last executing test programs: 5m25.456888128s ago: executing program 4 (id=1694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x4010) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB], 0x5d54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="98427672d7be81340c4091406a679f0279841a4834716e3933f5a8e7eed9fffb1a33030ea64c37255d02f32731fa03b0113879d7c127461f64f84cf5699287768174738d8b3ebf54f8782fc5f6bbb29e42faee04482ec2a71ac091f3d6ee2db9df4457b9e73f32b96c41054ce8c91324c7b09bf4f30b3fc100b5", @ANYRESDEC=r5], 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x4040000) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x5) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000500)="0482aeb79f5cc605f3f10192bf2813d8", 0x10) accept4(r6, 0x0, 0x0, 0x80000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e65766500004000028005000800"], 0x70}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x400) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r8, 0x4}], 0x1, 0x0, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000040)={0x3, 'veth0_vlan\x00', {0x357}, 0x3}) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010003b0c00e3ffff18ea000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028004"], 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 5m24.370759629s ago: executing program 4 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0)={{0x2, @remote, 0x4e21, 0x0, 'lblc\x00', 0x30, 0x1ff, 0x51}, {@multicast2, 0x4e21, 0x1, 0x5, 0x1, 0x8}}, 0x44) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140002002ebd7000fcdbdf25020049ffcd5b", @ANYRES32=r1, @ANYBLOB="08000200ac1414320800080000070000"], 0x28}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x2, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0xffffffffffffffcf, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @rand_addr=0x64010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x28, 0xf, 0x5b}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x7, 0x3, 0x8000, 0x200, 0x2ee, 0x9, 0x9, 0x6, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000180)={r7, 0x5, 0x20}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 5m23.850232128s ago: executing program 4 (id=1707): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000001000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000003800250825bd7000f9dbdf250f000000100007800c00028008003400", @ANYRES32=0x0, @ANYBLOB="6456b1e93d91d4adfb12527469862cd2185f1f5a72bec82ee8c8570fc63d19305bbc678a49e6"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x184, 0x10, 0x1b020ba487bfd163, 0x70bd2d, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x65b, 0x4, 0x0, 0xb, 0x0, 0x5}, {0x7fffffff, 0x608, 0x800}, {}, 0x3, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-avx2\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009800100766c616dfffffffffff800", @ANYRES32=r7, @ANYBLOB="08001300", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x190, 0x270, 0x360, 0x360, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 0x2022, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'dummy0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x2000000}, 0x804) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket$alg(0x26, 0x5, 0x0) bind$can_raw(r3, &(0x7f0000000080), 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 5m23.230596167s ago: executing program 4 (id=1714): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x230, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x996}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private0, 0xf12}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff04cd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65c9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@broadcast, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r8) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0xc4, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffff001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffed}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x50) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r10, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x32a7, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40044) 5m22.19316116s ago: executing program 4 (id=1726): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x1, 0x0, 0x1, 0x1}]}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="a5a23608283dcf9bd70b09379306a58882246265edb6cfd1e167b40c2dffb7a725f5b64e6a59b1721f2c68e92d5720d05ff815e78fcd5a14f28f26b66bebcd157671dfe8658cfcdb25bc7ffd50c9398bfd85839faf3accc8c1621b"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r11, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="0000000000000000250000000100000018000000000000000000000000000000950000000000000057030000000000009500000000000000", @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x513, 0x0, 0x0, 0x40f00}, 0x94) 5m21.586836881s ago: executing program 4 (id=1731): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x48040) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000340)="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") r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c00028005000400010000000500090001000000080001000000000005000c0001e5ffff050005004e20000008000a00", @ANYRES32=r5, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m6.464563158s ago: executing program 32 (id=1731): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x48040) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000340)="8506df7a642b0c8816dc0f9646303500fc4db938161cb3d2ecea87c030c2c5d840d3eadf276148cb473e2dbabe6304152d5a81f272f3b6105e2e26ff3e1b6c9bf6f0fd99179043780e8b7a9edd9899d4b66d38d5399ce21366346cb26b1e45892237a7cce57502799a9ae46a9a6cd7f2dfeb582358a4574d91b1d6116d88d87fd5fbed18e12a5e9cecdbed05b105165c21123e32b34e37f422841e70507cdf0c3e3545b8453318744fbc1864876fc1aa5d6b3204d94b062faf992db54201e0df714b1ab19955dbb1b928069c2f366415c5ef731b1796f137506a666849d0fbe72790379f7e2857dc6e8809bfe5a79e40d2ac5eedba4243d3e2fe474444340534") r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c00028005000400010000000500090001000000080001000000000005000c0001e5ffff050005004e20000008000a00", @ANYRES32=r5, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m30.727028943s ago: executing program 0 (id=3025): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00 \x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r5 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ifreq(r5, 0x8971, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_addrs=@ax25={0x3, @null, 0x7}}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r6, 0x6, 0x2}, 0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032bbd7000fcdbdf256300000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x20004880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r10, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$nl_sock_diag(0x10, 0x3, 0x4) 2m30.192522543s ago: executing program 0 (id=3030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) setsockopt(r3, 0x200, 0x8, &(0x7f00000006c0)="51bc36d104e785191126a484baf5f103de5360708dca8b94df8112952d1f510c8349c67785b353ff27070f5219f1395c113e43521fcc9cdbb3ff7ca69fa604544dfa4c1e06576fefa611d891321e417c9dbecdef6b324797c5f9c2616c7a990deb376e391a586df6b32af35c66e5d3fc5e805d6f9c306d7e828f1e7d98fcfcf2a1dd9f50fd936ee78532572e72c69b03acb4d72e", 0x94) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) 2m29.492241029s ago: executing program 0 (id=3036): socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x1}, 0x37}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="1a010000", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="1c00e7004e1bb08afd739863d41d86ae28818c5ec2a72638c3ab1b39778d12e4fb36d6480a00e800ffffffffffff00001400040076657468305f6d6163767461700000000a00e800080211000001000024001780040002003b9382e1c097785704000107040006000400030004000300040002001c00e7006293a2d26bb946a382a4a7b8cc034513621f2e726198c9f708001780040006000a00e80008021100000000001c00e70095644472dda6b1d325e261675ecc0fb084776d5b3f530559140017800400050004000200040004000400010004001780140004007465616d5f736c6176655f31000000000500530000000000"], 0x108}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="1a010000", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="1c00e7004e1bb08afd739863d41d86ae28818c5ec2a72638c3ab1b39778d12e4fb36d6480a00e800ffffffffffff00001400040076657468305f6d6163767461700000000a00e800080211000001000024001780040002003b9382e1c097785704000107040006000400030004000300040002001c00e7006293a2d26bb946a382a4a7b8cc034513621f2e726198c9f708001780040006000a00e80008021100000000001c00e70095644472dda6b1d325e261675ecc0fb084776d5b3f530559140017800400050004000200040004000400010004001780140004007465616d5f736c6176655f31000000000500530000000000"], 0x108}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000005c0), &(0x7f0000000600)=0x8) (async) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000005c0), &(0x7f0000000600)=0x8) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffffd2, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000800)={0xa0000006}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000800)={0xa0000006}) epoll_pwait(r5, &(0x7f0000000000)=[{}, {}], 0x2, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc237ae0e9f6a1afd6a3ed5304d642081ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123167f010000000000000090aa235a6706"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff09e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f00000003c0)=0x2, 0x4) r10 = socket$rxrpc(0x21, 0x2, 0xa) listen(r10, 0x7) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000000101080000000000000000020000001800018006000340000300000c00028005000100cc4eacc27173ad1b489315c1837c0fdb000000000800074000000400"], 0x34}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000000101080000000000000000020000001800018006000340000300000c00028005000100cc4eacc27173ad1b489315c1837c0fdb000000000800074000000400"], 0x34}}, 0x0) 2m29.232010208s ago: executing program 0 (id=3039): r0 = socket(0xb, 0x3, 0x37) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x700, 0x700, 0x9, 0x3, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x1f, [@empty]}, @noop, @end, @lsrr={0x83, 0x7, 0xf1, [@multicast1]}, @ssrr={0x89, 0xb, 0x55, [@local, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x29, 0x32, 0xb, 0xffff0001, 0x1, @mcast1, @mcast1, 0x80, 0x40, 0xa12, 0x97}}) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f00000002c0)={0xa, 0x4e1f, 0x5, @private0, 0xff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="6c9ceac00b203b800ea31b85366aa0be0e29d639be0b9b5573770cb4a3a5dfb814d84a6e8e12944f382b5c86d3", 0x2d}, {&(0x7f00000003c0)="44bbac56ab22209dd28abd4cb765122493d853ce40091bb1093518e77d03cab0c67e448a470fa1debd96d350f3f4b0787f48faa5e499849349792299a846edae1313e26490dd37edea217de97173cc62dc11da69fe4b4993928889300ba9a7c018357ac4f8d26a642b538cb58d139c400b8c5a500d4389fed90c60ee1db9cfd1082b27", 