last executing test programs: 3m3.480128422s ago: executing program 0 (id=785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x7, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xffffffffffffffbc, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r4, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) 3m3.232119946s ago: executing program 0 (id=790): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x59}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27", 0xfdef}], 0x1) socket$netlink(0x10, 0x3, 0x10) 3m1.383892099s ago: executing program 0 (id=800): socketpair(0x10, 0x5, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x61]}}, &(0x7f00000005c0)=""/5, 0x27, 0x5, 0x0, 0x46}, 0x28) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x0, 0x1, 0x2, 0x6, 0x18, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0xd, 0xa, 0x6, 0x7, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x1, 0x3, 0x5, 0xffffffffffffff96, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0xc7, 0xdf, &(0x7f0000000480)=""/223, 0x41100, 0x61, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000640)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x8, 0x401, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0), &(0x7f0000000700)=[{0x5, 0x1, 0xc, 0x3}, {0x0, 0x3, 0x7}, {0x2, 0x3, 0x0, 0x5}, {0x3, 0x1, 0x6}, {0x5, 0x3, 0x5, 0x2}, {0x1, 0x5, 0x2, 0x1}, {0x5, 0x3, 0xe, 0xc}, {0x5, 0x1, 0xf, 0x3}, {0x2, 0x1, 0x6, 0xa}], 0x10, 0x9}, 0x94) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=0x1000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000018c0)=0x0) r8 = openat$cgroup_pressure(r4, &(0x7f0000001900)='memory.pressure\x00', 0x2, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000001940)=[{0x3, 0x3, {0x1, 0x0, 0x3}, {0xe5220d635c70dfd9, 0x0, 0x3}, 0xfd, 0x2}, {0x3, 0x0, {0x2, 0xff, 0x3}, {}, 0xff, 0x9f11fd8cbe2f39d4}, {0x0, 0x0, {0x1, 0xf0, 0x2}, {0x1}, 0xfe, 0x1}], 0x60) r9 = socket(0xb, 0xa, 0x7fff) bind$pptp(r9, &(0x7f00000019c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getpeername(r9, &(0x7f0000001a00)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000001a80)=0x80) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000001ac0)=""/32, &(0x7f0000001b00)=0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001b40)={0x0, 0xffff8000}, &(0x7f0000001b80)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001bc0)={r10, @in6={{0xa, 0x4e23, 0x3, @private0, 0x1b}}}, &(0x7f0000001c80)=0x84) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$cgroup_pressure(r6, &(0x7f0000001cc0)={'full', 0x20, 0xfffffffffffffc00, 0x20, 0x8000000000000000}, 0x2f) unshare(0x200) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r11, &(0x7f0000001d00)=@un=@abs, &(0x7f0000001d80)=0x80, 0x80800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000001e40)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r12, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x5c, r13, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4c010) r15 = accept4$netrom(r4, &(0x7f0000001f80)={{0x3, @null}, [@null, @rose, @remote, @bcast, @null, @default, @null, @rose]}, &(0x7f0000002000)=0x48, 0x800) getsockopt$netrom_NETROM_T2(r15, 0x103, 0x2, &(0x7f0000002040)=0xffff, &(0x7f0000002080)=0x4) 3m1.22388672s ago: executing program 0 (id=802): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}}]}, 0x4c}}, 0x24044094) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 3m0.895884686s ago: executing program 0 (id=809): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000a33553df177fe3a2000000080004000500000034000100240001006270445f686173685f66756e6300000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 3m0.413462456s ago: executing program 0 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0xfffffff8, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc, 0x4}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) 3m0.096483333s ago: executing program 32 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0xfffffff8, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc, 0x4}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) 2m24.905356774s ago: executing program 3 (id=1220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32, @ANYRESHEX=r1], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x238, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe829}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private1, 0xb7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x6, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7b6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2c1}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x50c5883f4b52277d}, 0x48080) 2m24.579025793s ago: executing program 3 (id=1225): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r4, 0x25, 0x6, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="090000000000000000000005000000000000897d95af94e7d9280000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14, 0x800) getsockname(r12, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000500)=0x80) 2m24.236162052s ago: executing program 3 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001fd3d3521fa17abea2a01f5374223f5b5d2b20039cc49e19f30b37b80f03d6f900c9ad481a29d6b08d907138e53f35aeccccc34e86251d1b4b2e23e3aee8d44748d150b8e02fc18d57b4b349e8273f3c8df488ce998dddadad68d0f235be4b9f33c81778829fd852da87fda763347bce92d9972042a8dbfbbf3d8bb1f23d47339258a4473a09d1d78fdcf2664483079e06f37e18775ec1af43e325279fcff67c1043a409853e50e797b04d40a69a"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x8001}, &(0x7f0000000100)=0x8) 2m24.119169312s ago: executing program 3 (id=1233): syz_emit_ethernet(0x248, &(0x7f00000001c0)={@random="52c507062dbc", @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, '5v^', 0x212, 0x6, 0x0, @empty, @empty, {[@hopopts={0x88, 0x31, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0xffffffffffffffdb, @mcast2}, @generic={0x7, 0x84, "279a71a270c4eac718c4d2edd0e46cd3148c81ad1aa2ad8a6f8cfead99de74b76ab4156f5cd50e16d76688a7d6d7789d5d4380797af71ea8544ac8e512dff4a5c0e9355ef6e33d0845babfcba643a7c8112d95f17520f32358daeadb2a1063a03a3a4f48bc5c03ff3d89fa29bc4d9845c962b62c2e3f177419e595f1bcfdffb81359e4ad"}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x32}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0xf6}, @generic={0x46, 0xc7, "cd26955f3129a9d64774624f3366bc4ffb7df2d0497876b3bfaad2a6d79ceaec179fcae6aa323fb3ee03dafc57b60633c3ab77f4c8f097b40a5801425d6c8856f8f90877831017d173b9db4a22dd0b79816487369ae5a67812f65b0d2e2a83b8a81d4dcd0f2b58d07520724211a87c2c5168d2b9685e57fecd53cd2f46c43f2b8c4b2eafc6080d84ca49461be506a3ad630275cf12381ff5e9f253190986fd2ffb5fea8aa780bf87d4858ea1c3a560b30d99dd691d31a22920e6df7339ef223098955b77ae05ad"}]}, @fragment={0x1, 0x0, 0xb2, 0x1, 0x0, 0x15, 0x64}, @routing={0x3c, 0xa, 0x1, 0x7, 0x0, [@remote, @empty, @empty, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}], @payload_conn={{{0x1a, 0x0, 0x0, 0x1, 0x1, 0x6, 0x2, 0x2, 0x0, 0x0, 0x1, 0x5, 0xbeb0b3018e5a95a3, 0x0, 0xfff7, 0x6e, 0x1, 0x4e23, 0x4e20}}, [0x0, 0x0]}}}}}}, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r1, 0x2f, 0x2010}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x34, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {0x10, 0xf}, {0x4, 0x6}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20000810) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x59df, 0x100, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @local, {[@noop]}}}}}) (async) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000240)=0xa, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0xfff1}, {0xa, 0xfff2}, {0x7, 0x9}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xa8d}, {0x8, 0xb, 0xfe11}, {0x8, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) 2m23.759854067s ago: executing program 3 (id=1240): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r9, 0x11d, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2e, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x24000840) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001340)=@newtclass={0xd2c, 0x28, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffe0, 0xb}, {0x6, 0x3}, {0xe, 0x4}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_HDR={0x26, 0x3, "a46df402b000e9db1e0b43bbc54d3eaa744cdfabead3cd69bca1410e885beffb018c"}]}}, @c_atm={{0x8}, {0x1c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x8}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xf}}]}}, @c_cbq={{0x8}, {0xc90, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x1}, 0x81}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa8, 0x1, 0x6, 0x4, 0x1, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0xa}, 0xfffffffa, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7, 0x3, 0x58, 0x6, 0xd61, 0x7fff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0x9, 0x1, 0xb, 0x2, 0x31800, 0xa8000000, 0x9, 0x9fda, 0x3fa, 0xea, 0x1, 0x5, 0x1, 0x7, 0x2, 0x4, 0x8, 0xf2f2, 0xfffffff9, 0xa2, 0x10, 0x6ea9, 0xe, 0x8001, 0xc, 0x200, 0x3, 0x2, 0x480000, 0x80000001, 0xabe, 0x10, 0x8, 0x7, 0xffff, 0x6, 0x5, 0x3, 0x446, 0x8, 0x4, 0x5, 0x7, 0xe7e, 0x4, 0xffffeba7, 0x3, 0x0, 0x6d03, 0x9, 0x3ff, 0xfffffffa, 0x8, 0x8, 0x401, 0x7, 0x8, 0x9, 0x0, 0x8, 0x1000, 0x2, 0x1ff, 0x2, 0x8, 0xf79, 0x1, 0x2, 0x20, 0xfffffffd, 0x1c0, 0x3, 0x8125, 0x7, 0xff, 0x9, 0x9, 0x0, 0xa, 0x3, 0x4, 0x5, 0x7, 0x80, 0xfedf, 0x81, 0xb, 0x8, 0x9a7d, 0x4, 0xb8, 0x4, 0x800, 0x4, 0x7, 0x2, 0x8, 0xfffffffd, 0x6, 0x387c3756, 0x3, 0xffffff17, 0x0, 0x7, 0x80000001, 0x101, 0x9, 0x2, 0xb, 0xffffffff, 0x1, 0xadc5, 0x7, 0x1792, 0x81, 0xc7, 0xfffffff8, 0x0, 0x0, 0x3, 0x6, 0xcdd7, 0x6, 0x8, 0x9, 0x1d2, 0x94a, 0x5, 0x0, 0xe, 0x8, 0xc4b2, 0x7, 0x6, 0x7, 0x0, 0x2, 0x1, 0x8, 0xc, 0xea, 0x5, 0x0, 0x0, 0xd, 0x100000, 0x3, 0x5, 0x4, 0xfffffff8, 0x2, 0xb7c, 0x3, 0x41f29f2f, 0x7, 0x6, 0x5, 0x5, 0x401, 0x9, 0x5, 0xd07, 0xa4, 0xb92, 0x9d, 0x7fff, 0x401, 0x4, 0x4, 0xd05, 0x7, 0x5, 0x10, 0x5, 0xfffffffe, 0x2, 0x10000, 0x2, 0x5, 0x7fff, 0x4, 0x6, 0xfff, 0x2, 0x0, 0xffffffc0, 0x7, 0x7, 0x6, 0x1ff, 0x7, 0x6, 0xd, 0x3, 0x7, 0x2, 0x400, 0x7, 0x2, 0x8, 0x0, 0x4, 0x70da, 0x78d, 0x1, 0x5c0, 0x3, 0x0, 0x8001, 0xff, 0xd2, 0x5, 0x4, 0x4, 0x630, 0x800, 0x0, 0x8, 0x6, 0x0, 0x5, 0x0, 0x6, 0x28e, 0x5, 0x400, 0x4, 0x0, 0x0, 0x3f, 0x7fffffff, 0x7, 0x9, 0x0, 0x7, 0x6, 0x8, 0x8000, 0x200, 0x5, 0x6, 0xa6e, 0xd59d, 0x4, 0xa, 0x7, 0x6, 0xe, 0x7, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0xffff]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x2, 0x8, 0x2, 0x0, 0x7fff, 0x0, 0x800}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0x3}, 0x7, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x18a, 0x3ff, 0x24, 0x5, 0x1b25, 0x4f, 0xa5, 0x9, 0x4, 0x8, 0x0, 0xfffffff4, 0x2, 0x8001, 0x5, 0x40, 0x3778, 0x7, 0x7, 0x4, 0x9, 0xd5f, 0x100, 0x2, 0x43f0ec45, 0x5f2e, 0x5, 0x7, 0xf, 0x7, 0x10001, 0x0, 0x5, 0x147b, 0xffff3f80, 0x6, 0x6, 0x8000, 0x1, 0x3, 0x9, 0xb5b9, 0x1b43, 0x7, 0x6, 0x8, 0x2, 0x72c, 0x400, 0x7, 0x5, 0x8, 0x0, 0x400, 0x1, 0x935, 0x6, 0x1, 0x4000000, 0x4, 0x3, 0x2000, 0x9, 0x2, 0xffffffc0, 0x2, 0xfffffffb, 0x6, 0x10, 0x3, 0x9, 0x9, 0xa, 0x1, 0x3, 0x5, 0x9, 0xdc, 0x6, 0x7f, 0x80000001, 0x0, 0x0, 0x7bd, 0x8, 0xf7, 0x9be4, 0xaf, 0x100, 0x3, 0x0, 0x5, 0xfffffffc, 0x200, 0xfff, 0x800, 0x8, 0x29e, 0x9e, 0x8001, 0xffffff00, 0x7, 0x3ff, 0x800, 0x3, 0x6, 0x80000000, 0x0, 0x4724, 0x5, 0x8, 0x6, 0x0, 0x1f0, 0xffff, 0x80000001, 0x8, 0x7, 0x1, 0x7, 0x0, 0xe, 0x2, 0x4, 0x4, 0xd99, 0x7ea5, 0x8001, 0x3, 0x1, 0x80000001, 0xe6, 0x4, 0x401, 0xe, 0x400, 0x400, 0x2, 0x87aa53e4, 0xfffffffe, 0xc, 0x7, 0x4, 0x1, 0x1, 0x0, 0x100, 0xd, 0xffffffff, 0xc, 0x6, 0xd, 0xfffffffc, 0x0, 0x10, 0x81, 0xe, 0x4a2d, 0x1, 0xff, 0x9, 0x7439, 0x81, 0x7, 0x0, 0x8d6, 0x0, 0x6, 0x6, 0xb2f, 0x9, 0xecd7, 0x9, 0x80000001, 0x40004000, 0x4, 0x2b08, 0xa743, 0xfffff14d, 0x7, 0x1, 0x0, 0x3, 0xceb2, 0x9, 0x3, 0x80000000, 0x101, 0x1, 0x4, 0x3, 0x5, 0x8, 0xe, 0x8c95, 0x7f, 0x4e8, 0xb2, 0x80000001, 0xc3a6, 0x73, 0x80, 0x1, 0x8000, 0xffff9448, 0x9, 0x5, 0x8, 0x800, 0x9, 0x1ff, 0x8, 0x6, 0x3, 0xba9, 0xfffffffb, 0x9, 0x0, 0x80000001, 0x7ff, 0x1, 0x8, 0x60ef, 0x12ab, 0xfffffffb, 0x800, 0x6, 0x0, 0x24e212cd, 0x0, 0x80, 0xd, 0x7fffffff, 0x7f, 0x101, 0x6, 0x1, 0x7ff, 0x5, 0x0, 0x7ff, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x3, 0x3, 0x3, 0xa, 0x80000001, 0x0, 0x0, 0x5, 0xfff, 0x200]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0x80000000, 0xffffff00, 0x6, 0x3fc, 0xb9a, 0x9, 0x3, 0x6, 0x7e04, 0x8000, 0xd6be, 0xdf, 0x5, 0xffff2468, 0x841, 0x7ee, 0x0, 0x1000, 0x9, 0x1, 0x1a7, 0x6, 0x200, 0x4, 0x4fda, 0x5, 0xffff, 0xc92, 0x6, 0x1, 0x5b1, 0xefb, 0x68e, 0xfffffd51, 0x5, 0x3, 0x91, 0x1, 0x5, 0xfffffff9, 0x6, 0x2, 0x0, 0x9, 0x2, 0x3, 0xffffff80, 0x4b66c034, 0x8bb, 0x8000, 0x80000001, 0xad7e, 0x4, 0x5, 0x200, 0x7, 0x3, 0xb, 0x8, 0x72b530a, 0xffff, 0xeb, 0x5, 0x2, 0x6, 0x5, 0x80000000, 0xffffff81, 0x8, 0x4, 0x0, 0xfff, 0x1, 0x4, 0x3, 0x9, 0x10, 0x0, 0x722, 0x1, 0x9, 0x2, 0x6, 0x1, 0x6, 0x4b2, 0x7, 0x0, 0x6, 0x80000001, 0x1, 0x8, 0xccc1, 0x1ff, 0x15, 0xffff589e, 0xfff, 0xfff, 0x0, 0xf, 0x5, 0x1, 0x1ff, 0xff, 0x8, 0xff, 0x8, 0x9, 0x10000, 0x100, 0x8, 0x5, 0x2, 0x0, 0x9, 0x400, 0x8000, 0x2, 0xaf0, 0x7fff, 0x1ff, 0x8, 0x3, 0x0, 0x7, 0x6, 0x8199, 0x8, 0x1, 0xd, 0x0, 0x714b5c7f, 0x8, 0x3ff, 0x0, 0x8, 0xfff, 0x5, 0xfff, 0x4, 0x6, 0x1, 0x6, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x78, 0x0, 0x10001, 0x7, 0xfffffffb, 0x8, 0x3, 0xffff, 0xf85e, 0x4, 0x1000, 0x101, 0x7, 0x4, 0x2, 0x7f, 0xc90e, 0x338c4, 0xfffffdb7, 0x6, 0x4, 0x84, 0x3, 0xf, 0x8, 0x1, 0x7fffffff, 0x9, 0x9, 0x3, 0x0, 0x7, 0x1ba0fa50, 0x3, 0x3, 0x0, 0x10, 0x2, 0xfffffff7, 0x8001, 0x5f, 0x7, 0x2, 0x6, 0x7, 0x4, 0x0, 0x5, 0x7fff, 0x400, 0x3, 0x0, 0x3ff, 0x8000, 0x69, 0x800, 0x2, 0x1, 0x7, 0xffffffff, 0x10, 0x3, 0x3, 0x3, 0x4, 0x780000, 0x8, 0xd, 0xffffa9d0, 0x10000, 0x4, 0x0, 0xf4, 0x5, 0x9, 0x2, 0x9, 0x1ff, 0x8, 0x3, 0x8001, 0xffff, 0x9, 0x0, 0xffff, 0x8, 0x0, 0xa6, 0xb, 0x0, 0x6, 0xd60, 0x3, 0x9, 0x1, 0xf, 0x3f34, 0x80, 0x5, 0x2100, 0x8, 0x2, 0x9, 0x4, 0xffffff01, 0xe3]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3a, 0x1, 0x17, 0x5, 0x100, 0x7, 0x7, 0x3}}]}}]}, 0xd2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x8000) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 2m23.416442147s ago: executing program 3 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="4dc07f94", 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m1.189953798s ago: executing program 33 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="4dc07f94", 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m21.896016342s ago: executing program 4 (id=1776): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x10}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x401}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffff8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8042) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m21.728192166s ago: executing program 4 (id=1780): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) 1m21.540059775s ago: executing program 4 (id=1783): r0 = socket$inet_sctp(0x2, 0x4, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async, rerun: 64) r3 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x2b5}, 0x8) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x20020400) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r9, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x101}, &(0x7f0000001200)=0x10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r11, 0x29, 0x4, 0x0, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x9, 0x3, 0x4, 0x3, 0x4abc}, &(0x7f00000000c0)=0x98) 1m21.226374631s ago: executing program 4 (id=1787): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r1 = socket$inet(0x2, 0x3, 0x30) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x0, 0x8}, 0x48) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000440)=0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) unshare(0x20400) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x10, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x0, 0x5, 0xffffffff, 0x2808, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0xc5cb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xac, 0x91, &(0x7f0000000580)=""/145, 0x40f00, 0x8, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000680)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r2, r2, r2, r7, r2], &(0x7f0000000780)=[{0x4, 0x2, 0x6, 0x7}, {0x1, 0x3, 0x0, 0x4}, {0x4, 0x5, 0xf}, {0x405, 0x1, 0x4, 0x4}, {0x5, 0x2, 0xe, 0x8}, {0x1, 0x80000004, 0x9, 0x9}, {0x3, 0x3, 0xa, 0x9}], 0x10, 0x457}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a3060000000060a010400000000000000000100000008000b40000000e070b80480340001800a0001006d61746368000000240002800800020300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30000000001400000011000100"/196], 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="58027a0000000000000000003b00000095000000494860b4"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe}, 0x10, r4}, 0x94) 1m20.937167791s ago: executing program 4 (id=1792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000001c0)=""/36, &(0x7f0000000280)=0x24) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xfe}]}]}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r3, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-x86\x00'}, 0x58) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 1m20.792057001s ago: executing program 4 (id=1796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r4, r3, 0x4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r5, 0x3) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) accept4(r2, 0x0, 0x0, 0x80000) 43.513126308s ago: executing program 34 (id=1796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r4, r3, 0x4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r5, 0x3) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) accept4(r2, 0x0, 0x0, 0x80000) 1.809672142s ago: executing program 6 (id=2572): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7, 0x0, 0x0, 0x6}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) 1.695634415s ago: executing program 6 (id=2576): r0 = socket(0x25, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x10000, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r3, 0x8b22, &(0x7f0000000040)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x35, r4}) r6 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x5452, &(0x7f0000000000)) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x6) close(r0) 1.433931453s ago: executing program 2 (id=2578): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) accept$nfc_llcp(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @empty, 0x3}, 0x1c) listen(r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) pread64(r2, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) 1.356057943s ago: executing program 5 (id=2580): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r5, 0x49}, &(0x7f0000000580)=0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x409, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x2, 0x20}}, 0x20}}, 0x24048020) 1.322764699s ago: executing program 6 (id=2582): setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004380)=@newtaction={0x32c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbfc, {}, [{0x318, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8c, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xe5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) close(0x4) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) unshare(0x28000600) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.204106597s ago: executing program 2 (id=2583): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r4, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 1.071054424s ago: executing program 7 (id=2584): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x40800) (async) sendmsg(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@phonet={0x23, 0x8, 0x7, 0x8}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)="5dceb333d1b8b51b67bf6ea8aaa4be57256f6376fd5e83f4ec4ac331e7193ba874c566abf4aa1ce42fbdc87d96cbc0d76ed6531e7ec6f4b6ecaebf81cd7e", 0x3e}, {&(0x7f0000000200)="9a580b8ade6ffd887a65498aff1b9db3aa4ebadb29d4d09a4d658eaa30999cd11f53f584e726c41595857fdacb9caac6c26f610ed6a01dcd59c59bda2fee2ff7f8144bbbd6f8072bd0e8b75e9b7fbd6c53969f909fab1562e09358a5620349d55547f5a218", 0x65}, {&(0x7f0000000280)="fd7ed8c27cb5fd29a6386a66e17627e38ec703b2ebf669062fc1a9b2f571ed80fb795faba8f4abf70daa1fcd85d46119bfd72092694eb2e0c28b69619f0782cc8a2fc40a41c4981d656a6b83b0d4f171cfc824639c2b60fcb119e665473e762aa83181033da0ec1e69fc449d235c15314e3abe042242484259e7e4207d26405a6cbae4669ff1800f3f65a82ef628648d0836bf6af1610d4d422b9f728aa4b0a49d06c7605b0e6a6c4ff0062544e20ba56dd2b9eafe852c9332d1057c6875cce168449e59555ea9f9eb47", 