last executing test programs: 8m7.195158734s ago: executing program 32 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000001c0)=0x4, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000040000000000000000000119500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x8080) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x48015}, 0x4048041) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010076bd7000fbdbdf251500000008000300", @ANYRES32=r10, @ANYBLOB="0c002bc07fb31afdafd6b600"], 0x28}, 0x1, 0x0, 0x0, 0x400089c}, 0x4000080) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r9) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fedbdf251500000008002c000400000014002b800500020002000000080001000200000008002a000100000008000300", @ANYRES32=r13], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)={0xac, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x584ecad2089f8404}}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0) r17 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r2) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r17, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) close(0x3) 8m6.985782003s ago: executing program 33 (id=109): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) socket(0xa, 0x3, 0x3a) r1 = socket(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRES16=r0, @ANYRESOCT], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 8m6.964774186s ago: executing program 4 (id=114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e2fd4bcfc63b5edbf84882d06c53bb0e55056f69", 0x14}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24004044) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3001000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 8m6.838417845s ago: executing program 4 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xfffffffffffffe3b, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x60}}, 0x0) 8m6.121302911s ago: executing program 4 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000fc0)={{r0}, r3, 0x8, @inherit={0x68, &(0x7f0000000740)={0x0, 0x4, 0x3, 0x1, {0x24, 0x3, 0x9, 0x2, 0x800}, [0x9, 0x4330, 0x8, 0x6]}}, @name="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"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000400001"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x30c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "91d5c1edb4de0ad59a42ddd0850d47f7f51106b0"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd35f}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x47, 0x3, "38e0f5b71316e9eb1a34dae166788cd9b23c3fcc5c546d4cb95d35e51ccd5799810d89d61eb209c6a446528af9f3f358384496b25d45f8abfff55f1a14636669c0d8b1"}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd92}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x30c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44054) r5 = socket(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000280)={0x7, 0x2, 0x9}, 0xc) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0400f9f4070009040180202000000000003e0000000800010000000000", 0x24) 8m5.812897764s ago: executing program 4 (id=120): socket(0x80000000000000a, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(0x4) (async) close(0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x200000000000011, 0x2, 0xd) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe6, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500300012800b00010062726964676500002000028005006b071700010000000c00220006000000000000000800040081000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) getsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000340)=""/138, &(0x7f00000001c0)=0x8a) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m4.513830518s ago: executing program 34 (id=112): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10) accept4$llc(r0, 0x0, &(0x7f0000000240), 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) 8m4.513605838s ago: executing program 4 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000007540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x7ffd, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_TO={0x5, 0x2, 0x64}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc041}, 0x804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000180)={0x58, 0x40, [0x5ab7, 0xfffffffffffffffb, 0x3, 0x61], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="635fb97ba8c14188f8ef787eba0b", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m2.953834102s ago: executing program 35 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 8m2.929482439s ago: executing program 4 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x2b, 0x6, "fe54be922e8b578ee56b08a6206da9f325d436f2d408caa027573c6b6f799a30338445b5843946"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}}, 0x0) 8m2.888253558s ago: executing program 36 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x2b, 0x6, "fe54be922e8b578ee56b08a6206da9f325d436f2d408caa027573c6b6f799a30338445b5843946"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}}, 0x0) 8m0.53520814s ago: executing program 6 (id=113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) (async) shutdown(0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) socket$netlink(0x10, 0x3, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r5}, 0x2a, 0x80000007ff, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="01000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 8m0.511660052s ago: executing program 9 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) 7m59.883735388s ago: executing program 37 (id=113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) (async) shutdown(0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) socket$netlink(0x10, 0x3, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r5}, 0x2a, 0x80000007ff, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="01000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 7m59.8365385s ago: executing program 8 (id=128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b60000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0xfffffffc}, 0x70bd2d, 0x0, 0x2, 0x4, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES64=r1, @ANYBLOB="41000000015001002000128008000100677470001400028008000100", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="9545f1a961bb9614dba82a9cf368d437f99f6342d3badec64be5f7f16489612e826fd8f362459b8e31ede882ef4036b0933350f45e469c70c7de1bc21e81d95967b0db882c4cd43a925569e61ed3fb771f80b9357080e4d0b0510b80a4a11b95a25e098e6e78e30d57df26a1a87571bfe4dec4004bf8911b74ef7b6cb6c3e5ba994d553a4a16233994b46d02d2d4"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000900010053"], 0xb4}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000100000001080000000009000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x101}, 0x80) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x72a, {0xc, 0x45, 0x7f, 0x3, 0x6}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000000c0)={0x14, r6, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r7 = socket$inet(0x2, 0x4, 0x929) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000680)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xb08, 0x4e24, 0x8, 0x2, 0x20, 0xa0, 0x3b, r8, r10}, {0x3, 0x7, 0x400, 0xffffffffffffbeb2, 0x2, 0x8000000000000000, 0xe, 0x3}, {0xfffffffffffffffa, 0xffffffffffffff7f, 0x0, 0x2}, 0xffff, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d4, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x0, 0x1, 0x3ff, 0x5}}, 0xe8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001900)={0x1338, r11, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x50, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "e005057842e702b90181585be93ae92d1a06f6ec571d97d79ef3c4aa2ab79d371eda54ef22b06aae211a5ad72073e44a372a1cfcbb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x1208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "58253689f1deaf65bdfc9c273e0517877f2ae95048fabe96c69ed9bf45cbc45e7d9f99ed0a7c5827a638af4b915b357b3a5ef080a38c68b09481df94907f30a746a59ed61406e83b6b192f021560cb2f0e10deec9b088ab5a969a360fb5f18d993898c97bd240bf5dbe9bc3c04b088a829fc7348ac8f579ba87949d81e7535fb3f1b7efeaa77756adc9da53b30dab6f4ee56b8406debd33f8307ce126546cb2c05916854124686748cd23d476fc9baed208db5b635e21237145de8ea6fae12d7c197d2e7999db2f30dcb235647ab11bf25283c86d4d57e785e5b773bba9fdadbb4235a0516bef53e7b3a2392556f79f91f27d29a39e182c7b172c2b13b5b50effb40f07eda613cb2b7de202b3238ba7e2401003223eab02d14bb02ec7692ad3228e760d8c560112bee1aa8949f1e9107407d675de11e66206972d6410007c6f8ca9682defcdde864d71a77fb1bc89fa83e983780d01aef9e1ac8908efa864f3d1b3744b741d23e5ab8bcacdd9f15e9b0373df309b68ac5e05f29d8a4e47d9b59015192b63483d0b936c2f964687f078ee66b3004fcc34ff5b8a6dd2c3c4ceacfc4a9e7849c177516f1d48f51518969d5f5a0b3b1971202be0de79afd30c4d83698324cfbf6e184d000bb6242e3bf2fe33e16e0a673db3c8aa7072e7db3a3ee11a4b057eb2ba0d8d469c4825d3b1a78a546b1195c7f964ab0ce92980a737cc9a89b2fd398a04d8466bbdbcfd89503c7689b45a160dbb9971db8bd57631234f1bb007d5de96d0d18ca330ba8590a0d694b26ed918b90639830054209cb450accb2229b5588d0c5689e4a866e91ee36048ced8880c9324514188a0cbee73b071ef8ce7521285f7f80ac9ab6f0ce94110dcf6704878cb1ff6804f9917bf1a864746650d02bfd850eb16b180e7469ff1af9d5b7f2d136439d34653b16578ae499264e338541440be5feba0fe8a9f38c087cf9dfa395828d27cd1e7f94358bb16963fd5e813870d5a208dea8c9249faeb96c01330c7af98a4e7d2c494a9380b818bb6ffebc158b1de94619274d435e576a98dd685cf1c4d6ffe05cdb38d7e7a407477d36af052ca2050bd7830bda07d42d69e93651e6087ab28499c3a3c63e86a7db88006d2c3bfd8eada5e8db139e0e24f417e33c0331bfec857625ab4762f9e4e91e6f80f3a84985a1136b28d55f3abe03ecdaf4368f69528d1a110d37aaed3f2600ccdd075b2b6ff8ccf7aa38f01ff58643f9cea745130fac95679ca36660414436b7c8dc4dedc32b571ea2261b10396cb5e3b82d0c1bec2f1bdeee4f7571c512c46c3ad0ce142b010b7fb3117352834164e66b06125ffa8418829f76a479dc459730245ad754cb8285db2c71d4a09a1a9a3b518beefb9a836707806d091d4a126e52c6c2af7c5a08b4ee43aefc00bfa7a1da2ec0124e6ddffec005797fab42395d874fe08edb4b15d1306b8a28700edc3c1dea609c3ea5c318bf1d090bccac64011b824cdce9fe83855425e6aafeb68b199fe013a0173a1955ac1658c742fd3698c83b272fd197c0ef3ba708827d718a2fcf88dc723f94366fa6033348db03679e1cad8cd7dceeb848f6e0e5cdadb4a8c1456e3ee314c28cb08a4e0d4b2511b186c056b815522bdae0a010f6ad74ca8d6a2349536db085f4309a286d6c25ddec8e503840fed2848b7aa14d803dac7552004cec04031329448c183e9a4c7b717c10da07946592dfa61ecf726e0ab587abad9cb8b10cd6bdcf7b17571e1a3815006a6b664f11fdac069b767bea6d23161fca6024fd054cb1c043ca46cd9295260edb261c73ccf74c27eee669f90687273c19001dd16db5a86a956665f63c91d30b3abe565b353f46836ce1e4bdb8c438ae970e967cd72a672acccfe8a69ec3b9258ad5b56b318a5d5341a2ef75b032dbda9ef5b9fffe2eb1f49c27128fad89c5eec1ded5b47f774a6cba7b800b087545ec9df002b6078a61877cecbd1f6c74883da82e72a93b72c267748b9dec1c6f192895c3c4887701d7a2ff8ce872ef925de9fceb17f19df352985f597087a72a28cac78286c7a950609f9c87d9f86d7dd2761ede54472f720bf63b36502fb94202b476de824da7753f740ebb73d9cf4cf9bd637579069fcf0115ee1d3d722e54a4cae42299736afe2dc7e58ac5f15b3335da8b0530f311314ebc40f6dcb92016d78bf4462c2ed2c67b65aa8e5d0d73e2cdbf6c3e5af42539382e45c2d73997d6ab6e468c494556d0c2ae8aec4fedda02d7a6015dd046f832321b190f7ee4a65e6a5a00b996c7ba9e695b13461c6f20f36c3862edd648db4944832407b23b00bb65020cab3f72f3253b632cd8848cd7b4d94708203cdf9f050de6dca2d2671d2200a2dc884212c0758b17148be4652f19a6b2f1d0ebf35a0fc2c6dda6956aef611d8db885c789303129c13e628db863ab92c7e6740e5da49809a9957d6da6a5212593bb8c1c385cf2febc8089449b55caf48875cd96979fd34f20151eb2204d99d963e1acc9e6b624c332af168ba9980b40321b1d639746ef89a769330a039dd1853527780a33073b75dbd47e9128359193e765fcda92c1b26d9a341dfc67c3fa8e7a5c25f067cbe209b4459ce0f272acd716d9addc5b4203d65e2406d7bd10f022a106265bd693aaf276e55fdd117acd6c45801c2c63bf07c558427d4022f7482f86387fbf44fe84b4d9e98afdeeccd4c6a0c0620674b13aa8a74510953d51106371559f9c130a0730dab6c549702bd6488a7892f4739d1dc9ccb9030095970af444a8aad0e9210b035eeef03642f3b450de6c8e3a47007b9ee43dbf6e952ea8972fb8e92a15e8051f8595529dd91a2e5ecdc22d3557aa1f5a73471e76600b6ef3894c39550e9976754eacfd90a1b3aa82d54ef89d66d908bd238c1f9e32d4c0d508b4a2e40de8a68e262e422b77806f48a3137bc039a61231b11125ad4a6b374609c6e749820700267b56a7f6cbb4bcb8f1f0d52b8f36cdf7f7d2820f0f461677bb39722047596fcabce8eaf733f046cbaea737196c07e266326dc119fd275258608cad4bff293b6c6fe69f8bb305c4089cc49373e47d36b2f99bc1c394c578420d2d0aa85c4474e8339495fe6f3f28b664cf25e595453d224aea35aaefce953148430e5aaf120679dd13d5732188034256327ef3ab33658f2765a02b36fd59b75d89ab002d6c3cdecabcc24c454a08efa050f4c9ca1bf5ecfc2767b9bafb1ad03b560440f6cd36366eff2c83a679b121e45a372caf1d5b3c53f541678003d0373b5a1681ce9803cafc8619d802dd6688bc7dc30089a5f14f23a39be8d199a503033030b41d2ca5cfb13a56c0021560bfbbd75c7fe85557203b9a08c843658d209a9db9bbe2b4faffa70e5d2ca71b874893d89c096636e21734eff3ed9405767bf226b16b20a77cbd3bb0feea4e8fba3abe5d673f0cb196d6a18ce2074ead933f64c1b5fa3fc786eaf8967cb335419c8e1cba0965eb601bd20d396c520e6062cabd8b2afc793f38b308a9c74625bd3adbb2646f721ab6d85ebc5a53f86a69b7897bd5f1c2f130e73f78b2628ff80bc4fa77c0901fb16815e424db51ff9d55ad7a453fec08d3d14ccfa3c170d7e59143a548cd4b78dd149703f07100c11ab06df6c98f2b214dbb20b92b432c835b3553afa3ca955e824936e707bcf4ae07ab759640a6a8d9e88fc577e576407503fff773c63166885e3c861916cfb1b6cc7108ea0cf42d6b185fcaa5cd392baa7ceee7636f923b1f94eb711e8bc7ad900168f18ffd35bda9f10dc50845761a6b6e044d1a8f6ee7eb1233d92dce605e495685d6c401a5a6e9460dd8122c4883adbb0a66852f39ed44310cbf7ebc7ba68bf94cb957c78edb50be5a2bd7bbf7319f43542b1071f5a497035ba66a21c9c3c56d77159b685fb06f9b552348445ce507fd2f71544e0f49d64028e3e1db3975f754704dd1278268ed6326514878b9d9c03fc50c12496a25824e10f496b9d86c60a67ac38ce85728fa8be38e7416c6e521491ef3c4294782d754b34b481ecc6f6281b5ecb0394ecac2cbbf2800a3c90839f80f9a16e6356f73f5dd7bc19e4c30fb701ed033c9cb715c569573f418435358307d92ed444321dd88739c1e9b0ea1abad4d2523be861409b797b56da4a5a0af6d67f0ad0cc135474ee35ce9ace15eeb041408514ac0220417b7028b682421615fb645919c5e258f3e9e2e13ac3411c713482b0023e9f5cff92c0c668c1aa74da680954c3063984187a1715fc6aee5c6a4b9d01d372261c53f8018e11b20b4125428b2d3f8cf9fbc21322bc4d5276333b4916ed515030a889ec712db7857edab39f0ff698c31e7534d7ff95e82e40be721a190c99d73679ec186c4fc40811f911de15676f057c942b063424bcf6abe4f8a01a76f991b0a73073cf2c4fa815b676e45af6470c96e7c2be0a34cdcf4c9a58ea689df55d33e424441ad1f830f24158db4c3190114434f71ed98636619046e089e745c7c70656f99a82dc761c792fce101fcc9ed53e49753ee7fbd299854a75ae3fd3154b49a1dd6135a415fed5662ebfc87ce82b14881419dd0195b1adbedd268a05286c9c93dee0944fb4dd7df8eb5fbac9a925f0889ba6a4a982e39aaa8b698109281ee0d8a4f4caab7d5e11954caf1d4608c1f0d73f918aee741796a0b972bedb3799fb8e6caf944570d58d51f3e1a179e0f03483b955d45cf561ee3e6f8f348c6f86781a6ae7856b456b3844f3c4cb201bf420b6bf967f0e6c604478c08337dbfd5a1c76597d3ab87a7b471bb7ffc55f67ee3f14b9bea1ecdfe7079b0d8bb17d7e6d9b6d2a27c281c05b5b5086b9ab8d34a7b558d5339d867f8ef70ca905140ab71290ece33ff61af294b3a4e8cfc629da4ff47ba22e4f14c93d02a13b2ceb23518b816af577bee228732d24cb7f5f9e467c3278ffb52d5f98e8fe9c780bc2f5199f40d9e16b492e95cae720b6b6555e595a7a751b18a27df0aee838ddbdb1e6a21a768c02170d8ef3dcfe91810a7451d53b7355b6dab35569834cd1e68d3431f20ae24252afca3170c63dac9c1ddbc89119e2ef784f80df08c1e1fe8686a1b3a8704d34168a1c4d2e9fe6c89678d40792a90a9084820d71d623b7928090d6aea2420084aeb11490b067a169cb5bb07758e755ee897c39880ae0be8264deed26bf9896b8f12aec69725eb1cb3a0d725a408ce2c04519bdaaa01119dd6aafb645646b2191713173519e917808eace6c731033b6cbf32754a3019e79bc550346cfcb9ae734ef715a8eccdef389859613223ff87344190fac7cb1750d861f340d54fb7a5066cd1a8715809b2a5777b43d53165dd437f8baf17f902611c7ba9dfc2d255fa1740fade5289a79ceb648ed8a40cbd063fbbaea02e0288917643fb0ed899d2eed40b6fc8ed9544ef96b81af0a1c5d0693065c3fb16fe32e750ad31622f4353dadc1d01c8f45ac86badd4e31405ad99908e8dacb339f30c93a722217820c167371bf855f2d7adfe7c8f441add6df609319302629af98a857085aec7a36e8015475b28e1dc1ba5d8832a2741648de16e42c401ed587e1cb608d114a6e99e1d0c8975da7ca850305e8560d9235dfd2499511d137f04fdfb1d30a489c229a69dd2caa00493ddfdf2e58ba31ac1a52aebdfabf90f3915e3a65c479f1054713818fcb559d7bdb817cc80cd5943fcac141fcb0d3259a5aa1069477a7d35c8bcef465b74ac777eed5e41443db0a9780c7d66d19cb53a24eb2ae55ad2b09d33400ebdc4d3b596379dc3b5345ade2d38f5f23f5df9"}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "252db617744a413bbade07461a55e472ada4f3bb138647c5ebfa2c8da729a8fe484cf988af027e26550250b0fe84a276c2f5abb7c9679574799d9388a48b4870e1cb9af8175dfc8ea52d56befe06b105ee6039478c832d801f443fdf21eecda8c4f86c92915c9f14e641832da2b12a671a239239a2e663c8aeb592bd"}, @ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "ad69e78d472144a19c0825c810047634cc5a44c99f341231b338c72b5dacfdceb1f108931124744b3a0cbdffad099279fa40e77a1640e728baab73976318dd1da3043f61025bd1e4254671dbc4f980c8082a1c90eef282c734deecc91e7828e00200dde408361544ebac50cdd8f8d5926b0afe65640d44f9154591fe68da060cbcd16e0d45aae563664f78cf9ccb2fcaa5325a4a7ba718fe5d93f5324ee7d4c9209d9bd6589cc0023a266cfab3509b33b18761540e3c2c94beff512c872a083838a7c6a20167624ea9025192208d5f7884b4e8b923ccf7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7a36}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "cf2fe0dba437fbc245b4b1c2a8ca00c9aee8afd201c42ffb1bc84655845152d8a3fea31e539675fbe293fdb34ab47c6e599414e3d1363027f5f25595758066384c28643c1c6311638da12a859822ca5c023653c3c8c19d3ef7c7613c859baceff8a54a6fd6e1292551ca53c22dc1bd23cbc7bceabb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "0cfa8939e445adff6def4a91d61bc575dc8054739324847398a9183c2a39753c5f1296df0d224cd1e4c86f12d310e22af59c14e2bc85e666719db9e25e61e01e0746120e45ba168ff9ff29f4deabff1cad6f9e87b188e0fa22f1f081b27b8789096a501591e10dfa7c5125bd5f3bf625ceb48252662ca6790f1c4636226893525373f842e390c9f4332643e32a7fa996a204552441f6ae436e172a3369f9bb4e7b83e28b952e9cba874ff4aa5cc1ea66eed98fa33786a39d2f888d4e"}]}]}, 0x1338}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000800) 7m59.825980568s ago: executing program 38 (id=128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b60000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0xfffffffc}, 0x70bd2d, 0x0, 0x2, 0x4, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES64=r1, @ANYBLOB="41000000015001002000128008000100677470001400028008000100", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="9545f1a961bb9614dba82a9cf368d437f99f6342d3badec64be5f7f16489612e826fd8f362459b8e31ede882ef4036b0933350f45e469c70c7de1bc21e81d95967b0db882c4cd43a925569e61ed3fb771f80b9357080e4d0b0510b80a4a11b95a25e098e6e78e30d57df26a1a87571bfe4dec4004bf8911b74ef7b6cb6c3e5ba994d553a4a16233994b46d02d2d4"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000900010053"], 0xb4}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000100000001080000000009000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x101}, 0x80) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x72a, {0xc, 0x45, 0x7f, 0x3, 0x6}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000000c0)={0x14, r6, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r7 = socket$inet(0x2, 0x4, 0x929) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000680)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xb08, 0x4e24, 0x8, 0x2, 0x20, 0xa0, 0x3b, r8, r10}, {0x3, 0x7, 0x400, 0xffffffffffffbeb2, 0x2, 0x8000000000000000, 0xe, 0x3}, {0xfffffffffffffffa, 0xffffffffffffff7f, 0x0, 0x2}, 0xffff, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d4, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x0, 0x1, 0x3ff, 0x5}}, 