0x83}], 0x2, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0xca2}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0xed}}, @dstopts={{0x88, 0x29, 0x37, {0x1, 0xd, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x6f, 0x0, [0x0]}}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x40, {0x1, 0xe, 0x3, 0x2, [0xffffffffffffffff, 0x3, 0xfffffffffffffff8, 0x1, 0x6, 0x9, 0x2]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xc9e}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x26e93370d9889c41, 0x6, 0x1, 0x4, 0x0, [@local, @empty, @remote]}}}], 0x158}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0x58ae, @remote, 0x101}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000680)="8dc0126fa28cf7afb3abcaa7aef58a66256531317c21df0ce74f55866a41f5357db9105e", 0x24}, {&(0x7f00000006c0)="e5361ac237d021ec91ecda0b96fe7f24007bcba269cde13cf917db04c7689a497efc31996a739fcaeef9e181b4849ee66f34611b6dfd6ba82cf6337213bbd47761e078d1d9845bc1702891914eddf7389224c9715be8ed192af3e1f1f0c0f19cd44946912c1fce03a945dc663b8deb91a64273bd8bb246aa77277c31ecdb1648f6a67d71b8879824207417", 0x8b}, {&(0x7f0000000780)="7e97983d9e9be50584919cfab43d6394547725ab0f5efb1e441e1547cebd6e5281323ea03750a505e8f278c3b7ff41ae8ca0105c4c3f3da0068f4d51c670e3d14867e8293011464cc825b760f7af03722b41738c370037ed5cbf1d9804ccc712476cafc38cf63836c18ad99e50c2b705bdbd6350a2fcac318c62930707765d15f349b0790f6d9178d93c9d9a21f3f213024ad4c6fa0f2db0dd821bb7aeae55ba5d4bc2fd442b3e4f0d235e3873031b5dca8b9483474380fedba39517", 0xbc}, {&(0x7f0000000840)="852ea0d93df1533ad8d0a45402b01bc15a869ff9ab59433554bb577e56466ea77ed48ddcdfd5a1e13962580283523c555946bb63ae6d9b18bed2308f082cf1ae410bee550f765b06361abece8546280891ac335522b42b3caef7cd", 0x5b}, {&(0x7f00000008c0)="58a498aa0f55ec10b8e3f207f06e805628579c3ade4da1a25fddea319dee1a0c7e54f059b3858261b98cdf3308999f3565084af28285dedb112c24634fa53eb15141d059275cdc1b0420e2b90f90151e11a9ae65231a74d1638726dff9fafdadb2aef900715ee2979b6ceded44e55f6805c106d0b1ddd7fe50157aaf2b9031185cb494c77f58fdc329605177010fdbc91d50e1b20cfe6ec8ecda34d97348c369a47f3c3dd672e4d8ceadc1f410204e28", 0xb0}], 0x5, &(0x7f0000003c00)=ANY=[@ANYBLOB="24000000000000002900000032000000fe88000000000000000000000000010155b81db57f1884767b244576349a30d0916881750590d299aae9d9cc17ae457ae1b91a791fcc2b1e40a23b9088d2fec6f0f5f1317673dccaa5cf8bac5c816338bd7bcb248b432ae6b5b0080000007d9f7bcd2211d9980807b52aad8be472cc18e0d756fd402a9c18398de15ee2763fbe311585c4cf67936f2222b0d73e7fee9613941bd79a25e31dd4e7fa45d6d632a6caf5b2a65bc03acb153b5a15a9a3855498859e", @ANYRES32=r1, @ANYBLOB="0000000038000000000000002900000039000000bd04000100000000fe80000000000000000000000000003afc00000000000000000000000000000014000000000000002900000043000000f7ffffff0000000014000000000000002900000008000000000000000000000024000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}, {{&(0x7f0000000c40)={0xa, 0x4e21, 0xfffffffc, @empty, 0x7}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000000c80)="fd9862fcb12200591c8b534c15d47b72ee99ac6b1d08b0c8358d8a50cf3ab78f22a46289c5e71f648b7fd43936094ada7326fc164074d6c5db2391aac1211c28b0064c8e967bd9f08c9fc3eab061c864cf8145780752de1fed23125e2e3c5f763a0bf83388873bebfbfd918f8e5c76ede45423b1f15bfa3b655a8f5fd05efb505ce4d2d8c3d8afb1cebb36ad7450b66f0e7db744f9b220ad90a59c6be4241e092a", 0xa1}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="fe1325bd4f809f93bedbc9a0261d42249672523ed06a92cfca0c5d5be17c17d30ba85eb3924e47a9596e82882b9e01a64f41ab5785bce29e37c145cebc2c4734bd7d1555df128c7c3a46828b25d4ed7f3273412e23c58d511e7a986e9bbc40553258de3de63f696e95ae0c1ddef33fb7e65f2ad34cd20259578cf8f9439c390783c959db2b24e5b5b594f6a5ace94aa30bc65f5be866e599b66d525333b4c3f18c5c46e38e75f85dcaed2cbeace3ac1aa43f830a5ffbb94b9b7a972860be75fcd3eed792c9b67758355591900aa8b9e72fb19742790e7725759f6ea7ef8768d825893d0ef7d00d1c448f357c40bb2a9cd7fd127d76fe", 0xf6}, {&(0x7f0000001e40)="6d27264e1f05dd241d4f91ed3ab64aeece96a434d5899980e255192ac653b2cbf303fe858b06b845b754f2d3b913b6133f4f47e6ebf8a5d748d71892c5ec75419ddef79f22ad1c9c10650dc0fd565eeb01b93ed581c1a6ba965ef5ba7d0c41af687315e4efe4968d42779183e336e301c9851b3cbbba8d4c08e62a63d7fd116225ec379d1fca954382f1683336503061d1926dc9326299499bb5a126e581b660291f9cda3da99e7b750ee84d0a596d4c4f7efe4c16fb9f47f8240894d6c0b15df057221692b2b4d17fcfeefd5d2acacc87920ed41afb2e15816b157abf33bedec6ec8ae69c8fbdf5d802bab7805afce2", 0xf0}, {&(0x7f0000001f40)="79d987879fc76c7008e385fcd4238a5e946fbf4405e0b10a52a3c79292951b68e34a2e94dd3482e256e6cdc02a9d5c884c35acefc4d37b565d23e2ee3128332c1ff2ca6b8b111adae7fa080424942db08d0ef91b366043a0af199fdf40641296fff3d1fe0f90f1ede18f7261bbe6d50f9e4777c0badf54ae765a10ca1c78099a3226147a08df8147fb15b301f05e246697538fc636aabb7878ab815680e5ae18d59fc519d6eed9772516d587f2a69f4e9910671f175ff195b4b362bcfde2b54470c8bcdb11bda432adda5b78e7e5bd19bb8c6b2df826360b48fe4555606a0d3515", 0xe1}], 0x5, &(0x7f00000020c0)=[@rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x1, 0x1, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x44}, @dev={0xfe, 0x80, '\x00', 0x18}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffd}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0xdae}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x0, 0xb, '\x00', [@generic={0xb, 0x59, "116d6bb7abd01848deba9e8464904d688a61b604d1f51b5e21df2897d96130518b09e528e0f8a30ff97e74ca0ddcbd20768e2638de5a315dd255000eccc74040a60b528ff8660e0dc24e3e6520c2f45fdc4e3b83bb62293cfc"}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr={{0x48, 0x29, 0x39, {0x2, 0x6, 0x0, 0x2, 0x0, [@local, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@pad1, @calipso={0x7, 0x8, {0x1, 0x0, 0x7f}}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x1, 0xf, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x228}}, {{&(0x7f0000002300)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000002340)="77e86e30d6bbea9e38929522875c83edca410bcd8d1dc902461403c0c312b3a216cd75bfd12cafe28149fd3b0f6bb6613928f531f1ec6f1eb8a5dd2afbb0b1ca53305d6516f62568d06eabe498af299d4178c6", 0x53}, {&(0x7f00000023c0)="fe8cda", 0x3}, {&(0x7f0000002400)="17a5cc1f6556a157b93e04f04c9581f0a46a6b4c38ba500913f05c6df0331a4bab2ec652ad7268dd45602706f6dc420c82caf21b2add28e7dc30a85dbb84bc471b71010a24cb06238b11892e0b29c048ce672aa0d0493dcae5aebb66d3984d643c4f62f156c945649c908c2a65784a1bf9c17cf47d889c279823bef237cb5a6f2cbeca0c42c536df7714b7c9b8e20e92f9", 0x91}, {&(0x7f00000024c0)="c5ea5b51f2f14c1d02ef8409bed5394313363e17fd13094e763a4e158e0957356e38e825b22d7f6b74e2a0b7a27fcbdf8404a180b6e0f2359bbb45435b4766e68d386a8fd03c625a691687c84ff351615c1f293681dbed5156fae6678f7f399bdb593c4dc82320e3e4f7c8f3e71b64f0e9da4605f86ebf2cf40bde5b6cb701e214ca2beaaf46ded513001d4de099328b5ee4af6755a74a6ddb5bebc51bc477a40c4cf6cc6d92c9b268ace013019d2914fa527402", 0xb4}, {&(0x7f0000002580)="3367a0ac9d40bf80fa8899961400493100bd32629fa200c4fcf5d158099126ee6272252845ca4b5d2540952f652791f06978a1fb057d23fe788df20411e821cfa46707261190e3341fb855862af09c85ae63ec366ddd1769c7dcdbce19ae345e4c17d7659ec1f4b38addf67c4ebe7861abf9cb1a39a2a910bbbbc049193d0516b1b5", 0x82}, {&(0x7f0000002640)="22bd2cdc6201bfb854ca54637c71d914006cdaa36783b274f62f24965207a764dc5dfb3fa12ec6ddd5c21c124a21efdcc373d3b0844a8a1308b3c159767a1a4f506a092f31f4a8", 0x47}], 0x6}}, {{&(0x7f0000002740)={0xa, 0x4e20, 0x5, @private2, 0x6}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000002780)="13b8", 0x2}, {&(0x7f00000027c0)="cc8ecbd56ab20dc393fb9a21149179c32b3b6a8dc048cc06479a5d0ba731c3430cdee6502af04f52053a7e963f2307090e4cfdb746db6bfaee94de958c70d374919d0b97a87274c64e98e645bbad7ed0703f2955b6d9e042917f8b29244f428291ee58ebbf79123c7aca90d8233505d407b73a1119a5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="9bac9ab5d3f8f5cc37ac2e46ae55d4f6a973b702dd7cfdcde3b6d9ff75616d1989237bd76b81865abffd4c8fc3082e2c3eb18d385d58f59c52ba3d5ea217c888a272d45fb17b73284ffc33e7736c01c47001050f450b4c481a2dfaac73ce61d09ec7f09ccaeaf744feb09a75f4e61ac111ee857e13d972f5dfbd261c48750f13384efb0420455b18e56837df06e93a10d1167cbbadeafa4bd0f62f7266600eef29bb051f9975dc2ae16a9f77e588683298c1dfb9212d058b25b2a7", 0xbb}, {&(0x7f0000003940)="a9b59ca6bd51a6d0bc1ebce60513d0129ac09bc114fdedab91321315b9ea4a3940723fa076cf7b8034eab4dce8e2d6444714926079685a7dc0f09be254191482318c3543897777273e443794d52a00728f6bb88f363c5f414eaaacfc5bcb7836e159d0b5401ddce8916a5f7314889addc65ec8577930e949fb3187506462f091", 0x80}], 0x3, &(0x7f0000003a00)=[@flowinfo={{0x14, 0x29, 0xb, 0xf7}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x2, 0x28, [0x7fffffff, 0x4, 0x5, 0x9]}}, @pad1, @jumbo, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @remote}]}}}], 0x80}}], 0x6, 0x8805) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xca) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r4], 0x44}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900010000002a00000008009f000600000008002600b4090000050018011f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x20044880) unshare(0x20200) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80800) 2m28.808909053s ago: executing program 0 (id=3042): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6b5bec", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x38, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @generic="90b24b101d"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25070000000c000600000000000000000008000100030000000a0004007770616e3400000008000300", @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'veth1_to_team\x00', @multicast}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001600)={'macvtap0\x00', &(0x7f0000001500)=@ethtool_rxnfc={0x2f, 0x1, 0x3, {0x2, @hdata="eb4bcb383660e8097649f6b3a3e288aeccc8fb9f10b9e4d859c371c3bfeed6390535acab6107b744ceb82bd214e56bd8b2a2c91e", {0x0, @remote, 0x460, 0xc, [0xfff, 0x70]}, @sctp_ip6_spec={@mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4e23, 0x4e22, 0x1}, {0x0, @random="cd7ce16bf74e", 0x2, 0x9, [0xffffffff]}, 0x9, 0x4}, 0x6, [0xd, 0x1, 0x1b, 0x5, 0x3, 0x0]}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000ff0d550d9646c2100000000002020207b1af8ffd88f0000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) writev(r7, &(0x7f0000001300)=[{&(0x7f0000000040)="9358e1391e6e4d20baaf6d25f8f50617ce4c850a478a54418068944aad9595d7dde729a16ebe61cacc7053fd0275b89f85fc5a174b2e48e1df34f4"}, {&(0x7f00000001c0)="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"}, {&(0x7f00000011c0)="75675fff05954d6e5bc47af1a1b659e3019115671b0b46679fbbb42fa272c69b57e21973cc0987e94811250c7a13c7a6b68622e45501bf7ee90225c10a01aaf0314808639c49f8de492c7c27a445deb2"}, {&(0x7f0000001240)="57f679b19632c28a1e5e3157daf7"}, {&(0x7f0000001280)="b9829af4755ebd7d0f39f518743be192acec3071e9f8641a039f8a5b8c9b1f099d2dfc739298daa57e4f5bb9ba5869acd7f37de8cb9516d7e159fa2d8cba04bf60cf62c61005a66e238955bbdf105ba83b044d950dfd5f0a2b53809c041a8509c2978de5cdb3c104"}], 