last executing test programs: 4m47.693931016s ago: executing program 3 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x40}]}}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630000dd000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) 4m47.501539194s ago: executing program 3 (id=381): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2d, 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1000}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x24}}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x54, r11, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0x54}}, 0x0) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r15 = socket(0x840000000002, 0x3, 0x100) connect$inet(r15, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r15, &(0x7f0000005240), 0x4000095, 0x0) connect$llc(r15, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, r14, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r16, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4e38, 0xa}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e7deb95d793c44d7c7fb1b466195939b"}, @NL80211_ATTR_SSID={0x11, 0x34, @random="45e09ed0c2c6968714ed98386c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "3cbb3d9c20431441ea2f0f9834888f97"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x80) 4m46.487504442s ago: executing program 3 (id=392): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000380)='G', 0x0}, 0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffff801}, &(0x7f0000000100)=0x8) 4m46.208030245s ago: executing program 3 (id=398): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 4m46.131372912s ago: executing program 3 (id=400): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r5, 0x400}, 0x8) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000000100)={0x1, 0xffff, 0xd2, @broadcast, 'macvtap0\x00'}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x9}}, 0x14}}, 0x20006004) r8 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet6_buf(r8, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000001380)="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", 0x5ad, 0x8000, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) 4m45.342017949s ago: executing program 32 (id=407): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x18) r2 = socket$kcm(0x2, 0x1, 0x106) socket(0x1d, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x1e, &(0x7f00000000c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x1, 0x8, 0x9, 0x1, 0x100, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x61, &(0x7f00000001c0)=""/97, 0x41100, 0x1, '\x00', r4, @lsm=0x2b, r5, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xe, 0x9, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 4m45.255769097s ago: executing program 33 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRESHEX=r1, @ANYBLOB="3bfb2c2c50ab192b34aae713a5b1f1c1302aeb398fde9838cabc7b9fc426400ec4e45e00738ae174ed35dc144f0c1ab80019541fc349305a9186f1a8f4b3729837fef0f4af5a99cba22b2cc7297a827e1cffcb0435d7eaf0215b84efeca1448def2bb58d8ae5b55315bc4a0a533f408ca5fdf3173520bff8814bd996b101e45d50baefded570efb7a1d863b9760ce6f31570f98d5b67886fe44b468907c2a9cd1595840fd5db0bde68cedbb282f29396f3d88303ca65278e0797ac2d6ceab16c99d5cda0", @ANYRES32=r1], 0x24}}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a0", 0x1b}, {&(0x7f0000000b80)="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", 0x2fe}, {&(0x7f0000000080)="db3c54ad5ce8977355935017f8c8b4c9f75b09d3d17e38f7647eff8107ee05e9a9b123771c6134cefc67631ef5a939e7613da202519f39a97721a9d28b6951cd7508b488d3c17f980677c27f331dde313875dcfea0b5470729feeb2b6a3e4940237123dd6d753af89504d2c9d43d179c5a9781ffedc7f9fa93d0731e8fe068092ac5ff1ef31a6c9e55165bc568378441f9aa6a9012a84def35c4446af0", 0x9d}], 0x3}}], 0x2, 0x0) tee(r3, r5, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) ioctl$int_out(r7, 0x0, &(0x7f00000002c0)) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) 4m44.749090305s ago: executing program 34 (id=412): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x8919, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r4, &(0x7f0000000240)="da5ef58d005c6d873c702d835660d2613690857a0cf7bc4b687017cdc1adb7034d1013808b3b260a9ad4053ad7917d4ac0649228e93c5639dff51e59a61a241f0dcd8b15cf244dd28be57c7f847d17d60cbfbdf5bb2ae3d702019357eced98eaac85fc6b850c7a534af4cd020670717411126a4dddc2efa4512c8a4baf69598ed6789871006dfaae2dbd580ebeac0b0a16365e43ba3effa80abf2125203c98ee270f83c37f751dc34a999f6588e64e64bff4151dc537bf85a148d2bd5d740782dcf0a7a7e78376dce1fd4f7746b5f5de11f1224130686d1d6eb89b57", 0xdc) 4m44.45818311s ago: executing program 3 (id=414): r0 = epoll_create1(0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async, rerun: 64) shutdown(r4, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x7d, &(0x7f0000000000), 0x8) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/176, 0xb0, 0x1, &(0x7f0000000140)=""/37, 0x25}, &(0x7f0000000240)=0x40) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000980)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0xf98, 0x11, 0xff, @local, @private1, {[@routing={0x87, 0xa, 0x1, 0x0, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xd}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x62, 0x2, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x9, 0x38, 0x10, [@mcast1]}, @dstopts={0x5c, 0x1c3, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x80, [0xe]}}, @generic={0x5, 0xdff, "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"}]}, @hopopts={0x3c}], "edac99e59c7b644049a480fdc35c6daf244fe284f5df0717f3ffe98acae00df1e96f3eedd0018278768074f81679bd72aa936258286a1517a3757fd533420dae17fee6db3adfcfff7b53f8ba888b63b08b5c0c6116515a2f87ff85e3fafe36bfcbfd499a2630e3ae2b91af23e8cfdbf50ab98b99d6c0e5e376e34ae8a7b10223c3ca60857af1bea34bb950e912fe655f2965a18b6ab993592a8c6a75411b550d6f1e1975d1f5a80fb5205579cd5d29a17d839e0542d38e96ced4beb9a03a80e133a3fa08fdf52febf93564594c92db5036049c66b78e3fde93d8491c377d237b"}}}}, 0xfce) (async, rerun: 64) r8 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000040)={0x1}) 4m44.457170918s ago: executing program 35 (id=414): r0 = epoll_create1(0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async, rerun: 64) shutdown(r4, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x7d, &(0x7f0000000000), 0x8) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/176, 0xb0, 0x1, &(0x7f0000000140)=""/37, 0x25}, &(0x7f0000000240)=0x40) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000980)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0xf98, 0x11, 0xff, @local, @private1, {[@routing={0x87, 0xa, 0x1, 0x0, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xd}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x62, 0x2, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x9, 0x38, 0x10, [@mcast1]}, @dstopts={0x5c, 0x1c3, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x80, [0xe]}}, @generic={0x5, 0xdff, "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"}]}, @hopopts={0x3c}], "edac99e59c7b644049a480fdc35c6daf244fe284f5df0717f3ffe98acae00df1e96f3eedd0018278768074f81679bd72aa936258286a1517a3757fd533420dae17fee6db3adfcfff7b53f8ba888b63b08b5c0c6116515a2f87ff85e3fafe36bfcbfd499a2630e3ae2b91af23e8cfdbf50ab98b99d6c0e5e376e34ae8a7b10223c3ca60857af1bea34bb950e912fe655f2965a18b6ab993592a8c6a75411b550d6f1e1975d1f5a80fb5205579cd5d29a17d839e0542d38e96ced4beb9a03a80e133a3fa08fdf52febf93564594c92db5036049c66b78e3fde93d8491c377d237b"}}}}, 0xfce) (async, rerun: 64) r8 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000040)={0x1}) 2m57.100153362s ago: executing program 8 (id=1799): sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x41000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newnexthop={0x5c, 0x68, 0xc24, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x3, 0x0, 0x5}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xf9ba}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xafe2db105b1d6549}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x1, 0x401, {{0x18, 0x4, 0x2, 0x6, 0x60, 0x68, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0x7, 0x50, [@private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xaa, [@loopback, @remote, @multicast2, @loopback, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast1, @remote, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delneigh={0x40, 0x1d, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, r3, 0x4, 0xd6, 0x8}, [@NDA_VNI={0x8, 0x7, 0x4d507ec5}, @NDA_PROTOCOL={0x5}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f00000006c0)={0x3, @null, r5}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000700)=@netrom={'nr', 0x0}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000780)={'xfrm0\x00', @broadcast}) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f00000007c0)) r7 = socket$inet(0x2, 0x4, 0x3) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000840)={0xff, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e21, 0x0, 'wrr\x00', 0x15, 0x1ff, 0x38}, 0x2c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc801}, 0x20000480) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r8, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r10 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r10, &(0x7f0000000e80)={&(0x7f0000000b00)={0x2c, 0x0, r3, 0x21}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b40)="e1b1a8d2179cec5d98936a287af56324493fb0fc9ac6e4ffbbc444e45afb16e4eedad726f48c0b25db3ef1fc258d7eed214337b71ced3ceeb8ddcf72fe30908d67480a8af0e4e077a7bb02588f6cd3183850149d71b7e58a45619f95a73fa1487f2c1142c69a6d42f25cb57f2356556e6f6acba9b68bbfa9698555e55d9abfc3", 0x80}, {&(0x7f0000000bc0)="b82bfd991d272867fdddf04347c270f03e318b02082f72077ba352a8cdfb6d2f42723a0cdbf8a4a5d85a589c90bc8677ee33625f144857babe20be47c805009f1117f9b977402aa23889d667ee9adf80ac268574bed76e789134e77da1d085b09b83", 0x62}, {&(0x7f0000000c40)="c162896231957cdb58850bd88795afe772259c9350ce00a32de583492728fabf17d0980a23d43a88f0b393a68ebc2056de879ac7f0a03360c73113cea11cce742e0569c195a1b8160135c43cb052d27f376620e9075f0c4e0ab78dc92e744888dd663a2c7d8753aa7159516aced3e5b30ec7f7981680344fa1b384f5c5204cb6e3a99f09f91148d12e82766197ec592f056ea0580c3d88746222430585d0bac3fccb0349dd7e4fece5b2a8d7982b36b62c94cdce153864e7d6480a7fb22d5e2de91c4d4e04f671cee9b98847f467d4aad0891fb012039681eee4f071800193", 0xdf}, {&(0x7f0000000d40)="b80d8b9e7d3d8f5221054e51939d687d1ccc3976db453ab65673bc5c150063b71f37917d55f8c0ab5e74bba8a2", 0x2d}, {&(0x7f0000000d80)="e652bef5de8f9f715835f4e875c0abcf039a5d3b3234592a51f5480cb0c0f7514a5bf1647b9fffc947e68c8079fa54856566eb936630ad819bc348de8697ebfb76b412e72cdde557", 0x48}], 0x5, 0x0, 0x0, 0x4000}, 0x843) socket$key(0xf, 0x3, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000f00)={@initdev, @rand_addr, 0x0}, &(0x7f0000000f40)=0xc) sendmsg$nl_route_sched(r11, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000000f80)=@newqdisc={0x1d8, 0x24, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xe, 0x9}, {0xfff2, 0xf}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @TCA_RATE={0x6, 0x5, {0x8e, 0x1}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0x107b, 0x1, 0x0, 0x1, 0x0, 0xa}}, {0x18, 0x2, [0x4, 0x7, 0x6, 0x8, 0x4, 0x2, 0xa4e1, 0x1, 0x8f2, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x8, 0x5, 0x26fce02e, 0x0, 0x10001, 0x9, 0x5}}, {0xe, 0x2, [0x3, 0x5, 0xfff, 0x400, 0x2]}}, {{0x1c, 0x1, {0x9, 0x1, 0xfffb, 0xd7, 0x2, 0x2, 0x5, 0x8}}, {0x14, 0x2, [0x8, 0x8001, 0x80, 0x81, 0x81, 0x0, 0x20, 0x0]}}, {{0x1c, 0x1, {0x1, 0x5, 0x1, 0x8000, 0x2, 0xf, 0xcc8, 0x7}}, {0x12, 0x2, [0x7, 0x10, 0xfffa, 0x7, 0x5, 0x0, 0x2]}}, {{0x1c, 0x1, {0x6, 0xf, 0x8, 0x6, 0x0, 0x7, 0x1, 0x2}}, {0x8, 0x2, [0xfff8, 0x7]}}, {{0x1c, 0x1, {0xff, 0x80, 0xf247, 0x8, 0x0, 0x5, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfd, 0x6, 0xfffa, 0x9, 0x2, 0x3, 0x7d, 0x2}}, {0x8, 0x2, [0xfffe, 0xf689]}}, {{0x1c, 0x1, {0x7, 0xa1, 0x1, 0x2, 0x1, 0x8, 0x7ff, 0x4}}, {0xc, 0x2, [0x7fff, 0x2, 0xfffb, 0x101]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4056}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x2}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8, 0x7, 0x3c, 0x400, 0x62, 0x9, 0xe3}, 0x9c) 2m56.782681147s ago: executing program 8 (id=1804): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3b, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m56.741230554s ago: executing program 8 (id=1806): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x7, 0x2, 0x3, 0x1, 0x4, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) r4 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x32}, {@in=@broadcast, 0x0, 0xff}, @in6=@loopback, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x60, 0x1, {{'rmd256\x00'}, 0xc0, "008e948fe8a078aed61eafdf6c3ac48365183721a85750f1"}}]}, 0x150}}, 0xc0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000280)={0xff1, 0x751, 0x9, 0xfffffff3, 0x80}) sendmsg(r7, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000200)={0x0, 'veth1_to_team\x00', {0x3}, 0x80a}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r5, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2m56.449710742s ago: executing program 8 (id=1813): socket$key(0xf, 0x3, 0x2) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@float={0xf, 0x0, 0x0, 0x10, 0x10}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x0, 0xc4}, 0x28) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) unshare(0x22020400) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000002c0)={r6, 0x7}, 0x8) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, &(0x7f00000004c0)=0x100) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x8c, &(0x7f0000000480)}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c010000140a010100000000000000000a00000613000800c8dee7064cef820530bf4a22fa4357000c00064000000000000000010c0006400000000000000002d8000800eada4c8e2767f0727f09a58d672107dc8b3f6d12429c0a657d39229eed2c152a1acc4366185b1189618d959d24d75ee34dc1a9a3a9a92d76ea4b9d3d0b43ed05ac59b86b9529137300547f5fbf893779c4a16ada47cd650ddee319ad850506f98830429162ba68d94e6d8bbe62b36859d5f5ad54d583c4b0e98cb906ef9eef788edb45dadddf06ab660ea92d45cc7df42c8c4d340f5aa996586b9a1ff9b9a931b88cbc626e682c0ee9c100201a6f1e00b7460479a6fb45962a40afcfa71235032cc48583b8260d8f69b3d3275266b39ee80e5b580900010073797a31000000000900010073797a31000000000900020073797a3000000000a80600000b0a0101000000000000000000010074756e6e656c000034000280080002400000000108000240000000010800024000000014080002400000000b08000140000000000800034000000002100001800a0001006c696d69740000000c0001800800010066776400100001800b00010064796e73657400000c000180080001006c6f6700140001800d00010073796e70726f787900000000b803018008000100636d7000ac030280a80303803000028008000340000000030900020073797a310000000008000180fffffffe080003400000000408000180fffffffd000101004eddf4d703b203bcbda7ac7583386e510873b1874cbc8d47cb78bb4733f7e65e264c373c02838b24587f142e3cc7949a2b62aada4302b85980eca3a6e973d4e377942e230bbd21aff9453a88f25b6d75991f9a605ea7b11cb34dcab1f1c3f8a932a26fcd1c077409e13bd0c71927655df603a078a0654c773767be062b72001831efb3fcc8ef475373b875f3b3dc8f8c60e015aea026a6d1e25d5a22f0556bb8aceaba227d546dd2057a9f424ad3db284ff60f9fa5e84471ddd617441d2c9597cc6f221bbbb7a52feee7f50e118a032bc0db867e2280703ffbc4824a8354b3be1f15832844a7ee6b2030f04e8c4831ae58c4087f9f5a69eb257420598f000100f43affd6c02b7452f0ea3960ed5f5e0845ce25713ec21e7110064b78e5c2278c376271d9769436696833d50e3dc03c0552e2a2112cb96a25fc085bc915c8aa850b4032af9cd7533995d45e762f3751e0c03d0ccdbe41c968633a3f395fe61c9465308a9e5780c3c683cdddb6487b6259b0fe36d0db9c5c47ef6eb02783bd5a3c92ca3859a283332a318bd50099000100972b51b6755cffe30974b99ffded251c1daddaffecd49df2ac3899cc4ebd2d47c6fe1cf797ecf3ec01b22e364d74f0935d14543b5d4a1c1a73fca5510a81ea500a1620a75974224fb0a35a94127bf330c384a39b5a19b09f13a1302aff36990673279e3c899e3191e9dd2670c0cd85ebe71f83d01efc8d060d81010fe6699ec972bd91d77b0b5749aeaafe096cd453c938a9c8482b0000006a000100ee5118d9e693b39fed6497804a57ac19d2d8b448a459cc2e7717a249dde0b0d369d358d7a6fee7b09de9c144eac67f2c727e1545b7c4f00f897ce976dde672ad8a6759ce1cb2ed18e622f97f0db7c5c3146ec89a95b382c2f4331b71762b3544c2ae200517d60000da000100d01afea96e16d9afbda1554c00b0ba9687d664e22f381d87857bc45ff6b23a9e4ee36f3042fff12dfa63cd7326d8d3bcbb0529188b2c50146934c361cb72c4092345e6fdbd83fa34e719fa5e741b11e915038d32e6f5f290a2d0e92a747db774d38f690de8d6e9f0bc83c8957141033e74dbbcb94ec0b7dc2490cf63f5adf514d223391798db568cba852963c1c66201655b39ad29ca485bd2ecb91a0744ef68d02cf9c4250d669c022a3ba10a0e9587ced79fddc82b9cbdc843b3361a9c8cc2a25a66c326505e4d11a6d5a8dc123cb12f24266c8bd100003800018007000100727400002c00028008000240000000000800024000000002080001400000000d080002400000000308000240000000071c0001800900010068617368000000000c000280080001400000001c54000180090001006c61737400000000440002800c00024000000000000000020c0002400000000000000400080001400000042308000140000082f30800014000000004080001400000093d08000140000000070c001180070001006374000008000c400000000391000d4021f48f7c725c23c35ba66d0f2ac9772aa8402670abfe109e95b088a4e7c78355162992cf245c75a990ef28bfce37ac23e7698660d92330d95f245093bda57e5ab82d969f8d8f4ea9898cda24e32c79c9449dd6b95efc98da3899187449673bc51ea836f82aa65e1e6544da2a2dfa23538b4a47cc2a5a02adf606ae5fdcd9f790783ff60444749a2b221ae934a6000000e0000980080001400000000b0800014000000009980002803c000180080001407fffffff0800014000000004080001400000000a08000140000000060800014000000c11080001400000054d08000140000000014c00018008000140000004610800014000000005080001400000008008000140000008000800014000000002080001400000000a0800014000000003080001400000000508000140000000ff0c000180080001403071b9ef080001400000000724000280140001800800014080000000080001400000d70c0c000180080001400835888f080001400000005108000a40000000000800074000000011080005400000003158000000180a010800000000000000000a00000a0900020073797a32000000000900010073797a30000000000900010073797a3100000000040003801c00038008000240000000240800014000000000080002400000000520000000120a01030000000000000000010000070900010073797a310000000034000000080a010200000000000000000500000408000a40000000030c00034000000000000000020c000640000000000000000208010000140a0108000000000000000003000008f20008009d701fbb1510027d34b8ced7afe0c7853c17ac68db5a73ff9a4824acd59702e4b070ecd5965d9ea57224b8acf9bea0169d5290237046f884e4d631136564cd141149aeb2456ed9f9d72ea438d41abaa1f44a66d30dac9ab404068e56228e306b3b971142cb24a1694c5ec56468e8902e28abf6a36f7a064016b57e97c5667570b17ddd754857531d05bbdba5cd68949b868386d6705e507e45ad23f20a683c51b2a80d116f0b680af4624f4deed486878b7188678d2baf06dc3d1f95a39052a88c6bf55fd1bacc7f4e5860968dec3458634711b35228befd74884c5630edb5df138f1ba23ec2e89c21aca7affc91000020000000060a01020000000000000000020000010c00034000000000000000016c000000180a01010000000000000000070000030900020073797a32000000000900020073797a31000000000c00054000000000000000051c00038018000380140001006970766c616e300000000000000000000900010073797a31000000000900010073797a310000000004050000080a010400000000000000000700000308000a4000000000140005800800014000000000080001400000000c24000480100001800a00010072616e6765000000100001800b00010064796e7365740000340404800c0001800800010066776400240001800b00010072656a65637400001400028005000200000000000500020002000000100001800b000100736f636b65740000100001800a00010071756f7461000000100001800900010068617368000000001800018008000100647570000c000280080002400000000134000180090001006c61737400000000240002800c000240000000000000000008000140000000070c0002400000000000000003100001800b0001006e756d67656e0000740301800a00010072616e676500000064030280a8000380a3000100ddd87a74c9194e0af23e3c2cc2a71743e07bb943488e9e22d0d52cda3d8dd3faad8c87223cf665af7211d3c820cd0e63bb87b8223dfbb6638509843d4435d85ba7315720ece9701b3b90ee491ba2f82e5a3a0ec25d2a3fb3227028b0f7febe258e0558ea7b3dc85f309c61e2cd39fe9acc7e3898cb6b94c4a770c1f21234b62c22aaabe641ccd920f00f6779f99a99e095240258b219d0a3866f5ff93e291300b80203805400028008000340000000020900020073797a3200000000080003400000000108000180fffffffc080001800000000008000180fffffffb08000180fffffff908000180000000000900020073867a3100000000600002800900020073797a300000000008000340000000030900020073797a31000000000900020073797a30000000000800018000000000080003400000000408000340000000020800034000000004080003400000000408000180fffffffd380002800900020073797a30000000000800034000000002080003400000000108000180ffffffff080003400000000308000340000000043800028008000180fffffffe080003400000000408000180fffffffe080003400000000308000340000000040900020073797a3000000000fe000100f916b5126922a8277a550fd42aedc1c5c963a8c0b5007f7d2cb2f148773668715503591cc851ba024f19600252d8a93bf260b5d40cccde539f59f5bd02559b4520a3558fa892b123382526a13d468f03a906e6bfa9cd8833f7156e6e7a90b90a63df64d4dd09b8e88f767baabf2d5fbe44f6aad11430fb4178fd7c1f3e6f5bd314a2feac68cda9b3d978f38ef5ddf80c29a3bdd5ede09beabeb434936845f294985ad83371fe9e77b5a08b205c360e25fac513e8898c242d28e5d04585d5e2839bb61b34ce87b108f7f3eb16f8b31391f1e1e55c571121f4bd5c906de77d8bc7b5a919b86f03872a6324e250d437ed5acb81e03b987056ef54fd000030000280080003400000000408000340000000020900020073797a3000000000080003400000000308000340000000025d000100eec69c0472e740d5e31d9cf4b9ca356a372f82604bd1f866fae58c33dfdd629b945a9f371f0c3fd6dce6424bd95e94aa862d5a215119c5845d92cc7a1bd45eeb70e257efcbcc65708fc5b036eab8822a19cb974c4ed57e4eeb00000008000940000000007300074050566378d32181bbacd5fd129d2bdbdb3a7f1738e360cb60bd05c8275349c5609c788b4b6e876ad28a1fad6f5445ea8eab5d88929a3599b79248d40b9317ed76c3d012ee3d195ae52d07f7f9f62203cc03fba237a43ff88ad80412ca3c800e7b264503d15f15a358cc7f5942997a5500140000001100010000000000000000000a00000a58ee60f4fb424549ff0ac30fafaf0b49fa019ba549eb0c8e5e1428b2e04c69c84f2ef5b2952597e42619eec0fcb8f21da40eab8225660af684617db9258c09512b19930b72"], 0xf50}, 0x1, 0x0, 0x0, 0xc01c095}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x1a0, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0501ffffffff0a0000002e0000000a0034000202020202de241c5f12dad002000008"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m56.107168354s ago: executing program 8 (id=1818): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "7a793814daab09d2b383f16502ff596f"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001040)={r2, 0xe, 0xffffffffffffffff, 0x1}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) (async) socket$packet(0x11, 0x3, 0x300) 2m55.977622247s ago: executing program 8 (id=1821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af4b524}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r4, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x881}, 0x8080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000) 2m40.931680354s ago: executing program 36 (id=1821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af4b524}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r4, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x881}, 0x8080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000) 1m26.958644138s ago: executing program 7 (id=3190): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$rds(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0xf000}}], 0x48}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) 1m26.884664353s ago: executing program 7 (id=3194): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000fc0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x75, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0x12, "7434954373561d14bffcfae584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x6, 0x12, "73bc2300ad9d19a3000000000097ffff"}, {0x1, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}}}}}, 0x0) 1m26.719334873s ago: executing program 7 (id=3197): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r2, &(0x7f0000000040), 0x2) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r7}, 0x18) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x5}, 0x4) sendto$packet(r0, &(0x7f0000000100)="db3d16112daeb39925a83d13d026f238ac75ae4ee168fe2b7dfa5d54c084179eac4a93c9e8fa1bf6b40224104cbf0aa2d9b3dc7b3c467c90abc11e0c9bdb1ce2fc177b00f1199cb6cb8ee6a22943041aa2cab5bd", 0x54, 0x40004, &(0x7f0000000180)={0x11, 0x7, r1, 0x1, 0x7, 0x6, @random="592ed8598bf9"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="b4050000200080066110480000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498909714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002add8b8ed61d995c1258ea2c22e218f2122a75d10d77aa735e3aa4988bc267d698cc01e56f8ed8b7877f8d217269ab71a634fed1261c399b31bc3f89f6d76816b9e08bed85b33c7cf8527b20ec14f462dad0e1cb64d49d4fa180e0cb32d9f84ffdb28286a810c1d10fdb67ee5148f8c21ddc16c9417570fb3b8c949a940967d71f6441c5f6dbd7fba76ec0bc54575ffea4ac586994450612a3b1080365753cd59300858929c24d40c4f5e6cde531a3be5fb86a50a77187aa095fdd8b3f959b4e47b2053cfafc22ca"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m26.597777848s