last executing test programs: 4m59.989692069s ago: executing program 4 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) write(r3, &(0x7f00000006c0)="a884a500", 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xcc21, 0xd, @loopback, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff8100cc210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x521, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x8020, 0x32d, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000100) 4m56.912338607s ago: executing program 4 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 4m56.689938064s ago: executing program 4 (id=1834): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000380)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}}, 0x4008000) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='1~\x002', @ANYRES16=r3, @ANYBLOB="000229bd7000fddbdf2509000000080001000100000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4044881) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m56.381779919s ago: executing program 4 (id=1838): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r2, 0x3) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c815}, 0xc000) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m56.085924492s ago: executing program 4 (id=1844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x48c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x448, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x135}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0x5a, 0x6, 0x1, 0x0, "fe628bf8365ccf57dce0ef845d12b7672e0fc023b80b90344763b34e2788fbd0f684394c2e5db30c447ba3870eb0c129280c5de8ee045869082d34f3b41dbed1269f725228027b764786620a052f9616d1c5e517b323"}]}, {0x370, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x228, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x44, 0x1, "2adeb7e7212d4d3413744d2cdfdef2443cb86f04d55cc9a71f2febadaf92819c8073fe2c79426367f191b6a1c25fc34f65e3a3c4ad28b260706c0b1f17b4d7e0"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x28, 0x1, "2cb4f6bf2fa9c1f35ee5bbd35df7c123d7d87632b362c7c374e12e635d13bc09d49c3f9d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x71, 0x1, "5d2f596a3b0e2bc20c2eee047d1673cdafe2b17cdd8849bf19fd2e71d13e33fe4cb6bd86f77c97f72ed22f41f3c7cd8e5fea3c9bc9dd4227e721d4e40b7bad035abc74235a675b2704b33c900b1f485257c64bdb48fa79168c4d4fa7b7c78c3e8d1fed0cb4225b4823097bb4a7"}, @NFTA_DATA_VALUE={0x4d, 0x1, "d67c85f19f028939aa586b13b6494e848abfbc9bb866f34d34fcf6a5749dc39ee595b1bdd623190c9fee7480546e088e3fcf767cbdee18e19dd6511f1584d3795d8d0105a8aca73e7a"}]}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x77, 0x1, "c6bb493c7754952fcc32a40dfd45e3370658954017173dd783967cd37013607b9a4adabc29d5bab9e9e005e33536061eca849d379f763c803180bba2d3964466d8d9b901af6e552095dce98117879f6fc2424654aab763ebee9c80ed044125dbb26d4b9595cc9d167864f128f5e723cec520cc"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "83351a72b1546065c902e381c10f7b61326801dda2d075ab"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0x510}}, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x24}}, 0x0) 4m55.851631712s ago: executing program 4 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000009c0), 0x9) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000240)={'some', 0x20, 0x9, 0x20, 0xd}, 0x2f) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4070, 0x4) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xfffffffffffffedd) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000008000000000000000d0000008500000030000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1040}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m40.783104838s ago: executing program 32 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000009c0), 0x9) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000240)={'some', 0x20, 0x9, 0x20, 0xd}, 0x2f) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4070, 0x4) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xfffffffffffffedd) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000008000000000000000d0000008500000030000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1040}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.291680766s ago: executing program 5 (id=2903): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}], 0x58}, 0x0) 2m41.164732302s ago: executing program 5 (id=2905): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffffffdbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB="60002f8008000100000000000c0002000202aaaaaaaaaaaa480003800800040091f60000340003800800020001000000060001000000010008000200020000000800020002000000060001000000000006000300a2aa000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 2m40.852160173s ago: executing program 5 (id=2907): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2014, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x11, 0x1, 0x0, 0x0, @str='hmac(sha224)\x00'}, @nested={0x1fe8, 0x2, 0x0, 0x1, [@nested={0x1fe1, 0x115, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @fd=r1}, @generic="93b49d122089aa5cd8eeb1fda67d4dfd4ab9a8d55db84e7770400dfe5ed75c10e8be1fc74faa7b8c1391fb38fc3b03d80c058bceb287de9486234fa9efbae55f1fd27ff435e342053c58f097eedbac998d380351221ad6f12969bc967ae7ac46367897431bf74a829ca8652dad0cb2f735c94bbd4d648ae3e979f0bb526d04", @generic="6edc672d9cd96f3b2607e02a620bfc6ea9415d61010fdf7af793175544cb", @nested={0x1f38, 0x72, 0x0, 0x1, [@nested={0x1f34, 0x2a, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1f1d, 0x6a, 0x0, 0x1, [@nested={0xa5, 0x9e, 0x0, 0x1, [@generic="4e4e37c92a1ecf1516ad851af6d284a04586ed0f3dca543de74e7e5a1fcbe0219fffa15243ba28d8c81542fc6e06fade13bb76b5c31544393f1a0ac1988d353a0c86dd212d55d6688b5610a79367036a2c46432e047afb0622c48e91a6f689b21df7a6c963a6ab961fe371325be77d6d3e9080d1df27de2a518475bf82d40e6f23baa575b71df7ed0d2cb573dc2d95b70b", @nested={0x4, 0x133}, @generic="8542a91b8f9b49bc4e7ea924"]}, @nested={0x1dd, 0x146, 0x0, 0x1, [@nested={0x4, 0xe4}, @nested={0x4, 0x56}, @typed={0x101, 0x46, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x7a, 0x0, 0x0, @uid}, @typed={0x8, 0x36, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x81}, @nested={0x4, 0xad}, @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="0c01640cfa781ca995a0b371eb38fae34acd86ec4d70e7af3abeb0f40a014cfb1e050add329df51fc5f1879bc8b920feeb619e3c90f85c199e5e989b4a6ed5f304f244d477d8d927aa824ae1e42daa169fa755ee97e94bced92650d416fb9aa508e91c3c30b57b51db27458be4a61dd39b6d63e321328c8ca0bc389439984d2e6ebede5a7e968085f0ae73ef52b18a8750973ffde6368d64aeb2d4273e36d67f0bb0e77b560b00a44f0055d818"]}, @typed={0x81, 0xe3, 0x0, 0x0, @binary="35749a650f5713d2428393332304f25e5550c4a8d7ea6e485af8a35a3b253814167368d04ba626ef1204ddfeb84bf845e7949abe0b158ed55d424510e2711080a4a6e99e77313b0b7198eb76a883e87b879769563a8f0ad7276368225d932d8144dac8341f77e97dbbba58ac2e0fe2c167b68297f8c1edd03bad1eb12e"}, @nested={0x29d, 0x7f, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="6aa2105139fe0e91a9e59514b4689a52d323f2fd06a70bbacb79394922a1022d340f4dd22f96cde5f857e22bd79ff44afd15ff3d512b454ec118236ad5120641627e8fd878c1a03befe0d0272e6aa2543effbfb48b88a425b5d9af5368bb9b604ac8ac8f258d60b24e9b750ffe74b7c66efea7091e328cdfa4e8199664e13b3a8b3dbfcf0ae6c5c276d14ad6a38e6f782aa6a2527de4419cae90c9cda3b771a75fbc20b3bffc17e033f53534eccbbe2c04ab9059e030c69434654839ee7bf6892c5520498abb960b40797b3639ff3fe2e7db261dabad65db7d44", @nested={0x4, 0xc4}, @generic="f567bdfe4859a05de4fe15c45d00af1413aad3818def9b5070e83d235159385aaf4804fbb1d81c40466f0a56823d72f8f2dc776b8262254f498c91d3e70808f306d8d083177cc09721f22596e89be9b7ccd05af51ebcd0fc0ee95cae9b87c0003953b45cf8e2aeec2debe4c870bda56cb6db9736bebe17b5712d645094ca86234a2d9ff5eb841e36ed3c720e3774ccab344ebbff5930300043672b363b43b680ba4d63c67414fa62c12a39b1ae21bb714d130d1147bdda1cd426dd7aca91b4bac0a75e774423afb716f66011f8cb2ceef60588c5888b59c0b2444d2c7bd916a460fa43bd5b0c30fe8abc505913a8", @generic="b31764e97e93f8e23d23015e31c220ceabc8ebf0f243c53c8645a47955dbb989b473d28c1db6e3a2f4e187d4dea556fdb12105bc9961343ce791c00ccce0d0c30682930588007fa868cd9d8403824cc127fbef55ff1ee0a7f6bba1", @generic="be769ed09270e8b76db5d2214631301f1a520e174d61495517452a5c0ce05787fc03d1f892001c7f8856d0fc36026fcc36159c71aceb27586988942062573bd640eec367e9178d864b6bfc89453dce41b1a38b30e7d7f8257bfe5966688867890542d271ce9c861a3bc43fb91229"]}, @generic="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", @generic="d57bf719a841a873f04b062b3c978a0b9e804cbfd15fb763c9c5543f096e3d13c17e4c407f656f2890fc7c9c367e539209873b10b14d9a225da926f7ce4e38ada863bddf511e165a5aabaae0b801c000f3d46722312dcc97e7678406ada085ebb5fef41a28a3f3d9364cfd5af0301a21347150c2467d3efd037c73b54d3ff59566b365d6f7054c2000f51b67d192dace8ffa18bdc0bddc030c16651d677c755fac124400635195dd6ad057ff179ed37b5658ed37076cf54cf630445de1b28cb3e2086e4aafeb5c94ccecf5140c7aa7eecad822a06b553c53041fbffa161f116c1283b2d40a574c339af5c13c3bef592588565cf0c3a66ae58a09f913a6d5da80ec5eae7cf6c9eeb3c672a6b12c6dd5526130b898b6317032ee661ea34c84490da6149bf0119be429b60c28bac879565956da6f8950bace96cadcb05566c56a35ef9710b9a3b8ad095e212041027b15d5489296c2b8a2efe8345107884bfa9ad06b331c4dd30790e1ec9afd0470273bd248ca678a3ebcb1909177d934f246af7213cd51592a243a51dd870454958a09dce72eda39d8477c04712860975e74a2c7cd89b1c44a167dc830185b28963c7a8d773709d9e454b3ff4ede5cc9903ba05ce565b4cca32e4b15005cb2d540ae1bbbdaa2247f5fd39a8a3e4be66b7f2e49aadf6e08d8393c4ee863dcafb6a737a21decbf94897ce824ee401cadaf08fa14614613facfa34ea677baac88d3c3475947f6bb398144fba51db64d11eba3867cd5cde879ca234f608a1fe3fbd4320e937b3abe91b057aae0953ed3f1dd69f7ab71fd68e25326a3a90f52ad3f75779c472e9ba5d966c851e9bcde1f0542c8f6adeb5140ab3e036016e0343a7c4420d5063950b8f3edac8b6a59a740d90773ad3bfc50940ae7f0aee5428c0d1410b346d9b9f94edd02a7c44698fa047ed3a2ce38b13fa50d2c57efa1d7b01c0818981e75969c34ace2f217ae6430b41e09c81b28308b6c52317cd72de94c4c394cfaaa5cd4cd3627fb4ae12b4e917412ff153543816f40781b85abf49b8059b2b7fe59fcd8a4f82cc996153f5affc9f917321c964e3031bff8db12c58fbf981bc54ddc766aba334b023c999b9ca8fe0a6a8650fa3c506505e86ca090720aac611e654a7546adef89e41f60a364aadedd12f4447ba6ffec939c07a4dd7a8aff0f2cccc31d33c75a58a5fa908934194bc0e64b521d348d4921d030b605b02f84d131af9e480f1c0ad862707493044752dec9c969e3ac4deca9058991b42166cffba180c90692d6bf1e5ba1bf44af1f3d627ad51e7cc850090881bb55cea5b91b45814eb8a48143d668c5cf47d7d528b7a4541333eee0cab98180ea82f89afe2db88e3103ed70faf3f790ee2e67bf6126802b92aa1d70a11e90521f843309d696c8a88a1e122bb04a79516202b065c3e0f0102ba121ca6255bc76e013de70735af19054adaa0e85390aa44c8e12146e1b61ac00ee385bd06f00ee3087ae9bf95ad44b18a10cd5de74e565bc072bcebdf018e14caff455b5b6c7c2216e4907405a9484499661686593750f852c921e9738af1827e1256347c22afbf4a00843e0a21e842da49a14efc6cb66ccd6d4bcfd406f74b82b7315f895d4fcb2d0ffb2e7432710d85ce51d6bde9c00af6926f3f557ac64992c3a04fab81344ff4ace965c5eb2da171d4d176d2970d0d3a412acc4be5d0e77fca3f5c2ef146c26e6270b10a5fbc52a196c3f98bda62e0c54dca0dad7352b3c6cff3e0405dbe73ed370f4cd753634726c6316be7f213717661c2d0e55696a76c3cf51d0be77d14004d96082ccf9892fa137befe0f38ae8d8e770e249164baac7cdd357bd86b877b7a785e60a7675b575cc30691f86a4ad05cd63f0f0b5ae9815c237b1657906a11b1a2ab276fa7163b4988984ee17f5dd860c948d03a71c7a0e0e59299258c51214abc51b6b3fdfdf59d4be09792c466958f3cb042eb0ca5d428e1ea79f5af37065c48df685f5fd5bf2d722104817af45d5535a990c4551b555303e509ff7ba4a48de4b1f305847928b760025e535e0dd5887fe8e21d44fd2d3451da618ffaa186d854413196f00dacbf0cbfff9a5185e0b9ea6e5dee6ec42f0dc6b92b41c230bfc176436fd579b5f443ffd6fe22617da783838f3130f00b52ee34b320c701dc8de50bd64953d6b8231a4412273884461818da021827200cbc1d8202777f9022318628753cdd2095bd9aedd829726859b6e339da84e0d3fa0674cc6525214a8acf0366acd5d8b4e5079388d4c58fa8f36dc117658b1880d3b75c13eaee0a586070b7d13ca3c2cbc5744aef6bcba4c9d8e0335e2a6c185ffdec2ef91b4f9780f4ee432b350b17362547e0fdbf5f5e5a6c3e322a05cf8040ab85b38327d8cc449b62a65c760325499fb2b7bb68797f0e00d137ab7beaa21dab5a4e1ba7c4894f52aeddcc5f8a01a272a2c74841a12cf5c6775b945282a10ba83920d40555d3970356df6bd2b185ff4621152a3298c842729ae6b46b9b1c3a13e22f47fa8e116760c87519e0eee40a07289f06a1dd9197d4819f91d095a7614db5c71006023ca4aa2c4023eba713ec4a26285d1bc01ead9c770e26034d71095d02bdd8f1de055aa72d26d7064fba144566698b8be5465961f1ec3174023e432aa8d7e458933d61e9f84621993185a1af75ef1b11fa27b9e6eee8c5f6ce077c774251806a43362b45525992bed2d474b65aaf348b13bae25051c4823a416601b7826a5c1316efc96b1ee1dd527577977bf50d4cd109572a1dfc2bef2cb075ecea7f9749558e05d0304b8e88622ee7a01249a62eb23a88efe4e1eb8e0f4b97a6779a83b2c1365164fc23bf3afdb1e176cad6ab41d987cfc8f4588b88fc9706a0549a24fa3331136de7007e98a7701f9663ca4332a64ded1f3ce9475efcfd33e2373b7a7a6731d7321eadd6e0c36785b40e0dc28610a153c1856317ae81da15d81c57ece2885c834e6c5dee5196d9c627fea00194d6143f82012ab0b609363fc667349a1dab52e623e746fdc27ac7d8f76645ecea0b9117837901d24839c052915ecdf7f192918b4aeb6d175e01d3ef9d3a112f2aaaddac90e1288b33169fa5ce7a2b26145aad5e44b154b7715812f54b084a0a3f22a3bfe2362d3546696bf54b4fd809f83adc62b89bd4cd6793ee7b3b60356f0314f957ddb064a9b9f47a8de58c4142c27d4abb7ddd280c209a2681bced589843112091bea32f4ec50a7ef28dfb7d5ad219a6cc6a2a9bb5018b21e0a5520c568d73b240143f1eabf9824a8ecbf1b2e6ebf62f9d3fcd1ab6a7e8fda0a685ff84bc1b94279eaa7942286264722eed2ee2c7dce338571764cfe95f06d95cfa31821f7a519ff5e853125aedb314da092de7fb22e77ca04a774490a5ee4147ef07"]}]}]}]}]}]}, 0x2014}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2m40.665517012s ago: executing program 5 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20010084}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a318000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) 2m40.607129687s ago: executing program 5 (id=2911): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0022050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f616400240002800800034000000092030002400000000408000440000000e908000140000000110800034000000002080002400000008408000140000000eb0800020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m40.384793379s ago: executing program 5 (id=2915): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x100000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0x20) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000050002000a00000004000500"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000402000004000180d90c4fa2ea0c37b6dbd17ce5d739e43cf2228301f65e5c30ffe65610bd5828206df92f870628a90cb6e3b1a679a98b5103a15c43e70c57fbe42f998c5b51ad60ae4b2843931b13a27abc8df7bfcecdf12ae23d85d1ee52e392b1f230c2d8b3c5b44e08f8f4899285fef5923ba955428525aec14a0b3cf0819429650f2aafb15c9cba46d84a0c985030ea263b342acf7707ae70d85bb1ea3c8dde321f1272b81f5c26df6716e0b727de6681d056803ee0903d1c28cc8029da844e691f6754a6be79b73840d8a43ea7ca34bb48e0843f7f08fa4c21694ef6584ec3d7"], 0x18}, 0x1, 0x0, 0x0, 0x400c005}, 0x4008090) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000080)={0x1, 0x2, 0x40, 0xff, 0xffffffff, 0xb}) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffdfff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000004) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153) 2m23.700717406s ago: executing program 33 (id=2915): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x100000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0x20) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000050002000a00000004000500"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000402000004000180d90c4fa2ea0c37b6dbd17ce5d739e43cf2228301f65e5c30ffe65610bd5828206df92f870628a90cb6e3b1a679a98b5103a15c43e70c57fbe42f998c5b51ad60ae4b2843931b13a27abc8df7bfcecdf12ae23d85d1ee52e392b1f230c2d8b3c5b44e08f8f4899285fef5923ba955428525aec14a0b3cf0819429650f2aafb15c9cba46d84a0c985030ea263b342acf7707ae70d85bb1ea3c8dde321f1272b81f5c26df6716e0b727de6681d056803ee0903d1c28cc8029da844e691f6754a6be79b73840d8a43ea7ca34bb48e0843f7f08fa4c21694ef6584ec3d7"], 0x18}, 0x1, 0x0, 0x0, 0x400c005}, 0x4008090) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000080)={0x1, 0x2, 0x40, 0xff, 0xffffffff, 0xb}) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffdfff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000004) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153) 2m18.021659066s ago: executing program 0 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400101a0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, 0x0, 0x3, 0x301, 0x70bd28, 0x25dfdbfc, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) 2m18.014370041s ago: executing program 0 (id=3054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0xa, 0x0, 0x1, 0xc8, 0x0, 0x1000}, [@RTA_UID={0x8, 0x19, r2}]}, 0x24}}, 0x24008800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x1c, 0x16, 0x1, 0x70bd29, 0x0, {0xa}, [@nested={0x5, 0x108b, 0x0, 0x1, [@generic="11"]}]}, 0x1c}}, 0x0) unshare(0x400) r3 = socket(0x15, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000380)={r5, 0x101, 0x1, 0xd, 0x5, 0x7ec, 0x8000, 0x8, {0x0, @in6={{0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}}, 0x8000, 0x2eb3, 0x0, 0xe, 0x2}}, &(0x7f0000000440)=0xb0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x1, 0x3e42, 0x407ff) socket(0x8, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) r10 = socket(0x18, 0x80000, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0xca, 0x0, 0x0, 0x1, 0xffffffff}}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000001c0)=[{&(0x7f00000005c0)="afc356bf9b", 0x5}], 0x1, 0x2) 2m17.932795699s ago: executing program 0 (id=3059): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x3, 0x79, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x200000c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0xffffffff}, 0x50) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, 0x0, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x385540, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$key(0xf, 0x3, 0x2) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="202700002c0007012bbd7000ffdbdf25047c0000280301802103dd802001e98008004600", @ANYRES32, @ANYBLOB="1401ba80040079800400c180d15806e759d3c3f646a8da9670688629e2bb6399b4987b58df9f74930c23deafc677fe2aa5a6b67e2adacde02ec5b5e461115f3288ae4ac28cca1c9b2996f76f1025c2a5d1a26a1ad57dfcd4650286dbf5cf7b1105042b41f72d0391157514cc9b360f3395a70ee8ed5ed190270e6c43fbc6e61fd0f65211d97c51d9496ee0d36d8ee881dd0b7c0a8319efa114f4085cd077236b3c8b1a9a5c8cb8b81a2984840f741c8816af01ea4ad03cef18e000876b332532067bca3d3c35e47b1c1b5e1c94a8731be24dbe10f3bf3cfa49b3bf76968c4cb32cc6e7af47607f9a6157e020011d9b4fd8eca028c3cb7f4d19ec78496ca01c46768c7619f9dd5d9f0c006f000400000000000000ae014180d06869f78652a94a6f6ffdbb17a5dd1b1557160bd4f80a77e454fcebc11ec2bb2b24b0a040795a213fd5528fe94f25b0714ce43829fec955021fde36b00ca70cbeb1fcbf8ebebfe9c862bbc070fe60e5aa4444ea00e5aee6c4167c7d0ce9bf2d0f8291e2875b7950372bab9c393b6ebf929dbe58b9fa8827e1113a228f7d71fb2cc418cf57f63ff3e7c97e981a7d1df5f9c232ac4848e9b9e63446b12f8b7b18c3d4f3fd2d3160e2f13b49f430fc32ea670196532a8f3e67d9899631ce431d9ef051c706ec1d66b8bfb2e9d04ec18308b4cc9c9d901935b3397b8612a6d9888e83baf346998bd00e5ce3234d5ae3ed182c4f696d4e1aa29863737f50042f5041e45ecc4b59d6043380fb234434c50036c390590f0c67e1c129eac0898d489de7995faee3d2c5ebf3290e7b98dcac4e5eead30d9dcee3189b1e13e43d1b694949b6912fe52329c61625de8aa3177545dbdf7af158748143ba9a60e4926c0888f40a61ff0f548c7a94a658dacaedf2c466f3f4e68e02fe81ee376755d69756890cce7d7ca059c94b2b10a08b52d6feb29f0e", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0x4}, {0x16}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8, 0xb, r10}]}}}]}, 0x44}}, 0x0) 2m17.284466992s ago: executing program 0 (id=3064): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x0, 0xfd, 0xff}]}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f00000022c0)=[{{&(0x7f00000000c0)={0xa, 0x4e1d, 0x1, @remote, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)="80", 0x1}], 0x1}}], 0x1, 0x24040040) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2m16.813141627s ago: executing program 0 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800835efeffffffffffffff02141004fd00fe020003000008000400", @ANYRES32=r1, @ANYBLOB="08000700ac"], 0x2c}, 0x1, 0xffffff7f}, 0x80) r3 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000019c0)={0x0, 'macsec0\x00', {}, 0x62}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800835efeffffffffffffff02141004fd00fe020003000008000400", @ANYRES32=r1, @ANYBLOB="08000700ac"], 0x2c}, 0x1, 0xffffff7f}, 0x80) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000019c0)={0x0, 'macsec0\x00', {}, 0x62}) (async) 2m16.506362109s ago: executing program 0 (id=3071): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0xffffff0e}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r0, 0x0, 0xc4276d1e) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x63}, 0xfff}], 0x1, 0x2040, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m1.653032451s ago: executing program 6 (id=3185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a090000000000000000000200000009000200000000010000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) 2m1.548681496s ago: executing program 6 (id=3187): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) unshare(0x22000400) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000377c8028850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x0, 0xbb, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000005c0), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x30, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1fd}, [@generic={0x84, 0x1, 0x1, 0x62}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b00)={&(0x7f0000000940)="5f8c48b0ee7b402201f811acba8a0bfda98665ef0c24f91e8c6a2be45cc8fbf2ff9be5c0b1f3c1aac89f7a43a5228032dfe26bbbfbcaf01d55a5deab06f237e8a7775286557ae3481b5330a89cf706e40785d239d7d944d912faefcc98d76b75eaa08752a948d53d7d556cdfbc486b950e365124f092a176ce6d5ca46cfcff969a744a9b3cbb55004690bd60e3cfb6556ac2351b2428ab6de436907a00bab2c2cf4e30b3b04f77887a2970a413c9f13d43b53bb0a9508ca5bd393ef25551429f9393255318cf4a4fb6", &(0x7f0000000a40), &(0x7f0000000a80)="f913ff6a1129d228d475b89f6d763fe4433f54552293d49ff57c6c3b75e4906a47cfa312b0aedcbb5b999eed70cb", &(0x7f0000000ac0)="4c2823bf606cb3abe4a86d5fdf45fb442b7bef70e8e88fffc102af42", 0xff, r2}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x6e, "5c76e76f6c0800000000852419aa1d46f69b1b5730dc562e94b56fbb636bbae9e3f2cf2f31d0baad16658bb4405e875950343e727be4ca05ed017ef4ac3eb7699a482b9f2b2f0811bcc09766a81b0422e6bfcc1d25df99a5973244c24ef001668eb6f7cb0f2bcd77f2d34dd8d53d"}}) r7 = socket(0x2b, 0x1, 0x1) listen(r7, 0x5) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendto(r8, 0x0, 0x0, 0x20000000, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$xdp(r9, &(0x7f0000001e00)={&(0x7f0000000300)={0x2c, 0x8, r4, 0x14}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000b40)="1c5931e6bb1a2bec4808ae270b0d827c5fd8cc9228f25526a774787999269f6b51d41e46c2d28cf4cca64fdeaccef559fd60c3bbf73e5799dbd2e67241166af4d8a43bdfb3c0012fdb62b79889d66651cb748302de45cf5d8644bb2681a6d69160b7ffd5f1ee98bce36ebd99938c502ef6e8e4f73c6ee17c79c32ec990e4f21fd0299161d98235a6b758d68ce5985c6a65848a978b2b", 0x96}, {&(0x7f0000000c00)="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", 0xfe}, {&(0x7f0000000d00)="79ff561f4133c3f314cd9e1f6f39e1bff7751fa465ce133f4817318918b45c42f799e8de", 