0xe8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001900)={0x1338, r11, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x50, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "e005057842e702b90181585be93ae92d1a06f6ec571d97d79ef3c4aa2ab79d371eda54ef22b06aae211a5ad72073e44a372a1cfcbb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x1208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "252db617744a413bbade07461a55e472ada4f3bb138647c5ebfa2c8da729a8fe484cf988af027e26550250b0fe84a276c2f5abb7c9679574799d9388a48b4870e1cb9af8175dfc8ea52d56befe06b105ee6039478c832d801f443fdf21eecda8c4f86c92915c9f14e641832da2b12a671a239239a2e663c8aeb592bd"}, @ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "ad69e78d472144a19c0825c810047634cc5a44c99f341231b338c72b5dacfdceb1f108931124744b3a0cbdffad099279fa40e77a1640e728baab73976318dd1da3043f61025bd1e4254671dbc4f980c8082a1c90eef282c734deecc91e7828e00200dde408361544ebac50cdd8f8d5926b0afe65640d44f9154591fe68da060cbcd16e0d45aae563664f78cf9ccb2fcaa5325a4a7ba718fe5d93f5324ee7d4c9209d9bd6589cc0023a266cfab3509b33b18761540e3c2c94beff512c872a083838a7c6a20167624ea9025192208d5f7884b4e8b923ccf7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7a36}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "cf2fe0dba437fbc245b4b1c2a8ca00c9aee8afd201c42ffb1bc84655845152d8a3fea31e539675fbe293fdb34ab47c6e599414e3d1363027f5f25595758066384c28643c1c6311638da12a859822ca5c023653c3c8c19d3ef7c7613c859baceff8a54a6fd6e1292551ca53c22dc1bd23cbc7bceabb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "0cfa8939e445adff6def4a91d61bc575dc8054739324847398a9183c2a39753c5f1296df0d224cd1e4c86f12d310e22af59c14e2bc85e666719db9e25e61e01e0746120e45ba168ff9ff29f4deabff1cad6f9e87b188e0fa22f1f081b27b8789096a501591e10dfa7c5125bd5f3bf625ceb48252662ca6790f1c4636226893525373f842e390c9f4332643e32a7fa996a204552441f6ae436e172a3369f9bb4e7b83e28b952e9cba874ff4aa5cc1ea66eed98fa33786a39d2f888d4e"}]}]}, 0x1338}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000800) 7m59.821205551s ago: executing program 7 (id=123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4b1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r4}, 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) connect$packet(r1, &(0x7f0000000140)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @random="dd48f87024a3"}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 7m59.737814594s ago: executing program 39 (id=123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4b1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r4}, 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) connect$packet(r1, &(0x7f0000000140)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @random="dd48f87024a3"}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 7m59.737694621s ago: executing program 40 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) 7.294570955s ago: executing program 3 (id=3149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x20, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0x9, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44040) (async) socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfca) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) close(r6) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) close(0x4) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x4a040000) r9 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0) (async) writev(r9, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002940)="59721f1223e8d1f829bfa3e27a317bdab2973149c7b70b981e5e3dbd2a155a52d656b4905bdd65efe73e0d7896bd62023c88703efa4f3caea27440771a984b72af9c1b77c769c079910affdf3a6062f4e02dab52e170341db4f21427ceff61104fb0733ad13a4eabd6", 0x69}], 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x19, &(0x7f0000000140)=0x6, 0x4) 7.058514129s ago: executing program 3 (id=3152): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {0x0, 0x4102}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a73797a32000000002c0004001400010002004e24ac1414bb00000000000000001400020004004e22ffffffff000000000000000064391be9"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 6.885645537s ago: executing program 3 (id=3154): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000206050000000000000000000000000005000400000000000900020073797a30000000000c0007800800064000000000050005000000040005000100060000000d000300686173683a6d616300000000b6099dba2ad379a0a509ae5570bb00"/111], 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 6.706702494s ago: executing program 3 (id=3155): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000000)=@buf="b08c01372c6521122e6bfe9d39321ce44f4e0d01c28c6a5baa89a51a035f8d65124f47052d6578dd6e1225d3d50a8e53b9b435724e54f9195b34495047c588b5b7e9f5201a573f69d7b6b119fc0247b322735dd5b08799d9170713f03e448eefd500caba0100630ed08b7ce40ab0b6cf533b772332a1b3775f8006", 0x2}, 0x20) 6.672832838s ago: executing program 3 (id=3156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, r5, 0x20, 0x70bd2f, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_NAME={0x14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x894}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x22020400) pread64(r7, 0x0, 0x0, 0xffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000001840)={0x4b8, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x388, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x5}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x1}, {0x4, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x3, 0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x3, 0x4, 0xc, 0x3, 0x12, 0x12, 0x48, 0x16, 0x6c, 0xe, 0x18, 0x24, 0x48, 0xc, 0xb, 0x0, 0x0, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7ff, 0x8001, 0x1, 0x7ff, 0x400, 0xe, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x48, 0x12, 0x5, 0xc, 0x5, 0x2, 0x2, 0x48, 0x30, 0x16, 0x11, 0x12, 0x12, 0x1, 0x2, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x7, 0xcbe, 0x7fff, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x200, 0x2, 0x0, 0xd, 0x1cf4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0x4, 0x401, 0x2, 0xa, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x1, 0x0, 0xf, 0x5, 0x9, 0x200]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x1}, {0x3}, {0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x5}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x5}, {0x3, 0x8}, {0x2, 0x5}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x7, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x5}, {0x4, 0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x3, 0x8}, {0x7}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x3, 0x7}, {0x1}, {0x3, 0x4}, {0x3, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x5}, {0x6, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x6}, {0x4, 0x6}, {}, {0x2, 0x4}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x7, 0xa}, {0x5, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x2}, {0x5, 0xa}, {0x7}, {0x1, 0x6}, {0x5, 0x7}]}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xd076, 0xff, 0xb3, 0x6, 0xd, 0x4]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0xa}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x2}, {0x1, 0x6}, {0x4, 0x8}, {}, {0x0, 0x2}, {0x2, 0x8}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x2, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x2}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x0, 0x2}, {0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x5}, {0x1}, {0x2, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x3}, {0x4, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x6}, {0x5, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x5}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x6}, {0x7, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x5}, {0x7, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x8}, {0x2, 0x9}, {0x2, 0x8}, {0x7, 0x8}, {}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x1}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x101, 0x5, 0x7318, 0x2, 0x453, 0x2, 0xddd]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x3, 0x6c, 0x4, 0x2d, 0x1b, 0x36, 0x36, 0x16, 0x9, 0x3, 0x30, 0x18]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x5}, {0x1, 0x2}, {}, {0x2, 0x4}, {0x1, 0x4}, {0x4, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x4}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x4}, {0x2, 0x3}, {}, {0x4, 0x2}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x2}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x9, 0xf, 0xfffd, 0x3a, 0x6, 0x101]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x8}, {}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0x9}, {0x5, 0x4}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x2}, {0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x6, 0x2}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x6}, {0x3, 0xa}, {0x2, 0x8}, {0x4}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x4}, {0x3, 0x4}, {}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0x6}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x1}, {0x4, 0x9}, {0x5, 0x3}, {0x4, 0x7}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x2}, {0x7, 0x9}, {0x5}, {0x7, 0x9}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0x3}, {0x3}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x5, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x2}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x17f, 0x7fff, 0x2, 0x4, 0x3c8, 0xfb9e, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x6}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x6}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0x60, 0x24]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x4, 0x5, 0x9, 0x12, 0x16, 0x6c, 0x48, 0xb, 0x6c, 0xb, 0x30, 0x9, 0xb, 0x12, 0xc, 0x30, 0xb, 0x36, 0x2, 0x24, 0x1b, 0x12, 0x4, 0x1b, 0x6c]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1c4, 0x5, 0x5, 0x5, 0x3, 0xfffb, 0x0, 0x6]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb2c6, 0x10, 0x400, 0x7ff, 0x8, 0x0, 0x4]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xfffb, 0xfffc, 0x8, 0x8b1f, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa, 0x8000, 0x1000, 0xda3, 0x3, 0x0, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa, 0x3, 0xfb8, 0x2, 0x401, 0x8, 0x1]}}]}]}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x1144, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x1133, 0xf2, 0x0, 0x1, [@nested={0x1038, 0x13a, 0x0, 0x1, [@nested={0x101c, 0x132, 0x0, 0x1, [@typed={0x8, 0xc1, 0x0, 0x0, @uid=r9}, @typed={0x4, 0x7c}, @generic="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", @nested={0x4, 0x14}, @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x6, 0x12c, 0x0, 0x0, @str='*\x00'}, @typed={0x8, 0x8b, 0x0, 0x0, @fd=r2}]}, @generic="83f1577d"]}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x1144}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.529814427s ago: executing program 3 (id=3157): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, 0x0, 0x0, 0x2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bind$l2tp(r1, &(0x7f00000000c0), 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9005bec6886dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendto$l2tp(r1, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) unshare(0x6a040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'nr0\x00'}) 4.677889562s ago: executing program 0 (id=3178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e7c573a38dc01862296b6a923710b76653f76b3d3617d8f02963b30e4cd1ec4"}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) pipe(&(0x7f0000000480)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c"], 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x9, 0x1000000200000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r4, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x36, 0x0, &(0x7f00000003c0)="c1188e99b95d02ff4284860186dd5d383683ccda953c7b292815a02a0ff89e41e9942a2ef100771f87f75c46f8e2f4adb22f333bc814", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.906699461s ago: executing program 1 (id=3185): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/192, 0xc0}, 0x8}], 0x1, 0x20, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0xb7, 0xa}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000c7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000bab704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0xb4, 0x5, 0x400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/56, 0x38}}], 0x1, 0x12141, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x1) 3.766016769s ago: executing program 0 (id=3187): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) syz_emit_ethernet(0x27, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x88ca, "c82bfb8f5713876856022cd264abbe4b98"}}}, 0x0) close(0x3) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x12b7c000) 3.670572059s ago: executing program 1 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) connect$netrom(r9, &(0x7f0000000200)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000440)={r12, 0x21, "31965b97fc35298672b2d3466c9676f7bd1c90269883a52499406160799b566a93"}, &(0x7f00000004c0)=0x29) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) 3.575313274s ago: executing program 1 (id=3190): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff00000000000000001801000020646c6500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006fbd00008500000006000000850000007d0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r0}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) 3.530566407s ago: executing program 0 (id=3191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/4126, 0x101e}, {&(0x7f00000003c0)=""/91, 0x5b}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x14022, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x28, r4, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100001800000037d0711d93bf4d510000000001505f6d1055a3c1d4e97c62a2bf4e6e0c000005090000000600000003000021000000000061302e5f002eab0000000000000000452c0f1c8612309f1f0a7d68e63ef5a19da66c06860d95f5459fc5ab62f4e9dee1182829a3cfd418a52ef17764dd18ac6e87d069907635417218ef5999b60610dacec3ac002c1912c46dc7677b4c6e9dfb5236a16872e3b317b3de3b7510879951ff220e54bc4c337486f9acf06ffa3ada38bd4c055707b72652b61bfbdeca23997e5a05be707d68f33817fc0fb2e401b25d0590cdac90"], 0x0, 0x39, 0x0, 0x1, 0x4}, 0x28) 3.398531359s ago: executing program 2 (id=3194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x34}}, 0x4040084) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fedbdf25050000000c00060002000000020000000c000600020000000200000008000300", @ANYRES32=r6, @ANYBLOB="d6e57e4305e66a3980f1980ee598d3049e8290d065ee96914105808b01755608e1ffdd0bd4ae060c6e533c7a4b7f6ddb"], 0x34}, 0x1, 0x0, 0x0, 0x20000099}, 0x81) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200003e000400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff00000000000000001801000020646c6500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006fbd00008500000006000000850000007d0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r7}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) 3.382539695s ago: executing program 1 (id=3195): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r9, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) close(r9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRESHEX=r8, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) write$tun(r10, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 3.13716413s ago: executing program 2 (id=3196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x80) 2.942632363s ago: executing program 2 (id=3197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) write(r0, &(0x7f0000000040)="fc1bbb4a19a7f1a13edd490dbdff5bd81aef3dee8029c9e92fe9f2c3bb83fb952759e265fc9381fb", 0x28) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x4c, r1, 0x200, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x303, 0x6, 0x7, 0x7b, 0x63, @random="06f80c3b54a0"}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x40000003, 0x1083, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) 2.916142574s ago: executing program 2 (id=3198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) 2.765321424s ago: executing program 2 (id=3199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x2, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01022cbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005800202aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) 2.625956498s ago: executing program 2 (id=3200): unshare(0x6a040000) unshare(0x44000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800030326bd5902fadbdf2504000000"], 0x14}}, 0x40800) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @mcast2, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) listen(r1, 0x7fff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x9, 0x3}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x40ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r8, 0x0, 0x8000) 1.344894484s ago: executing program 5 (id=3201): r0 = socket$igmp(0x2, 0x3, 0x2) unshare(0x2040400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000880)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x870}}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3fe981d000727e58c25946402c863601c6290db39f9ecce2310fcd4a07ec39c96b63585968d063c0cd1787c91842268bdb13268af22d5524e7ed04cf668b43d6f7c5d6f6ad86218d885daf832a8757154938880fd2acaab5157993d2938c0d88ae1affe57bf88d712f036", 0xaa}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) ioctl(r0, 0x3d9a, &(0x7f00000000c0)="6d77be6984bc02837101c24e417f35e792e5b6bdbfe49f280aa4d63e3180bbdd9af9c4744599027b2a0224ab19cb51fc98bbac825acdad91f136fe323b4f4e61cdbda5215a0c38a116341516b0ce599ba381a7b3d4d80a6b535c2ef42b3a66f79fd136d2bed9e30be5c55c08b419ff9b8c0a8c9fdcd53822aeb2efc3d28c3130523b9b0063e9233209a5d2db2728") r7 = accept(r3, 0x0, &(0x7f0000000200)) setsockopt$inet_int(r7, 0x0, 0x15, &(0x7f0000000000)=0x2, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x33, "b34208b48e9af93dc6073c28c2f543e9e2d9f0abd57849145749d59d842b21aeb016a6ea1bc0384671e134f8e12ab57a5f53b0"}, &(0x7f0000000040)=0x57) 1.291243911s ago: executing program 0 (id=3202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000b4c47a19bf73000000000000bd60b576f1c17f24d7a6713f2108823a2e48ee6c6b460b085231398c1bb6d194ecf7e7ba8331b7e2c12e7b3c7a2ef4938fc6d8e3da766173b7972c63826a8af9833edcb8aa230b32361d11f0ce76086f58f53af3d0686c738cdfb72d16183a48a85dd1c9d2d2d3abaff11cea490f7a49d45a9dbf6e62b31e3f56461f2279d3c57f1f8235a070a05b9d2be218c246b922bbf43bc531766d9b4771c705220c8c8e4f085a80f4e0e33fa008d974b7de83c9a9a6309200000000000000", @ANYRES32=r1, @ANYBLOB="00082cbd7000fcdbdf25280000000c0005000203aaaaaaaaaaaa0a0001007770616e330000000a0001007770616e300000000a0001007770616e3000000008002c000000000008002c0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000000) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r3 = socket(0x2, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000c00000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="60075c95e01bfe03d06bd26f30102ae4df0a8537d33d9ad105ebf83bd5785120bc793321b22a982373d9243814e732a94414f1e4476e65e1781ab29450f7101f918ee687f8afe8b4a3863a82750077712ca7dae8e083c489027309a6ef1b998b5dc9248756613afc1779ebc5330013a6f610c9bffa53dd61557c68ca904e11af0456dfa8159d7edc320310ebabcd2f1bb34f4ab1aba08ca1eabd0451ad02fbdec41e36c296c6b21350bd8336054ba757d33a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd79) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x8503}], 0x1, 0x0, 0x0, 0x0) close(r4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x6, 0xa}, {0xb, 0xfff2}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x20800}]}, 0x4c}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 1.226844812s ago: executing program 1 (id=3203): unshare(0x22020400) socket(0x23, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) 1.092570613s ago: executing program 5 (id=3204): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff00000000000000001801000020646c6500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006fbd00008500000006000000850000007d0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r0}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) 828.95414ms ago: executing program 5 (id=3205): socket(0x15, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 587.869111ms ago: executing program 0 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd27, 0x0, {0x3}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfc000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b80)=ANY=[@ANYBLOB="7c000000100001002cbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="1301975784800000140003006e657464657673696d30000000000000140014e70900366772657461703000000000000034001680300001802c000c8014000100ffffff81"], 0x7c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="01644d5f", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c00028008000400ef430000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket(0x2b, 0x80801, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="24cdd000000024a881159c1f1413ecbaedc34d8c01ccd7e9c72881cd8dcfcc88ee7a28b538f1657818c4768acf0ac354bdd9e5824fb0b7a27b888427c4860fcd6aec9e6117885d03508b71284ebfae84e2cc41d425fb8ca54c13292e6202d29028a653bd3ce4411fe11b4384852ec5893b8ceb51a69a0ea0f4da2d803fbe2df6c72046c36e4f21987e6a8134f4e2dfd67151f4f2e83d713a777448e1d4ba4e49ca7c65689d3f9003d6ddd36bdd2181daba2307eae2adc2d90e8af6d68effd15594364149c6bdd7dee776b43955830da141a047aa88b7e00459403b41a2dacd", @ANYRES16=0x0, @ANYBLOB="000027bd7000fbdbdf250100000008000100010000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069701c7693bbea80b4787d36677265746170000000080002800400120008000a00", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000000e083503a65382252caf5423e8840b95866cfd0b299ce05c09b1d4e6a8d5241f796cd541253c7132650b39af42c78045d39271620fc74aef1bd1d6365d5a073481d0be07c97b2770d2b9366faa159102190f1187b6f1896a3", @ANYRES32=0x0, @ANYBLOB="46060900000000001400350065727370616e3000000000000000000008000a00", @ANYRES32=r13, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r14, @in6={{0xa, 0x3, 0x9, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r15, @in={{0x2, 0xffff, @empty}}, 0x0, 0x2000}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000440)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x28) 486.619236ms ago: executing program 5 (id=3207): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fcdbdf25060000002c000180080006000100000008000300e0000001050002008000000005000200eb000067a07ae295780008000300ac022aaa0500"], 0x48}, 0x1, 0x0, 0x0, 0x200000c5}, 0x20000010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x27c, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, ')'}]}, {0x54, 0x0, 0x0, 0x1, [{0x5, 0x1, '\''}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, '*+{,'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '+'}, {0x8, 0x1, '\\!