0xca}, {&(0x7f0000000380)="1de6225589a2ea278f1b470e1899a1face4ff7ff917b02e5855e4b8ada3e61ebb98e2cf17c985ecfa6ee0b3802aca83304cc5aff8b2cedddc99a63dcf2a5ce1fd501ee5d6e4f542216d1b748f62b864340f94ab8a00d2732d38a2345c398545bafe99982f89922b5c8b621e3689012894b95ec5d407931500ad675fa0e52772aaab1f9a2e7b4c818b8954ab3011e4614b7", 0x91}, {&(0x7f0000000440)="92b5f3856ad96a5c1399e0f12ea543a20b2100377be9ad7c772849eee731ac85ac41327bdc2bf82b666543ab7465d7c10ac706238f8141abfedd4f89d18aadcae02e3715609c1297311bbfc81adc5dd97ee12517996b392082c1bedb6049ca13157d5da855aa9bf7a8cf64005d6216a49a2bb795fdd26e5f973b1957764da4ead2206eabfffdf29a2d965f96b0bafeb7815ef93a9cebf8a395641cd0e94108913b06987a6d", 0xa5}], 0x5, &(0x7f0000000580)=[{0x98, 0x1, 0xe, "7a9bbab6d1778df5e3eb9673dc491af0ccdd9426aa040226600e5210537a3c1562cb8337917f6e4c62dbb9823a5734a1733409b783f930bd9eae767fb5e5dc349adf2bbdf0b06a19ed74af787ba9307d16e13b821d6700bd3b9b16aea844a1e9ef71082c06c58f51dfafa0bc01b7c9f4e373f7579c45ad1d5001f184a53eab812ebced8495c705"}, {0xf8, 0x116, 0x401, "ab16818d247a435975ee44cb62755c4d2c7e9762fd3e45848e5b811fc503b7d5356520e51af1919805d219a0a0f0980483dbc94c8b41b7cfd18900caa8150c11d408c63241bc0355daaa3c12cfb84c401e39a02104475457047ee1b907a5093ae9aabaa9fedc8eafdb4b25041ea6018c69606f464c4ae4065e5ee78bbb30738701250c09aadb06402016c771aa0b14ebadc04bfed076570de38b555fc273ad555d75f36b28db8ecd361b9927db8f7f6c0c642c2c348af9ad01aca3c3a6cffdbb1e63bed0401bdbd11ec7cfcc464fcd2932aea3ab40b68653b6bbd077757312b7cbc45a203e3a"}, {0xf8, 0x3a, 0xa, "aecef9b33c5e31fed78fb557a4b7fbd60df1affd27e3d7bc4e2dc0600560e8ca5d9545ab62e8eb2be1c9363be0b960c55e8891a281e790b05cb99bafb0334d5eae0fcd4c9e17444705957ccbe9c46ae91f75c1f01879d9988f235a2a57b710b1585003cb69cd3509e152736bcae47239f8683ce0a42ed5e6a3f85373de29bdaa69960a48a7a2c458a9cd5ac842f83438c46fa3ae6189a089157c888d9ed31f3d3e647ff77ff01340847270a8fdae194420e1ae8a740e8e428590fcad6c51eac292c3546ae420083cb413943527d95fe93aa930d2a4b93b37092a3d418ab48d96f0b3b32bb14fae68"}, {0xa8, 0x107, 0x5631, "a730f8e6d940f649484b33a7831af4fb6cf08ac5e1c6b5bcda59186b6da829bc1417da0c2a958362a7ac4026df24aca05f81eccc43a19c887d4fcb1ad1e0c1109130cdcab9a7430cbf2554b06740423ee9477a509c0ea608d0920ccb5fce3d22bc83f286c438b96d5a31ee6aa301e020ffefa15bdf071102ce923e7ccb4725dfbc7ad544c8cfb9f663099cf6a78165328a570569fc0a48"}, {0x60, 0x104, 0x135, "bef3ccc5d4fd854fb05b7d3312a154be91959f72dbe56f8020824c5a9a5053542abde91be8b965252803e2798d70fc8c3505e855fba56b91a0e319bf6c2e41d2ba95c19139ce2f86f3"}, {0x88, 0xed, 0x1ff, "d98dcbad0f90b51f34803f635ced23fc90bb5a869554bf3bb65c8212e72b17061866556033c12006864df567562a69b7db80db2751a2c5667c8041baf6cb682e4d331b11cbce3620fa0bd1573377cc62a7433ecb5e0fd1194693ebe072db930db50cfca06506f07e60067f9c2d6f209313a8dd68f0"}], 0x418}, 0x40004005) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x7]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x8008090) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x120, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8d}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x400}}]}, 0x120}, 0x1, 0x0, 0x0, 0x42000}, 0x4000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x44860004}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000f40)="e03505d3c2f9627c7b64900390fede06cfbcb9e0d47386fd3671cf27a50544a4185198610924e91ba8c812d3856285a45ddae2b6fa5ff269334e14c5a58d888689e8597e6902bc90dea09d835a798b3cc5e12dd7c622", 0x56, 0xc000, &(0x7f0000000fc0)={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xd}, 0xb0}, 0x1c) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000011) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x80) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001380)={'gretap0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x71f, 0x8000, 0x10000, 0x0, {{0xf, 0x4, 0x3, 0x21, 0x3c, 0x64, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x7, 0x0}, @remote, {[@noop, @generic={0x94, 0x2}, @noop, @rr={0x7, 0x1f, 0xaf, [@local, @private=0xa010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r10, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c850}, 0x1) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r12, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x2) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r13, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x68, r14, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000020}, 0x804) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001700)) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740), &(0x7f0000001780)=0xc) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r12, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, r9, 0xc00, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000018c0), r12) 964.070045ms ago: executing program 6 (id=2586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYBLOB="f8ae9a970e85ecc87f0141be61bea08758714d57cf1394d79e72e5bb1487b532633e20f83b307ae0aa37cf404877796e778c59"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x4}, 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r0}) 963.178712ms ago: executing program 5 (id=2587): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb8010cf086dd", 0x0, 0xeebc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 962.641052ms ago: executing program 2 (id=2588): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="34007eccf4ff07010000000000000000017c00000400fc800c00018006000600800a0000080002800400728008000700", @ANYRES32=r0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'erspan0\x00'}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000040016ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="fc3dec479d10e0faff800594974d808c399651dd063f2253bf3452d0e80d85c0b0ec1fb9b96a94a23fa1a2b444fc16c0aaf7b0d60d811153f4dca1adc05e8b998b4d523e55af2ce414d9e697fef93da1530c2e3a40f2d74189eaf7cbc1642591b4894a9463cf97c724a1d1ad7e344220fafcac9effb5116182454b21cc2bebd147792b33f19a4d3b3b0c3fa12313e3e54278be11b5e189955d8355d4ca58dc0621", 0xa1}], 0x1, &(0x7f0000000380), 0x0, 0x4000001}, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r9, r8, 0x0, 0x0, 0x0}, 0x30) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$can_j1939(r6, &(0x7f0000000380)={0x1d, r12, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a80100005800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r13, 0x1, 0x1c, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f3680900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be08"], 0x0) 795.843151ms ago: executing program 1 (id=2589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000280), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x60) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) 792.313397ms ago: executing program 7 (id=2590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a3000"], 0xd4}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) (async) close(0xffffffffffffffff) 770.295995ms ago: executing program 6 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x84}}, 0x4040001) 768.90899ms ago: executing program 5 (id=2592): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) close(0x4) 767.744439ms ago: executing program 1 (id=2593): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510000002000000b7000000000000009500c200000000000000001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = gettid() pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000040)) 696.168826ms ago: executing program 7 (id=2594): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x1092}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001380)) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 693.961048ms ago: executing program 6 (id=2595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) (async) shutdown(r6, 0x1) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x38, 0x1, 0x20, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x1d, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r4, 0xffffffffffffffff, 0x18, 0x0, @val=@netfilter={0x3, 0x0, 0x2}}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex=r11, r8, 0x1a, 0x2008, r4, @value=r12, @void, @void, @void, r10}, 0x20) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r13, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r13, 0x3) (async) accept4(r13, 0x0, 0x0, 0x0) 610.972491ms ago: executing program 5 (id=2596): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0), 0x10) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) (async) recvmmsg(r2, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x600100a2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x2}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x80}}, @common=@unspec=@helper={{0x48}, {0x0, 'pptp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 591.75085ms ago: executing program 1 (id=2597): syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}]}]}]}, 0x48}}, 0x0) 591.056877ms ago: executing program 7 (id=2598): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000300)=""/237, 0xed, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003000)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="98030000", @ANYRES16=0x0, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r3) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) (async) r6 = openat$cgroup_ro(r3, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2542, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x401c5820, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x407, 0x4f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x58c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 415.530553ms ago: executing program 2 (id=2599): ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x708, 0x10, 0xffffff5c, 0x6, {{0x16, 0x4, 0x2, 0x1, 0x58, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@end, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x7, [{@multicast1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xbd, 0x3, 0xd, [{@remote, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x200}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7fff}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x5, 0x9, {{0x4b, 0x4, 0x0, 0x1, 0x12c, 0x67, 0x0, 0xd, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0xc, "9f2c10673be707404ac0"}, @cipso={0x86, 0x16, 0x0, [{0x1, 0x4, "3cd8"}, {0x0, 0x4, "aeed"}, {0x6, 0x8, "c36ccc687386"}]}, @timestamp_prespec={0x44, 0x44, 0x53, 0x3, 0xc, [{@loopback, 0x3}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}, {@private=0xa010102, 0x3ff}, {@remote, 0x1}, {@multicast2, 0x4}, {@empty, 0xba49}, {@local, 0xf}]}, @timestamp_addr={0x44, 0x44, 0xa1, 0x1, 0x0, [{@loopback, 0x51a4}, {@multicast1, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x8000}, {@multicast1, 0x2b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xda2}, {@rand_addr=0x64010100, 0x3}, {@local, 0x80}, {@private=0xa010100, 0x9}]}, @rr={0x7, 0x1f, 0xcd, [@empty, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @private=0xa010100, @local]}, @timestamp={0x44, 0x28, 0x95, 0x0, 0xf, [0x2, 0x8e57, 0x0, 0x4, 0xb233, 0x401, 0x7, 0x9, 0x2]}, @timestamp_addr={0x44, 0x24, 0x8c, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x67}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe06c}, {@rand_addr=0x64010102, 0x7fffffff}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x9, 0x0, 0x0, @empty, @loopback, 0x80, 0x8, 0x81, 0xe0}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x3, 0x7, 0x2, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x20, 0x0, 0x2921618f, 0xd7ab}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x228, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r10, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xac, r11, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0xd0801}, 0x4000051) getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x53, &(0x7f0000000b00)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000b40)=0x28) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r12, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4044) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r13, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb0a6}]}, 0x24}}, 0x4000000) (async) r14 = socket$inet(0x2, 0xa, 0xffff787f) setsockopt$IP_VS_SO_SET_ZERO(r14, 0x0, 0x48f, &(0x7f0000000e00)={0x32, @remote, 0x4e22, 0x0, 'sh\x00', 0x23, 0x3, 0x1d}, 0x2c) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000002040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000000e80)={0x1164, r11, 0x102, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x86, 0xa8, @random="79544ee2cd11c712ecbfeefaa2087437c128da4bafffcdff1737dc96669ab0223ba26de7ba21b3b9aa0e2482f71a758501878d564db085570fde8fef43e52b141964dbd327b25ab37a33c7ad726e417093c893eb15dc2e5504c794f9408df3ab17fdbd58a2153f331bab5afc1f7fddd5f3e20c4b31f11c97f7acc7c5cf8ff2505ed6"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x57, 0xa8, @random="dafaae93895ccf5cd2ab8ecad18ebdd9bdb8c506c0ecb484c94bf1d3c7e8ecce48ef1fb408101ff470a678df80934dec3c267407327285d55f859c22c726e1ef9827f2832fe81e036c7306002eddef449ad4ee"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="53c980ea396a43b83813f181e8194fa8a17a1dd5a91ca323ac9419d49156b924c0b1f21d13e3742da80c69a8a02fdbd557962c40c7e7492d5d7130a7f3f2ab8762e1c8cc22f1c7b81980c42d37f7b5415da0fd5953748fdd127a827d1a3756269d3b5f8421e60b41ec4bb228476e3452f4b94ecb8a60ecfa48a6c1c98bfd1719d132b048b556ddab884484aa3bd9421c5ed2edddd92f1f7da503de8b9c88b110fa93f813dd62e954bfeda7ed3d6bf687ae4c0589feed49f7b06f8cbf1c37d7d21572aab835621d53496a4817dcb27da20b3508bd62a9cb986cc6a5100cdb6d7fa4f794c7ef0cfd8d48eb22a05e7a10dd2da414d9a8644fda84c20f97e8f48b3e00c966fba31fa0c136423d09c39aa5183cd273450fe50938d0e050dc0204c82bea888e5d46e10ea2aded24963f45b8fc3e1d3031c9e2632c4015b015d53b7b47cb6a74058e47598fb149bc3f72c6b3296fe55a1c1b05bfd87f2c6c841b319abeb5946225349e248eab1191b959b19ef0d7c07701f208a12cf4a6f5c14dc9664fc779bbd558e1ad9c80a0b59f587b40fc44e64b1523897e8f063cbeb871e84bb15ece65b670c445fcabfb08a51f95c93e04a6aaf6d03505ff94f2095347398a7565833fe7964a1f3b1348663986e20666c466d180ee73305a0676bd23118a4506ffdb92db69f1739d27299f62c9d2e12d6b597c5e12e1dfc47535ba6a8f7e2f18ee4c98857f2043cf6dd2ae4cbd5cfcbeb0869fc6813f4168e81731d531b61ed4005bd6dfb815e63815c025eab1f06c578c5df3708747633ec551e97060a2cf2041aac729cb64a01f31e4c0c8567a7272997ad720460d9049893953fdec8ecd07f3f0d094865fbef7ec71ae559e6bd93b38d36a0c42d7c2d023c4e6231013d65fa2c9dd8ae467354a385d4f95f0289fbde5f4b982bca20e0b0eb048a8920402a3de0cb36e06ea429810cb6af6af272aa9525b28b92affa157762e7923dd76bc6679632bccdddb76f24a471b50c17c8b7e2fb34fca47824468e1d411f2369efbd89875ae87d7cb1fb99e8b20f9fc54a7a4d8edb96b0b886e18a005b53ceb7ae2dcc0636c59c1fb359eb21d22f7d58605dd65f3d69773c917f43efa91cb83942e11315a3ed4299e928bd2312e0e88ae592a0a0919398883ae52febbd131c61e6f104e2124e27d84d4ab2ae7f147eb7080fcc45683708d1a3e25e1417ba8bde2b8723c00757a3fe7cfc68cc742179891a60ada6736df7990988fd73c4eb05a6696c3c4c631b0ed507a70be475b2568c90f147cd2fba76d4894765fe97324d16c706b2759fa47c91632c054cbf0ba6f452e72893929ce74c5c3c1c57c50862749e5df3eb4815d584f8e4d6908e8d3d47b679326f1651ed57e076b983f08681a27cc53f8ea88a8acf51fc40897746a6d779b40bfe48ad210565b26f55d4392e2480506733da3292f50851a14a9abd5d1b4b9e7836b5a3c8ec7fac991bb70693160fb6a61a5da6ce192052b3ca53318ad8afbf37802db2c4859f8990290544098cdb458059ce4822afc20d67b9e1d9b03a74cdb69cb7f36c45c494ae0e45181c51a896e495ddc0391d1e9acf7908e3905b9a069f9dcc6f6b9814fb7debe9d74cdb666a765b046eef55fc8ae4ffd2700a1c6bd2320b837b8f7508f3fc1a7b8bbc838e951bf44fcc60b0e67c65b20b2c99f43df09e5ff7940555a5fbbfaa8c8dc493d4c216359cdb02e32bcb03373d2eef101851eb3a8c0c3341a1fb2124f2cf8e6aada095c047b4a850bc840c9e8d5f991bae5b148b16d454abb002d75503f066e701b794d725390bd53ee6bf26053f2ba0cf258619cf6ce29d1a7fc488dcc884b8e1b334bae38371705b94511ac0c31e6bddf2b1db16f22ef26fbe6004e976ab6a96394682789b3f7681296242289519540728c45bf08ef0b9815c1db30da0916e6840d3fd5244132f9fafc6702dc2707caf8ee6120f54fcda9c528a6895b11cd33cbd1c337b0ef954c0c21e80ccc252226e071b07eeacf72a3b2c769212eed1e10d60c44459ab43dccfcb927b3eea32c4835aea743b589e14a334907d7c96fac58b61b095a79b9272420eb833dbf606df047268899384740c6c194ec82232c5488c44ae5e459ae13af8addfa6e7595c2f5bf57db58ace9921982282a3c0da66501250d0b42f8375b7d7b55f8650baf4b9ce2a5b27641c7568115b3e842e67a3ca0ec300ce2f94f1db81e10053160a003b2214224b0cc0db51f71528419142759b210d715a6591c170eeb037d74b804e151e92278f3f99a09528e08f468b56c999a46e5cae9e8383f91b3296b8605acbdcfcd07789911b3082dc38bb8d86c0d8803345a933c8dd6e2d2d402cdd9a1099cc82743d39f64f9498de60eb13c4d65f3d67ee60e940114cb937a2d6586bd32956bec40d7c37c5f118717dd9e7934b4bdb5b67f0c8346465bcbf62ad99510ce284cc1aff7d051333a76dbfea920b18c17d498add7cf882ea7097411911482c4f211ace5021c9d51fea3ee4b85b22a3dcdab477e9cd71eb7f7fadfdd48dc06acea450a0a0c85824e91bb3976fdc04155ed97be46fe80266ff913314826ba30d87bc2bf9fd9cda52e693d6a3160312a464bdebb7e479ffb52197e5f3a3a5913a5e13f64588883eca4d7183c6054bd7b2774fdcb3694cb83b7edf7be8168475b70788cf2a882c1b81209e78dfcb6370f513ad90218b6b1d029b9c172d438c40952ca672e520b035e7cfdddb9d450654357b2005d906b5d525c615b240b313b8ee2a56563c4a516840cade055555e3f90d31919782b15fc05af580b837fe07aa03c7fb5a4189f01d314f020f39cb435a7de02f41e85e7a8bfe6804698c40b7645d3b3f745482cc19efbd259d1dd33c002a1d5c91ef02b9dd1da1dfb5c16ff74555686025aeec1516100022a44e7b4124cb205a1611365863eaa72b1a7bcb3bc21af4534be47df37c86735baa81ecb4ae68461400da484327bb9ddf31b649fd5c7ec3c0a3597d6f3888d6c9ba68977480078a6074c6f9b81ba4822536d35c5606dc7c457a27eadd693da3802aba6c34fc1971164bcff8b7b10d6ca28f8932d16d813035b1b26c982bf86482a14f7ee4cec6305db3e44f9651f768be8e13649096925a99c22d58365f75caff0631873e7a7287dec4b2eae8e4ec49d6009c0dc64eb4ea2e721f1c427b00ddc1c973b574d882940b40f37542cd8b5e6c422c176553e44a72938f2254ba2097466554a0159db38aa32de54dd2dd56a8f4c873664f0f3970cc109f6b4a7fce26235d9fb8f3328130c3d8267720898bccbf8551d7dc5e075ffc75058e3b7b978214eb051dc64483884dde1951668666f70aacc39324e0fd9960d260fc021837a5ccc3fa117c91394988389d26ff5ab80884c79ef667ef4ebbeb11159f51dcf4b035bc96af607b55a5f839da1fed3458ced694bd260f3273d5ad00496cc31a97913345959c5585d23f1bfd963c6c4d5d805a8654e5101f2cda36934c7c8e50af68ec84836f4c431de2274d3b7a1071ce5546d71cc5fce5820b47094cdf066a058ab2b5cc0f8ebb62527a4ffd7a2955169ce4ff0d000619f53906f061b3ab3a9d592a0997326baadf04404baa34f78a80364997186868f3c809e0df7846a6239834be5a1e676f4c30cb184ed1ff2b95655eee6b4b9763070a7c9b0552168451c89dcbf95095325a3e3691d4c3801a39e39bfb912bcc72137fc30c9260d56b56338c94287fffa34efe5a2b5fe51ad92fca175b9e23e156c209997f3724b24d0f5adabcc332e01b330fa8c1fc577df34c842fdab177c2617b7fb8e1dca7cd9c73a7b479587161c4678897d677488c948ea876d2f99f82e8c44992e2757b0564f524174ac31dc96527a99d5efd9cf48822d2c49fbfd0e96618bf535c5f3808d34e154e7ff13341b2166698571701f49003c6a80a4be8ad6d0feb98143cbc95a611c9994e247de1decc4a52fceb400805a2934bd74d7e37d90df568d67d93d0947d457f4c8b2e56d2db7b96de93ca513b926d7e355a57d4a624266f3d276b247a3c6337186220b06ff59b05bd9e8aa4e41fb034dff800c5f91694a0ca1107284a3ac12a014031316a25ae12e0f1e043b2b1ff2845178ecefedccfca7acabb2f8aa755ed64fb571723d802cd6195ae453bd8cc0a600eab1f3e22830c1dd78a82f98ace990aefdf3e06f503bd970b2e1e53f37ab2613cfba652c200f97a47735aa4dc24753acd1b0c24120dd1db7f9c6a502cfda8ded9b985a8b3d384ae749ceed18cd31871266f3164cbbea78d267f154d3c1cfbe33d17328435fc13a89073c50f27a509fdafd83e234f4f0795ba6918e2f3a2141f93199df0fba670e64957ce58b50b8fc06aacba7ae6e02cb601e7b44252c28c4659512b3c64e6b2a01b72c0cb312d20340159e6900886a0bf3aa1847980d95826256226ca652e92062f4235df7168ea4e773a7c60c82ae4ec7455fea2ca711ac119a89a25223f8ef2593896675ae6bd72537efe0b3fa7e8194cb9e6c4fff63448a082ba1e2e549dd2c3bc32a704669803c0a3dd697c5924d0e15794ccdd26ba2a36bc415186b8004ff7e0896487700edae12c9ef5411c2c495f524c8a6ee380035eae61de2dbb8d090031e969baf7aa7c11c9d4b8b86ca570f5e2802b55bcbdd9f8f8c0bcd474a08434f40b98e4f08654549eebaa1cddd28af12d1843b7ae78039d32c0f27ce2317d00bfde1e171afcd73d6c8eb59a98f57e734defe13b899b3fa15402d33a4a3c8bee0acb0267a1428d79ab1331a2fd3dc9a21002d481e9276c1caec6e67ba09add6bd047a6332a278ca41730f304b82b8d462757d862cd4027bcaf037a6630f1628044ea7be849cda5ef608b75a0c90e22bcaa6428c4c92c07da38251231aed51f7461341338271ea66950f2afb934122c5d68a0425749469004969cf40e1d2345d809a1df9e0727fa6b7816770fa99902304b934b63bfb52669a02b7bb51b86e7048eece3d04c587b6a75c249d0eb1d22b7456db235c567b92730f7f74bb47a7cfb88dc1af9fec79da9370fc5b0820bbba243480f03a751c3400af1bdab16481a0e5bc1e4782cd9451e9956d3004ebdb1196b1ffb0bbff9c690c31542992f376a1b621f7cc453fac1aed2b8de91e1d762fb0348071f63847f94bc3f593db695de4d672f3a799be6d7445ad206357346554684b34b585749baa632183ca985ae64e504801cd3f29daad47729ea5a82e7035a34974d4e648026f70aace06c536929958d75a545e4fd3d51b0c83da8d25e1fb108eab4fc905d3418901b57de4b3a317e933821ab3187bdda80f7651ef309979bd6ac6c50b8c841a305ad38b68e9be24ac6a2ee321132189567bb6b139d24d3a0eb53dcea1484f90e1493f09e7ecde0eee9fc7218ddc9386cf49a745070955bd49055b941b418fe49fa98867dc0d2039c3ba7df8f128232ffeef032c9d76fa77c4ad620c8083037e38077849e9d57bde2f2d4daf2b63c1b80658bddaf3e903d5cab9d7529722df3ca6f8f8d4332660c57069c3cf795b7e91e80565c27004196fb55bae6d8f1af741a055d4ee866f057151492ca56452e872734e7a2c5af0421a2c4e5bb967f223efee74a6424970ed51e15370eee80f1f9d20a4c5fed9a2d0b49a852079e7d5119ec28a743ee43bfc9eff8af2def141cf14b5983201ff9d87058d66baafeeb69446cddfb5d96105589ec864284a62e5eb7b22e8b4df1c4a1589cbeef67b76e291c50ba89ed09f8bca934d4fe8bf3f8bafe59f0c44d34a0ab2b498f2"}]}, 