0x24}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="d20b1c4b190e3bc739353b9dd0f5057b989513b2af3916881f5492eb267f470d8285d4bae54622b9b7d7317e2b31145f186389ae01181d1d434d", 0x3a}], 0x5, 0x0, 0x0, 0x800}, 0x24008811) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x400, 0x40, @private0, @local, 0x8, 0x1, 0x50, 0x4}}) 2m1.410713609s ago: executing program 34 (id=3071): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0xffffff0e}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r0, 0x0, 0xc4276d1e) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x63}, 0xfff}], 0x1, 0x2040, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m1.355663437s ago: executing program 6 (id=3190): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1600000000000000b40000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x151}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000002240)) recvmmsg(r1, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000540)=""/67, 0x43}, {&(0x7f0000001ec0)=""/213, 0xd5}], 0x2, &(0x7f0000000140)=""/37, 0x25}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000780)=""/103, 0x67}], 0x8}, 0xaa9}, {{&(0x7f0000000880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/147, 0x93}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/155, 0x9b}, {&(0x7f0000002000)=""/74, 0x4a}], 0x5, &(0x7f0000001c00)=""/43, 0x2b}, 0x1000000e}, {{&(0x7f0000001c40)=@can, 0x80, &(0x7f0000001cc0), 0x0, &(0x7f0000001d00)=""/112, 0x70}, 0x8000}], 0x4, 0x2021, &(0x7f0000001e80)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000001b40)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x69, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x55, 0x0, @opaque="5cf89a3eb25578c5f2ae24107d62b718b9a89142e6c7b071d0ef4e0d914d524871782d1d528960cc0db84a2d1ffae7803ba9464c119c7720d6919e83cfe4ca9a8d83629f04cf906559a1d27a69"}}}, 0x77) 2m1.009769332s ago: executing program 6 (id=3194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'veth1_to_bridge\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x9, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x0, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x204, 0x8, 0x8, r1}, &(0x7f00000000c0)=0x10) syz_emit_ethernet(0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050186dd6000000000202c00fe80000000000100000000895c578d6d584a74f9f4acbf014da500000000bbfe8000000000000000000000036c00000000000000008e0800000000061124d2632e2b3c17eca01300"/112], 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) 2m0.811801342s ago: executing program 6 (id=3197): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000000000000000000343766b5d84ed3a2a506362764d907b450a6e16759c8ac9e63905b4b72d7fb94a371384da6c36296159aa2eb2a4ca80ff07493975152f94790e019dd0700"/88, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000000000000000000343766b5d84ed3a2a506362764d907b450a6e16759c8ac9e63905b4b72d7fb94a371384da6c36296159aa2eb2a4ca80ff07493975152f94790e019dd0700"/88, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)='\fO', 0x2}, {&(0x7f0000000540)="96bc1480bb5c2598ad586b10945ae4914d93c224f137371c5944b095aaf5a30eb619fdee215c9b5e668e0ad604", 0x2d}], 0x2, &(0x7f0000000580)}, 0x48000) socket$kcm(0x21, 0x2, 0xa) (async) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000008800000000000000100100000b"], 0xa0}, 0xfc40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000600)=ANY=[], 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) (async) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0xe80, 0x0, &(0x7f0000000300)="c5dfb080cd20d308098e000086dd6b", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socket(0x1, 0x1, 0x0) (async) r7 = socket(0x1, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffffd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6c884}, 0x400c89c) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20008800) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) (async) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84080}, 0x2400c005) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) 2m0.575381013s ago: executing program 6 (id=3200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x2e) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xd0, &(0x7f0000000200)=""/208, 0x0, 0x40}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xc) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="44df000018000100e20f0000000000000200000000000019000000000600150006000000200016801c000280170002006e65745f7072696f2e6902000000000000000000"], 0x44}}, 0x44890) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) 1m45.511589413s ago: executing program 35 (id=3200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x2e) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xd0, &(0x7f0000000200)=""/208, 0x0, 0x40}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xc) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="44df000018000100e20f0000000000000200000000000019000000000600150006000000200016801c000280170002006e65745f7072696f2e6902000000000000000000"], 0x44}}, 0x44890) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) 5.245520971s ago: executing program 2 (id=4282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7c00a804e529721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0xf5, 0x0}, 0x8) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r5, 0x2, 0x28}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="a1830000000000000000050000000800030027b558007e7d0c92f994adf6f33aefd336727d166a5b4595875e97d27aa04b8a04c3fe42cd91a696446fb43e04cb1af095"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x30, r9, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x74}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xb2}, @NL80211_NAN_FUNC_SRF={0x4}]}]}, 0x30}}, 0x4000005) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48082}, 0x1) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x260d, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0xf8, 0x4, 0x7, 0x0, 0x100}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x76, &(0x7f0000000700)=""/118, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x3, 0x5f, 0xe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)=[{0x1, 0x3, 0x0, 0x8}], 0x10, 0x1}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x1, &(0x7f0000000900)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000940)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0x12, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001980)={0x3, 0x4, 0x100, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[r6, r4], 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={@ifindex, 0x2, 0x1, 0xfffffffd, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c00)={@fallback=r10, r11, 0x1d, 0x1, r12, @void, @value=r4, @void, @void, r13}, 0x20) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x5, &(0x7f00000000c0)=@raw=[@ldst={0x3, 0x1, 0x0, 0x4, 0x3, 0xffffffffffffffc0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x7, 0x4f, &(0x7f0000000140)=""/79, 0x41000, 0x20, '\x00', r1, @flow_dissector=0xe4fe1dab9c5eabd0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0x3ff, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x7, 0x1}, {0x4, 0x1, 0xc, 0xc}], 0x10, 0x400}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r14, r3, 0xf, 0x4, 0x0, @void, @value=r15, @void, @void, r13}, 0x20) 5.080076837s ago: executing program 8 (id=4284): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r1, 0x0, 0x4040000) syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 4.997449128s ago: executing program 2 (id=4286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r0], 0x44}}, 0x4040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000200)="448b7c", 0x3}, {&(0x7f0000000440)="03be9b0e06798d7d34d9b282be419e87b4b88c0e4015bf66d971220929e8c28c517103000000000000", 0x29}], 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000480)={r0, &(0x7f0000000100)='()}\xf5\x00', 0x149441, &(0x7f00000001c0)={@_ha_fsid={[0x3d, 0x1001]}, {0xd, 0x0, 0x7, 0x1}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x90}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r6, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44880}, 0x20028000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x4000000000, 0xd6c1, 0x8, 0x4, 0x2, 0x0, 0x7f}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x200000000000009, 0x7, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={r9, @in6={{0xa, 0x4e23, 0x4, @empty, 0x7}}, 0xffffc39b, 0x0, 0x7, 0x80000000, 0x80, 0xe35, 0x80}, &(0x7f00000002c0)=0x9c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newtaction={0x898, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x1, 0x5c4, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x2, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0xd9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x12bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa77, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0xfffffbfc, 0x3, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x3, 0x0, 0xd9f9, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 4.728653097s ago: executing program 7 (id=4289): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000400000004000000000000000000020b"], 0x0, 0x5a}, 0x28) 4.592010453s ago: executing program 7 (id=4291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x2000000022ff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]}, 0x296) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000300)=ANY=[@ANYRES16=r4], 0x50}}, 0x40804) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x803, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040), 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x2000000022ff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000300)=ANY=[@ANYRES16=r4], 0x50}}, 0x40804) (async) 4.573120969s ago: executing program 3 (id=4292): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8223f0ffff74c43824cee84400007ffe18c99e70d67b732f9b5702de81f5227339", 0x44}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d21609000a3164ae439862807a158983661a6d23", 0x17}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000002340)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67a6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f83fd548e872bc197d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceeb2c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbf303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87beca6aae023c9571b8e389ff3f4c692b6fb1acc53da3ca629686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e33305000000000000004892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab30bb997fd7b71c2e0bf02b408c3b0b85f8ca7cec3376", 0xe9a}], 0x5}, 0x40040) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x2100000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r9, 0x0, 0x0, 0x22, 0x0, 0x0) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 4.453132862s ago: executing program 7 (id=4293): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000160001ff86427dec18e06bf0009b000000000000000a000000"], 0x14}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x0, 0x4000) (async) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x0, 0x4000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x3fff}, 0xc) (async) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x3fff}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x2e8, 0xc0, 0xc0, 0x228, 0x2e8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0x70, 0x70}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @empty, 0x5607d1016e8ee1dd, 0xffffff00, 'wlan0\x00', 'syz_tun\x00', {}, {}, 0xff, 0x0, 0x1a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x7, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x1, [0x3, 0x4, 0x3, 0x4, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@addrtype={{0x30}, {0x0, 0xe48, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x2e8, 0xc0, 0xc0, 0x228, 0x2e8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0x70, 0x70}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @empty, 0x5607d1016e8ee1dd, 0xffffff00, 'wlan0\x00', 'syz_tun\x00', {}, {}, 0xff, 0x0, 0x1a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x7, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x1, [0x3, 0x4, 0x3, 0x4, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@addrtype={{0x30}, {0x0, 0xe48, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) ioctl$sock_qrtr_TIOCINQ(r2, 0x890c, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) (async) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) ioctl$BTRFS_IOC_ENCODED_WRITE(r5, 0x40809440, &(0x7f0000000440)={&(0x7f0000000400)=[{&(0x7f00000002c0)="3f596387731409570cc2e9b011e70b1bd92c760ae094bced05c79e161c267f79e6f23f59e7c3213854a6cacb3b22588bc832f15a80df70e74e9a71b908f9daedb9a7dd8732ce19a97c36ca28de49b621ee7d7564b1b9928cda683bc613d278f1eed29d9ef92013e3fb283dc5244a06ef62d36acbbad35b2db3ade233a9662969", 0x80}, {&(0x7f0000000380)="1211fa4fa2c8cc4d1de0258f96e571c906b9aa015c36fa4309578dfae3356f7074081c88e324573b66c8da0026fdd213f6e4123860ed8d4c7de7b1b03de400b96d73b101", 0x44}], 0x2, 0x8, 0x0, 0x4, 0x1, 0xff, 0x5, 0xfffffffe}) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r5, 0x40809440, &(0x7f0000000440)={&(0x7f0000000400)=[{&(0x7f00000002c0)="3f596387731409570cc2e9b011e70b1bd92c760ae094bced05c79e161c267f79e6f23f59e7c3213854a6cacb3b22588bc832f15a80df70e74e9a71b908f9daedb9a7dd8732ce19a97c36ca28de49b621ee7d7564b1b9928cda683bc613d278f1eed29d9ef92013e3fb283dc5244a06ef62d36acbbad35b2db3ade233a9662969", 0x80}, {&(0x7f0000000380)="1211fa4fa2c8cc4d1de0258f96e571c906b9aa015c36fa4309578dfae3356f7074081c88e324573b66c8da0026fdd213f6e4123860ed8d4c7de7b1b03de400b96d73b101", 0x44}], 0x2, 0x8, 0x0, 0x4, 0x1, 0xff, 0x5, 0xfffffffe}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) sendmsg$802154_raw(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0x1, 0x5553}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="dd2a3bdc782ad43dbcf201b7007c5941eb3a7945530cf0cf26596448e535af57c8b16d931dbd7fca", 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) unshare(0x22020600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r10, 0x0, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @local}], 0x10) 4.389611907s ago: executing program 1 (id=4294): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000020009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000020009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 4.207489536s ago: executing program 1 (id=4295): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) (async) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20014086) (async) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20014086) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/242, 0xf2}], 0x1, &(0x7f0000000000)=""/14, 0xe}, 0x40002010) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x5) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x4) (async) close(0x4) 4.18781067s ago: executing program 1 (id=4296): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x0, 0x401, 0x70bd2e, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048810}, 0x14008080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000002ac0), r1) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000940)={0x14, r2, 0x807, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x240000d4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x10, 0x40, 0x380, 0x7, {{0x48, 0x4, 0x0, 0x20, 0x120, 0x68, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}, {[@timestamp_prespec={0x44, 0x1c, 0x79, 0x3, 0xd, [{@empty, 0x6}, {@local, 0x5}, {@rand_addr=0x64010100, 0xf6}]}, @timestamp_addr={0x44, 0x4c, 0x68, 0x1, 0x3, [{@local, 0xf}, {@local, 0x5}, {@broadcast, 0x7}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010102, 0x80}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xf447}, {@multicast1, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x837e}, {@private=0xa010101}]}, @end, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x0, 0x11, "304449de76f14388a053f76b5c2d79"}, {0x5, 0xa, "5a56899751d0422f"}, {0x2, 0xa, "400556e76b41a523"}, {0x6, 0x3, "c8"}, {0x2, 0xa, "42424c10163a1c96"}, {0x6, 0x7, '_$vuC'}, {0x6, 0xd, "d18a310706b12cad6d98e3"}]}, @timestamp={0x44, 0x18, 0x4d, 0x0, 0x5, [0x2, 0xffff0001, 0x9, 0x489f49d4, 0x3]}, @timestamp_prespec={0x44, 0x2c, 0x94, 0x3, 0x0, [{@remote, 0x4}, {@loopback}, {@empty, 0x4}, {@multicast2, 0x7}, {@loopback, 0x2}]}, @generic={0x86, 0x12, "270fa4b65b9d959c56a971c2cff7feef"}]}}}}}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @loopback}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x80, 0x7, 0xfffffffd, 0x0, {{0xf, 0x4, 0x1, 0x2, 0x3c, 0x68, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @broadcast, {[@end, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x3d, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @remote, @broadcast]}, @noop, @ssrr={0x89, 0xf, 0x6d, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'pim6reg1\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x2, 0x6, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, 0x700, 0x40, 0x1, 0x400}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x0, 0x5, 0x2, {{0xa, 0x4, 0x0, 0xd, 0x28, 0x67, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@lsrr={0x83, 0x13, 0xaa, [@multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @local]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0xb, 0x0, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0x14, 0x4a, 0x0, 0x7, [0x3, 0x2, 0x8, 0x8]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x2, {{0x7, 0x4, 0x0, 0x39, 0x1c, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000800)={0x71c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xbc1, 0x4, 0x4, 0x5}, {0x6, 0x81, 0x8e}, {0x0, 0x2, 0x6, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r16}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfd64}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}]}, 0x71c}}, 0x4000800) 4.152984629s ago: executing program 8 (id=4297): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x14, r0, 0x400, 0x0, 0x0, {0x2d}}, 0x14}}, 0x6000004) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 3.975457899s ago: executing program 3 (id=4298): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x40, @empty, 0xffff}}, 0x1, 0xb05}, 0x90) 3.974843208s ago: executing program 8 (id=4299): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000022000000000000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) (async) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x4f, 0x9) (async) close(r5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 3.811349626s ago: executing program 3 (id=4300): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000181a00010000000000000000001c1414000004c80000000000668816"], 0x1c}}, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xb, 0x0, 0x0, @void, @value=0x0}, 0x20) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) (async) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000181a00010000000000000000001c1414000004c80000000000668816"], 0x1c}}, 0x0) (async) shutdown(r0, 0x0) (async) listen(r0, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xb, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) 3.72300724s ago: executing program 8 (id=4301): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1280, 0x4) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x54, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0xfffffc00, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @local, @mcast2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2f}, @hao={0xc9, 0x10, @mcast1}]}], "2b58959e"}}}}}}}, 0x0) (async) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x1000, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xb2e}, 0x60) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000008006f1efd83cb1abfbbc59c8ce28e00", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendto$inet(r2, &(0x7f00000002c0)="59d8044e5c20d1d60d4e90c33389a642ab8dc02cc221de55df21069068b6ee1b77de48d03fdcd086f217b1946e86418a393ca8b4eb32a006d8a0c5e0f688b6c5d65ecb7f1ff3cbfd5e9b2273bbc20bd6a7f4f15a3b5b0f7c2bb0a4872797ce1e49adc0b2a8eac66904ad19917b9c3756c24a1de49600acf406c83b970c195ad15be80e6ea75037d576345a447d2f3ce4f5cacd6c4566657a72d35b75ea76d9fed0bc0bcbeb", 0xa5, 0x4008040, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32) listen(r3, 0x8) (async, rerun: 32) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x5, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8b0386e7d95f0669b740a5418d69d000", 0x1000000000003f}, 0x60) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32, @ANYRES8=r3], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r8, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) (async) shutdown(r4, 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r10 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) (async) socket(0x10, 0x3, 0x0) 3.636780341s ago: executing program 3 (id=4302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0x80800) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000640)=0x2, 0x4) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r4) r9 = socket(0x40000000015, 0x805, 0x0) getsockopt(r9, 0x114, 0x5, 0x0, &(0x7f00000000c0)) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r10, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) 3.636558633s ago: executing program 8 (id=4303): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021001e0000080500010004"], 0x4c}}, 0x0) 3.332891504s ago: executing program 7 (id=4304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x8, 0x40, 0x40, 0x7, {{0x30, 0x4, 0x1, 0x3e, 0xc0, 0x65, 0x0, 0x7, 0x2d, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0x10, 0x4e, 0x0, 0x6, [0x2, 0x0, 0x0]}, @rr={0x7, 0xb, 0xa8, [@remote, @multicast1]}, @lsrr={0x83, 0x17, 0x75, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x54, 0x8d, 0x1, 0x5, [{@broadcast, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x434f4815}, {@local, 0x4}, {@multicast1, 0x800}, {@local, 0x3}, {@loopback, 0x8}, {@broadcast, 0x13c}, {@private=0xa010102}, {@broadcast, 0x6}, {@remote, 0x60d733bd}]}, @generic={0x86, 0x12, "89cc86b33f181351f1d23e10fb129e75"}, @cipso={0x86, 0x14, 0x2, [{0x1, 0x3, "d9"}, {0x1, 0xb, "79850d8192e201b259"}]}]}}}}}) sendmsg$nl_route_sched_retired(r1, &(0x7f00000015c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000b40)=@newchain={0xa24, 0x64, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xffe0}, {0x7, 0x6}, {0x9, 0xe}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp6={{0xa}, {0x9dc, 0x2, [@TCA_RSVP_ACT={0x51c, 0x6, [@m_skbmod={0x104, 0x8, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x3, 0x1, 0xc, 0x80000001}, 0xc}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6f41, 0x5, 0x3, 0x6, 0x1000}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x6b, 0x6, "ae793351e22c99007a32e3e3ff3a5f4d2fab0ae1cb845bc21fa2796abeaedd00f06a36c9bd883c76f1761a22165c46b0680efd4542128bbdedbca583569981b194ae2fd92349766c62b32692f9bd3779401f655681f5d3bb45f6fcbd630ae24e67921085fc0565"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x2e4, 0x17, 0x0, 0x0, {{0x7}, {0x2ac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x44, 0x6, {0x0, 'nat\x00', 