({'}, {0x5, 0x1, '+'}]}, {0x5c, 0x0, 0x0, 0x1, [{0xf, 0x1, '@\xbd!/-${^%\\\\'}, {0xe, 0x1, 'syzkaller\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x97'}, {0x5, 0x1, ']'}]}, {0x18, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xc0, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x6, 0x1, '%}'}, {0x4}, {0x8, 0x1, 'nfc\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '){'}]}, {0x28, 0x0, 0x0, 0x1, [{0x7, 0x1, '}:&'}, {0x4}, {0x5, 0x1, '\''}, {0x8, 0x1, '\\!({'}, {0x5, 0x1, ')'}]}, {0xc, 0x0, 0x0, 0x1, [{0x4}, {0x4}]}, {0x3c, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '*+{,'}, {0x5, 0x1, '\x97'}, {0x5, 0x1, 'S'}, {0xd, 0x1, 'mptcp_pm\x00'}, {0x4}, {0x8, 0x1, '@(,]'}]}, {0x24, 0x0, 0x0, 0x1, [{0xb, 0x1, '!]!-]\xcc!'}, {0xe, 0x1, '{\'-}:[:%-}'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0xc0, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0x8, 0x1, '($&%'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0xc, 0x1, ')\\)]\\&,)'}]}, {0x4c, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, ']'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, ',.'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, ']'}, {0xe, 0x1, 'syzkaller\x00'}, {0xb, 0x1, '/*^:{@.'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x27c}, 0x1, 0x0, 0x0, 0x880}, 0x800) 383.458575ms ago: executing program 5 (id=3208): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r3, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r5, 0x615, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}]}, 0x3c}, 0x5}, 0x8004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x106}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x408c1}, 0x1) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r6 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010101}, {0x6, @local}, 0xc44e9c840b6a76a8, {0x2, 0x4e22, @rand_addr=0x64010101}, 'erspan0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x400, 0x10}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000500)={r9, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 153.868447ms ago: executing program 1 (id=3209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 28.743012ms ago: executing program 5 (id=3210): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x1, 0x101) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf3e5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x2b, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000380)=0x6) 0s ago: executing program 0 (id=3211): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC=r0, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac10247ad107", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d1ced4905c1", @ANYRES16=r0, @ANYRESOCT=r0], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x1, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0xfffffffff0000000}, 0x18) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r8, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x7}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.2.2208'. [ 433.657276][T14643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2209'. [ 433.878883][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2211'. [ 434.608386][T14654] lo speed is unknown, defaulting to 1000 [ 434.667329][T14654] lo speed is unknown, defaulting to 1000 [ 434.722154][T14686] FAULT_INJECTION: forcing a failure. [ 434.722154][T14686] name failslab, interval 1, probability 0, space 0, times 0 [ 434.768952][T14686] CPU: 1 UID: 0 PID: 14686 Comm: syz.3.2218 Not tainted syzkaller #0 PREEMPT(full) [ 434.768984][T14686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.768996][T14686] Call Trace: [ 434.769004][T14686] [ 434.769013][T14686] dump_stack_lvl+0x189/0x250 [ 434.769043][T14686] ? __pfx____ratelimit+0x10/0x10 [ 434.769067][T14686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.769087][T14686] ? __pfx__printk+0x10/0x10 [ 434.769120][T14686] ? __pfx___might_resched+0x10/0x10 [ 434.769148][T14686] ? fs_reclaim_acquire+0x7d/0x100 [ 434.769184][T14686] should_fail_ex+0x414/0x560 [ 434.769218][T14686] should_failslab+0xa8/0x100 [ 434.769261][T14686] __kmalloc_noprof+0xcb/0x4f0 [ 434.769284][T14686] ? kfree+0x4d/0x440 [ 434.769304][T14686] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 434.769331][T14686] tomoyo_realpath_from_path+0xe3/0x5d0 [ 434.769353][T14686] ? tomoyo_domain+0xd9/0x130 [ 434.769381][T14686] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 434.769409][T14686] tomoyo_path_number_perm+0x1e8/0x5a0 [ 434.769441][T14686] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.769492][T14686] ? __lock_acquire+0xab9/0xd20 [ 434.769547][T14686] ? __fget_files+0x2a/0x420 [ 434.769580][T14686] ? __fget_files+0x2a/0x420 [ 434.769606][T14686] ? __fget_files+0x3a0/0x420 [ 434.769632][T14686] ? __fget_files+0x2a/0x420 [ 434.769665][T14686] security_file_ioctl+0xcb/0x2d0 [ 434.769701][T14686] __se_sys_ioctl+0x47/0x170 [ 434.769733][T14686] do_syscall_64+0xfa/0x3b0 [ 434.769756][T14686] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.769777][T14686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.769797][T14686] ? clear_bhb_loop+0x60/0xb0 [ 434.769823][T14686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.769851][T14686] RIP: 0033:0x7fd7f758eec9 [ 434.769870][T14686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.769887][T14686] RSP: 002b:00007fd7f844d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.769911][T14686] RAX: ffffffffffffffda RBX: 00007fd7f77e5fa0 RCX: 00007fd7f758eec9 [ 434.769926][T14686] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 434.769939][T14686] RBP: 00007fd7f844d090 R08: 0000000000000000 R09: 0000000000000000 [ 434.769951][T14686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.769962][T14686] R13: 00007fd7f77e6038 R14: 00007fd7f77e5fa0 R15: 00007fff1448a668 [ 434.769997][T14686] [ 434.772546][T14686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 435.300592][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 435.323727][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 435.441923][T14700] bridge7: entered allmulticast mode [ 435.497958][T14702] bridge8: entered allmulticast mode [ 435.606020][T14708] tipc: Enabled bearer , priority 0 [ 435.858280][T14729] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 435.971009][T14730] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 435.983974][T14730] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 436.029416][T14729] gretap1: entered promiscuous mode [ 436.043959][T14729] bond9: (slave gretap1): making interface the new active one [ 436.065009][T14729] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 436.085030][ T6156] net_ratelimit: 15 callbacks suppressed [ 436.085054][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 436.214162][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 436.296558][T14749] vlan2: entered allmulticast mode [ 436.307895][T14749] bridge_slave_0: entered allmulticast mode [ 436.402169][T14754] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 436.434942][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 436.594208][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 436.714211][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 436.734675][ T5928] tipc: Node number set to 2033177586 [ 436.855472][T14778] FAULT_INJECTION: forcing a failure. [ 436.855472][T14778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.884718][T14778] CPU: 1 UID: 0 PID: 14778 Comm: syz.5.2244 Not tainted syzkaller #0 PREEMPT(full) [ 436.884751][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.884763][T14778] Call Trace: [ 436.884771][T14778] [ 436.884780][T14778] dump_stack_lvl+0x189/0x250 [ 436.884809][T14778] ? __pfx____ratelimit+0x10/0x10 [ 436.884831][T14778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.884854][T14778] ? __pfx__printk+0x10/0x10 [ 436.884880][T14778] ? __might_fault+0xb0/0x130 [ 436.884920][T14778] should_fail_ex+0x414/0x560 [ 436.884955][T14778] _copy_from_user+0x2d/0xb0 [ 436.884982][T14778] sock_do_ioctl+0x182/0x300 [ 436.885016][T14778] ? __pfx_sock_do_ioctl+0x10/0x10 [ 436.885050][T14778] ? __lock_acquire+0xab9/0xd20 [ 436.885097][T14778] sock_ioctl+0x576/0x790 [ 436.885128][T14778] ? __pfx_sock_ioctl+0x10/0x10 [ 436.885156][T14778] ? __fget_files+0x2a/0x420 [ 436.885183][T14778] ? __fget_files+0x3a0/0x420 [ 436.885208][T14778] ? __fget_files+0x2a/0x420 [ 436.885239][T14778] ? bpf_lsm_file_ioctl+0x9/0x20 [ 436.885262][T14778] ? __pfx_sock_ioctl+0x10/0x10 [ 436.885287][T14778] __se_sys_ioctl+0xfc/0x170 [ 436.885313][T14778] do_syscall_64+0xfa/0x3b0 [ 436.885335][T14778] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.885355][T14778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.885374][T14778] ? clear_bhb_loop+0x60/0xb0 [ 436.885398][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.885417][T14778] RIP: 0033:0x7f48c078eec9 [ 436.885434][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.885449][T14778] RSP: 002b:00007f48c16f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.885470][T14778] RAX: ffffffffffffffda RBX: 00007f48c09e5fa0 RCX: 00007f48c078eec9 [ 436.885484][T14778] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 436.885503][T14778] RBP: 00007f48c16f8090 R08: 0000000000000000 R09: 0000000000000000 [ 436.885515][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.885527][T14778] R13: 00007f48c09e6038 R14: 00007f48c09e5fa0 R15: 00007ffe2bf95c08 [ 436.885562][T14778] [ 437.108832][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 437.213460][T14784] __nla_validate_parse: 9 callbacks suppressed [ 437.213483][T14784] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2245'. [ 437.248208][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 437.319377][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 437.374597][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 437.404267][T14776] lo speed is unknown, defaulting to 1000 [ 437.412096][T14776] lo speed is unknown, defaulting to 1000 [ 437.426319][T14790] lo speed is unknown, defaulting to 1000 [ 437.480633][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 437.487513][T14790] lo speed is unknown, defaulting to 1000 [ 437.504311][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 437.529723][T14796] IPVS: length: 141 != 8 [ 437.774354][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 437.861407][T14794] lo speed is unknown, defaulting to 1000 [ 437.881041][T14794] lo speed is unknown, defaulting to 1000 [ 438.122101][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 438.137507][T14818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 438.151437][T14819] erspan0: entered promiscuous mode [ 438.190338][T14819] macvtap1: entered promiscuous mode [ 438.201448][T14819] macvtap1: entered allmulticast mode [ 438.207601][T14819] erspan0: entered allmulticast mode [ 438.208455][T14824] FAULT_INJECTION: forcing a failure. [ 438.208455][T14824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.228068][T14824] CPU: 0 UID: 0 PID: 14824 Comm: syz.3.2256 Not tainted syzkaller #0 PREEMPT(full) [ 438.228098][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.228109][T14824] Call Trace: [ 438.228116][T14824] [ 438.228125][T14824] dump_stack_lvl+0x189/0x250 [ 438.228154][T14824] ? __pfx____ratelimit+0x10/0x10 [ 438.228177][T14824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.228200][T14824] ? __pfx__printk+0x10/0x10 [ 438.228227][T14824] ? __might_fault+0xb0/0x130 [ 438.228266][T14824] should_fail_ex+0x414/0x560 [ 438.228299][T14824] _copy_from_user+0x2d/0xb0 [ 438.228326][T14824] dev_ethtool+0xd0/0x19c0 [ 438.228356][T14824] ? __lock_acquire+0xab9/0xd20 [ 438.228392][T14824] ? __pfx_dev_ethtool+0x10/0x10 [ 438.228431][T14824] ? dev_load+0x21/0x1f0 [ 438.228456][T14824] ? dev_load+0x21/0x1f0 [ 438.228479][T14824] dev_ioctl+0x392/0x1150 [ 438.228506][T14824] sock_do_ioctl+0x22c/0x300 [ 438.228541][T14824] ? __pfx_sock_do_ioctl+0x10/0x10 [ 438.228568][T14824] ? __lock_acquire+0xab9/0xd20 [ 438.228614][T14824] sock_ioctl+0x576/0x790 [ 438.228646][T14824] ? __pfx_sock_ioctl+0x10/0x10 [ 438.228676][T14824] ? __fget_files+0x2a/0x420 [ 438.228703][T14824] ? __fget_files+0x3a0/0x420 [ 438.228730][T14824] ? __fget_files+0x2a/0x420 [ 438.228762][T14824] ? bpf_lsm_file_ioctl+0x9/0x20 [ 438.228785][T14824] ? __pfx_sock_ioctl+0x10/0x10 [ 438.228823][T14824] __se_sys_ioctl+0xfc/0x170 [ 438.228851][T14824] do_syscall_64+0xfa/0x3b0 [ 438.228872][T14824] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.228894][T14824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.228914][T14824] ? clear_bhb_loop+0x60/0xb0 [ 438.228939][T14824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.228958][T14824] RIP: 0033:0x7fd7f758eec9 [ 438.228976][T14824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.228994][T14824] RSP: 002b:00007fd7f844d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.229017][T14824] RAX: ffffffffffffffda RBX: 00007fd7f77e5fa0 RCX: 00007fd7f758eec9 [ 438.229032][T14824] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 438.229043][T14824] RBP: 00007fd7f844d090 R08: 0000000000000000 R09: 0000000000000000 [ 438.229056][T14824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.229067][T14824] R13: 00007fd7f77e6038 R14: 00007fd7f77e5fa0 R15: 00007fff1448a668 [ 438.229101][T14824] [ 438.628704][T14837] netlink: 'syz.0.2260': attribute type 4 has an invalid length. [ 438.886824][T14840] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2261'. [ 438.906926][T14842] : renamed from bond_slave_0 [ 439.437825][T14860] pimreg3: entered allmulticast mode [ 439.503505][T14863] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 439.789642][T14875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2268'. [ 439.843376][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'. [ 439.999056][T14885] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2274'. [ 440.014802][T14886] netlink: 'syz.2.2274': attribute type 1 has an invalid length. [ 440.023338][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2275'. [ 440.320658][T14914] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 440.441851][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.908096][T14935] tipc: Enabled bearer , priority 0 [ 441.033824][T14931] tipc: Disabling bearer [ 441.118299][ T6173] net_ratelimit: 20 callbacks suppressed [ 441.118323][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 441.437490][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 441.447963][T14945] lo speed is unknown, defaulting to 1000 [ 441.495164][T14945] lo speed is unknown, defaulting to 1000 [ 441.562758][T14947] netlink: 'syz.5.2290': attribute type 10 has an invalid length. [ 441.594491][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 441.662131][T14947] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 441.760095][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 441.977330][T14966] syzkaller1: entered promiscuous mode [ 441.982883][T14966] syzkaller1: entered allmulticast mode [ 441.990559][T14985] nbd: must specify at least one socket [ 442.013247][T14981] tipc: Enabled bearer , priority 0 [ 442.039642][T14986] syzkaller0: entered promiscuous mode [ 442.045511][T14986] syzkaller0: entered allmulticast mode [ 442.065249][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 442.101484][T14986] tipc: Resetting bearer [ 442.132561][T14986] tipc: Disabling bearer [ 442.165277][T14991] lo speed is unknown, defaulting to 1000 [ 442.172551][T14991] lo speed is unknown, defaulting to 1000 [ 442.176960][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 442.321055][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 442.435672][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 442.555209][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 442.632744][T15016] __nla_validate_parse: 5 callbacks suppressed [ 442.632766][T15016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2308'. [ 442.905736][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 442.937133][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 443.428844][T15055] netlink: 'syz.0.2321': attribute type 1 has an invalid length. [ 443.456715][T15056] batman_adv: batadv0: Adding interface: dummy0 [ 443.495044][T15056] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.553726][T15056] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 443.582975][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 443.603235][T15058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2323'. [ 443.619789][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 443.629434][T15058] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2323'. [ 443.639030][T15058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2323'. [ 443.661872][T15060] batadv_slave_0: entered promiscuous mode [ 446.636701][ T6173] net_ratelimit: 8 callbacks suppressed [ 446.636726][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 446.774210][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 446.884712][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 446.994897][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 447.069193][T15085] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 447.105282][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 447.114165][T15085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2332'. [ 447.221675][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 447.344143][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 447.393233][T15106] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2338'. [ 447.464461][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 