.350876][ T9355] bond7 (unregistering): Released all slaves [ 645.389076][T17100] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.399646][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.443643][T17100] bridge_slave_1: entered allmulticast mode [ 645.451886][T17100] bridge_slave_1: entered promiscuous mode [ 645.623865][T17100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.673101][T17100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.689286][T17186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2889'. [ 645.718740][T17183] netlink: 'syz.2.2888': attribute type 12 has an invalid length. [ 645.786175][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 645.808041][T17100] team0: Port device team_slave_0 added [ 645.818975][T17100] team0: Port device team_slave_1 added [ 645.911292][T17206] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 645.918533][T17198] xt_CT: No such helper "snmp_trap" [ 645.931382][T17196] tipc: Enabled bearer , priority 0 [ 645.949562][T17100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.960839][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.990842][T17100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.024760][T17196] netlink: 'syz.2.2892': attribute type 6 has an invalid length. [ 646.071268][T17100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.084416][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.136771][T17100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.164644][T17210] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2896'. [ 646.318644][T17100] hsr_slave_0: entered promiscuous mode [ 646.334478][T17223] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2901'. [ 646.335318][T17100] hsr_slave_1: entered promiscuous mode [ 646.374989][ T984] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 646.386912][ T984] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 646.395429][ T984] CPU: 1 UID: 0 PID: 984 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 646.404719][ T984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.414769][ T984] Workqueue: events l2cap_info_timeout [ 646.420231][ T984] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 646.426130][ T984] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 646.445735][ T984] RSP: 0018:ffffc90003867788 EFLAGS: 00010202 [ 646.451809][ T984] RAX: dffffc0000000000 RBX: ffffffff891f5378 RCX: dd3e389b8edfd400 [ 646.459773][ T984] RDX: 0000000000000000 RSI: ffffffff891f5378 RDI: 000000000000004c [ 646.467738][ T984] RBP: ffffffff8a50ab15 R08: 0000000000000001 R09: 0000000000000000 [ 646.475702][ T984] R10: dffffc0000000000 R11: ffffffff8a50aad0 R12: 0000000000000000 [ 646.483688][ T984] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 646.491650][ T984] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 646.500570][ T984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.507161][ T984] CR2: 00007f2d609156c0 CR3: 0000000074c2a000 CR4: 00000000003526f0 [ 646.515144][ T984] Call Trace: [ 646.518420][ T984] [ 646.521341][ T984] __kasan_check_byte+0x12/0x40 [ 646.526277][ T984] lock_acquire+0x8d/0x360 [ 646.530682][ T984] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.535964][ T984] ? __cancel_work+0x254/0x2e0 [ 646.540729][ T984] lock_sock_nested+0x48/0x100 [ 646.545492][ T984] ? l2cap_sock_ready_cb+0x45/0x140 [ 646.550685][ T984] l2cap_sock_ready_cb+0x45/0x140 [ 646.555714][ T984] l2cap_conn_start+0x76d/0xe50 [ 646.560558][ T984] ? __pfx_l2cap_conn_start+0x10/0x10 [ 646.565923][ T984] ? __lock_acquire+0xab9/0xd20 [ 646.570773][ T984] ? __pfx___mutex_lock+0x10/0x10 [ 646.575792][ T984] ? process_scheduled_works+0x9ef/0x17b0 [ 646.581513][ T984] l2cap_info_timeout+0x68/0xa0 [ 646.586359][ T984] ? process_scheduled_works+0x9ef/0x17b0 [ 646.592075][ T984] process_scheduled_works+0xae1/0x17b0 [ 646.597629][ T984] ? __pfx_process_scheduled_works+0x10/0x10 [ 646.603721][ T984] worker_thread+0x8a0/0xda0 [ 646.608330][ T984] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 646.614671][ T984] ? __kthread_parkme+0x7b/0x200 [ 646.619621][ T984] kthread+0x711/0x8a0 [ 646.623687][ T984] ? __pfx_worker_thread+0x10/0x10 [ 646.628795][ T984] ? __pfx_kthread+0x10/0x10 [ 646.633384][ T984] ? _raw_spin_unlock_irq+0x23/0x50 [ 646.638717][ T984] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.643932][ T984] ? __pfx_kthread+0x10/0x10 [ 646.648521][ T984] ret_from_fork+0x4bc/0x870 [ 646.653106][ T984] ? __pfx_ret_from_fork+0x10/0x10 [ 646.658212][ T984] ? __switch_to_asm+0x39/0x70 [ 646.662965][ T984] ? __switch_to_asm+0x33/0x70 [ 646.667723][ T984] ? __pfx_kthread+0x10/0x10 [ 646.672307][ T984] ret_from_fork_asm+0x1a/0x30 [ 646.677063][ T984] [ 646.680082][ T984] Modules linked in: [ 646.684617][ T984] ---[ end trace 0000000000000000 ]--- [ 646.694128][T17100] debugfs: 'hsr0' already exists in 'hsr' [ 646.699888][T17100] Cannot create hsr debugfs directory [ 646.708804][ T5836] Bluetooth: hci2: command tx timeout [ 646.713730][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'. [ 646.726482][ T984] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 646.732842][ T984] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 646.734619][T17227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.754816][ T984] RSP: 0018:ffffc90003867788 EFLAGS: 00010202 [ 646.768361][ T984] RAX: dffffc0000000000 RBX: ffffffff891f5378 RCX: dd3e389b8edfd400 [ 646.776719][ T984] RDX: 0000000000000000 RSI: ffffffff891f5378 RDI: 000000000000004c [ 646.785082][ T984] RBP: ffffffff8a50ab15 R08: 0000000000000001 R09: 0000000000000000 [ 646.793262][ T984] R10: dffffc0000000000 R11: ffffffff8a50aad0 R12: 0000000000000000 [ 646.801406][ T984] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 646.809451][ T984] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 646.818612][ T984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.826290][ T984] CR2: 0000000000000000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 646.835565][ T984] Kernel panic - not syncing: Fatal exception [ 646.842016][ T984] Kernel Offset: disabled [ 646.846399][ T984] Rebooting in 86400 seconds..