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000001440), r0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000001480), &(0x7f00000014c0)=0x4) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 2m27.943044928s ago: executing program 0 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r2, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1411e1433c6b31570237824c830000001000010000000000000000000500000a58000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000002c0003801800038014000100776c9600000000000000000000000000080002400000d250080001250000c40000001400000011000100"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 2m12.892338742s ago: executing program 33 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r2, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b019f86fa066c575b64dc7a6b9e13c535b4f77a7a745e413de0e7b942cbc20fdfc28910c4c39b0924dfdd3ab53ef5012b7f468cd16db00b011daebe55a0649e207137473d9b4baa2e651fc99d366e780f3f2709ff8b8f682c0001ef29d0d0239498bfba4b21ebd57185c546de5767cc394bb38e2aa88245fd6f41f91cac995d2d1c145b5a4d03a13f8f6dc29c8e9a8e79a740e3746ff5e4b7749d27ecd8d24d43a25c8415f89d63ccc71e456c0c69c6d2fc9faf3dc9b89bbe39c2b39c4babe7baf6ba2e293d07d55e927687c6b99a0badf8dd96ba9c90ab0296824fbf2026bcd56c3faebd60ce7bfd96e264c345bc76f78be3fb69332f3a750ff1e338ebd97e131744ed866f691580bf7908157fe4fe5dc1f301ee9df4324a5bfc96e3fa48c24315a71eca2d636da924f3f94bacee29e7930f9176dcb6bc0032341f4f97bff618dbc1862ce7a1a794010a841f12f2d32c78bf67e786aeb002c3ea772043bd1645d87da8f44db008da4604a28106283d0c21d905f6558449d4ee8510a901c99140432ce551aec56ec5dd4dea78c643ec3f4ffd6f3426a49792c406b8d1e507c4e75afd5819bf584f1993ef6c0f88bc08bc21e6169cae147f95572ced2d1e6f971b41f74bcd816f16bb8b32cdde61870f6c9214bfc66bbe671a8521f4adb5c59d14b5b3e641542f85aada33542ef0e788bc0cb9f97c1e5c865b64494858c11d7f9ccfe7bc6058756b92798d6c4c1c37b726ae1b6dcdea8006b30c3a656a849620cdcfa8e3cf51fad226f6a14945ea770e60aa65cd736314ac361d2406b42e23d0ffe90dd7485e8c159ac27cd59ec29814c76e338d0269ff867480d69e7494d68dd4cbffba6e54de0915de3e56153308f2cb3d53f81d528eeee8c100466e431607ff96329dc9915fa828b2293a4f9e03f41086cffe5302b9c68c739ca38bdd64645d76963a0a80d0d2fcb18ea4ef405e17030f63fde3a92884501b82183ddfab50a17bdb3237878386045a9d0a4495eba8e2ced021f34fc76d85fd854e7978bfb52b80ee6f0cca0dfef78847bd8347433f44559927553639e6f948011f2d013e2a2b1890cff11a82284d79aab555c187ef7c3b7f248618f434a4542d29b7f703f2ade1dd45aad4bfdf992994011f058f4318ab65638060fcfc69a84561696ba64d7b9f58222d41df12431881e74c70a41b5be2e5770b779902248ba5b5c07740ab2c0b5cb9fc6c7f7f45ee89ec1e5992344ec7cded5863862864117421515df64c08735b1d2580c03812dcbb4bf25c6dfd9b0f28a87a7f4d5fdb5dd179d20f941bcfd20dfce6f5aa4ec897f8bcb57db091dc1dde7dc1b830d296e729aee7ac57a3ef81b7584a93b102ca54bd031f651db7727a81d287bcd057758a6b470b0d262ceb0fb322cfb9be8c4ad3e8fe15bd65fe0429f02295b062a0c2fd4119a38a0b2b9a42adb2e7ad855379e9b510a8e90afa4b112e2d7d069917807967d7d4c459a33173864ca5f52eb0c0d6220b8a3f077084c2a1a4b0693cda65bb1e41b6e4a2a4f9cc91a6b8afe5a7d69cfd745150f462593599d5418ac73a768c61d9a969f041eb439f45cf80e22b7cb1f8f2d1f82e675a47782aa37d73328b8053f370b4796003f7ab9d3f5235ac1f065bba0bc86c57f66e40ce813a2df65536e26f7a162d6ce7a8e770060694e82257326f3b6b235b89025f0f65e57b1fce9f356d508c0a845cdbd74dd1a0c246b0d43e3ee2f09f22e04379d4aad9829ac4cb9b2b47356d1c4ea5184a64e664f9099fc5bae50e0237b3bb0e072489804b00e77773db7a21c2759b64faa265835f5251a2305a01a10f3bfd3f905b1032d66efc02f2f0533aab76274366b5008d9e711e84ac6cc06d3c7201957a9c6d62b3ad45259c844af433f17331ad6ebd673362ad79a289fa24e7f992f4e7dcf195dfefd8bc2a76907a1f7bea048aefc3b315b42042b79b31586c7c6a67255dc3b5867fa9daafead5eadc48388c23fe635d0d5c1f8172f8fff8920c685b2bfd3c4e9e556567c425b215e8f74f916e10604c700fd71e2ee01e32894ecc1ff2e79f09b974c80cf3e77b164f67e5bc5c7ce564c00d588b54c6e3c0594c29c92fb058c9275725f68f9cd93ca8953b609f546a11957680168d88b433082c764d93cab2454056db1897c97a2ad109c0b7f4fccfd748e2f9a32cf18b0bfee0531826b3d33819477bff8addb1a49190f25689240c13fd2a2b0021580d0bad26f7f9ca2285580329dd658fba93ec594c262364345af9ad8795433a59e948f95ce195c65ed15e2a31a3c71c2d9426be29a644dc9562440fc8a4e96413818bc631a917819189db338e1cf8177cf5d489e003b70d1a8b73755da2b565eff1456f9ee9dc3d8c3b3dc2c87b6138579ba4f15e9d0f13dbe2e3253b52dab9151a156f1d9024d3f8d79bc3fd71b1c797d0601dcced11ef73caca856b6dbaddec16e27097e00f5fd9f017ef41614bfb084043c451f7c60981e605e92eb2df015808303216d609e1d9826167cc58ef90a4b5211ab113e654995f9b6897894b5302edd5b3d469d01dd977eea6e71866f3b9fc1068dab8a1eac67619e8ee85b9e27a7dd485d409c70062a7a6d7c8c6574757c52a59523e425eb1877f62a2ee974a9ebccb9f145b2d47eeb4a5f994fe091eb57aacbd94c0dc372ce230b07bd3d4211dcfa461bc68379fecc739b20bca97dab74e2c01ed750fcc821e284c5112c865d7e932478a757e537a7d3f21bb823e3aafe42437e2cf974bfbf36ea06f411dea327c829d835385ec0570c2d3fdf77c51498f3a905a221b1496aced4fe43f294cf9ef3cdc8733136fb328504a2f451da4b3d7f32ba824030ec336fd740fc2d344fb00d2502cac23c445d0845b4f957705b46df02882a844194226f3713eea86cfafd63e6fe7d105cef3a2191030a47d32cf193d3d9990c54c023e38fbfe726c2dd77a555c91a3e75143909d710ee41555bbb6256ac035a81c6b743c1c57df53e0fc8ace56d09fd10d10f7c7d63dba8661c5c88ed460cc4f2917c6fc87f3382bfaaac0788c11ade6900b64fc772b7a5db2d3c260345412f15cacffc564de0becefe7c3fb52f9e7403252db215129b7a282f9c4427e6daedab2ad742bc7b6ffbd9723f8dd80197896f61c591d9f44365e4b7f593bab44c82f1a4e49808a78e75c90d2d4556b3a71a4ac9e71e07b6bdd56a542ce791de03e412dfb279eadece4ab0c95f94791158561904900f9c5ef70fb2bdf9ff131ee3bc0fea629f5bfad2a4f8c1fc9dd0eb8a67b3df1ddeaf0e3efb21ea010f30b5df8c17998be28847dea826949b28ad41da9f09e3c1a2d795c4a6d746d1b3ea75458ad6937497acc24eee66d5eebe93c40ca17829eccdb08754770f8961da57f69b7f36b6cac5f5f60880d894e9b7c623d30ea29a0056ce4a0592ce4f6ba285244b298ad06244deafde45dd82fa847353e1b13540353d78d2a365343b4121c4e913c45f1b9d23dc43fc101413fc46457d99af5c867536ec0c5bf1d7212d0b67241f5b0c2d84c09997218587c1a23baf7137b681be288fc8c550fc114dfffd643e0493e26cbc6be318e33422e8e741504925e92bbab3a4859302b1e5bf0ba302a61add05d84b8a168070d5a2ea8613c75847327c56f68fcf2b72a7b981c595a3730d3bb12eade2cce300c3cab0ddded7b3e706874a2e90957c99a8f35403cdd33f921b8b3d53a8e3d3c308e6975406b6a53781cf239bca4c9619bf39adb4f146be585e359a9913e19f3fb1720ced58d8c516f85e70e85bc8f03ddbbdca28cd816f3037ded67d9006b570c87035e4c17baf62c04db3ea4955bce1239188e5412086ae7377ec83f6f2e6d7d164fce8368edee634956e880a87a7ec522c70acd99c42429c40d8f64db61f8f0b9c8328b5dc8202886bb27d4c43413d0ca2b3f7a580e0a05d7141aa7ecdb9841fea8d7da51d02a207c9102ed17e8e831b63cf2d1f382b26d113f30d601ff58edc34253ce3b4aa2f7a3ecb6a257e59f6658da87e30d803eb48e760ff0f374d914bb4e6d72c594a9d5805984ca5a98ab86b17e7986facdba809e639b4097f63b75a6252e88cef3b85ab202b4ce007ead375c6e08677259a61477c31c2e7c52f3b0271264b85dcc1260c3d53693812108a519b730c2e0ea8512e91ea63609397a8546048f2c61f6c0e4a1ba0895525db5c481f41e9df36c12a3963c24b870b94ab57f9704789152d2816ad64ba448e476dd76ac6c7402d2a4e2cfb50247e008038b4f71628730d7f40f536512fb487bba24d5b0825bdda17bb8d58cdf74bfc11971a8f9d387b0962a1d59db67f1351611eb85b3bbf429e30c701235633fb157a9ea72f5005629cd1da83678939e97c7be765fd51309407d3f52ba7b38bf3bcafdf7e272fd41da20fca6cf70ff0c7c49839a299a4d44b5a6dee8fc4c2042fce9cceeb540f38f8b8c2c4c3c4a9ee39ac7215ad097df5fb22fa088b736ba5637088c086504d045dcf7ccced9e62c1821347c6f49446cbff08ea0ce72adb46362b22d445127941d3d1f5bed868b07af8ed3d40abb87416c5f5a18789877f496d28e8d442df635890747e42f96cff9c982d2543d4f5ae718e476d8b6db136889bd3be08dfe4481fa0054422ac9dd3bbfd7e3e6be68f1fe3a9d24da71fcba3e12679f88412834fc9a15d4ce7f94143174d08dd35289374ee68f1a7e629c221ad720a294283a543624e1174755c7fab60cba2f1dccb17cc3991a4df6e1b5c5dc6eff8fb8783f916070d160a5c50de150fcf44f9ac82322ed5550e526d4bbea18ebe7148b824300759f14e0c75a79fe39382be51a822aa711e6113dfa3e8b6c21a0e3f3b5e49d24651ba9542743746ed8123bd66ee5e2ede7ddc61bab5a45e8d71f8dfb4838bdb7b6315399632128f7770ffb0d38dec3cbae8eebf79ffa5122cb9fa5ca497b2fe90f0f6017b4ca7b4c46f4157fc6e9b2365da7e2ae5b5bf2b2fe751b76837c50b41344e4f7d79b8c11a6eaabc6e1fa452e0762e586662b48701445f852682dc3f71e5f305d087c2b045091701d64093647d1ef06287864bcb9cda12e1a4252ea8db0e038619ce838e7c763bc97800ad5a7c839f786f9160aca42", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1411e1433c6b31570237824c830000001000010000000000000000000500000a58000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000002c0003801800038014000100776c9600000000000000000000000000080002400000d250080001250000c40000001400000011000100"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 1m37.301061375s ago: executing program 5 (id=3367): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe0000012}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$alg(r7, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf", 0x11}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) unshare(0x400) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d00000000000000000003000000000000000800010002"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000240000001200000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1m36.936737337s ago: executing program 5 (id=3371): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000540)="8775716f", 0x4}], 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) close(r0) bind$tipc(r2, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) listen(r5, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmmsg(r7, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40000120) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0xa4}}, 0x400c044) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m35.574849848s ago: executing program 5 (id=3382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000007b000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000980)={&(0x7f00000000c0)=0x8000, 0x2, &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000940)}) r3 = socket(0xa, 0x3, 0xff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x24040084) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x42f2, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0xa, 0x4, @dev={0xfe, 0x80, '\x00', 0x69}}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="c6e73300000000", 0x7}, {&(0x7f00000006c0)="9e91d91a9cfc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f00000004c0)="e3cb8bc7195b", 0x6}], 0x3}, 0x398) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x46}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x1c, 0x80, 0x0, 0xfffff010}, {0x6, 0x0, 0xff}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000007b000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) (async) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000980)={&(0x7f00000000c0)=0x8000, 0x2, &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000940)}) (async) socket(0xa, 0x3, 