447.574469][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 447.698707][T15118] syz_tun: entered allmulticast mode [ 447.913285][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 447.931287][T15131] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 447.936554][T15116] syz_tun: left allmulticast mode [ 448.028019][T15131] bond0: (slave 0!): Releasing backup interface [ 448.051475][T15131] !: entered promiscuous mode [ 448.058185][T15131] team0: Failed to send port change of device 0! via netlink (err -105) [ 448.081846][T15131] team0: Failed to send options change via netlink (err -105) [ 448.104788][T15131] team0: Port device 0! added [ 448.199499][T15140] bridge: RTM_NEWNEIGH with invalid ether address [ 448.377356][T15134] ip6gre2: entered allmulticast mode [ 448.645576][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 449.074703][T15191] ip6tnl0: Caught tx_queue_len zero misconfig [ 449.129898][T15195] netlink: 'syz.0.2363': attribute type 5 has an invalid length. [ 449.177149][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2363'. [ 449.407140][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'. [ 449.459390][T15215] xfrm0: entered promiscuous mode [ 449.465472][T15215] xfrm0: entered allmulticast mode [ 449.492329][T15209] lo speed is unknown, defaulting to 1000 [ 449.525839][T15209] lo speed is unknown, defaulting to 1000 [ 450.130249][T15240] netlink: 'syz.2.2376': attribute type 30 has an invalid length. [ 450.140414][T15240] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2376'. [ 450.149803][T15241] netlink: 'syz.3.2377': attribute type 4 has an invalid length. [ 450.218420][T15241] netlink: 'syz.3.2377': attribute type 4 has an invalid length. [ 450.267794][T15241] netlink: 'syz.3.2377': attribute type 1 has an invalid length. [ 450.301263][T15241] 8021q: VLANs not supported on nlmon0 [ 450.339154][T15244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2379'. [ 450.525737][T15251] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 450.824965][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 450.825486][T15259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2384'. [ 450.843272][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2384'. [ 450.852431][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 450.890144][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2384'. [ 450.938148][T15257] bond8: entered promiscuous mode [ 450.944498][T15257] bond8: entered allmulticast mode [ 450.950128][T15257] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.387295][T15278] macvlan1: left allmulticast mode [ 451.756837][T15291] tun0: tun_chr_ioctl cmd 2147767521 [ 451.764335][ T771] net_ratelimit: 28 callbacks suppressed [ 451.764357][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 451.818026][T15294] syzkaller1: entered promiscuous mode [ 451.823806][T15294] syzkaller1: entered allmulticast mode [ 451.929525][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 452.042555][T15298] lo speed is unknown, defaulting to 1000 [ 452.054425][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 452.071349][T15298] lo speed is unknown, defaulting to 1000 [ 452.264168][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 452.524709][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 452.533219][T15321] netlink: 'syz.5.2402': attribute type 1 has an invalid length. [ 452.681143][T15321] tipc: Enabling of bearer rejected, failed to enable media [ 452.712888][T15325] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 452.722586][T15325] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 452.776902][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 452.821118][T15325] tipc: Resetting bearer [ 452.859072][T15325] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 452.887795][T15325] veth0_vlan: entered allmulticast mode [ 452.905980][T15325] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 452.938317][T15337] netlink: 'syz.3.2406': attribute type 4 has an invalid length. [ 452.995412][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 453.018664][T15337] IPVS: set_ctl: invalid protocol: 33 172.30.1.4:20001 [ 453.131759][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 453.268329][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 453.278707][T15348] netlink: 'syz.5.2410': attribute type 13 has an invalid length. [ 453.287647][T15348] netlink: 'syz.5.2410': attribute type 17 has an invalid length. [ 453.371214][T15348] erspan0: left allmulticast mode [ 453.390876][T15348] sit0: left promiscuous mode [ 453.873946][T15351] lo speed is unknown, defaulting to 1000 [ 453.882317][T15351] lo speed is unknown, defaulting to 1000 [ 454.065294][T15377] netlink: 'syz.3.2415': attribute type 12 has an invalid length. [ 454.515312][T15389] ip6tnl2: entered promiscuous mode [ 454.520999][T15389] ip6tnl2: entered allmulticast mode [ 454.529872][T15389] team0: Device ip6tnl2 is of different type [ 454.725495][T15401] __nla_validate_parse: 10 callbacks suppressed [ 454.725518][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2423'. [ 454.787522][T15406] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2421'. [ 454.962005][T15408] lo speed is unknown, defaulting to 1000 [ 455.007282][T15408] lo speed is unknown, defaulting to 1000 [ 455.179057][T15423] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.2429'. [ 455.473033][T15420] netlink: 'syz.0.2427': attribute type 1 has an invalid length. [ 455.481375][T15420] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2427'. [ 455.782734][T15449] lo speed is unknown, defaulting to 1000 [ 455.797838][T15449] lo speed is unknown, defaulting to 1000 [ 455.999587][T15460] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 456.349129][T15467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2437'. [ 456.784281][ T6162] net_ratelimit: 22 callbacks suppressed [ 456.784307][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 456.934205][T15486] macsec0: entered promiscuous mode [ 456.939482][T15486] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 456.974301][T15486] macsec0: entered allmulticast mode [ 456.981623][T15486] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 457.008575][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 457.134188][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 457.244537][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 457.267261][T15509] netlink: 'syz.0.2450': attribute type 1 has an invalid length. [ 457.291595][T15509] NCSI netlink: No device for ifindex 0 [ 457.364171][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 457.474448][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 457.515630][T15516] IPVS: Error connecting to the multicast addr [ 457.539682][T15516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2453'. [ 457.605182][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 457.724169][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 457.758391][T15524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2456'. [ 457.768894][T15524] netlink: 245 bytes leftover after parsing attributes in process `syz.2.2456'. [ 457.874847][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 457.929952][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 457.955878][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 457.987542][T15530] ip6tnl1: entered promiscuous mode [ 457.992979][T15530] ip6tnl1: entered allmulticast mode [ 458.024367][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 458.162040][T15544] netlink: 'syz.0.2464': attribute type 5 has an invalid length. [ 458.208808][T15544] netlink: 'syz.0.2464': attribute type 8 has an invalid length. [ 458.213363][T15551] netlink: 'syz.0.2464': attribute type 21 has an invalid length. [ 458.285799][T15544] geneve2: entered promiscuous mode [ 458.314961][T15544] geneve2: entered allmulticast mode [ 458.396217][ T6158] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 458.420218][ T6158] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 458.441498][ T6158] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 458.465680][ T6158] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 459.773024][T15613] lo speed is unknown, defaulting to 1000 [ 459.785810][T15613] lo speed is unknown, defaulting to 1000 [ 459.896510][T15620] __nla_validate_parse: 8 callbacks suppressed [ 459.896534][T15620] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2480'. [ 459.936274][T15616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2480'. [ 460.098627][T15630] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 460.131275][T15630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2484'. [ 460.140788][T15630] netlink: 'syz.3.2484': attribute type 2 has an invalid length. [ 460.149595][T15630] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 460.157840][T15630] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2484'. [ 460.281562][T15636] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2486'. [ 460.299175][T15636] gre0: entered allmulticast mode [ 460.306034][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'. [ 460.388293][T15635] gre0: left allmulticast mode [ 460.578543][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2488'. [ 460.635651][T15650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 460.668234][T15650] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2488'. [ 461.220108][T15652] lo speed is unknown, defaulting to 1000 [ 461.276063][T15652] lo speed is unknown, defaulting to 1000 [ 461.691861][T15683] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 461.776455][T15687] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2496'. [ 461.893815][T15694] netlink: 'syz.5.2499': attribute type 21 has an invalid length. [ 462.062887][T15698] tc_dump_action: action bad kind [ 462.084496][ T6158] net_ratelimit: 21 callbacks suppressed [ 462.084521][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 462.224309][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 462.334626][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 462.444217][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 462.554674][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 462.587233][T15719] syzkaller1: entered promiscuous mode [ 462.592760][T15719] syzkaller1: entered allmulticast mode [ 462.618031][T15716] IPVS: Scheduler module ip_vs_sip not found [ 462.637348][T15720] IPVS: length: 24 != 1272 [ 462.704709][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 462.824144][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 462.926020][T15736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.954274][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 463.076305][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 463.166202][T15755] pim6reg1: entered promiscuous mode [ 463.193613][T15755] pim6reg1: entered allmulticast mode [ 463.342127][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 463.377867][T15777] netlink: 'syz.1.2522': attribute type 8 has an invalid length. [ 463.568086][T15780] netlink: 'syz.0.2521': attribute type 4 has an invalid length. [ 463.593384][T15780] netlink: 'syz.0.2521': attribute type 4 has an invalid length. [ 463.619705][T15785] lo speed is unknown, defaulting to 1000 [ 463.655410][ T5999] lo speed is unknown, defaulting to 1000 [ 463.661350][ T5999] syz1: Port: 1 Link ACTIVE [ 463.667574][T15785] lo speed is unknown, defaulting to 1000 [ 463.675747][T15794] syz_tun: entered allmulticast mode [ 463.752357][T15797] dvmrp8: entered allmulticast mode [ 463.895444][T15797] syz_tun: left allmulticast mode [ 463.921887][T15797] dvmrp8: left allmulticast mode [ 464.041036][T15811] netlink: 'syz.3.2529': attribute type 1 has an invalid length. [ 464.299128][T15818] netlink: 'syz.5.2533': attribute type 1 has an invalid length. [ 465.159922][T15843] syzkaller1: entered promiscuous mode [ 465.168869][T15843] syzkaller1: entered allmulticast mode [ 465.487243][T15861] __nla_validate_parse: 13 callbacks suppressed [ 465.487265][T15861] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2546'. [ 465.575670][T15865] lo speed is unknown, defaulting to 1000 [ 465.597241][T15865] lo speed is unknown, defaulting to 1000 [ 465.924403][T15879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2548'. [ 466.168932][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 467.215794][ T6166] net_ratelimit: 27 callbacks suppressed [ 467.215818][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 467.389896][T15937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2559'. [ 467.408487][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 467.521571][T15946] lo speed is unknown, defaulting to 1000 [ 467.537850][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 467.551182][T15946] lo speed is unknown, defaulting to 1000 [ 467.706740][T15956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2564'. [ 467.742346][T15958] netlink: 'syz.3.2565': attribute type 10 has an invalid length. [ 467.880311][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 467.935716][T15967] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 468.007609][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 468.128018][T15973] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2568'. [ 468.144275][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 468.144285][T15973] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2568'. [ 468.190987][T15977] FAULT_INJECTION: forcing a failure. [ 468.190987][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 468.194384][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2568'. [ 468.204089][T15977] CPU: 0 UID: 0 PID: 15977 Comm: syz.3.2570 Not tainted syzkaller #0 PREEMPT(full) [ 468.204118][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.204129][T15977] Call Trace: [ 468.204137][T15977] [ 468.204146][T15977] dump_stack_lvl+0x189/0x250 [ 468.204174][T15977] ? __pfx____ratelimit+0x10/0x10 [ 468.204196][T15977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.204220][T15977] ? __pfx__printk+0x10/0x10 [ 468.204254][T15977] ? stack_trace_save+0x9c/0xe0 [ 468.204281][T15977] should_fail_ex+0x414/0x560 [ 468.204315][T15977] should_failslab+0xa8/0x100 [ 468.204345][T15977] kmem_cache_alloc_noprof+0x73/0x3c0 [ 468.204370][T15977] ? radix_tree_node_alloc+0x7e/0x3a0 [ 468.204388][T15977] ? __kasan_slab_free+0x5b/0x80 [ 468.204416][T15977] radix_tree_node_alloc+0x7e/0x3a0 [ 468.204441][T15977] idr_get_free+0x2b3/0xa70 [ 468.204474][T15977] idr_alloc_u32+0x159/0x2d0 [ 468.204500][T15977] ? __pfx_idr_alloc_u32+0x10/0x10 [ 468.204523][T15977] ? do_raw_spin_lock+0x121/0x290 [ 468.204550][T15977] idr_alloc_cyclic+0x9b/0x1b0 [ 468.204576][T15977] btf_new_fd+0x7d0/0xc90 [ 468.204593][T15977] ? apparmor_capable+0x137/0x1b0 [ 468.204623][T15977] ? __pfx_btf_new_fd+0x10/0x10 [ 468.204643][T15977] ? bpf_token_put+0x143/0x160 [ 468.204667][T15977] ? bpf_btf_load+0x126/0x190 [ 468.204702][T15977] __sys_bpf+0x406/0x870 [ 468.204726][T15977] ? __pfx___sys_bpf+0x10/0x10 [ 468.204762][T15977] ? ksys_write+0x22a/0x250 [ 468.204794][T15977] ? __pfx_ksys_write+0x10/0x10 [ 468.204824][T15977] __x64_sys_bpf+0x7c/0x90 [ 468.204845][T15977] do_syscall_64+0xfa/0x3b0 [ 468.204863][T15977] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.204883][T15977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.204900][T15977] ? clear_bhb_loop+0x60/0xb0 [ 468.204922][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.204939][T15977] RIP: 0033:0x7fd7f758eec9 [ 468.204957][T15977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.204972][T15977] RSP: 002b:00007fd7f844d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.204992][T15977] RAX: ffffffffffffffda RBX: 00007fd7f77e5fa0 RCX: 00007fd7f758eec9 [ 468.205006][T15977] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 468.205017][T15977] RBP: 00007fd7f844d090 R08: 0000000000000000 R09: 0000000000000000 [ 468.205028][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.205038][T15977] R13: 00007fd7f77e6038 R14: 00007fd7f77e5fa0 R15: 00007fff1448a668 [ 468.205069][T15977] [ 468.334855][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2571'. [ 468.394222][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 468.615095][T15987] ip6erspan0: entered promiscuous mode [ 468.654698][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'. [ 469.264348][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 469.434096][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 469.589773][T16004] vlan2: entered allmulticast mode [ 469.821143][T16018] FAULT_INJECTION: forcing a failure. [ 469.821143][T16018] name failslab, interval 1, probability 0, space 0, times 0 [ 469.858164][T16018] CPU: 1 UID: 0 PID: 16018 Comm: syz.5.2582 Not tainted syzkaller #0 PREEMPT(full) [ 469.858195][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.858208][T16018] Call Trace: [ 469.858216][T16018] [ 469.858225][T16018] dump_stack_lvl+0x189/0x250 [ 469.858255][T16018] ? __pfx____ratelimit+0x10/0x10 [ 469.858278][T16018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.858301][T16018] ? __pfx__printk+0x10/0x10 [ 469.858334][T16018] ? __pfx___might_resched+0x10/0x10 [ 469.858361][T16018] ? fs_reclaim_acquire+0x7d/0x100 [ 469.858396][T16018] should_fail_ex+0x414/0x560 [ 469.858430][T16018] should_failslab+0xa8/0x100 [ 469.858461][T16018] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 469.858486][T16018] ? __d_alloc+0x36/0x7a0 [ 469.858512][T16018] __d_alloc+0x36/0x7a0 [ 469.858540][T16018] d_alloc_pseudo+0x21/0xc0 [ 469.858563][T16018] alloc_file_pseudo+0xcc/0x210 [ 469.858588][T16018] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 469.858624][T16018] anon_inode_getfd+0xca/0x1b0 [ 469.858650][T16018] btf_new_fd+0x9a5/0xc90 [ 469.858670][T16018] ? apparmor_capable+0x137/0x1b0 [ 469.858704][T16018] ? __pfx_btf_new_fd+0x10/0x10 [ 469.858727][T16018] ? bpf_token_put+0x143/0x160 [ 469.858754][T16018] ? bpf_btf_load+0x126/0x190 [ 469.858784][T16018] __sys_bpf+0x406/0x870 [ 469.858812][T16018] ? __pfx___sys_bpf+0x10/0x10 [ 469.858852][T16018] ? ksys_write+0x22a/0x250 [ 469.858905][T16018] ? __pfx_ksys_write+0x10/0x10 [ 469.858940][T16018] __x64_sys_bpf+0x7c/0x90 [ 469.858965][T16018] do_syscall_64+0xfa/0x3b0 [ 469.858987][T16018] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.859009][T16018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.859029][T16018] ? clear_bhb_loop+0x60/0xb0 [ 469.859055][T16018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.859080][T16018] RIP: 0033:0x7f48c078eec9 [ 469.859100][T16018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.859119][T16018] RSP: 002b:00007f48c16f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.859142][T16018] RAX: ffffffffffffffda RBX: 00007f48c09e5fa0 RCX: 00007f48c078eec9 [ 469.859157][T16018] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 469.859170][T16018] RBP: 00007f48c16f8090 R08: 0000000000000000 R09: 0000000000000000 [ 469.859184][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.859196][T16018] R13: 00007f48c09e6038 R14: 00007f48c09e5fa0 R15: 00007ffe2bf95c08 [ 469.859231][T16018] [ 470.477031][T16035] tipc: New replicast peer: 0.0.0.0 [ 470.482584][T16035] tipc: Enabled bearer , priority 10 [ 470.492642][T16037] tipc: New replicast peer: 255.255.255.255 [ 470.510539][T16036] netlink: 'syz.3.2588': attribute type 1 has an invalid length. [ 470.522883][T16031] mac80211_hwsim hwsim14 syzkaller0: Caught tx_queue_len zero misconfig [ 470.555596][T16036] __nla_validate_parse: 6 callbacks suppressed [ 470.555620][T16036] netlink: 15554 bytes leftover after parsing attributes in process `syz.3.2588'. [ 470.665980][T16041] netlink: 'syz.5.2590': attribute type 1 has an invalid length. [ 470.724257][T16047] netlink: 'syz.0.2593': attribute type 3 has an invalid length. [ 470.767449][T16045] bridge9: entered promiscuous mode [ 470.783871][T16045] bridge9: entered allmulticast mode [ 470.801120][T16045] team0: Port device bridge9 added [ 470.834706][T16053] FAULT_INJECTION: forcing a failure. [ 470.834706][T16053] name failslab, interval 1, probability 0, space 0, times 0 [ 470.848741][T16053] CPU: 1 UID: 0 PID: 16053 Comm: syz.1.2595 Not tainted syzkaller #0 PREEMPT(full) [ 470.848770][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.848780][T16053] Call Trace: [ 470.848788][T16053] [ 470.848796][T16053] dump_stack_lvl+0x189/0x250 [ 470.848824][T16053] ? __pfx____ratelimit+0x10/0x10 [ 470.848845][T16053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.848866][T16053] ? __pfx__printk+0x10/0x10 [ 470.848909][T16053] ? __pfx___might_resched+0x10/0x10 [ 470.848936][T16053] ? fs_reclaim_acquire+0x7d/0x100 [ 470.848971][T16053] should_fail_ex+0x414/0x560 [ 470.849003][T16053] should_failslab+0xa8/0x100 [ 470.849032][T16053] kmem_cache_alloc_noprof+0x73/0x3c0 [ 470.849054][T16053] ? alloc_empty_file+0x55/0x1d0 [ 470.849078][T16053] alloc_empty_file+0x55/0x1d0 [ 470.849098][T16053] alloc_file_pseudo+0x13d/0x210 [ 470.849120][T16053] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 470.849156][T16053] anon_inode_getfd+0xca/0x1b0 [ 470.849179][T16053] btf_new_fd+0x9a5/0xc90 [ 470.849198][T16053] ? apparmor_capable+0x137/0x1b0 [ 470.849231][T16053] ? __pfx_btf_new_fd+0x10/0x10 [ 470.849252][T16053] ? bpf_token_put+0x143/0x160 [ 470.849278][T16053] ? bpf_btf_load+0x126/0x190 [ 470.849307][T16053] __sys_bpf+0x406/0x870 [ 470.849333][T16053] ? __pfx___sys_bpf+0x10/0x10 [ 470.849369][T16053] ? ksys_write+0x22a/0x250 [ 470.849392][T16053] ? __pfx_ksys_write+0x10/0x10 [ 470.849410][T16053] ? rcu_is_watching+0x15/0xb0 [ 470.849433][T16053] __x64_sys_bpf+0x7c/0x90 [ 470.849452][T16053] do_syscall_64+0xfa/0x3b0 [ 470.849471][T16053] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.849488][T16053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.849505][T16053] ? clear_bhb_loop+0x60/0xb0 [ 470.849526][T16053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.849541][T16053] RIP: 0033:0x7fcd8d18eec9 [ 470.849558][T16053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.849573][T16053] RSP: 002b:00007fcd8df8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.849592][T16053] RAX: ffffffffffffffda RBX: 00007fcd8d3e5fa0 RCX: 00007fcd8d18eec9 [ 470.849605][T16053] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 470.849616][T16053] RBP: 00007fcd8df8d090 R08: 0000000000000000 R09: 0000000000000000 [ 470.849626][T16053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.849636][T16053] R13: 00007fcd8d3e6038 R14: 00007fcd8d3e5fa0 R15: 00007ffe1f929d68 [ 470.849667][T16053] [ 471.170989][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2594'. [ 471.772057][T16073] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.902037][T16073] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.083565][T16073] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.216866][T16073] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.254177][ T6158] net_ratelimit: 14 callbacks suppressed [ 472.254201][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 472.432257][T12413] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.456475][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 472.510423][T12413] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.566585][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 472.683762][T12413] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.714183][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 472.783714][T12413] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.826263][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 472.935386][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 472.969996][T16096] netlink: 'syz.5.2608': attribute type 1 has an invalid length. [ 473.001455][T16098] nbd: illegal input index -1 [ 473.075044][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 473.112158][T16105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2612'. [ 473.184649][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 473.260437][T16114] netlink: 'syz.2.2610': attribute type 303 has an invalid length. [ 473.309965][T16116] netlink: 'syz.1.2613': attribute type 27 has an invalid length. [ 473.344263][T16112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.417728][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 473.445061][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 473.552431][T16123] openvswitch: netlink: Message has 8 unknown bytes. [ 473.626759][T16121] lo speed is unknown, defaulting to 1000 [ 473.677759][T16121] lo speed is unknown, defaulting to 1000 [ 473.932543][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2620'. [ 473.997850][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2621'. [ 474.223051][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f259400: rx timeout, send abort [ 474.307007][T16150] lo speed is unknown, defaulting to 1000 [ 474.316715][T16150] lo speed is unknown, defaulting to 1000 [ 474.723202][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f259800: rx timeout, send abort [ 474.731852][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f259400: abort rx timeout. Force session deactivation [ 475.060710][T16166] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.204939][T16166] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.231672][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f259800: abort rx timeout. Force session deactivation [ 475.316610][T16180] tipc: Failed to remove unknown binding: 66,1,1/1917690495:2940609042/2940609044 [ 475.394879][T16166] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.661885][T16166] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.737864][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2629'. [ 475.944893][T16190] tipc: Enabled bearer , priority 10 [ 475.989661][T12413] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.033911][T12413] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.137687][ T6156] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.181708][ T6158] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.357140][T16203] netlink: 'syz.3.2638': attribute type 1 has an invalid length. [ 476.463690][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 476.499316][T16216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2639'. [ 476.826876][T16196] tipc: Resetting bearer [ 477.914720][T16203] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 477.997413][ T6166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.043901][ T6166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.074381][ T6166] net_ratelimit: 13 callbacks suppressed [ 478.074404][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 478.110251][ T771] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.144240][ T771] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.214295][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 478.273208][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2642'. [ 478.305822][T16228] lo speed is unknown, defaulting to 1000 [ 478.314162][T16223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2642'. [ 478.321213][T16228] lo speed is unknown, defaulting to 1000 [ 478.344346][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 478.474164][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 478.584584][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 478.714842][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 478.984494][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 479.081762][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 479.095672][T16247] netlink: 'syz.1.2650': attribute type 4 has an invalid length. [ 479.104301][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 479.145518][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 479.163166][T16252] netlink: 'syz.1.2650': attribute type 4 has an invalid length. [ 479.443304][T16256] ip6tnl3: entered promiscuous mode [ 479.472135][T16256] ip6tnl3: entered allmulticast mode [ 479.489760][T16256] team0: Device ip6tnl3 is up. Set it down before adding it as a team port [ 479.552337][T15366] lo speed is unknown, defaulting to 1000 [ 479.564735][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 479.582603][T15366] syz: Port: 1 Link DOWN [ 479.686283][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 481.324389][T16304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2666'. [ 481.379656][T16314] tipc: Enabled bearer , priority 0 [ 481.390936][T16314] syzkaller0: entered promiscuous mode [ 481.412628][T16314] syzkaller0: entered allmulticast mode [ 481.533329][T16327] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.578244][T16327] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.669599][T16329] vxcan1: entered allmulticast mode [ 481.728461][T16327] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.749597][T16327] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.771075][T16327] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.782695][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2675'. [ 481.826203][T16327] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.847557][T16327] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.869983][T16327] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.892324][T16327] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.914891][T16327] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.937532][T16327] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.986473][T16327] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.013153][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'. [ 482.018203][T16327] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.142736][T16327] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.210437][T16327] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.232880][T16327] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.256037][T16327] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.281941][T16327] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.386394][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'. [ 482.505072][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2678'. [ 482.529606][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 482.564834][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 482.580755][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 482.880190][T16366] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 482.938534][T16370] netlink: 'syz.3.2683': attribute type 10 has an invalid length. [ 483.035395][T16358] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 483.048039][T16358] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 483.132285][T16375] !: left promiscuous mode [ 483.177146][T16375] net_ratelimit: 20 callbacks suppressed [ 483.177170][T16375] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 483.239305][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 483.329926][T16313] tipc: Resetting bearer [ 483.382450][T16313] tipc: Disabling bearer [ 483.409325][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2687'. [ 483.434674][T16383] veth1_to_batadv: left allmulticast mode [ 483.442656][T16383] ..0·: left allmulticast mode [ 483.451011][T16383] hsr_slave_0: left allmulticast mode [ 483.456804][T16383] hsr_slave_1: left allmulticast mode [ 483.487953][T16383] veth0_vlan: left allmulticast mode [ 483.516240][T16383] geneve2: left promiscuous mode [ 483.548071][T16383] bond1: left promiscuous mode [ 483.573258][T16383] bond2: left promiscuous mode [ 483.616213][T16383] sit1: left promiscuous mode [ 483.621301][T16383] bond6: left promiscuous mode [ 483.642895][T16383] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 483.659947][T16383] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 483.676148][T16383] gretap1: left promiscuous mode [ 483.689829][T16383] ip6gre2: left allmulticast mode [ 483.769531][T16387] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.2687'. [ 483.877409][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 483.927164][T16396] tipc: Enabling of bearer rejected, failed to enable media [ 484.024327][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 484.134528][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 484.264180][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 484.325897][T16416] bridge10: entered allmulticast mode [ 484.358156][T16420] tipc: Enabled bearer , priority 0 [ 484.469584][T16420] syzkaller0: entered promiscuous mode [ 484.484575][T16420] syzkaller0: entered allmulticast mode [ 484.493329][T16420] tipc: Resetting bearer [ 484.524245][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 484.673911][T16420] syzkaller1: entered promiscuous mode [ 484.682994][T16420] syzkaller1: entered allmulticast mode [ 484.701442][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 484.864465][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 484.900081][T16417] tipc: Resetting bearer [ 485.086147][T16449] netlink: 'syz.3.2702': attribute type 1 has an invalid length. [ 485.639500][T16480] netlink: 'syz.5.2706': attribute type 1 has an invalid length. [ 486.997057][T16417] tipc: Disabling bearer [ 487.015183][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 487.249752][T16490] lo speed is unknown, defaulting to 1000 [ 487.272945][T16490] lo speed is unknown, defaulting to 1000 [ 487.296970][T16497] __nla_validate_parse: 10 callbacks suppressed [ 487.296995][T16497] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2711'. [ 487.412021][T16504] netlink: 'syz.2.2708': attribute type 16 has an invalid length. [ 487.467749][T16504] netlink: 'syz.2.2708': attribute type 17 has an invalid length. [ 487.519694][T16511] lo speed is unknown, defaulting to 1000 [ 487.637933][T16504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.656785][T16504] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.665970][T16504] batman_adv: batadv0: Interface activated: dummy0 [ 487.786477][T16511] lo speed is unknown, defaulting to 1000 [ 488.125062][T16542] netlink: 'syz.5.2720': attribute type 1 has an invalid length. [ 488.225067][ T6156] net_ratelimit: 26 callbacks suppressed [ 488.225088][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 488.364541][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 488.402689][T16555] FAULT_INJECTION: forcing a failure. [ 488.402689][T16555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.494513][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 488.501711][T16555] CPU: 1 UID: 0 PID: 16555 Comm: syz.0.2724 Not tainted syzkaller #0 PREEMPT(full) [ 488.501738][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.501761][T16555] Call Trace: [ 488.501769][T16555] [ 488.501778][T16555] dump_stack_lvl+0x189/0x250 [ 488.501807][T16555] ? __pfx____ratelimit+0x10/0x10 [ 488.501830][T16555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.501851][T16555] ? __pfx__printk+0x10/0x10 [ 488.501875][T16555] ? __might_fault+0xb0/0x130 [ 488.501913][T16555] should_fail_ex+0x414/0x560 [ 488.501946][T16555] _copy_from_user+0x2d/0xb0 [ 488.501973][T16555] __sys_connect+0x123/0x440 [ 488.501997][T16555] ? __fget_files+0x3a0/0x420 [ 488.502025][T16555] ? __pfx___sys_connect+0x10/0x10 [ 488.502063][T16555] ? __pfx_ksys_write+0x10/0x10 [ 488.502086][T16555] ? rcu_is_watching+0x15/0xb0 [ 488.502115][T16555] __x64_sys_connect+0x7a/0x90 [ 488.502139][T16555] do_syscall_64+0xfa/0x3b0 [ 488.502160][T16555] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.502181][T16555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.502201][T16555] ? clear_bhb_loop+0x60/0xb0 [ 488.502226][T16555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.502245][T16555] RIP: 0033:0x7fe44ef8eec9 [ 488.502264][T16555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.502281][T16555] RSP: 002b:00007fe44fd98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 488.502303][T16555] RAX: ffffffffffffffda RBX: 00007fe44f1e6180 RCX: 00007fe44ef8eec9 [ 488.502317][T16555] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 488.502329][T16555] RBP: 00007fe44fd98090 R08: 0000000000000000 R09: 0000000000000000 [ 488.502341][T16555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.502352][T16555] R13: 00007fe44f1e6218 R14: 00007fe44f1e6180 R15: 00007ffee69f5708 [ 488.502392][T16555] [ 488.714204][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 488.987771][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 489.134247][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 489.227898][T16566] lo speed is unknown, defaulting to 1000 [ 489.249181][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 489.268381][T16566] lo speed is unknown, defaulting to 1000 [ 489.455382][ T6166] bond3: (slave bridge5): failed to get link speed/duplex [ 489.565825][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 489.695215][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 490.157395][T16609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 490.283899][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2737'. [ 490.304359][T16609] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2737'. [ 490.317190][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2737'. [ 490.326645][T16609] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2737'. [ 490.336162][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2737'. [ 490.626442][T16603] ip6gre1: entered allmulticast mode [ 490.834858][T16629] syzkaller1: entered promiscuous mode [ 490.840406][T16629] syzkaller1: entered allmulticast mode [ 491.045659][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 491.084243][T16644] netlink: 'syz.3.2749': attribute type 12 has an invalid length. [ 491.197691][T16656] netlink: 'syz.2.2751': attribute type 10 has an invalid length. [ 491.235973][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 491.256885][T16644] netlink: 'syz.3.2749': attribute type 12 has an invalid length. [ 491.340612][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2755'. [ 491.362990][T16666] netlink: 'syz.1.2755': attribute type 15 has an invalid length. [ 491.536352][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2757'. [ 493.235199][ T6158] net_ratelimit: 28 callbacks suppressed [ 493.235223][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 493.354513][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 493.464370][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 493.574571][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 493.694303][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 493.804235][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 493.914401][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 494.024443][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 494.134337][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 494.244326][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 496.754320][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 498.314543][T12413] net_ratelimit: 36 callbacks suppressed [ 498.314565][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 498.434321][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 498.544171][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 498.654474][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 498.764514][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 498.884991][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 498.995032][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 499.104460][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 499.214316][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 499.324292][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 501.887281][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.394849][ T6156] net_ratelimit: 36 callbacks suppressed [ 503.394873][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 