0x1164}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000002080)={0x3, 'ip6gre0\x00', {0x7fff}, 0x3a65}) (async) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002140)={0xffffffffffffffff}) (async) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000021c0)={r14}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x54, r15, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r16}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r17}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r18}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r19}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 414.490633ms ago: executing program 1 (id=2600): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xde6eb60e19c0047b) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r5, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000080)=0x3, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) 265.206891ms ago: executing program 7 (id=2601): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffec}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f00000003c0)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 264.347031ms ago: executing program 5 (id=2602): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x100000, 0x800, 0x5, 0x3}, 0x20) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket(0x25, 0x1, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x34000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) (async) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f00000000c0)={r8, r9/1000+60000}, 0x10) (async) close(r6) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r7, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) 263.736538ms ago: executing program 2 (id=2603): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0xd6, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) 136.530759ms ago: executing program 2 (id=2604): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "3343c908268e321eb2c0c4c384475a097c8249d417b1c295e8a7e4a1bb8ff7414f6cf97a2e607353fb602d65eeafdb2655139be880240258ca2ea660a0917354d0aa47770307009c13850bd72848593ea91c59acfba204b887c24c929f8ca923c42c24a0303bf47262f6d513d7da2544384973b1da2249644f62564366d3ad3d5934554767a6472a09a3cc863c24f35a2a5a03d42c486cffdfefe0fb64fe855c9d8a5d18cfba60bea7cc513b4e0a093bc858084de17d7b40ec2267ae1287080ba365f9c039f09bd3532d44809cb680e5baa780b16bad387fc56b87eb8287c6129c24a4fe0747cca75f0de69c925c11662901e17789396d56065ed521eef35810", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000010c0)={{0x0, 0x0, 0x3, 0xa5c8, 0x3, 0x9, 0x1000, 0xd, 0xc9c, 0x6, 0x1000, 0xfffffffffffffffe, 0x1, 0x4, 0x10}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000020c0)={r1, r2, "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", "bf4e53ef1d13e376baa9f9bf6bc413d8bd157689b5056f10954d1c59e6351eb7a3322e092ec2a263959bd7fcfccf19f7f30e8236e711ab8632e1bd668012edeb31779e7d2ad2929f3312d79e2909ec511119960b150cb0fb7b5495f218baca1aace69c6eb61556b80eeaa94c3798e91ef116541d5b146d77d6ed4d47129f40144e1c2727f76a19b183f0d9f628e7c45e5776526389ee9586edeab281b31ad04319280722349ed80d8873b27aac9ee1e58060f7e93cb5c0eaf4dbd0fff241587efb79940fbba76f30becff0e04097bf2dd3299089681ecf9fdea947eb9a9893aee2c95777b0011d2442324af9230c67ad13ca40289fdedca9c03ef1e841186ba51b1e132eb9aaae707e0dba4c24b7b3cf4e93ac8cf3232e791f1d5ce72e9567b2735b6068e2e7b889bb30fb9a9e3f7654205628c31749d512652f55f875b7b4bcdde33651707d0ed7ce1ce063a1407b8081c41c749b882d0a5b61ee320e92ae4f1204fb3963400e3b89442c2b68e04cab8b86d65773a4236ede7b141fa8ed221889489f844351b394fe4b805cce56c280f3e5c718120c6a2b559382ed0e78b7a89c4e989900602002d39f7aa1939180b8044f068802746e686bb002908a14437581b23d7a0532c92c012fc60d38dbab1238d79b083dc0ca176fc5cdad67c8e5ccb00971dad28020cd2607e02161f8bc955a61612d04b55d348a314d2525887e0f7d7ffd203abd1fbc42099f251c347bded9e42996ee06fa1134a2d240abd589d95ce4347d485f8171b90fbb355a74695ed3e282abb7fb936709114af4ca217e51e4fce3032744c31b6ebdf0c8612480566a03d5066d587d7a2568997ea7b5b63bced5b43a887efee7b3542159f6216b6b65898db13fd251a389a69e12608798efddba8f05191508b909b67710eec2e516260c7f8796efd7e675bbb1016fbc41f4f89162f2eba4ac9e3d2c32abf7fbc9c9c2325aada6b05b9b566891935b5eab2d9ea1bebc9d592d7d5214fd3a297432358cd6d0998f72a9a0194e76d9ac79f0f92f5ffe927256724e0748bcf6952b273d43036cfbc867060db8d989933c323bd5bd618495ccdcc2e5a73dacf9c3076efe7074693ad5fba813971309926675b376576df3e43d5e36b9e1258313d76a025c02ec6e9d9b18fe5f1b01fa55ceee234b272a5a33add420d699530a6e0131cf911c252482e203ee835a60a531e0ccca9b757e328eb01cc9fc87e0b4be365b8404ce7b61a75db6f71d050f3c4fef5dd4dec7c5f17099f85b0cd484403d52d7dcb845067da74eee276de85fafecc7a27fc3f95c5ef004a4c6a602561f5341ea3cc3b81405fe7a18ae07ff2c5f403ea54adccdbe6cbdeeb4ece5e08394fa74a80937b375f83161c1c70cf86733a6284c8dbc7d2c5a14ea4307a7eb9aab442f6ff9e3dff778109fdd82c7e28a36cb6e4dd4c38bdb9c6d5be869d9ac327a1d25bcea4024c4ea860a3b442d96aacd370d077df0b1aeef6e6c9e27a9435d20416e1187eb4df37530a50776a57fafd3eadcbd37b26674c6401dbce52567fb225c4d8a837ead88585ee80a08aa07e77930f780414c1119455e4001bf318df985c2665caaa37f9e142095ab2efe9e5a206093bf35e1e902f8aa06de28b12dc04596c458bca7c14971a96b2c60651e1f790a5ed029c0b42909a5eb120a962bd827101148f9e9c6cf62cc49821eec0e9cd5c708f8260b986c4f8e7c7900625b20855561aa11af665b6fab903f58758b7e95f5820c97e7f1427a1147697ad0c2707822690d62b3c9fcb3f003c2297d639c9b1a007163f17441e963b54b7bbff414352dc6371697f6e689421db684bf423ec6d67bd0e989e1e28187df37b8974293e5f6ab403c09c681477ee1163f41f8b937cdba5e0bb64b4c85e88717557dee3ba5681503fa7ab5d26f8fa723c99efef08f5f8e895f41e0311e243babf0b0e7b4e03c37657eb2c17a531a5ae8155744968bec3719d301107382517fcb651023216ef8ca951c38ce579f94c2053e43b327151384e7a4e3d11c7d1f7d8b02f9b9298e7b3c2d6245e5d9aceba9da9664f6d10a08dcdbe36e67f85e13e8127ea6ccc35a0b238dfdf486f914ac4474970572977074b33588d87557cb08a4ec4c2dfacbbbe8cc5ec4dded6fe9c9ff6ed7632f715d40c4e8d05b0f27ecb894c9682bd383efdd053c341c067a3f647c63527bec535474d31014e35562a377f70a9c6443d7383a7e85089dfed914e249a743b1fe75390d4338fdb935209531c1e8be2adba3fe663cb442ebadc45d25c509df3807250613b5eac78656523fca7811fd76d1790db41b78c98406cab8295f7fd9865bb5ebee43b5563060b0e8c0b9819258b565d7fafebf0520f486a42759f571e5c0f60b4ab5024882ac9497bc50a82aa53ed684639d0866516c2a7b662986360ae1325985fb7e79735f2b38ecec690b235e7c937064867e630c7c19f3bf17101c01ec23eecb586fe6f67fa31a8b6d26c4c6b72e34cd6fdc4a22e701363504516a4c74d61ab9f61f7907f715d5db0905023c57826e88bed2972b72f4353ab2b576c7a84af8d52b48cc895508bcdd7dc6ae9c71a9b61ee4c07a3ec50e33b74f8027e3d8ccba46166dfadf79ea5b4bc37806227698a31aa5ecc7b6e81099f3ea6522c777bdfed7a0a6b72c9727127040c9d34c3d53cd4bcc81bd6cdf955d81fcd140b4974f89850502aa678752986018161b1940ab972e7fbe1cb2a72fc9d6f8c28a11ec3292580a75516d7a6e2c3faf736020655f214db07cfe551b243fe01a462896ce3512ecfd4a46838b4fb6111a371ebec16e91eb7a303bedb34592d501c050b9ea69cb8a37888fd78fcd99bf2527333d6fe5ee83e8903d3e96146620c9b0d9ecdccbb21c7153ae67a0067fc238fe0a93daef13471b3b0452b3e2beaf716efcd3465f5e496c2d39908985dc48b859823a22b46d86d31fcec69e024d30748338460ce65ceba7bd36d20acdb21f037c7af39fc199190bf35b69c942e9ca2226a8787fb65d8beb01fceea3a0a4625c1639a5b755c23b0cbdac326cfca476c2bbb526a0b226de5fb0d6200f578c671d601417edd1cd0e8ea201837b6a9b40a4c91591534defd02c39f43c47d9f0b194229e2d0f526f469bf52315caa034361ee77b852779150b1536d25094e69c51dd9117a1a482508bb58150103cb4af35eba093d3a9afb24641aa90ebd573fe14675a75b591e4688a90587d157cb7268f300ae72a49b99af0cb6b3cd2d653650e4a6fefaf703f69bb82c3c0d9e2062f06f942df3dec60eb92c18f9b308ba0cf27bb95cc7967b7c3e5c8d03ab5a97c45f458d55a6f5d107fc6f5b9164e6ab98dba573949f07441b4ccc8f2e01dd34103b7716dc9eec9b97a8f3885fa527e9f1ef3cf2562fffaee3e1b5d832c6ee3d9db5718d3dee2f0af2aee83d846023a29da213c715727cf56d00b9ed9ef9b2e430edce74544ede3a818e37c88827a6dd6b55eb8abec8b29f76894bcf3f0dd4ce0ccdb16b6e915eb0e2a10ec5222bb3ddc1075fff133b9d8f4c5e18dd2a2b2e6f16898221d45aff12d08568d5fe8d762d515c74c07bad37f40de32055d5c381a9e49f7d7f26b61e8243d7300e1c5f884a8f7d603902b4d8a6a064b6ccac058f616337f547306bde4822b6605c9474b289818493d1701a0ab7e4b65c2fc7c4e751d75d1e70b4fb6e33242fb6e57a7c983433b6a1c8c13c9544b94675632f8ac62d0d9576b302526bb275e25207759802352033bb57b01a4dddd0196cb3dd8ae353d4e9061ccf9a95e5938aa489713b5f4c02194b09a0d00965e36fe0d529fe405885a4ea575b7640d2c4278c9d5abf969e16311586238e3ae7cc123d7d7f24cbd57a1d88560246b4287825495b8e2947df04329f1505ca16bae4a36cd99848fb7e252d331b518d46bffd2249164f3b209725986f937353380bf3c96f88ee26442fe15ba9162990e216e100b6cf999a4110b50de1975207bb3576bd86823f69098b9de15bd7e1553c79f761c813f1b543f926711106c15aa40350ee1e755d98400d8ce03ead0eaaa505ec48c1053e852c17431dd2b5cc0e19b4bbcd253ec6d2481aad26c7404b75c82ee3c60d29204ceffc8de23c75adf956525e2e1e9e0513b865358fc7e94b9ee04c86fc225666d634e04640a252d466061223e017a824dbd3239b47a690a0a6b1115242bb723a1099d9343b188ee662ba6c2f80b6aa9f37f3a6d98d47f2250029c290cf9a9d22a70ebdb4b71fee85f1f5a80a2e0d7c126c56d59475cfccf324d51969cce0f149cbfb891048f4489dce82b3c0a71fe810022f6174f41cb3d2418db99a2b81e7b09503af85dce667dedc3058a02cdff5cd6e585dee66795038b0b8ade67582a8bde346ca92ede07f037ee478c8103ef24f20146a72b8a2f561b06d8488b9b40d02d3c5915a01b0ba4a469eb2f90cae96d8b03f10b6b08d097bea805d8bebdb319e4f2cc7880d5fca05141c68939a82a93ebfbe433483397cd18c417918be7aa312c79d49f9d95137f35646c4f2e32bfa2b5e380c3d64c1574e42992a31dad59224cd0006ea3d0077cd35eb7a57d7a5eb0d004da77ebaee2ad14225304e81883c42916d13da84e5081c62edf9dc0d73781805fae3a6bac3df792be78932beb77ea771a858fedf8f709d0c8ab8794aa20aef9a24713e0a904fbedea146db5d447aa7a6a035929a8a30321d3959dbd7a9010c7c6a8dcd1e22e8ae92f4a88df9785e1f054d6c907d7b7f2a4f6bad41435f2af1a9516bf7c5f931fc5a3ed1ab01368e2d6fc74a02d25c164899cc514de842a23346f3a6fcf327da4b3c6d8fc3bfcc383119d0f41ea857ef013720071b127e0aaa97dabab8d3d5412f319e13da5bbe845e82a8e4b4558a0ac7858fa2572723c84b52c52a3a38866fe2986c331db3e85a8f47657b2a101a9d55580754f757199c646cd7ad3da18d4bed9554df305500d637ed0ccb99ab208c2427a4735e6d1f9d400b06a293a26e3096fcaf74f60e53ea4e4ce64124491da8357f3e1b794a66ec5a7aa543a0a57020174e1ded0b34ccec2b896358ac468986a2794ac0d791f7d3a29b4d79c2ea9caf405bdfca297664dba81b3a1f34dcfcb8ea944b0ec68b659aca75ead1e2503a7e93ff68c57a323498f6ed3271a4ec1e87008f0dff88caf946804cc14c3e1f862e57d653568cdfc0034746f67983d35b06b67b851dac93a599a69977bf5a97f8909fc9d5068c9dbb2bfde1626da8a952e8c003aa5624194dfdb472ed1b9d574afbcb350a086c1b34269c00f41f2beae2c0b6815b654fcc5ac11ace582c3ba7199677e5b58330c288a7eb91346fba9d7b826ffa0df869c30e3f95e620314ec328020865a0cd21c9003254ed44f08bf4ea5186edc1a26811f88f387"}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000030c0)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000003200)={0x2, 0x1f7, 0xfc, &(0x7f0000003100)=""/252}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000003240)="2a9122e55bbc7acee7cd192fed0d9f8bc65d4d21d7dcd8e0a1d1c72ced9b161c0d77b1eb7d2001c3d24231b5e607c353bdd65b1c5e95ccd35a0fd208263d6b85fb83b81202f2e35d0dc7fa1c4b387a6cc09a9bb14030724f1b4aef3f6082cd60712e00b672649dbb8acd55f4d5a33a1eb5f42fee555676a976b6d7bbcffede", 0x7f) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000003300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)=@ipv6_newaddr={0x2c, 0x14, 0x2, 0x70bd29, 0x25dfdbff, {0xa, 0x40, 0x20, 0xc8, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x81, 0x7, 0x10, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000003540)={r4, 0x3, 0x39, 0xc1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003600)=@base={0x1d, 0x81, 0x3, 0x7, 0x0, 0x1, 0x8, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003680)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000036c0)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0xc, 0x3, &(0x7f0000003400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000003440)='GPL\x00', 0x5, 0x99, &(0x7f0000003480)=""/153, 0x0, 0x8, '\x00', r5, @fallback=0xe, r6, 0x8, &(0x7f0000003580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000035c0)={0x4, 0x5, 0x9, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000003700)=[r7, r8, r9], &(0x7f0000003740)=[{0x0, 0x2, 0xd, 0x6}, {0x0, 0x4, 0xc, 0x3}], 0x10, 0x2}, 0x94) socket(0xf, 0x801, 0x4) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000003840)=""/132, &(0x7f0000003900)=0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000003940)=r9, 0x4) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000003980), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f00000039c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = openat$cgroup_ro(r6, &(0x7f0000003dc0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r12, &(0x7f0000003f40)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0xacd0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x2}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x48000) connect$pppoe(r12, &(0x7f0000003f80)={0x18, 0x0, {0x1, @local, 'veth1_to_hsr\x00'}}, 0x1e) close(r10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003fc0), r14) 88.146593ms ago: executing program 7 (id=2605): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'pimreg0\x00', {0x2, 0x4e24, @multicast1}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000) 87.741368ms ago: executing program 5 (id=2606): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000), 0x4) shutdown(r1, 0x2) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) accept4(r0, &(0x7f0000000400)=@in6, &(0x7f0000000300)=0x80, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@phonet={0x23, 0x2, 0x0, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="8a6359ccd14ae88b42254ecf89dcab41b56cd36e733f383cbc5604538c6d24c3aa51c65c9898b10e98820254ded8042e4383e94344f0b5dbadfec5bf8964e0b13e9f29f0", 0x44}, {&(0x7f0000000140)="7f1269d4bfe6c05ee914d7d7499d08e8582bb32b6f8ea0127e4dcaf66641796dc82e94844edacbdc8a99933ed716fd844cb05ce699ce2f89a5c9c19a24a8be8d3e1b4e", 0x43}, {&(0x7f00000001c0)="a2bbd68ec47353940dd3fce46c59f28529405cdc759948e599", 0x19}, {&(0x7f0000000200)="fd2d3fc056a7a4df696b6fe1c3eb992ec462078be02ed7c5f998feea3342d18e87134a0926419b07fd9df7121564cfa6c50385d82cb0cffa9bf741f77f3ee529a580dfb0281d244f4732eff5f5b47be545646602fb31", 0x56}, {&(0x7f0000000280)="903ce8b8baf0718a331c15e248d40df4ce8f3acd8dba8f8cdb74dd73380b069d", 0x20}, {&(0x7f0000000300)}], 0x6, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffcf}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3dfb0b2}}, @txtime={{0x18, 0x1, 0x3d, 0x46bdb7d2}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xf0}, 0x840) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x40, 0x0, 0x200, 0x2, 0x8, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x4, 0x47, [0xfffffffc, 0x7c]}}) 87.360016ms ago: executing program 1 (id=2607): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getaddr={0x40, 0x16, 0x10, 0x70bd25, 0x25dfdbfc, {0x2, 0x11, 0x52, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=2608): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x40, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c1000000000000000000059", 0x59}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0xfffffffc}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="038063766c00000077e630b36c546f0b0411760a64d98814000280080001000800000006000200010000000800050000", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) kernel console output (not intermixed with test programs): failed state 3 -6 0 [ 213.188587][ T9771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.234886][ T9771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.248137][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1075'. [ 213.436799][ T9798] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.478266][ T9794] bond3: ARP target 1.0.0.0 is already present [ 213.485044][ T9794] bond3: option arp_ip_target: invalid value (1) [ 213.509471][ T9794] bond3 (unregistering): Released all slaves [ 214.128274][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 214.138048][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1093'. [ 214.189651][ T9834] tipc: Started in network mode [ 214.227136][ T9834] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 214.257756][ T9834] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 214.274201][ T9834] tipc: Enabled bearer , priority 10 [ 214.409890][ T9861] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1097'. [ 214.424834][ T9861] netlink: 'syz.2.1097': attribute type 2 has an invalid length. [ 214.445175][ T5882] lo speed is unknown, defaulting to 1000 [ 214.451118][ T5882] syz2: Port: 1 Link DOWN [ 214.462223][ T9861] netlink: 'syz.2.1097': attribute type 4 has an invalid length. [ 214.482775][ T9863] netlink: 'syz.5.1098': attribute type 3 has an invalid length. [ 214.493730][ T9863] netlink: 'syz.5.1098': attribute type 3 has an invalid length. [ 214.502754][ T9863] netlink: 'syz.5.1098': attribute type 3 has an invalid length. [ 214.510805][ T9863] netlink: 'syz.5.1098': attribute type 3 has an invalid length. [ 214.518970][ T9863] netlink: 'syz.5.1098': attribute type 3 has an invalid length. [ 214.527189][ T9863] netlink: 'syz.5.1098': attribute type 3 has an invalid length. [ 214.827652][ T9872] bond3: Setting coupled_control to off (0) [ 215.146662][ T9895] openvswitch: netlink: Actions may not be safe on all matching packets [ 215.223948][ T9902] openvswitch: netlink: Actions may not be safe on all matching packets [ 215.418456][ T9224] tipc: Node number set to 1 [ 215.627868][ T9925] bond0: entered promiscuous mode [ 215.643272][ T9925] bond_slave_0: entered promiscuous mode [ 215.649459][ T9925] bond_slave_1: entered promiscuous mode [ 215.686800][ T9925] bond0: left promiscuous mode [ 215.712026][ T9925] bond_slave_0: left promiscuous mode [ 215.737254][ T9925] bond_slave_1: left promiscuous mode [ 216.114228][ T1210] IPVS: starting estimator thread 0... [ 216.201245][ T9961] IPVS: using max 24 ests per chain, 57600 per kthread [ 216.233733][ T9965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.520095][ T9973] __nla_validate_parse: 8 callbacks suppressed [ 216.520117][ T9973] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1128'. [ 216.734586][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1130'. [ 216.786418][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 216.836166][ T9990] vlan2: entered allmulticast mode [ 216.861294][ T9990] vlan0: entered allmulticast mode [ 216.876237][ T9990] veth0_vlan: entered allmulticast mode [ 216.934343][ T9992] tipc: Enabled bearer , priority 0 [ 216.963909][ T9992] syzkaller0: entered promiscuous mode [ 216.969740][ T9992] syzkaller0: entered allmulticast mode [ 216.978925][ T9992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1131'. [ 217.027687][ T9992] tipc: Resetting bearer [ 217.052267][ T9991] tipc: Resetting bearer [ 217.084595][ T9991] tipc: Disabling bearer [ 217.113983][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 217.185818][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 217.185842][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.191939][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 217.309650][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1133'. [ 217.344329][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1133'. [ 217.355431][T10006] dvmrp1: entered allmulticast mode [ 217.503158][T10018] syz.5.1133 (10018) used obsolete PPPIOCDETACH ioctl [ 217.615236][T10026] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 217.657031][T10035] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 217.932592][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1146'. [ 218.178625][T10059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.186009][T10059] IPv6: NLM_F_CREATE should be set when creating new route [ 218.193487][T10059] IPv6: NLM_F_CREATE should be set when creating new route [ 218.200766][T10059] IPv6: NLM_F_CREATE should