ago: executing program 7 (id=3200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x11d, 0xf, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001500)={0x1, 'bond0\x00', {}, 0x7}) socket$inet6(0xa, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r3, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000001600)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000040)}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000080)="dc464da36578c1eb87467bb28e7b846416f36513a1513989ec32f518b1201f2f4a5541c46803f02e816897952b6fa87679fce3721c016b77a05d3f74e0c3c0780dcd49ad0cbfcf05155ca7de69c7a277a28a39f5a1bb3e3f6538e3d25f4e", 0x5e}, {&(0x7f0000000100)="27d8312567335b8428326487363d4decddde6fc16002473c9e664dcaa7cac3b9ec2abe836d1bd00e5fbe3f677195fa3ef3a5faaa5db00d3a717c90c4c906741cf04a78ad14b3ab299543bfceffed6e40bfcd404fc98bff678531f26718549c887e91950578d461a5167a3bb3975dbe3998a61eb2", 0x74}, {&(0x7f0000000180)="1b163034f50472bdffcdb9432c444fc8a664850cb2bc5bd608b0bd8396009e32d6bccd5eaab9f17c7872ac52a327e7a3c6eb588a0ede0a9ec368b26a22a23170f9edcb17e426042b0e05763c913d110aab319c24237059b46beacbb2f36f7b42c0370bf450ecd1a9b0fc709754ae6ebc0ff5880912036712d9c152f6c35bebf3237667934f84b90c814430e6fec16b", 0x8f}, {&(0x7f0000000240)="d774a1370a8ca63d5c3f17696845152e79597d4ebc57708f46bd1727accc45a05b615b6386fbba58f5f09c096f789026d0ac1d1316b6818e8170c756667325dc6661ce2b088d0df48d397d1c1ec9b61c45ca26a8eaa8600532e6489bf4eca3db504b542d88d2f034ffb93df69c3e0b2afea5af22642067664baf1f6e9b0d21bab07a71f5175dee00c47df013ab67e3e9828ce29ad05ebe4ce3ae1d5e12fe48471a8fad9f186991785e1edaba5651601e1d", 0xb1}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="1fc70200cfb573fee372ae20581551e3a971df03009337668a8025c0c29714320cc9061ce5ec7f4c7f08c77b431c870175aca0764487ced7060f0ef9bf86e53d111cbc80e6bd93e1c3925b6f1aea61595ae064d9ba6623cca3b17a3ed765f9bdfc0919d0bd2cb1fd8395a046fbadfb68009237b3e387782143e10f563b407634e6192c10c7ccfe5e5ecafb", 0x8b}, {&(0x7f00000013c0)="1c26d480f0c4294606ff888ab49249410ba95c97f21419a3018c1948a80b961c67a92e34c429a16bfe79e331a6c89def49077f7d21cd22ab330996b2e2187c1ab1913bac6765d672d3c063c67eb287fc961c3a8a93929ab7cfeea673165e31068453040f33902d6663527c5ce5dc62012d5090bee348c7b69e7963985fbb4f00f2bb2cb209cce59cb70599b54fb3", 0x8e}], 0x7, &(0x7f0000001680)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x8, 0x0, [@private1]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x3c, 0x0, 0x2, 0x7}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1000}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x67, 0x5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @generic={0x2, 0x20, "158d5d325af389293d0105db662c0d18186f27286f10a08de5134ebaa246e478"}]}}}], 0xc0}}], 0x2, 0x40840) 1m26.437331698s ago: executing program 7 (id=3205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) nanosleep(&(0x7f0000000200), 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m26.295161411s ago: executing program 7 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) 1m17.775839602s ago: executing program 1 (id=3290): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000080), 0x4) listen(r0, 0xfff) r5 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, r6, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x9d9}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}]}, 0x104}}, 0xc831e48a9832367c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) 1m16.801707391s ago: executing program 1 (id=3299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00fe00bec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b86861cc14cde7b585", 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) 1m16.774038187s ago: executing program 1 (id=3300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e0000040002800800050020ac4618f8260d5b", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xe1, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x401, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x40, 0x6, 0x30, @mcast1, @loopback, 0x8000, 0x10, 0x0, 0x10000}}) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@mpls_delroute={0xc8, 0x19, 0x800, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0x2, 0xfc, 0x3, 0xff, 0x1, 0x3000}, [@RTA_NEWDST={0x84, 0x13, [{0x184, 0x0, 0x1}, {0x10}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9}, {0x1b8, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8}, {0x2, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0xb}, {0x6}, {0x1, 0x0, 0x1}, {0x56a}, {0x4}, {0x6, 0x0, 0x1}, {0x3}, {0xfa, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0x4}, {0x9, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x7}, {0xffffc}, {}, {0x4}, {0x6}, {0x200, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r6}, @RTA_DST={0x8, 0x1, {0x1}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb5}, @RTA_DST={0x8, 0x1, {0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 1m16.58231481s ago: executing program 1 (id=3302): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x7}}) 1m16.471631836s ago: executing program 1 (id=3305): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x37, &(0x7f0000000040)={@empty, @local, @void, {@arp={0x806, @generic={0x30a, 0x6004, 0x6, 0xb, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "2501b7ada0d4982e6bbc82", @multicast, "2da9145c18c6b7dca69e"}}}}, &(0x7f0000000080)={0x1, 0x4, [0x584, 0x378, 0xaac, 0x89b]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{0xfffffffffffffffc}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f00000001c0)=""/55, 0x37}], 0x6, &(0x7f0000000580)=""/4096, 0x1000}, 0x40) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x18, 0x0, 0x2) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20004086) bind$netlink(r4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$AUDIT_USER(r4, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xf0, 0x3ed, 0x2, 0x70bd28, 0x25dfdbfc, "2d609cb221074522ce69e448f547d50d5c9ca9b39c329b344b6c54402ddbe8dc1bf7e29509b2a8da6b847ef65ae42ba010584e630eadd95fa1a041b69cc3fa38f9a5b41cebbdc07bd747232eb17416424ce72a0d18df22d53e5f09355544f692a86e0b82cb2657b893a68d13c493074741693264aa0bb1a1654bacba6487a88e0e0e9de4efffa73874b55e0759766b08d6804251fdf725c67f2ce31d90197330a41603c73dfa13e4c865ca93558becc2688905348e8bb3436ba953fc36d29cbc0e49778c78e5e50912414e3b54a972133386e728d54c310281f3b0e342a0", ["", "", "", "", "", "", ""]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040014) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f8018"], 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001740), r8) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) 1m16.306052241s ago: executing program 1 (id=3309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r1, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) 1m11.323004452s ago: executing program 37 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) 1m1.266832267s ago: executing program 38 (id=3309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r1, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) 52.963414219s ago: executing program 4 (id=3651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40c4894}, 0xc050) 52.819337251s ago: executing program 4 (id=3655): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000003c0)=0x8002, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x40000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) close(0x3) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000005c0)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, r9}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@mpls_mc={0x8848, {[], @llc={@llc={0x1, 0x4, 'J', "57fec41f9b7337ec442a67b0305435e7286ae6562eea3c536df9ec6d2f406990c225c312141591c06ffc7b0744f6b025fdcf8d33325bf4b3227b40b1a5fa091b638d4f24aaf844e1df27bdf353a6722d2d3c46c6ba39b84340c4e2d4771b2a179fc6a80302de99037f8b2f57371bb5ede5979da51d5c7a101296e0537d0da1e9eae885bbc3bfa578ceb3374a409cfff7279eeea6f31fa3e8bc05d22f99aa27f2349b8b74b639cc3978117c84bd45ebcc632b19def3d676d215e3531e39f9d2bfd4663f1b7dbb4e89f78c9f6c0a41c08d4f793cf02aa7a3cd08204a907f52e6a7d31b1f047c40ffb4c773633eec5bbb79e71391ec87dc690d0b99931202907053e404beecd0e709a27ff57bd27a5b9a4f65ced91f71fd3fb056a33543b1078fab47fadc04245b43f17cd61771755caeff1ce877dec65b5f449d456f1f15103035537ca8675908c65a433109904c5c06d6e6de554fabd436ada0c344cf648405e76ce4caa81090ad7b11a249e3c1761aad77f36895311d03315bb22b766ea492287d14ab68d349ebc163c3b984a36ffa228336a99b56c70fdf5bfef50f54a1376dab277521bdecdd1251ddeb50beb08f5eb4d6aef905593cbb5b64ff59e256c0641820597062f8e0983caa2aa0fd75c1460c15155bb64377836cdaa4fca58d296c6dcee0a2191855e1567100f9e774135907860258682c02d83ec7f953783f647d6f03a291a89bdbb770ff78ee76844eb56d8ac6c2216f50fdd53abbbd8d2d5647204e696c48707c1ab5087b110efd81ff5e142dffddd1790cd9ecfdc548caf88cd325013f0c54fd4ed2f2077b268cf318b19b8c8c66a830145ba812544aa17e5dd4abfdf0c3e2c07ad8077374239a6b2e52523af8934de41b74fe0f78232a06dcd33a067cabc2dd722dd6b9706d1fca8ff80b47dec3c7fc0d3ca4745e7fad8a5db0d25b53949aa9ee0718f248b6c7ce65aaf2ed305a76301ed734b2626be9c72f255cdab0d89e5cbb468abb37749744a5fbb5c676ccdc08f32e1dfea7ae9f5eab2e91d1d81b5cbc4637a325e599a485500a5c74d4c1bd0112e728a19aa40e6747f592fab99235657aeabb4cb798640cc8a889e295681f6ef09bc41db2e74944231bada5447e70f9478a75a6c5fe4dbaa5c05d3e9313eb3d853bff98fa64f4a4541b7d19a93fdd8640803d2aea210343e0a06412891b756108e865050a0b97e0d71d70875c746f4aaf0ad67b8dafe4f1e42baecb6fee0293161e0e4a247cb345b2282e575e54d63f61f18b6f85d5d12923c44b19ccd70b067bb79cf5ce809d541d0ca072a1e68a22403f4634c1bb8683713b05210627cb4849b24be756cdbcaf3b49749bfec108f141c0201773d986963f228df20bcddbcfb86d72012adb07c0c2b9a71e99bfb89d6bb7e8a1a117a9c1e2e2d82c27a02b3c17442cb37987d1123078807d32c09fcf53efd3795f4a336d1b1ea38cff12cef1c0dfe9142f0d58c924e801f9448d49b8aa9bc5651b27a98f503830085c88f6f365222f724c5328b92774a1ff58ab68cd94f63bf8806f784eabda1ed681d541b5c5087990a3298581b2e343f6bb24f62dd10760537b8e5a4c4d61e433a9cbc46d20eac59408bb052c1133941b14df6b1c481e991f5922fdb3a3c6552d3430cde3184dee51b750cd5efd48c68a2620d459d96dbf181b5b74b606b8982cd849169f7ee8529a7e6239e3581d39f6e5e9e746205125c00bf039eb018e846d2e4ca523663fd0983b9de0626a7928099dcdab4dfd8e27e26e49a597b8cd0185e161bcc6da0f2c47214ea20671b43d2bc1c2491a433037746a405636bd2366b1d8a9f1bda687a136e54812629278f954649d6f8a384b9a2189c752fec5daaf77c521963ce6c8996d14ba8654bee1090924b8443c2a0947140bf0d879c484e976c116ac7bb5bd98d59d8ed6bf433ed5d768b73bbc9f8054302907354e293bc5d95eda92e7c89625133bc4d27d67fa0729b119c50cf796908b935575abed6e72282e001df05847b794844dc751ce21dfff6d11b60e635678d973bb93aeff625b4fa59b82dd413e72c924b23c4bd37640f4a04894c6a95564df4a63541d0f07e9a8e4e77cfe642e9c4a3cbf36ec132fe5e2c2058b0615f2ae566e0dc70327b593f5e0a9d426059a84f6630b9ec3a35840a26b6c83fc052144ed02a8d2134277d644538c0a93cc8f188e4126f0918032be6472e09a327ec79f150f6bdf51851f6a04213f6d27f7aa4cc4fd908714b86cf848377ebf01f3cf6a3a85bd7b6836960e31a94ff45c8156bcc19bdd0309f145011b3760e5006b8836f720d0fcf2dee7cbd4e937a8fb9b8995843e82d05a372b350a67a7923d828efc403ae45322b5980363b1a70d2a2e2708dcdebb0f9d1f8f6ecad497ceb1e793403703fd9b732cecf761d5afc77b16dde61b02f83c4691425916749cc954e4a292ee587eff89adb7a9eac065b5b5b06fe96c9a50906650a422fd884f04c41dfd4ef56c3a72d9b3695d1a128fe9a454044466a63c6cc54ced3fb916b502ad93c5b29f51d7c1a47c3c8519ec820b01e557bbc3503b8b2b317c6dbc2d3ad22be4f24f247f7b11f11f04a0edb1180401724e5fdab3f0cd49cbae2808d2cc8d6bb51f8cba0ea3283fe1baf1daa9f344991120168b8927c4ed1d74c1cff3f369388cb8cb2602f214c12c57f6d9c4281d8c870dbe1b4033338e6ad73c2f7259c1e04736aa1e4b90819534e6a2fb2bfde479061bfb10fac0391204bfa1271cf6e43733763b14cdb734d42109052fe18112836f7f69ddc6dabddfb101c36019106c66fc6b0d102338466682571bb8f1078491ea09b5cdb22bfb6684b5e15b038571ad4b41fa7cc210fb7dd5c3cc51fea6405c0cd491d342348b40fa9369ca2cc99e4dfacdddb7213aea6b28a83de554999244ec068fd6528d23951bbd3025618148b55749370626a4599b321a2552a3aa393659803c8ce3b567252105e662f33d1f1af321a5cee87af4f5ff5ea309b1a7f392053915efc6ac66cb98225d5d462df04aba550d18335c3b0664f4b9145cfe8735c7a5470d4df28394f4ebbc68ba5f5b9b542622ce862084b8add5dc5e6fe080b98a93fba8afd2a439022c2ed979eaffd848705680ce762970a812f14a761052668ef037d7f1d1c0251923243c90c7817d0ca5778aaec2cc9bc77cd6ad97c10c08ef91ef4b92f3937e91b761825f8345061fe64af0b2064eb1fe8719920311b09fd4541ed937d1ae1b0c438da0e8cc5828f04d0c95d0dea7b72df1f43e7af344b42ae1e9e0b05d807bae81beb2821ded77e77ef4e7555117d14dc4a7f18a1637f82440b6d256b60baa3f5517ada2a86e5634a775a9c7568e1a8f7e20f9f2dce1731e37874b0a544040e23f17babfb4558758b8d967c78750e3071d3b4adf522ed6a276195d53bf876c82d2b0e74f2e296b2717c9c6885fe3a39894d86d81bf61cdeab301d5be54694f66d6deae2bfc4b36d8174e094bd71286f4f306d8cdbe8410f85efce0a8926346e56ae1e53ee048df1f591639ca0593ed7d10fde965ae54098acac0b8bde150377303ac480659a2543f9ab03bdb1389c76433b38c8044fd4b221bf745b1ec1852719faf3588e748e4151068ec906ca6d02412736f22fa50c7a75a2bd36f8dbe58b9f0520e4fe759412037f10c18f7c403d2ca39afb907afd7819d4ca71251b89b862e20ab77fcc3833a1fbd78e35234e06d0ca61554e2057b2bc67bb8dd529689adf8494cc29029dc41fbefa885f4c068e920256c5352f9418de78e2cf5ea1d6ca038439dcb28088520d97c3f02ad5aba87a8245491896583ec64a3ac7bef8404a97ff7cbaaa0d954ef8f81e950b24969ae0ae08f551e8f5070ee0715b6b2a3aba851514d05bd083f660576303ce399c83a9e7f3de3c51610846667632b4e9a87d83979b849c04aa830ac9847d84299fe0d4f621b2886132de83a42600e804d8bf4920d2c777f1c46bb799cc5bbda5cc16462ea2646da4ed7d44de85abe5192c0f3494f0436a3785c6c1fe4d9953c2886d58f9eead05bef49d3108384ffab7555ba334c9933ff0ecfbecc8dffad6102b623a0c023bc279c98d758f9f54a916e4124fbad8ee2ac0af5c8385b4b97840ac37ba237c33f074553bd2adb9f0606706ee9a7d2a78a40c9e0c082cee47d0cbb6a31472aceb303212cc6d6acd2f60d579a109e55c6fc00df9a2b620e6a020a091483c979e9a88c13f88c76db8c3e90f32ca8c5c59f44aaa5e7084a55ce9c0795abc8e49b31a03394aab57f62caefc4501c9aeb85cf6c0d313d274d2cefc30ff1331cb1a7fa77aa8e345c3181569c429200d4ebfe8d1874bdec4536448e382006417ffa6adbeafb9015a4b75a44581f21412b464728068fba6d31ea86b260513e0fd0f033b4b28aac02262dd7a2bbe6739c8a81d7a44372b02ee4834b5e978873d9896dc0cddd314a30eab5113febc6b37456d2d6490b050bb2a840458961f0629354986acf893274b250f40bcbd855ddc3b4cdb086aa9949658baf36f496ca09423823578cae39184b7e0c29e13536a8429851f2a1ca77865b4c834e8f252bedc4a6b6b4aaa8027b0b60a61aebbd9993b70ccc153b79d26855f37b1f6180fef9dc4dcd3218f13dec33ce97764ab8ba7335e30b816759a8b9b48432bf64774a7ed7c4be3f1658d2911da2cafaa7de47139bb2137c519a51ff7dc4de1bd209e6ab400ab57b54aba7c42dda4c4bfa40dbccaf93d0486f99f33af71a1be79628f1e85be0aa842bee1c9f3ed3984eb200fad8164949a97d74fc32dcafbf75b0e455e480ebec9d002b56a0986927e459dee513676b979a374cfa7706aa877bcd19478718d6"}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}}, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r11, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x1, 0x0, 0x4, 0x0, 0x2, 0x10, 0x385}, 0x8) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 51.897701413s ago: executing program 4 (id=3676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x100, 0x8, 0x3}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x2}, &(0x7f0000000140)=0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x3, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) 51.806990515s ago: executing program 4 (id=3678): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x4}, @mpls}, 0xe) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, 0x0, 0xffdd) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="0a000600080211000001000028005080110001004abee339084eeef16f162471f400000005000200000000000800030005ac0f"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="0a000600080211000001000028005080110001004abee339084eeef16f162471f400000005000200000000000800030005ac0f"], 0x50}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r10, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) syz_init_net_socket$ax25(0x3, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x37, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x0, 0x8, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 51.148980534s ago: executing program 4 (id=3692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="17092dbd7000000000000100000005000700000000000800090000000000060002000100000008000a00feffffff08001800e02fe5f3a2001900e0000002"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) 51.017161925s ago: executing program 4 (id=3695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xc8, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}, {"c65f3968148b72b4fb5fc3d19578c3c3ed517e180227b099dfeace621f455180eaf617e905fbcda9b4881421c6da9e926630de58ab1b20dd8a3f06c8ac42ae1a28e20fbe43a344a011bf9f35dabad319418d66bd3649f0b3e8daa8087ba9faf5a1d86ca15f79f7658bddae3a28cddccae7119ecdf4631e2e8cbda3fe2df672e95739933566f61f1a50c29b1a573bff2d62285352274e1ce5b819ddd2da6111ce22745ff596b9d1a0812c7461e500000000000000"}}}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000001c0)="0d202c89f3fcbec464f88f3350b22134c7b2a63838578d61cf5a77bcefd4682e9aa0a1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)="f3138b9b6db511b9ae21807c4364c367ff850b1557ddb77e2fa847dfa0a27912685e340b1d95a2e1c3addecbf7a512de6097b533e3cf913ea96f5d06a31493065fadb6210eb6f6f4b006f2f75096712422ee025c27deefdc9ffcbdd83b51926f1b5de8bd3d1e9ab11afa319762ae7521c064efb2ffa39059b20550a0ebf6859987b77b6a6a85693ee11994af3a79ce73ce4b160f5104a6d5fa212c843569f462aead57c373cb0e383ce375f9fba4f50283a33e3860a5b3d4c0ddbc6351483ebc21a43cd296c4a4136ae6df95223595d23ed726132a4a9704771c0016458836b2e78972e9e296f484351efad3b0b703ddafb1780d6cb634d6e1", 0xf9}, {&(0x7f0000001e80)="ab", 0x1}], 0x2, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3f000000010040", 0x7) 36.020874363s ago: executing program 39 (id=3695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xc8, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}, {"c65f3968148b72b4fb5fc3d19578c3c3ed517e180227b099dfeace621f455180eaf617e905fbcda9b4881421c6da9e926630de58ab1b20dd8a3f06c8ac42ae1a28e20fbe43a344a011bf9f35dabad319418d66bd3649f0b3e8daa8087ba9faf5a1d86ca15f79f7658bddae3a28cddccae7119ecdf4631e2e8cbda3fe2df672e95739933566f61f1a50c29b1a573bff2d62285352274e1ce5b819ddd2da6111ce22745ff596b9d1a0812c7461e500000000000000"}}}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000001c0)="0d202c89f3fcbec464f88f3350b22134c7b2a63838578d61cf5a77bcefd4682e9aa0a1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)="f3138b9b6db511b9ae21807c4364c367ff850b1557ddb77e2fa847dfa0a27912685e340b1d95a2e1c3addecbf7a512de6097b533e3cf913ea96f5d06a31493065fadb6210eb6f6f4b006f2f75096712422ee025c27deefdc9ffcbdd83b51926f1b5de8bd3d1e9ab11afa319762ae7521c064efb2ffa39059b20550a0ebf6859987b77b6a6a85693ee11994af3a79ce73ce4b160f5104a6d5fa212c843569f462aead57c373cb0e383ce375f9fba4f50283a33e3860a5b3d4c0ddbc6351483ebc21a43cd296c4a4136ae6df95223595d23ed726132a4a9704771c0016458836b2e78972e9e296f484351efad3b0b703ddafb1780d6cb634d6e1", 0xf9}, {&(0x7f0000001e80)="ab", 0x1}], 0x2, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3f000000010040", 0x7) 3.939663484s ago: executing program 0 (id=4459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x21010000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x34, r2, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x34}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getrule={0x14, 0x22, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x25, &(0x7f00000000c0)=0x7a, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3.823127254s ago: executing program 0 (id=4462): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x40}, 0x8) 3.746441063s ago: executing program 2 (id=4465): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x74, 0x15, 0x200, 0x70bd29, 0x25dfdbfc, {0x2, 0x3f, 0x16, 0x3, r1}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb}, @IFA_FLAGS={0x8, 0x8, 0xa0}]}, 0x74}}, 0x80) 3.554174517s ago: executing program 0 (id=4467): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x0, r2, 0x16, r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 1.865502839s ago: executing program 0 (id=4473): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f", 0x7}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000002030104000000000000000007000000080001000300002c080004400000000c09000200ca957c250d00000b3102000000080003400000000608000340000000080800044000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000440)={0x0, @local, @empty}, &(0x7f0000000480)=0xc) sendmsg$nl_xfrm(r6, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=@newsa={0xfc, 0x10, 0x8, 0x70bd28, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x4e21, 0x1, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x89, r7, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x33}, @in=@multicast2, {0x800000004, 0x9, 0x3fe, 0x2, 0x7, 0x3, 0x2e2, 0x9}, {0x4, 0x800, 0x6, 0x5}, {0x9, 0xffff5ab7, 0x2}, 0x70bd26, 0x3505, 0x2, 0x2, 0x6, 0xa3}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4054}, 0x8000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000380)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r9, r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000006000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r10, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@RTA_MARK={0x8, 0x10, 0x9}, @RTA_DST={0x8, 0x1, @empty}, @RTA_MARK={0x8, 0x10, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 1.848367601s ago: executing program 2 (id=4475): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x2a0, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x264, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x254, 0x1, [@m_ct={0x100, 0xa, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "efe7377efb339bc59f350c7b025a3b71"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x1c, 0x0, 0x7, 0x1000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x101, 0x10000000, 0x2, 0x2}}, @TCA_CT_LABELS={0x14, 0x7, "075abac8315d88d707c2ed5fc953392e"}]}, {0x5d, 0x6, "a9b0373813e0f2da6e8f5cd5c2f0e993b814de8645c7545f5f50c5380480ed4ef5013ca2d00164d473990800275c36df8b272a85bb6c9c930de5c21cfca20d72ffe99adec2667fa15f5dc9985c817cb94e99bf8eae0ce64edf"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x150, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x4, 0x3, 0xfeb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x7, 0xffffffffffffffff, 0x2, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x6, 0x0, 0x306, 0x3b7}, 0x4}}]}, {0xc1, 0x6, "900f1da07abb5258320e6dd1fec5e28b5d5a88ab2120742fb21d988967b8cd828f15e6ff2f655dc7ca61080dfc460d26e4ba60b96339891c0fdb6bb726e2e79ff0926a9ccfb7b4d6673c8622d6bd5c3fd0e5f3484a846794a41b72a75c7e876169b86ffa7050a35c32a688d698723592965eb52b9bbeedefb1304197086f27dab2af6cac8a1505363a917052f306884f1cd0e63dc84bab34f0136978ada496eec43313e5e7ac7edf11124937f69d1e6c3f903f72962c4ef4b40a42ea10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) recvfrom(r1, &(0x7f0000000080)=""/165, 0xa5, 0x40012001, &(0x7f0000000300)=@llc={0x1a, 0x20, 0x8, 0x0, 0x0, 0xaf, @random="208113eb10e4"}, 0x80) 1.723751881s ago: executing program 2 (id=4479): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) connect$rose(r1, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x7ffffffe, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044051}, 0x20004044) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006010000000000000950000000000000073f23bd910b16d3ce6a588f8866c78340df524b8085b506bf29238692255a61001f5ccb9ec868aad821895ac553cf9cdc750fa46d5b40f3c27"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) 1.102757662s ago: executing program 5 (id=4485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012004bc0010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000240)) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0xf, @mcast2, 0x7fffffff, 0x4}, 0x1b, 0x0}}], 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0xe8, r10, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc69}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa472c18}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8ef9}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2004c800}, 0x4000880) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @remote}, 0x44, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000380)='ip6_vti0\x00', 0xc17, 0x9, 0x8000}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000080000000003e0000000e0001006e657064657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6da24400b2756c746963617374000500820000000000"], 