0xff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r4) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x24040084) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x42f2, 0x4) (async) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0xa, 0x4, @dev={0xfe, 0x80, '\x00', 0x69}}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="c6e73300000000", 0x7}, {&(0x7f00000006c0)="9e91d91a9cfc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f00000004c0)="e3cb8bc7195b", 0x6}], 0x3}, 0x398) (async) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x46}) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x1c, 0x80, 0x0, 0xfffff010}, {0x6, 0x0, 0xff}]}, 0x10) (async) 1m35.355964745s ago: executing program 5 (id=3387): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='c 12:'], 0xa) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) close(0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1m34.919973976s ago: executing program 5 (id=3392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000001880)='%pK \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000003c0)=[0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000001480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x87, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000003c0)=[0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000001480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x87, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000016c0), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000000)={{r6}, 0x2a, 0x80000007ff, 0x2}) (async) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000000)={{r6}, 0x2a, 0x80000007ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0300004ac1aadc3a6f9c1c000000000018550000460000000000f9ffffffffff8420000005000000145a0400fcffffff8510000001000000037c45ef91e1058f"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb, &(0x7f0000000340)=""/11, 0x41100, 0x2, '\x00', r2, @flow_dissector=0x11, r3, 0x8, &(0x7f0000001700)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x1, &(0x7f0000001740)=[r1, r1, r0, r0, r1], &(0x7f0000001780)=[{0x5, 0x1, 0x8}], 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0300004ac1aadc3a6f9c1c000000000018550000460000000000f9ffffffffff8420000005000000145a0400fcffffff8510000001000000037c45ef91e1058f"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb, &(0x7f0000000340)=""/11, 0x41100, 0x2, '\x00', r2, @flow_dissector=0x11, r3, 0x8, &(0x7f0000001700)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x1, &(0x7f0000001740)=[r1, r1, r0, r0, r1], &(0x7f0000001780)=[{0x5, 0x1, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1ff, 0x82, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0x8, 0x8, 0x0, 0xe09, 0x0, 0x9, 0x717a, 0x2, 0xd, 0x8, 0x5, 0x10a1, 0x80000001, 0x200, 0x3, 0xeeb, 0x81, 0xc, 0x3ff, 0xffffffff, 0xfff, 0x1, 0x99bd, 0xc, 0x10000, 0x9, 0xfc57c70, 0x3ff, 0x8, 0x6, 0xc, 0xa00, 0x1b, 0x8e, 0x4, 0x4, 0x9, 0x7, 0x6, 0xa160, 0xbee, 0x4, 0x100, 0xc2, 0x800, 0x3b1, 0x6, 0x100, 0x1000, 0x5, 0x9, 0xec4, 0x8000, 0x0, 0xedf, 0x5, 0xd, 0x2, 0x97, 0x7fffffff, 0x7, 0xd85, 0x81, 0x3, 0x6, 0x101, 0x6, 0x4, 0xfffffc00, 0x7, 0x9, 0x6, 0x4, 0x7c, 0x3, 0xd84e, 0x0, 0x1, 0x8, 0x7, 0xffffffff, 0xeda, 0x4, 0xfff, 0x401, 0x440, 0xb3, 0x7fff, 0x400, 0x6, 0x7ff, 0x6, 0x3, 0x1, 0x5, 0x3, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0x375f, 0x8, 0x1, 0x4, 0x4, 0x0, 0x6, 0x0, 0xaa5, 0x9, 0x800, 0x2, 0x81, 0x4, 0x9, 0x4a20a1a8, 0x8, 0x80000001, 0x0, 0xfffffffa, 0x3, 0x7, 0x4, 0x5, 0xc, 0x36, 0xf, 0xff9b, 0x68, 0x80000001, 0x401, 0x4, 0xff, 0x2e3, 0xc, 0x9, 0x3, 0x2, 0x0, 0x2452, 0xab, 0x5, 0x8, 0x8, 0x9, 0x10000, 0x1000, 0x7, 0x5, 0x1ff, 0x4a0, 0x0, 0x3, 0xc0, 0xffffffff, 0x7, 0x1, 0xa94a, 0x4, 0x101, 0xffffffff, 0xd7, 0x5, 0x8, 0x395, 0x7, 0x8, 0x6, 0x7fff, 0x10000, 0x80000001, 0x0, 0x7, 0x18000, 0x5, 0x6, 0x5, 0x2, 0xd146, 0x8, 0x6, 0x1, 0xf17, 0x9, 0x7, 0xffffffff, 0x7, 0xff, 0x1, 0x7, 0x81, 0x2, 0x8, 0x101, 0xfff, 0x2, 0x6, 0xffff99a7, 0x5, 0xac000000, 0x8000, 0x9, 0xe, 0x9, 0xa39, 0x9, 0x25, 0x5, 0x7, 0x6, 0x928800, 0x80000001, 0x2, 0x0, 0x1, 0x1, 0x8ef1, 0x9, 0x4, 0x0, 0x0, 0x2, 0x10, 0xfffffffe, 0x7fffffff, 0x6, 0x5, 0x7, 0x200, 0x80, 0x7, 0x1000, 0x9, 0x71, 0x6, 0x7, 0x7, 0x3, 0x1, 0x5, 0x4cd, 0x0, 0x9, 0x7f, 0x800, 0x8, 0x0, 0x1, 0xfffffffd, 0x4, 0x80000000, 0x4cd, 0x200]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095", @ANYBLOB="a9fdfbbdf2397ed5e1d857742b5501f21006f633739a07ade5b8c8bcb2", @ANYRESHEX=r8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095", @ANYBLOB="a9fdfbbdf2397ed5e1d857742b5501f21006f633739a07ade5b8c8bcb2", @ANYRESHEX=r8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$netrom_NETROM_IDLE(r14, 0x103, 0x7, &(0x7f0000000040)=0x46000, &(0x7f0000000200)=0x4) 1m33.923801284s ago: executing program 5 (id=3408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000240)="65d7beda99b4b47380c988cafb8b562ee0324ce01ff2ef488a3ed67aadabedf78bed9961a1a0ef038f575a68698876e944b27257a671bb72314a5528f2", 0x3d}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f00000002c0)="ce03be", 0x3}, {&(0x7f0000000100)="f244f837c3c9df25a38f615b9aaede7359e971aaa4", 0x15}], 0x4) 1m18.820916232s ago: executing program 34 (id=3408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000240)="65d7beda99b4b47380c988cafb8b562ee0324ce01ff2ef488a3ed67aadabedf78bed9961a1a0ef038f575a68698876e944b27257a671bb72314a5528f2", 0x3d}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f00000002c0)="ce03be", 0x3}, {&(0x7f0000000100)="f244f837c3c9df25a38f615b9aaede7359e971aaa4", 0x15}], 0x4) 1m4.031531293s ago: executing program 2 (id=3813): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 1m3.852071958s ago: executing program 2 (id=3816): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000100)) 1m3.69317247s ago: executing program 2 (id=3819): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020dff8014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 1m3.528356706s ago: executing program 2 (id=3822): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000001400128009000100626f6e64000000000400028008000500879a2bd21fc715161555de3f48d3f362320762e0", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 1m3.389031077s ago: executing program 2 (id=3823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@call={0x85, 0x0, 0x0, 0xb1}], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) syz_emit_ethernet(0x68, &(0x7f0000000380)=ANY=[@ANYBLOB="ff004500005a00000000002f9078000000a3d3f4c6000000001724808100000200107f1a10000800000000100060000100000000000000080022ebfffffffc2000000002000000000000130000000008006558000000000000000000"], 0x0) 1m3.323205064s ago: executing program 2 (id=3824): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket(0xa, 0x3, 0x3a) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x81, 0x0, 0x9}, 0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xa, 0x100, 0x23, @dev={0xfe, 0x80, '\x00', 0x3b}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x10, 0xb7, 0x8}}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x3, 0xa, 0x0, 0x1a1}, 0xc) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket(0x1f, 0x1, 0x800) (async, rerun: 64) read(r4, &(0x7f0000000780)=""/30, 0xffffffffffffff4d) (async, rerun: 64) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x8, r3, 0x1c, r5}, 0x10) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r8 = socket(0x1, 0x80000, 0x3ff) accept4(r8, &(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000500)=0x80, 0x81000) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000540)={'syztnl2\x00', r3, 0x8000, 0x80, 0x9e, 0x7, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @loopback}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) (async) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001840)=@newqdisc={0x24, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}}, 0x4000080) (async) r13 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002900)=@delchain={0x294, 0x65, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff3, 0xd}, {0xe, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_tcindex={{0xc}, {0x24c, 0x2, [@TCA_TCINDEX_ACT={0x244, 0x7, [@m_xt={0x168, 0x6, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0xff, 'security\x00', 0x13, 0x7, "971002a264c93b614eb4ce39676648cc2bb93913c2e60bc3c5c90b6dc27ae8995a6cf358c90bd7"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xa1, 0x6, "4ddec2ce996e3ba91aa18d899bdcb675e4d45f94c88dbf9c647d516790322b676165b56c59c2df90a0c32952c21416259d38043b54386dbe96f359074174771e523d96f7c17fdd3d6340065935caa302c201beccb139741fd47c49a81392ea54d14f8bfd39499f4124457e0695e786de13c0b9d554d408d6fd1d87fa216b9e5784ead4b26aa60ccf82ff6f15cc565dedf2654a84f759e8877f12dad44d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xd8, 0x9, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x91, 0x6, "b7e559d3e48dc42f10cdad83b45c33853eb2771f09a671692228a7a1c4fd4f631701aaaf6c93b0766a03a6b0f8e1e369916e923f87b42b3fe4132bec74550e055787bcb10ea8b9021b145d418ec88b225a9fb10cdc0e711513670fdac340ad753f20e53e25c1bbc2cb06727064a1093bea6874a4e6315b2dddb3bd5a6c36a0d1dc8daaad4e15fd5819c878b0c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x294}}, 0x0) (async) recvmmsg(r13, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1}, 0xfffe}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3}, 0x3}], 0x2, 0x3, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000240)=0x30) 48.26388099s ago: executing program 35 (id=3824): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket(0xa, 0x3, 0x3a) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x81, 0x0, 0x9}, 0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xa, 0x100, 0x23, @dev={0xfe, 0x80, '\x00', 0x3b}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x10, 0xb7, 0x8}}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x3, 0xa, 0x0, 0x1a1}, 0xc) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket(0x1f, 0x1, 0x800) (async, rerun: 64) read(r4, &(0x7f0000000780)=""/30, 0xffffffffffffff4d) (async, rerun: 64) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x8, r3, 0x1c, r5}, 0x10) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r8 = socket(0x1, 0x80000, 0x3ff) accept4(r8, &(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000500)=0x80, 0x81000) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000540)={'syztnl2\x00', r3, 0x8000, 0x80, 0x9e, 0x7, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @loopback}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) (async) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001840)=@newqdisc={0x24, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}}, 0x4000080) (async) r13 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002900)=@delchain={0x294, 0x65, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff3, 0xd}, {0xe, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_tcindex={{0xc}, {0x24c, 