be set when creating new route [ 218.223893][T10059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.275936][T10061] tipc: New replicast peer: 255.255.255.255 [ 218.284156][T10061] tipc: Enabled bearer , priority 10 [ 218.650726][T10070] validate_nla: 51 callbacks suppressed [ 218.650750][T10070] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 218.709340][T10072] SET target dimension over the limit! [ 218.732122][T10072] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 218.755684][T10074] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.769847][T10074] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 218.782739][T10074] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 218.806234][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 218.888997][T10074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1154'. [ 219.401089][ T5915] tipc: Node number set to 2727954330 [ 219.632251][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f469400: rx timeout, send abort [ 219.651389][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f469400: 0x2f001: (3) A timeout occurred and this is the connection abort to close the session. [ 219.776104][T10099] bridge5: entered allmulticast mode [ 219.822076][T10101] netlink: 'syz.1.1161': attribute type 2 has an invalid length. [ 219.992205][T10117] sctp: [Deprecated]: syz.5.1168 (pid 10117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.992205][T10117] Use struct sctp_sack_info instead [ 220.047924][ T9224] hsr0 speed is unknown, defaulting to 1000 [ 220.061414][ T9224] syz1: Port: 1 Link DOWN [ 220.952342][T10172] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 221.375183][T10193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.964660][T10231] syzkaller1: entered promiscuous mode [ 221.970420][T10231] syzkaller1: entered allmulticast mode [ 222.104968][T10198] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 222.136452][T10246] __nla_validate_parse: 41 callbacks suppressed [ 222.136477][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 222.334670][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1211'. [ 222.484810][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 222.485315][T10267] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1216'. [ 222.497776][T10266] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1215'. [ 222.528093][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 222.636448][T10276] batadv0: entered allmulticast mode [ 222.662572][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1219'. [ 222.676173][T10278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1220'. [ 223.092300][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 223.174247][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 223.246145][T10316] netlink: 'syz.5.1230': attribute type 10 has an invalid length. [ 223.286618][T10316] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.316694][T10316] bridge_slave_1: left allmulticast mode [ 223.332506][T10316] bridge_slave_1: left promiscuous mode [ 223.338614][T10316] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.364151][T10316] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 223.790198][T10345] netlink: 'syz.3.1240': attribute type 6 has an invalid length. [ 224.183973][T10371] sctp: [Deprecated]: syz.4.1247 (pid 10371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.183973][T10371] Use struct sctp_sack_info instead [ 224.529306][T10390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.655729][T10394] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 224.675810][T10394] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 224.685406][T10395] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 224.800179][T10395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.848859][T10401] bond5: (slave veth7): Enslaving as an active interface with a down link [ 224.884469][T10395] veth9: entered promiscuous mode [ 246.649669][T10437] __nla_validate_parse: 9 callbacks suppressed [ 246.649692][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1268'. [ 246.704002][T10439] nbd: must specify at least one socket [ 246.721267][T10443] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1268'. [ 246.739745][T10444] netlink: 212288 bytes leftover after parsing attributes in process `syz.5.1271'. [ 246.881430][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1273'. [ 246.932383][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.942173][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.953109][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.964190][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.984717][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.077363][T10463] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.092610][T10458] lo speed is unknown, defaulting to 1000 [ 247.102650][T10458] hsr0 speed is unknown, defaulting to 1000 [ 247.253085][T10476] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.373910][T10478] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 247.577273][T10488] bond0: entered promiscuous mode [ 247.583013][T10488] bond_slave_0: entered promiscuous mode [ 247.589095][T10488] bond_slave_1: entered promiscuous mode [ 247.653201][T10489] tipc: Started in network mode [ 247.659754][T10489] tipc: Node identity da470e96e68d, cluster identity 4711 [ 247.667830][T10489] tipc: Enabled bearer , priority 0 [ 247.689840][T10489] syzkaller0: entered promiscuous mode [ 247.697222][T10489] syzkaller0: entered allmulticast mode [ 247.709365][T10489] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 247.745398][T10458] chnl_net:caif_netlink_parms(): no params data found [ 247.803188][T10489] tipc: Resetting bearer [ 247.829620][T10494] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1286'. [ 247.845887][T10487] tipc: Resetting bearer [ 247.875179][T10487] tipc: Disabling bearer [ 247.886913][T10494] 8021q: VLANs not supported on gre0 [ 248.071510][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.083580][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.092265][T10458] bridge_slave_0: entered allmulticast mode [ 248.100311][T10458] bridge_slave_0: entered promiscuous mode [ 248.127029][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.144771][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.153039][T10458] bridge_slave_1: entered allmulticast mode [ 248.161426][T10458] bridge_slave_1: entered promiscuous mode [ 248.308055][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.338211][T10527] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1295'. [ 248.359196][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.503180][T10458] team0: Port device team_slave_0 added [ 248.533883][T10458] team0: Port device team_slave_1 added [ 248.609261][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 248.635097][T10540] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1299'. [ 248.692312][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.699353][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.742589][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.794426][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.809594][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.836958][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.858783][T10551] netlink: 'syz.5.1302': attribute type 4 has an invalid length. [ 249.001984][T10458] hsr_slave_0: entered promiscuous mode [ 249.019724][T10458] hsr_slave_1: entered promiscuous mode [ 249.026681][ T5841] Bluetooth: hci5: command tx timeout [ 249.042606][T10458] debugfs: 'hsr0' already exists in 'hsr' [ 249.058768][T10458] Cannot create hsr debugfs directory [ 249.465391][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 249.494179][T10577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.552179][T10577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.687043][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1310'. [ 249.925781][T10594] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 249.926507][T10458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.963296][T10600] netlink: 'syz.5.1315': attribute type 25 has an invalid length. [ 249.991259][T10458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.027184][T10608] netlink: 'syz.4.1316': attribute type 83 has an invalid length. [ 250.039024][T10458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.089892][T10458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.148025][T10616] FAULT_INJECTION: forcing a failure. [ 250.148025][T10616] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 250.191104][T10616] CPU: 0 UID: 0 PID: 10616 Comm: syz.4.1319 Not tainted syzkaller #0 PREEMPT(full) [ 250.191135][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.191157][T10616] Call Trace: [ 250.191167][T10616] [ 250.191177][T10616] dump_stack_lvl+0x189/0x250 [ 250.191206][T10616] ? __pfx____ratelimit+0x10/0x10 [ 250.191233][T10616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.191259][T10616] ? __pfx__printk+0x10/0x10 [ 250.191277][T10616] ? __might_fault+0xb0/0x130 [ 250.191305][T10616] should_fail_ex+0x414/0x560 [ 250.191328][T10616] _copy_from_user+0x2d/0xb0 [ 250.191355][T10616] ___sys_sendmsg+0x158/0x2a0 [ 250.191387][T10616] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.191444][T10616] ? __fget_files+0x2a/0x420 [ 250.191465][T10616] ? __fget_files+0x3a0/0x420 [ 250.191495][T10616] __x64_sys_sendmsg+0x19b/0x260 [ 250.191523][T10616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.191558][T10616] ? __pfx_ksys_write+0x10/0x10 [ 250.191580][T10616] ? do_syscall_64+0xbe/0xfa0 [ 250.191609][T10616] do_syscall_64+0xfa/0xfa0 [ 250.191634][T10616] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.191659][T10616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.191677][T10616] ? clear_bhb_loop+0x60/0xb0 [ 250.191698][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.191715][T10616] RIP: 0033:0x7fdf77d8eec9 [ 250.191731][T10616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.191746][T10616] RSP: 002b:00007fdf78c39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.191773][T10616] RAX: ffffffffffffffda RBX: 00007fdf77fe5fa0 RCX: 00007fdf77d8eec9 [ 250.191786][T10616] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 250.191797][T10616] RBP: 00007fdf78c39090 R08: 0000000000000000 R09: 0000000000000000 [ 250.191808][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.191819][T10616] R13: 00007fdf77fe6038 R14: 00007fdf77fe5fa0 R15: 00007fffd21e5378 [ 250.191848][T10616] [ 250.426988][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.450182][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.498798][T10458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.509304][T10458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.530096][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.537318][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.556914][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.564183][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.960642][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.104395][ T5841] Bluetooth: hci5: command tx timeout [ 251.640019][T10458] veth0_vlan: entered promiscuous mode [ 251.666992][T10458] veth1_vlan: entered promiscuous mode [ 251.848873][T10458] veth0_macvtap: entered promiscuous mode [ 251.870302][T10458] veth1_macvtap: entered promiscuous mode [ 251.906884][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.933604][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.969551][T10700] __nla_validate_parse: 10 callbacks suppressed [ 251.970020][T10700] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1338'. [ 251.981146][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.013868][T10705] vlan2: entered promiscuous mode [ 252.018981][T10705] bond0: entered promiscuous mode [ 252.024842][T10705] bond_slave_0: entered promiscuous mode [ 252.030706][T10705] bond_slave_1: entered promiscuous mode [ 252.037069][T10705] bridge_slave_1: entered promiscuous mode [ 252.083584][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.093208][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.148074][T10708] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 252.162307][T10708] bond4 (unregistering): Released all slaves [ 252.222677][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.412330][T10726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.551834][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.591406][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.658912][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.677211][T10734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1348'. [ 252.679844][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.092373][T10758] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1355'. [ 253.183353][ T5841] Bluetooth: hci5: command tx timeout [ 253.443507][T10773] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 253.667439][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 253.740576][T10787] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 253.752383][T10787] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 253.818907][T10794] netlink: 'syz.4.1365': attribute type 2 has an invalid length. [ 253.844667][T10794] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1365'. [ 253.859634][T10794] nbd: must specify at least one socket [ 254.138087][T10809] netlink: 'syz.5.1369': attribute type 1 has an invalid length. [ 254.444510][T10809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.497002][T10809] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1369'. [ 254.514328][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 254.567962][T10828] netlink: 'syz.2.1370': attribute type 6 has an invalid length. [ 255.268382][ T5841] Bluetooth: hci5: command tx timeout [ 256.266469][T10858] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 256.421185][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 256.438320][T10867] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1378'. [ 256.448241][T10867] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1378'. [ 256.640210][T10872] netlink: 'syz.2.1379': attribute type 10 has an invalid length. [ 256.665535][T10873] netlink: 'syz.2.1379': attribute type 10 has an invalid length. [ 256.730480][T10873] batadv0: entered promiscuous mode [ 256.753211][T10873] batadv0: entered allmulticast mode [ 256.778435][T10873] bridge0: port 3(batadv0) entered blocking state [ 256.803037][T10873] bridge0: port 3(batadv0) entered disabled state [ 256.935444][ T9] IPVS: starting estimator thread 0... [ 257.041183][T10888] IPVS: using max 25 ests per chain, 60000 per kthread [ 257.164981][T10894] netlink: 'syz.2.1384': attribute type 9 has an invalid length. [ 257.202454][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 257.211787][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 257.317172][T10898] __nla_validate_parse: 1 callbacks suppressed [ 257.317193][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1385'. [ 257.354744][T10911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.540342][T10908] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 257.619359][T10908] bond2 (unregistering): Released all slaves [ 257.704934][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 257.748928][T10898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.075152][T10943] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 258.188667][T10943] bond6: entered promiscuous mode [ 258.204084][T10943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.236665][T10955] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1398'. [ 258.263843][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1398'. [ 258.390476][T10958] bond4: entered promiscuous mode [ 258.398655][T10958] bond4: entered allmulticast mode [ 258.408358][T10958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.690391][T10978] netlink: 'syz.5.1403': attribute type 1 has an invalid length. [ 258.834764][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1404'. [ 258.883786][T10985] openvswitch: netlink: Flow key attr not present in new flow. [ 258.928181][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1407'. [ 259.141446][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 259.172274][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1411'. [ 259.182538][T11010] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 259.192166][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'. [ 259.401229][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1413'. [ 259.682240][T11044] netlink: 'syz.5.1418': attribute type 10 has an invalid length. [ 259.857740][T11044] team0: Device veth0_vlan failed to register rx_handler [ 260.046162][T11054] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 260.226181][T11062] tipc: Enabled bearer , priority 0 [ 260.251899][T11066] syzkaller0: entered promiscuous mode [ 260.265369][T11066] syzkaller0: entered allmulticast mode [ 260.414398][T11067] tipc: Resetting bearer [ 260.482639][T11067] tipc: Disabling bearer [ 260.506301][T11076] batadv_slave_1: entered promiscuous mode [ 260.526938][T11081] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 260.556268][T11073] batadv_slave_1: left promiscuous mode [ 260.898575][T11107] ªªªªªª©*°;¾eÕܲ: renamed from lo (while UP) [ 261.176414][T11118] netlink: 'syz.4.1437': attribute type 4 has an invalid length. [ 261.222139][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.261974][T11118] `: renamed from bond0 [ 261.598588][T11129] lo speed is unknown, defaulting to 1000 [ 261.649491][T11129] hsr0 speed is unknown, defaulting to 1000 [ 262.299828][T11154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.317228][T11154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.347363][T11154] bridge0: port 3(batadv0) entered disabled state [ 262.568043][T11184] __nla_validate_parse: 9 callbacks suppressed [ 262.568063][T11184] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1450'. [ 263.014994][T11202] netlink: 'syz.4.1452': attribute type 5 has an invalid length. [ 263.051803][T11202] netlink: 'syz.4.1452': attribute type 25 has an invalid length. [ 263.299382][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 263.319618][T11223] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 263.339005][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 263.359385][T11223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.370349][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1456'. [ 263.400091][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1456'. [ 263.456419][T11219] netlink: 'syz.5.1456': attribute type 12 has an invalid length. [ 263.493692][T11217] netlink: 'syz.5.1456': attribute type 12 has an invalid length. [ 263.508133][T11219] netlink: 'syz.5.1456': attribute type 11 has an invalid length. [ 263.548977][T11217] netlink: 'syz.5.1456': attribute type 11 has an invalid length. [ 263.818640][T11240] netlink: zone id is out of range [ 263.825418][T11240] netlink: zone id is out of range [ 263.830828][T11240] netlink: zone id is out of range [ 263.847541][T11240] netlink: zone id is out of range [ 263.873002][T11240] netlink: zone id is out of range [ 263.888386][T11240] netlink: zone id is out of range [ 263.894345][T11240] netlink: zone id is out of range [ 263.904361][T11240] netlink: zone id is out of range [ 263.909648][T11240] netlink: zone id is out of range [ 263.918858][T11240] netlink: zone id is out of range [ 263.939226][T11251] : entered promiscuous mode [ 263.967341][T11254] netlink: 'syz.6.1465': attribute type 5 has an invalid length. [ 264.035823][T11240] netlink: set zone limit has 4 unknown bytes [ 264.205071][T11262] netlink: 'syz.6.1468': attribute type 33 has an invalid length. [ 264.293232][T11259] syzkaller0: entered promiscuous mode [ 264.298979][T11259] syzkaller0: entered allmulticast mode [ 264.354611][T11262] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 264.369843][T11262] bond2 (unregistering): Released all slaves [ 264.429420][T11269] pim6reg: entered allmulticast mode [ 264.435665][T11273] pim6reg: left allmulticast mode [ 264.768818][T11290] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1474'. [ 264.806375][T11292] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1473'. [ 264.825536][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 265.195097][T11311] netlink: 'syz.4.1476': attribute type 13 has an invalid length. [ 265.253885][T11312] netlink: 