0x58}}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r11) sendmsg$TIPC_NL_LINK_RESET_STATS(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xd0, r13, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x871}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x879}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5af}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x28060044}, 0x48801) 1.023770807s ago: executing program 0 (id=4486): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f00000001c0)={r2, 0x40, 0x8}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 988.637093ms ago: executing program 5 (id=4487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 869.724699ms ago: executing program 5 (id=4488): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x3ec0) close(r3) 766.675504ms ago: executing program 2 (id=4491): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000081000000000000000200000018500000030000000000000000000000950000001655ee6fe7854dcf00000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0xc}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) 661.758859ms ago: executing program 6 (id=4492): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x200000c1) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x13c}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000007c0)={0x0, 0x3}, &(0x7f0000000800)=0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xa0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bind$inet6(r5, &(0x7f0000000600)={0xa, 0x4e20, 0x7, @empty, 0x6}, 0x1c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005"], 0x60}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) 659.204429ms ago: executing program 9 (id=4493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000040)=0x10000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000130a0104000000000000000005f900020900010073797a30000000000900020073797a310000ed0008000340000000058289ad2b2e78ef64ff8229ce007efc44d1466b0f71b6aa3695d97654bd058d3e811a9db78b341b96d5157cfb4cc2cf357c2f2550b4c34e06863c73a353d808df357a34b96523c6cdb7a88ca4d9e90822f6062a"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8000}, 0x8) shutdown(r4, 0x1) sendmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e40)='P', 0x1}], 0x1, &(0x7f0000000400)=ANY=[], 0x10}}], 0x1, 0x5d2dd0c54751f8e3) 648.42335ms ago: executing program 5 (id=4494): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) close(0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x1c, &(0x7f0000000240)="0985c0b02b3c6e081ca3339d576868550f103c57c4fad329a4b5978ffc08addbf97b", 0x22) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x20, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd=r6}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x20}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r10, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r10, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c5}, 0x40) 636.904501ms ago: executing program 9 (id=4495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r8, &(0x7f0000000180)={0x27}, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@gettaction={0x14c, 0x32, 0x400, 0x70bd25, 0x401, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100007}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x21}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9c9b}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0x3, 0x6, @local}, 0x14) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) 612.322753ms ago: executing program 2 (id=4496): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1e2, 0x7, 0x200}) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0xd, 0x6, 0x6, 0x0, 0x0, [{{r1}, 0x9}, {{r2}, 0x8e39}, {{r3}, 0x7}, {{}, 0xf}, {{r4}, 0x4}, {{r5}, 0x1}]}) syz_emit_ethernet(0x84, &(0x7f0000000240)={@empty, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@x25={0x805, {0x0, 0xd, 0xc5, "d6706f6135a9ce1ef98da455bf324d5495892f26c165a43eb778875a7823231c1e20220630bb88f1227ceb57b2acbc626862070a7ed81d8f0f104009e81e7bfff20b431c8e310f95bd47718476b6e4ba5410cb8ed83ba4dc9fb952b6e2248ac51e84c3b52d7bb85f1b76692ea3ca81"}}}}, &(0x7f0000000300)={0x1, 0x3, [0x5c5, 0x99d, 0x190, 0x1d3]}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x3, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @float={0xd, 0x0, 0x0, 0x10, 0x2}, @ptr={0xb, 0x0, 0x0, 0x2, 0x3}, @enum64={0x8, 0x6, 0x0, 0x13, 0x0, 0x1, [{0xd, 0x1, 0x5}, {0xc, 0x1, 0x5}, {0xb, 0x2a7c7084, 0x4}, {0xb, 0x101, 0x9}, {0x4, 0x3ff, 0xffff}, {0x6, 0xfffffff8}]}, @float={0x1, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0xd, 0x3}, {0x2, 0xea}, {0x6, 0x3}, {0x0, 0x5}, {0x9, 0x4}]}]}, {0x0, [0x5f]}}, &(0x7f0000000440)=""/236, 0xdb, 0xec, 0x0, 0x997}, 0x28) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000680)={&(0x7f0000000580)=""/214, 0x4000, 0x1000, 0x401}, 0x20) connect$pppoe(r1, &(0x7f00000006c0)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'bond_slave_1\x00'}}, 0x1e) r6 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000700), &(0x7f0000000740)=0x8) r7 = openat$cgroup_ro(r1, &(0x7f0000000780)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x7, 0x72d4, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x80, 0x8, 0x47}}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000880)={@dev={0xfe, 0x80, '\x00', 0x3c}, @loopback, @private2, 0x7, 0x4, 0x5, 0x600, 0x7, 0x0, r8}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000900)={0x80002019}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000940)) sendmsg(r5, &(0x7f0000000c40)={&(0x7f0000000980)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)="281d44fb861dc2319647d41f78dbbeed6d599ae3e02fcb1a4c69bb7b03d7412997d9fdc1a4ddc60d043ded01289aa61b185889eca456b48f8890dd03a1b10fe23e5f8d983c8d01eecd13d81da570be20c609ad81400d620bb24acce8f9f3b0625202e2366902b239a466c28868ba466a63f4f8d5d5972c92", 0x78}, {&(0x7f0000000a80)="fef395800e797cd3740cdefa73e1860f27cf1d58a8b8218172584ca9a52110289b2ecca79d31c3b9ce210c683e059a209bb2af2f7ed77bd29c4f4825556499195cd004b1e9f859321922d05558e919c00596f67b6894a7f06a5e9ad156232fb6e9d8ae0af3a7d18bcd08e99e05fd194c7d2f2d04eddb0cfff37f8f5dcb2c165dfb234ce5ed667a", 0x87}, {&(0x7f0000000b40)="8b2f4ab73cc05734a460e088153e941b98ad212f39ea840b7395180cd46aa58cfbd4758a4efe57c8e9b43e948df009b77e1b38e3397a0287fde336db2fda116b11474b52c4a60d67a640953be4b75b436a83099d3a44a3bc6084e0ba8c9f3779ee891b6ce39d2a253ae6cddb8e8217092088ea6a23e037bf8ef3ddf731e5bbb17e675ca2ea391d87095dac48fb86bba23ac25bf84d25a140e91a6f4e4543f76bdeeb", 0xa2}], 0x3}, 0x4050) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r7) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r9, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r10 = accept$nfc_llcp(r1, &(0x7f0000000e40), &(0x7f0000000ec0)=0x60) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000000f00)=0x7) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = gettid() sendmsg$nl_route(r11, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)=@dellinkprop={0x100, 0x6d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x5040}, [@IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_NET_NS_PID={0x8, 0x13, r12}, @IFLA_AF_SPEC={0x50, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x44, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}, @AF_BRIDGE={0x4}]}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x81}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x26}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xf7}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_LINKMODE={0x5}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x11}, 0x1) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, 0x0, 0x620, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x41) 518.40896ms ago: executing program 6 (id=4497): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) 507.146996ms ago: executing program 5 (id=4498): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0x8}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 449.931443ms ago: executing program 2 (id=4499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) accept4$alg(r0, 0x0, 0x0, 0x800) (async) accept(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040004cba9366e00ff20000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f00000003c0)) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x3}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0xd, 0xb}, {0x4, 0x3}, {0x4}]}, @enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0xa, [{0xd, 0x400, 0xffff}, {0x5, 0x225be157}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @const={0x4, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x1e, 0x30, 0x2e, 0x0]}}, &(0x7f00000008c0)=""/4096, 0x8a, 0x1000, 0x0, 0x8}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @func, @exit, @alu={0x7, 0x0, 0xa, 0x0, 0x9, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='syzkaller\x00', 0x80, 0x7c, &(0x7f00000005c0)=""/124, 0x41000, 0x0, '\x00', 0x0, 0x17, r6, 0x8, &(0x7f0000000640)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x3, 0xffffeffc, 0x7f}, 0x10, 0x1002dd9f, r5, 0x6, 0x0, &(0x7f00000006c0)=[{0x3, 0x3, 0x6, 0x3}, {0x2, 0x4, 0x400a, 0x8}, {0x5, 0x5, 0xf, 0xa}, {0x4, 0x1, 0x4, 0x2}, {0x0, 0x1, 0x10, 0x5}, {0x5, 0x1, 0xc, 0x3}], 0x10, 0x4}, 0x94) 334.105936ms ago: executing program 6 (id=4500): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r3, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12061, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) socket$rxrpc(0x21, 0x2, 0x2) 332.722697ms ago: executing program 9 (id=4501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5, 0x4}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5, 0x4}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 309.211689ms ago: executing program 5 (id=4502): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/212, 0xd4}, {&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/234, 0xea}], 0x3) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0xf, 0x6, 0x900, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c040) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000500)={{0x5, 0x8001}, 0x100, './file0\x00'}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r0}, 0x8) r4 = getgid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a40)={r0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@loopback}}, &(0x7f0000000c00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$netlink(r0, &(0x7f0000000e00)={&(0x7f0000000640)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)=[{&(0x7f0000000680)={0x4c, 0x1a, 0x20, 0x70bd29, 0x25dfdbff, "", [@nested={0x3b, 0x7b, 0x0, 0x1, [@generic="432c6e49c384bb23b998c2230854815d3ffdc26fad8ac12631922f7a1ff405076982f7260bf46cb39f628c2d8e04c24717a0ffe16ebbd0"]}]}, 0x4c}, {&(0x7f0000000700)={0x58, 0x39, 0xa04, 0x70bd2b, 0x25dfdbfe, "", [@generic="b179ad10fd989c417d34f2e0e4ffcf26eaae330053c19cbd93334d797e3b774757f534bde4628897de9773aa9a3c02b688f7d2abc6b451aa48a57a6f1567b5921d4e75615404804a"]}, 0x58}, {&(0x7f00000008c0)={0xd0, 0x13, 0x200, 0x70bd25, 0x25dfdbfe, "", [@generic="ffc0896cd0824154ac8a45ef590563f5fa0ec8a2e52437c5b1a3a27bd5a0973474ee0b2a037d", @nested={0x97, 0x12c, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xfc}, @generic="b2ae124226e3144a4ac5fda462f9165586a2584f32d40f7c71bcdd4853e1bcc47c1fbd2788413bd28509d0e2a92006e25f4b86f4c30bab3d246172f4a616bc9b7173012d3b4ee1ad9ce733a382a2f207b0f2b543343adb547b51576bf3e12a94f11d872db52ac5df8a75b49b91993750b48633d29d0f3cd23e983f2c09b16fb74a8a5d93309d68"]}]}, 0xd0}], 0x3, &(0x7f0000000cc0)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r0, r3]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x28, 0x1, 0x1, [r0, r5, r1, r6, r7, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r8, r9, r1, r10]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x120, 0x4000}, 0x80) r14 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000e40)=@ethtool_eeprom={0xb, 0x7, 0x9, 0xb8, "f3adcc2d8059ddf89f2c574b8d1aa47eed45df8a0d2cd20874e4954e1ef55c2cdf06ec5bfc9698a98203a84ac09bb95731f685cda5d71a14a5ef99f7cde2eae159b9f60694487b6efa76cd25ec2ed44a648c10e014d3e8d8e91109f01667b13f319e58321cc6649d2912aec4555a3faecd00bb422f748404f51177f970868da53d6f03c6864685f728643f945045a4334ed06020a09b1ae5cee96a2835e2c50763b4a6432c0cbcb13b76ee2f1687c0f2554fea7dad73dccb"}}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000f80)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r15, 0x84, 0x1e, &(0x7f0000001100)=0x8, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000001140)={'pimreg\x00', 0x400}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000011c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={&(0x7f0000001180), 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x7, 0xa}, {0x7, 0x4}, {0xffff}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8a14}, {0x8, 0xb, 0x92cc}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3565}, {0x8, 0xb, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004044) 268.424031ms ago: executing program 6 (id=4503): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f0000000100)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000040)={0x2, 0x4d4, 0x1000, &(0x7f0000001240)=""/4096}) r6 = socket(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r8 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r6) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r9 = socket(0xa, 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000500)={r12, 0xdd5, 0x10}, 0xc) ioctl$sock_ifreq(r1, 0x8932, &(0x7f00000002c0)={'vlan0\x00', @ifru_flags=0x400}) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x1a, 0x0, 0x0, 0x0, "358bc64c62d6ca97ad8821f65ab4e0ebc44601540cb03f25b106c3d765dbaf15fe0de21732ca620c9c4bd327ac9571a9cc2a97311ca7e62f74838481195224b0"}}}}, &(0x7f00000004c0)={0x0, 0x3, [0xd8f, 0x69c, 0x508, 0xbe5]}) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="240000000000000029004a0d32000000ff09000000ff03000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 185.673816ms ago: executing program 9 (id=4504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x8, 0x6}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc8, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) socket$phonet(0x23, 0x2, 0x1) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) (async) sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x8, 0x6}, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc8, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (async) 128.347566ms ago: executing program 6 (id=4505): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf00000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a"], 0x50}}, 0x400c010) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140"], 0x110}}, 0x40040) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) 95.224871ms ago: executing program 0 (id=4506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80800}, 0x4000010) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x14000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x5, 0x0, {{0x34, 0x4, 0x1, 0x7, 0xd0, 0x66, 0x0, 0xfa, 0x0, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x14, 0xb8, 0x1, 0x4, [{@private=0xa010102, 0x5}, {@private=0xa010101, 0x1}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xff, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x5}, {@local, 0x7}, {@rand_addr=0x64010100, 0xb}, {@broadcast, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}]}, @cipso={0x86, 0x24, 0x3, [{0x1, 0xc, "b04ddbf98bd60c5a6cfb"}, {0x0, 0x12, "87239a54e444abda9f3bfd685d6c568c"}]}, @noop, @generic={0x88, 0xc, "30954cee154eb5bf0eec"}, @ssrr={0x89, 0x1b, 0x76, [@multicast1, @empty, @rand_addr=0x64010101, @broadcast, @multicast2, @local]}, @noop, @generic={0x94, 0xb, "a471a1073b68987f1c"}, @rr={0x7, 0x17, 0x87, [@loopback, @private=0xa010102, @loopback, @empty, @rand_addr=0x64010100]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x40, 0x0, 0x10, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x20, 0x7, 0x5}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x269, 0xffffe3a4, {{0xb, 0x4, 0x3, 0xf, 0x2c, 0x67, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@lsrr={0x83, 0x17, 0xf5, [@rand_addr=0x64010100, @loopback, @remote, @private=0xa010100, @multicast1]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x8e, 0x5, 0x20, @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x700, 0x7, 0x100, 0x7fffffff}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x20, 0x700, 0x3, 0xb, {{0xd, 0x4, 0x1, 0x35, 0x34, 0x68, 0x0, 0x90, 0x4, 0x0, @broadcast, @multicast2, {[@generic={0x7, 0x10, "57876d44a4b9f8eb1b9cf2335efd"}, @ssrr={0x89, 0xf, 0xfa, [@multicast2, @broadcast, @multicast1]}]}}}}}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x4, 0xcc, 0x8, 0x9, 0x21, @dev={0xfe, 0x80, '\x00', 0x3c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0x4672, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'ip_vti0\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x6, 0x7, {{0x14, 0x4, 0x0, 0xa, 0x50, 0x64, 0x0, 0x40, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x18, 0x9c, 0x0, 0xd, [0xa, 0x8, 0xd8, 0x1, 0x5]}, @timestamp_addr={0x44, 0x24, 0x10, 0x1, 0x9, [{@private=0xa010102, 0x7}, {@multicast2, 0x113edfb0}, {@rand_addr=0x64010101, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1d8, r2, 0x600, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x40081) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x18}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x8000) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001000)={@remote, @multicast2, 0x0}, &(0x7f0000001040)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000010c0)={'syztnl0\x00', &(0x7f0000001080)={'syztnl2\x00', r14, 0x20, 0x7, 0x3, 0xffffff80, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xbc, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="83644d26a887f2d2661d49c9b2ee68c7f2314d3d7a4640d4ab23"}, @NL80211_ATTR_IE={0x5f, 0x2a, [@perr={0x84, 0x15, {0x6, 0x1, [{{0x0, 0x1}, @device_b, 0xc337, @value, 0x2f}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ibss={0x6, 0x2, 0x3}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x7, 0x0, {0x4, 0xb, 0x0, 0x24a, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfa, 0xb6, 0x1}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000010}, 0x1) r16 = accept4(r0, &(0x7f00000012c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001340)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001380)) (async) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r16) sendmsg$TIPC_NL_KEY_SET(r16, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x84, r17, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x385d32ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x4000800) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r18) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r16, 0x84, 0x4, &(0x7f00000015c0), &(0x7f0000001600)=0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') 29.933721ms ago: executing program 9 (id=4507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) close(0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1}, 0x3}], 0x1, 0x40000060, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'veth1_vlan\x00', 0x1000}) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 17.51183ms ago: executing program 6 (id=4508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r0, 0x40) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40448c0}, 0x40004) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r9}}, 0x18}}, 0x20044050) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x2d, 0x7, 0x0, @empty, @mcast2, 0x700, 0x40, 0x5, 0xfff}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newpolicy={0x21c, 0x13, 0x4, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in=@multicast2, 0x4e23, 0xe, 0x4e20, 0x51c, 0xa, 0x20, 0x1a0, 0x0, r9, r10}, {0x1, 0x7, 0x2, 0x7, 0x3e3, 0x2, 0x2, 0x46}, {0x5, 0xa, 0xe9, 0x100}, 0x1, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@sa={0xe4, 0x6, {{@in6=@remote, @in=@remote, 0x4e30, 0x22, 0x4e22, 0x0, 0xa, 0xc0, 0x20, 0x29, r11, r12}, {@in=@local, 0x4d2, 0xff}, @in=@loopback, {0x9, 0x8eea, 0x2, 0x8, 0x2, 0x6, 0x2, 0x8}, {0xdf89, 0x40, 0xffffffff, 0x1}, {0x1b78, 0x81, 0x6}, 0x70bd28, 0x3503, 0x2, 0x2, 0x6, 0x11}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010101, 0x307955e7853590d2, 0x7f, 0x6}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x12b}, @lifetime_val={0x24, 0x9, {0x0, 0x6, 0x7d, 0xffffffff}}]}, 0x21c}}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) listen(r0, 0x40) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40448c0}, 0x40004) (async) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r9}}, 0x18}}, 0x20044050) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@remote, @in=@multicast2}}, {{@in6=@dev}}}, &(0x7f0000000100)=0xe8) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x2d, 0x7, 0x0, @empty, @mcast2, 0x700, 0x40, 0x5, 0xfff}}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@multicast1}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newpolicy={0x21c, 0x13, 0x4, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in=@multicast2, 0x4e23, 0xe, 0x4e20, 0x51c, 0xa, 0x20, 0x1a0, 0x0, r9, r10}, {0x1, 0x7, 0x2, 0x7, 0x3e3, 0x2, 0x2, 0x46}, {0x5, 0xa, 0xe9, 0x100}, 0x1, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@sa={0xe4, 0x6, {{@in6=@remote, @in=@remote, 0x4e30, 0x22, 0x4e22, 0x0, 0xa, 0xc0, 0x20, 0x29, r11, r12}, {@in=@local, 0x4d2, 0xff}, @in=@loopback, {0x9, 0x8eea, 0x2, 0x8, 0x2, 0x6, 0x2, 0x8}, {0xdf89, 0x40, 0xffffffff, 0x1}, {0x1b78, 0x81, 0x6}, 0x70bd28, 0x3503, 0x2, 0x2, 0x6, 0x11}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010101, 0x307955e7853590d2, 0x7f, 0x6}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x12b}, @lifetime_val={0x24, 0x9, {0x0, 0x6, 0x7d, 0xffffffff}}]}, 0x21c}}, 0x4000) (async) 0s ago: executing program 9 (id=4509): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x4a0, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x408, 0x240, 0x240, 0x408, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x1b8, 0x218, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x6, [0x4e20, 0x4e24, 0x4e24, 0x4e23, 0x4e22, 0x4e21, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4e20, 0x4e22, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x2, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x1, 0xd, 0x7, 0xb, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x5d, &(0x7f0000000140)=""/93, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x1, 0x1], &(0x7f0000000300)=[{0x4, 0x5, 0x6, 0x1}, {0x4, 0x2, 0x8, 0x6}, {0x3, 0x3, 0x4, 0x3}, {0x2, 0x5, 0x6, 0x2}, {0x0, 0x4, 0xe, 0x5}, {0x1, 0x1, 0xb, 0x4}, {0x5, 0x1, 0xf, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r4, 0x0, 0x78, 0xc2, &(0x7f0000000380)="2f9eb39e872acd4f14fd85d1e8807d4933f71fecc937ad7108a83083df10e276953a78aadaf4b855823ebb63a51c8c1433b8419c00337bd318f3cdfc3754d80ac728ad63df774b3bcc5d8a8093bf764f87869cf755b22f234444d2d5f9a5c830b0043c09a9fc957584499d0d5ecc7ed7ba05ec5fdcfed063", &(0x7f0000000bc0)=""/194, 0x2, 0x0, 0xc5, 0x48, &(0x7f0000000cc0)="17819ad672af75041b65c8e6d72ba72e30693e9028cfc5033bc320f47c6eb11bc2addcff465d386169ca645e044320d1aa9688f7e1297a9bd150599ff6e4ca6959a97d7b4b3dcdae15c466cddd8a1a8fb3a4029b954eb9fda9eeeeb5ebc229c4275a7af48a2974c2a27395c4276a4ae21be2b1e6d390576509c4cfe8ff7910c868e3f80e6ac12b17cd0f68ba517fba1a16300ae3af26bc0948c5585b0836c6cec96fcf9442ad46729b90e7957f2733518a0a6357473aa068af6647ffe931268a29cbe7354b", &(0x7f0000000dc0)="c6e31414622967acfcc5a6c3773c5f484e7d503ddf00722c93eebbb0cb0115eeb4c03226fc756c545416dc5625bdb864b98f495a39e6628ac612c4e73bdbe4819d40ade0fab9cedb", 0x4, 0x0, 0xb}, 0x50) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200010000000000a73f264c4e1b"], 0x28}], 0x1}, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000001140)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}}, 0x0) close(0x3) kernel console output (not intermixed with test programs): n invalid length. [ 311.413189][T17545] NCSI netlink: No device for ifindex 813332851 [ 311.516238][ T1008] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 311.626019][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 311.695464][ T1106] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.704957][ T1106] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.719089][ T1106] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.733290][ T1106] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.745852][ T1106] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 311.856093][ T1106] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 311.933662][ T1008] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 312.003502][ T50] tipc: Resetting bearer [ 312.370740][ T50] tipc: Disabling bearer [ 312.440533][ T50] bond9 (unregistering): (slave gretap3): Releasing backup interface [ 312.993204][ T50] bond0 (unregistering): Released all slaves [ 313.010368][ T50] bond1 (unregistering): Released all slaves [ 313.025624][ T50] bond2 (unregistering): Released all slaves [ 313.042907][ T50] bond3 (unregistering): Released all slaves [ 313.204659][ T50] bond4 (unregistering): Released all slaves [ 313.220289][ T50] bond5 (unregistering): Released all slaves [ 313.232950][ T50] bond6 (unregistering): Released all slaves [ 313.244926][ T50] bond7 (unregistering): Released all slaves [ 313.261010][ T50] bond8 (unregistering): Released all slaves [ 313.366490][ T50] bond9 (unregistering): (slave bond10): Releasing backup interface [ 313.376028][ T50] bond9 (unregistering): Released all slaves [ 313.469889][ T50] bond10 (unregistering): Released all slaves [ 313.563379][ T50] bond11 (unregistering): Released all slaves [ 313.655425][ T50] bond12 (unregistering): Released all slaves [ 313.668779][ T50] bond13 (unregistering): Released all slaves [ 313.682223][ T50] bond14 (unregistering): Released all slaves [ 313.804886][ T50] 9: left promiscuous mode [ 313.896208][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.966526][ T50] tipc: Left network mode [ 313.982820][T17623] netlink: 'syz.9.3234': attribute type 4 has an invalid length. [ 313.990727][T17623] __nla_validate_parse: 15 callbacks suppressed [ 313.990741][T17623] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3234'. [ 314.020279][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.260422][T17636] netlink: 'syz.1.3237': attribute type 10 has an invalid length. [ 314.288387][T17636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3237'. [ 314.307921][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.317841][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.327313][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.335517][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.339747][T17640] netlink: 'syz.1.3237': attribute type 4 has an invalid length. [ 314.343414][T17631] netlink: 'syz.5.3235': attribute type 1 has an invalid length. [ 314.360642][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.375881][T17640] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3237'. [ 314.449993][T17636] team0: Port device geneve0 added [ 314.508108][T17643] bond8: (slave bridge6): making interface the new active one [ 314.517827][T17643] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 314.602119][ T7446] syz_tun (unregistering): left allmulticast mode [ 314.614241][ T7446] `: (slave syz_tun): Releasing backup interface [ 314.741392][T17656] netlink: 'syz.1.3241': attribute type 6 has an invalid length. [ 314.774782][T17637] vxcan1 speed is unknown, defaulting to 1000 [ 314.975124][T17673] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20064 [ 315.150416][T17672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.173352][T17670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.191798][T17673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.299658][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3250'. [ 315.469793][ T50] veth1_vlan: left allmulticast mode [ 315.487264][ T50] veth1_macvtap: left promiscuous mode [ 315.492821][ T50] veth0_macvtap: left promiscuous mode [ 315.500614][ T50] veth1_vlan: left promiscuous mode [ 315.595644][T17707] netlink: 'syz.5.3256': attribute type 1 has an invalid length. [ 315.610232][T17711] tipc: Failed to remove unknown binding: 66,0,0/0:3320390146/3320390147 [ 315.622554][T17710] tipc: Failed to remove unknown binding: 66,0,0/0:3320390146/3320390147 [ 315.668805][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3256'. [ 315.679075][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3256'. [ 315.713957][T17714] netlink: 'syz.5.3256': attribute type 1 has an invalid length. [ 316.225908][ T1106] smc: removing ib device syz2 [ 316.452733][ T5843] Bluetooth: hci1: command tx timeout [ 316.485372][ T9268] vxcan1 speed is unknown, defaulting to 1000 [ 316.505873][ T9268] syz2: Port: 1 Link DOWN [ 316.511810][T17710] vlan2: entered allmulticast mode [ 316.583743][T17714] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 317.095862][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.112654][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 317.323953][ T8762] net_ratelimit: 6 callbacks suppressed [ 317.323972][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 317.401567][T17637] chnl_net:caif_netlink_parms(): no params data found [ 317.402663][T17749] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3266'. [ 317.746323][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 317.754313][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3271'. [ 317.760002][T17763] netlink: 'syz.5.3270': attribute type 11 has an invalid length. [ 317.771365][T17763] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3270'. [ 318.064015][T17784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3275'. [ 318.101474][T17782] bond0: entered promiscuous mode [ 318.112213][T17782] bond_slave_0: entered promiscuous mode [ 318.128109][T17782] bond_slave_1: entered promiscuous mode [ 318.144742][T17782] bond0: left promiscuous mode [ 318.152227][T17782] bond_slave_0: left promiscuous mode [ 318.158011][T17782] bond_slave_1: left promiscuous mode [ 318.176809][T17785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.239309][T17637] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.247048][T17637] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.254250][T17637] bridge_slave_0: entered allmulticast mode [ 318.276342][T17637] bridge_slave_0: entered promiscuous mode [ 318.296386][T17637] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.313011][T17637] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.320649][T17637] bridge_slave_1: entered allmulticast mode [ 318.359145][T17637] bridge_slave_1: entered promiscuous mode [ 318.382238][ T50] IPVS: stop unused estimator thread 0... [ 318.434207][T17637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.449524][T17637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.459699][ T8756] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 318.505525][T17637] team0: Port device team_slave_0 added [ 318.531865][ T5843] Bluetooth: hci1: command tx timeout [ 318.572127][T17637] team0: Port device team_slave_1 added [ 318.599357][T17805] FAULT_INJECTION: forcing a failure. [ 318.599357][T17805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.614227][T17805] CPU: 0 UID: 0 PID: 17805 Comm: syz.5.3282 Not tainted syzkaller #0 PREEMPT(full) [ 318.614250][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.614272][T17805] Call Trace: [ 318.614280][T17805] [ 318.614288][T17805] dump_stack_lvl+0xe8/0x150 [ 318.614314][T17805] should_fail_ex+0x414/0x560 [ 318.614344][T17805] _copy_from_user+0x2d/0xb0 [ 318.614365][T17805] ___sys_sendmsg+0x158/0x2a0 [ 318.614389][T17805] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.614441][T17805] ? __fget_files+0x2a/0x420 [ 318.614460][T17805] ? __fget_files+0x3a0/0x420 [ 318.614489][T17805] __x64_sys_sendmsg+0x19b/0x260 [ 318.614518][T17805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.614546][T17805] ? __pfx_ksys_write+0x10/0x10 [ 318.614570][T17805] do_syscall_64+0xec/0xf80 [ 318.614589][T17805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.614605][T17805] ? trace_irq_disable+0x37/0x100 [ 318.614625][T17805] ? clear_bhb_loop+0x60/0xb0 [ 318.614645][T17805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.614662][T17805] RIP: 0033:0x7f0946d8f749 [ 318.614678][T17805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.614693][T17805] RSP: 002b:00007f0947cd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.614713][T17805] RAX: ffffffffffffffda RBX: 00007f0946fe5fa0 RCX: 00007f0946d8f749 [ 318.614726][T17805] RDX: 0000000000000048 RSI: 0000200000000700 RDI: 0000000000000003 [ 318.614738][T17805] RBP: 00007f0947cd0090 R08: 0000000000000000 R09: 0000000000000000 [ 318.614749][T17805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.614759][T17805] R13: 00007f0946fe6038 R14: 00007f0946fe5fa0 R15: 00007ffeb5ceb8a8 [ 318.614789][T17805] [ 318.845473][T17637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.853688][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.879955][T17637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.900787][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 318.921976][T17637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.931640][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.959450][T17637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.971752][T17814] netlink: 'syz.1.3286': attribute type 1 has an invalid length. [ 319.009998][T17814] bond1: entered promiscuous mode [ 319.015440][T17814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.056155][T17814] bond1: (slave bridge1): making interface the new active one [ 319.063929][T17814] bridge1: entered promiscuous mode [ 319.072601][T17814] bridge1: left promiscuous mode [ 319.137865][T17637] hsr_slave_0: entered promiscuous mode [ 319.144280][T17637] hsr_slave_1: entered promiscuous mode [ 319.150746][T17637] debugfs: 'hsr0' already exists in 'hsr' [ 319.156597][T17637] Cannot create hsr debugfs directory [ 319.258806][T17826] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 319.310653][T17828] __nla_validate_parse: 2 callbacks suppressed [ 319.310668][T17828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3288'. [ 319.313267][T17637] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.342921][T17637] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.387569][T17828] bond2 (unregistering): Released all slaves [ 319.432261][T17637] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.442949][T17637] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.485849][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 319.542108][T17637] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.556176][T17637] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.596197][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 319.622262][T17637] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.633378][T17637] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.760804][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 319.783729][T17637] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 319.829869][T17637] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 319.860166][T17637] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 319.882118][T17637] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 319.977309][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.052043][T17637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.081428][T17637] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.195725][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.202889][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.235553][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.242746][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.307748][T17865] syzkaller1: entered promiscuous mode [ 320.313622][T17865] syzkaller1: entered allmulticast mode [ 320.560050][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'. [ 320.594796][T17873] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3301'. [ 320.606098][ T5843] Bluetooth: hci1: command tx timeout [ 320.722222][T17637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.867640][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 321.033761][T17902] netlink: 'syz.9.3310': attribute type 10 has an invalid length. [ 321.072697][T17902] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.081592][T17902] bond0: (slave team0): Enslaving as an active interface with an up link [ 321.091507][T17905] veth0: entered promiscuous mode [ 321.102276][T17905] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 321.118185][T17637] veth0_vlan: entered promiscuous mode [ 321.139895][T17637] veth1_vlan: entered promiscuous mode [ 321.162515][T17906] veth0: left promiscuous mode [ 321.199783][T17637] veth0_macvtap: entered promiscuous mode [ 321.211185][T17637] veth1_macvtap: entered promiscuous mode [ 321.242410][T17637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.275205][T17637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.292750][ T8762] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.310814][ T8762] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.328178][ T8762] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.330348][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3314'. [ 321.347920][ T8762] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.515675][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.523669][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.601783][T10644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.617709][T10644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.778129][T17927] FAULT_INJECTION: forcing a failure. [ 321.778129][T17927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.804450][T17927] CPU: 1 UID: 0 PID: 17927 Comm: syz.9.3317 Not tainted syzkaller #0 PREEMPT(full) [ 321.804475][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.804486][T17927] Call Trace: [ 321.804493][T17927] [ 321.804501][T17927] dump_stack_lvl+0xe8/0x150 [ 321.804527][T17927] should_fail_ex+0x414/0x560 [ 321.804555][T17927] _copy_from_iter+0x1cd/0x1630 [ 321.804583][T17927] ? __pfx__copy_from_iter+0x10/0x10 [ 321.804602][T17927] ? __build_skb_around+0x22d/0x3c0 [ 321.804623][T17927] ? __alloc_skb+0x198/0x3a0 [ 321.804641][T17927] ? netlink_sendmsg+0x642/0xb30 [ 321.804661][T17927] ? skb_put+0x11b/0x210 [ 321.804683][T17927] netlink_sendmsg+0x6b2/0xb30 [ 321.804713][T17927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.804737][T17927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 321.804759][T17927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.804776][T17927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.804799][T17927] __sock_sendmsg+0x21c/0x270 [ 321.804825][T17927] ____sys_sendmsg+0x505/0x820 [ 321.804851][T17927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.804880][T17927] ? import_iovec+0x74/0xa0 [ 321.804904][T17927] ___sys_sendmsg+0x21f/0x2a0 [ 321.804927][T17927] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.804979][T17927] ? __fget_files+0x2a/0x420 [ 321.804999][T17927] ? __fget_files+0x3a0/0x420 [ 321.805028][T17927] __x64_sys_sendmsg+0x19b/0x260 [ 321.805051][T17927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.805080][T17927] ? __pfx_ksys_write+0x10/0x10 [ 321.805109][T17927] do_syscall_64+0xec/0xf80 [ 321.805128][T17927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.805144][T17927] ? trace_irq_disable+0x37/0x100 [ 321.805165][T17927] ? clear_bhb_loop+0x60/0xb0 [ 321.805186][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.805202][T17927] RIP: 0033:0x7f20bf18f749 [ 321.805217][T17927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.805231][T17927] RSP: 002b:00007f20c000e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.805260][T17927] RAX: ffffffffffffffda RBX: 00007f20bf3e5fa0 RCX: 00007f20bf18f749 [ 321.805272][T17927] RDX: 0000000000000048 RSI: 0000200000000700 RDI: 0000000000000003 [ 321.805282][T17927] RBP: 00007f20c000e090 R08: 0000000000000000 R09: 0000000000000000 [ 321.805293][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.805304][T17927] R13: 00007f20bf3e6038 R14: 00007f20bf3e5fa0 R15: 00007ffcf1183008 [ 321.805332][T17927] [ 322.119910][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3318'. [ 322.139201][T17932] netlink: 1184 bytes leftover after parsing attributes in process `syz.6.3318'. [ 322.346559][ T154] net_ratelimit: 15 callbacks suppressed [ 322.346578][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 322.486692][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 322.631307][T17976] FAULT_INJECTION: forcing a failure. [ 322.631307][T17976] name failslab, interval 1, probability 0, space 0, times 0 [ 322.646616][T17976] CPU: 1 UID: 0 PID: 17976 Comm: syz.9.3330 Not tainted syzkaller #0 PREEMPT(full) [ 322.646642][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.646653][T17976] Call Trace: [ 322.646660][T17976] [ 322.646667][T17976] dump_stack_lvl+0xe8/0x150 [ 322.646694][T17976] should_fail_ex+0x414/0x560 [ 322.646722][T17976] should_failslab+0xa8/0x100 [ 322.646744][T17976] kmem_cache_alloc_noprof+0x88/0x710 [ 322.646768][T17976] ? __netlink_lookup+0xbd/0x8a0 [ 322.646790][T17976] ? skb_clone+0x212/0x3a0 [ 322.646813][T17976] skb_clone+0x212/0x3a0 [ 322.646837][T17976] __netlink_deliver_tap+0x404/0x850 [ 322.646869][T17976] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.646892][T17976] netlink_deliver_tap+0x19c/0x1b0 [ 322.646915][T17976] netlink_unicast+0x7fa/0x9e0 [ 322.646959][T17976] ? __pfx_netlink_unicast+0x10/0x10 [ 322.646977][T17976] ? __alloc_skb+0x198/0x3a0 [ 322.646996][T17976] ? netlink_sendmsg+0x642/0xb30 [ 322.647019][T17976] ? skb_put+0x11b/0x210 [ 322.647041][T17976] netlink_sendmsg+0x805/0xb30 [ 322.647069][T17976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.647093][T17976] ? aa_sock_msg_perm+0xf1/0x1b0 [ 322.647117][T17976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.647132][T17976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.647154][T17976] __sock_sendmsg+0x21c/0x270 [ 322.647180][T17976] ____sys_sendmsg+0x505/0x820 [ 322.647211][T17976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.647241][T17976] ? import_iovec+0x74/0xa0 [ 322.647264][T17976] ___sys_sendmsg+0x21f/0x2a0 [ 322.647286][T17976] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.647340][T17976] ? __fget_files+0x2a/0x420 [ 322.647360][T17976] ? __fget_files+0x3a0/0x420 [ 322.647390][T17976] __x64_sys_sendmsg+0x19b/0x260 [ 322.647414][T17976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.647443][T17976] ? __pfx_ksys_write+0x10/0x10 [ 322.647473][T17976] do_syscall_64+0xec/0xf80 [ 322.647491][T17976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.647508][T17976] ? trace_irq_disable+0x37/0x100 [ 322.647528][T17976] ? clear_bhb_loop+0x60/0xb0 [ 322.647549][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.647565][T17976] RIP: 0033:0x7f20bf18f749 [ 322.647585][T17976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.647601][T17976] RSP: 002b:00007f20c000e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.647620][T17976] RAX: ffffffffffffffda RBX: 00007f20bf3e5fa0 RCX: 00007f20bf18f749 [ 322.647634][T17976] RDX: 0000000000000048 RSI: 0000200000000700 RDI: 0000000000000003 [ 322.647645][T17976] RBP: 00007f20c000e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.647657][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.647667][T17976] R13: 00007f20bf3e6038 R14: 00007f20bf3e5fa0 R15: 00007ffcf1183008 [ 322.647697][T17976] [ 322.933136][ T5843] Bluetooth: hci1: command tx timeout [ 322.933638][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 322.946535][ C1] lec:lec_tx_timeout: lec0 [ 322.952600][ T1008] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.033007][T17980] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3333'. [ 323.057619][T17980] 8021q: VLANs not supported on ip6_vti0 [ 323.090515][T17980] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3333'. [ 323.117557][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.204361][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3337'. [ 323.216940][T17987] syzkaller0: entered promiscuous mode [ 323.222469][T17987] syzkaller0: entered allmulticast mode [ 323.256422][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.394468][T18003] ip6gre0: entered allmulticast mode [ 323.435960][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.566519][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.676175][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.786379][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.812710][T18034] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 323.823254][T18034] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 323.905950][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 324.361409][T18052] __nla_validate_parse: 3 callbacks suppressed [ 324.361427][T18052] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3356'. [ 324.615250][T18074] sctp: [Deprecated]: syz.9.3362 (pid 18074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.615250][T18074] Use struct sctp_sack_info instead [ 324.946423][T18093] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3368'. [ 324.979164][T18093] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3368'. [ 325.020568][T18093] gretap0: entered promiscuous mode [ 325.038227][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.048254][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.056662][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.064661][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.078759][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.106155][T18093] gretap0: left promiscuous mode [ 325.363034][T18095] chnl_net:caif_netlink_parms(): no params data found [ 325.423650][T18102] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3369'. [ 325.452218][T18102] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.459512][T18102] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.508493][T18095] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.517079][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.524283][T18095] bridge_slave_0: entered allmulticast mode [ 325.530947][T18106] ipt_ECN: cannot use operation on non-tcp rule [ 325.532328][T18095] bridge_slave_0: entered promiscuous mode [ 325.550045][T18095] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.558413][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.565582][T18095] bridge_slave_1: entered allmulticast mode [ 325.576249][T18095] bridge_slave_1: entered promiscuous mode [ 325.603620][T18106] syzkaller0: entered promiscuous mode [ 325.609267][T18106] syzkaller0: entered allmulticast mode [ 325.621031][T18095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.644989][T18095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.682214][T18095] team0: Port device team_slave_0 added [ 325.690983][T18095] team0: Port device team_slave_1 added [ 325.757861][T18095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.764830][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.811777][T18095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.824517][T18111] netlink: 'syz.6.3372': attribute type 8 has an invalid length. [ 325.825401][T18095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.839722][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.867458][T18095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.936263][T18115] tipc: Enabling of bearer rejected, failed to enable media [ 326.004920][T18118] netlink: 'syz.6.3375': attribute type 1 has an invalid length. [ 326.012802][T18118] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3375'. [ 326.057672][T18095] hsr_slave_0: entered promiscuous mode [ 326.078083][T18095] hsr_slave_1: entered promiscuous mode [ 326.084727][T18095] debugfs: 'hsr0' already exists in 'hsr' [ 326.105929][T18095] Cannot create hsr debugfs directory [ 326.197697][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.208616][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.217546][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.232415][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.244532][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.442987][T18095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.457188][T18095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.479326][T18137] 8021q: VLANs not supported on wg2 [ 326.570746][T18095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.581405][T18095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.657568][T18095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.667912][T18095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.684419][T18140] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3382'. [ 