0x2, [@TCA_TCINDEX_ACT={0x244, 0x7, [@m_xt={0x168, 0x6, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0xff, 'security\x00', 0x13, 0x7, "971002a264c93b614eb4ce39676648cc2bb93913c2e60bc3c5c90b6dc27ae8995a6cf358c90bd7"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xa1, 0x6, "4ddec2ce996e3ba91aa18d899bdcb675e4d45f94c88dbf9c647d516790322b676165b56c59c2df90a0c32952c21416259d38043b54386dbe96f359074174771e523d96f7c17fdd3d6340065935caa302c201beccb139741fd47c49a81392ea54d14f8bfd39499f4124457e0695e786de13c0b9d554d408d6fd1d87fa216b9e5784ead4b26aa60ccf82ff6f15cc565dedf2654a84f759e8877f12dad44d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xd8, 0x9, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x91, 0x6, "b7e559d3e48dc42f10cdad83b45c33853eb2771f09a671692228a7a1c4fd4f631701aaaf6c93b0766a03a6b0f8e1e369916e923f87b42b3fe4132bec74550e055787bcb10ea8b9021b145d418ec88b225a9fb10cdc0e711513670fdac340ad753f20e53e25c1bbc2cb06727064a1093bea6874a4e6315b2dddb3bd5a6c36a0d1dc8daaad4e15fd5819c878b0c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x294}}, 0x0) (async) recvmmsg(r13, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1}, 0xfffe}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3}, 0x3}], 0x2, 0x3, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000240)=0x30) 9.682596292s ago: executing program 6 (id=4300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0xa79b4000) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) 5.972245912s ago: executing program 1 (id=4302): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x20, 0x0, 0x0, @private2, @mcast2, {[], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd0"}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)='U', 0xfdef}], 0x1}, 0x3) 5.768812741s ago: executing program 6 (id=4305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400010001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={r8, 0x8ec6, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000180)={r8, @in={{0x2, 0x4e23, @local}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000180)={r8, @in={{0x2, 0x4e23, @local}}}, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x2}, {0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) 5.694554022s ago: executing program 1 (id=4306): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b414000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00030001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 5.569938713s ago: executing program 1 (id=4307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000000)=0x7, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) shutdown(r0, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="2905000000000000c910fc01000000000000000000000000000004019dc20400000081000100000100000100c20400000b0b0000000000004aac47a29a2d58c91081d629c5397845b3c643ec3c0d5cf7e00edd57aeb84d563739b186ca1413d05231486d1a40bb734cf55dc902fe1471c1d60e87fd5b906ad0a1af3f2b51f55354dd94641c0e36311f59b7ed06073fd4c04b6e0a82cddff26eb27311c34499456a6dc2f74d63a792386e043f647ff12070ec78a3069b4c0d68b153b5148ffc27db6a217fc1151ac9056bbec9a6f8fc5072d5cc20c5b5cfd9dbe57520da7b9fe9507d224cbc56ec"], 0x38) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) 5.524480732s ago: executing program 6 (id=4308): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) splice(r3, 0x0, r4, 0x0, 0xc, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0xb, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x5}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}, @float={0x1, 0x0, 0x0, 0x10, 0x2}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0x10, 0x2}, {0x0, 0x5}, {0xa, 0x4}, {0xd, 0x9473}, {0x7}, {0x10}]}]}, {0x0, [0x0, 0x61, 0x30, 0x30, 0x5f, 0x0, 0x61]}}, &(0x7f00000001c0)=""/250, 0xa5, 0xfa, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8, '\x00', 0x0, r5, 0x4, 0x1, 0x1}, 0x50) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r2, 0x1) 4.593836276s ago: executing program 1 (id=4314): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000040)=0x14) (async, rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async) splice(r2, 0x0, r3, 0x0, 0x1100000000f336, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x544}], 0x1}}], 0x1, 0xc040) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000804) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async, rerun: 32) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "744e97db9afbb12414a6834af78cb3831712e2a2293e398b46cd813d5dd09cd1", "6b6f9b9f8372dd6625bde94e9edc7c35bb7c2c1ffb866b4b4dd789c42881c2a8", "a7695026e9086edf8ccef78410fc16bacb308ca6b200a3c8b84dbc322fd0b42b", "830600cb7a9ae29e5c81d91096bfa200", "29b1b2e5f114e8a8a9f1e200777acf7ef09dbb3c6fde217f4d4cf2e20859b560", "de07748767cdc8e5821ffd4a", 0x200, 0x0, 0x10001, 0x4c4, 0x101}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) sendto$inet6(r4, &(0x7f0000000800)="4103082c111648040102", 0xa, 0x880, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000007007528e1911a0e09c9760400080000000200000852120000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) 3.737288384s ago: executing program 7 (id=4319): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$kcm(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x3c}}, 0x800) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, &(0x7f0000000540), &(0x7f0000000640)=""/144}, 0x20) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000000)={0x1, 0x2, 0x2c9, 0x7fff, 0x2}) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$packet(r4, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r6, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) bind$packet(r5, &(0x7f0000000040)={0x11, 0x4, r6, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x24, &(0x7f0000000340)=ANY=[], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000ffffff77000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x5, 0xe, 0xfffffffffffffd4d, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xcd}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) shutdown(r0, 0x1) 3.394837326s ago: executing program 8 (id=4320): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7, 0x2, 0x1, 0x0, 0x6b8ffff}]}]}, 0x80}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x6100204) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!G', 0x3}], 0x1, 0x739, 0xd1) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) (async) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$inet6(0xa, 0x80000, 0x7) 3.205314008s ago: executing program 3 (id=4321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3062b, 0x980c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x10001, 0x13, 0x8}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x482, 0x27) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64=0x0, @ANYRES32=r4, @ANYRESHEX=r4, @ANYRES16=0x0, @ANYRESOCT=r1], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) 2.837007735s ago: executing program 7 (id=4322): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x83, &(0x7f0000001000)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0xfffffffffffffc9a) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @empty}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r3, 0xf}, &(0x7f00000000c0)=0x8) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 2.832335916s ago: executing program 8 (id=4323): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT], 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000801a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000c5e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb79104005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4023f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cade81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4090) openat$cgroup_ro(r1, &(0x7f0000000680)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f0000000380)="db3f3030cd10bb9d173eec7cd776696443804d6f6599440bbc5a695d74df2140aca2c5f66200aefccb6086d6ba7cdcb27e86a99c78ccc9c42b4826ec69bc16c633f301e88fa1f70f247ff304e67e970ac7d8a80a792cf0727a45ec680df7b0fcc18e0948615ff2ffda18527db52e5a59b7f8b33733add6bc0f29aa325c9705f231d6dd5166", &(0x7f00000002c0)=""/102, &(0x7f00000004c0)="0985fabd60a7353a14d639f3bb74dc5cc7918dcd5f1d039c9314ba947fc0999ab22f60d73f5d4a8dd164deabbfc5eceb3057bb83a28cda6b4527b171cdbd2841c0de82490c747c577b83ed208c57d7fa8298a8dd282e3de706712cb7e7ed85d19220a2a77b86553543793e043dc464065bb4a8207c09576eb2d11125e510eb33119d67d029a125a77049011cbc6c13e4866caa9d9a037d0b156110f67a7fd50a293f91aedbe969f8f6a4387d2d6bc3fd84ef2fd652f3de22ae2a9dc7376828093dc9cd785fd33bd4fb3eb090c962e37ac9bf082f089eab70d1e2a214c715eda500bbc3760a4bdce7c859f9d7", &(0x7f0000000700)="93cdfc5eb922b60d3ab03331774c0f26248dce87e9606eccd2d8ff696a232f2d75447da6d4efa63f227451c483cd91b55c1feb44e54ccda74ceac6e1c03ad7ac948aec90b177263ec1866aee9cc8e3d49a080a2c6d92b2ae177334b69c0ba65710bc2898720edcdd3520085fea72fd3d03ceaee3ae0993d5240d3ace1df8929c3253cc40c31069f19bfe93e8186c09ae5abe3d3c87bb874346aeaf1f7aa1a4cf752cb90936a9573496c3a4323972917e6b26aed0217f4b1adfdc0423cb41c6b7914e4ad81038a960aab27cfcf5a39535128e49e44d1c5470b46179f7788fa2", 0x7fe, 0x1, 0x4}, 0x38) 2.580117788s ago: executing program 7 (id=4324): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x80000001}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x3928aa90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x4004001) 2.527634381s ago: executing program 8 (id=4325): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000000)={0x1, 0x5}) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e23, 0x80000, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dontfrag={{0x10, 0x29, 0x3e, 0x4}}], 0x10}, 0x440e0) 2.400035964s ago: executing program 7 (id=4326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029700100001e0a01080000000000000000070000060900020073797a31000000000900010073797a3000000000440103804001ae5e34010180b4000100"], 0x1f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x24) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 2.386824516s ago: executing program 6 (id=4327): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000080) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000, 0x0, 0x3ff, 0x4, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000004, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x68800}, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x204, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xaa}, {0x6, 0x16, 0xa0}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8bab}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x84b7}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x57}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x10}, {0x5}}]}, 0x204}}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630002000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xdd, &(0x7f0000000140)=""/221, 