503.514297][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 503.624210][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 503.734362][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 503.844199][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 503.954341][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 504.064245][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 504.174253][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 504.284223][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 504.394282][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 508.464275][ T6158] net_ratelimit: 36 callbacks suppressed [ 508.464292][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 508.584272][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 508.694251][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 508.804244][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 508.914696][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 509.024218][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 509.134289][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 509.244227][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 509.354232][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 509.464241][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 513.544239][ T771] net_ratelimit: 36 callbacks suppressed [ 513.544263][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 513.664804][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 513.774253][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 513.884467][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 513.994305][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 514.104285][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 514.214561][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 514.324262][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 514.434846][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 514.544786][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 518.634975][T12413] net_ratelimit: 36 callbacks suppressed [ 518.634998][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 518.754944][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 518.864226][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 518.974304][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 519.084286][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 519.194432][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 519.314583][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 519.424202][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 519.534211][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 519.644211][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 523.714217][ T771] net_ratelimit: 36 callbacks suppressed [ 523.714241][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 523.834466][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 523.944121][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 524.054116][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 524.164213][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 524.275507][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 524.384198][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 524.494306][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 524.604177][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 524.714224][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 528.794235][ T36] net_ratelimit: 36 callbacks suppressed [ 528.794259][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 528.914473][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 529.024351][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 529.134277][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 529.244219][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 529.354169][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 529.464203][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 529.574472][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 529.684185][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 529.794979][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 533.884231][ T6158] net_ratelimit: 36 callbacks suppressed [ 533.884256][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 534.004215][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 534.114434][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 534.224207][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 534.334252][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 534.454212][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 534.564146][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 534.674250][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 534.784319][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 534.894184][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 538.964214][ T771] net_ratelimit: 36 callbacks suppressed [ 538.964238][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 539.084290][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 539.194430][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 539.304243][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 539.424333][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 539.534555][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 539.644552][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 539.754432][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 539.864194][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 539.974243][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 544.054319][ T36] net_ratelimit: 36 callbacks suppressed [ 544.054342][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 544.174241][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 544.284384][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 544.394497][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 544.504436][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 544.614372][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 544.724348][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 544.834236][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 544.944198][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 545.054208][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 546.636481][T16695] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.717700][T16691] lo speed is unknown, defaulting to 1000 [ 546.756867][T16691] lo speed is unknown, defaulting to 1000 [ 547.043153][T16723] lo speed is unknown, defaulting to 1000 [ 547.051652][T16723] lo speed is unknown, defaulting to 1000 [ 547.188065][T16730] lo speed is unknown, defaulting to 1000 [ 547.197093][T16730] lo speed is unknown, defaulting to 1000 [ 547.428736][T16739] ieee802154 phy0 wpan0: encryption failed: -22 [ 547.588552][T16750] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 547.917622][T16752] bond12: (slave bridge4): making interface the new active one [ 547.955685][T16752] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 548.119232][T16774] tipc: Enabled bearer , priority 0 [ 548.138282][T16774] syzkaller0: entered promiscuous mode [ 548.151403][T16774] syzkaller0: entered allmulticast mode [ 548.191552][T16780] bond4: (slave erspan0): Releasing active interface [ 548.204133][T16780] ip6gretap4: entered promiscuous mode [ 548.269954][T16780] bond1: (slave ip6gretap2): Removing an active aggregator [ 548.291191][T16775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2782'. [ 548.297658][T16780] bond1: (slave ip6gretap2): Releasing backup interface [ 548.327007][T16780] bond1: (slave ip6gretap2): the permanent HWaddr of slave - 1e:13:2a:6f:f7:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 548.363159][T16780] bond1: (slave veth9): Releasing backup interface [ 548.455378][ T5999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.463898][T16780] bond4: (slave ip6gretap4): Releasing active interface [ 548.492689][T16780] bond4: (slave ip6gretap4): the permanent HWaddr of slave - 26:1d:fb:45:3c:bb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 548.520513][T16780] ip6gretap4: left promiscuous mode [ 548.534768][T16780] bond4: (slave veth17): Releasing active interface [ 548.560180][T16774] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2782'. [ 548.571574][T16774] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2782'. [ 548.621466][T16771] lo speed is unknown, defaulting to 1000 [ 548.640029][T16771] lo speed is unknown, defaulting to 1000 [ 548.692259][T16773] tipc: Resetting bearer [ 548.757695][T16773] tipc: Disabling bearer [ 548.897589][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.125339][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.134228][ T6173] net_ratelimit: 23 callbacks suppressed [ 549.134250][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 549.264697][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 549.374951][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 549.422822][T16818] vxcan3: entered allmulticast mode [ 549.544158][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 549.579421][T16825] syz.0.2792: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 549.617183][T16825] CPU: 0 UID: 0 PID: 16825 Comm: syz.0.2792 Not tainted syzkaller #0 PREEMPT(full) [ 549.617220][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.617232][T16825] Call Trace: [ 549.617241][T16825] [ 549.617250][T16825] dump_stack_lvl+0x189/0x250 [ 549.617285][T16825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.617309][T16825] ? __pfx__printk+0x10/0x10 [ 549.617336][T16825] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 549.617360][T16825] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 549.617385][T16825] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 549.617411][T16825] warn_alloc+0x214/0x310 [ 549.617450][T16825] ? __pfx_warn_alloc+0x10/0x10 [ 549.617492][T16825] ? __get_vm_area_node+0x28f/0x300 [ 549.617530][T16825] ? xskq_create+0xbf/0x170 [ 549.617557][T16825] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 549.617624][T16825] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 549.617661][T16825] ? __kasan_kmalloc+0x93/0xb0 [ 549.617692][T16825] vmalloc_user_noprof+0xad/0xf0 [ 549.617719][T16825] ? xskq_create+0xbf/0x170 [ 549.617740][T16825] xskq_create+0xbf/0x170 [ 549.617764][T16825] xsk_init_queue+0xb0/0x110 [ 549.617785][T16825] xsk_setsockopt+0x57b/0x8d0 [ 549.617816][T16825] ? __pfx_xsk_setsockopt+0x10/0x10 [ 549.617847][T16825] ? __pfx_aa_sk_perm+0x10/0x10 [ 549.617881][T16825] ? __fget_files+0x2a/0x420 [ 549.617907][T16825] ? aa_sock_opt_perm+0xff/0x1b0 [ 549.617931][T16825] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 549.617951][T16825] ? __pfx_xsk_setsockopt+0x10/0x10 [ 549.617984][T16825] do_sock_setsockopt+0x17c/0x1b0 [ 549.618017][T16825] __x64_sys_setsockopt+0x13f/0x1b0 [ 549.618051][T16825] do_syscall_64+0xfa/0x3b0 [ 549.618073][T16825] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.618095][T16825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.618116][T16825] ? clear_bhb_loop+0x60/0xb0 [ 549.618142][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.618161][T16825] RIP: 0033:0x7fe44ef8eec9 [ 549.618180][T16825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.618197][T16825] RSP: 002b:00007fe44fd98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 549.618220][T16825] RAX: ffffffffffffffda RBX: 00007fe44f1e6180 RCX: 00007fe44ef8eec9 [ 549.618236][T16825] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 549.618247][T16825] RBP: 00007fe44f011f91 R08: 0000000000000004 R09: 0000000000000000 [ 549.618259][T16825] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 549.618271][T16825] R13: 00007fe44f1e6218 R14: 00007fe44f1e6180 R15: 00007ffee69f5708 [ 549.618307][T16825] [ 549.654805][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 549.660215][T16825] Mem-Info: [ 549.786486][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 549.875133][T16825] active_anon:4829 inactive_anon:0 isolated_anon:0 [ 549.875133][T16825] active_file:3472 inactive_file:40053 isolated_file:0 [ 549.875133][T16825] unevictable:768 dirty:123 writeback:0 [ 549.875133][T16825] slab_reclaimable:11765 slab_unreclaimable:192793 [ 549.875133][T16825] mapped:30281 shmem:1361 pagetables:1060 [ 549.875133][T16825] sec_pagetables:0 bounce:0 [ 549.875133][T16825] kernel_misc_reclaimable:0 [ 549.875133][T16825] free:1222697 free_pcp:15309 free_cma:0 [ 549.875194][T16825] Node 0 active_anon:19316kB inactive_anon:0kB active_file:13888kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121124kB dirty:492kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13148kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 549.875247][T16825] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 549.875294][T16825] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.875352][T16825] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 550.063581][T16825] Node 0 DMA32 free:975588kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19168kB inactive_anon:0kB active_file:13888kB inactive_file:158168kB unevictable:1536kB writepending:492kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:49092kB local_pcp:16452kB free_cma:0kB [ 550.125211][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 550.132512][T16825] lowmem_reserve[]: 0 0 1 1 1 [ 550.142590][T16825] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 550.190170][T16825] lowmem_reserve[]: 0 0 0 0 0 [ 550.203459][T16825] Node 1 Normal free:3899836kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12484kB local_pcp:9664kB free_cma:0kB [ 550.274639][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 550.285141][T16825] lowmem_reserve[]: 0 0 0 0 0 [ 550.300183][T16825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 550.347262][T16825] Node 0 DMA32: 1797*4kB (UME) 2106*8kB (UME) 807*16kB (UME) 252*32kB (UME) 145*64kB (UME) 49*128kB (UME) 62*256kB (UME) 46*512kB (UM) 17*1024kB (UME) 5*2048kB (UM) 207*4096kB (UM) = 975508kB [ 550.384257][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 550.420868][T16825] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 550.444350][T16825] Node 1 Normal: 179*4kB (UM) 48*8kB (UME) 41*16kB (UME) 183*32kB (UME) 60*64kB (UME) 10*128kB (UME) 4*256kB (UME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (U) 947*4096kB (M) = 3899836kB [ 550.487010][T16825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.508538][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 550.530921][T16825] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 550.549650][T16825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.593488][T16825] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 550.633336][T16859] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2802'. [ 550.664072][T16825] 44882 total pagecache pages [ 550.668864][T16825] 0 pages in swap cache [ 550.673046][T16825] Free swap = 124996kB [ 550.678634][T16825] Total swap = 124996kB [ 550.682887][T16825] 2097051 pages RAM [ 550.702635][T16825] 0 pages HighMem/MovableOnly [ 550.708248][T16825] 424998 pages reserved [ 550.712437][T16825] 0 pages cma reserved [ 550.726182][T16862] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2802'. [ 550.754545][T16862] 8021q: VLANs not supported on team0 [ 551.174493][T16881] netlink: 'syz.5.2807': attribute type 39 has an invalid length. [ 551.191496][T16881] veth0_macvtap: left promiscuous mode [ 551.840863][T16917] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 551.862030][T16917] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 552.014192][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 552.107760][T16923] delete_channel: no stack [ 552.167301][T16929] tipc: Enabling of bearer rejected, already enabled [ 552.198938][T16929] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 552.199389][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2820'. [ 552.206691][T16929] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 552.207905][T16929] tipc: Resetting bearer [ 552.232476][T16932] veth5: left allmulticast mode [ 552.238027][T16932] veth5: left promiscuous mode [ 552.243234][T16932] bridge0: port 1(veth5) entered disabled state [ 552.419984][T16935] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2821'. [ 552.486376][T16947] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 552.888220][T16965] lo speed is unknown, defaulting to 1000 [ 552.929426][T16965] lo speed is unknown, defaulting to 1000 [ 553.261847][T16992] netlink: 'syz.3.2833': attribute type 2 has an invalid length. [ 553.280108][T16992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2833'. [ 553.643364][ T6162] tipc: Resetting bearer [ 553.851022][T16996] lo speed is unknown, defaulting to 1000 [ 553.892031][T16996] lo speed is unknown, defaulting to 1000 [ 553.915611][T17005] netlink: 'syz.0.2836': attribute type 13 has an invalid length. [ 554.063892][T17005] lo speed is unknown, defaulting to 1000 [ 554.077260][T17005] lo speed is unknown, defaulting to 1000 [ 554.324262][ T6156] net_ratelimit: 23 callbacks suppressed [ 554.324286][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 554.521082][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 554.547157][T16996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2834'. [ 554.655145][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 554.774255][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 554.894473][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 554.963045][T17042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2847'. [ 555.009273][T17042] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2847'. [ 555.044354][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 555.154987][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 555.375729][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 555.459176][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'. [ 555.537983][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 555.551669][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2855'. [ 555.620804][T17074] lo speed is unknown, defaulting to 1000 [ 555.654902][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 555.678677][T17074] lo speed is unknown, defaulting to 1000 [ 555.748611][T17082] netlink: 'syz.1.2858': attribute type 1 has an invalid length. [ 555.756879][T17082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2858'. [ 555.863141][T17080] lo speed is unknown, defaulting to 1000 [ 555.903662][T17080] lo speed is unknown, defaulting to 1000 [ 556.825163][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 557.148209][T17114] netlink: 'syz.3.2868': attribute type 6 has an invalid length. [ 557.172132][T17114] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2868'. [ 557.436401][T17120] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 557.466059][T17120] netlink: 'syz.1.2869': attribute type 4 has an invalid length. [ 557.515880][T17120] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2869'. [ 557.539250][T17120] NCSI netlink: No device for ifindex 3321692160 [ 557.771505][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2873'. [ 558.352083][T17153] lo speed is unknown, defaulting to 1000 [ 558.368385][T17153] lo speed is unknown, defaulting to 1000 [ 558.639782][T17171] netlink: 'syz.1.2880': attribute type 3 has an invalid length. [ 558.696677][T17171] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 558.778245][T17172] lo speed is unknown, defaulting to 1000 [ 558.823379][T17172] lo speed is unknown, defaulting to 1000 [ 559.230402][T17185] tipc: Can't bind to reserved service type 1 [ 559.268016][T17185] netlink: 'syz.3.2885': attribute type 39 has an invalid length. [ 559.276077][T17186] lo speed is unknown, defaulting to 1000 [ 559.305338][T17186] lo speed is unknown, defaulting to 1000 [ 