326.698707][T18140] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3382'. [ 326.717432][T18142] lo: left allmulticast mode [ 326.765322][T18095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.775884][T18095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.897967][T18148] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3384'. [ 326.967409][T18129] chnl_net:caif_netlink_parms(): no params data found [ 327.076891][T18095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.100032][T18095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.119924][T18095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.159197][T18095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.176146][ T52] Bluetooth: hci2: command tx timeout [ 327.195659][T18129] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.213439][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.233632][T18129] bridge_slave_0: entered allmulticast mode [ 327.241592][T18129] bridge_slave_0: entered promiscuous mode [ 327.270804][T18129] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.279952][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.287389][T18129] bridge_slave_1: entered allmulticast mode [ 327.294920][T18129] bridge_slave_1: entered promiscuous mode [ 327.336045][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.404782][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.437100][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.502447][T18168] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3386'. [ 327.536619][T18168] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3386'. [ 327.581146][T18129] team0: Port device team_slave_0 added [ 327.603409][T18129] team0: Port device team_slave_1 added [ 327.696587][ T3545] net_ratelimit: 13 callbacks suppressed [ 327.696607][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 327.731176][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.743263][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.792504][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.812068][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.819817][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.870611][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.910718][T18095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.004552][T18129] hsr_slave_0: entered promiscuous mode [ 328.014644][T18129] hsr_slave_1: entered promiscuous mode [ 328.021238][T18129] debugfs: 'hsr0' already exists in 'hsr' [ 328.027543][T18129] Cannot create hsr debugfs directory [ 328.036382][T18095] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.070636][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.077851][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.138663][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.146131][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.286196][ T52] Bluetooth: hci0: command tx timeout [ 328.454040][T18220] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 328.468023][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.586284][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.746743][T18095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.756599][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.935523][T18129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.956021][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.966341][T18129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.996984][T18129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.010713][T18129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.151631][T18095] veth0_vlan: entered promiscuous mode [ 329.157483][T18253] netlink: 'syz.6.3407': attribute type 1 has an invalid length. [ 329.194679][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.203030][T18095] veth1_vlan: entered promiscuous mode [ 329.216924][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.241302][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.259849][ T52] Bluetooth: hci2: command tx timeout [ 329.272293][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.279463][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.297623][T18095] veth0_macvtap: entered promiscuous mode [ 329.306706][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.313820][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.341051][T18095] veth1_macvtap: entered promiscuous mode [ 329.366798][T18260] __nla_validate_parse: 3 callbacks suppressed [ 329.366813][T18260] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3409'. [ 329.408776][T18225] delete_channel: no stack [ 329.413369][T18095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.438918][T18095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.472516][ T6272] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.501054][ T6272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.535227][ T6272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.565443][ T6272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.666525][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.732758][ T6201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.753819][ T6201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.785393][T18273] batadv_slave_1: entered promiscuous mode [ 329.793060][T18273] openvswitch: netlink: Message has 2688 unknown bytes. [ 329.801661][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3413'. [ 329.808994][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.823835][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.832406][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.845185][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.854793][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3413'. [ 329.868981][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3413'. [ 329.923483][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3413'. [ 329.938561][T18272] batadv_slave_1: left promiscuous mode [ 329.968025][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.051326][T18285] bond0: (slave wlan1): Error: Device can not be enslaved while up [ 330.146039][T18292] syzkaller1: entered promiscuous mode [ 330.151631][T18292] syzkaller1: entered allmulticast mode [ 330.165393][T18292] syzkaller1: left promiscuous mode [ 330.171872][T18292] syzkaller1: left allmulticast mode [ 330.251219][T18129] veth0_vlan: entered promiscuous mode [ 330.264062][T18129] veth1_vlan: entered promiscuous mode [ 330.298957][T18129] veth0_macvtap: entered promiscuous mode [ 330.308274][T18129] veth1_macvtap: entered promiscuous mode [ 330.324511][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.338470][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.352541][ T6272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.366275][ T52] Bluetooth: hci0: command tx timeout [ 330.372831][ T6272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.396052][ T6272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.405707][ T6272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.482313][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.506072][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.548408][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.557392][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.561378][T18302] sctp: [Deprecated]: syz.9.3418 (pid 18302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.561378][T18302] Use struct sctp_sack_info instead [ 330.745078][T18304] syzkaller1: entered promiscuous mode [ 330.751451][T18304] syzkaller1: entered allmulticast mode [ 330.889800][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3422'. [ 331.081039][T18332] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 331.150629][T18339] nla_validate_range_unsigned: 23 callbacks suppressed [ 331.150647][T18339] netlink: 'syz.6.3428': attribute type 11 has an invalid length. [ 331.217564][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3424'. [ 331.327442][ T52] Bluetooth: hci2: command tx timeout [ 331.578900][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3438'. [ 331.864646][T18394] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3446'. [ 332.066994][T18403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3451'. [ 332.148907][T18403] syzkaller0: entered promiscuous mode [ 332.154400][T18403] syzkaller0: entered allmulticast mode [ 332.298910][T18418] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 332.347988][T18424] tc_dump_action: action bad kind [ 332.363383][T18424] team0: Device gtp0 is up. Set it down before adding it as a team port [ 332.425377][T18429] netlink: 'syz.5.3459': attribute type 2 has an invalid length. [ 332.434171][T18429] sctp: [Deprecated]: syz.5.3459 (pid 18429) Use of int in max_burst socket option. [ 332.434171][T18429] Use struct sctp_assoc_value instead [ 332.466301][ T52] Bluetooth: hci0: command tx timeout [ 332.807975][T18460] net_ratelimit: 21 callbacks suppressed [ 332.807994][T18460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.823888][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 332.936366][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.046061][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.144202][T18480] netlink: 'syz.9.3475': attribute type 1 has an invalid length. [ 333.257680][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.356253][T18498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 333.371927][T18499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.418488][ T52] Bluetooth: hci2: command tx timeout [ 333.475194][T18493] team0 (unregistering): Port device team_slave_0 removed [ 333.489347][T18493] team0 (unregistering): Port device team_slave_1 removed [ 333.534113][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.609025][T18508] netlink: 'syz.5.3480': attribute type 1 has an invalid length. [ 333.671150][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.786104][ T1106] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.812449][T18524] tipc: Started in network mode [ 333.817449][T18524] tipc: Node identity b6722f9888e8, cluster identity 4711 [ 333.824771][T18524] tipc: Enabled bearer , priority 0 [ 333.832891][T18524] syzkaller0: entered promiscuous mode [ 333.838737][T18524] syzkaller0: entered allmulticast mode [ 333.871758][T18524] tipc: Resetting bearer [ 333.882394][T18523] tipc: Resetting bearer [ 333.906500][T18523] tipc: Disabling bearer [ 333.918736][T18528] bond0: entered allmulticast mode [ 333.923956][T18528] bond_slave_0: entered allmulticast mode [ 333.930401][T18528] bond_slave_1: entered allmulticast mode [ 333.945855][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.380952][T18566] netlink: 'syz.6.3501': attribute type 3 has an invalid length. [ 334.447457][T18569] __nla_validate_parse: 14 callbacks suppressed [ 334.447474][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3503'. [ 334.497952][T18569] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3503'. [ 334.527653][ T52] Bluetooth: hci0: command tx timeout [ 334.582241][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3507'. [ 334.633753][T18579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3507'. [ 334.721003][T18585] netlink: 'syz.9.3511': attribute type 10 has an invalid length. [ 334.760853][T18585] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3511'. [ 334.785822][T18585] dummy0: entered promiscuous mode [ 334.791624][T18585] bridge0: port 2(dummy0) entered blocking state [ 334.800475][T18585] bridge0: port 2(dummy0) entered disabled state [ 334.807105][T18585] dummy0: entered allmulticast mode [ 334.942470][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3515'. [ 335.019000][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3513'. [ 335.038920][T18602] xt_TCPMSS: Only works on TCP SYN packets [ 335.055341][T18602] netlink: 'syz.6.3513': attribute type 29 has an invalid length. [ 335.279128][T18623] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3521'. [ 335.581352][T18643] C: renamed from lo (while UP) [ 335.606176][T18642] bond0: entered allmulticast mode [ 335.624837][T18642] bond_slave_0: entered allmulticast mode [ 335.630942][T18642] bond_slave_1: entered allmulticast mode [ 335.639516][T18642] team0: entered allmulticast mode [ 335.644665][T18642] team_slave_0: entered allmulticast mode [ 335.655025][T18642] team_slave_1: entered allmulticast mode [ 335.825312][T18654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3531'. [ 335.842427][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3531'. [ 336.129584][T18673] Bluetooth: MGMT ver 1.23 [ 336.191663][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.207052][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.220171][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.236507][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.244496][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.273333][T18678] dvmrp6: entered allmulticast mode [ 336.318389][T18682] netlink: 'syz.5.3541': attribute type 5 has an invalid length. [ 336.369504][T18682] netlink: 'syz.5.3541': attribute type 5 has an invalid length. [ 336.625451][T18675] chnl_net:caif_netlink_parms(): no params data found [ 336.719438][T18704] netlink: 'syz.6.3549': attribute type 5 has an invalid length. [ 336.765392][T18704] geneve2: entered promiscuous mode [ 336.778802][T18704] geneve2: entered allmulticast mode [ 336.791402][ T3545] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 336.829967][ T3545] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 336.869168][ T3545] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 336.904748][ T3545] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 336.976770][T18675] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.984134][T18675] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.991435][T18675] bridge_slave_0: entered allmulticast mode [ 336.998930][T18675] bridge_slave_0: entered promiscuous mode [ 337.018363][T18675] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.025562][T18675] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.034366][T18675] bridge_slave_1: entered allmulticast mode [ 337.043100][T18675] bridge_slave_1: entered promiscuous mode [ 337.089261][T18675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.104812][T18675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.154437][T18675] team0: Port device team_slave_0 added [ 337.167192][T18675] team0: Port device team_slave_1 added [ 337.215460][T18675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.232493][T18675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.271719][T18675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.295111][T18737] tipc: Enabling of bearer rejected, failed to enable media [ 337.311408][T18675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.328523][T18675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.404159][T18675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.557395][T18675] hsr_slave_0: entered promiscuous mode [ 337.573774][T18675] hsr_slave_1: entered promiscuous mode [ 337.616076][T18675] debugfs: 'hsr0' already exists in 'hsr' [ 337.621834][T18675] Cannot create hsr debugfs directory [ 337.656486][T18751] bridge0: port 3(batadv1) entered blocking state [ 337.664174][T18751] bridge0: port 3(batadv1) entered disabled state [ 337.672079][T18751] batadv1: entered allmulticast mode [ 337.678697][T18751] batadv1: entered promiscuous mode [ 337.803725][T18762] x_tables: duplicate underflow at hook 1 [ 338.159348][ T3489] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 338.169065][ T3489] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 338.286179][ T5843] Bluetooth: hci7: command tx timeout [ 338.298273][T18780] syzkaller0: entered promiscuous mode [ 338.304538][T18780] syzkaller0: entered allmulticast mode [ 338.335898][ T8762] net_ratelimit: 28 callbacks suppressed [ 338.335913][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 338.566664][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 338.673862][T18811] xt_TPROXY: Can be used only with -p tcp or -p udp [ 339.063020][T18830] netlink: 'syz.4.3583': attribute type 3 has an invalid length. [ 340.366537][ T5843] Bluetooth: hci7: command tx timeout [ 340.445993][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.531217][ T7798] IPVS: starting estimator thread 0... [ 340.576710][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.590728][T18846] __nla_validate_parse: 11 callbacks suppressed [ 340.590743][T18846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3588'. [ 340.607245][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 340.643804][T18848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3589'. [ 340.653521][T18844] IPVS: using max 29 ests per chain, 69600 per kthread [ 340.717660][T18675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.741028][T18675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.751326][T18675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.772124][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.786489][T18675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.924394][T18868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3594'. [ 341.005988][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.073406][T18675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.136576][T18675] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.153740][T18878] openvswitch: netlink: Missing key (keys=40, expected=80) [ 341.164132][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.171265][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.213975][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.221150][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.352653][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.476165][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.499640][T18675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.533887][T18675] veth0_vlan: entered promiscuous mode [ 341.544417][T18675] veth1_vlan: entered promiscuous mode [ 341.572303][T18675] veth0_macvtap: entered promiscuous mode [ 341.581053][T18675] veth1_macvtap: entered promiscuous mode [ 341.595471][T18675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.610390][T18675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.623076][ T8762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.632988][ T8762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.643560][ T8762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.658025][ T8762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.676838][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.731366][ T8762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.741431][ T8762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.765589][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.773949][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.951378][T18898] xt_l2tp: v2 sid > 0xffff: 1116849 [ 341.990919][T18898] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3602'. [ 342.005237][T18903] netlink: 'syz.9.3604': attribute type 1 has an invalid length. [ 342.043811][T18898] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3602'. [ 342.060760][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3603'. [ 342.071750][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3603'. [ 342.107881][T18902] bond2: (slave veth5): Enslaving as an active interface with a down link [ 342.158438][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3603'. [ 342.158961][ T8762] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.180579][ T8762] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.192281][ T8762] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.202540][ T8762] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.213239][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3603'. [ 342.230143][T18903] bond2: (slave veth0_to_bond): making interface the new active one [ 342.240395][T18903] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 342.252730][T18904] bond2: entered promiscuous mode [ 342.257198][T18914] netlink: 'syz.4.3606': attribute type 1 has an invalid length. [ 342.258002][T18904] veth0_to_bond: entered promiscuous mode [ 342.274376][T18904] bond2: entered allmulticast mode [ 342.281179][T18904] veth0_to_bond: entered allmulticast mode [ 342.330561][T18914] bond1: entered promiscuous mode [ 342.361558][T18914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.446798][ T5843] Bluetooth: hci7: command tx timeout [ 342.451258][T18914] bond1: (slave bridge1): making interface the new active one [ 342.500879][T18914] bridge1: entered promiscuous mode [ 342.538302][T18914] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 342.541857][T18938] netlink: 'syz.6.3614': attribute type 10 has an invalid length. [ 342.583632][T18934] syzkaller0: entered promiscuous mode [ 342.592859][T18934] syzkaller0: entered allmulticast mode [ 342.730267][T18939] tap0: tun_chr_ioctl cmd 1074025676 [ 342.735696][T18939] tap0: owner set to 0 [ 342.818911][T18941] syzkaller1: entered promiscuous mode [ 342.824489][T18941] syzkaller1: entered allmulticast mode [ 343.013573][T18959] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20000 [ 343.122871][T18963] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 343.266787][T18955] 8021q: VLANs not supported on ipvlan1 [ 343.366044][ T4320] net_ratelimit: 9 callbacks suppressed [ 343.366062][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.486219][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.512250][T18986] openvswitch: netlink: IP tunnel dst address not specified [ 343.606845][ T1106] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.613464][T18992] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 343.747023][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.876613][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.016785][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.147959][ T6077] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.285962][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.370942][T19038] netlink: 'syz.2.3650': attribute type 1 has an invalid length. [ 344.395862][T19038] netlink: 'syz.2.3650': attribute type 2 has an invalid length. [ 344.526148][ T5843] Bluetooth: hci7: command tx timeout [ 344.872406][T19076] tipc: Started in network mode [ 344.879100][T19076] tipc: Node identity baab9bc9e7a2, cluster identity 4711 [ 344.887919][T19076] tipc: Enabled bearer , priority 0 [ 344.895668][T19076] syzkaller0: entered promiscuous mode [ 344.902177][T19076] syzkaller0: entered allmulticast mode [ 344.978510][T19085] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 345.009902][T19076] tipc: Resetting bearer [ 345.031007][T19075] tipc: Resetting bearer [ 345.055160][T19075] tipc: Disabling bearer [ 345.092607][T19091] ip6t_REJECT: ECHOREPLY is not supported [ 345.195115][T19097] netlink: 'syz.2.3671': attribute type 12 has an invalid length. [ 345.270851][T19100] Bluetooth: MGMT ver 1.23 [ 345.432600][T19107] bond1 (unregistering): Released all slaves [ 345.585988][T19122] syzkaller0: entered promiscuous mode [ 345.591481][T19122] syzkaller0: entered allmulticast mode [ 345.733176][T19131] netlink: 'syz.5.3683': attribute type 1 has an invalid length. [ 345.785919][T19131] bond1: entered promiscuous mode [ 345.802792][T19131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.811895][T19135] __nla_validate_parse: 15 callbacks suppressed [ 345.811910][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3681'. [ 345.904257][T19131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.924661][T19131] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 345.935184][T19131] bond1: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 345.953202][T19131] bond1: (slave ip6tnl1): making interface the new active one [ 345.965262][T19131] ip6tnl1: entered promiscuous mode [ 345.974989][T19131] bond1: (slave ip6tnl1): Enslaving as an active interface with an up link [ 345.984479][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3686'. [ 346.018361][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3681'. [ 346.198768][T19154] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3693'. [ 346.341828][T19167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3696'. [ 346.682038][T19194] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3705'. [ 