0x9, 0xffff, "1cfac82a323f196ccc5c4e8f37e9436d9103ffa95daa65fee503"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x110, 0x6, {0x2, 'filter\x00', 0xc, 0x4, "71af6550189c5ee28bdd7ee11fb2fd540394e7d823dfeb530c9efefe1aadb1859b388fe9c8a04f8647e76e09aa9b7869b3c668fcffbc4049042ea99565f7c168cb56fbf11d230cbd3b0a169c7da160c1055b1ddd1c933f288deabed04a5da6c7ed0b56e37f7c5bdcd2be14c186d374395c1978582d966e81ddee4d280c4257adb0cbe3f6acffe23b3e109745117cb0fc7b1d333f3ad121810ea3da6c9b3a05bec492c2792626707b0069fedc72356bd8b9c3d90540c823504b8d51e706f60150d83ab26f5dce393a27a38f4a62e4e61d2f286f80be9f29dca7161441cd767e952d6908be34db"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xc5, 0x6, {0x9, 'mangle\x00', 0x9, 0x8, "bdd430ff7e53fbccfc2977282b51966a9d4d904ee6390ed7f905c810c5eb2405308aea32a1e7b5bef8750bbb1781d1b958ae4267e60abe4d22ec21f4cf9e00cab176b0c2b5b416c16995fc62199ab4c0b29c62c990726c586d857259996b0ad90acbf78b726454d673970163a065ff6dc8df3166b1597dfae04d7ef0c3c8f18b7f799a1add687f0cf042910dfefb8e018eca6696013039be7c3b5e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x11, 0x6, "98f0bf88527bd1d4b4502f0ee3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x88, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0xffffffffffffffff, 0x8, 0x7c}, @empty, @empty, 0xff, 0x1}}]}, {0x36, 0x6, "b78053c0c1d4750f78b8bea2d3b5211566d4e178cabb2e0caf62cc1bce102a391bd48a04f0cda505938a045007acc769b250"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xa8, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x7b, 0x6, "cd590de708f019b20e4b0571ad9daddb1f3d40b9f6592b31b52b1b947c56dfad2d853e6e5b597a4dd1483c401c7fdc8ef62fe91fd2c4851ea39aca5b14e0fc476545a08b6b4928d1b6ef8e40a628fb02f71cc30e32bec9d3b2c6aad11dcd3b2c7361e97e5431310b7ff5ade73bcd87e25c7e025bff230a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xbe5}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x9, 0xffff, 0x703, 0x5, 0x7fff8, 0xc97, 0x8566, 0x4, 0xcc6c, 0x5, 0x7, 0x101, 0x3225, 0x7, 0x9, 0x8, 0x1, 0xfffffffe, 0x1, 0x20, 0x7, 0x6, 0xc50, 0x1, 0x4, 0x9, 0x80000000, 0x4, 0x9, 0x6f4e, 0x401, 0xfff, 0x101, 0x9, 0xf2000000, 0x8, 0x148, 0x10001, 0x9, 0x2, 0x8, 0x2, 0x7fffffff, 0x7, 0xc, 0x51, 0x3, 0xb1ce, 0x2, 0x7f, 0x2, 0xcc, 0x0, 0xffffffd0, 0x7, 0x7, 0xfeb, 0x8000, 0x5, 0xffffffd2, 0xe2, 0xfffffffd, 0x0, 0x1, 0x1, 0x7f, 0xa, 0xe, 0x2, 0x45, 0x3, 0x4, 0xa, 0x4, 0xec, 0x9, 0x3, 0x3ff, 0x6, 0xf, 0x4, 0x9, 0x1, 0x4, 0xfffffff8, 0x6588, 0x1, 0x4, 0x4, 0xff, 0x0, 0x6, 0x7, 0x80000001, 0x9, 0x3, 0x3, 0x7, 0x4, 0x7f, 0x0, 0x9, 0x8001, 0x401, 0x9, 0xe078, 0x10001, 0x20, 0xdf10, 0x85e, 0x6, 0x1, 0x4, 0x401, 0x4, 0x5, 0x81, 0x2, 0x1ff, 0x4, 0xf, 0x2, 0x0, 0x5, 0xc, 0x6, 0x10001, 0x4, 0x81, 0x5, 0x8, 0x19, 0x75126fc3, 0x3, 0x4, 0x3, 0x20, 0x4, 0x2, 0x7, 0xe75, 0x2, 0x3b3, 0x80000001, 0x0, 0x0, 0xfffffe00, 0x401, 0x8, 0x9, 0x2, 0x2f, 0x1, 0x9, 0x4, 0xfffffff8, 0x8, 0x16, 0x0, 0x1, 0x3, 0x81, 0x6, 0xfffff650, 0xca, 0xea, 0x101, 0x80000001, 0x6, 0x1, 0x0, 0x80000001, 0x9, 0x7, 0x4, 0x37, 0x9, 0x80, 0x5, 0x42de, 0xee4, 0x1, 0x400, 0x1, 0x3, 0xe, 0x9, 0xe, 0x1, 0x0, 0x800, 0x80000001, 0xf050, 0x401, 0x7, 0x401, 0xfffff000, 0xffffff80, 0x8000, 0x2, 0x8af, 0x10001, 0x2, 0x8, 0x7fff, 0x9, 0x3, 0x1, 0x5, 0x3ff, 0x4be3, 0x3, 0x1, 0x8, 0x9, 0x5, 0x8, 0x7, 0xffff, 0x9, 0x3c51, 0x8e, 0x5, 0x40000, 0x2, 0x7fffffff, 0x639a, 0xfffffff8, 0xc08, 0x1ff, 0x4, 0x9, 0x1, 0x7, 0x7fffffff, 0x4, 0x3, 0x5, 0x8, 0x4, 0x4288, 0x1cc7000, 0x7ff, 0xff, 0x9, 0x2, 0x1, 0x9, 0xb, 0x200, 0x7, 0x0, 0x9, 0xe6c]}]}, @TCA_RSVP_POLICE={0xa4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x5, 0x5, 0x5, {0x2, 0x2, 0x5, 0x6, 0xfffa, 0x3}, {0x4, 0x1, 0x81, 0x40, 0x4, 0x3}, 0x7fff, 0x9, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7127, 0x0, 0x0, 0x101, 0x8, {0xe, 0x0, 0x0, 0x9, 0xff34, 0x8}, {0x8, 0x2, 0x8000, 0x401, 0x6, 0x5}, 0xf0, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x5eef2bcf17e011cc}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r5, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x190, 0x0, 0x1, 0x301, 0x0, 0x0, {0x8, 0x0, 0x3}, [@CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x30, 0x1, 0x2, 0xa, 0x963]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 763.788559ms ago: executing program 8 (id=4305): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001000)=@delchain={0x24, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x5, 0xb}, {0x0, 0xb}}}, 0x33fe0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000000100000008000100000000001400048005000300070000002bfc0300070000000800020001000000180008801400078008bb"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf2507000000080001"], 0x1c}}, 0x4008054) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x884) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61155000000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000140600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 751.394008ms ago: executing program 1 (id=4306): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000100)={@empty, @local, @void, {@generic={0x88f7}}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0xb433ce711a2ab0dc}, @iv={0x18}], 0x30}], 0x1, 0x40400d4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fe8000000000000000000000000000bb00000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x0) 639.709179ms ago: executing program 2 (id=4307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 586.177696ms ago: executing program 1 (id=4308): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r3, r2, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}, @generic={0x44, 0x9, "06750100000000"}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x3, 0x99}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000050000022c6dfdb39870fe7748da6589dc6d00000000000000d8bf42"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 526.322685ms ago: executing program 3 (id=4309): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000200010009000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x10000004}) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, 0x0, &(0x7f0000000080)) (async) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMRRU(r8, 0x4010744d, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="580100002f00010400000000fcdbdf250822c27182778b4c14be0a3001f2800c00180008ac0f000010000014000104fc0000000000000000", @ANYRES32=r10, @ANYBLOB="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"], 0x158}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r11, &(0x7f0000000480), 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00040abd7000fddbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000000000025c3e51177830d8b736a5a78e06813e308104e48e3b76636c6d55f503f167ee98723c344e6a78dbd8cc95b25864e06be5af979ad36275469006e881630900cf2afac7103136c3e275a053ca74d85a76ad0da6779fbd9c73bb02548b2d7d83e"], 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f00000008c0)={0x8, {0x2, 0x8d, 0x101, 0xffffffffffff459f, 0xd2}}) setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, &(0x7f0000000340)=[{{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) (async) poll(&(0x7f00000001c0)=[{r0, 0x8000}, {r11, 0x5581}, {r7}, {r7, 0x8000}, {r11, 0x1}], 0x5, 0x8b) (async) close(r11) 384.396639ms ago: executing program 7 (id=4310): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000180)={0xce, 0x28, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 203.108269ms ago: executing program 7 (id=4311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x6c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20044080) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0011800b00010065787468647200001c0002800800064000000002080007"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f00), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x30119902}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r9 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req={0x1, 0x1, 0x1ff, 0x1}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x84001, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000002c0)={'geneve1\x00', @remote}) 201.031881ms ago: executing program 3 (id=4312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x1c, r1, 0xa5c59466aaff822d, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48805}, 0x64040) socket$kcm(0x23, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x20) 200.654219ms ago: executing program 1 (id=4313): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x7056}], 0x1, 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000700)=0xe8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0xfc}], 0x18, 0x8005}, 0x40040) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0xf}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0x8, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x3, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0xb, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0xd, 0xebf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0x1, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x31, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x403, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562369, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0xfffffffc, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0x4, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 125.686398ms ago: executing program 2 (id=4314): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x10000) (async) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x20000000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB="04800000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000400000008000700ac1414aa"], 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x0, 0x4000040) 82.510383ms ago: executing program 2 (id=4315): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000680)={0xffffffffffffffff}) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f0000000400)=[{&(0x7f0000000080)="67d54d09e33ff501287d4c508875fc9648e2e0fc67ae7d", 0x17}, {&(0x7f00000000c0)="00843d048f369937", 0x8}, {&(0x7f0000000100)="85551f710cfc3f25cfc824f37fa0c2423cbb2812c510f98fc56534847894b1e3a9bee835d615304fd558a5215f11b1acbae2f53816a01aaf1a2a9a7030ed6b0216bcf3be899f3ad261825f2cc19522f1db5fb6cff3f1151106841f160a18340872fa0c773234b6f85c0fe22175b1d48903a3bbcbce9b7a1846b3228a0edda83233a84f40000a8d3b63bac080d7774b0e54d9950f3a57a7fc9d6bef663aa6cd655621615a658c1a8bd4a81304344a51f7d1cbdddc0402612e0668b4610f1c24f9979105f3ec78e0624cabe4138479b800fca2133c5b93c0b1a5eb0d966ea13abb1622df8be720cdd971e517", 0xeb}, {&(0x7f0000000200)="b53916f8052e92b6b54480f8067f7b17956eb42204b4f683309cace9b6b30ea3804d938e923f3642d619b1cc157409bb60c55982ec65b9acf9cade18e32ee40d008a2cedf819e3637ca849a876a8011a3d7f8c588a15a1808dc1f60ea66078050e293f5986143a0d9adbebb6a56f2b5d8b0de5358105e54e2ed1907b8466bc4a80a1d53f0ea6802e12f870c214a98e1424cb4bb77205aedb6427612e7e5d", 0x9e}, {&(0x7f00000002c0)="3d1ff1b9e661981e9773b5a263679d63d7eaa6e2e3e0f65fe56ed4bf615b59b5f527f111b27bf422fac94f05fdb5144bd8545776e530f51ba91557ee756092587e71f0f8b5e18ed85f1036eb7adfb2d1d6d9ab41f814697bd3ad57dae6e65ad8aa0823a93d5af9575b9a556872ebe6ebec9c9375cfd842247353b2195593b1a7c013f0353a47abd46e8f5322", 0x8c}, {&(0x7f0000000380)="ca2724b0c0a4cfe0133611ed8f65ec11230302b2a93a48a2585f13f12b88720fab9896f595590f53a610c45b2de3bd4cfd5a2d9b4c55c63a0ad63ece6b5768b26819b31fab467b95abb363560848c3ec0391a35c64f1389eac420ddeda9517690463960d55aec030483c92e0f20115902ae1be0940124080", 0x78}], 0x6, 0xfffffffffffffc00, 0x0, 0x4, 0x5, 0x4af1, 0x5, 0xff}) sendmmsg$inet6(r0, &(0x7f0000002940), 0x0, 0x2614e635beb6fcd1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffff87) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) unshare(0x6020400) (async) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) (async) socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0xf5, &(0x7f0000000040)=""/17, &(0x7f0000000580)=0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) r8 = socket(0x3, 0x800, 0x2) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) 0s ago: executing program 2 (id=4316): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x57, 0x1}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x18adf5783a00bbb}, 0x20004041) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000200)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r1, 0x1) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x13c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a6618bac338123b39ef87c6a9c01f1347f000baf21febc83"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b718ea914b48569e0fc89a0dc64d463bcf2385ce45d5454c"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "887d532a72f55342e36d243828c2fc517e66565b7d904b58"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3e1e3e6a0d66f8f27ea1934178c78bd9ea5a835f9139b07f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0aec0fb6fb1a0ee0a694387321ca908eed0b83fc766f7496"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xcc272efac3c70e8}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10000001}, 0x20000001) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000004c0)={'batadv0\x00'}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x10, 0x7, 0x467a, 0x0, 0x8f6c60cf83383842, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x13, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit]}, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0xa, 0xfffffe00}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0x1, 0xffffffffffffffff, r6, r7, r8, r9, r10, r11, r12], &(0x7f0000000b40)=[{0x4, 0x2, 0xe, 0x9}, {0x2, 0x5, 0x7, 0x8}, {0x3, 0x3, 0x9, 0x1}, {0x4, 0x1, 0x3, 0x8}, {0x4, 0x1, 0xf, 0xa}], 0x10, 0x7}, 0x94) connect$inet6(r5, &(0x7f0000000c80)={0xa, 0x4e24, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000000cc0)={"73424428f8af2fe512999566b056cac8", 0x0, 0x0, {0x9, 0x8}, {0x4}, 0x48fb, [0xc, 0x1, 0xaa, 0xffffffffffffffff, 0x81, 0x1, 0xfffffffffffffff3, 0x3, 0xb, 0xd, 0x2, 0x9, 0x7, 0x70, 0x7fffffffffffffff, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000dc0)={0x0, 0x1, 0x0, [0xb, 0xd, 0x7, 0xfffffffffffffffe, 0x8], [0x9, 0x1, 0x8, 0x0, 0x7, 0x1, 0x839d, 0x3, 0x8, 0x8000000000000000, 0x5, 0xc6eb, 0x8000000000000000, 0x1, 0xfff, 0x8, 0x8, 0x5, 0x1d7, 0x10001, 0x1, 0x100000000, 0xffffffffffffffff, 0x6, 0x8, 0x2, 0x7, 0x5, 0x3b2, 0xfffffffffffffffe, 0x2, 0x6, 0x800, 0x9, 0x1000, 0x101, 0x1, 0x10, 0x4, 0x5a61, 0xcf, 0xffffffffffffffff, 0x7, 0x259, 0x1ff, 0x7, 0x7, 0x2, 0x7, 0x8, 0x3, 0x6, 0xf, 0x5, 0x9, 0x6, 0x2, 0x2, 0xc5, 0x9, 0x3, 0x6, 0x400, 0x8, 0x151e800000000000, 0x1d47, 0x8, 0x3ff, 0x8, 0x5, 0x0, 0x6, 0xfffffffffffffffc, 0x9, 0x92a, 0x4, 0x2, 0x5fd07a97, 0x4, 0x0, 0x3, 0x6, 0xb, 0x0, 0x2, 0x73b, 0xa5a, 0x4, 0xb2, 0x8, 0xb6, 0x6, 0x6, 0x7f, 0x2, 0x7, 0x3, 0x6, 0x5, 0x9, 0x6, 0x5, 0xfd, 0xfffffffffffffffd, 0x8051, 0x6, 0x8, 0x9, 0x5, 0x0, 0x2, 0x9731, 0x7545e408, 0x4, 0x5, 0x8, 0x2, 0x6, 0x3, 0x7]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001200)={{r10}, r13, 0x12, @unused=[0x2fdf, 0x4, 0x6, 0x8], @devid=r14}) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_VOICE(r15, 0x112, 0xb, &(0x7f0000002200)=0x60, 0x2) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r16, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x4c, r17, 0x42a, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, '-/{$,*&(\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x18, 0x1, '*/.[-&\xef*$).%#/([-M:\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) kernel console output (not intermixed with test programs): n process `syz.2.3176'. [ 481.734399][T18736] debugfs: '1ùà^!‚Y‡°”õËí [ 481.734399][T18736] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 481.904763][T18746] lo speed is unknown, defaulting to 1000 [ 481.927832][T18746] lo speed is unknown, defaulting to 1000 [ 481.979204][T18746] lo speed is unknown, defaulting to 1000 [ 481.991143][T18746] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 482.009360][T18746] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 482.044134][T18746] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 482.064720][T18746] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 482.095692][T18746] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 482.179643][T18746] lo speed is unknown, defaulting to 1000 [ 482.189595][T18746] lo speed is unknown, defaulting to 1000 [ 482.198219][T18746] lo speed is unknown, defaulting to 1000 [ 482.212558][T18746] lo speed is unknown, defaulting to 1000 [ 482.240247][T18746] lo speed is unknown, defaulting to 1000 [ 482.259593][T18746] lo speed is unknown, defaulting to 1000 [ 482.277884][T18746] lo speed is unknown, defaulting to 1000 [ 482.295465][T18746] lo speed is unknown, defaulting to 1000 [ 482.313391][T18746] lo speed is unknown, defaulting to 1000 [ 482.338380][T18746] lo speed is unknown, defaulting to 1000 [ 482.358232][T18746] lo speed is unknown, defaulting to 1000 [ 482.439377][T18771] __nla_validate_parse: 2 callbacks suppressed [ 482.439397][T18771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3191'. [ 482.470165][ T5651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 482.483636][ T5651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 482.494485][ T5651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 482.510428][ T5651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 482.520183][ T5651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 482.733861][T18784] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 482.750698][T18781] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 483.055960][T18807] bridge_slave_0: left allmulticast mode [ 483.071972][T18807] bridge_slave_0: left promiscuous mode [ 483.083356][T18807] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.110332][T18807] bridge_slave_1: left allmulticast mode [ 483.123371][T18807] bridge_slave_1: left promiscuous mode [ 483.138327][T18807] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.139224][T18816] netlink: 'syz.1.3199': attribute type 3 has an invalid length. [ 483.158064][T18816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3199'. [ 483.242722][T18807] bond0: (slave bond_slave_0): Releasing backup interface [ 483.253818][T18807] bond0: (slave bond_slave_1): Releasing backup interface [ 483.269315][T18807] team0: Port device team_slave_0 removed [ 483.287610][T18807] team0: Port device team_slave_1 removed [ 483.300973][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.312544][T18807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.322709][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.331127][T18807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.341782][T18807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 483.402073][T17968] lo speed is unknown, defaulting to 1000 [ 483.430272][T18772] lo speed is unknown, defaulting to 1000 [ 483.727406][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3207'. [ 483.740589][T18842] nbd: must specify a size in bytes for the device [ 483.806142][T18846] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3208'. [ 483.952895][T18811] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 484.024380][T18772] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.032134][T18772] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.039780][T18772] bridge_slave_0: entered allmulticast mode [ 484.048045][T18772] bridge_slave_0: entered promiscuous mode [ 484.057022][T18772] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.068195][T18772] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.075642][T18772] bridge_slave_1: entered allmulticast mode [ 484.084935][T18772] bridge_slave_1: entered promiscuous mode [ 484.130746][T18772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.144154][T18772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.234937][T18858] netlink: 'syz.2.3211': attribute type 1 has an invalid length. [ 484.255084][T18772] team0: Port device team_slave_0 added [ 484.271520][T18772] team0: Port device team_slave_1 added [ 484.341061][T18772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.353958][T18772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.406345][T18772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.430395][T18772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.445186][T18772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.506350][T18772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.557860][ T5651] Bluetooth: hci0: command tx timeout [ 484.889306][T18772] hsr_slave_0: entered promiscuous mode [ 484.904388][T18772] hsr_slave_1: entered promiscuous mode [ 484.920874][T18772] debugfs: 'hsr0' already exists in 'hsr' [ 484.927197][T18772] Cannot create hsr debugfs directory [ 485.025224][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'. [ 485.139654][T18902] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3218'. [ 485.306762][T18908] mac80211_hwsim hwsim63 syzkaller0: entered promiscuous mode [ 485.316226][T18908] mac80211_hwsim hwsim63 syzkaller0: entered allmulticast mode [ 485.526738][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.580794][T18927] netlink: 'syz.1.3224': attribute type 1 has an invalid length. [ 485.651264][T18927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.659048][T18772] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 485.670244][T18772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.682018][T18772] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 485.698832][T18772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.724763][T18924] bond1: (slave veth3): Enslaving as an active interface with a down link [ 485.746184][T18929] bond1: option resend_igmp: invalid value (2878) [ 485.753164][T18929] bond1: option resend_igmp: allowed values 0 - 255 [ 485.777398][T18929] bond1 (unregistering): Released all slaves [ 485.821149][T18772] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 485.834568][T18772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.847699][T18772] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 485.861006][T18772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.891180][T18934] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 485.901047][T18934] bond1: (slave batadv1): making interface the new active one [ 485.910533][T18934] batadv1: entered promiscuous mode [ 485.916189][T18934] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 486.116223][T18944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3228'. [ 486.273328][T18947] netlink: 'syz.2.3229': attribute type 3 has an invalid length. [ 486.278678][T18772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.289210][T18947] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3229'. [ 486.439700][T18772] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.473867][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.481083][ T7700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.536086][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.543327][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.580673][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'. [ 486.596006][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3234'. [ 486.637024][ T5651] Bluetooth: hci0: command 0x041b tx timeout [ 486.713839][T18965] netlink: 'syz.3.3234': attribute type 10 has an invalid length. [ 486.762294][T18965] team0: Port device geneve1 added [ 486.784988][ T7700] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.805483][ T7700] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.830594][ T7700] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.864005][ T7700] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.232272][T18772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.561494][T18772] veth0_vlan: entered promiscuous mode [ 487.585045][T18772] veth1_vlan: entered promiscuous mode [ 487.668278][T18772] veth0_macvtap: entered promiscuous mode [ 487.717609][T18772] veth1_macvtap: entered promiscuous mode [ 487.779659][T18772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.802028][T18772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.822088][ T1149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.848614][ T1149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.866493][ T1149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.901200][ T7700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.067786][ T7717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.093559][ T7717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.151478][ T7712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.160739][ T7712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.307523][T19016] __nla_validate_parse: 5 callbacks suppressed [ 488.307544][T19016] netlink: 47 bytes leftover after parsing attributes in process `syz.7.3188'. [ 488.705465][T19027] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.720104][ T5651] Bluetooth: hci0: command 0x041b tx timeout [ 488.774474][T19032] ip6erspan0: entered promiscuous mode [ 488.780705][T19032] ip6erspan0: entered allmulticast mode [ 488.799003][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3251'. [ 488.854645][T19041] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3252'. [ 488.969720][T19037] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3249'. [ 489.420608][T19027] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.468836][T19054] pim6reg1: entered promiscuous mode [ 489.477569][T19054] pim6reg1: entered allmulticast mode [ 489.603395][T19027] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.858642][T19082] syzkaller0: entered promiscuous mode [ 489.864342][T19082] syzkaller0: entered allmulticast mode [ 490.089377][T19027] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.218097][ T1149] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.247679][ T1149] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.258704][T19084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3264'. [ 490.272049][ T1149] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.345863][ T1149] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.521672][ T46] IPVS: starting estimator thread 0... [ 490.626489][T19098] IPVS: using max 31 ests per chain, 74400 per kthread [ 490.715728][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3270'. [ 490.797119][ T5651] Bluetooth: hci0: command 0x041b tx timeout [ 490.895103][T19117] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 490.920277][T19117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.951193][T19117] bond1: (slave veth5): Enslaving as an active interface with a down link [ 490.980275][T19117] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 490.990661][T19117] bond1: (slave batadv1): making interface the new active one [ 491.000561][T19117] batadv1: entered promiscuous mode [ 491.006243][T19117] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 491.027713][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3272'. [ 491.365183][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 491.374954][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 491.429664][T19141] netlink: 'syz.3.3278': attribute type 1 has an invalid length. [ 491.432265][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 491.590727][T19150] netlink: 'syz.3.3280': attribute type 1 has an invalid length. [ 491.615601][T19150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.638240][T19151] bond2: (slave veth3): Enslaving as an active interface with a down link [ 491.662121][T19150] bond2: (slave veth5): Enslaving as an active interface with a down link [ 492.602795][T19066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.795066][T19190] vlan2: entered promiscuous mode [ 492.878977][ T5651] Bluetooth: hci0: command 0x041b tx timeout [ 493.445943][T19217] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 493.787869][T19234] __nla_validate_parse: 10 callbacks suppressed [ 493.787888][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3305'. [ 493.902110][T19244] netlink: 'syz.1.3304': attribute type 8 has an invalid length. [ 494.150601][T19254] tipc: Started in network mode [ 494.167649][T19254] tipc: Node identity 0eafb259d834, cluster identity 4711 [ 494.185655][T19254] tipc: Enabled bearer , priority 0 [ 494.269103][T19259] tipc: Disabling bearer [ 494.650984][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3313'. [ 495.124734][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3321'. [ 495.144834][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 495.194941][T19307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3323'. [ 495.421769][T19327] netlink: 'syz.3.3325': attribute type 13 has an invalid length. [ 495.451770][T19327] netlink: 'syz.3.3325': attribute type 17 has an invalid length. [ 495.482473][T17421] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.502022][T17421] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.515607][T19326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3328'. [ 495.548545][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 495.574126][T19327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.584980][T19327] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.593188][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'. [ 495.609322][T19327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.647012][T19327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.659975][T19327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.684616][T19327] veth1_vlan: left promiscuous mode [ 495.691963][T19327] veth0_vlan: left promiscuous mode [ 495.698287][T19327] veth0_vlan: entered promiscuous mode [ 495.707560][T19327] veth1_vlan: entered promiscuous mode [ 495.719725][T19327] veth0_macvtap: left promiscuous mode [ 495.726320][T19327] veth0_macvtap: entered promiscuous mode [ 495.749080][T19327] ipip0: left promiscuous mode [ 495.756127][T19327] ip6tnl1: left allmulticast mode [ 495.765253][T19327] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 495.789456][T17421] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.846005][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.853241][ T7700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.865796][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.873013][ T7700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.931973][T17421] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.944230][ T1149] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 495.970070][T19338] macsec1: entered allmulticast mode [ 495.975568][T19338] ip6gretap0: entered allmulticast mode [ 496.000077][T19338] ip6gretap0: left allmulticast mode [ 496.068051][T19340] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3332'. [ 496.299094][T19356] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3336'. [ 496.345018][T19356] vlan3: entered promiscuous mode [ 496.356940][T19356] geneve1: entered promiscuous mode [ 496.363401][T19356] vlan3: entered allmulticast mode [ 496.370975][T19356] geneve1: entered allmulticast mode [ 496.415023][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.451555][T19363] netlink: 'syz.1.3338': attribute type 4 has an invalid length. [ 496.478850][T19363] netlink: 'syz.1.3338': attribute type 6 has an invalid length. [ 496.525902][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.551369][T19363] netlink: 'syz.1.3338': attribute type 4 has an invalid length. [ 496.581967][T19363] netlink: 'syz.1.3338': attribute type 6 has an invalid length. [ 496.607670][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.631386][T19363] netlink: 'syz.1.3338': attribute type 4 has an invalid length. [ 496.639507][T19363] netlink: 'syz.1.3338': attribute type 6 has an invalid length. [ 496.665438][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.686181][T19363] netlink: 'syz.1.3338': attribute type 4 has an invalid length. [ 496.695494][T19363] netlink: 'syz.1.3338': attribute type 6 has an invalid length. [ 496.705755][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.713994][T19363] netlink: 'syz.1.3338': attribute type 4 has an invalid length. [ 496.722497][T19363] netlink: 'syz.1.3338': attribute type 6 has an invalid length. [ 496.731163][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.740834][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.749806][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.758454][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.768792][T19363] netlink: 'syz.1.3338': attribute type 11 has an invalid length. [ 496.903782][ T6863] lo speed is unknown, defaulting to 1000 [ 496.910477][ T6863] syz2: Port: 1 Link DOWN [ 496.915563][T19355] syzkaller0: entered promiscuous mode [ 496.926793][T19355] syzkaller0: entered allmulticast mode [ 497.029453][ T7712] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.049810][T19374] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 497.069565][T19374] bond1: (slave lo): Enslaving as an active interface with an up link [ 497.082696][T19374] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 497.113790][ T7712] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.161708][ T7712] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.187976][ T7712] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.372209][T19379] bond2: (slave gretap1): making interface the new active one [ 497.384959][T19379] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 497.395789][T19384] tipc: Enabling of bearer rejected, failed to enable media [ 497.458331][T19386] macvlan2: entered promiscuous mode [ 497.467914][T19386] macvlan2: entered allmulticast mode [ 497.487535][T19386] bond2: entered promiscuous mode [ 497.500299][T19386] gretap1: entered promiscuous mode [ 497.519264][T19386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 497.542112][T19386] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 497.570804][T19386] bond2: left promiscuous mode [ 497.575628][T19386] gretap1: left promiscuous mode [ 497.636035][T19406] openvswitch: netlink: Message has 12 unknown bytes. [ 497.643908][T19406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.810548][T19415] Cannot find add_set index 0 as target [ 498.349205][T19446] sctp: [Deprecated]: syz.7.3366 (pid 19446) Use of int in max_burst socket option. [ 498.349205][T19446] Use struct sctp_assoc_value instead [ 498.416771][ T5649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 498.440334][ T5649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 498.449139][ T5649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 498.463067][ T5649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 498.473810][ T5649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 498.710215][T19466] Bluetooth: MGMT ver 1.23 [ 498.934349][T19450] lo speed is unknown, defaulting to 1000 [ 499.480241][T19494] __nla_validate_parse: 224 callbacks suppressed [ 499.480259][T19494] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.3378'. [ 499.511812][T19450] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.521494][T19450] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.529457][T19450] bridge_slave_0: entered allmulticast mode [ 499.537953][T19450] bridge_slave_0: entered promiscuous mode [ 499.547887][T19450] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.555111][T19450] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.562578][T19450] bridge_slave_1: entered allmulticast mode [ 499.568793][T19496] xt_hashlimit: size too large, truncated to 1048576 [ 499.570584][T19450] bridge_slave_1: entered promiscuous mode [ 499.579255][T19494] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3378'. [ 499.665549][T19503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3379'. [ 499.683576][T19450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.700249][T19450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.729671][T19499] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3379'. [ 499.773661][T19494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.806087][T19494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.833742][T19494] bond0 (unregistering): Released all slaves [ 499.918278][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.047761][ T5832] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 500.079052][T19450] team0: Port device team_slave_0 added [ 500.118937][T19450] team0: Port device team_slave_1 added [ 500.239961][T19518] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3383'. [ 500.278703][T19518] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3383'. [ 500.308318][T19524] bond1: (slave lo): Releasing backup interface [ 500.330699][T19524] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 500.375049][T19524] bridge_slave_0: left allmulticast mode [ 500.395536][T19524] bridge_slave_0: left promiscuous mode [ 500.415881][T19524] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.432706][T19504] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3382'. [ 500.450461][T19524] bridge_slave_1: left allmulticast mode [ 500.456624][T19524] bridge_slave_1: left promiscuous mode [ 500.462497][T19524] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.486199][T19524] team0: Port device team_slave_0 removed [ 500.501075][T19524] team0: Port device team_slave_1 removed [ 500.510469][T19524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.518680][T19524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.528593][T19524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.536232][T19524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.557332][ T5649] Bluetooth: hci8: command tx timeout [ 500.570187][T19524] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 500.597633][T19507] lo speed is unknown, defaulting to 1000 [ 500.611772][ T1149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 500.708223][ T5365] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 500.852393][T19450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.885581][T19450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.934575][T19450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.993964][T19450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.026513][T19450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.057152][T19450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.198249][T19564] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input7 [ 501.305618][T19565] netlink: 840 bytes leftover after parsing attributes in process `syz.7.3387'. [ 501.424701][T19450] hsr_slave_0: entered promiscuous mode [ 501.438131][T19450] hsr_slave_1: entered promiscuous mode [ 501.457364][T19450] debugfs: 'hsr0' already exists in 'hsr' [ 501.463228][T19450] Cannot create hsr debugfs directory [ 501.479354][T19574] validate_nla: 126 callbacks suppressed [ 501.479373][T19574] netlink: 'syz.7.3390': attribute type 1 has an invalid length. [ 501.575675][T19574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.624617][T19578] bond0: (slave veth3): Enslaving as an active interface with a down link [ 501.682354][ T7712] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 501.717274][ T7712] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 501.815357][T19574] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 501.842635][T19574] bond0: (slave batadv1): making interface the new active one [ 501.859041][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 501.863616][T19574] batadv1: entered promiscuous mode [ 501.886407][T19574] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 501.917216][T17525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 502.174020][T19450] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 502.185969][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.194613][T19450] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 502.210881][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.220248][T19450] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 502.234158][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.247981][T19450] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 502.266159][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.384609][T19450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.459158][T19450] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.465939][T19609] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3397'. [ 502.501442][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.508718][ T7700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.607047][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.614250][ T7712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.639072][ T5649] Bluetooth: hci8: command tx timeout [ 502.866659][T19634] block nbd3: server does not support multiple connections per device. [ 502.906423][ T7717] batadv1: left promiscuous mode [ 502.921093][T19634] block nbd3: shutting down sockets [ 502.974730][T19650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.990374][T19650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.001560][T19650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.027068][T19650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.609116][T19634] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 503.628673][T19634] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 503.704693][T19675] lo speed is unknown, defaulting to 1000 [ 503.849604][T19634] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 503.876733][T19634] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 503.938710][T19450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.050801][T19634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 504.063567][T19634] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 504.450225][T19634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 504.457277][T19705] netlink: 'syz.2.3418': attribute type 12 has an invalid length. [ 504.478450][T19634] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 504.596223][T19634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.618555][T19634] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 504.682101][T19450] veth0_vlan: entered promiscuous mode [ 504.692431][T19634] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 504.698192][T19450] veth1_vlan: entered promiscuous mode [ 504.716618][ T5649] Bluetooth: hci8: command tx timeout [ 504.726412][T19634] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 504.752945][T19450] veth0_macvtap: entered promiscuous mode [ 504.762228][T19634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 504.778385][T19450] veth1_macvtap: entered promiscuous mode [ 504.785403][T19634] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 504.839916][T19634] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 504.852166][T19634] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 504.856666][T19450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.881166][T19450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.903332][ T7717] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.925272][ T7717] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.963784][ T7717] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.012123][ T7717] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.042829][T19713] __nla_validate_parse: 8 callbacks suppressed [ 505.042848][T19713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'. [ 505.081969][T19713] team0: left promiscuous mode [ 505.342479][ T7700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.379030][ T7700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.524250][ T7700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.544577][T19733] netlink: 'syz.3.3424': attribute type 1 has an invalid length. [ 505.561799][ T7700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.579196][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3426'. [ 505.618956][T19733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.673719][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'. [ 505.686517][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'. [ 505.695882][T19739] netlink: 'syz.2.3427': attribute type 14 has an invalid length. [ 505.704122][T19739] netlink: 'syz.2.3427': attribute type 11 has an invalid length. [ 505.733920][T19737] bond3: (slave veth7): Enslaving as an active interface with a down link [ 505.760898][T19741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.805415][T19730] batadv_slave_0: entered promiscuous mode [ 505.836589][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 505.848083][T19733] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 505.882700][T19733] bond3: (slave batadv1): making interface the new active one [ 505.916127][T19733] batadv1: entered promiscuous mode [ 505.930897][T19733] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 506.093717][T19730] batadv_slave_0: left promiscuous mode [ 506.471737][T19781] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3438'. [ 506.539954][T19776] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 506.563359][T19776] bond4 (unregistering): Released all slaves [ 506.825407][T19789] bond3 (unregistering): Released all slaves [ 506.840503][T19800] netlink: 'syz.7.3441': attribute type 1 has an invalid length. [ 506.960260][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3441'. [ 506.991840][T19800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.055845][T19802] ip6erspan0: entered allmulticast mode [ 507.663051][T19838] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3452'. [ 507.782009][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 507.830735][T19842] xt_hashlimit: size too large, truncated to 1048576 [ 507.884234][T19849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3453'. [ 507.934182][T19852] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3454'. [ 508.558082][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 508.989841][T19910] veth0: entered promiscuous mode [ 509.052181][T19914] netlink: 'syz.3.3469': attribute type 10 has an invalid length. [ 509.348865][T19936] netlink: 'syz.7.3475': attribute type 29 has an invalid length. [ 509.551199][T19944] netlink: 'syz.2.3478': attribute type 1 has an invalid length. [ 509.607559][T19944] bond2: entered promiscuous mode [ 509.626791][T19944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.708196][T19944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.728228][T19944] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 