0x0, 0x5}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1c, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x3, 0x2, 0x5, 0x1, 0xfffffffffffffff4, 0xfffffffffffffffc}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @ringbuf_query, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000840)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x2, 0xa, 0x40, 0xc}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r3], &(0x7f0000000e80)=[{0x2, 0x1, 0x0, 0x8}, {0x3, 0x1, 0x0, 0x9}, {0x3, 0x4, 0x0, 0x2}, {0x2, 0x3, 0x8, 0x2}, {0x3, 0x1, 0x2, 0xa}], 0x10, 0x1}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r6, 0x3ff}, 0x8) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000100000010000000040000000000000009311ff770cdb6a71fa3d4228f3f5ecf14a35a9", @ANYRES32=0x0, @ANYBLOB="87980000080001000f0024002e8b6c032b8d782ba1c94900"], 0x30}}, 0x0) 2.380024342s ago: executing program 8 (id=4328): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}}, 0xd209f6d81482fb57) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}, 0x1009}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10121, 0x0) 2.164048489s ago: executing program 3 (id=4329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400210001000a00000000000000fe800000000000000000000000000013f8000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x100, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}}, 0x800) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000001c0000000079100000000000006100feff0000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (rerun: 64) 2.028321034s ago: executing program 6 (id=4330): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000bc0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (fail_nth: 3) 1.942519932s ago: executing program 3 (id=4331): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x7, 0x9}) socket$tipc(0x1e, 0x2, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000540)="605159525d4257334750c57ae625b89b17b3c21b7aed3a9d696e3342ea732d02eea609dd8074072eaa746e49c784417ccd2ece6cb5ada1e862fe6d0d31fe99d148", 0x41}, {&(0x7f00000005c0)="aafc72fafd219f331b69438a67fc52c5d7acc1e28ff45404346c02f92f89b7586307ed4694ed3b3e62654b86b192677a280911a2a081cef834f371059db16ab0bee2f28e9c2e42afddf1d28163be8903259af2097c317e27fff69dde408a5b80f9aeb69394169e38a46da7f03fe4ada19133851120392122d1d9f25a1defdb7f56ca26f8efb75cec5222249089f532addcd7808f470b8819ae825d4f9dd5669fa4c7b72260dded99b4d124d088463f3587eecf00bbe51544681742f05a1d22d5665f23bafce31d8657", 0xc9}], 0x2, 0x3, 0xc2d) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket$unix(0x1, 0x2, 0x0) socket(0x40000000015, 0x805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, 0x0) shutdown(r2, 0x1) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000890) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000504000000000000000000000b04000000000000000000000a020000000000000061"], 0x0, 0x52}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000810400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00d000000000000aaaaaabb0800450000680000000000069078ac141488061414aa00004101166ccb8fa473a06b6ad797ebed1dc05200945ce421a1a6fa5fa195a008cadb318b5a4f2a5c1d02d91b9b257321daa7d32126e2c172dbfa0f4b39f9cdfb62689fbc71c9e2bd7a2a575c8cd10b3641eae4130bf85e4fe953b2f115829a43b52fd5405fe128049d1f1166b476c43f83792b595a90c500daef8580c836493167a164c15817f54d689c6c01a6303cab2ec933388a226334ff2c538fd7d117aa50e73ee467ca1b10ff56a8603309e6e25e97224d6990a21fa3367f76c4dd438e3954aa4580792978e9f56f51d254bf225d1ce20296077a791c8dc6cafd56c81ba502e66658b43e2fff162ba6976c602d9dfc6243664f40a4129ffaf0907bef63752e457cdc63a32bd110871a96bc1d6124980329d53dec75c87a0328fb5a403d3a77a9637eb0ebec82b0c050f4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 1.644352352s ago: executing program 6 (id=4332): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03a00000000000001c0012800b0300000000000000000102", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22ffff) ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000068000100020000020700290e882ce2acebd9340000000000007d853c97acfda22b06b29ddafe9a2af0ffffffe8000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 1.471869907s ago: executing program 7 (id=4333): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000440)=',', 0x1}], 0x1}}], 0x2, 0x200040c0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES8=r3, @ANYRESOCT=r4, @ANYRES64=r6, @ANYRES64=r5], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r10 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000080)={0xffffffff, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r7, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r12 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000"], 0x50}}, 0x0) 1.394623563s ago: executing program 3 (id=4334): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x3, r2, 0xc, r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.337028533s ago: executing program 8 (id=4335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}}, 0x42) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x11020a) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000001c0)={{r2, &(0x7f0000000000)='(\\{-\'\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x4]}, {0x5, 0x4, 0x2, 0xa}}, 0x77, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, {[0x3, 0x0, 0x0, 0xd7dc]}, 0xd6, 0x58, &(0x7f0000000140)=""/88}) ioctl$HCIINQUIRY(r2, 0x400448df, &(0x7f0000000040)={0x0, 0x0, '\x00\b\x00'}) 990.191944ms ago: executing program 3 (id=4336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendto(r0, &(0x7f0000000280)="1ddc3619178af7959d", 0x9, 0x44084, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 608.0154ms ago: executing program 8 (id=4337): unshare(0x60600) (async) r0 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) unshare(0x44040000) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) unshare(0x22020400) (async, rerun: 32) close(r0) (rerun: 32) 417.007738ms ago: executing program 7 (id=4338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000001c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000500)="03000000000000000000108a15df566a7a9ced0d3a9068", 0x17}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) 393.678112ms ago: executing program 1 (id=4339): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000bc0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x108, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 310.864834ms ago: executing program 1 (id=4340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000004000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8ff07000000000000caa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884d88000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b5ffffff7f000000000a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6dc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f8301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed73cfc"]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 0s ago: executing program 3 (id=4341): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) socket$kcm(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2301, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES64=r5, @ANYRES32=r7, @ANYRES32=r3], 0xfdef) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendfile(r4, r5, 0x0, 0xffffffff000) pread64(r0, &(0x7f0000000480)=""/80, 0x50, 0x100000000000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r10, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40880) kernel console output (not intermixed with test programs): k: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 524.034368][T18609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3040'. [ 524.120215][T18603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.467697][T18123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.592911][T18626] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 524.610905][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 524.624354][T18631] pim6reg: entered allmulticast mode [ 524.648672][T18626] veth1_to_team: entered promiscuous mode [ 524.663981][T18626] veth1_to_team: entered allmulticast mode [ 524.819482][T18123] veth0_vlan: entered promiscuous mode [ 524.858660][T18123] veth1_vlan: entered promiscuous mode [ 525.031461][T18123] veth0_macvtap: entered promiscuous mode [ 525.064179][T18123] veth1_macvtap: entered promiscuous mode [ 525.265708][T18123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.324112][T18123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.385269][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.414726][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.456953][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.497236][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.627135][T18670] netlink: 'syz.5.3051': attribute type 21 has an invalid length. [ 525.678145][T18670] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3051'. [ 525.762975][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.795592][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.885088][T15264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.909264][T15264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.451791][T18689] syzkaller0: entered promiscuous mode [ 526.466069][T18689] syzkaller0: entered allmulticast mode [ 527.590628][T18727] __nla_validate_parse: 6 callbacks suppressed [ 527.590657][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3057'. [ 527.792331][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3057'. [ 531.342572][T18738] lo speed is unknown, defaulting to 1000 [ 531.350208][ T33] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.381771][ T33] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.413198][T18738] lo speed is unknown, defaulting to 1000 [ 531.420060][ T33] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.450025][ T33] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.476020][T18738] lo speed is unknown, defaulting to 1000 [ 531.503788][T18741] syzkaller1: entered promiscuous mode [ 531.517702][T18741] syzkaller1: entered allmulticast mode [ 531.539827][T18738] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 531.547636][T18746] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3062'. [ 531.563301][T18746] ip6erspan0: entered allmulticast mode [ 531.724011][T18738] lo speed is unknown, defaulting to 1000 [ 531.741658][T18738] lo speed is unknown, defaulting to 1000 [ 531.767024][T18738] lo speed is unknown, defaulting to 1000 [ 531.792693][T18756] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 531.918704][T18738] lo speed is unknown, defaulting to 1000 [ 531.930061][T18738] lo speed is unknown, defaulting to 1000 [ 531.937943][T18738] lo speed is unknown, defaulting to 1000 [ 