559.346440][T17190] netlink: 'syz.3.2885': attribute type 5 has an invalid length. [ 559.396560][ T6156] net_ratelimit: 24 callbacks suppressed [ 559.396584][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 559.466006][T17192] vlan2: entered allmulticast mode [ 559.506037][T17189] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 559.534170][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 559.724492][T17199] __nla_validate_parse: 11 callbacks suppressed [ 559.724518][T17199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2888'. [ 559.790705][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 559.919210][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 559.938002][T17202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2888'. [ 560.129927][T17206] gre0: entered allmulticast mode [ 560.160987][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 560.179797][T17206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2889'. [ 560.256929][T17211] dvmrp8: entered allmulticast mode [ 560.298059][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 560.327772][T17209] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 560.405927][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 560.505179][T17222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2892'. [ 560.517857][T17206] lo speed is unknown, defaulting to 1000 [ 560.524939][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 560.556623][T17206] lo speed is unknown, defaulting to 1000 [ 560.599174][T17222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2892'. [ 560.876839][T17205] gre0: left allmulticast mode [ 560.881763][T17205] dvmrp8: left allmulticast mode [ 560.965119][T17232] netlink: 'syz.3.2894': attribute type 11 has an invalid length. [ 560.985938][T17232] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2894'. [ 561.024645][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 561.134142][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 561.246538][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 561.555842][T17249] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 561.563736][T17249] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 561.606866][T17249] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2899'. [ 561.992177][T17257] netlink: 'syz.5.2902': attribute type 1 has an invalid length. [ 562.003145][T17257] netlink: 'syz.5.2902': attribute type 1 has an invalid length. [ 562.109156][T17260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2903'. [ 562.440815][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 562.486872][T17278] netlink: 'syz.5.2908': attribute type 7 has an invalid length. [ 562.523896][T17278] ip6gretap0: entered promiscuous mode [ 562.544952][T17278] syz_tun: entered promiscuous mode [ 562.564204][T17278] ip6gretap0: left promiscuous mode [ 562.593629][T17278] syz_tun: left promiscuous mode [ 562.894944][T17315] Àÿ: renamed from team_slave_1 (while UP) [ 563.388846][T17354] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 563.403118][T17334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.782101][T17368] validate_nla: 2 callbacks suppressed [ 563.782122][T17368] netlink: 'syz.5.2930': attribute type 1 has an invalid length. [ 563.796893][T17368] netlink: 'syz.5.2930': attribute type 2 has an invalid length. [ 563.805158][T17368] netlink: 'syz.5.2930': attribute type 1 has an invalid length. [ 563.833449][T17370] netlink: 'syz.2.2931': attribute type 83 has an invalid length. [ 563.921018][T17372] netlink: 'syz.5.2930': attribute type 83 has an invalid length. [ 563.981757][T17372] €Â0: renamed from bond_slave_1 [ 564.416191][ T771] net_ratelimit: 23 callbacks suppressed [ 564.416215][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 564.564108][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 564.844490][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 564.923273][T17382] __nla_validate_parse: 7 callbacks suppressed [ 564.923293][T17382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2935'. [ 564.939046][T17382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2935'. [ 564.974494][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 565.085050][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 565.198006][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 565.317285][ T771] bond3: (slave bridge5): failed to get link speed/duplex [ 565.328816][ T6156] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.361329][ T6156] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.392448][ T6156] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.419096][ T6156] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.437993][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 565.508075][T17404] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2943'. [ 565.525273][T17404] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 565.578662][T17401] lo speed is unknown, defaulting to 1000 [ 565.584925][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 565.594928][T17401] lo speed is unknown, defaulting to 1000 [ 565.706451][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2946'. [ 565.816501][T17421] netlink: 'syz.0.2948': attribute type 13 has an invalid length. [ 565.838336][T17421] netlink: 'syz.0.2948': attribute type 17 has an invalid length. [ 565.881811][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2950'. [ 565.891044][T17421] bridge0: port 3(macsec0) entered blocking state [ 565.891232][T17421] bridge0: port 3(macsec0) entered listening state [ 565.891566][T17421] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.891717][T17421] bridge0: port 2(bridge_slave_1) entered listening state [ 565.891983][T17421] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.926181][T17421] bridge0: port 1(bridge_slave_0) entered listening state [ 566.028850][T17426] lo speed is unknown, defaulting to 1000 [ 566.066846][T17426] lo speed is unknown, defaulting to 1000 [ 566.081342][T17438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2950'. [ 566.240868][T17445] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 566.269892][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 566.569762][T17461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2958'. [ 566.615488][T17465] lo speed is unknown, defaulting to 1000 [ 566.623482][T17465] lo speed is unknown, defaulting to 1000 [ 566.729530][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057bd4000: rx timeout, send abort [ 566.738249][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057bd4000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 566.937033][T17480] netlink: 'syz.0.2963': attribute type 10 has an invalid length. [ 566.986619][T17484] netlink: 'syz.0.2963': attribute type 10 has an invalid length. [ 567.018461][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2966'. [ 567.053243][T17480] team0: Port device 0! added [ 567.111279][T17484] team0: Port device 0! removed [ 567.344259][T17493] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2967'. [ 567.741024][T17524] bond0: entered promiscuous mode [ 567.776876][T17524] batadv0: entered promiscuous mode [ 567.793134][T17524] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 567.837848][T17524] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 567.875440][T17524] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 568.302996][T17534] tipc: Enabling of bearer rejected, failed to enable media [ 568.671141][T17547] sctp: [Deprecated]: syz.3.2980 (pid 17547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.671141][T17547] Use struct sctp_sack_info instead [ 569.504184][ T6156] net_ratelimit: 28 callbacks suppressed [ 569.504205][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 569.622178][T17599] tc_dump_action: action bad kind [ 569.725593][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 569.848110][T17606] nbd: must specify a size in bytes for the device [ 569.914269][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 569.976160][T17612] netlink: 'syz.2.2997': attribute type 5 has an invalid length. [ 569.990629][T17612] __nla_validate_parse: 11 callbacks suppressed [ 569.990653][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'. [ 570.010385][T17612] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2997'. [ 570.024826][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 570.144163][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 570.257096][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3001'. [ 570.274962][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 570.395226][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 570.442143][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 570.465951][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3003'. [ 570.483119][T17629] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 570.513176][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3005'. [ 570.610562][T17634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.634322][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 570.645942][T17627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3003'. [ 570.784109][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 570.803432][T17632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3005'. [ 570.891679][T17652] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3006'. [ 570.908898][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 571.043079][T17657] gre1: entered promiscuous mode [ 571.062374][T17657] gre1: entered allmulticast mode [ 571.122611][T17656] lo speed is unknown, defaulting to 1000 [ 571.128079][T17659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 571.272379][T17659] bond9: entered promiscuous mode [ 571.283077][T17659] 8021q: adding VLAN 0 to HW filter on device bond9 [ 571.512412][T17659] bond9 (unregistering): Released all slaves [ 571.546486][T17656] lo speed is unknown, defaulting to 1000 [ 572.709774][ T30] audit: type=1800 audit(1759169274.484:3): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3014" name="memory.events" dev="tmpfs" ino=3080 res=0 errno=0 [ 573.118811][T17710] lo speed is unknown, defaulting to 1000 [ 573.129678][T17710] lo speed is unknown, defaulting to 1000 [ 573.464241][T17721] netlink: 'syz.2.3024': attribute type 4 has an invalid length. [ 573.498374][T17721] netlink: 'syz.2.3024': attribute type 2 has an invalid length. [ 573.578675][T17730] syzkaller0: entered promiscuous mode [ 573.594437][T17730] syzkaller0: entered allmulticast mode [ 573.707141][T17740] tipc: Enabling of bearer rejected, already enabled [ 574.376130][T17764] tipc: Enabled bearer , priority 0 [ 574.395319][T17764] syzkaller0: entered promiscuous mode [ 574.400952][T17764] syzkaller0: entered allmulticast mode [ 574.540850][T17771] tipc: Resetting bearer [ 574.551646][T17773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.569829][T17773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.579044][T17773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.579222][T17770] lo speed is unknown, defaulting to 1000 [ 574.586594][ T36] net_ratelimit: 20 callbacks suppressed [ 574.586610][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 574.609657][T17770] lo speed is unknown, defaulting to 1000 [ 574.624522][T17773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.632358][T17773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.706773][T17774] tipc: Resetting bearer [ 574.724538][T17774] tipc: Disabling bearer [ 574.754374][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 574.852176][T17783] nbd: must specify at least one socket [ 574.864097][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 574.985101][ T6162] bond3: (slave bridge5): failed to get link speed/duplex [ 575.025083][T17772] lo speed is unknown, defaulting to 1000 [ 575.097204][T17793] __nla_validate_parse: 9 callbacks suppressed [ 575.097227][T17793] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3041'. [ 575.165629][T17772] lo speed is unknown, defaulting to 1000 [ 575.171573][T17785] lo speed is unknown, defaulting to 1000 [ 575.185790][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 575.217213][T17785] lo speed is unknown, defaulting to 1000 [ 575.426621][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3045'. [ 575.664520][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 575.716541][T17811] netlink: 'syz.5.3046': attribute type 13 has an invalid length. [ 575.746884][T17811] netlink: 'syz.5.3046': attribute type 17 has an invalid length. [ 575.888872][T17811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.934470][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 576.056737][T17772] chnl_net:caif_netlink_parms(): no params data found [ 576.310646][T17814] lo speed is unknown, defaulting to 1000 [ 576.365239][T17814] lo speed is unknown, defaulting to 1000 [ 576.379953][T17825] netlink: 'syz.0.3050': attribute type 10 has an invalid length. [ 576.449258][T17772] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.489125][T17772] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.520048][T17772] bridge_slave_0: entered allmulticast mode [ 576.542437][T17772] bridge_slave_0: entered promiscuous mode [ 576.562983][T17772] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.581218][T17772] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.600503][T17772] bridge_slave_1: entered allmulticast mode [ 576.610905][T17772] bridge_slave_1: entered promiscuous mode [ 576.669794][T17827] lo speed is unknown, defaulting to 1000 [ 576.680860][T17827] lo speed is unknown, defaulting to 1000 [ 576.692861][ T5867] Bluetooth: hci1: command tx timeout [ 576.745397][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 576.907263][T17772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.966853][T17772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.020228][T17841] lo speed is unknown, defaulting to 1000 [ 577.264181][T17841] lo speed is unknown, defaulting to 1000 [ 577.333212][T17772] team0: Port device team_slave_0 added [ 577.619182][T17858] wlan0 speed is unknown, defaulting to 1000 [ 577.621237][T17772] team0: Port device team_slave_1 added [ 577.758501][T17772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.765843][T17772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.792900][T17772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.807988][T17858] wlan0 speed is unknown, defaulting to 1000 [ 577.810478][T17879] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3064'. [ 577.839260][T17772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.847024][T17772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.878735][T17772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.893173][T17858] wlan0 speed is unknown, defaulting to 1000 [ 577.899438][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 578.208920][T17889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3066'. [ 578.219064][T17889] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3066'. [ 578.232992][T17772] hsr_slave_0: entered promiscuous mode [ 578.241823][T17772] hsr_slave_1: entered promiscuous mode [ 578.443707][ T5999] wlan0 speed is unknown, defaulting to 1000 [ 578.453419][T17858] infiniband syz0: set down [ 578.466863][T17858] infiniband syz0: added wlan0 [ 578.493615][T17858] syz0: rxe_create_cq: returned err = -12 [ 578.507261][T17858] infiniband syz0: Couldn't create ib_mad CQ [ 578.526448][T17858] infiniband syz0: Couldn't open port 1 [ 578.591853][T17858] RDS/IB: syz0: added [ 578.657267][T17858] wlan0 speed is unknown, defaulting to 1000 [ 578.754103][ T5867] Bluetooth: hci1: command tx timeout [ 578.947636][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'. [ 579.066154][T17906] lo speed is unknown, defaulting to 1000 [ 579.098023][T17772] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.118361][T17772] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.124709][T17912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3072'. [ 579.156478][T17915] netlink: 'syz.3.3073': attribute type 10 has an invalid length. [ 579.219509][T17917] netlink: 'syz.3.3073': attribute type 10 has an invalid length. [ 579.232395][T17906] lo speed is unknown, defaulting to 1000 [ 579.239365][T17917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3073'. [ 579.275507][T17907] netlink: 'syz.5.3071': attribute type 16 has an invalid length. [ 579.285905][T17907] netlink: 'syz.5.3071': attribute type 17 has an invalid length. [ 579.338241][T17772] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.375336][T17772] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.540743][T17917] batadv0: entered allmulticast mode [ 579.571880][T17772] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.604282][T17772] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.645962][T17858] wlan0 speed is unknown, defaulting to 1000 [ 579.647341][T17911] lo speed is unknown, defaulting to 1000 [ 579.664794][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3074'. [ 579.665206][ T6156] net_ratelimit: 7 callbacks suppressed [ 579.665222][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 579.708742][T17911] lo speed is unknown, defaulting to 1000 [ 579.726535][T17772] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.752482][T17772] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.815405][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 579.840256][T17925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3074'. [ 579.994472][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 580.041555][T17772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 580.066340][T17772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 580.089991][T17772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 580.103160][T17772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 580.144984][T17935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3075'. [ 580.183794][T17911] wlan0 speed is unknown, defaulting to 1000 [ 580.355254][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 580.382514][T17772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.415723][T17772] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.431418][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.438659][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.462659][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.469972][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.507079][T17858] wlan0 speed is unknown, defaulting to 1000 [ 580.534988][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 580.644789][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 580.756461][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 580.834247][ T5867] Bluetooth: hci1: command tx timeout [ 580.856993][T17858] wlan0 speed is unknown, defaulting to 1000 [ 580.874220][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 580.917239][T17772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.971502][T17772] veth0_vlan: entered promiscuous mode [ 581.003497][T17772] veth1_vlan: entered promiscuous mode [ 581.024849][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 581.082872][T17772] veth0_macvtap: entered promiscuous mode [ 581.111861][T17772] veth1_macvtap: entered promiscuous mode [ 581.166930][T17772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.188810][T17772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.211282][ T6173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.249985][ T6173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.269757][ T6173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.289587][T17858] wlan0 speed is unknown, defaulting to 1000 [ 581.299892][ T6173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.338244][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 581.403355][ T6156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.411642][ T6156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.526519][T17858] wlan0 speed is unknown, defaulting to 1000 [ 581.693758][T17858] wlan0 speed is unknown, defaulting to 1000 [ 581.992305][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3079'. [ 582.309470][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.318606][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.623266][T17965] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3082'. [ 582.633461][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 582.696767][T17965] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 582.841831][T17971] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3084'. [ 582.864204][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3084'. [ 582.873205][T17969] nbd: socks must be embedded in a SOCK_ITEM attr [ 582.908919][T17969] block nbd2: shutting down sockets [ 582.914413][ T5867] Bluetooth: hci1: command tx timeout [ 583.036319][T17978] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 583.164446][T17984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3089'. [ 583.238954][T17985] netlink: 'syz.5.3090': attribute type 30 has an invalid length. [ 583.268503][T17988] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 583.269932][T17986] lo speed is unknown, defaulting to 1000 [ 583.366697][T17986] lo speed is unknown, defaulting to 1000 [ 583.397731][T17986] wlan0 speed is unknown, defaulting to 1000 [ 583.433110][T17988] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 583.474260][T17988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3088'. [ 583.483567][T17988] batadv0: entered promiscuous mode [ 583.486291][T17773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 583.495856][T17988] batadv0: entered allmulticast mode [ 583.503517][T17773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 583.512404][T17773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 583.530531][T17773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 583.538816][T17773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 583.549214][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 583.560215][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 583.574417][T17999] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 583.633650][T17996] lo speed is unknown, defaulting to 1000 [ 583.642333][T17996] lo speed is unknown, defaulting to 1000 [ 584.220157][T17996] wlan0 speed is unknown, defaulting to 1000 [ 584.794794][ T6158] net_ratelimit: 26 callbacks suppressed [ 584.794817][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 585.523340][T18046] __nla_validate_parse: 3 callbacks suppressed [ 585.523363][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3102'. [ 585.524655][T18049] Bluetooth: MGMT ver 1.23 [ 585.635633][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 585.635984][ T5867] Bluetooth: hci0: command tx timeout [ 585.737262][T17996] chnl_net:caif_netlink_parms(): no params data found [ 585.866345][T18059] netlink: 'syz.1.3107': attribute type 21 has an invalid length. [ 585.931789][T18059] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3107'. [ 586.043392][T17996] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.051406][T17996] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.059813][T17996] bridge_slave_0: entered allmulticast mode [ 586.069115][T17996] bridge_slave_0: entered promiscuous mode [ 586.078793][T17996] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.086461][T17996] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.104449][T17996] bridge_slave_1: entered allmulticast mode [ 586.112829][T17996] bridge_slave_1: entered promiscuous mode [ 586.138402][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3110'. [ 586.182272][T18081] netlink: 'syz.2.3112': attribute type 1 has an invalid length. [ 586.225014][T18081] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3112'. [ 586.245947][T17996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.262674][T17996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.290499][T18087] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 586.325697][T18087] IPv6: NLM_F_CREATE should be specified when creating new route [ 586.339989][T17996] team0: Port device team_slave_0 added [ 586.353854][T18087] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 586.396339][T17996] team0: Port device team_slave_1 added [ 586.465042][T17996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.472322][T17996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.503277][T17996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.522635][T17996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.530221][T17996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.561957][T17996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.614412][T18092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.640069][T18090] lo speed is unknown, defaulting to 1000 [ 586.662257][T18090] lo speed is unknown, defaulting to 1000 [ 586.788287][T18090] wlan0 speed is unknown, defaulting to 1000 [ 586.802547][T17996] hsr_slave_0: entered promiscuous mode [ 586.826206][T17996] hsr_slave_1: entered promiscuous mode [ 586.832785][T17996] debugfs: 'hsr0' already exists in 'hsr' [ 586.850680][T17996] Cannot create hsr debugfs directory [ 587.008278][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3120'. [ 587.049831][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3120'. [ 587.076396][T18109] netlink: 'syz.3.3121': attribute type 1 has an invalid length. [ 587.167049][T18113] netlink: 'syz.5.3123': attribute type 32 has an invalid length. [ 587.185680][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 587.210408][T18110] tipc: Started in network mode [ 587.215665][T18110] tipc: Node identity beb3ee916c08, cluster identity 4711 [ 587.223038][T18110] tipc: Enabled bearer , priority 0 [ 587.252813][T18117] netlink: 'syz.3.3121': attribute type 1 has an invalid length. [ 587.265144][T18119] syzkaller0: entered promiscuous mode [ 587.271697][T18119] syzkaller0: entered allmulticast mode [ 587.289496][T18113] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 587.424449][T18124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3124'. [ 587.541369][T18108] tipc: Resetting bearer [ 587.580508][T18108] tipc: Disabling bearer [ 587.604536][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 587.682099][T18135] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3126'. [ 587.714515][ T5867] Bluetooth: hci0: command tx timeout [ 587.977652][T18141] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 588.052028][T17996] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.107562][T17996] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.111709][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 588.123990][T17996] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 588.194775][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 588.229940][T17996] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.247859][T17996] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.257858][T17996] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 588.315812][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 588.341039][T17996] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.364708][T17996] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.384944][T17996] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 588.444349][ T6156] bond3: (slave bridge5): failed to get link speed/duplex [ 588.492077][T17996] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.502293][T17996] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.536613][T17996] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 588.574099][ T6173] bond3: (slave bridge5): failed to get link speed/duplex [ 588.859366][T17996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.884882][T17996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.928549][T17996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.951476][T17996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 589.013714][T18173] syz_tun: entered allmulticast mode [ 589.045395][T18173] dvmrp8: entered allmulticast mode [ 589.098642][T18173] lo speed is unknown, defaulting to 1000 [ 589.113545][T18173] lo speed is unknown, defaulting to 1000 [ 589.132701][T18173] wlan0 speed is unknown, defaulting to 1000 [ 589.134458][T18180] validate_nla: 1 callbacks suppressed [ 589.134474][T18180] netlink: 'syz.5.3140': attribute type 23 has an invalid length. [ 589.521432][T17996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.602711][T17996] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.653122][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.660416][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.766589][T12413] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.773757][T12413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.794658][ T5867] Bluetooth: hci0: command tx timeout [ 589.848632][ T6158] net_ratelimit: 6 callbacks suppressed [ 589.848655][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 589.876331][T18172] syz_tun: left allmulticast mode [ 589.881508][T18172] dvmrp8: left allmulticast mode [ 590.034257][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 590.094328][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 590.118750][T17996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.205643][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 590.337375][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 590.522319][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 590.634234][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 590.721164][T18235] __nla_validate_parse: 3 callbacks suppressed [ 590.721185][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 590.854324][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 590.881312][T17996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.996433][T12413] bond3: (slave bridge5): failed to get link speed/duplex [ 591.024290][T17996] veth0_vlan: entered promiscuous mode [ 591.032674][T18244] netlink: 'syz.5.3158': attribute type 1 has an invalid length. [ 591.049805][T17996] veth1_vlan: entered promiscuous mode [ 591.057856][T18244] netlink: 'syz.5.3158': attribute type 1 has an invalid length. [ 591.149774][T17996] veth0_macvtap: entered promiscuous mode [ 591.180648][T17996] veth1_macvtap: entered promiscuous mode [ 591.230000][T17996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.269400][T17996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.304932][ T6158] bond3: (slave bridge5): failed to get link speed/duplex [ 591.335495][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.354456][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.388450][T18254] netlink: 'syz.5.3160': attribute type 14 has an invalid length. [ 591.425439][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.455279][T18248] lo speed is unknown, defaulting to 1000 [ 591.455293][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.536259][T18248] lo speed is unknown, defaulting to 1000 [ 591.544373][ T36] bond3: (slave bridge5): failed to get link speed/duplex [ 591.600983][T18263] netlink: 'syz.2.3162': attribute type 1 has an invalid length. [ 591.609567][T18248] wlan0 speed is unknown, defaulting to 1000 [ 591.643424][T18263] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3162'. [ 591.867680][T18275] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 591.884990][ T5867] Bluetooth: hci0: command tx timeout [ 591.917077][T18277] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 592.003057][ T6156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.026333][ T6156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.086596][T18282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3168'. [ 592.141666][T18280] tipc: Enabled bearer , priority 0 [ 592.159017][T18280] syzkaller0: entered promiscuous mode [ 592.166086][T18280] syzkaller0: entered allmulticast mode [ 592.168049][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 592.176076][T12413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.231765][T12413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.262408][T18280] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3167'. [ 592.347292][T18280] tipc: Resetting bearer [ 592.398933][T18279] tipc: Resetting bearer [ 592.476733][T18279] tipc: Disabling bearer [ 592.862511][T18313] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3179'. [ 593.104813][T18328] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3182'. [ 593.581743][T17773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.593779][T17773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 593.602713][T17773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 593.616167][T17773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 593.631229][T17773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.659578][T18347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3186'. [ 593.713221][T18347] netlink: 'syz.2.3186': attribute type 1 has an invalid length. [ 593.745144][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'. [ 593.766422][T18341] lo speed is unknown, defaulting to 1000 [ 593.777762][T18341] lo speed is unknown, defaulting to 1000 [ 593.788848][T18341] wlan0 speed is unknown, defaulting to 1000 [ 593.829628][T18353] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3188'. [ 594.167029][T18361] netlink: 'syz.0.3191': attribute type 4 has an invalid length. [ 594.805324][ T36] batman_adv: batadv0: Removing interface: vlan0 [ 595.146293][ T36] bond3 (unregistering): (slave bridge5): Removing an active aggregator [ 595.155860][ T36] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 595.165897][ T36] bridge5 (unregistering): left promiscuous mode [ 595.172267][ T36] bridge5 (unregistering): left allmulticast mode [ 595.425508][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 595.434519][ T36] bond0 (unregistering): Released all slaves [ 595.557352][ T36] bond1 (unregistering): Released all slaves [ 595.680182][ T36] bond2 (unregistering): Released all slaves [ 595.725523][ T5867] Bluetooth: hci3: command tx timeout [ 595.811392][ T36] bond3 (unregistering): Released all slaves [ 595.930980][ T36] bond4 (unregistering): Released all slaves [ 595.968552][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 595.976742][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 595.984924][ C0] bridge0: port 3(macsec0) entered learning state [ 596.081456][ T36] bond5 (unregistering): Released all slaves [ 596.219650][T18393] __nla_validate_parse: 3 callbacks suppressed [ 596.219672][T18393] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3201'. [ 596.263095][T18390] lo speed is unknown, defaulting to 1000 [ 596.284045][T18393] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3201'. [ 596.382621][T18389] lo speed is unknown, defaulting to 1000 [ 596.406551][T18390] lo speed is unknown, defaulting to 1000 [ 596.406569][ T36] tipc: Disabling bearer [ 596.437751][ T36] tipc: Disabling bearer [ 596.462799][ T36] tipc: Left network mode [ 596.468118][T18389] lo speed is unknown, defaulting to 1000 [ 596.514159][T18390] wlan0 speed is unknown, defaulting to 1000 [ 597.105372][T18415] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 597.157283][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 597.197972][T18341] chnl_net:caif_netlink_parms(): no params data found [ 597.205343][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 597.237050][T18410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3206'. [ 597.297895][T18420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3206'. [ 597.440284][T18389] wlan0 speed is unknown, defaulting to 1000 [ 597.556086][T18432] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3210'. [ 597.565364][T18432] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3210'. [ 597.717787][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 597.729822][ T10] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 597.738264][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 597.747486][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 597.757568][ T10] Workqueue: events l2cap_info_timeout [ 597.763165][ T10] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 597.769097][ T10] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 a1 53 09 cc 66 66 66 66 66 66 2e [ 597.788715][ T10] RSP: 0000:ffffc900000f77a8 EFLAGS: 00010206 [ 597.794803][ T10] RAX: dffffc0000000000 RBX: ffffffff895b1928 RCX: 589f21c352e53700 [ 597.802780][ T10] RDX: 0000000000000000 RSI: ffffffff895b1928 RDI: 000000000000004b [ 597.810756][ T10] RBP: ffffffff8a85bdf5 R08: 0000000000000001 R09: 0000000000000000 [ 597.819247][ T10] R10: dffffc0000000000 R11: ffffffff8a85bdb0 R12: 0000000000000000 [ 597.827253][ T10] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 597.835312][ T10] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 597.844245][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.850830][ T10] CR2: 0000001b2fd17ff8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 597.858899][ T10] Call Trace: [ 597.862178][ T10] [ 597.865108][ T10] __kasan_check_byte+0x12/0x40 [ 597.869992][ T10] lock_acquire+0x8d/0x360 [ 597.874409][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.879612][ T10] ? __cancel_work+0x254/0x2e0 [ 597.884384][ T10] lock_sock_nested+0x48/0x100 [ 597.889146][ T10] ? l2cap_sock_ready_cb+0x45/0x140 [ 597.894430][ T10] l2cap_sock_ready_cb+0x45/0x140 [ 597.899456][ T10] l2cap_conn_start+0x76a/0xe50 [ 597.904316][ T10] ? __pfx_l2cap_conn_start+0x10/0x10 [ 597.909687][ T10] ? __lock_acquire+0xab9/0xd20 [ 597.914543][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 597.919571][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 597.925297][ T10] l2cap_info_timeout+0x68/0xa0 [ 597.930148][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 597.935872][ T10] process_scheduled_works+0xae1/0x17b0 [ 597.941444][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.947435][ T10] worker_thread+0x8a0/0xda0 [ 597.952031][ T10] kthread+0x70e/0x8a0 [ 597.956099][ T10] ? __pfx_worker_thread+0x10/0x10 [ 597.961224][ T10] ? __pfx_kthread+0x10/0x10 [ 597.965874][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.971175][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.976416][ T10] ? __pfx_kthread+0x10/0x10 [ 597.981051][ T10] ret_from_fork+0x439/0x7d0 [ 597.985650][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 597.990765][ T10] ? __switch_to_asm+0x39/0x70 [ 597.995547][ T10] ? __switch_to_asm+0x33/0x70 [ 598.000312][ T10] ? __pfx_kthread+0x10/0x10 [ 598.004927][ T10] ret_from_fork_asm+0x1a/0x30 [ 598.009702][ T10] [ 598.012718][ T10] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 598.018572][ T10] ---[ end trace 0000000000000000 ]--- [ 598.025367][ T5867] Bluetooth: hci3: command tx timeout [ 598.034443][ T10] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 598.040477][ T10] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 a1 53 09 cc 66 66 66 66 66 66 2e [ 598.060293][ T10] RSP: 0000:ffffc900000f77a8 EFLAGS: 00010206 [ 598.066531][ T10] RAX: dffffc0000000000 RBX: ffffffff895b1928 RCX: 589f21c352e53700 [ 598.074654][ T10] RDX: 0000000000000000 RSI: ffffffff895b1928 RDI: 000000000000004b [ 598.082668][ T10] RBP: ffffffff8a85bdf5 R08: 0000000000000001 R09: 0000000000000000 [ 598.091315][ T10] R10: dffffc0000000000 R11: ffffffff8a85bdb0 R12: 0000000000000000 [ 598.099826][ T10] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 598.108148][ T10] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 598.117832][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.124577][ T10] CR2: 00007f736fd17d60 CR3: 0000000074cec000 CR4: 00000000003526f0 [ 598.154072][ T10] Kernel panic - not syncing: Fatal exception [ 598.160450][ T10] Kernel Offset: disabled [ 598.164771][ T10] Rebooting in 86400 seconds..