347.062849][T19224] tipc: Enabled bearer , priority 0 [ 347.101032][T19224] syzkaller0: entered promiscuous mode [ 347.115293][T19224] syzkaller0: entered allmulticast mode [ 347.218342][T19245] tipc: Resetting bearer [ 347.268444][T19249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3720'. [ 347.382162][T19222] tipc: Resetting bearer [ 347.453638][T19222] tipc: Disabling bearer [ 347.468398][T19255] xt_l2tp: unknown flags: 10 [ 347.557399][T19261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3725'. [ 347.614213][T19265] ip6gretap1: entered allmulticast mode [ 347.624212][T19265] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 347.670443][T19270] netlink: 'syz.5.3728': attribute type 9 has an invalid length. [ 347.728204][T19273] sctp: [Deprecated]: syz.9.3729 (pid 19273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.728204][T19273] Use struct sctp_sack_info instead [ 347.745339][T19274] sctp: [Deprecated]: syz.9.3729 (pid 19274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.745339][T19274] Use struct sctp_sack_info instead [ 347.766250][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3729'. [ 347.780842][T19274] syzkaller1: entered promiscuous mode [ 347.786827][T19274] syzkaller1: entered allmulticast mode [ 347.876511][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3731'. [ 347.893443][T19280] netlink: 'syz.9.3731': attribute type 39 has an invalid length. [ 347.901431][T19281] netlink: 'syz.9.3731': attribute type 39 has an invalid length. [ 348.186330][T19297] IPVS: length: 239 != 24 [ 348.406022][ T3545] net_ratelimit: 34 callbacks suppressed [ 348.406041][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 348.436728][T19310] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 348.504386][T19316] netlink: zone id is out of range [ 348.510025][T19316] netlink: zone id is out of range [ 348.515570][T19316] netlink: zone id is out of range [ 348.523521][T19316] netlink: zone id is out of range [ 348.531040][T19316] netlink: zone id is out of range [ 348.538357][T19316] netlink: zone id is out of range [ 348.543755][T19316] netlink: zone id is out of range [ 348.550075][T19316] netlink: zone id is out of range [ 348.794799][T19327] FAULT_INJECTION: forcing a failure. [ 348.794799][T19327] name failslab, interval 1, probability 0, space 0, times 0 [ 348.844932][T19327] CPU: 0 UID: 0 PID: 19327 Comm: syz.5.3746 Not tainted syzkaller #0 PREEMPT(full) [ 348.844956][T19327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.844967][T19327] Call Trace: [ 348.844975][T19327] [ 348.844982][T19327] dump_stack_lvl+0xe8/0x150 [ 348.845008][T19327] should_fail_ex+0x414/0x560 [ 348.845039][T19327] should_failslab+0xa8/0x100 [ 348.845060][T19327] __kmalloc_noprof+0xdf/0x800 [ 348.845078][T19327] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 348.845102][T19327] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 348.845127][T19327] genl_family_rcv_msg_doit+0xb8/0x300 [ 348.845152][T19327] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 348.845184][T19327] ? apparmor_capable+0x137/0x1a0 [ 348.845202][T19327] ? bpf_lsm_capable+0x9/0x20 [ 348.845220][T19327] ? security_capable+0x7e/0x2e0 [ 348.845246][T19327] genl_rcv_msg+0x60e/0x790 [ 348.845269][T19327] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.845283][T19327] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 348.845302][T19327] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 348.845323][T19327] ? __pfx_nl80211_post_doit+0x10/0x10 [ 348.845342][T19327] ? __asan_memcpy+0x40/0x70 [ 348.845361][T19327] ? __pfx_ref_tracker_free+0x10/0x10 [ 348.845382][T19327] netlink_rcv_skb+0x208/0x470 [ 348.845401][T19327] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.845418][T19327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.845436][T19327] ? genl_rcv+0x19/0x40 [ 348.845466][T19327] ? down_read+0x274/0x2e0 [ 348.845484][T19327] ? genl_rcv+0xd/0x40 [ 348.845502][T19327] genl_rcv+0x28/0x40 [ 348.845516][T19327] netlink_unicast+0x82f/0x9e0 [ 348.845543][T19327] ? __pfx_netlink_unicast+0x10/0x10 [ 348.845562][T19327] ? __alloc_skb+0x198/0x3a0 [ 348.845580][T19327] ? netlink_sendmsg+0x642/0xb30 [ 348.845600][T19327] ? skb_put+0x11b/0x210 [ 348.845620][T19327] netlink_sendmsg+0x805/0xb30 [ 348.845648][T19327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.845672][T19327] ? aa_sock_msg_perm+0xf1/0x1b0 [ 348.845694][T19327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.845709][T19327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.845735][T19327] __sock_sendmsg+0x21c/0x270 [ 348.845761][T19327] ____sys_sendmsg+0x505/0x820 [ 348.845786][T19327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.845815][T19327] ? import_iovec+0x74/0xa0 [ 348.845839][T19327] ___sys_sendmsg+0x21f/0x2a0 [ 348.845861][T19327] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.845913][T19327] ? __fget_files+0x2a/0x420 [ 348.845931][T19327] ? __fget_files+0x3a0/0x420 [ 348.845960][T19327] __x64_sys_sendmsg+0x19b/0x260 [ 348.845983][T19327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.846012][T19327] ? __pfx_ksys_write+0x10/0x10 [ 348.846041][T19327] do_syscall_64+0xec/0xf80 [ 348.846058][T19327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.846074][T19327] ? trace_irq_disable+0x37/0x100 [ 348.846093][T19327] ? clear_bhb_loop+0x60/0xb0 [ 348.846114][T19327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.846131][T19327] RIP: 0033:0x7f0bcbd8f749 [ 348.846146][T19327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.846161][T19327] RSP: 002b:00007f0bccc54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.846187][T19327] RAX: ffffffffffffffda RBX: 00007f0bcbfe5fa0 RCX: 00007f0bcbd8f749 [ 348.846199][T19327] RDX: 0000000000000048 RSI: 0000200000000700 RDI: 0000000000000003 [ 348.846209][T19327] RBP: 00007f0bccc54090 R08: 0000000000000000 R09: 0000000000000000 [ 348.846220][T19327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.846230][T19327] R13: 00007f0bcbfe6038 R14: 00007f0bcbfe5fa0 R15: 00007ffde5e2fc18 [ 348.846259][T19327] [ 349.216431][ T5843] Bluetooth: hci7: command tx timeout [ 349.354673][T19334] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 349.900353][T19364] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 350.075046][T19389] x_tables: duplicate underflow at hook 2 [ 350.199047][T19399] netlink: 'syz.5.3766': attribute type 2 has an invalid length. [ 350.233603][T19399] netlink: 'syz.5.3766': attribute type 21 has an invalid length. [ 350.345113][T19408] IPVS: length: 4096 != 8 [ 350.379200][T19411] xt_cgroup: xt_cgroup: no path or classid specified [ 350.403708][T19411] IPVS: Unknown mcast interface: vcan0 [ 350.592993][T19431] sctp: [Deprecated]: syz.6.3778 (pid 19431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.592993][T19431] Use struct sctp_sack_info instead [ 350.826366][T19451] __nla_validate_parse: 15 callbacks suppressed [ 350.826385][T19451] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3784'. [ 350.859443][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3784'. [ 350.879996][T19451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.887848][T19451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.897331][T19451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.905098][T19451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.130124][T19480] tipc: Enabled bearer , priority 0 [ 351.159348][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3790'. [ 351.221097][T19486] tipc: Enabled bearer , priority 0 [ 351.233566][T19486] syzkaller0: entered promiscuous mode [ 351.239419][T19486] syzkaller0: entered allmulticast mode [ 351.250210][T19485] tipc: Resetting bearer [ 351.268382][T19485] tipc: Disabling bearer [ 351.290643][T19489] syz.6.3794 uses old SIOCAX25GETINFO [ 351.689809][T19515] netlink: 'syz.6.3804': attribute type 10 has an invalid length. [ 351.724042][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3807'. [ 351.728816][T19515] mac80211_hwsim hwsim52 wlan1: entered allmulticast mode [ 351.742266][T19515] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 351.822737][T19526] netlink: 'syz.2.3809': attribute type 1 has an invalid length. [ 351.862883][T19522] tipc: Started in network mode [ 351.869485][T19522] tipc: Node identity ce74eb02e469, cluster identity 4711 [ 351.878329][T19522] tipc: Enabled bearer , priority 0 [ 351.885171][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3810'. [ 351.891081][T19526] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 351.906339][T19526] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 351.918947][T19526] bond1: (slave xfrm1): making interface the new active one [ 351.923643][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 351.927146][T19526] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 351.958414][T19532] syzkaller0: entered promiscuous mode [ 351.963893][T19532] syzkaller0: entered allmulticast mode [ 351.969725][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3810'. [ 351.983902][T19522] tipc: Resetting bearer [ 351.985723][T19535] netlink: 'syz.9.3811': attribute type 33 has an invalid length. [ 351.997963][T19535] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3811'. [ 352.024653][T19533] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 352.038440][T19533] bond1 (unregistering): Released all slaves [ 352.061333][T19521] tipc: Resetting bearer [ 352.081616][T19521] tipc: Disabling bearer [ 352.299227][ T5842] tipc: Node number set to 3389995282 [ 352.529486][T19570] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3822'. [ 352.573238][T19568] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3820'. [ 352.653193][T19581] tipc: Enabling of bearer rejected, failed to enable media [ 352.883444][T19600] netlink: 'syz.5.3829': attribute type 1 has an invalid length. [ 352.895656][T19600] netlink: 'syz.5.3829': attribute type 2 has an invalid length. [ 353.013529][T19606] ip6gre1: entered promiscuous mode [ 353.019228][T19606] ip6gre1: entered allmulticast mode [ 353.051933][T19606] bridge1: entered allmulticast mode [ 353.063629][T19608] netlink: 'syz.5.3835': attribute type 1 has an invalid length. [ 353.126443][T19608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.247594][T19627] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 353.258879][T19627] netlink: 'syz.2.3839': attribute type 1 has an invalid length. [ 353.266914][T19627] netlink: 'syz.2.3839': attribute type 2 has an invalid length. [ 353.274735][T19627] netlink: 'syz.2.3839': attribute type 1 has an invalid length. [ 353.284101][T19627] netlink: 'syz.2.3839': attribute type 3 has an invalid length. [ 353.420611][ T8766] net_ratelimit: 89 callbacks suppressed [ 353.420631][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.564697][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.698903][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.825837][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.936208][ T1106] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.048228][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.115723][T19690] tipc: Invalid UDP bearer configuration [ 354.116156][T19690] tipc: Enabling of bearer rejected, failed to enable media [ 354.165848][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.355838][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.467778][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.496134][T19715] netlink: 'syz.5.3868': attribute type 10 has an invalid length. [ 354.520084][T19715] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 354.531794][T19720] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 354.597451][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.614055][ T6097] IPVS: starting estimator thread 0... [ 354.716220][T19725] IPVS: using max 30 ests per chain, 72000 per kthread [ 354.970700][T19744] netlink: 'syz.5.3880': attribute type 1 has an invalid length. [ 355.006704][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 355.048116][T19752] bridge0: port 2(dummy0) entered blocking state [ 355.054621][T19752] bridge0: port 2(dummy0) entered forwarding state [ 355.061630][T19752] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.068809][T19752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.122340][T19755] netlink: 'syz.5.3885': attribute type 18 has an invalid length. [ 355.175259][ T6345] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.194255][ T6345] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.230389][ T6345] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.249440][ T6345] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.662165][T19787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 355.924838][T19809] __nla_validate_parse: 18 callbacks suppressed [ 355.924855][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 355.950977][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 355.962871][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 355.998366][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 356.042093][T19826] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3904'. [ 356.091454][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 356.108915][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 356.118558][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 356.132287][T19809] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3901'. [ 356.154764][T19832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3907'. [ 356.396528][ T30] audit: type=1800 audit(1768606200.912:5): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3909" name="memory.events" dev="tmpfs" ino=354 res=0 errno=0 [ 356.503501][T19857] sock: sock_timestamping_bind_phc: sock not bind to device [ 356.515501][T19860] sock: sock_timestamping_bind_phc: sock not bind to device [ 356.594954][T19864] bond1: option miimon: invalid value (18446744073709551585) [ 356.602598][T19864] bond1: option miimon: allowed values 0 - 2147483647 [ 356.603046][T19872] sctp: Trying to GSO but underlying device doesn't support it. [ 356.614489][T19864] bond1 (unregistering): Released all slaves [ 356.821107][T19880] v: renamed from vxcan1 (while UP) [ 357.206789][T19901] gtp0: entered promiscuous mode [ 357.211772][T19901] gtp0: entered allmulticast mode [ 357.230802][T19901] gtp1: entered promiscuous mode [ 357.235985][T19901] gtp1: entered allmulticast mode [ 358.079530][T19955] validate_nla: 1 callbacks suppressed [ 358.079550][T19955] netlink: 'syz.6.3942': attribute type 4 has an invalid length. [ 358.201595][T19962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.202552][T19963] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 358.475935][ T3545] net_ratelimit: 34 callbacks suppressed [ 358.475952][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.646742][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.766808][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.790501][T19998] syzkaller1: entered promiscuous mode [ 358.796232][T19998] syzkaller1: entered allmulticast mode [ 358.886410][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.936765][T20006] netlink: 'syz.6.3960': attribute type 11 has an invalid length. [ 359.003040][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.116142][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.229356][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.355974][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.385295][T20041] netlink: 'syz.6.3971': attribute type 2 has an invalid length. [ 359.460040][T20041] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 359.490033][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.689943][T20059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.915700][T20074] netlink: 'syz.2.3975': attribute type 1 has an invalid length. [ 359.936231][T20075] netlink: 'syz.5.3976': attribute type 1 has an invalid length. [ 359.944204][T20075] netlink: 'syz.5.3976': attribute type 2 has an invalid length. [ 359.964337][T20075] netlink: 'syz.5.3976': attribute type 1 has an invalid length. [ 360.008532][T20074] bond1: entered promiscuous mode [ 360.013609][T20074] bond1: entered allmulticast mode [ 360.029143][T20081] netlink: 'syz.6.3977': attribute type 39 has an invalid length. [ 360.054725][T20074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.140180][T20078] macvlan2: entered promiscuous mode [ 360.158428][T20078] macvlan2: entered allmulticast mode [ 360.169768][T20078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 360.448693][T20111] SET target dimension over the limit! [ 360.972823][T20152] __nla_validate_parse: 78 callbacks suppressed [ 360.972840][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3998'. [ 361.101929][T20161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4001'. [ 361.412330][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 361.426309][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 361.434354][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 361.445368][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 361.454465][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 361.467659][T20185] Unsupported ieee802154 address type: 0 [ 361.484352][T20184] Unsupported ieee802154 address type: 0 [ 361.557630][T20185] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4007'. [ 361.851426][T20176] chnl_net:caif_netlink_parms(): no params data found [ 362.092747][T20212] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4015'. [ 362.138183][T20215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 362.207044][T20221] netlink: 'syz.6.4017': attribute type 2 has an invalid length. [ 362.221081][T20176] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.232306][T20225] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.4019'. [ 362.251255][T20176] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.259762][T20176] bridge_slave_0: entered allmulticast mode [ 362.262309][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4018'. [ 362.267800][T20176] bridge_slave_0: entered promiscuous mode [ 362.283385][T20176] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.291814][T20176] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.299334][T20176] bridge_slave_1: entered allmulticast mode [ 362.307582][T20176] bridge_slave_1: entered promiscuous mode [ 362.849701][T20226] netlink: 'syz.5.4018': attribute type 1 has an invalid length. [ 362.860731][T20226] netlink: 'syz.5.4018': attribute type 2 has an invalid length. [ 362.874944][T20222] delete_channel: no stack [ 362.972964][T20176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.990780][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4023'. [ 363.009304][T20176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.047414][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4023'. [ 363.113970][T20176] team0: Port device team_slave_0 added [ 363.150845][T20176] team0: Port device team_slave_1 added [ 363.279684][T20176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.297243][T20176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.308806][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4027'. [ 363.343189][T20176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.372882][T20176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.386119][T20176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.417576][T20176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.488348][ T52] Bluetooth: hci8: command tx timeout [ 363.517341][T10644] net_ratelimit: 18 callbacks suppressed [ 363.517359][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 363.746860][T20176] hsr_slave_0: entered promiscuous mode [ 363.753917][T20176] hsr_slave_1: entered promiscuous mode [ 363.761077][T20176] debugfs: 'hsr0' already exists in 'hsr' [ 363.767129][T20176] Cannot create hsr debugfs directory [ 363.781758][T20301] netlink: 'syz.2.4034': attribute type 20 has an invalid length. [ 363.798717][ T1110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 363.824464][T20301] netlink: 'syz.2.4034': attribute type 20 has an invalid length. [ 363.858963][ T8766] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.895035][ T8766] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.921787][ T8766] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.978602][ T8766] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.384799][T20327] bridge: RTM_NEWNEIGH with invalid ether address [ 364.539340][T20335] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 364.565966][T20335] bond3 (unregistering): Released all slaves [ 364.749429][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.868700][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.869878][T20353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.990238][ T1110] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.128617][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.246767][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.317660][T20176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.358590][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.372465][T20176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.385697][T20176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.398028][T20381] netlink: 'syz.2.4061': attribute type 2 has an invalid length. [ 365.470013][T20176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.567745][ T52] Bluetooth: hci8: command tx timeout [ 365.593241][T20398] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 365.649946][T20176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.678279][T20176] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.692089][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.699221][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.740404][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.747566][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.827127][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.963648][T20419] syzkaller0: entered promiscuous mode [ 365.972534][T20419] syzkaller0: entered allmulticast mode [ 366.065670][T20176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.114901][T20176] veth0_vlan: entered promiscuous mode [ 366.135598][T20176] veth1_vlan: entered promiscuous mode [ 366.170054][T20176] veth0_macvtap: entered promiscuous mode [ 366.181180][T20176] veth1_macvtap: entered promiscuous mode [ 366.204059][T20176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.227274][T20176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.250628][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.260694][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.272286][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.284660][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.420684][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.436533][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.484119][T16371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.500646][T16371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.566804][T20432] syzkaller0: entered promiscuous mode [ 366.572292][T20432] syzkaller0: entered allmulticast mode [ 366.590906][T20432] __nla_validate_parse: 13 callbacks suppressed [ 366.590921][T20432] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4074'. [ 366.671719][T20440] netlink: 'syz.0.4076': attribute type 29 has an invalid length. [ 366.685614][T20440] netlink: 'syz.0.4076': attribute type 29 has an invalid length. [ 366.699079][T20440] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4076'. [ 367.148036][T20467] netlink: 'syz.0.4087': attribute type 1 has an invalid length. [ 367.158650][T20467] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4087'. [ 367.173068][T20467] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4087'. [ 367.182516][T20467] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4087'. [ 367.194552][T20467] netlink: 'syz.0.4087': attribute type 11 has an invalid length. [ 367.263157][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 367.275288][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 367.294767][T20471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4089'. [ 367.296803][T20475] xt_HMARK: spi-set and port-set can't be combined [ 367.375001][T20477] netlink: 'syz.9.4091': attribute type 33 has an invalid length. [ 367.406468][T20479] bond0: (slave veth1_to_hsr): Error: Device can not be enslaved while up [ 367.464232][T20477] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 367.507126][T20477] bond3 (unregistering): Released all slaves [ 367.613865][T20494] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4096'. [ 367.647132][ T52] Bluetooth: hci8: command tx timeout [ 367.650296][T20494] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4096'. [ 367.927031][T20511] syzkaller0: entered promiscuous mode [ 367.932533][T20511] syzkaller0: entered allmulticast mode [ 367.977999][T20511] netlink: 'syz.0.4101': attribute type 23 has an invalid length. [ 368.137586][T20531] sch_fq: defrate 0 ignored. [ 368.144402][T20534] sch_fq: defrate 0 ignored. [ 368.253701][T20544] netlink: 'syz.6.4113': attribute type 16 has an invalid length. [ 368.537413][T16371] net_ratelimit: 21 callbacks suppressed [ 368.537432][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.686449][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.817060][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.959913][T20596] netlink: 'syz.5.4129': attribute type 12 has an invalid length. [ 368.967924][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.028660][T20596] bond3: option primary_reselect: invalid value (255) [ 369.049120][T20596] bond3 (unregistering): Released all slaves [ 369.110566][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.227650][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.324659][T20617] pimreg: entered allmulticast mode [ 369.346162][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.456084][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.599691][T20641] SET target dimension over the limit! [ 369.615860][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.623906][T20645] SET target dimension over the limit! [ 369.649136][T20641] vlan3: entered promiscuous mode [ 369.654297][T20641] bridge0: entered promiscuous mode [ 369.682553][T20648] netlink: 'syz.0.4145': attribute type 21 has an invalid length. [ 369.725932][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.734027][ T52] Bluetooth: hci8: command tx timeout [ 369.774613][T20652] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 369.852146][T20654] vlan2: entered promiscuous mode [ 369.872173][T20654] bridge0: entered promiscuous mode [ 369.891681][T20662] m: renamed from veth1_to_batadv (while UP) [ 370.133775][T20677] sctp: [Deprecated]: syz.0.4154 (pid 20677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.133775][T20677] Use struct sctp_sack_info instead [ 370.578774][T20704] netlink: 'syz.6.4161': attribute type 9 has an invalid length. [ 370.587386][T20704] netlink: 'syz.6.4161': attribute type 11 has an invalid length. [ 370.595211][T20704] netlink: 'syz.6.4161': attribute type 12 has an invalid length. [ 370.901750][T20738] bridge_slave_1: left allmulticast mode [ 370.946148][T20738] bridge_slave_1: left promiscuous mode [ 370.956183][T20738] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.979835][T20738] bridge_slave_0: left allmulticast mode [ 370.985513][T20738] bridge_slave_0: left promiscuous mode [ 371.000481][T20738] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.011147][ T30] audit: type=1107 audit(1768606215.522:6): pid=20743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='crgo -Hf>R͐9܈ST:@P& 1c++^cm3 s{W;hH [ 371.011147][ T30] }c*W1dCHԛYnBcWu-yA:fblǡH7͜' [ 371.120684][T20746] bridge3: entered promiscuous mode [ 371.131377][T20746] bridge3: entered allmulticast mode [ 371.559642][T20775] netlink: 'syz.6.4178': attribute type 30 has an invalid length. [ 372.186622][T20809] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 372.252937][T20815] bridge0: entered promiscuous mode [ 372.288023][T20815] bridge0: entered allmulticast mode [ 372.307874][T20815] team0: Port device bridge0 added [ 372.318607][T20809] bridge0: port 1(team0) entered blocking state [ 372.335282][T20809] bridge0: port 1(team0) entered disabled state [ 372.356115][T20809] team0: entered allmulticast mode [ 372.362830][T20809] team_slave_0: entered allmulticast mode [ 372.372736][T20809] team_slave_1: entered allmulticast mode [ 372.374727][T20822] sctp: [Deprecated]: syz.9.4191 (pid 20822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.374727][T20822] Use struct sctp_sack_info instead [ 372.407997][T20809] team0: left allmulticast mode [ 372.413110][T20809] team_slave_0: left allmulticast mode [ 372.418847][T20809] team_slave_1: left allmulticast mode [ 372.525020][T20827] __nla_validate_parse: 23 callbacks suppressed [ 372.525037][T20827] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4193'. [ 372.540565][T20827] nbd: must specify at least one socket [ 372.592020][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4195'. [ 372.774445][T20838] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 372.826104][T20838] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4198'. [ 372.857319][T20843] syzkaller0: entered promiscuous mode [ 372.862872][T20843] syzkaller0: entered allmulticast mode [ 372.953855][T20853] netlink: 'syz.5.4203': attribute type 10 has an invalid length. [ 372.994901][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4203'. [ 373.042593][T20856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4204'. [ 373.060764][T20857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4204'. [ 373.732797][T20859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'. [ 374.023347][T20864] Bluetooth: MGMT ver 1.23 [ 374.638405][T20863] vlan3: entered allmulticast mode [ 374.665448][T20863] hsr0: entered allmulticast mode [ 374.686236][T20863] hsr_slave_0: entered allmulticast mode [ 374.707236][T20875] netlink: 'syz.9.4209': attribute type 3 has an invalid length. [ 374.718300][T20863] hsr_slave_1: entered allmulticast mode [ 374.726035][T20875] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4209'. [ 374.738762][ T3489] net_ratelimit: 20 callbacks suppressed [ 374.738779][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.897315][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.007010][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.044067][T20895] netlink: 'syz.0.4214': attribute type 10 has an invalid length. [ 375.135461][ T1106] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.153573][T20912] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4221'. [ 375.188650][T20910] tipc: Enabled bearer , priority 2 [ 375.198648][T20911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4221'. [ 375.256606][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.299602][T20920] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 375.366077][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.548990][T20941] syzkaller0: entered promiscuous mode [ 375.563910][T20941] syzkaller0: entered allmulticast mode [ 375.585922][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.719488][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.839171][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.055313][T20983] netlink: 'syz.9.4243': attribute type 3 has an invalid length. [ 376.068753][T20981] netlink: 'syz.9.4243': attribute type 3 has an invalid length. [ 376.126757][ T5843] Bluetooth: hci2: command 0x0401 tx timeout [ 376.128956][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 376.490880][T21015] netlink: 'syz.2.4254': attribute type 10 has an invalid length. [ 376.501086][T21015] dummy0: entered promiscuous mode [ 376.517540][T21015] bridge0: port 3(dummy0) entered blocking state [ 376.543893][T21015] bridge0: port 3(dummy0) entered disabled state [ 376.544731][T21019] xt_addrtype: ipv6 does not support BROADCAST matching [ 376.559086][T21015] dummy0: entered allmulticast mode [ 376.567526][T21015] bridge0: port 3(dummy0) entered blocking state [ 376.573991][T21015] bridge0: port 3(dummy0) entered forwarding state [ 376.955667][T21057] netlink: 'syz.9.4267': attribute type 1 has an invalid length. [ 378.529629][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.542029][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 378.668446][T21081] __nla_validate_parse: 15 callbacks suppressed [ 378.668463][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4269'. [ 378.693189][T21085] netlink: 'syz.0.4271': attribute type 1 has an invalid length. [ 378.831584][T21089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4274'. [ 378.866095][T21089] netlink: 'syz.5.4274': attribute type 7 has an invalid length. [ 378.900346][T21089] netlink: 'syz.5.4274': attribute type 8 has an invalid length. [ 378.915932][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4274'. [ 378.992610][T21101] syzkaller0: entered promiscuous mode [ 378.999832][T21101] syzkaller0: entered allmulticast mode [ 379.233932][T21121] netlink: 'syz.2.4283': attribute type 5 has an invalid length. [ 379.250903][T21121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4283'. [ 379.283799][T21120] bridge1: entered promiscuous mode [ 379.293793][T21120] bridge1: entered allmulticast mode [ 379.303478][T21120] team0: Port device bridge1 added [ 379.309702][T21120] bridge0: port 3(team0) entered blocking state [ 379.317755][T21120] bridge0: port 3(team0) entered disabled state [ 379.324201][T21120] team0: entered allmulticast mode [ 379.336091][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4283'. [ 379.345817][T21120] team_slave_0: entered allmulticast mode [ 379.351555][T21120] team_slave_1: entered allmulticast mode [ 379.400402][T21120] team0: entered promiscuous mode [ 379.436970][T21120] team_slave_0: entered promiscuous mode [ 379.454678][T21120] team_slave_1: entered promiscuous mode [ 379.730250][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'. [ 379.756265][ T3489] net_ratelimit: 17 callbacks suppressed [ 379.756282][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.896197][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.917406][T21172] validate_nla: 1 callbacks suppressed [ 379.917422][T21172] netlink: 'syz.9.4295': attribute type 33 has an invalid length. [ 380.026365][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.148071][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.205315][T21193] tipc: Enabled bearer , priority 0 [ 380.225336][T21193] syzkaller0: entered promiscuous mode [ 380.257286][T21193] syzkaller0: entered allmulticast mode [ 380.314611][T21193] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 380.418427][T21202] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4305'. [ 380.431593][T21193] tipc: Resetting bearer [ 380.450767][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.496630][T21189] tipc: Resetting bearer [ 380.514733][T21189] tipc: Disabling bearer [ 380.565196][T21210] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 380.578074][T21210] bond3 (unregistering): Released all slaves [ 380.607988][T21216] netlink: 'syz.6.4307': attribute type 1 has an invalid length. [ 380.651359][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.664871][T21216] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4307'. [ 380.807805][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.928651][T21235] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20003 [ 380.942332][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.964502][T21235] IPVS: set_ctl: invalid protocol: 42521 224.0.0.2:20003 [ 380.973820][T21238] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 380.998576][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4316'. [ 381.018400][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4315'. [ 381.067060][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.216636][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.239696][T21255] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 381.438796][T21266] syzkaller0: entered promiscuous mode [ 381.444490][T21266] syzkaller0: entered allmulticast mode [ 381.604617][T21278] netlink: 'syz.2.4330': attribute type 4 has an invalid length. [ 381.650615][T21278] `: renamed from bond0 (while UP) [ 381.668461][T21281] netlink: 'syz.6.4331': attribute type 3 has an invalid length. [ 381.710983][T21282] hsr_slave_0 (unregistering): left promiscuous mode [ 382.464665][T21335] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 382.509081][T21335] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 382.672791][T21358] netlink: 'syz.0.4350': attribute type 23 has an invalid length. [ 383.100053][T21394] ipt_REJECT: TCP_RESET invalid for non-tcp [ 383.238731][T21406] netlink: 'syz.6.4365': attribute type 10 has an invalid length. [ 383.247194][ T52] Bluetooth: hci8: command tx timeout [ 383.698021][T21436] __nla_validate_parse: 15 callbacks suppressed [ 383.698038][T21436] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4370'. [ 383.719062][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4371'. [ 383.805888][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 383.813992][ C1] lec:lec_tx_timeout: lec0 [ 384.038020][ T1110] erspan0 (unregistering): left promiscuous mode [ 384.061275][ T1110] gretap0 (unregistering): left promiscuous mode [ 384.508960][ T1110] ` (unregistering): Released all slaves [ 384.521557][ T1110] bond0 (unregistering): Released all slaves [ 384.536244][ T1110] bond1 (unregistering): Released all slaves [ 384.640536][ T1110] bond2 (unregistering): Released all slaves [ 384.654730][ T1110] bond3 (unregistering): Released all slaves [ 384.669462][ T1110] bond4 (unregistering): Released all slaves [ 384.681598][ T1110] bond5 (unregistering): Released all slaves [ 384.789459][ T1110] bond6 (unregistering): Released all slaves [ 384.881093][ T13] net_ratelimit: 17 callbacks suppressed [ 384.881111][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 384.931803][ T1110] tipc: Left network mode [ 385.050817][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4377'. [ 385.130034][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.295903][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.328845][T21490] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4383'. [ 385.341202][T21490] block nbd0: Unsupported socket: should be TCP or UNIX. [ 385.371755][T21491] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4382'. [ 385.405727][T21491] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4382'. [ 385.538311][T21504] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4387'. [ 385.556120][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.575447][T21505] netlink: 'syz.0.4387': attribute type 1 has an invalid length. [ 385.696275][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.814510][T21520] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 385.857552][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 386.177864][T21538] tls_set_device_offload: netdev not found [ 386.187497][ T1110] hsr_slave_0: left promiscuous mode [ 386.200878][T21542] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4399'. [ 386.217634][ T1110] hsr_slave_1: left promiscuous mode [ 386.224674][T21538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4397'. [ 386.270525][ T1110] veth1_macvtap: left promiscuous mode [ 386.278346][ T1110] veth0_macvtap: left promiscuous mode [ 386.284015][ T1110] veth1_vlan: left promiscuous mode [ 386.289921][ T1110] veth0_vlan: left promiscuous mode [ 386.432268][ T1110] pim6reg (unregistering): left allmulticast mode [ 386.935124][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.042878][T21568] netlink: 'syz.0.4403': attribute type 2 has an invalid length. [ 387.059159][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.185856][ T8762] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.315863][ T6272] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.367927][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4410'. [ 387.433980][T21590] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 387.547092][T21599] netlink: 'syz.6.4413': attribute type 11 has an invalid length. [ 387.560325][ T1110] IPVS: stop unused estimator thread 0... [ 387.813716][T21614] ip6tnl0: entered promiscuous mode [ 387.846698][T21614] netlink: 'syz.0.4417': attribute type 7 has an invalid length. [ 387.958373][T21622] bond0: entered promiscuous mode [ 387.963546][T21622] bond_slave_0: entered promiscuous mode [ 387.982512][T21622] bond_slave_1: entered promiscuous mode [ 387.988619][T21622] syz_tun: entered promiscuous mode [ 387.997386][T21622] batadv0: entered promiscuous mode [ 388.004340][T21622] hsr1: entered allmulticast mode [ 388.025828][T21622] bond0: entered allmulticast mode [ 388.030992][T21622] bond_slave_0: entered allmulticast mode [ 388.036772][T21622] bond_slave_1: entered allmulticast mode [ 388.042492][T21622] syz_tun: entered allmulticast mode [ 388.050535][T21622] batadv0: entered allmulticast mode [ 388.059395][T21622] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 388.067584][T21632] netlink: 'syz.6.4424': attribute type 1 has an invalid length. [ 388.078238][T21622] bond0: left promiscuous mode [ 388.083023][T21622] bond_slave_0: left promiscuous mode [ 388.090408][T21622] bond_slave_1: left promiscuous mode [ 388.096157][T21622] syz_tun: left promiscuous mode [ 388.102133][T21622] batadv0: left promiscuous mode [ 388.192793][T21632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.219521][T21637] veth3: entered promiscuous mode [ 390.257017][ T6345] net_ratelimit: 6 callbacks suppressed [ 390.257036][ T6345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.348026][T21691] netlink: 'syz.5.4436': attribute type 1 has an invalid length. [ 390.383966][T21696] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.468536][T21691] bond3: (slave veth5): Enslaving as an active interface with a down link [ 390.502274][T21691] __nla_validate_parse: 12 callbacks suppressed [ 390.502291][T21691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4436'. [ 390.529717][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.547176][T21705] tipc: Started in network mode [ 390.552058][T21705] tipc: Node identity a2bd97fc85f9, cluster identity 4711 [ 390.574648][T21705] tipc: Enabled bearer , priority 0 [ 390.602456][T21709] bridge_slave_0: invalid flags given to default FDB implementation [ 390.631969][T21707] sch_fq: defrate 0 ignored. [ 390.691119][T21705] syzkaller0: entered promiscuous mode [ 390.699095][T21705] syzkaller0: entered allmulticast mode [ 390.705179][T21705] tipc: Resetting bearer [ 390.717690][T21704] tipc: Resetting bearer [ 391.528500][T21730] syz.0.4446: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 391.550865][T21730] CPU: 1 UID: 0 PID: 21730 Comm: syz.0.4446 Not tainted syzkaller #0 PREEMPT(full) [ 391.550888][T21730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.550903][T21730] Call Trace: [ 391.550910][T21730] [ 391.550918][T21730] dump_stack_lvl+0xe8/0x150 [ 391.550945][T21730] warn_alloc+0x214/0x310 [ 391.550963][T21730] ? stack_trace_save+0x9c/0xe0 [ 391.550989][T21730] ? __pfx_warn_alloc+0x10/0x10 [ 391.551013][T21730] ? kasan_save_track+0x4f/0x80 [ 391.551028][T21730] ? kasan_save_track+0x3e/0x80 [ 391.551042][T21730] ? __kasan_kmalloc+0x93/0xb0 [ 391.551057][T21730] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 391.551073][T21730] ? xskq_create+0x56/0x170 [ 391.551087][T21730] ? xsk_setsockopt+0x4dc/0x8d0 [ 391.551107][T21730] ? do_sock_setsockopt+0x17c/0x1b0 [ 391.551124][T21730] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 391.551141][T21730] ? do_syscall_64+0xec/0xf80 [ 391.551161][T21730] __vmalloc_node_range_noprof+0x134/0x16a0 [ 391.551209][T21730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 391.551232][T21730] ? __kasan_kmalloc+0x93/0xb0 [ 391.551255][T21730] vmalloc_user_noprof+0xad/0xf0 [ 391.551272][T21730] ? xskq_create+0xbf/0x170 [ 391.551288][T21730] xskq_create+0xbf/0x170 [ 391.551306][T21730] xsk_init_queue+0xb0/0x110 [ 391.551330][T21730] xsk_setsockopt+0x4dc/0x8d0 [ 391.551355][T21730] ? __pfx_xsk_setsockopt+0x10/0x10 [ 391.551377][T21730] ? __pfx_aa_sk_perm+0x10/0x10 [ 391.551400][T21730] ? aa_sock_opt_perm+0xff/0x1a0 [ 391.551424][T21730] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 391.551439][T21730] ? __pfx_xsk_setsockopt+0x10/0x10 [ 391.551462][T21730] do_sock_setsockopt+0x17c/0x1b0 [ 391.551486][T21730] __x64_sys_setsockopt+0x13f/0x1b0 [ 391.551510][T21730] do_syscall_64+0xec/0xf80 [ 391.551527][T21730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.551542][T21730] ? trace_irq_disable+0x37/0x100 [ 391.551562][T21730] ? clear_bhb_loop+0x60/0xb0 [ 391.551582][T21730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.551605][T21730] RIP: 0033:0x7ff8a1b8f749 [ 391.551622][T21730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.551646][T21730] RSP: 002b:00007ff8a2aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 391.551664][T21730] RAX: ffffffffffffffda RBX: 00007ff8a1de5fa0 RCX: 00007ff8a1b8f749 [ 391.551677][T21730] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 391.551688][T21730] RBP: 00007ff8a1c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 391.551698][T21730] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.551709][T21730] R13: 00007ff8a1de6038 R14: 00007ff8a1de5fa0 R15: 00007ffcfafc6478 [ 391.551738][T21730] [ 391.551749][T21730] Mem-Info: [ 391.828962][T21730] active_anon:5840 inactive_anon:0 isolated_anon:0 [ 391.828962][T21730] active_file:3469 inactive_file:40030 isolated_file:0 [ 391.828962][T21730] unevictable:768 dirty:102 writeback:0 [ 391.828962][T21730] slab_reclaimable:13393 slab_unreclaimable:126547 [ 391.828962][T21730] mapped:51719 shmem:1376 pagetables:1242 [ 391.828962][T21730] sec_pagetables:0 bounce:0 [ 391.828962][T21730] kernel_misc_reclaimable:0 [ 391.828962][T21730] free:1247061 free_pcp:15159 free_cma:0 [ 391.875189][T21730] Node 0 active_anon:23260kB inactive_anon:0kB active_file:13876kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:206876kB dirty:408kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15036kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.907176][T21730] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.940516][T21730] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.979910][T21730] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 391.998294][T21730] Node 0 DMA32 free:1080296kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23360kB inactive_anon:0kB active_file:13876kB inactive_file:159912kB unevictable:1536kB writepending:408kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:43616kB local_pcp:21112kB free_cma:0kB [ 392.032371][T21730] lowmem_reserve[]: 0 0 1 1 1 [ 392.037702][T21730] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.069873][T21730] lowmem_reserve[]: 0 0 0 0 0 [ 392.074617][T21730] Node 1 Normal free:3892588kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:8672kB free_cma:0kB [ 392.107239][T21730] lowmem_reserve[]: 0 0 0 0 0 [ 392.111978][T21730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 392.124820][T21730] Node 0 DMA32: 4204*4kB (UME) 3373*8kB (UME) 1279*16kB (UM) 75*32kB (UME) 16*64kB (M) 7*128kB (ME) 2*256kB (ME) 7*512kB (UME) 40*1024kB (U) 32*2048kB (UE) 220*4096kB (UM) = 1080296kB [ 392.150356][T21730] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 392.162245][T21730] Node 1 Normal: 181*4kB (UME) 53*8kB (UME) 45*16kB (UME) 157*32kB (UME) 38*64kB (UME) 10*128kB (UME) 4*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 0*2048kB 946*4096kB (UM) = 3892588kB [ 392.180723][T21730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.191165][T21730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.200557][T21730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.210578][T21730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.219935][T21730] 44872 total pagecache pages [ 392.224741][T21730] 0 pages in swap cache [ 392.228943][T21730] Free swap = 124996kB [ 392.233098][T21730] Total swap = 124996kB [ 392.237395][T21730] 2097051 pages RAM [ 392.241205][T21730] 0 pages HighMem/MovableOnly [ 392.246535][T21730] 425090 pages reserved [ 392.250771][T21730] 0 pages cma reserved [ 392.926198][T21704] tipc: Disabling bearer [ 392.942550][ T5842] tipc: Node number set to 658806780 [ 392.948920][T21751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4450'. [ 392.966169][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 393.063205][T21756] block nbd2: Unsupported socket: should be TCP or UNIX. [ 393.118233][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 