532.133828][T18770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3066'. [ 532.202512][T18778] netlink: 'syz.2.3068': attribute type 21 has an invalid length. [ 532.220211][T18778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3068'. [ 532.965650][T18801] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 533.496774][T18835] lo: Caught tx_queue_len zero misconfig [ 533.516435][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3080'. [ 533.547382][T18834] bond1: option all_slaves_active: invalid value (5) [ 533.556663][T18834] bond1 (unregistering): Released all slaves [ 533.782072][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3088'. [ 534.165034][T18878] lo speed is unknown, defaulting to 1000 [ 534.425191][T18887] netlink: 'syz.2.3092': attribute type 8 has an invalid length. [ 534.715652][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3095'. [ 535.677259][T18923] Bluetooth: MGMT ver 1.23 [ 535.940662][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3102'. [ 535.950486][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3102'. [ 535.969830][T18937] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 536.011522][T18937] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3103'. [ 536.122514][T18945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3104'. [ 536.152940][T18945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3104'. [ 536.628378][T18963] netlink: 'syz.2.3106': attribute type 1 has an invalid length. [ 536.765262][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3106'. [ 536.919473][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.930299][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3105'. [ 537.564053][T13063] NFSD: Failed to start, no listeners configured. [ 538.858435][T18930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.872050][T18935] netlink: 'syz.3.3103': attribute type 2 has an invalid length. [ 539.053659][T18987] netlink: 'syz.3.3112': attribute type 3 has an invalid length. [ 539.158371][T18994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3116'. [ 539.180875][T18999] block nbd3: NBD_DISCONNECT [ 539.322342][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 539.663287][T19016] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3122'. [ 539.677130][T19019] netlink: zone id is out of range [ 539.700974][T19019] netlink: zone id is out of range [ 539.712224][T19016] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3122'. [ 539.727599][T19019] netlink: zone id is out of range [ 539.753800][T19019] netlink: zone id is out of range [ 539.778285][T19019] netlink: zone id is out of range [ 539.793572][T19019] netlink: zone id is out of range [ 539.800639][T19021] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 539.817493][T19019] netlink: zone id is out of range [ 539.851811][T19019] netlink: zone id is out of range [ 539.880182][T19019] netlink: zone id is out of range [ 540.333656][T19021] lo speed is unknown, defaulting to 1000 [ 540.524289][T19039] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3129'. [ 540.540118][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.551269][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.566209][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.576081][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.598698][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 540.685721][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 540.717572][T19046] tipc: Enabling of bearer rejected, failed to enable media [ 540.816707][T19049] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.824700][T19049] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.862987][T19054] nbd: must specify at least one socket [ 540.985864][T19049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.005582][T19049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.115474][T11929] lo speed is unknown, defaulting to 1000 [ 541.131618][T11929] syz2: Port: 1 Link DOWN [ 541.301791][T19056] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.309673][T19056] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.460252][T19056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.477880][T19056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.653267][T15264] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.664942][T15264] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.915834][T19064] syzkaller1: entered promiscuous mode [ 541.932539][T19064] syzkaller1: entered allmulticast mode [ 541.961290][T15264] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.973311][T15264] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.008631][T15264] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.020112][T15264] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.036027][T15264] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.053285][T19041] lo speed is unknown, defaulting to 1000 [ 542.060071][T15264] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.131855][T19086] ip6_vti0: entered promiscuous mode [ 542.144872][T19086] ip6_vti0: entered allmulticast mode [ 542.289492][T19090] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 542.322309][T19093] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.3140'. [ 542.526596][T19099] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.3141'. [ 542.569738][T19041] chnl_net:caif_netlink_parms(): no params data found [ 542.701511][ T5833] Bluetooth: hci4: command tx timeout [ 542.756672][T19099] lo speed is unknown, defaulting to 1000 [ 542.861406][T19041] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.878351][T19041] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.893500][T19041] bridge_slave_0: entered allmulticast mode [ 542.915439][T19041] bridge_slave_0: entered promiscuous mode [ 542.968566][T19041] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.976147][T19041] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.985804][T19041] bridge_slave_1: entered allmulticast mode [ 542.994745][T19041] bridge_slave_1: entered promiscuous mode [ 543.169587][T19041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.221572][T19041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.377789][T19041] team0: Port device team_slave_0 added [ 543.414250][T19041] team0: Port device team_slave_1 added [ 543.714618][T19041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.749591][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.831646][T19041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.903550][T19041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.918993][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.965674][T19041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.013962][T19153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3154'. [ 544.143206][T19041] hsr_slave_0: entered promiscuous mode [ 544.159750][T19041] hsr_slave_1: entered promiscuous mode [ 544.176955][T19041] debugfs: 'hsr0' already exists in 'hsr' [ 544.197583][T19041] Cannot create hsr debugfs directory [ 544.641698][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'. [ 544.667054][T19177] ip6tnl3: entered allmulticast mode [ 544.768559][ T5833] Bluetooth: hci4: command tx timeout [ 544.916799][T19041] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 544.942272][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.969390][T19041] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 544.990918][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.019293][T19041] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 545.032802][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.049275][T19041] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 545.068171][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.201466][T19041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.229926][T19041] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.247371][T15256] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.254662][T15256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.285344][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.292716][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.305098][T19201] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 0, id = 0 [ 545.764839][T19041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.040658][T19238] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3176'. [ 546.104672][T19238] bond8: entered promiscuous mode [ 546.111070][T19238] 8021q: adding VLAN 0 to HW filter on device bond8 [ 546.125476][T19233] lo speed is unknown, defaulting to 1000 [ 546.735322][T19267] net_ratelimit: 8 callbacks suppressed [ 546.735346][T19267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.848817][ T5833] Bluetooth: hci4: command tx timeout [ 546.871031][T19041] veth0_vlan: entered promiscuous mode [ 546.883529][T19273] netlink: 'syz.3.3186': attribute type 1 has an invalid length. [ 546.902485][T19041] veth1_vlan: entered promiscuous mode [ 546.971936][T19041] veth0_macvtap: entered promiscuous mode [ 546.994168][T19041] veth1_macvtap: entered promiscuous mode [ 547.075895][T19279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 547.087685][T19041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.125587][T19041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.149531][T15264] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.168643][T15264] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.188395][T15264] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.257456][T15264] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.365164][T19293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3193'. [ 547.526415][T15264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.564244][T15264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.687787][T19310] netlink: 'syz.2.3197': attribute type 7 has an invalid length. [ 547.697095][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.717335][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.729810][T19309] netlink: 'syz.2.3197': attribute type 7 has an invalid length. [ 547.739969][T19310] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3197'. [ 547.756684][T19309] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3197'. [ 547.925846][T19311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.947942][T19311] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.978404][T19311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.047054][ T5189] lo speed is unknown, defaulting to 1000 [ 548.057266][ T5189] syz2: Port: 1 Link ACTIVE [ 548.215750][T19333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.265534][T19336] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 548.289346][T19336] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 548.376310][T19341] netlink: 