'syz.4.1476': attribute type 13 has an invalid length. [ 266.767978][T11290] 8021q: VLANs not supported on sit0 [ 266.787056][T11311] macvtap0: entered allmulticast mode [ 266.801938][T11311] macvtap0: refused to change device tx_queue_len [ 266.814514][T11312] macvtap0: refused to change device tx_queue_len [ 267.028857][T11336] macvtap0: entered promiscuous mode [ 267.045677][T11336] macvtap0: entered allmulticast mode [ 267.159094][T11341] macvtap0: entered promiscuous mode [ 267.189188][T11341] macvtap0: entered allmulticast mode [ 267.325541][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1484'. [ 267.343317][T11356] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 267.386849][T11359] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 267.411019][T11359] netlink: 'syz.4.1486': attribute type 10 has an invalid length. [ 267.429225][T11359] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1486'. [ 267.545578][T11363] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 267.831803][T11375] __nla_validate_parse: 3 callbacks suppressed [ 267.831823][T11375] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1488'. [ 267.848562][T11380] netlink: 'syz.1.1489': attribute type 3 has an invalid length. [ 267.856863][T11380] netlink: 'syz.1.1489': attribute type 3 has an invalid length. [ 267.903173][T11377] syzkaller1: entered promiscuous mode [ 267.909870][T11377] syzkaller1: entered allmulticast mode [ 267.993948][T11394] netlink: 'syz.6.1492': attribute type 6 has an invalid length. [ 268.005286][T11392] ªªªªªª©*°;¾eÕܲ: entered promiscuous mode [ 268.012990][T11394] netlink: 'syz.6.1492': attribute type 1 has an invalid length. [ 268.022595][T11394] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.1492'. [ 268.039953][T11392] netlink: 'syz.6.1492': attribute type 2 has an invalid length. [ 268.087613][T11392] A link change request failed with some changes committed already. Interface ªªªªªª©*°;¾eÕܲ may have been left with an inconsistent configuration, please check. [ 268.107379][T11389] lo speed is unknown, defaulting to 1000 [ 268.146308][T11389] hsr0 speed is unknown, defaulting to 1000 [ 268.626538][T11433] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1502'. [ 268.881904][T11446] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1505'. [ 268.933012][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 268.998895][T11450] pim6reg1: entered promiscuous mode [ 269.008222][T11450] pim6reg1: entered allmulticast mode [ 269.084999][T11455] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 269.347966][T11466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1513'. [ 269.593738][T11481] validate_nla: 5 callbacks suppressed [ 269.593758][T11481] netlink: 'syz.6.1516': attribute type 1 has an invalid length. [ 269.640419][T11485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1517'. [ 269.698765][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1516'. [ 269.744521][T11491] netlink: 'syz.2.1518': attribute type 10 has an invalid length. [ 269.801801][T11481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.834454][T11491] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 269.872126][T11491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.920499][T11504] FAULT_INJECTION: forcing a failure. [ 269.920499][T11504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.943504][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.4.1520 Not tainted syzkaller #0 PREEMPT(full) [ 269.943535][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.943549][T11504] Call Trace: [ 269.943557][T11504] [ 269.943575][T11504] dump_stack_lvl+0x189/0x250 [ 269.943603][T11504] ? __pfx____ratelimit+0x10/0x10 [ 269.943634][T11504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.943655][T11504] ? __pfx__printk+0x10/0x10 [ 269.943678][T11504] ? __might_fault+0xb0/0x130 [ 269.943711][T11504] should_fail_ex+0x414/0x560 [ 269.943736][T11504] _copy_from_user+0x2d/0xb0 [ 269.943765][T11504] ___sys_sendmsg+0x158/0x2a0 [ 269.943798][T11504] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.943863][T11504] ? __fget_files+0x2a/0x420 [ 269.943885][T11504] ? __fget_files+0x3a0/0x420 [ 269.943921][T11504] __x64_sys_sendmsg+0x19b/0x260 [ 269.943950][T11504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.943989][T11504] ? __pfx_ksys_write+0x10/0x10 [ 269.944014][T11504] ? do_syscall_64+0xbe/0xfa0 [ 269.944051][T11504] do_syscall_64+0xfa/0xfa0 [ 269.944079][T11504] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.944111][T11504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.944131][T11504] ? clear_bhb_loop+0x60/0xb0 [ 269.944156][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.944177][T11504] RIP: 0033:0x7fdf77d8eec9 [ 269.944195][T11504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.944214][T11504] RSP: 002b:00007fdf78c39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.944236][T11504] RAX: ffffffffffffffda RBX: 00007fdf77fe5fa0 RCX: 00007fdf77d8eec9 [ 269.944252][T11504] RDX: 0000000020000808 RSI: 0000200000000380 RDI: 0000000000000003 [ 269.944266][T11504] RBP: 00007fdf78c39090 R08: 0000000000000000 R09: 0000000000000000 [ 269.944279][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.944292][T11504] R13: 00007fdf77fe6038 R14: 00007fdf77fe5fa0 R15: 00007fffd21e5378 [ 269.944325][T11504] [ 270.256807][T11499] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 270.348421][T11518] netlink: 'syz.1.1523': attribute type 33 has an invalid length. [ 270.365519][T11518] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1523'. [ 270.391066][T11522] x_tables: duplicate underflow at hook 1 [ 270.457397][T11489] bond2 (unregistering): Released all slaves [ 270.646388][T11538] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 270.733978][T11542] FAULT_INJECTION: forcing a failure. [ 270.733978][T11542] name failslab, interval 1, probability 0, space 0, times 1 [ 270.763886][T11542] CPU: 0 UID: 0 PID: 11542 Comm: syz.4.1532 Not tainted syzkaller #0 PREEMPT(full) [ 270.763919][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.763932][T11542] Call Trace: [ 270.763941][T11542] [ 270.763951][T11542] dump_stack_lvl+0x189/0x250 [ 270.763978][T11542] ? __pfx____ratelimit+0x10/0x10 [ 270.764010][T11542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.764032][T11542] ? __pfx__printk+0x10/0x10 [ 270.764060][T11542] ? __pfx___might_resched+0x10/0x10 [ 270.764099][T11542] should_fail_ex+0x414/0x560 [ 270.764127][T11542] should_failslab+0xa8/0x100 [ 270.764154][T11542] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 270.764178][T11542] ? __alloc_skb+0x112/0x2d0 [ 270.764211][T11542] __alloc_skb+0x112/0x2d0 [ 270.764244][T11542] netlink_sendmsg+0x5c6/0xb30 [ 270.764285][T11542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.764317][T11542] ? aa_sock_msg_perm+0xf1/0x1d0 [ 270.764347][T11542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.764377][T11542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.764407][T11542] __sock_sendmsg+0x21c/0x270 [ 270.764434][T11542] ____sys_sendmsg+0x505/0x830 [ 270.764472][T11542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.764522][T11542] ? import_iovec+0x74/0xa0 [ 270.764556][T11542] ___sys_sendmsg+0x21f/0x2a0 [ 270.764591][T11542] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.764664][T11542] ? __fget_files+0x2a/0x420 [ 270.764689][T11542] ? __fget_files+0x3a0/0x420 [ 270.764726][T11542] __x64_sys_sendmsg+0x19b/0x260 [ 270.764761][T11542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.764804][T11542] ? __pfx_ksys_write+0x10/0x10 [ 270.764831][T11542] ? do_syscall_64+0xbe/0xfa0 [ 270.764868][T11542] do_syscall_64+0xfa/0xfa0 [ 270.764899][T11542] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.764930][T11542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.764951][T11542] ? clear_bhb_loop+0x60/0xb0 [ 270.764977][T11542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.764998][T11542] RIP: 0033:0x7fdf77d8eec9 [ 270.765017][T11542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.765036][T11542] RSP: 002b:00007fdf78c39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.765059][T11542] RAX: ffffffffffffffda RBX: 00007fdf77fe5fa0 RCX: 00007fdf77d8eec9 [ 270.765075][T11542] RDX: 0000000020000808 RSI: 0000200000000380 RDI: 0000000000000003 [ 270.765090][T11542] RBP: 00007fdf78c39090 R08: 0000000000000000 R09: 0000000000000000 [ 270.765103][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.765116][T11542] R13: 00007fdf77fe6038 R14: 00007fdf77fe5fa0 R15: 00007fffd21e5378 [ 270.765153][T11542] [ 271.075315][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 271.117701][T11554] netlink: 'syz.5.1536': attribute type 1 has an invalid length. [ 271.125789][T11554] netlink: 'syz.5.1536': attribute type 1 has an invalid length. [ 271.213126][T11558] openvswitch: netlink: IP tunnel TTL not specified. [ 271.327723][T11563] netlink: 'syz.5.1541': attribute type 1 has an invalid length. [ 271.835134][T11595] tipc: Enabled bearer , priority 0 [ 271.858864][T11595] syzkaller0: entered promiscuous mode [ 271.894731][T11595] syzkaller0: entered allmulticast mode [ 271.929796][T11595] tipc: Resetting bearer [ 272.009864][T11592] tipc: Resetting bearer [ 272.082934][T11592] tipc: Disabling bearer [ 272.174486][T11610] macvtap1: left promiscuous mode [ 272.186764][T11610] macvtap0: left promiscuous mode [ 272.204238][T11610] vlan0: left promiscuous mode [ 272.296477][T11616] netlink: 'syz.2.1561': attribute type 10 has an invalid length. [ 272.455214][T11626] openvswitch: netlink: Missing key (keys=440, expected=10000000) [ 272.907607][T11655] __nla_validate_parse: 23 callbacks suppressed [ 272.907628][T11655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1574'. [ 272.992055][T11647] lo speed is unknown, defaulting to 1000 [ 273.004694][T11650] lo speed is unknown, defaulting to 1000 [ 273.025959][T11647] hsr0 speed is unknown, defaulting to 1000 [ 273.045229][T11650] hsr0 speed is unknown, defaulting to 1000 [ 273.137113][T11669] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 273.629903][T11692] netlink: 'syz.6.1585': attribute type 33 has an invalid length. [ 274.287129][T11712] xt_connbytes: Forcing CT accounting to be enabled [ 274.533013][T11723] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1592'. [ 274.803821][T11726] tipc: Started in network mode [ 274.808775][T11726] tipc: Node identity 8698afe45f37, cluster identity 4711 [ 274.816268][T11726] tipc: Enabled bearer , priority 0 [ 274.827743][T11746] veth0_to_team: entered promiscuous mode [ 274.863307][T11746] veth0_to_team: entered allmulticast mode [ 274.955131][T11751] tun0: tun_chr_ioctl cmd 1074025675 [ 274.982952][T11751] tun0: persist disabled [ 274.995539][T11725] tipc: Disabling bearer [ 275.029065][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 275.074666][T11740] tun0: tun_chr_ioctl cmd 1074025675 [ 275.080038][T11740] tun0: persist enabled [ 275.085592][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 275.112474][T11758] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1603'. [ 275.142875][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'. [ 275.384193][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1606'. [ 275.400495][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 275.427487][T11777] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1607'. [ 275.679377][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1612'. [ 275.866774][T11796] bond2: entered promiscuous mode [ 275.872104][T11796] bond2: entered allmulticast mode [ 275.877967][T11796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.896804][T11801] !: renamed from dummy0 (while UP) [ 276.454469][T11839] netlink: 'syz.6.1630': attribute type 6 has an invalid length. [ 276.687481][T11848] geneve2: entered promiscuous mode [ 276.692982][T11848] geneve2: entered allmulticast mode [ 277.197302][T11883] sit3: entered promiscuous mode [ 277.207763][T11883] sit3: entered allmulticast mode [ 277.267352][T11883] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 277.575779][T11910] lo: entered promiscuous mode [ 277.605603][T11917] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 277.612233][T11910] netlink: 'syz.5.1650': attribute type 2 has an invalid length. [ 277.624784][T11910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.026428][T11939] __nla_validate_parse: 15 callbacks suppressed [ 278.026471][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1661'. [ 278.046717][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1661'. [ 278.062314][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1661'. [ 278.137575][T11948] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1662'. [ 278.308866][T11956] tipc: Enabled bearer , priority 10 [ 278.565711][T11978] ip6tnl1: entered promiscuous mode [ 278.804849][T11994] `: left promiscuous mode [ 278.817482][T11994] bond_slave_0: left promiscuous mode [ 278.826699][T11994] bond_slave_1: left promiscuous mode [ 278.844353][T11994] macvtap0: left allmulticast mode [ 278.857251][T11994] geneve2: left promiscuous mode [ 278.863147][T11994] geneve2: left allmulticast mode [ 278.888593][T11994] vlan2: left allmulticast mode [ 278.893965][T11994] vlan0: left allmulticast mode [ 278.898995][T11994] veth0_vlan: left allmulticast mode [ 278.906763][T11994] bridge5: left allmulticast mode [ 278.927783][T11994] bond4: left promiscuous mode [ 278.932957][T11994] bond4: left allmulticast mode [ 278.947883][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1675'. [ 278.965612][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.004248][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 279.013962][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.014030][T12005] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 279.039722][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.074098][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 279.119769][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.243498][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 279.301038][ T6048] tipc: Node number set to 1019874966 [ 279.320290][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 279.348341][T12020] netlink: 'syz.6.1680': attribute type 10 has an invalid length. [ 279.367134][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 279.385000][T12020] veth1_macvtap: left promiscuous mode [ 279.581155][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 280.139050][T12074] netlink: 'syz.5.1699': attribute type 6 has an invalid length. [ 280.148513][T12074] netlink: 'syz.5.1699': attribute type 5 has an invalid length. [ 280.234908][T12077] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 280.647681][T12100] lo speed is unknown, defaulting to 1000 [ 280.655870][T12100] hsr0 speed is unknown, defaulting to 1000 [ 281.035811][T12106] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 281.055434][T12106] netlink: 'syz.4.1709': attribute type 27 has an invalid length. [ 281.063811][T12106] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 281.553430][T12127] syzkaller1: entered promiscuous mode [ 281.571262][T12127] syzkaller1: entered allmulticast mode [ 281.823055][T12139] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 281.846516][T12139] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 282.238851][T12160] tipc: Enabled bearer , priority 0 [ 282.765876][T12160] tipc: Disabling bearer [ 283.153715][T12194] tipc: Enabled bearer , priority 0 [ 283.165706][T12198] __nla_validate_parse: 10 callbacks suppressed [ 283.165726][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1736'. [ 283.168000][T12194] syzkaller0: entered promiscuous mode [ 283.187712][T12194] syzkaller0: entered allmulticast mode [ 283.271284][T12194] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 283.283866][T12194] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.290946][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'. [ 283.344171][T12194] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1735'. [ 283.383675][T12192] tipc: Resetting bearer [ 283.475378][T12192] tipc: Disabling bearer [ 283.494888][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'. [ 283.707956][T12229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1747'. [ 283.842177][T12233] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 283.922749][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'. [ 284.083563][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1752'. [ 284.153497][T12261] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1754'. [ 284.455182][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1760'. [ 284.544969][T12279] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 284.720069][T12299] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 284.793284][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 284.835668][T12302] netlink: 'syz.1.1767': attribute type 12 has an invalid length. [ 284.943410][T12309] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 285.093595][T12309] bond5: entered promiscuous mode [ 285.122571][T12309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.201405][T12320] bond5: (slave bridge8): making interface the new active one [ 285.209058][T12320] bridge8: entered promiscuous mode [ 285.247915][T12320] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 285.358878][T12319] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 285.389205][T12325] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 285.402340][T12319] bond6 (unregistering): Released all slaves [ 285.475587][T12325] ªªªªªª: renamed from lo [ 286.366643][T12385] pim6reg527: entered allmulticast mode [ 286.548263][T12399] set match dimension is over the limit! [ 286.575576][T12401] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 287.145284][T12438] netlink: 'syz.6.1802': attribute type 4 has an invalid length. [ 287.674304][T12476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.871499][T12486] 8021q: VLANs not supported on gre0 [ 287.882394][T12489] tipc: Enabling of bearer rejected, failed to enable media [ 287.898049][T12486] tipc: Enabling of bearer rejected, failed to enable media [ 288.225853][T12512] __nla_validate_parse: 10 callbacks suppressed [ 288.225875][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1826'. [ 288.336107][T12515] can: request_module (can-proto-4) failed. [ 288.736527][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 289.121830][T12554] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 289.136417][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 289.408631][T12560] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 289.623975][T12574] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1845'. [ 289.672607][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1848'. [ 289.814838][T12585] netlink: 'syz.1.1851': attribute type 11 has an invalid length. [ 289.839844][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 290.052325][T12600] syzkaller1: entered promiscuous mode [ 290.057879][T12600] syzkaller1: entered allmulticast mode [ 290.304671][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1863'. [ 290.323042][T12624] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 290.343209][T12621] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.351940][T12624] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1864'. [ 290.562953][T12630] tipc: Enabled bearer , priority 10 [ 290.574192][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1867'. [ 290.589733][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'. [ 291.533110][T12667] Cannot find del_set index 3 as target [ 291.577789][T12669] netlink: 'syz.6.1876': attribute type 1 has an invalid length. [ 291.755982][T12678] lo speed is unknown, defaulting to 1000 [ 291.772806][T12678] hsr0 speed is unknown, defaulting to 1000 [ 292.086881][T12695] IPv6: sit1: Disabled Multicast RS [ 292.093253][T12693] netlink: 'syz.5.1884': attribute type 7 has an invalid length. [ 292.314105][T12697] netlink: 'syz.2.1886': attribute type 12 has an invalid length. [ 292.324361][T12704] netlink: 'syz.5.1888': attribute type 9 has an invalid length. [ 292.333680][T12704] netlink: 'syz.5.1888': attribute type 9 has an invalid length. [ 292.994361][T12726] lo speed is unknown, defaulting to 1000 [ 293.019207][T12726] hsr0 speed is unknown, defaulting to 1000 [ 293.327422][T12748] __nla_validate_parse: 12 callbacks suppressed [ 293.327443][T12748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1903'. [ 