393.227329][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 393.358953][ T6345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 393.366624][T21770] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4458'. [ 393.486035][ T6345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.347642][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.495973][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.529023][T21824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4478'. [ 395.566743][T21824] team0: left allmulticast mode [ 395.571624][T21824] team_slave_0: left allmulticast mode [ 395.590400][T21824] team_slave_1: left allmulticast mode [ 395.596032][T21824] team0: left promiscuous mode [ 395.600804][T21824] team_slave_0: left promiscuous mode [ 395.608805][T21824] team_slave_1: left promiscuous mode [ 395.614773][T21824] bridge0: port 3(team0) entered disabled state [ 395.630841][T21824] bridge_slave_1: left allmulticast mode [ 395.636981][T21824] bridge_slave_1: left promiscuous mode [ 395.646469][T21824] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.662184][T21824] bridge_slave_0: left allmulticast mode [ 395.671300][T21824] bridge_slave_0: left promiscuous mode [ 395.687917][T21824] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.815959][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.927044][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.953919][T21841] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4479'. [ 396.022285][T21847] netlink: 81 bytes leftover after parsing attributes in process `syz.5.4482'. [ 396.056667][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 396.178851][T21851] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4485'. [ 396.218711][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4485'. [ 396.248496][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 396.367011][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 396.526251][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 396.647010][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 396.739478][T21883] syzkaller0: entered promiscuous mode [ 396.755507][T21883] syzkaller0: entered allmulticast mode [ 396.775838][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 396.872963][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4498'. [ 396.934750][T21895] xt_TCPMSS: Only works on TCP SYN packets [ 397.060796][T21908] tipc: MTU too low for tipc bearer [ 397.073163][T21903] netlink: 'syz.6.4503': attribute type 12 has an invalid length. [ 397.082330][T21903] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4503'. [ 397.106065][T21909] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.515093][T21944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4513'. [ 397.602324][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4515'. [ 397.625992][T21949] team0: Port device bridge0 removed [ 400.446778][ T3545] net_ratelimit: 34 callbacks suppressed [ 400.446798][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.565895][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.675900][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.786296][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.895895][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.006175][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.086236][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 401.115902][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.226721][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.336290][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.446044][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.455902][ T4320] net_ratelimit: 35 callbacks suppressed [ 405.455920][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.576615][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.686584][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.795891][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.905911][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 406.026021][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 406.136691][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 406.245934][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 406.355847][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 406.465882][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.465984][ T3545] net_ratelimit: 35 callbacks suppressed [ 410.466003][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.585872][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.695936][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.805928][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.915939][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.025941][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.135916][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.246770][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.355863][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.465919][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.475846][ T3489] net_ratelimit: 35 callbacks suppressed [ 415.475867][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.596303][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.706000][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.826158][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.936282][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 416.046491][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 416.156184][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 416.266183][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 416.376149][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 416.486392][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.516097][ T6201] net_ratelimit: 35 callbacks suppressed [ 420.516117][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.646563][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.755899][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.866095][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.976004][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.087567][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.196088][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.306142][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.416071][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.526069][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.545881][ T8766] net_ratelimit: 35 callbacks suppressed [ 425.545900][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.665850][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.775861][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.896221][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.005874][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.115868][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.225865][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.335869][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.446139][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.555877][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.685890][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 430.595940][ T6201] net_ratelimit: 35 callbacks suppressed [ 430.595959][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.715839][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.826009][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.935967][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.055910][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.166083][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.275879][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.385873][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.496118][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.605911][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 435.706278][T10644] net_ratelimit: 36 callbacks suppressed [ 435.706297][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 435.825843][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 435.945876][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.056667][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.166352][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.285963][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.395860][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.505982][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.615926][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.735917][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.927317][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 439.970595][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.979762][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 440.716184][ T8766] net_ratelimit: 35 callbacks suppressed [ 440.716204][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 440.836113][ T3545] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 440.947664][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.056982][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.166068][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.275999][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.386794][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.499042][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.615841][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.725896][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.985895][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 444.993916][ C1] lec:lec_tx_timeout: lec0 [ 445.826883][ T6201] net_ratelimit: 36 callbacks suppressed [ 445.826902][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 445.946162][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.055995][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.175972][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.286741][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.395909][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.506588][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.616255][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.725911][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.836158][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 450.208742][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.946558][ T6201] net_ratelimit: 36 callbacks suppressed [ 450.946577][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.065946][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.185913][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.296180][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.407858][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.516194][ T6201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.626141][T10644] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.745894][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.855908][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.965975][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 452.287784][T21962] Bluetooth: hci0: command 0x0406 tx timeout [ 452.287791][ T5826] Bluetooth: hci2: command 0x0401 tx timeout [ 455.955911][T16371] net_ratelimit: 35 callbacks suppressed [ 455.955931][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.075870][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.185845][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.295845][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.415855][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.526042][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.635837][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.745843][T16371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.855840][ T8766] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.965846][ T4320] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.887645][ T31] INFO: task syz.7.3206:17521 blocked for more than 143 seconds. [ 457.895395][ T31] Not tainted syzkaller #0 [ 457.900372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.909094][ T31] task:syz.7.3206 state:D stack:26224 pid:17521 tgid:17520 ppid:7448 task_flags:0x400040 flags:0x00080002 [ 457.922642][ T31] Call Trace: [ 457.926057][ T31] [ 457.928997][ T31] __schedule+0x149b/0x4fd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 457.933530][ T31] ? __pfx___schedule+0x10/0x10 [ 457.938513][ T31] ? schedule+0x91/0x360 [ 457.943296][ T31] schedule+0x165/0x360 [ 457.947773][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.953243][ T31] __mutex_lock+0x7e6/0x1350 [ 457.958122][ T31] ? __mutex_lock+0x5bb/0x1350 [ 457.962907][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 457.975835][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.984364][ T31] ? stack_trace_save+0x9c/0xe0 [ 458.004653][ T31] ? stack_depot_save_flags+0x33/0x810 [ 458.035821][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 458.041241][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 458.105788][ T31] ? __alloc_skb+0x204/0x3a0 [ 458.110423][ T31] ? netlink_dump+0x1b7/0xe90 [ 458.115111][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 458.136060][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 458.143174][ T31] ? genl_rcv_msg+0x5da/0x790 [ 458.155776][ T31] ? netlink_rcv_skb+0x208/0x470 [ 458.160744][ T31] ? genl_rcv+0x28/0x40 [ 458.164896][ T31] ? netlink_unicast+0x82f/0x9e0 [ 458.195783][ T31] ? netlink_sendmsg+0x805/0xb30 [ 458.200746][ T31] ? __sock_sendmsg+0x21c/0x270 [ 458.205608][ T31] ? ____sys_sendmsg+0x505/0x820 [ 458.235922][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 458.240803][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 458.255874][ T31] ? do_syscall_64+0xec/0xf80 [ 458.260573][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.286679][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 458.293623][ T31] ? rcu_is_watching+0x15/0xb0 [ 458.305837][ T31] ? trace_kmalloc+0x1f/0xb0 [ 458.310449][ T31] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 458.326024][ T31] ? __build_skb_around+0x22d/0x3c0 [ 458.335822][ T31] genl_dumpit+0x10b/0x1b0 [ 458.340255][ T31] netlink_dump+0x6e4/0xe90 [ 458.344781][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 458.368301][ T31] ? genl_start+0x499/0x6c0 [ 458.372834][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 458.386265][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 458.392392][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 458.398695][ T31] ? genl_get_cmd+0x496/0x910 [ 458.403380][ T31] ? __pfx_genl_start+0x10/0x10 [ 458.408293][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 458.413228][ T31] ? __pfx_genl_done+0x10/0x10 [ 458.418038][ T31] ? __dev_queue_xmit+0x280/0x3100 [ 458.423154][ T31] genl_rcv_msg+0x5da/0x790 [ 458.427719][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.432740][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 458.439298][ T31] ? __asan_memcpy+0x40/0x70 [ 458.443896][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 458.449338][ T31] netlink_rcv_skb+0x208/0x470 [ 458.454094][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.459152][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.464439][ T31] ? genl_rcv+0x19/0x40 [ 458.468714][ T31] ? down_read+0x274/0x2e0 [ 458.473139][ T31] ? genl_rcv+0xd/0x40 [ 458.477224][ T31] genl_rcv+0x28/0x40 [ 458.481185][ T31] netlink_unicast+0x82f/0x9e0 [ 458.486042][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 458.491325][ T31] ? __alloc_skb+0x198/0x3a0 [ 458.496665][ T31] ? netlink_sendmsg+0x642/0xb30 [ 458.501630][ T31] ? skb_put+0x11b/0x210 [ 458.505899][ T31] netlink_sendmsg+0x805/0xb30 [ 458.510650][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.516036][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 458.521074][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.527011][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.532488][ T31] __sock_sendmsg+0x21c/0x270 [ 458.537440][ T31] ____sys_sendmsg+0x505/0x820 [ 458.542211][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.547582][ T31] ? import_iovec+0x74/0xa0 [ 458.552072][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 458.556781][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.561976][ T31] ? futex_wait+0x285/0x360 [ 458.566546][ T31] ? __fget_files+0x2a/0x420 [ 458.571140][ T31] ? __fget_files+0x3a0/0x420 [ 458.576802][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 458.581759][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.587438][ T31] ? rcu_is_watching+0x15/0xb0 [ 458.592196][ T31] do_syscall_64+0xec/0xf80 [ 458.598327][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.604404][ T31] ? trace_irq_disable+0x37/0x100 [ 458.609733][ T31] ? clear_bhb_loop+0x60/0xb0 [ 458.614422][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.620367][ T31] RIP: 0033:0x7f7fd798f749 [ 458.624769][ T31] RSP: 002b:00007f7fd87b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.633247][ T31] RAX: ffffffffffffffda RBX: 00007f7fd7be5fa0 RCX: 00007f7fd798f749 [ 458.641251][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 458.649237][ T31] RBP: 00007f7fd7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.657239][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.665203][ T31] R13: 00007f7fd7be6038 R14: 00007f7fd7be5fa0 R15: 00007ffe39005a48 [ 458.673200][ T31] [ 458.676359][ T31] [ 458.676359][ T31] Showing all locks held in the system: [ 458.684111][ T31] 1 lock held by khungtaskd/31: [ 458.722534][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 458.745870][ T31] 2 locks held by getty/5585: [ 458.750566][ T31] #0: ffff88814dc150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 458.775839][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 458.795812][ T31] 2 locks held by kworker/u9:3/5831: [ 458.801108][ T31] #0: ffff88802571c948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 458.835795][ T31] #1: ffffc9000407fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 458.857608][ T31] 4 locks held by kworker/0:3/5842: [ 458.862831][ T31] 3 locks held by kworker/0:8/6097: [ 458.885865][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 458.905718][ T31] #1: ffffc9000570fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 458.928099][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 458.955865][ T31] 2 locks held by syz.8.1821/12749: [ 458.961090][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 458.986815][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 459.008795][ T31] 1 lock held by syz-executor/13599: [ 459.014163][ T31] 3 locks held by syz.7.3206/17521: [ 459.019590][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 459.038307][ T31] #1: ffff88802a3ff6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 459.076640][ T31] #2: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 459.087489][ T31] 2 locks held by syz.1.3309/17901: [ 459.095538][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 459.106132][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770 [ 459.116843][ T31] 3 locks held by syz-executor/18095: [ 459.122200][ T31] #0: ffff888075be0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 459.132144][ T31] #1: ffff888075be00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 459.141856][ T31] #2: ffffffff8f4843c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 459.152466][ T31] 3 locks held by syz-executor/18675: [ 459.157907][ T31] #0: ffff888043d18ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 459.170670][ T31] #1: ffff888043d180c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 459.180412][ T31] #2: ffffffff8f4843c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 459.190486][ T31] 3 locks held by syz.4.3695/19164: [ 459.195676][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 459.203878][ T31] #1: ffff8880789bb6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 459.214556][ T31] #2: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 459.225032][ T31] 5 locks held by syz-executor/20176: [ 459.230401][ T31] #0: ffff888029d9cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 459.240333][ T31] #1: ffff888029d9c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 459.250014][ T31] #2: ffffffff8f4843c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 459.260134][ T31] #3: ffff888041668338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 459.269510][ T31] #4: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 459.280778][ T31] [ 459.283125][ T31] ============================================= [ 459.283125][ T31] [ 459.294280][ T31] NMI backtrace for cpu 1 [ 459.294297][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 459.294316][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.294326][ T31] Call Trace: [ 459.294333][ T31] [ 459.294340][ T31] dump_stack_lvl+0xe8/0x150 [ 459.294365][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 459.294389][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 459.294416][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 459.294447][ T31] sys_info+0x135/0x170 [ 459.294466][ T31] watchdog+0xf95/0xfe0 [ 459.294492][ T31] ? watchdog+0x20a/0xfe0 [ 459.294521][ T31] kthread+0x711/0x8a0 [ 459.294545][ T31] ? __pfx_watchdog+0x10/0x10 [ 459.294565][ T31] ? __pfx_kthread+0x10/0x10 [ 459.294588][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.294604][ T31] ? __pfx_kthread+0x10/0x10 [ 459.294625][ T31] ret_from_fork+0x510/0xa50 [ 459.294644][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 459.294658][ T31] ? __switch_to+0xc9e/0x1480 [ 459.294683][ T31] ? __pfx_kthread+0x10/0x10 [ 459.294705][ T31] ret_from_fork_asm+0x1a/0x30 [ 459.294741][ T31] [ 459.294748][ T31] Sending NMI from CPU 1 to CPUs 0: [ 459.415608][ C0] NMI backtrace for cpu 0 [ 459.415623][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 459.415639][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.415649][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 459.415676][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 61 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 459.415689][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 459.415703][ C0] RAX: 000000000021c34d RBX: ffffffff8197149e RCX: 0000000080000001 [ 459.415714][ C0] RDX: 0000000000000001 RSI: ffffffff8d793695 RDI: ffffffff8bc086e0 [ 459.415725][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 459.415739][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822e70 [ 459.415751][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 459.415761][ C0] FS: 0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 459.415775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.415785][ C0] CR2: 00005593ff9b1f40 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 459.415800][ C0] Call Trace: [ 459.415805][ C0] [ 459.415811][ C0] default_idle+0x13/0x20 [ 459.415828][ C0] default_idle_call+0x73/0xb0 [ 459.415845][ C0] do_idle+0x1be/0x4d0 [ 459.415864][ C0] ? __pfx_do_idle+0x10/0x10 [ 459.415880][ C0] ? do_idle+0x4af/0x4d0 [ 459.415897][ C0] cpu_startup_entry+0x44/0x60 [ 459.415913][ C0] rest_init+0x2de/0x300 [ 459.415931][ C0] start_kernel+0x381/0x3d0 [ 459.415949][ C0] x86_64_start_reservations+0x24/0x30 [ 459.415970][ C0] x86_64_start_kernel+0x143/0x1c0 [ 459.415990][ C0] common_startup_64+0x13e/0x147 [ 459.416018][ C0] [ 459.418702][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 459.418719][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 459.418738][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.418748][ T31] Call Trace: [ 459.418756][ T31] [ 459.418764][ T31] vpanic+0x1e0/0x670 [ 459.418791][ T31] panic+0xb9/0xc0 [ 459.418810][ T31] ? __pfx_panic+0x10/0x10 [ 459.418832][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 459.418854][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 459.418881][ T31] watchdog+0xfdf/0xfe0 [ 459.418908][ T31] ? watchdog+0x20a/0xfe0 [ 459.418936][ T31] kthread+0x711/0x8a0 [ 459.418960][ T31] ? __pfx_watchdog+0x10/0x10 [ 459.418981][ T31] ? __pfx_kthread+0x10/0x10 [ 459.419004][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.419021][ T31] ? __pfx_kthread+0x10/0x10 [ 459.419042][ T31] ret_from_fork+0x510/0xa50 [ 459.419061][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 459.419077][ T31] ? __switch_to+0xc9e/0x1480 [ 459.419104][ T31] ? __pfx_kthread+0x10/0x10 [ 459.419125][ T31] ret_from_fork_asm+0x1a/0x30 [ 459.419161][ T31] [ 459.707062][ T31] Kernel Offset: disabled [ 459.711365][ T31] Rebooting in 86400 seconds..