509.739713][T19944] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 509.793336][T19944] bond2: (slave ipip0): making interface the new active one [ 509.804736][T19944] ipip0: entered promiscuous mode [ 509.823730][T19944] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 509.841432][T19942] syzkaller1: entered promiscuous mode [ 509.848661][T19942] syzkaller1: entered allmulticast mode [ 510.524151][T19957] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 510.565913][T19957] __nla_validate_parse: 6 callbacks suppressed [ 510.565935][T19957] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3480'. [ 510.587223][T19957] bond3 (unregistering): Released all slaves [ 511.486236][T19993] bond3: entered allmulticast mode [ 511.501698][T19993] macvlan2: entered promiscuous mode [ 511.507273][T19993] macvlan2: entered allmulticast mode [ 511.514061][T19993] bond3: entered promiscuous mode [ 511.521777][T19993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 511.579726][T19993] bond3: left promiscuous mode [ 511.813170][T20007] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3497'. [ 512.077439][T19917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.541189][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 512.575366][T20035] netlink: 'syz.2.3507': attribute type 13 has an invalid length. [ 512.593848][T20035] netlink: 'syz.2.3507': attribute type 17 has an invalid length. [ 512.611601][T20035] lo: left promiscuous mode [ 512.707028][T20035] tunl0: left promiscuous mode [ 512.714539][T20035] gre0: left promiscuous mode [ 512.728615][T20035] gretap0: left promiscuous mode [ 512.746603][T20035] erspan0: left promiscuous mode [ 512.755330][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'. [ 512.797481][T20035] ip_vti0: left promiscuous mode [ 512.812764][T20035] ip6_vti0: left promiscuous mode [ 512.820626][T20035] sit0: left promiscuous mode [ 512.829114][T20035] ip6tnl0: left promiscuous mode [ 512.845172][T20035] ip6gre0: left promiscuous mode [ 512.853001][T20049] netlink: 'syz.3.3510': attribute type 4 has an invalid length. [ 512.862583][T20035] syz_tun: left promiscuous mode [ 512.866388][T20049] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3510'. [ 512.887128][T20035] ip6gretap0: left promiscuous mode [ 512.939646][T20035] bridge0: left promiscuous mode [ 512.991606][T20035] vcan0: left promiscuous mode [ 513.004013][T20035] bond0: left promiscuous mode [ 513.046548][T20035] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.090048][T20035] dummy0: left promiscuous mode [ 513.091260][T20061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3513'. [ 513.108346][T20035] nlmon0: left promiscuous mode [ 513.114199][T20035] vxcan0: left promiscuous mode [ 513.124367][T20035] vxcan1: left promiscuous mode [ 513.134395][T20035] veth0: left promiscuous mode [ 513.141133][T20035] veth1: left promiscuous mode [ 513.146728][T20035] wg0: left promiscuous mode [ 513.152239][T20035] wg1: left promiscuous mode [ 513.158137][T20035] wg2: left promiscuous mode [ 513.168513][T20035] veth0_to_bridge: left promiscuous mode [ 513.175751][T20035] veth1_to_bridge: left promiscuous mode [ 513.183346][T20035] veth0_to_bond: left promiscuous mode [ 513.190727][T20035] bond_slave_0: left promiscuous mode [ 513.197530][T20035] veth1_to_bond: left promiscuous mode [ 513.204197][T20035] bond_slave_1: left promiscuous mode [ 513.211818][T20035] veth0_to_team: left promiscuous mode [ 513.219609][T20035] team_slave_0: left promiscuous mode [ 513.228064][T20035] veth1_to_team: left promiscuous mode [ 513.234883][T20035] team_slave_1: left promiscuous mode [ 513.245054][T20035] veth0_to_batadv: left promiscuous mode [ 513.245734][T20068] netlink: 'syz.3.3514': attribute type 21 has an invalid length. [ 513.254754][T20035] batadv_slave_0: left promiscuous mode [ 513.266545][T20068] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3514'. [ 513.275555][T20035] veth1_to_batadv: left promiscuous mode [ 513.283897][T20035] batadv_slave_1: left promiscuous mode [ 513.290601][T20035] xfrm0: left promiscuous mode [ 513.297226][T20035] veth0_to_hsr: left promiscuous mode [ 513.304144][T20035] veth1_to_hsr: left promiscuous mode [ 513.311617][T20035] hsr0: left promiscuous mode [ 513.317705][T20035] veth1_virt_wifi: left promiscuous mode [ 513.324268][T20035] veth0_virt_wifi: left promiscuous mode [ 513.331137][T20035] virt_wifi0: left promiscuous mode [ 513.349379][T20035] vlan0: left promiscuous mode [ 513.355037][T20035] vlan1: left promiscuous mode [ 513.361916][T20035] macvlan0: left promiscuous mode [ 513.368852][T20035] macvlan1: left promiscuous mode [ 513.374953][T20035] ipvlan0: left promiscuous mode [ 513.381045][T20035] ipvlan1: left promiscuous mode [ 513.390520][T20035] macvtap0: left promiscuous mode [ 513.407807][T20035] macsec0: left promiscuous mode [ 513.412895][T20035] macsec0: left allmulticast mode [ 513.418052][T20035] veth1_macvtap: left allmulticast mode [ 513.424727][T20035] geneve0: left promiscuous mode [ 513.430894][T20035] geneve1: left promiscuous mode [ 513.437610][T20035] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 513.450461][T20035] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 513.464042][T20035] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 513.477095][T20035] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 513.490664][T20035] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 513.500341][T20035] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 513.508625][T20035] mac80211_hwsim hwsim54 wlan2: left promiscuous mode [ 513.516890][T20035] mac80211_hwsim hwsim55 wlan3: left promiscuous mode [ 513.524833][T20035] bridge1: left promiscuous mode [ 513.532368][T20035] bridge2: left promiscuous mode [ 513.538283][T20035] gtp0: left promiscuous mode [ 513.543782][T20035] geneve2: left promiscuous mode [ 513.549221][T20035] geneve2: left allmulticast mode [ 513.591806][T20035] bond2: left promiscuous mode [ 513.598054][T20035] ipip0: left promiscuous mode [ 513.655090][ T7717] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 513.719662][T20065] syzkaller1: entered promiscuous mode [ 513.736916][T20065] syzkaller1: entered allmulticast mode [ 513.751533][ T7709] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.808272][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3518'. [ 513.932444][ T7709] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.969591][ T7709] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.044536][T20095] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3521'. [ 514.062297][ T6863] IPVS: starting estimator thread 0... [ 514.074915][T20071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.102244][T20096] netlink: 'syz.1.3519': attribute type 6 has an invalid length. [ 514.110626][T20096] netlink: 'syz.1.3519': attribute type 23 has an invalid length. [ 514.120292][T20096] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.166405][T20097] IPVS: using max 29 ests per chain, 69600 per kthread [ 514.169993][T20087] bridge1: entered promiscuous mode [ 514.181895][T20087] bridge1: entered allmulticast mode [ 514.191640][T20087] team0: Port device bridge1 added [ 514.197797][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.219361][T20096] bridge2: entered promiscuous mode [ 514.224976][T20096] bridge2: entered allmulticast mode [ 514.233776][T20096] team0: Port device bridge2 added [ 514.317017][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 514.338223][ T13] batadv1: left promiscuous mode [ 514.384597][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3526'. [ 514.425340][T20116] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 514.512869][T20123] netlink: 'syz.3.3527': attribute type 14 has an invalid length. [ 514.571838][T20123] tipc: Started in network mode [ 514.583035][T20123] tipc: Node identity 05, cluster identity 4711 [ 514.689504][T20134] netlink: 'syz.7.3530': attribute type 15 has an invalid length. [ 515.613568][T20168] __nla_validate_parse: 2 callbacks suppressed [ 515.613588][T20168] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3539'. [ 515.767156][T20177] Cannot find set identified by id 0 to match [ 516.678541][T20207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 516.764521][T20210] netlink: 'syz.1.3544': attribute type 3 has an invalid length. [ 516.779110][T20210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3544'. [ 516.781446][ T5651] block nbd3: Receive control failed (result -32) [ 516.801936][ T5651] block nbd3: Receive control failed (result -32) [ 516.808728][ T5651] block nbd3: Receive control failed (result -32) [ 517.039091][ T7707] batadv1: left promiscuous mode [ 517.093295][T20225] tipc: Started in network mode [ 517.109009][T20225] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 517.143936][T20225] tipc: Enabling of bearer rejected, failed to enable media [ 517.317756][T20235] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 517.512228][T20246] hmac(sha2: entered promiscuous mode [ 518.143440][T20267] xt_cgroup: invalid path, errno=-2 [ 518.154562][T20267] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3561'. [ 518.170576][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3561'. [ 518.264980][T20272] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 518.428618][T20279] IPv6: addrconf: prefix option has invalid lifetime [ 518.441326][T20282] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 518.679410][T20299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3570'. [ 518.744583][T20304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 518.824154][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 519.409911][T20320] veth2: entered allmulticast mode [ 519.537905][T20323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3577'. [ 519.545693][T20327] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3578'. [ 519.771450][T20340] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 520.024563][T20354] lo speed is unknown, defaulting to 1000 [ 520.157731][T20365] tipc: Started in network mode [ 520.175980][T20365] tipc: Node identity , cluster identity 4711 [ 520.197581][T20368] xt_hashlimit: size too large, truncated to 1048576 [ 520.230981][T20365] tipc: Failed to obtain node identity [ 520.260313][T20365] tipc: Enabling of bearer rejected, failed to enable media [ 520.448321][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3590'. [ 520.552750][T20376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.611100][T20381] gretap2: entered allmulticast mode [ 520.626205][T20381] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 520.661842][T20376] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 520.689150][T20376] bond4 (unregistering): Released all slaves [ 520.939106][T20402] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3598'. [ 521.135302][T20412] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 521.444854][T20400] syzkaller0: entered promiscuous mode [ 521.456370][T20400] syzkaller0: entered allmulticast mode [ 523.217667][T20455] netlink: 'syz.2.3612': attribute type 10 has an invalid length. [ 523.225848][T20455] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3612'. [ 523.314721][T20456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3612'. [ 525.197780][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 525.721016][T20424] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 525.795848][T20461] FAULT_INJECTION: forcing a failure. [ 525.795848][T20461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.812667][T20461] CPU: 0 UID: 0 PID: 20461 Comm: syz.7.3613 Not tainted syzkaller #0 PREEMPT(full) [ 525.812693][T20461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.812704][T20461] Call Trace: [ 525.812712][T20461] [ 525.812720][T20461] dump_stack_lvl+0xe8/0x150 [ 525.812748][T20461] should_fail_ex+0x412/0x560 [ 525.812775][T20461] _copy_from_iter+0x1d3/0x1670 [ 525.812798][T20461] ? rcu_is_watching+0x15/0xb0 [ 525.812826][T20461] ? __pfx__copy_from_iter+0x10/0x10 [ 525.812853][T20461] ? netlink_sendmsg+0x650/0xb40 [ 525.812876][T20461] ? skb_put+0x11b/0x210 [ 525.812898][T20461] netlink_sendmsg+0x6c0/0xb40 [ 525.812929][T20461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.812953][T20461] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.812984][T20461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.813012][T20461] ____sys_sendmsg+0x972/0x9f0 [ 525.813033][T20461] ? __might_fault+0xaf/0x130 [ 525.813061][T20461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.813093][T20461] ? import_iovec+0x73/0xa0 [ 525.813116][T20461] ___sys_sendmsg+0x2a5/0x360 [ 525.813133][T20461] ? __lock_acquire+0x6b5/0x2cf0 [ 525.813157][T20461] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.813213][T20461] ? __fget_files+0x2a/0x420 [ 525.813234][T20461] ? __fget_files+0x3a0/0x420 [ 525.813265][T20461] __x64_sys_sendmsg+0x1bd/0x2a0 [ 525.813290][T20461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.813320][T20461] ? __pfx_ksys_write+0x10/0x10 [ 525.813353][T20461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.813374][T20461] do_syscall_64+0x174/0x580 [ 525.813395][T20461] ? trace_irq_disable+0x3b/0x140 [ 525.813420][T20461] ? clear_bhb_loop+0x40/0x90 [ 525.813442][T20461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.813460][T20461] RIP: 0033:0x7fba68f9ce59 [ 525.813478][T20461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.813493][T20461] RSP: 002b:00007fba69db3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.813512][T20461] RAX: ffffffffffffffda RBX: 00007fba69215fa0 RCX: 00007fba68f9ce59 [ 525.813526][T20461] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 525.813537][T20461] RBP: 00007fba69db3090 R08: 0000000000000000 R09: 0000000000000000 [ 525.813548][T20461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.813558][T20461] R13: 00007fba69216038 R14: 00007fba69215fa0 R15: 00007ffde05965e8 [ 525.813588][T20461] [ 526.085240][T20463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.161311][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3615'. [ 526.177916][T20465] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 526.325484][T20463] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.332936][T20463] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.353222][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3620'. [ 526.451570][T20463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.484066][T20463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.597156][ T7709] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.605713][ T7709] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.747068][ T7709] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.771675][ T7709] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.788059][T20495] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3624'. [ 527.042608][T20505] FAULT_INJECTION: forcing a failure. [ 527.042608][T20505] name failslab, interval 1, probability 0, space 0, times 0 [ 527.081233][T20505] CPU: 0 UID: 0 PID: 20505 Comm: syz.1.3627 Not tainted syzkaller #0 PREEMPT(full) [ 527.081259][T20505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.081273][T20505] Call Trace: [ 527.081280][T20505] [ 527.081288][T20505] dump_stack_lvl+0xe8/0x150 [ 527.081314][T20505] should_fail_ex+0x412/0x560 [ 527.081339][T20505] should_failslab+0xa8/0x100 [ 527.081357][T20505] ? skb_clone+0x212/0x3a0 [ 527.081379][T20505] kmem_cache_alloc_noprof+0x87/0x650 [ 527.081401][T20505] ? apparmor_capable+0x126/0x170 [ 527.081426][T20505] skb_clone+0x212/0x3a0 [ 527.081444][T20505] ? nfnetlink_rcv+0x4b0/0x27b0 [ 527.081465][T20505] nfnetlink_rcv+0x4de/0x27b0 [ 527.081486][T20505] ? kernel_text_address+0xa5/0xe0 [ 527.081565][T20505] ? __kernel_text_address+0xd/0x30 [ 527.081591][T20505] ? arch_stack_walk+0xfb/0x150 [ 527.081638][T20505] ? stack_trace_save+0xa9/0x100 [ 527.081669][T20505] ? __lock_acquire+0x6b5/0x2cf0 [ 527.081689][T20505] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 527.081724][T20505] ? __lock_acquire+0x6b5/0x2cf0 [ 527.081753][T20505] ? __netlink_lookup+0xc6/0x8b0 [ 527.081784][T20505] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.081804][T20505] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.081830][T20505] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.081850][T20505] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.081875][T20505] netlink_unicast+0x75c/0x8e0 [ 527.081905][T20505] netlink_sendmsg+0x813/0xb40 [ 527.081934][T20505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.081957][T20505] ? aa_sock_msg_perm+0xf1/0x1b0 [ 527.081984][T20505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.082012][T20505] ____sys_sendmsg+0x972/0x9f0 [ 527.082032][T20505] ? __might_fault+0xaf/0x130 [ 527.082061][T20505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.082089][T20505] ? import_iovec+0x73/0xa0 [ 527.082113][T20505] ___sys_sendmsg+0x2a5/0x360 [ 527.082132][T20505] ? __lock_acquire+0x6b5/0x2cf0 [ 527.082152][T20505] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.082206][T20505] ? __fget_files+0x2a/0x420 [ 527.082225][T20505] ? __fget_files+0x3a0/0x420 [ 527.082254][T20505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 527.082276][T20505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.082306][T20505] ? __pfx_ksys_write+0x10/0x10 [ 527.082337][T20505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.082356][T20505] do_syscall_64+0x174/0x580 [ 527.082375][T20505] ? trace_irq_disable+0x3b/0x140 [ 527.082400][T20505] ? clear_bhb_loop+0x40/0x90 [ 527.082421][T20505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.082438][T20505] RIP: 0033:0x7f003ff9ce59 [ 527.082455][T20505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.082470][T20505] RSP: 002b:00007f0040e8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.082497][T20505] RAX: ffffffffffffffda RBX: 00007f0040215fa0 RCX: 00007f003ff9ce59 [ 527.082509][T20505] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 527.082519][T20505] RBP: 00007f0040e8b090 R08: 0000000000000000 R09: 0000000000000000 [ 527.082530][T20505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.082539][T20505] R13: 00007f0040216038 R14: 00007f0040215fa0 R15: 00007ffcbe7139a8 [ 527.082566][T20505] [ 527.146985][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.211642][T20515] lo speed is unknown, defaulting to 1000 [ 528.269093][T20541] lo: entered allmulticast mode [ 528.284453][T20543] lo: left allmulticast mode [ 528.433827][ T29] audit: type=1107 audit(1780695084.920:13): pid=20540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 528.933238][T20568] veth0: entered promiscuous mode [ 528.943098][T20567] veth0: left promiscuous mode [ 528.997955][T20572] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 529.074657][T20574] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3645'. [ 529.095872][T20572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.142162][T20579] bond3: (slave veth7): Enslaving as an active interface with a down link [ 529.189845][T20572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.202551][T20572] bond3: (slave batadv0): making interface the new active one [ 529.215349][T20572] batadv0: entered promiscuous mode [ 529.221349][T20572] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 529.343701][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3651'. [ 529.425256][T20596] syzkaller1: entered promiscuous mode [ 529.431385][T20596] syzkaller1: entered allmulticast mode [ 529.587618][T20601] nbd8: detected capacity change from 0 to 63 [ 529.614768][T20598] block nbd8: NBD_DISCONNECT [ 529.633934][T20598] block nbd8: Disconnected due to user request. [ 529.648080][T20598] block nbd8: shutting down sockets [ 529.664976][T20601] geneve2: entered promiscuous mode [ 529.699776][ C1] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.709170][ C1] Buffer I/O error on dev nbd8, logical block 0, async page read [ 529.743254][ C1] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.752429][ C1] Buffer I/O error on dev nbd8, logical block 1, async page read [ 529.762328][ C1] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.771495][ C1] Buffer I/O error on dev nbd8, logical block 2, async page read [ 529.779367][ C1] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.788455][ C1] Buffer I/O error on dev nbd8, logical block 3, async page read [ 529.796562][T15547] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.864890][T15547] Buffer I/O error on dev nbd8, logical block 0, async page read [ 529.891743][T15547] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.921005][T15547] Buffer I/O error on dev nbd8, logical block 1, async page read [ 529.947958][T15547] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.968229][T15547] Buffer I/O error on dev nbd8, logical block 2, async page read [ 529.987657][T15547] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.006786][T15547] Buffer I/O error on dev nbd8, logical block 3, async page read [ 530.026446][T15547] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.040099][T15547] Buffer I/O error on dev nbd8, logical block 0, async page read [ 530.057476][T15547] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.076578][T15547] Buffer I/O error on dev nbd8, logical block 1, async page read [ 530.102470][T15547] ldm_validate_partition_table(): Disk read failed. [ 530.120539][T15547] Dev nbd8: unable to read RDB block 0 [ 530.137849][T15547] nbd8: unable to read partition table [ 530.183209][T15547] ldm_validate_partition_table(): Disk read failed. [ 530.207776][T15547] Dev nbd8: unable to read RDB block 0 [ 530.244473][T15547] nbd8: unable to read partition table [ 530.392368][T20618] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 530.492666][T20627] FAULT_INJECTION: forcing a failure. [ 530.492666][T20627] name failslab, interval 1, probability 0, space 0, times 0 [ 530.525555][T20627] CPU: 0 UID: 0 PID: 20627 Comm: syz.3.3661 Not tainted syzkaller #0 PREEMPT(full) [ 530.525600][T20627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.525622][T20627] Call Trace: [ 530.525637][T20627] [ 530.525652][T20627] dump_stack_lvl+0xe8/0x150 [ 530.525680][T20627] should_fail_ex+0x412/0x560 [ 530.525706][T20627] should_failslab+0xa8/0x100 [ 530.525727][T20627] __kvmalloc_node_noprof+0x178/0x8a0 [ 530.525753][T20627] ? rhashtable_init_noprof+0x52e/0xad0 [ 530.525773][T20627] ? rhashtable_init_noprof+0x12d/0xad0 [ 530.525797][T20627] rhashtable_init_noprof+0x52e/0xad0 [ 530.525823][T20627] rhltable_init_noprof+0x1e/0x60 [ 530.525843][T20627] nf_tables_newtable+0x68f/0x1910 [ 530.526012][T20627] nfnetlink_rcv+0x123e/0x27b0 [ 530.526066][T20627] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 530.526133][T20627] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.526165][T20627] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.526191][T20627] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.526217][T20627] netlink_unicast+0x75c/0x8e0 [ 530.526246][T20627] netlink_sendmsg+0x813/0xb40 [ 530.526272][T20627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.526294][T20627] ? aa_sock_msg_perm+0xf1/0x1b0 [ 530.526318][T20627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.526341][T20627] ____sys_sendmsg+0x972/0x9f0 [ 530.526358][T20627] ? __might_fault+0xaf/0x130 [ 530.526381][T20627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.526403][T20627] ? import_iovec+0x73/0xa0 [ 530.526423][T20627] ___sys_sendmsg+0x2a5/0x360 [ 530.526442][T20627] ? __lock_acquire+0x6b5/0x2cf0 [ 530.526460][T20627] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.526505][T20627] ? __fget_files+0x2a/0x420 [ 530.526523][T20627] ? __fget_files+0x3a0/0x420 [ 530.526550][T20627] __x64_sys_sendmsg+0x1bd/0x2a0 [ 530.526569][T20627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.526593][T20627] ? __pfx_ksys_write+0x10/0x10 [ 530.526620][T20627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.526635][T20627] do_syscall_64+0x174/0x580 [ 530.526650][T20627] ? trace_irq_disable+0x3b/0x140 [ 530.526670][T20627] ? clear_bhb_loop+0x40/0x90 [ 530.526687][T20627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.526701][T20627] RIP: 0033:0x7f7c2139ce59 [ 530.526715][T20627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.526727][T20627] RSP: 002b:00007f7c22213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.526742][T20627] RAX: ffffffffffffffda RBX: 00007f7c21615fa0 RCX: 00007f7c2139ce59 [ 530.526752][T20627] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 530.526760][T20627] RBP: 00007f7c22213090 R08: 0000000000000000 R09: 0000000000000000 [ 530.526769][T20627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.526777][T20627] R13: 00007f7c21616038 R14: 00007f7c21615fa0 R15: 00007fff2e0bbf08 [ 530.526799][T20627] [ 530.847018][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3661'. [ 531.073686][T20642] netlink: 'syz.7.3665': attribute type 1 has an invalid length. [ 531.139251][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3667'. [ 531.142668][T20637] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 531.163490][T20637] bond4 (unregistering): Released all slaves [ 531.278902][T20654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3669'. [ 531.313112][T20657] IPVS: Error connecting to the multicast addr [ 531.384945][T20642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.426646][T20648] bond4: (slave veth1): Enslaving as an active interface with a down link [ 531.514934][T20654] team1: entered promiscuous mode [ 531.532834][T20661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3670'. [ 531.552791][T20654] team1: entered allmulticast mode [ 531.566677][T20654] 8021q: adding VLAN 0 to HW filter on device team1 [ 531.617271][T20660] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 531.673365][T20660] bond4: (slave batadv2): making interface the new active one [ 531.695274][T20660] batadv2: entered promiscuous mode [ 531.716048][T20660] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 532.121530][T20680] lo speed is unknown, defaulting to 1000 [ 533.425583][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3680'. [ 534.298393][T20657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.333800][T20684] netlink: 'syz.1.3674': attribute type 1 has an invalid length. [ 534.357401][T20684] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3674'. [ 534.525446][T20729] netlink: 'syz.2.3686': attribute type 1 has an invalid length. [ 534.612084][T20729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.632006][T20736] netlink: 'syz.1.3689': attribute type 4 has an invalid length. [ 534.654520][T20723] bond4: (slave veth9): Enslaving as an active interface with a down link [ 534.696597][T20732] netlink: 'syz.1.3689': attribute type 4 has an invalid length. [ 534.712534][T20723] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 534.725216][T20723] bond4: (slave batadv2): making interface the new active one [ 534.742518][T20723] batadv2: entered promiscuous mode [ 534.754592][T20723] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 534.787653][ T24] lo speed is unknown, defaulting to 1000 [ 534.809442][ T24] syz2: Port: 1 Link ACTIVE [ 534.815904][T20732] netlink: 'syz.1.3689': attribute type 4 has an invalid length. [ 534.848300][ T5645] lo speed is unknown, defaulting to 1000 [ 534.878595][ T5645] syz2: Port: 1 Link DOWN [ 534.964036][T20747] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 535.175513][T20747] bond5 (unregistering): Released all slaves [ 535.351047][T20756] vlan2: entered promiscuous mode [ 535.362764][T20756] bridge0: entered promiscuous mode [ 535.400039][T20759] netlink: 'syz.3.3696': attribute type 4 has an invalid length. [ 535.463952][T20761] syzkaller1: entered promiscuous mode [ 535.476543][T20761] syzkaller1: entered allmulticast mode [ 535.494755][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3698'. [ 535.722149][T20775] netlink: 'syz.3.3703': attribute type 1 has an invalid length. [ 535.838364][T20784] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3705'. [ 535.855127][T20775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.886208][T20788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3706'. [ 535.899804][T20783] ip6t_rpfilter: unknown options [ 535.959817][T20780] bond4: (slave veth9): Enslaving as an active interface with a down link [ 535.965476][T20792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3706'. [ 536.018209][T20775] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 536.048231][T20775] bond4: (slave batadv2): making interface the new active one [ 536.071152][T20775] batadv2: entered promiscuous mode [ 536.081836][T20775] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 536.577333][T20815] netlink: 'syz.7.3711': attribute type 1 has an invalid length. [ 536.701413][T20815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.853042][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3714'. [ 537.208684][T20846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.080460][T20871] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3726'. [ 538.251614][T20876] syzkaller1: entered promiscuous mode [ 538.276453][T20876] syzkaller1: entered allmulticast mode [ 538.695932][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'. [ 538.830172][T20893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3730'. [ 539.067265][T20911] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3732'. [ 539.096103][T20911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3732'. [ 539.199430][T20913] netlink: 'syz.3.3735': attribute type 1 has an invalid length. [ 539.257734][T20915] netlink: 'syz.3.3735': attribute type 13 has an invalid length. [ 539.306821][T20913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.489365][T20916] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 539.555802][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3739'. [ 539.571808][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3739'. [ 539.625468][T20913] bond5: (slave veth11): Enslaving as an active interface with a down link [ 539.664758][T20923] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 539.692778][T20923] bond5: (slave batadv3): making interface the new active one [ 539.737173][T20923] batadv3: entered promiscuous mode [ 539.749539][T20923] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 539.810724][T20915] bond5 (unregistering): (slave veth11): Releasing active interface [ 539.823874][T20915] bond5 (unregistering): (slave batadv3): Releasing active interface [ 539.836012][T20915] bond5 (unregistering): Released all slaves [ 539.953755][T20933] netlink: 748 bytes leftover after parsing attributes in process `syz.2.3740'. [ 540.084754][T20948] netlink: 'syz.1.3743': attribute type 8 has an invalid length. [ 540.109538][T20944] netlink: 'syz.1.3743': attribute type 11 has an invalid length. [ 540.215122][T20947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3744'. [ 540.334837][T20947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.352054][T20951] syzkaller1: entered promiscuous mode [ 540.359710][T20951] syzkaller1: entered allmulticast mode [ 540.405188][T20955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 540.505474][T20967] netlink: 'syz.7.3750': attribute type 1 has an invalid length. [ 540.527133][T20967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.721098][T20965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.743576][T20965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.773935][T20965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.787453][T20965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.959403][ T1149] batadv0: left promiscuous mode [ 541.123268][T20983] bond6: entered promiscuous mode [ 541.655267][T21018] netlink: 'syz.7.3769': attribute type 4 has an invalid length. [ 541.707947][T21020] FAULT_INJECTION: forcing a failure. [ 541.707947][T21020] name failslab, interval 1, probability 0, space 0, times 0 [ 541.744702][T21020] CPU: 0 UID: 0 PID: 21020 Comm: syz.2.3770 Not tainted syzkaller #0 PREEMPT(full) [ 541.744726][T21020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 541.744736][T21020] Call Trace: [ 541.744742][T21020] [ 541.744749][T21020] dump_stack_lvl+0xe8/0x150 [ 541.744773][T21020] should_fail_ex+0x412/0x560 [ 541.744795][T21020] should_failslab+0xa8/0x100 [ 541.744813][T21020] __kmalloc_noprof+0xe8/0x760 [ 541.744832][T21020] ? __kasan_kmalloc+0x93/0xb0 [ 541.744858][T21020] ? nla_strdup+0x9d/0x140 [ 541.744875][T21020] ? __kmalloc_cache_noprof+0x31c/0x660 [ 541.744899][T21020] nla_strdup+0x9d/0x140 [ 541.744918][T21020] nf_tables_newchain+0x1a9a/0x2890 [ 541.744957][T21020] ? __pfx_nf_tables_newchain+0x10/0x10 [ 541.745000][T21020] ? nft_trans_table_add+0x230/0x430 [ 541.745018][T21020] ? nfnl_pernet+0x23/0x240 [ 541.745034][T21020] ? nfnl_pernet+0x23/0x240 [ 541.745058][T21020] ? __nla_parse+0x40/0x60 [ 541.745079][T21020] nfnetlink_rcv+0x123e/0x27b0 [ 541.745126][T21020] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 541.745156][T21020] ? ref_tracker_free+0x693/0x840 [ 541.745200][T21020] ? __netlink_deliver_tap+0x807/0x850 [ 541.745226][T21020] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.745243][T21020] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.745265][T21020] netlink_unicast+0x75c/0x8e0 [ 541.745290][T21020] netlink_sendmsg+0x813/0xb40 [ 541.745317][T21020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.745338][T21020] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.745363][T21020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.745386][T21020] ____sys_sendmsg+0x972/0x9f0 [ 541.745405][T21020] ? __might_fault+0xaf/0x130 [ 541.745431][T21020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.745466][T21020] ? import_iovec+0x73/0xa0 [ 541.745488][T21020] ___sys_sendmsg+0x2a5/0x360 [ 541.745504][T21020] ? __lock_acquire+0x6b5/0x2cf0 [ 541.745526][T21020] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.745576][T21020] ? __fget_files+0x2a/0x420 [ 541.745593][T21020] ? __fget_files+0x3a0/0x420 [ 541.745620][T21020] __x64_sys_sendmsg+0x1bd/0x2a0 [ 541.745640][T21020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.745667][T21020] ? __pfx_ksys_write+0x10/0x10 [ 541.745696][T21020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.745713][T21020] do_syscall_64+0x174/0x580 [ 541.745730][T21020] ? trace_irq_disable+0x3b/0x140 [ 541.745752][T21020] ? clear_bhb_loop+0x40/0x90 [ 541.745771][T21020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.745785][T21020] RIP: 0033:0x7fac9e99ce59 [ 541.745801][T21020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.745813][T21020] RSP: 002b:00007fac9f7b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.745831][T21020] RAX: ffffffffffffffda RBX: 00007fac9ec15fa0 RCX: 00007fac9e99ce59 [ 541.745842][T21020] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 541.745851][T21020] RBP: 00007fac9f7b6090 R08: 0000000000000000 R09: 0000000000000000 [ 541.745860][T21020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.745869][T21020] R13: 00007fac9ec16038 R14: 00007fac9ec15fa0 R15: 00007ffdb163bb48 [ 541.745896][T21020] [ 542.488875][T21042] bond1: entered allmulticast mode [ 542.536447][T21052] lo: Caught tx_queue_len zero misconfig [ 542.544540][T21052] __nla_validate_parse: 4 callbacks suppressed [ 542.544557][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 542.653414][T21055] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3782'. [ 543.072238][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3785'. [ 543.818790][T21084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3787'. [ 546.184668][T21080] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 546.230017][ T7712] batadv2: left promiscuous mode [ 546.307371][T17421] batadv2: left promiscuous mode [ 546.373338][T21091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3788'. [ 546.412073][T21100] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3792'. [ 546.431495][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3791'. [ 546.483568][T21104] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 546.610189][T21113] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3797'. [ 546.620802][T21108] smbdirect: ib_dev[syz2] removed [ 546.627287][T21117] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3797'. [ 547.557517][ T7702] batadv2: left promiscuous mode [ 547.599625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.803655][T21140] syzkaller0: entered promiscuous mode [ 547.816365][T21140] syzkaller0: entered allmulticast mode [ 547.861497][T21140] tipc: Enabled bearer , priority 0 [ 547.892732][T21136] tipc: Resetting bearer [ 547.929718][T21136] tipc: Disabling bearer [ 548.211142][T21174] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3810'. [ 548.289981][T21181] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3810'. [ 548.746805][T21181] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3810'. [ 548.974736][T21195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3818'. [ 549.170429][T21207] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 549.304695][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 549.347359][T21217] openvswitch: netlink: Flow actions attr not present in new flow. [ 549.493709][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'. [ 549.540983][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'. [ 549.745408][T21236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.771758][T21236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.844390][T21234] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 549.913410][T21234] bond5: entered promiscuous mode [ 549.934316][T21234] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.116684][T21249] tipc: Started in network mode [ 550.126684][T21249] tipc: Node identity fadf4dde3cb4, cluster identity 4711 [ 550.146534][T21249] tipc: Enabled bearer , priority 0 [ 550.215742][T21256] netlink: 840 bytes leftover after parsing attributes in process `syz.1.3835'. [ 550.342119][ T5365] hsr0: entered promiscuous mode [ 550.362097][T21263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 550.433814][T21248] tipc: Disabling bearer [ 550.504709][T21271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3838'. [ 551.094498][T21271] FAULT_INJECTION: forcing a failure. [ 551.094498][T21271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.134063][T21271] CPU: 1 UID: 0 PID: 21271 Comm: syz.1.3838 Not tainted syzkaller #0 PREEMPT(full) [ 551.134090][T21271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.134102][T21271] Call Trace: [ 551.134110][T21271] [ 551.134118][T21271] dump_stack_lvl+0xe8/0x150 [ 551.134145][T21271] should_fail_ex+0x412/0x560 [ 551.134171][T21271] _copy_to_user+0x31/0xb0 [ 551.134196][T21271] simple_read_from_buffer+0xe1/0x170 [ 551.134224][T21271] proc_fail_nth_read+0x1bb/0x230 [ 551.134298][T21271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.134324][T21271] ? rw_verify_area+0x2a6/0x4d0 [ 551.134347][T21271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.134371][T21271] vfs_read+0x20c/0xa70 [ 551.134400][T21271] ? __pfx___mutex_lock+0x10/0x10 [ 551.134423][T21271] ? __pfx_vfs_read+0x10/0x10 [ 551.134452][T21271] ? __fget_files+0x2a/0x420 [ 551.134478][T21271] ? __fget_files+0x3a0/0x420 [ 551.134501][T21271] ? __fget_files+0x2a/0x420 [ 551.134531][T21271] ksys_read+0x150/0x270 [ 551.134558][T21271] ? __pfx_ksys_read+0x10/0x10 [ 551.134590][T21271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.134611][T21271] do_syscall_64+0x174/0x580 [ 551.134629][T21271] ? trace_irq_disable+0x3b/0x140 [ 551.134654][T21271] ? clear_bhb_loop+0x40/0x90 [ 551.134676][T21271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.134694][T21271] RIP: 0033:0x7f003ff5d68e [ 551.134711][T21271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.134726][T21271] RSP: 002b:00007f0040e8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.134744][T21271] RAX: ffffffffffffffda RBX: 00007f0040e8b6c0 RCX: 00007f003ff5d68e [ 551.134757][T21271] RDX: 000000000000000f RSI: 00007f0040e8b0a0 RDI: 0000000000000004 [ 551.134769][T21271] RBP: 00007f0040e8b090 R08: 0000000000000000 R09: 0000000000000000 [ 551.134780][T21271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.134790][T21271] R13: 00007f0040216038 R14: 00007f0040215fa0 R15: 00007ffcbe7139a8 [ 551.134822][T21271] [ 551.925666][T21308] netlink: 'syz.1.3848': attribute type 1 has an invalid length. [ 551.942336][T21308] netlink: 'syz.1.3848': attribute type 1 has an invalid length. [ 552.105630][T21313] syzkaller1: entered promiscuous mode [ 552.116126][T21313] syzkaller1: entered allmulticast mode [ 552.333828][T21334] netlink: 'syz.7.3854': attribute type 15 has an invalid length. [ 552.348077][T21334] netlink: 'syz.7.3854': attribute type 25 has an invalid length. [ 552.666749][T21350] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 552.693942][T21350] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 552.875633][T21373] netlink: 'syz.8.3866': attribute type 1 has an invalid length. [ 552.951520][T21376] bond4: option miimon: invalid value (18446744073709551607) [ 552.965358][T21376] bond4: option miimon: allowed values 0 - 2147483647 [ 552.975482][T21376] bond4 (unregistering): Released all slaves [ 553.011568][T21373] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 553.188811][T21386] syzkaller0: entered promiscuous mode [ 553.226853][T21386] syzkaller0: entered allmulticast mode [ 553.249845][T21386] netlink: 'syz.7.3868': attribute type 2 has an invalid length. [ 553.279477][T21387] __nla_validate_parse: 13 callbacks suppressed [ 553.279496][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3868'. [ 553.344700][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3868'. [ 553.456777][T21402] netlink: 'syz.3.3874': attribute type 2 has an invalid length. [ 553.470482][T21402] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3874'. [ 553.475469][T21400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3873'. [ 553.526407][T21400] hsr_slave_0: left promiscuous mode [ 553.553661][T21400] hsr_slave_1: left promiscuous mode [ 553.853265][T21407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.865837][T21407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.959649][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3883'. [ 554.162849][T21407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.192615][T21443] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 554.204294][T21407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.334027][T21448] ipt_REJECT: ECHOREPLY no longer supported. [ 554.385367][T21407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.417082][T21407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.440248][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3888'. [ 554.715279][T21407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.734555][T21461] netlink: 'syz.3.3890': attribute type 1 has an invalid length. [ 554.748450][T21407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.000486][T21463] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.011152][T21463] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.075534][T21468] team0 (unregistering): Port device bridge1 removed [ 555.105883][T21468] team0 (unregistering): Port device bridge2 removed [ 555.144247][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3893'. [ 555.459888][T17421] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.477951][T17421] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.553198][T17421] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.567038][T17421] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.652067][T17421] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.686478][T17421] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.787755][ T7717] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.813589][ T7717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.122880][T21526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3900'. [ 556.240357][T21526] lo speed is unknown, defaulting to 1000 [ 556.280717][T21526] lo speed is unknown, defaulting to 1000 [ 556.540068][T21548] syzkaller1: entered promiscuous mode [ 556.547987][T21526] lo speed is unknown, defaulting to 1000 [ 556.586348][T21548] syzkaller1: entered allmulticast mode [ 556.727211][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3910'. [ 556.905344][T21527] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 556.936073][T21527] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 556.998111][T21571] netlink: 'syz.1.3913': attribute type 3 has an invalid length. [ 557.073756][T21571] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 557.257389][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3917'. [ 557.363870][ T29] audit: type=1804 audit(1780695113.850:14): pid=21584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3916" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=960 res=1 errno=0 [ 557.430540][ T29] audit: type=1800 audit(1780695113.850:15): pid=21584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3916" name="cgroup.controllers" dev="tmpfs" ino=960 res=0 errno=0 [ 557.434990][T21526] infiniband syz0: set active [ 557.457449][ T5832] lo speed is unknown, defaulting to 1000 [ 557.463776][T21526] infiniband syz0: added lo [ 557.470927][T21526] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 557.476891][T21526] infiniband syz0: Couldn't open port 1 [ 557.491595][T21526] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 557.532687][T21526] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 557.550919][T21526] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 557.651031][T21526] RDS/IB: syz0: added [ 557.655432][T21526] smc: adding ib device syz0 with port count 1 [ 557.662174][T21526] smc: ib device syz0 port 1 has no pnetid [ 557.670689][ T5832] lo speed is unknown, defaulting to 1000 [ 557.678377][T21526] lo speed is unknown, defaulting to 1000 [ 557.823974][T21602] bond7: Unable to set up delay as MII monitoring is disabled [ 557.880115][T21602] bond7 (unregistering): Released all slaves [ 557.973106][T21609] batman_adv: batadv0: Adding interface: dummy0 [ 557.999052][T21609] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.058562][T21609] batman_adv: batadv0: Interface activated: dummy0 [ 558.827724][T21651] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 558.845516][T21651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.866615][T21651] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 558.979100][T21656] __nla_validate_parse: 5 callbacks suppressed [ 558.979117][T21656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3937'. [ 559.009409][T21656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3937'. [ 559.041604][T21656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3937'. [ 559.141379][T21657] lo speed is unknown, defaulting to 1000 [ 559.346772][T21664] dvmrp8: entered allmulticast mode [ 559.850312][T21526] lo speed is unknown, defaulting to 1000 [ 559.872790][T21678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3942'. [ 559.893552][T21678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3942'. [ 560.103167][T21685] netlink: 'syz.1.3944': attribute type 9 has an invalid length. [ 560.128437][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'. [ 560.449541][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3947'. [ 560.467184][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3947'. [ 560.545744][T21695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3946'. [ 560.598462][T21694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.636107][T21694] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.672664][T21694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.903411][T21694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.966671][T21694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.035485][T21694] veth1_vlan: left promiscuous mode [ 561.075756][T21694] veth0_vlan: left promiscuous mode [ 561.098602][T21694] veth0_vlan: entered promiscuous mode [ 561.130744][T21694] veth1_vlan: entered promiscuous mode [ 561.183461][T21694] veth0_macvtap: left promiscuous mode [ 561.205981][T21694] veth0_macvtap: entered promiscuous mode [ 561.294166][T21694] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 561.338931][T17421] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.346159][T17421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.372666][T17421] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.379906][T17421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.477825][T21526] lo speed is unknown, defaulting to 1000 [ 561.492081][ T7700] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.508018][ T7700] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.640461][ T7700] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.664576][ T7700] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.727232][T21712] bond1: (slave veth3): Releasing active interface [ 561.736385][T21712] bond1: (slave veth3): the permanent HWaddr of slave - 12:6e:43:a4:b7:06 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 561.789355][T21712] bond1: (slave batadv1): Releasing active interface [ 561.813422][T21712] batadv1: left promiscuous mode [ 561.860393][T21712] bond2: (slave gretap1): Releasing active interface [ 561.876828][T21721] netlink: 'syz.3.3952': attribute type 1 has an invalid length. [ 561.906467][T21721] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3952'. [ 561.929926][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.951899][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.959884][ T6863] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.057916][ T5365] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.910905][T21526] lo speed is unknown, defaulting to 1000 [ 562.963328][ T5365] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.985677][T21754] netlink: 'syz.1.3957': attribute type 6 has an invalid length. [ 563.015303][T21754] netlink: 'syz.1.3957': attribute type 23 has an invalid length. [ 563.619140][T21526] lo speed is unknown, defaulting to 1000 [ 563.901253][T21526] lo speed is unknown, defaulting to 1000 [ 564.209569][T21789] __nla_validate_parse: 5 callbacks suppressed [ 564.209590][T21789] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3964'. [ 564.378031][T21526] lo speed is unknown, defaulting to 1000 [ 564.518466][T21800] netlink: 'syz.1.3968': attribute type 1 has an invalid length. [ 564.577209][T21800] bond4: entered promiscuous mode [ 564.579620][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3968'. [ 564.582884][T21800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.629719][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3968'. [ 564.658199][T21800] bond4: (slave bridge3): making interface the new active one [ 564.665886][T21800] bridge3: entered promiscuous mode [ 564.673875][T21800] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 564.751662][T21526] lo speed is unknown, defaulting to 1000 [ 564.983050][T21526] lo speed is unknown, defaulting to 1000 [ 565.230287][T21526] lo speed is unknown, defaulting to 1000 [ 565.426825][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3970'. [ 565.602421][T21526] lo speed is unknown, defaulting to 1000 [ 565.604378][T21814] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 565.676498][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 565.823651][T21526] lo speed is unknown, defaulting to 1000 [ 565.947491][T21526] lo speed is unknown, defaulting to 1000 [ 566.070839][T21526] lo speed is unknown, defaulting to 1000 [ 566.197936][T21526] lo speed is unknown, defaulting to 1000 [ 566.836526][T21828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3975'. [ 566.900963][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3976'. [ 566.910411][T21835] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 567.019328][T21837] netlink: 4292 bytes leftover after parsing attributes in process `syz.2.3977'. [ 567.294675][T21842] syzkaller0: entered promiscuous mode [ 567.313976][T21842] syzkaller0: entered allmulticast mode [ 567.353594][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 567.659403][T21857] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 567.676207][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3986'. [ 567.696439][T21857] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 567.746136][T21863] netlink: 'syz.7.3988': attribute type 1 has an invalid length. [ 567.850531][T21863] bond7: entered promiscuous mode [ 567.856442][T21863] 8021q: adding VLAN 0 to HW filter on device bond7 [ 568.072616][T21869] 8021q: adding VLAN 0 to HW filter on device bond7 [ 568.102811][T21869] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 568.128762][T21869] bond7: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 568.150488][T21869] bond7: (slave ipip0): making interface the new active one [ 568.163872][T21887] netlink: 'syz.1.3990': attribute type 21 has an invalid length. [ 568.176705][T21869] ipip0: entered promiscuous mode [ 568.183832][T21869] bond7: (slave ipip0): Enslaving as an active interface with an up link [ 568.216100][T21878] syzkaller1: entered promiscuous mode [ 568.217477][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3990'. [ 568.239500][T21878] syzkaller1: entered allmulticast mode [ 568.633062][T21904] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 568.904774][T21919] netlink: 'syz.1.4000': attribute type 10 has an invalid length. [ 569.015766][T21928] netlink: 'syz.1.4002': attribute type 1 has an invalid length. [ 569.199329][T21941] ip6tnl2: entered allmulticast mode [ 569.283900][T21944] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 569.462921][T21958] __nla_validate_parse: 3 callbacks suppressed [ 569.462937][T21958] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.4011'. [ 569.692030][T21969] sctp: [Deprecated]: syz.3.4013 (pid 21969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.692030][T21969] Use struct sctp_sack_info instead [ 570.208839][T21977] macvtap0: entered promiscuous mode [ 570.273728][ T7707] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 570.289199][ T7707] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 570.299847][ T5365] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 570.312630][T21993] tipc: Enabling of bearer rejected, failed to enable media [ 570.621800][T22006] Bluetooth: MGMT ver 1.23 [ 570.650508][T22000] netlink: 'syz.1.4016': attribute type 39 has an invalid length. [ 570.668819][T22001] can: request_module (can-proto-3) failed. [ 570.903093][T22015] Cannot find del_set index 0 as target [ 570.964398][ T5365] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 571.277675][ T5365] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 571.609591][ T29] audit: type=1800 audit(1780695128.100:16): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4018" name="memory.events" dev="tmpfs" ino=1146 res=0 errno=0 [ 572.580629][T22033] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 573.202400][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 574.322576][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 574.674957][T22009] syzkaller0: entered promiscuous mode [ 574.680662][T22009] syzkaller0: entered allmulticast mode [ 574.689658][T22013] tipc: Enabled bearer , priority 0 [ 574.725643][T22005] tipc: Resetting bearer [ 574.838796][T22005] tipc: Disabling bearer [ 575.001357][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4027'. [ 575.044543][T22045] ip6gre1: entered promiscuous mode [ 575.073657][T22045] ip6gre1: entered allmulticast mode [ 575.175140][T22049] batman_adv: batadv0: Adding interface: ipvlan2 [ 575.187639][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4029'. [ 575.202679][T22049] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.237121][T22049] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 575.254640][T22045] netlink: 'syz.7.4027': attribute type 6 has an invalid length. [ 575.273045][T22045] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4027'. [ 575.342715][T22058] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4029'. [ 575.351896][T22046] lo speed is unknown, defaulting to 1000 [ 575.796045][T22074] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 576.355325][T22095] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4039'. [ 576.372520][T22095] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4039'. [ 576.414998][ T5645] IPVS: starting estimator thread 0... [ 576.517786][T22100] IPVS: using max 28 ests per chain, 67200 per kthread [ 576.614767][T22099] bridge4: entered promiscuous mode [ 576.652188][T22099] bridge4: entered allmulticast mode [ 576.976109][T22101] lo speed is unknown, defaulting to 1000 [ 577.068863][T22119] ip6tnl2: entered allmulticast mode [ 577.097369][T17421] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 577.114331][T17421] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 577.127617][ T5832] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 577.133297][T22125] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4048'. [ 577.166790][T22125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4048'. [ 577.196885][T22125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4048'. [ 577.203344][T22122] bridge0: port 1(vlan3) entered blocking state [ 577.235679][T22122] bridge0: port 1(vlan3) entered disabled state [ 577.279571][T22122] vlan3: entered allmulticast mode [ 577.290555][T22122] bridge_slave_1: entered allmulticast mode [ 577.298064][ T6863] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 577.341813][T22122] vlan3: entered promiscuous mode [ 577.363608][T22122] bridge_slave_1: entered promiscuous mode [ 577.838563][ T5832] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 578.027995][ T5645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.048512][ T5645] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 578.297238][T22159] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4056'. [ 578.340316][T22159] openvswitch: netlink: Flow key attr not present in new flow. [ 578.438735][T17525] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 578.579646][ T29] audit: type=1800 audit(1780695135.070:17): pid=22162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4057" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1184 res=0 errno=0 [ 578.818096][ T5645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.853200][ T29] audit: type=1800 audit(1780695135.130:18): pid=22163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4057" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1184 res=0 errno=0 [ 578.910218][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bb68400: rx timeout, send abort [ 579.410349][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062356c00: rx timeout, send abort [ 579.419150][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bb68400: abort rx timeout. Force session deactivation [ 579.488360][T22192] netlink: 'syz.3.4061': attribute type 1 has an invalid length. [ 579.520073][T22192] netlink: 'syz.3.4061': attribute type 2 has an invalid length. [ 579.559748][T22192] netlink: 'syz.3.4061': attribute type 1 has an invalid length. [ 579.636550][T22192] netlink: 'syz.3.4061': attribute type 3 has an invalid length. [ 579.911122][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062356000: rx timeout, send abort [ 579.920349][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062356c00: abort rx timeout. Force session deactivation [ 580.104087][T22210] vlan2: entered promiscuous mode [ 580.419502][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062356000: abort rx timeout. Force session deactivation [ 580.533254][T22223] __nla_validate_parse: 2 callbacks suppressed [ 580.533271][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4068'. [ 580.741181][T22231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4070'. [ 580.912809][T22239] netdevsim netdevsim8 €Â: renamed from netdevsim0 (while UP) [ 581.411234][T22245] batman_adv: batadv0: Interface deactivated: dummy0 [ 581.469119][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'. [ 581.516883][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 581.980389][ T35] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.990017][ T35] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.023155][ T35] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.054187][ T35] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.121193][T22290] bridge4: entered promiscuous mode [ 582.132945][T22290] bridge4: entered allmulticast mode [ 582.353999][T22306] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 582.742032][T22332] pim6reg1: entered promiscuous mode [ 582.784213][T22332] pim6reg1: entered allmulticast mode [ 582.796505][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 582.942539][T22338] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 583.095653][T22351] netlink: 'syz.7.4103': attribute type 1 has an invalid length. [ 583.127349][T22351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 583.139984][T22352] netlink: 'syz.1.4104': attribute type 1 has an invalid length. [ 583.164483][T22351] bond8: (slave veth9): Enslaving as an active interface with a down link [ 583.237188][T22352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.251343][T22363] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4106'. [ 584.121765][T22361] bond6: (slave veth5): Enslaving as an active interface with a down link [ 584.136437][T22362] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 584.145552][T22362] bond8: (slave batadv3): making interface the new active one [ 584.160578][T22362] batadv3: entered promiscuous mode [ 584.166175][T22362] bond8: (slave batadv3): Enslaving as an active interface with an up link [ 584.204910][T22368] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 584.249932][T22368] bond6: (slave batadv2): making interface the new active one [ 584.288676][T22368] batadv2: entered promiscuous mode [ 584.298197][T22368] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 584.314829][T22377] 8021q: VLANs not supported on wg2 [ 584.371822][T22385] syzkaller1: entered promiscuous mode [ 584.390022][T22385] syzkaller1: entered allmulticast mode [ 584.471370][T22391] netlink: 'syz.3.4113': attribute type 9 has an invalid length. [ 584.480423][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4113'. [ 584.503442][T22391] veth1: entered promiscuous mode [ 584.508967][T22391] macvlan2: entered promiscuous mode [ 584.514638][T22391] macvlan2: entered allmulticast mode [ 584.529502][T22391] veth1: entered allmulticast mode [ 584.548856][T22384] lo speed is unknown, defaulting to 1000 [ 584.576815][T22396] batadv_slave_0: entered promiscuous mode [ 584.602216][T22396] batadv_slave_0: left promiscuous mode [ 584.791990][T22407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4117'. [ 584.792010][T22408] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 584.814499][T22408] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4118'. [ 584.839840][T22408] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 584.862136][T22408] netlink: 634 bytes leftover after parsing attributes in process `syz.1.4118'. [ 584.892144][T22408] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4118'. [ 584.939562][ T29] audit: type=1804 audit(1780695141.430:19): pid=22414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4121" name="/newroot/171/cgroup.controllers" dev="tmpfs" ino=888 res=1 errno=0 [ 585.011786][ T29] audit: type=1800 audit(1780695141.430:20): pid=22414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4121" name="cgroup.controllers" dev="tmpfs" ino=888 res=0 errno=0 [ 585.077175][ T29] audit: type=1800 audit(1780695141.490:21): pid=22414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4121" name="cgroup.controllers" dev="tmpfs" ino=888 res=0 errno=0 [ 585.134022][ T29] audit: type=1804 audit(1780695141.500:22): pid=22414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4121" name="/newroot/171/cgroup.controllers" dev="tmpfs" ino=888 res=1 errno=0 [ 585.183056][ T29] audit: type=1800 audit(1780695141.500:23): pid=22416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4121" name="cgroup.controllers" dev="tmpfs" ino=888 res=0 errno=0 [ 585.428747][T22434] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4127'. [ 585.522361][T22436] netlink: 'syz.2.4127': attribute type 11 has an invalid length. [ 586.399050][T22444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4129'. [ 586.449023][T22466] bridge0: port 2(ipvlan2) entered blocking state [ 586.466764][T22466] bridge0: port 2(ipvlan2) entered disabled state [ 586.482614][T22466] ipvlan2: entered allmulticast mode [ 586.499453][T22466] bridge0: entered allmulticast mode [ 586.523343][T22466] ipvlan2: left allmulticast mode [ 586.535234][T22466] bridge0: left allmulticast mode [ 587.120488][T22508] sch_fq: defrate 9 ignored. [ 587.356062][T22523] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4151'. [ 587.389687][T22523] 0·: renamed from hsr0 (while UP) [ 587.487850][T22533] netlink: 'syz.1.4154': attribute type 1 has an invalid length. [ 587.507361][T22523] 0·: entered allmulticast mode [ 587.513661][T22523] hsr_slave_0: entered allmulticast mode [ 587.521156][T22523] hsr_slave_1: entered allmulticast mode [ 587.540797][T22523] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 587.563499][T22536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4153'. [ 587.574344][T22536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4153'. [ 587.584219][T22536] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4153'. [ 587.637910][T22534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4153'. [ 587.648575][T22533] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4154'. [ 587.668158][T22534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4153'. [ 587.678265][T22534] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4153'. [ 587.705270][T22545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4154'. [ 587.722297][T22547] xt_hashlimit: size too large, truncated to 1048576 [ 587.750821][T22531] syzkaller0: entered promiscuous mode [ 587.764602][T22531] syzkaller0: entered allmulticast mode [ 588.088428][T22554] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 588.101281][T22563] netlink: 'syz.2.4159': attribute type 2 has an invalid length. [ 588.110276][T22553] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 588.371462][T22578] IPv6: sit1: Disabled Multicast RS [ 588.401465][T22584] netlink: 'syz.2.4165': attribute type 1 has an invalid length. [ 588.555131][T22584] 8021q: adding VLAN 0 to HW filter on device bond6 [ 588.564009][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 588.661964][T22588] bond6: (slave veth11): Enslaving as an active interface with a down link [ 588.700762][T22598] bond6: (slave dummy0): making interface the new active one [ 588.709591][T22598] dummy0: entered promiscuous mode [ 588.715109][T22598] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 588.740649][T22602] bond6: (slave dummy0): Releasing active interface [ 588.747861][T22602] dummy0 (unregistering): left promiscuous mode [ 589.095338][T22634] netlink: 'syz.2.4177': attribute type 12 has an invalid length. [ 589.234928][T22641] openvswitch: netlink: Flow key attribute not present in set flow. [ 589.240600][T22643] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 589.275522][T22643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.491533][T22658] netlink: 'syz.2.4181': attribute type 13 has an invalid length. [ 589.514204][T22658] netlink: 'syz.2.4181': attribute type 17 has an invalid length. [ 589.552838][T22658] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 589.593819][T17968] lo speed is unknown, defaulting to 1000 [ 589.602257][T22662] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) ! [ 589.759149][T22674] bridge0: port 3(batadv1) entered blocking state [ 589.769259][T22674] bridge0: port 3(batadv1) entered disabled state [ 589.794673][T22674] batadv1: entered allmulticast mode [ 589.822240][T22674] batadv1: entered promiscuous mode [ 589.860715][T22678] xt_hashlimit: size too large, truncated to 1048576 [ 590.087171][T22691] netlink: 'syz.3.4192': attribute type 10 has an invalid length. [ 590.104096][T22691] geneve1: entered promiscuous mode [ 590.115413][T22691] team0: Port device geneve1 removed [ 590.131807][T22691] tipc: Enabling of bearer rejected, failed to enable media [ 590.238643][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 590.249028][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 590.472810][T22705] bridge_slave_0: left allmulticast mode [ 590.478939][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 590.505840][T22705] bridge_slave_0: left promiscuous mode [ 590.513372][T22705] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.533355][T22705] bridge_slave_1: left allmulticast mode [ 590.543131][T22705] bridge_slave_1: left promiscuous mode [ 590.559643][T22705] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.628653][T22705] bond0: (slave bond_slave_0): Releasing backup interface [ 