293.380610][T12749] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1904'. [ 293.667071][T12762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.469290][T12803] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1919'. [ 294.719049][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1923'. [ 294.917452][T12825] tipc: Enabled bearer , priority 0 [ 294.928607][T12829] syzkaller0: entered promiscuous mode [ 294.947461][T12829] syzkaller0: entered allmulticast mode [ 295.015676][T12829] tipc: Resetting bearer [ 295.058380][T12829] tipc: Disabling bearer [ 295.242116][T12844] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1931'. [ 295.318541][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 295.360048][T12838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.394298][T12851] sctp: [Deprecated]: syz.1.1932 (pid 12851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.394298][T12851] Use struct sctp_sack_info instead [ 295.640032][T12863] netlink: 'syz.6.1936': attribute type 39 has an invalid length. [ 295.683868][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'. [ 295.807882][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1939'. [ 295.852571][T12874] netlink: 'syz.1.1939': attribute type 2 has an invalid length. [ 295.860423][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1941'. [ 295.863845][T12874] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1939'. [ 295.910480][T12878] syz_tun: entered allmulticast mode [ 295.912856][T12874] nbd: must specify a device to reconfigure [ 296.198162][T12893] tipc: Enabled bearer , priority 0 [ 296.211984][T12893] syzkaller0: entered promiscuous mode [ 296.218381][T12893] syzkaller0: entered allmulticast mode [ 296.262003][T12893] tipc: Resetting bearer [ 296.263586][T12899] netlink: 'syz.1.1944': attribute type 10 has an invalid length. [ 296.276609][T12892] tipc: Resetting bearer [ 296.322477][T12892] tipc: Disabling bearer [ 296.650099][T12921] FAULT_INJECTION: forcing a failure. [ 296.650099][T12921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.666644][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.2.1955 Not tainted syzkaller #0 PREEMPT(full) [ 296.666675][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.666689][T12921] Call Trace: [ 296.666697][T12921] [ 296.666708][T12921] dump_stack_lvl+0x189/0x250 [ 296.666737][T12921] ? __pfx____ratelimit+0x10/0x10 [ 296.666768][T12921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.666790][T12921] ? __pfx__printk+0x10/0x10 [ 296.666812][T12921] ? __might_fault+0xb0/0x130 [ 296.666848][T12921] should_fail_ex+0x414/0x560 [ 296.666876][T12921] _copy_from_user+0x2d/0xb0 [ 296.666908][T12921] ___sys_sendmsg+0x158/0x2a0 [ 296.666943][T12921] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.667015][T12921] ? __fget_files+0x2a/0x420 [ 296.667041][T12921] ? __fget_files+0x3a0/0x420 [ 296.667079][T12921] __x64_sys_sendmsg+0x19b/0x260 [ 296.667115][T12921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.667157][T12921] ? __pfx_ksys_write+0x10/0x10 [ 296.667185][T12921] ? do_syscall_64+0xbe/0xfa0 [ 296.667222][T12921] do_syscall_64+0xfa/0xfa0 [ 296.667253][T12921] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.667294][T12921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.667314][T12921] ? clear_bhb_loop+0x60/0xb0 [ 296.667339][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.667358][T12921] RIP: 0033:0x7fd1b358eec9 [ 296.667385][T12921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.667404][T12921] RSP: 002b:00007fd1b4347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.667427][T12921] RAX: ffffffffffffffda RBX: 00007fd1b37e5fa0 RCX: 00007fd1b358eec9 [ 296.667443][T12921] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 296.667457][T12921] RBP: 00007fd1b4347090 R08: 0000000000000000 R09: 0000000000000000 [ 296.667470][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.667482][T12921] R13: 00007fd1b37e6038 R14: 00007fd1b37e5fa0 R15: 00007ffcde5ffeb8 [ 296.667518][T12921] [ 297.013195][T12930] netlink: 'syz.6.1959': attribute type 22 has an invalid length. [ 297.062340][T12936] siw: device registration error -23 [ 297.063984][ T59] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.081289][T12930] netlink: 'syz.6.1959': attribute type 22 has an invalid length. [ 297.096296][ T59] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.161351][ T59] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.170151][ T59] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.374478][T12953] FAULT_INJECTION: forcing a failure. [ 297.374478][T12953] name failslab, interval 1, probability 0, space 0, times 0 [ 297.402743][T12953] CPU: 1 UID: 0 PID: 12953 Comm: syz.2.1967 Not tainted syzkaller #0 PREEMPT(full) [ 297.402773][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.402787][T12953] Call Trace: [ 297.402796][T12953] [ 297.402805][T12953] dump_stack_lvl+0x189/0x250 [ 297.402833][T12953] ? __pfx____ratelimit+0x10/0x10 [ 297.402862][T12953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.402883][T12953] ? __pfx__printk+0x10/0x10 [ 297.402910][T12953] ? __pfx___might_resched+0x10/0x10 [ 297.402947][T12953] should_fail_ex+0x414/0x560 [ 297.402973][T12953] should_failslab+0xa8/0x100 [ 297.403000][T12953] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 297.403024][T12953] ? __alloc_skb+0x112/0x2d0 [ 297.403056][T12953] __alloc_skb+0x112/0x2d0 [ 297.403096][T12953] netlink_sendmsg+0x5c6/0xb30 [ 297.403137][T12953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.403169][T12953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 297.403199][T12953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.403237][T12953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.403271][T12953] __sock_sendmsg+0x21c/0x270 [ 297.403297][T12953] ____sys_sendmsg+0x505/0x830 [ 297.403336][T12953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.403378][T12953] ? import_iovec+0x74/0xa0 [ 297.403414][T12953] ___sys_sendmsg+0x21f/0x2a0 [ 297.403449][T12953] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.403520][T12953] ? __fget_files+0x2a/0x420 [ 297.403546][T12953] ? __fget_files+0x3a0/0x420 [ 297.403583][T12953] __x64_sys_sendmsg+0x19b/0x260 [ 297.403619][T12953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.403662][T12953] ? __pfx_ksys_write+0x10/0x10 [ 297.403689][T12953] ? do_syscall_64+0xbe/0xfa0 [ 297.403726][T12953] do_syscall_64+0xfa/0xfa0 [ 297.403756][T12953] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.403788][T12953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.403810][T12953] ? clear_bhb_loop+0x60/0xb0 [ 297.403836][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.403857][T12953] RIP: 0033:0x7fd1b358eec9 [ 297.403876][T12953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.403895][T12953] RSP: 002b:00007fd1b4347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.403919][T12953] RAX: ffffffffffffffda RBX: 00007fd1b37e5fa0 RCX: 00007fd1b358eec9 [ 297.403935][T12953] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 297.403949][T12953] RBP: 00007fd1b4347090 R08: 0000000000000000 R09: 0000000000000000 [ 297.403962][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.403976][T12953] R13: 00007fd1b37e6038 R14: 00007fd1b37e5fa0 R15: 00007ffcde5ffeb8 [ 297.404013][T12953] [ 297.808355][T12967] nbd: must specify at least one socket [ 297.913325][T12969] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 297.945247][T12974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.044526][T12984] bond8: (slave gretap1): making interface the new active one [ 298.056076][T12984] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 298.488498][T13007] __nla_validate_parse: 72 callbacks suppressed [ 298.488521][T13007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1984'. [ 298.509915][T13007] netlink: 'syz.1.1984': attribute type 1 has an invalid length. [ 298.520695][T13007] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1984'. [ 298.537128][T13015] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 298.558689][T13007] block nbd1: not configured, cannot reconfigure [ 298.599692][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1987'. [ 299.160339][T13023] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1989'. [ 300.413059][T13028] bridge3: entered promiscuous mode [ 300.428758][T13028] bridge3: entered allmulticast mode [ 300.605239][T13042] FAULT_INJECTION: forcing a failure. [ 300.605239][T13042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.668758][T13042] CPU: 1 UID: 0 PID: 13042 Comm: syz.2.1993 Not tainted syzkaller #0 PREEMPT(full) [ 300.668789][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.668802][T13042] Call Trace: [ 300.668812][T13042] [ 300.668821][T13042] dump_stack_lvl+0x189/0x250 [ 300.668850][T13042] ? __pfx____ratelimit+0x10/0x10 [ 300.668882][T13042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.668904][T13042] ? __pfx__printk+0x10/0x10 [ 300.668927][T13042] ? __might_fault+0xb0/0x130 [ 300.668976][T13042] should_fail_ex+0x414/0x560 [ 300.669005][T13042] _copy_from_iter+0x1de/0x1790 [ 300.669046][T13042] ? rcu_is_watching+0x15/0xb0 [ 300.669069][T13042] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 300.669095][T13042] ? __pfx__copy_from_iter+0x10/0x10 [ 300.669124][T13042] ? __build_skb_around+0x257/0x3e0 [ 300.669157][T13042] ? netlink_sendmsg+0x642/0xb30 [ 300.669185][T13042] ? skb_put+0x11b/0x210 [ 300.669218][T13042] netlink_sendmsg+0x6b2/0xb30 [ 300.669258][T13042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.669292][T13042] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.669323][T13042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.669353][T13042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.669384][T13042] __sock_sendmsg+0x21c/0x270 [ 300.669411][T13042] ____sys_sendmsg+0x505/0x830 [ 300.669449][T13042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.669491][T13042] ? import_iovec+0x74/0xa0 [ 300.669526][T13042] ___sys_sendmsg+0x21f/0x2a0 [ 300.669560][T13042] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.669633][T13042] ? __fget_files+0x2a/0x420 [ 300.669664][T13042] ? __fget_files+0x3a0/0x420 [ 300.669708][T13042] __x64_sys_sendmsg+0x19b/0x260 [ 300.669744][T13042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.669796][T13042] ? __pfx_ksys_write+0x10/0x10 [ 300.669830][T13042] ? do_syscall_64+0xbe/0xfa0 [ 300.669867][T13042] do_syscall_64+0xfa/0xfa0 [ 300.669899][T13042] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.669944][T13042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.669972][T13042] ? clear_bhb_loop+0x60/0xb0 [ 300.670012][T13042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.670034][T13042] RIP: 0033:0x7fd1b358eec9 [ 300.670053][T13042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.670072][T13042] RSP: 002b:00007fd1b4347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.670096][T13042] RAX: ffffffffffffffda RBX: 00007fd1b37e5fa0 RCX: 00007fd1b358eec9 [ 300.670116][T13042] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 300.670130][T13042] RBP: 00007fd1b4347090 R08: 0000000000000000 R09: 0000000000000000 [ 300.670144][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.670157][T13042] R13: 00007fd1b37e6038 R14: 00007fd1b37e5fa0 R15: 00007ffcde5ffeb8 [ 300.670193][T13042] [ 301.232536][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1999'. [ 301.247040][T13058] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 314.461184][ T5840] Bluetooth: hci4: command 0x0401 tx timeout [ 322.625223][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.195208][T13089] ip_tunnel: non-ECT from 172.30.1.2 with TOS=0x2 [ 324.339043][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 324.355438][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2012'. [ 324.571887][T13105] tipc: Enabled bearer , priority 0 [ 324.574115][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.593405][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.610500][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.620782][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.632592][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.695333][T13105] syzkaller0: entered promiscuous mode [ 324.704884][T13105] syzkaller0: entered allmulticast mode [ 324.711620][T13105] tipc: Resetting bearer [ 324.752255][T13110] lo speed is unknown, defaulting to 1000 [ 324.760363][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2013'. [ 324.771547][T13110] hsr0 speed is unknown, defaulting to 1000 [ 324.784660][T13123] netlink: 'syz.1.2017': attribute type 23 has an invalid length. [ 324.828911][T13104] tipc: Resetting bearer [ 325.681252][ T6048] tipc: Node number set to 3652169700 [ 326.705123][ T5841] Bluetooth: hci6: command tx timeout [ 326.784245][T13104] tipc: Disabling bearer [ 326.825578][T13141] _ÐZ`Ô€@Y: entered promiscuous mode [ 327.007347][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2030'. [ 327.325269][T13183] IPv6: NLM_F_REPLACE set, but no existing node found! [ 327.385330][T13187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.450205][T13110] chnl_net:caif_netlink_parms(): no params data found [ 327.609340][T13192] Cannot find map_set index 33 as target [ 327.734937][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.748435][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.756398][T13110] bridge_slave_0: entered allmulticast mode [ 327.765210][T13110] bridge_slave_0: entered promiscuous mode [ 327.776186][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.783900][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.791991][T13110] bridge_slave_1: entered allmulticast mode [ 327.800352][T13110] bridge_slave_1: entered promiscuous mode [ 327.839220][T13207] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 327.858485][T13207] netlink: 'syz.2.2038': attribute type 4 has an invalid length. [ 327.888038][T13207] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2038'. [ 327.912917][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2039'. [ 327.923180][T13210] tipc: Resetting bearer [ 327.960411][T13210] gretap0: entered promiscuous mode [ 327.998087][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.048900][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.327693][T13221] ªªªªªª: renamed from lo (while UP) [ 328.349062][T13110] team0: Port device team_slave_0 added [ 328.367306][T13110] team0: Port device team_slave_1 added [ 328.528092][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.547935][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.611034][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.631708][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.638841][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.677159][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.783158][ T5841] Bluetooth: hci6: command tx timeout [ 328.823077][T13110] hsr_slave_0: entered promiscuous mode [ 328.830658][T13110] hsr_slave_1: entered promiscuous mode [ 328.837630][T13110] debugfs: 'hsr0' already exists in 'hsr' [ 328.843623][T13110] Cannot create hsr debugfs directory [ 329.096330][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2049'. [ 329.215131][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 329.463979][T13110] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.481160][T13254] netlink: 'syz.6.2053': attribute type 10 has an invalid length. [ 329.487358][T13110] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.735209][T13254] bridge0: port 3(team0) entered blocking state [ 329.751142][T13254] bridge0: port 3(team0) entered disabled state [ 329.768145][T13254] team0: entered allmulticast mode [ 329.778015][T13254] team_slave_0: entered allmulticast mode [ 329.804558][T13266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2057'. [ 329.808846][T13254] team_slave_1: entered allmulticast mode [ 329.833792][T13254] team0: entered promiscuous mode [ 329.838907][T13254] team_slave_0: entered promiscuous mode [ 329.855577][T13254] team_slave_1: entered promiscuous mode [ 329.872268][T13254] bridge0: port 3(team0) entered blocking state [ 329.878713][T13254] bridge0: port 3(team0) entered forwarding state [ 329.891180][T13110] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 329.929067][T13110] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 330.188358][T13285] : left allmulticast mode [ 330.213971][T13285] : left promiscuous mode [ 330.218725][T13285] bridge0: port 1() entered disabled state [ 330.275118][T13285] bridge_slave_1: left allmulticast mode [ 330.288198][T13285] bridge_slave_1: left promiscuous mode [ 330.311819][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.357916][T13293] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2062'. [ 330.372714][T13285] team0: Port device team_slave_0 removed [ 330.445906][T13285] team0: Port device team_slave_1 removed [ 330.476720][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.488050][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.498570][T13285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.536310][T13299] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2063'. [ 330.604740][T13110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.660835][T13110] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.679811][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.687162][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.726954][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.734191][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.861440][ T5840] Bluetooth: hci6: command tx timeout [ 331.252928][T13321] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2069'. [ 331.324400][T13110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.732705][T13334] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 331.739216][T13334] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 331.768117][T13339] netlink: 'syz.6.2075': attribute type 1 has an invalid length. [ 331.790963][T13339] netlink: 5624 bytes leftover after parsing attributes in process `syz.6.2075'. [ 331.833702][T13334] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 331.840344][T13334] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 332.028571][T13347] syzkaller1: entered promiscuous mode [ 332.040629][T13347] syzkaller1: entered allmulticast mode [ 332.074795][T13352] rdma_rxe: rxe_newlink: failed to add lo [ 332.095499][T13110] veth0_vlan: entered promiscuous mode [ 332.170140][T13110] veth1_vlan: entered promiscuous mode [ 332.247573][T13110] veth0_macvtap: entered promiscuous mode [ 332.285160][T13110] veth1_macvtap: entered promiscuous mode [ 332.353533][T13110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.393353][T13110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.414013][ T1153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.449074][ T1153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.494580][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.548837][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.599364][T13370] sctp: [Deprecated]: syz.2.2083 (pid 13370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.599364][T13370] Use struct sctp_sack_info instead [ 332.743431][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.763834][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.844011][ T968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.870210][ T968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.942693][ T5840] Bluetooth: hci6: command 0x0419 tx timeout [ 333.001997][T13386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.059200][T13392] FAULT_INJECTION: forcing a failure. [ 333.059200][T13392] name failslab, interval 1, probability 0, space 0, times 0 [ 333.072769][T13392] CPU: 1 UID: 0 PID: 13392 Comm: syz.7.2005 Not tainted syzkaller #0 PREEMPT(full) [ 333.072798][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.072845][T13392] Call Trace: [ 333.072855][T13392] [ 333.072864][T13392] dump_stack_lvl+0x189/0x250 [ 333.072892][T13392] ? __pfx____ratelimit+0x10/0x10 [ 333.072923][T13392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.072944][T13392] ? __pfx__printk+0x10/0x10 [ 333.072967][T13392] ? __lock_acquire+0xab9/0xd20 [ 333.073006][T13392] should_fail_ex+0x414/0x560 [ 333.073030][T13392] should_failslab+0xa8/0x100 [ 333.073052][T13392] kmem_cache_alloc_noprof+0x73/0x3c0 [ 333.073074][T13392] ? skb_clone+0x212/0x3a0 [ 333.073112][T13392] skb_clone+0x212/0x3a0 [ 333.073147][T13392] __netlink_deliver_tap+0x404/0x850 [ 333.073188][T13392] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.073219][T13392] netlink_deliver_tap+0x19c/0x1b0 [ 333.073257][T13392] netlink_unicast+0x7fa/0x9e0 [ 333.073293][T13392] ? __pfx_netlink_unicast+0x10/0x10 [ 333.073322][T13392] ? netlink_sendmsg+0x642/0xb30 [ 333.073348][T13392] ? skb_put+0x11b/0x210 [ 333.073382][T13392] netlink_sendmsg+0x805/0xb30 [ 333.073421][T13392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.073454][T13392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.073485][T13392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.073515][T13392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.073545][T13392] __sock_sendmsg+0x21c/0x270 [ 333.073573][T13392] ____sys_sendmsg+0x505/0x830 [ 333.073611][T13392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.073653][T13392] ? import_iovec+0x74/0xa0 [ 333.073688][T13392] ___sys_sendmsg+0x21f/0x2a0 [ 333.073728][T13392] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.073801][T13392] ? __fget_files+0x2a/0x420 [ 333.073825][T13392] ? __fget_files+0x3a0/0x420 [ 333.073864][T13392] __x64_sys_sendmsg+0x19b/0x260 [ 333.073899][T13392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.073951][T13392] ? do_syscall_64+0xbe/0xfa0 [ 333.073988][T13392] do_syscall_64+0xfa/0xfa0 [ 333.074019][T13392] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.074051][T13392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.074072][T13392] ? clear_bhb_loop+0x60/0xb0 [ 333.074098][T13392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.074119][T13392] RIP: 0033:0x7fdf7438eec9 [ 333.074139][T13392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.074159][T13392] RSP: 002b:00007fdf752cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.074182][T13392] RAX: ffffffffffffffda RBX: 00007fdf745e5fa0 RCX: 00007fdf7438eec9 [ 333.074198][T13392] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 333.074212][T13392] RBP: 00007fdf752cf090 R08: 0000000000000000 R09: 0000000000000000 [ 333.074225][T13392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.074238][T13392] R13: 00007fdf745e6038 R14: 00007fdf745e5fa0 R15: 00007fff1f8d90e8 [ 333.074283][T13392] [ 333.942028][T13415] veth0: entered promiscuous mode [ 333.968841][T13414] veth0: left promiscuous mode [ 334.025642][T13426] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2096'. [ 334.047410][T13426] xt_policy: neither incoming nor outgoing policy selected [ 334.066141][T13426] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2096'. [ 334.114343][T13433] FAULT_INJECTION: forcing a failure. [ 334.114343][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 334.127311][T13433] CPU: 1 UID: 0 PID: 13433 Comm: syz.7.2099 Not tainted syzkaller #0 PREEMPT(full) [ 334.127341][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.127355][T13433] Call Trace: [ 334.127363][T13433] [ 334.127373][T13433] dump_stack_lvl+0x189/0x250 [ 334.127401][T13433] ? __pfx____ratelimit+0x10/0x10 [ 334.127433][T13433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.127456][T13433] ? __pfx__printk+0x10/0x10 [ 334.127482][T13433] ? __pfx___might_resched+0x10/0x10 [ 334.127515][T13433] ? fs_reclaim_acquire+0x7d/0x100 [ 334.127547][T13433] should_fail_ex+0x414/0x560 [ 334.127575][T13433] should_failslab+0xa8/0x100 [ 334.127601][T13433] __kmalloc_noprof+0xcb/0x4f0 [ 334.127623][T13433] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 334.127654][T13433] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 334.127686][T13433] genl_family_rcv_msg_doit+0xb8/0x300 [ 334.127716][T13433] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 334.127748][T13433] ? apparmor_capable+0x137/0x1b0 [ 334.127785][T13433] ? bpf_lsm_capable+0x9/0x20 [ 334.127806][T13433] ? security_capable+0x7e/0x2e0 [ 334.127840][T13433] genl_rcv_msg+0x60e/0x790 [ 334.127869][T13433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.127889][T13433] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 334.127915][T13433] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 334.127942][T13433] ? __pfx_nl80211_post_doit+0x10/0x10 [ 334.127970][T13433] ? __asan_memcpy+0x40/0x70 [ 334.128001][T13433] ? __pfx_ref_tracker_free+0x10/0x10 [ 334.128033][T13433] netlink_rcv_skb+0x205/0x470 [ 334.128058][T13433] ? __lock_acquire+0xab9/0xd20 [ 334.128088][T13433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.128111][T13433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.128162][T13433] ? down_read+0x1ad/0x2e0 [ 334.128196][T13433] genl_rcv+0x28/0x40 [ 334.128215][T13433] netlink_unicast+0x82f/0x9e0 [ 334.128248][T13433] ? __pfx_netlink_unicast+0x10/0x10 [ 334.128276][T13433] ? netlink_sendmsg+0x642/0xb30 [ 334.128303][T13433] ? skb_put+0x11b/0x210 [ 334.128336][T13433] netlink_sendmsg+0x805/0xb30 [ 334.128377][T13433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.128409][T13433] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.128439][T13433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.128468][T13433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.128499][T13433] __sock_sendmsg+0x21c/0x270 [ 334.128527][T13433] ____sys_sendmsg+0x505/0x830 [ 334.128563][T13433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.128605][T13433] ? import_iovec+0x74/0xa0 [ 334.128638][T13433] ___sys_sendmsg+0x21f/0x2a0 [ 334.128671][T13433] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.128739][T13433] ? __fget_files+0x2a/0x420 [ 334.128763][T13433] ? __fget_files+0x3a0/0x420 [ 334.128802][T13433] __x64_sys_sendmsg+0x19b/0x260 [ 334.128837][T13433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.128881][T13433] ? __pfx_ksys_write+0x10/0x10 [ 334.128906][T13433] ? do_syscall_64+0xbe/0xfa0 [ 334.128940][T13433] do_syscall_64+0xfa/0xfa0 [ 334.128966][T13433] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.128997][T13433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.129018][T13433] ? clear_bhb_loop+0x60/0xb0 [ 334.129044][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.129065][T13433] RIP: 0033:0x7fdf7438eec9 [ 334.129084][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.129104][T13433] RSP: 002b:00007fdf752cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.129127][T13433] RAX: ffffffffffffffda RBX: 00007fdf745e5fa0 RCX: 00007fdf7438eec9 [ 334.129143][T13433] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 334.129157][T13433] RBP: 00007fdf752cf090 R08: 0000000000000000 R09: 0000000000000000 [ 334.129170][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.129191][T13433] R13: 00007fdf745e6038 R14: 00007fdf745e5fa0 R15: 00007fff1f8d90e8 [ 334.129227][T13433] [ 334.815778][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 334.903539][T13456] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2109'. [ 335.021064][ T5841] Bluetooth: hci6: command 0x0419 tx timeout [ 335.042201][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2113'. [ 335.051748][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 335.166283][T13469] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2112'. [ 335.182886][T13467] syz.1.2111: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 335.211393][T13467] CPU: 0 UID: 0 PID: 13467 Comm: syz.1.2111 Not tainted syzkaller #0 PREEMPT(full) [ 335.211425][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.211439][T13467] Call Trace: [ 335.211447][T13467] [ 335.211458][T13467] dump_stack_lvl+0x189/0x250 [ 335.211491][T13467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.211515][T13467] ? __pfx__printk+0x10/0x10 [ 335.211538][T13467] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 335.211565][T13467] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 335.211593][T13467] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 335.211622][T13467] warn_alloc+0x214/0x310 [ 335.211657][T13467] ? stack_depot_save_flags+0x40/0x860 [ 335.211684][T13467] ? __pfx_warn_alloc+0x10/0x10 [ 335.211714][T13467] ? kasan_save_track+0x4f/0x80 [ 335.211736][T13467] ? xskq_create+0x56/0x170 [ 335.211764][T13467] ? xsk_init_queue+0xb0/0x110 [ 335.211791][T13467] ? xsk_setsockopt+0x4dc/0x8d0 [ 335.211817][T13467] ? do_sock_setsockopt+0x179/0x1b0 [ 335.211856][T13467] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 335.211885][T13467] ? do_syscall_64+0xfa/0xfa0 [ 335.211916][T13467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.211947][T13467] __vmalloc_node_range_noprof+0x125/0x12f0 [ 335.212010][T13467] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 335.212044][T13467] ? __kasan_kmalloc+0x93/0xb0 [ 335.212071][T13467] vmalloc_user_noprof+0xad/0xf0 [ 335.212095][T13467] ? xskq_create+0xbf/0x170 [ 335.212125][T13467] xskq_create+0xbf/0x170 [ 335.212158][T13467] xsk_init_queue+0xb0/0x110 [ 335.212194][T13467] xsk_setsockopt+0x4dc/0x8d0 [ 335.212227][T13467] ? __pfx_xsk_setsockopt+0x10/0x10 [ 335.212259][T13467] ? __pfx_aa_sk_perm+0x10/0x10 [ 335.212288][T13467] ? aa_sock_opt_perm+0xff/0x1b0 [ 335.212320][T13467] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 335.212351][T13467] ? __pfx_xsk_setsockopt+0x10/0x10 [ 335.212381][T13467] do_sock_setsockopt+0x179/0x1b0 [ 335.212417][T13467] __x64_sys_setsockopt+0x13f/0x1b0 [ 335.212454][T13467] do_syscall_64+0xfa/0xfa0 [ 335.212485][T13467] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.212517][T13467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.212539][T13467] ? clear_bhb_loop+0x60/0xb0 [ 335.212565][T13467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.212586][T13467] RIP: 0033:0x7ff264d8eec9 [ 335.212607][T13467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.212627][T13467] RSP: 002b:00007ff265ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 335.212671][T13467] RAX: ffffffffffffffda RBX: 00007ff264fe5fa0 RCX: 00007ff264d8eec9 [ 335.212687][T13467] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 335.212700][T13467] RBP: 00007ff264e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 335.212714][T13467] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.212727][T13467] R13: 00007ff264fe6038 R14: 00007ff264fe5fa0 R15: 00007ffd0c2002f8 [ 335.212766][T13467] [ 335.213224][T13467] Mem-Info: [ 335.518283][T13467] active_anon:5465 inactive_anon:0 isolated_anon:0 [ 335.518283][T13467] active_file:3147 inactive_file:39965 isolated_file:0 [ 335.518283][T13467] unevictable:768 dirty:88 writeback:0 [ 335.518283][T13467] slab_reclaimable:12003 slab_unreclaimable:114551 [ 335.518283][T13467] mapped:39443 shmem:1359 pagetables:1284 [ 335.518283][T13467] sec_pagetables:0 bounce:0 [ 335.518283][T13467] kernel_misc_reclaimable:0 [ 335.518283][T13467] free:1282653 free_pcp:13996 free_cma:0 [ 335.567314][T13467] Node 0 active_anon:21860kB inactive_anon:0kB active_file:12588kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157772kB dirty:348kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13448kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 335.681128][T13467] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 335.748912][T13467] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.779699][T13467] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 335.790665][T13467] Node 0 DMA32 free:1215956kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21512kB inactive_anon:0kB active_file:12588kB inactive_file:157840kB unevictable:1536kB writepending:348kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:42248kB local_pcp:21044kB free_cma:0kB [ 335.837469][T13467] lowmem_reserve[]: 0 0 1 1 1 [ 335.842807][T13467] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 335.909316][T13467] lowmem_reserve[]: 0 0 0 0 0 [ 335.916034][T13467] Node 1 Normal free:3899016kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16032kB local_pcp:11008kB free_cma:0kB [ 335.955815][T13467] lowmem_reserve[]: 0 0 0 0 0 [ 335.960645][T13467] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 335.967696][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2124'. [ 335.976282][T13467] Node 0 DMA32: 173*4kB (M) 506*8kB (UME) 370*16kB (UME) 308*32kB (UME) 101*64kB (UME) 35*128kB (UME) 10*256kB (UM) 2*512kB (M) 4*1024kB (M) 1*2048kB (E) 287*4096kB (M) = 1216740kB [ 336.005072][T13467] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 336.020015][T13467] Node 1 Normal: 168*4kB (UME) 39*8kB (UME) 33*16kB (UME) 109*32kB (UME) 36*64kB (UME) 8*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899016kB [ 336.022657][T13505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2123'. [ 336.063004][T13467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.073811][T13508] bridge_slave_0: default FDB implementation only supports local addresses [ 336.086512][T13467] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 336.107121][T13511] syz.7.2126 uses old SIOCAX25GETINFO [ 336.152244][T13467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.173493][T13467] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.205410][T13467] 44467 total pagecache pages [ 336.213147][T13467] 0 pages in swap cache [ 336.217366][T13467] Free swap = 124996kB [ 336.236504][T13467] Total swap = 124996kB [ 336.241233][T13467] 2097051 pages RAM [ 336.245093][T13467] 0 pages HighMem/MovableOnly [ 336.249960][T13467] 424452 pages reserved [ 336.255716][T13467] 0 pages cma reserved [ 336.279083][T13516] bond3: Removing last ns target with arp_interval on [ 336.312984][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2129'. [ 336.427470][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2133'. [ 336.461642][T13533] sctp: [Deprecated]: syz.2.2132 (pid 13533) Use of int in maxseg socket option. [ 336.461642][T13533] Use struct sctp_assoc_value instead [ 336.501241][T13529] bridge: RTM_NEWNEIGH with invalid ether address [ 336.539902][T13537] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2134'. [ 336.876676][T13555] bond6: option xmit_hash_policy: invalid value (64) [ 336.913670][T13555] bond6 (unregistering): Released all slaves [ 337.130784][ T5882] IPVS: starting estimator thread 0... [ 337.182295][T13566] netlink: 'syz.5.2143': attribute type 4 has an invalid length. [ 337.221009][T13567] IPVS: using max 25 ests per chain, 60000 per kthread [ 337.369827][T13579] netlink: 'syz.6.2147': attribute type 11 has an invalid length. [ 337.430535][T13581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 337.497674][T13587] can: request_module (can-proto-3) failed. [ 337.504639][T13583] can: request_module (can-proto-3) failed. [ 337.712650][T13603] netlink: 'syz.5.2153': attribute type 4 has an invalid length. [ 337.809728][T13607] netlink: 'syz.2.2155': attribute type 3 has an invalid length. [ 338.083007][T13619] xt_time: unknown flags 0xf4 [ 338.342955][T13627] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 338.495892][T13633] netlink: 'syz.7.2166': attribute type 1 has an invalid length. [ 338.540792][T13633] nbd: couldn't find device at index 1048576 [ 338.550094][T13640] netlink: 'syz.6.2167': attribute type 1 has an invalid length. [ 338.639627][T13645] TCP: TCP_TX_DELAY enabled [ 339.239340][T13679] vxcan1: tx address claim with different name [ 339.809740][T13710] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 339.918259][T13724] netlink: 'syz.2.2195': attribute type 11 has an invalid length. [ 339.929826][T13726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.937090][T13724] __nla_validate_parse: 18 callbacks suppressed [ 339.937119][T13724] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2195'. [ 340.876099][T13778] team0: Device ip6gre1 is of different type [ 341.230491][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 341.293859][T13799] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2221'. [ 341.484056][T13812] netlink: 'syz.5.2225': attribute type 1 has an invalid length. [ 341.635678][T13827] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 341.643239][T13827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.683836][T13812] bond5: (slave gretap2): making interface the new active one [ 341.703970][T13812] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 342.069207][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2236'. [ 342.086922][T13853] sctp: [Deprecated]: syz.1.2237 (pid 13853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.086922][T13853] Use struct sctp_sack_info instead [ 342.283234][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2241'. [ 342.457894][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 342.513611][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2243'. [ 342.714774][ T5908] IPVS: starting estimator thread 0... [ 342.725093][T13889] netlink: 'syz.7.2248': attribute type 1 has an invalid length. [ 342.736116][T13890] netlink: 'syz.7.2248': attribute type 1 has an invalid length. [ 342.831914][T13891] IPVS: using max 26 ests per chain, 62400 per kthread [ 342.959709][T13909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 343.139308][T13930] Cannot find add_set index 0 as target [ 343.161337][T13929] Cannot find add_set index 0 as target [ 343.218127][T13873] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 343.516036][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2263'. [ 343.570672][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2263'. [ 343.634686][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2263'. [ 343.656952][T13948] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.722540][T13954] bridge11: entered promiscuous mode [ 343.756292][T13954] bridge11: entered allmulticast mode [ 344.197302][T13979] openvswitch: netlink: Missing key (keys=440, expected=10000000) [ 344.397921][T13994] netlink: 'syz.2.2278': attribute type 11 has an invalid length. [ 344.416368][T13984] lo speed is unknown, defaulting to 1000 [ 344.425056][T13994] netlink: 'syz.2.2278': attribute type 11 has an invalid length. [ 344.469629][T13984] hsr0 speed is unknown, defaulting to 1000 [ 344.898890][T14011] xt_TCPMSS: Only works on TCP SYN packets [ 345.295595][T13995] policy can only be matched on NF_INET_PRE_ROUTING [ 345.295621][T13995] unable to load match [ 345.344368][T14028] __nla_validate_parse: 1 callbacks suppressed [ 345.344390][T14028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2288'. [ 345.622356][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2291'. [ 345.632125][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2291'. [ 345.899653][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'. [ 346.029160][T14050] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 346.052270][T14050] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.542091][T14079] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2304'. [ 346.551557][T14079] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 346.708049][T14085] netlink: 'syz.7.2306': attribute type 1 has an invalid length. [ 346.721285][T14085] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2306'. [ 346.727423][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2307'. [ 346.730384][T14085] netlink: 'syz.7.2306': attribute type 1 has an invalid length. [ 346.768171][T14095] tipc: Enabling of bearer rejected, failed to enable media [ 346.798946][T14084] netlink: 'syz.7.2306': attribute type 21 has an invalid length. [ 346.817409][T14089] xfrm1: entered promiscuous mode [ 346.843666][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2307'. [ 346.869758][T14089] xfrm1: entered allmulticast mode [ 346.883449][T14084] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2306'. [ 346.910154][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 347.484402][T14134] tipc: Enabled bearer , priority 0 [ 347.739239][T14153] netlink: 'syz.5.2323': attribute type 1 has an invalid length. [ 347.820513][T14151] tipc: Resetting bearer [ 347.969585][T14133] tipc: Disabling bearer [ 348.139391][T14171] netlink: 'syz.5.2334': attribute type 10 has an invalid length. [ 348.182560][T14171] team0: Port device dummy0 added [ 348.201316][T14171] netlink: 'syz.5.2334': attribute type 10 has an invalid length. [ 348.216378][T14171] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.258938][T14171] team0: Failed to send options change via netlink (err -105) [ 348.274826][T14171] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.286600][T14171] team0: Port device dummy0 removed [ 348.297192][T14171] dummy0: entered promiscuous mode [ 348.304902][T14171] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 348.446306][T14182] netlink: 'syz.5.2339': attribute type 83 has an invalid length. [ 348.895390][T14215] x_tables: duplicate underflow at hook 1 [ 349.132463][T14226] syzkaller0: entered promiscuous mode [ 349.151133][T14226] syzkaller0: entered allmulticast mode [ 349.449865][T14252] veth0_to_team: entered promiscuous mode [ 349.457873][T14252] veth0_to_team: entered allmulticast mode [ 349.718466][T14271] x_tables: duplicate underflow at hook 1 [ 350.698711][T14309] Bluetooth: MGMT ver 1.23 [ 350.740782][T14304] gretap0: left promiscuous mode [ 351.344669][T14304] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 351.399741][T14309] __nla_validate_parse: 7 callbacks suppressed [ 351.399764][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2379'. [ 351.427452][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2381'. [ 351.439967][T14309] netlink: 'syz.6.2379': attribute type 20 has an invalid length. [ 351.498070][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2379'. [ 351.517873][T14309] netlink: 'syz.6.2379': attribute type 20 has an invalid length. [ 351.698109][T14348] xt_CT: No such helper "snmp" [ 351.798705][T14356] xt_hashlimit: size too large, truncated to 1048576 [ 351.973864][T14363] dvmrp0: entered allmulticast mode [ 352.040424][T14369] rdma_rxe: rxe_newlink: failed to add bond0 [ 352.456107][T14385] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2390'. [ 352.623284][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2393'. [ 352.634774][T14392] netlink: 'syz.2.2392': attribute type 39 has an invalid length. [ 352.664042][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2393'. [ 353.099266][T14420] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2397'. [ 353.282806][T14424] netlink: 'syz.5.2397': attribute type 16 has an invalid length. [ 353.291455][T14424] netlink: 'syz.5.2397': attribute type 17 has an invalid length. [ 354.803411][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.811450][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.940672][T14409] bridge_slave_0: left allmulticast mode [ 354.947697][T14409] bridge_slave_0: left promiscuous mode [ 354.954606][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.978422][T14409] bridge_slave_1: left allmulticast mode [ 354.985940][T14409] bridge_slave_1: left promiscuous mode [ 354.995422][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.019526][T14409] bond0: (slave bond_slave_0): Releasing backup interface [ 355.068416][T14409] bond0: (slave bond_slave_1): Releasing backup interface [ 355.106034][T14409] team0: Port device team_slave_0 removed [ 355.125600][T14409] team0: Port device team_slave_1 removed [ 355.138688][T14409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.151921][T14409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.165984][T14409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.177251][T14409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.196649][T14409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.315385][T14444] Cannot find add_set index 1 as target [ 355.326138][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.336219][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.354308][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.364405][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.372781][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.381295][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.389335][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.398027][T14445] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 355.617780][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2407'. [ 355.674781][T14451] block nbd0: server does not support multiple connections per device. [ 355.690662][T14451] block nbd0: shutting down sockets [ 355.775849][T14451] block nbd0: server does not support multiple connections per device. [ 355.787005][T14451] block nbd0: shutting down sockets [ 355.911588][T14451] block nbd0: server does not support multiple connections per device. [ 355.926456][T14451] block nbd0: shutting down sockets [ 356.041803][T14451] block nbd0: server does not support multiple connections per device. [ 356.050524][T14451] block nbd0: shutting down sockets [ 356.152842][T14451] block nbd0: server does not support multiple connections per device. [ 356.162884][T14451] block nbd0: shutting down sockets [ 356.263727][T14484] xt_ecn: cannot match TCP bits for non-tcp packets [ 356.301358][T14451] block nbd0: server does not support multiple connections per device. [ 356.310112][T14451] block nbd0: shutting down sockets [ 356.381681][T14451] block nbd0: shutting down sockets [ 356.407120][T14483] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2414'. [ 356.685109][T14496] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2418'. [ 356.695296][T14500] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 356.784040][T14505] tunl0: entered promiscuous mode [ 356.818615][T14505] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2420'. [ 356.875227][T14500] wg2: entered promiscuous mode [ 356.889988][T14500] wg2: entered allmulticast mode [ 356.948332][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2421'. [ 356.973130][ T37] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.973211][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2421'. [ 356.991357][ T37] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.991408][ T37] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.991448][ T37] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.141886][T14526] 8021q: VLANs not supported on ip6_vti0 [ 357.155127][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'. [ 357.361570][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2428'. [ 357.584186][T14546] tap0: tun_chr_ioctl cmd 1074025672 [ 357.589818][T14546] tap0: ignored: set checksum disabled [ 357.596443][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2433'. [ 357.619291][T14553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2433'. [ 357.651378][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2433'. [ 357.729787][T14560] team0: Device gtp0 is of different type [ 357.845032][T14565] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 357.852906][T14565] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 357.862545][T14565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 358.229224][T14593] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 358.428563][T14606] tipc: Enabling of bearer rejected, failed to enable media [ 358.760656][T14621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.968460][T14635] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 359.285281][T14655] netlink: 'syz.1.2463': attribute type 11 has an invalid length. [ 359.289773][T14656] veth1_to_bond: entered allmulticast mode [ 359.503995][T14656] bond0: (slave bond_slave_1): Releasing backup interface [ 359.514953][T14656] bond_slave_1 (unregistering): left promiscuous mode [ 359.556030][T14656] veth1_to_bond (unregistering): left allmulticast mode [ 359.934345][T14695] tipc: Enabled bearer , priority 0 [ 359.961691][T14695] syzkaller0: entered promiscuous mode [ 359.992464][T14695] syzkaller0: entered allmulticast mode [ 360.158686][T14695] tipc: Resetting bearer [ 360.198278][T14695] tipc: Disabling bearer [ 360.304346][T14722] delete_channel: no stack [ 360.324692][T14725] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 360.825501][T14750] bridge0: port 4(veth0_to_bridge) entered blocking state [ 360.837464][T14750] bridge0: port 4(veth0_to_bridge) entered disabled state [ 360.849216][T14750] veth0_to_bridge: entered allmulticast mode [ 360.859349][T14750] veth0_to_bridge: entered promiscuous mode [ 360.869037][T14750] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.883302][T14750] bridge0: port 4(veth0_to_bridge) entered blocking state [ 360.891031][T14750] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 360.917208][T14753] IPv6: sit2: Disabled Multicast RS [ 360.940603][T14753] sit2: entered allmulticast mode [ 361.119718][T14767] 8021q: VLANs not supported on ip6_vti0 [ 361.419377][T14786] __nla_validate_parse: 21 callbacks suppressed [ 361.419400][T14786] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2505'. [ 361.550175][T14798] nbd: must specify at least one socket [ 361.828050][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2517'. [ 361.940000][T14825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2518'. [ 362.104326][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'. [ 362.113982][T14838] validate_nla: 65 callbacks suppressed [ 362.114001][T14838] netlink: 'syz.6.2520': attribute type 12 has an invalid length. [ 362.132895][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2520'. [ 362.159929][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'. [ 362.179471][T14838] netlink: 'syz.6.2520': attribute type 12 has an invalid length. [ 362.191231][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2520'. [ 362.853324][T14862] ip6t_srh: unknown srh invflags 4000 [ 362.955209][T14871] tipc: Enabled bearer , priority 0 [ 362.963934][T14871] syzkaller0: entered promiscuous mode [ 362.970149][T14871] syzkaller0: entered allmulticast mode [ 362.990714][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 363.014865][T14871] tipc: Resetting bearer [ 363.030265][T14870] tipc: Resetting bearer [ 363.066116][T14870] tipc: Disabling bearer [ 363.244520][T14885] x_tables: duplicate underflow at hook 4 [ 363.490232][ T37] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xcc [ 363.501219][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2539'. [ 363.649450][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2543'. [ 364.501678][T14941] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 365.365509][T14993] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 365.491976][T15000] netlink: 'syz.6.2566': attribute type 3 has an invalid length. [ 365.532576][T15005] netlink: 'syz.5.2568': attribute type 1 has an invalid length. [ 365.547309][T15005] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 365.976863][T15027] vlan1: entered promiscuous mode [ 366.000815][T15027] vlan1: entered allmulticast mode [ 366.174155][T15040] syzkaller1: entered promiscuous mode [ 366.179797][T15040] syzkaller1: entered allmulticast mode [ 366.300817][T15042] team0 (unregistering): Port device team_slave_0 removed [ 366.323228][T15042] team0 (unregistering): Port device team_slave_1 removed [ 366.348671][T15044] tipc: Started in network mode [ 366.354250][T15044] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 366.363477][T15044] tipc: Enabling of bearer rejected, failed to enable media [ 366.375820][T15054] netlink: 'syz.2.2583': attribute type 10 has an invalid length. [ 366.406261][T15054] team0: Port device dummy0 added [ 366.847638][T15086] __nla_validate_parse: 8 callbacks suppressed [ 366.847660][T15086] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2595'. [ 367.003964][T15099] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 367.010019][T15091] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 367.599129][T15143] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2608'. [ 367.607522][T15146] IPVS: Unknown mcast interface: vcan0 [ 367.625309][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2610'. [ 368.067556][T15172] tipc: Enabled bearer , priority 0 [ 368.075609][T15172] syzkaller0: entered promiscuous mode [ 368.082398][T15172] syzkaller0: entered allmulticast mode [ 368.098526][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2617'. [ 368.110585][T15174] netlink: 'syz.7.2617': attribute type 4 has an invalid length. [ 368.119704][T15172] tipc: Resetting bearer [ 368.138206][T15171] tipc: Resetting bearer [ 368.157435][T15171] tipc: Disabling bearer [ 384.075805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.088362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.101061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.114969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.127690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.140407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.154486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.167217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.179853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.194024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.890912][ C0] sched: DL replenish lagged too much [ 389.081432][ C0] net_ratelimit: 4711 callbacks suppressed [ 389.081456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.101193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.113904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.126522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.140334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.152853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.165431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.179258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.191763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.204416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.091376][ C0] net_ratelimit: 4595 callbacks suppressed [ 394.091399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.111204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.123754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.136436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.150333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.162903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.175525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.189549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.202100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.214697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.101863][ C0] net_ratelimit: 5488 callbacks suppressed [ 399.101889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.120483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.133160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.145809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 399.159661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.172209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.184824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.197494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 399.211342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.223942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.531564][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 404.110991][ C0] net_ratelimit: 5649 callbacks suppressed [ 404.111017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 404.130791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.143348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.155921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.168661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 404.182677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.195235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.207813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.220411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 404.234183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.121888][ C0] net_ratelimit: 5571 callbacks suppressed [ 409.121911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.140340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.153524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.166251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 409.180419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.192999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.205691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.218363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 409.232273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.244893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.132065][ C0] net_ratelimit: 4682 callbacks suppressed [ 414.132090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.151496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.164385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.177150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 414.191206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.204751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.217374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.230011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 414.243872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.257483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.141123][ C0] net_ratelimit: 4151 callbacks suppressed [ 419.141146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.159678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.172365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 419.186349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.200294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.212980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.225742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 419.239800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.253627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.266310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.151188][ C0] net_ratelimit: 4212 callbacks suppressed [ 424.151211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 424.170961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.184377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.196956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.209556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 424.223272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.236871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.249537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.262125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 424.275858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.161188][ C0] net_ratelimit: 4082 callbacks suppressed [ 429.161221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 429.180979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.194600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.207216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.219813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 429.233588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.247312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.259929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.272562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 429.286363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.172158][ C0] net_ratelimit: 4139 callbacks suppressed [ 434.172181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.191963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.204911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.217585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 434.231513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.245292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.257947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.270631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 434.284622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.298917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.671835][ T31] INFO: task syz.4.1796:12414 blocked for more than 144 seconds. [ 434.679724][ T31] Not tainted syzkaller #0 [ 439.180978][ C0] net_ratelimit: 4271 callbacks suppressed [ 439.181003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.199485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.212077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 439.225897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.239425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.252022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.264614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 439.278643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.292318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.304921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.191169][ C0] net_ratelimit: 4549 callbacks suppressed [ 444.191192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.210635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.223389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.236141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 444.249975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.263394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.276031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.288670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:24:5b:8b:c7:62, vlan:0) [ 444.302499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.316028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)