590.632652][T22709] netlink: 'syz.8.4196': attribute type 3 has an invalid length. [ 590.663806][T22705] bond0: (slave bond_slave_1): Releasing backup interface [ 590.693443][T22705] team0: Port device team_slave_0 removed [ 590.734473][T22705] team0: Port device team_slave_1 removed [ 590.748991][T22705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.775941][T22705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.820641][T22705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.833123][T22705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.860299][T22705] bond2: (slave veth3): Releasing active interface [ 590.876937][ T6863] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 590.884524][T22705] bond2: (slave veth3): the permanent HWaddr of slave - 3e:51:35:33:5a:99 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 590.911432][T22705] bond2: (slave veth5): Releasing active interface [ 590.921611][T22705] bond3: (slave veth7): Releasing active interface [ 590.930066][T22705] bond3: (slave veth7): the permanent HWaddr of slave - 8e:8a:3f:83:bb:6d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 590.950697][T22705] batadv1: entered promiscuous mode [ 590.959555][T22705] bond3: (slave batadv1): Releasing active interface [ 590.966600][T22705] batadv1: left promiscuous mode [ 590.978253][T22705] bond4: (slave veth9): Releasing active interface [ 590.984927][T22705] bond4: (slave veth9): the permanent HWaddr of slave - 26:20:ff:0b:9f:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 591.003040][T22705] batadv2: entered promiscuous mode [ 591.013472][T22705] bond4: (slave batadv2): Releasing active interface [ 591.020951][T22705] batadv2: left promiscuous mode [ 591.053690][T22714] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.067470][T17968] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 591.091117][T22714] bridge_slave_1 (unregistering): left allmulticast mode [ 591.098388][T22714] bridge_slave_1 (unregistering): left promiscuous mode [ 591.105466][T22714] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.194187][T22719] 8021q: adding VLAN 0 to HW filter on device bond8 [ 591.536567][T22741] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.685071][T22751] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 591.705780][T22751] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 591.712200][T22760] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 591.716768][T22751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 591.842439][ T5832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.076628][ T6863] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 592.612353][T22794] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 592.631517][T22800] __nla_validate_parse: 17 callbacks suppressed [ 592.631536][T22800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4220'. [ 592.725002][T22802] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 592.751355][T22804] netlink: 'syz.7.4222': attribute type 3 has an invalid length. [ 593.006002][T22821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4228'. [ 593.018273][T22821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4228'. [ 593.153463][T22841] netlink: 'syz.3.4228': attribute type 1 has an invalid length. [ 593.832697][T22866] lo speed is unknown, defaulting to 1000 [ 593.999932][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4234'. [ 594.578339][ T1149] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.597465][ T1149] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.632483][ T1149] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.673075][ T1149] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.723111][T22876] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 594.744728][ T5753] IPVS: starting estimator thread 0... [ 594.836777][T22898] IPVS: using max 34 ests per chain, 81600 per kthread [ 594.883801][T22906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4245'. [ 595.139423][T22914] lo speed is unknown, defaulting to 1000 [ 595.262197][T22924] netlink: 'syz.3.4250': attribute type 14 has an invalid length. [ 595.271017][T22925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4249'. [ 595.286599][ T1149] batadv3: left promiscuous mode [ 595.310674][T22925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4249'. [ 595.507408][ T1149] batadv2: left promiscuous mode [ 595.621462][T22939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4253'. [ 595.810191][T22942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4254'. [ 596.032511][T22946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4256'. [ 596.179061][T22940] geneve1: left promiscuous mode [ 596.203154][T22940] ip6tnl2: left allmulticast mode [ 596.210537][T22940] vlan2: left promiscuous mode [ 596.215716][T22940] veth1: left allmulticast mode [ 596.221182][T22940] macvlan2: left promiscuous mode [ 596.227201][T22940] macvlan2: left allmulticast mode [ 596.277622][ T7712] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.296347][ T7712] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.322231][ T7712] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.349480][ T7712] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.387964][ T7712] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.398076][ T7712] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.408041][ T7712] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.418659][ T7712] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.568621][T22960] mac80211_hwsim hwsim63 syzkaller0: left promiscuous mode [ 596.588758][T22960] mac80211_hwsim hwsim63 syzkaller0: left allmulticast mode [ 596.607969][T22960] ip6erspan0: left promiscuous mode [ 596.614223][T22960] ip6erspan0: left allmulticast mode [ 596.634462][T22960] bond3: left allmulticast mode [ 596.642077][T22960] bridge1: left promiscuous mode [ 596.647584][T22960] bridge1: left allmulticast mode [ 596.652967][T22960] bridge2: left promiscuous mode [ 596.665356][T22960] bridge2: left allmulticast mode [ 596.678406][T22960] gretap2: left allmulticast mode [ 596.693829][T22960] team1: left promiscuous mode [ 596.707858][T22960] team1: left allmulticast mode [ 596.734957][T22960] bond4: left promiscuous mode [ 596.743476][T22960] bridge3: left promiscuous mode [ 596.754562][T22974] netlink: 'syz.3.4261': attribute type 2 has an invalid length. [ 596.767113][T22960] bridge4: left promiscuous mode [ 596.777662][T22960] bridge4: left allmulticast mode [ 596.790340][T22960] ip6tnl2: left allmulticast mode [ 597.632080][T23001] netlink: 'syz.8.4272': attribute type 1 has an invalid length. [ 597.680727][T23005] netlink: 'syz.3.4273': attribute type 1 has an invalid length. [ 597.690813][T23006] __nla_validate_parse: 3 callbacks suppressed [ 597.690830][T23006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4274'. [ 597.708968][T23001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.715846][T23005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.754604][T23009] bond2: (slave veth5): Enslaving as an active interface with a down link [ 597.798811][T23006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 597.829319][T23011] macvlan2: entered promiscuous mode [ 597.834797][T23011] macvlan2: entered allmulticast mode [ 597.849683][T23011] bond9: entered allmulticast mode [ 597.873041][T23011] bond9: entered promiscuous mode [ 597.892321][T23011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.902287][T23011] team0: Port device macvlan2 added [ 597.924257][T23001] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 597.934930][T23001] bond2: (slave batadv2): making interface the new active one [ 597.944883][T23001] batadv2: entered promiscuous mode [ 597.952296][T23001] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 597.981235][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4278'. [ 598.007297][T23021] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4278'. [ 598.027120][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4278'. [ 598.048577][T23021] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4278'. [ 598.069737][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4278'. [ 598.469529][T23039] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4282'. [ 598.753356][T23050] tipc: Enabled bearer , priority 0 [ 598.761372][T23050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4286'. [ 598.830571][T23050] syzkaller0: entered promiscuous mode [ 598.843103][T23050] syzkaller0: entered allmulticast mode [ 598.849870][T23050] tipc: Resetting bearer [ 598.952865][T23061] netlink: 'syz.1.4290': attribute type 1 has an invalid length. [ 598.985701][T23061] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.083748][ T13] tipc: Resetting bearer [ 599.112941][T23061] bond11: (slave veth7): Enslaving as an active interface with a down link [ 599.128064][T23072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4292'. [ 599.141717][T23065] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 599.155197][T23065] bond11: (slave batadv3): making interface the new active one [ 599.165744][T23065] batadv3: entered promiscuous mode [ 599.177901][T23065] bond11: (slave batadv3): Enslaving as an active interface with an up link [ 599.288452][T23067] netlink: 'syz.3.4292': attribute type 1 has an invalid length. [ 599.296919][T23067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4292'. [ 599.577515][T23052] tipc: Resetting bearer [ 600.292245][T23125] netlink: 'syz.7.4304': attribute type 1 has an invalid length. [ 602.805102][T23052] tipc: Disabling bearer [ 602.814897][T17525] tipc: Node number set to 3600527961 [ 602.821569][T23120] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 602.871400][T23125] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 602.910652][T23133] __nla_validate_parse: 2 callbacks suppressed [ 602.910672][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4305'. [ 602.944531][T23133] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4305'. [ 602.964201][T23135] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4306'. [ 603.133215][T23149] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4309'. [ 603.225998][T23149] bond0 (unregistering): Released all slaves [ 603.287553][T23155] netlink: 'syz.7.4310': attribute type 49 has an invalid length. [ 603.293244][T23153] pimreg9: entered allmulticast mode [ 603.538263][T23169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4315'. [ 603.564017][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4311'. [ 603.945336][ T35] batadv0: left allmulticast mode [ 603.951330][ T35] batadv0: left promiscuous mode [ 603.960835][ T35] bridge0: port 1(batadv0) entered disabled state [ 604.259805][ T35] gretap0 (unregistering): left allmulticast mode [ 604.363136][ T35] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 604.372397][ T35] bridge1 (unregistering): left allmulticast mode [ 604.390632][ T35] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 604.446801][ T35] bond0 (unregistering): Released all slaves [ 604.458664][ T35] bond1 (unregistering): Released all slaves [ 604.476396][ T35] bond2 (unregistering): Released all slaves [ 604.493781][ T35] bond3 (unregistering): Released all slaves [ 604.513395][ T35] bond4 (unregistering): Released all slaves [ 604.527233][ T35] bond5 (unregistering): Released all slaves [ 604.540709][ T35] bond6 (unregistering): Released all slaves [ 604.563846][ T35] bond7 (unregistering): Released all slaves [ 604.580574][ T35] bond8 (unregistering): (slave veth9): Releasing active interface [ 604.593707][ T35] bond8 (unregistering): Released all slaves [ 604.610423][ T35] bond9 (unregistering): Released all slaves [ 604.623914][ T35] bond10 (unregistering): Released all slaves [ 604.638612][ T35] bond11 (unregistering): Released all slaves [ 604.660082][ T35] bond12 (unregistering): Released all slaves [ 604.921916][ T35] : left promiscuous mode [ 605.006102][ T35] tipc: Left network mode [ 605.217026][ T30] INFO: task syz.5.2915:17501 blocked for more than 143 seconds. [ 605.226142][ T30] Not tainted syzkaller #0 [ 605.231483][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.240384][ T30] task:syz.5.2915 state:D stack:27024 pid:17501 tgid:17499 ppid:14026 task_flags:0x400140 flags:0x00080002 [ 605.252469][ T30] Call Trace: [ 605.255750][ T30] [ 605.258808][ T30] __schedule+0x1821/0x5740 [ 605.263444][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 605.268830][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 605.275081][ T30] ? __pfx___schedule+0x10/0x10 [ 605.280622][ T30] ? schedule+0x90/0x360 [ 605.284917][ T30] schedule+0x164/0x360 [ 605.289221][ T30] schedule_preempt_disabled+0x13/0x30 [ 605.294696][ T30] __mutex_lock+0x7f7/0x1550 [ 605.299438][ T30] ? __mutex_lock+0x608/0x1550 [ 605.304300][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 605.310221][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 605.315293][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 605.320888][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 605.327025][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 605.333356][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 605.339836][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 605.345426][ T30] ? __asan_memcpy+0x40/0x70 [ 605.350203][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 605.356420][ T30] ? bpf_lsm_capable+0x9/0x20 [ 605.361101][ T30] ? security_capable+0x7e/0x2c0 [ 605.366067][ T30] genl_rcv_msg+0x61c/0x7a0 [ 605.370692][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.375733][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 605.382126][ T30] netlink_rcv_skb+0x232/0x4b0 [ 605.387087][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.392162][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.397574][ T30] ? down_read+0x270/0x2e0 [ 605.402092][ T30] ? genl_rcv+0xd/0x40 [ 605.406159][ T30] genl_rcv+0x28/0x40 [ 605.410216][ T30] netlink_unicast+0x75c/0x8e0 [ 605.414999][ T30] netlink_sendmsg+0x813/0xb40 [ 605.419916][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.425331][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 605.430522][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.435851][ T30] ____sys_sendmsg+0x972/0x9f0 [ 605.440814][ T30] ? __might_fault+0xaf/0x130 [ 605.445552][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.451015][ T30] ? import_iovec+0x73/0xa0 [ 605.455573][ T30] ___sys_sendmsg+0x2a5/0x360 [ 605.460379][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 605.465379][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.470765][ T30] ? futex_wake+0x4ac/0x580 [ 605.475320][ T30] ? __fget_files+0x2a/0x420 [ 605.480017][ T30] ? __fget_files+0x3a0/0x420 [ 605.484713][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 605.489959][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.495443][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.500349][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.506993][ T30] do_syscall_64+0x174/0x580 [ 605.511623][ T30] ? trace_irq_disable+0x3b/0x140 [ 605.516840][ T30] ? clear_bhb_loop+0x40/0x90 [ 605.521559][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.527592][ T30] RIP: 0033:0x7fbe3bf9ce59 [ 605.532018][ T30] RSP: 002b:00007fbe3a1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.540558][ T30] RAX: ffffffffffffffda RBX: 00007fbe3c215fa0 RCX: 00007fbe3bf9ce59 [ 605.548715][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000006 [ 605.556781][ T30] RBP: 00007fbe3c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 605.564770][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.572821][ T30] R13: 00007fbe3c216038 R14: 00007fbe3c215fa0 R15: 00007ffeb5cd9c08 [ 605.581115][ T30] [ 605.584325][ T30] [ 605.584325][ T30] Showing all locks held in the system: [ 605.615838][ T30] 1 lock held by khungtaskd/30: [ 605.622106][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 605.632290][ T30] 4 locks held by kworker/u8:2/35: [ 605.637479][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 605.648532][ T30] #1: ffffc90000ab7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 605.659154][ T30] #2: ffffffff8fdbafe8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 605.668701][ T30] #3: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 605.679895][ T30] 2 locks held by kworker/u8:7/1149: [ 605.685198][ T30] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 605.695214][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 605.704218][ T30] 2 locks held by getty/5391: [ 605.710269][ T30] #0: ffff8880369f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 605.720210][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 605.730461][ T30] 2 locks held by syz.4.1849/13432: [ 605.735652][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.743919][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 605.754354][ T30] 2 locks held by syz.5.2915/17501: [ 605.760286][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.768861][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 605.779513][ T30] 1 lock held by napi/wg1-0/17787: [ 605.784666][ T30] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 605.794789][ T30] 2 locks held by syz.0.3071/18252: [ 605.800073][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.808365][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 605.818791][ T30] 2 locks held by syz.6.3200/18823: [ 605.823997][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.832337][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 605.842920][ T30] 1 lock held by syz.8.4305/23132: [ 605.851443][ T30] #0: ffff88807b7bf140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 605.861399][ T30] 4 locks held by syz.8.4305/23133: [ 605.866694][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.874912][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.884244][ T30] #2: ffff88807b7bf140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 605.893312][T23133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.902094][ T30] #3: ffff888035686348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 605.916757][T23161] netlink: 'syz.1.4313': attribute type 2 has an invalid length. [ 605.926168][ T30] 2 locks held by syz.3.4312/23157: [ 605.937970][ T30] 2 locks held by syz.7.4311/23167: [ 605.947863][ T30] 1 lock held by syz.1.4313/23161: [ 605.960478][ T30] 2 locks held by syz.2.4316/23175: [ 605.965763][ T30] [ 606.007063][ T30] ============================================= [ 606.007063][ T30] [ 606.025393][ T30] NMI backtrace for cpu 1 [ 606.025410][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 606.025429][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.025439][ T30] Call Trace: [ 606.025446][ T30] [ 606.025452][ T30] dump_stack_lvl+0xe8/0x150 [ 606.025478][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 606.025604][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 606.025635][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 606.025663][ T30] sys_info+0x135/0x170 [ 606.025711][ T30] watchdog+0xfd3/0x1030 [ 606.025742][ T30] ? watchdog+0x1c9/0x1030 [ 606.025771][ T30] kthread+0x389/0x470 [ 606.025792][ T30] ? __pfx_watchdog+0x10/0x10 [ 606.025814][ T30] ? __pfx_kthread+0x10/0x10 [ 606.025837][ T30] ret_from_fork+0x514/0xb70 [ 606.025859][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 606.025876][ T30] ? __switch_to+0xc79/0x1410 [ 606.025903][ T30] ? __pfx_kthread+0x10/0x10 [ 606.025926][ T30] ret_from_fork_asm+0x1a/0x30 [ 606.025962][ T30] [ 606.025969][ T30] Sending NMI from CPU 1 to CPUs 0: [ 606.144125][ C0] NMI backtrace for cpu 0 [ 606.144141][ C0] CPU: 0 UID: 0 PID: 1149 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 606.144159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.144170][ C0] Workqueue: bond1 bond_mii_monitor [ 606.144233][ C0] RIP: 0010:mark_lock+0xd/0x190 [ 606.144254][ C0] Code: 2c 24 e9 b6 fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 8b 46 20 <89> c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 [ 606.144267][ C0] RSP: 0018:ffffc900056578b0 EFLAGS: 00000006 [ 606.144279][ C0] RAX: 00000000000c004c RBX: 0000000000000000 RCX: 0000000000000000 [ 606.144290][ C0] RDX: 0000000000000008 RSI: ffff888028b86890 RDI: ffff888028b85d00 [ 606.144301][ C0] RBP: ffff888028b86890 R08: ffffffff818e8ad2 R09: ffff88801aea3018 [ 606.144312][ C0] R10: dffffc0000000000 R11: fffffbfff20613bf R12: ffffffffffffff05 [ 606.144323][ C0] R13: ffff888028b86890 R14: ffff888028b85d00 R15: ffff888028b86890 [ 606.144334][ C0] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 606.144346][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.144357][ C0] CR2: 00007f4f88fea2f8 CR3: 00000000752b6000 CR4: 00000000003526f0 [ 606.144372][ C0] Call Trace: [ 606.144377][ C0] [ 606.144387][ C0] __lock_acquire+0x6b5/0x2cf0 [ 606.144405][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 606.144420][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 606.144444][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 606.144467][ C0] ? process_scheduled_works+0xdf2/0x1860 [ 606.144482][ C0] lock_acquire+0x106/0x350 [ 606.144497][ C0] ? process_scheduled_works+0xdf2/0x1860 [ 606.144515][ C0] ? rcu_is_watching+0x15/0xb0 [ 606.144534][ C0] _raw_spin_lock_irq+0x3d/0x50 [ 606.144555][ C0] ? process_scheduled_works+0xdf2/0x1860 [ 606.144569][ C0] process_scheduled_works+0xdf2/0x1860 [ 606.144597][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 606.144615][ C0] ? assign_work+0x3d5/0x5e0 [ 606.144632][ C0] worker_thread+0xa53/0xfc0 [ 606.144659][ C0] kthread+0x389/0x470 [ 606.144676][ C0] ? __pfx_worker_thread+0x10/0x10 [ 606.144690][ C0] ? __pfx_kthread+0x10/0x10 [ 606.144708][ C0] ret_from_fork+0x514/0xb70 [ 606.144725][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 606.144741][ C0] ? __switch_to+0xc79/0x1410 [ 606.144761][ C0] ? __pfx_kthread+0x10/0x10 [ 606.144779][ C0] ret_from_fork_asm+0x1a/0x30 [ 606.144804][ C0] [ 606.145496][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 606.145515][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 606.145535][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.145546][ T30] Call Trace: [ 606.145553][ T30] [ 606.145562][ T30] vpanic+0x56c/0xa60 [ 606.145585][ T30] ? __pfx___schedule+0x10/0x10 [ 606.145605][ T30] ? __pfx_vpanic+0x10/0x10 [ 606.145634][ T30] panic+0xc5/0xd0 [ 606.145652][ T30] ? __pfx_panic+0x10/0x10 [ 606.145674][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 606.145704][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 606.145731][ T30] watchdog+0x102c/0x1030 [ 606.145763][ T30] ? watchdog+0x1c9/0x1030 [ 606.145793][ T30] kthread+0x389/0x470 [ 606.145815][ T30] ? __pfx_watchdog+0x10/0x10 [ 606.145836][ T30] ? __pfx_kthread+0x10/0x10 [ 606.145860][ T30] ret_from_fork+0x514/0xb70 [ 606.145882][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 606.145901][ T30] ? __switch_to+0xc79/0x1410 [ 606.145927][ T30] ? __pfx_kthread+0x10/0x10 [ 606.145951][ T30] ret_from_fork_asm+0x1a/0x30 [ 606.145986][ T30] [ 606.499252][ T30] Kernel Offset: disabled [ 606.503584][ T30] Rebooting in 86400 seconds..