'syz.5.3201': attribute type 1 has an invalid length. [ 548.918663][ T5833] Bluetooth: hci4: command tx timeout [ 549.260839][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 549.275539][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 549.300936][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 549.321214][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 549.335411][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 549.755956][T19352] lo speed is unknown, defaulting to 1000 [ 550.241881][T19383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3215'. [ 550.255374][T19383] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3215'. [ 550.313936][T19383] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3215'. [ 550.837130][T19352] chnl_net:caif_netlink_parms(): no params data found [ 551.099602][T19396] lo speed is unknown, defaulting to 1000 [ 551.262949][T19352] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.274466][T19352] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.286430][T19352] bridge_slave_0: entered allmulticast mode [ 551.300497][T19352] bridge_slave_0: entered promiscuous mode [ 551.328202][T19352] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.343930][T19352] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.366037][T19352] bridge_slave_1: entered allmulticast mode [ 551.393485][T19352] bridge_slave_1: entered promiscuous mode [ 551.400206][ T50] Bluetooth: hci7: command tx timeout [ 551.669148][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3222'. [ 551.915785][T19352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.088813][ T162] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.182607][T19352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.224097][ T162] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.233196][ T162] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.242672][ T162] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.520375][T19352] team0: Port device team_slave_0 added [ 552.541600][T15264] team0: left allmulticast mode [ 552.547499][T15264] bond4: left allmulticast mode [ 552.555368][T15264] team0: left promiscuous mode [ 552.561212][T15264] bond4: left promiscuous mode [ 552.566833][T15264] bridge0: port 1(team0) entered disabled state [ 552.567335][T19425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.609992][T15264] pimreg: left allmulticast mode [ 553.016995][T19318] Set syz1 is full, maxelem 65536 reached [ 553.244587][T19432] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3225'. [ 553.479097][ T50] Bluetooth: hci7: command tx timeout [ 553.956162][T15264] bond3 (unregistering): (slave bridge2): Releasing active interface [ 554.074871][T15264] team0: Port device bridge5 removed [ 554.115163][T15264] bond1 (unregistering): Released all slaves [ 554.133137][T15264] bond2 (unregistering): Released all slaves [ 554.158170][T15264] bond3 (unregistering): Released all slaves [ 554.178640][T15264] team0: Port device bond4 removed [ 554.185072][T15264] bond4 (unregistering): Released all slaves [ 554.206902][T15264] bond5 (unregistering): Released all slaves [ 554.218356][T19411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.268807][T15264] bond0 (unregistering): Released all slaves [ 554.326049][T15264] bond6 (unregistering): Released all slaves [ 554.386314][T19448] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3229'. [ 554.397157][T15264] bond7 (unregistering): (slave veth15): Releasing backup interface [ 554.451341][T15264] bond7 (unregistering): Released all slaves [ 554.503852][T19352] team0: Port device team_slave_1 added [ 554.647390][T19462] netlink: 364 bytes leftover after parsing attributes in process `syz.2.3231'. [ 554.674541][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'. [ 554.702670][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'. [ 554.717744][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'. [ 554.804995][T19461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.832541][T19461] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.849225][T19461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.876994][T19352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.884768][T19352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.915834][T19352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.965274][T15264] : left promiscuous mode [ 555.003252][T19352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.013164][T19352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.041585][T19352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.068835][T19449] lo speed is unknown, defaulting to 1000 [ 555.133556][T15264] tipc: Disabling bearer [ 555.194399][T15264] tipc: Left network mode [ 555.256739][T19471] __nla_validate_parse: 15 callbacks suppressed [ 555.256759][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3233'. [ 555.523295][T19471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.559214][ T50] Bluetooth: hci7: command tx timeout [ 555.573247][T19352] hsr_slave_0: entered promiscuous mode [ 555.587782][T19352] hsr_slave_1: entered promiscuous mode [ 555.600827][T19352] debugfs: 'hsr0' already exists in 'hsr' [ 555.616837][T19352] Cannot create hsr debugfs directory [ 555.864470][T19492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3237'. [ 555.875226][T19492] openvswitch: netlink: Flow key attr not present in new flow. [ 556.111487][T19502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3239'. [ 556.154449][T19501] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3238'. [ 556.172089][T19502] vlan0: entered promiscuous mode [ 556.325136][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 556.400446][T19509] netlink: 'syz.5.3241': attribute type 1 has an invalid length. [ 556.409394][T19509] netlink: 'syz.5.3241': attribute type 2 has an invalid length. [ 556.516990][T19511] bond9: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 556.536086][T19511] nbd: must specify an index to disconnect [ 556.875177][T15264] hsr_slave_0: left promiscuous mode [ 556.884734][T15264] hsr_slave_1: left promiscuous mode [ 556.894053][T15264] batman_adv: batadv0: Removing interface: ipvlan0 [ 556.906199][T15264] batman_adv: batadv0: Removing interface: ipvlan1 [ 556.915611][T19521] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3244'. [ 556.959319][T15264] pim6reg (unregistering): left allmulticast mode [ 557.349222][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'. [ 557.412503][T19547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3246'. [ 557.645737][ T50] Bluetooth: hci7: command tx timeout [ 557.696274][T19520] delete_channel: no stack [ 557.824285][T19516] lo speed is unknown, defaulting to 1000 [ 557.843360][T19352] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.982687][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 558.109754][T19559] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3249'. [ 558.137548][T19352] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.254539][T19572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3250'. [ 561.476880][T19575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3252'. [ 561.584781][T19352] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.635114][T19578] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 561.693100][T19589] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3254'. [ 561.762221][T19352] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.809468][T19580] lo speed is unknown, defaulting to 1000 [ 561.873222][T15264] IPVS: stop unused estimator thread 0... [ 562.922260][T19352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.993232][T19352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.052966][T19352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 563.095284][T19352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.119654][T19352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 563.148386][T19352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.185221][T19352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 563.217417][T19352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.355767][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 563.382742][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'. [ 563.592170][T19657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.960080][T19352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.030855][T19352] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.073251][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.080550][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.126738][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.134091][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.365817][T19686] netlink: 'syz.5.3274': attribute type 8 has an invalid length. [ 564.398536][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3274'. [ 564.462809][T19691] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3276'. [ 564.479004][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3275'. [ 564.499997][T19686] netlink: 'syz.5.3274': attribute type 8 has an invalid length. [ 564.508906][ T1110] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.517804][ T1110] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.538455][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3274'. [ 564.579528][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 564.681970][T19689] macvtap1: entered promiscuous mode [ 564.689177][T19689] team0: entered promiscuous mode [ 564.704939][T19689] team_slave_0: entered promiscuous mode [ 564.724294][T19689] team_slave_1: entered promiscuous mode [ 564.743485][T19689] macvtap1: entered allmulticast mode [ 564.757912][T19689] team0: entered allmulticast mode [ 564.773580][T19689] team_slave_0: entered allmulticast mode [ 564.795949][T19689] team_slave_1: entered allmulticast mode [ 564.820666][T19689] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 564.829271][ T1110] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.850231][ T1110] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.912374][T19696] team0: left allmulticast mode [ 564.927215][T19696] team_slave_0: left allmulticast mode [ 564.936342][T19696] team_slave_1: left allmulticast mode [ 564.969711][T19696] team0: left promiscuous mode [ 564.984136][T19696] team_slave_0: left promiscuous mode [ 565.004053][T19696] team_slave_1: left promiscuous mode [ 565.239310][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 565.360865][T19352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.408563][T19725] x_tables: duplicate underflow at hook 3 [ 565.619151][T19352] veth0_vlan: entered promiscuous mode [ 565.706864][T19743] dvmrp0: entered allmulticast mode [ 565.745651][T19352] veth1_vlan: entered promiscuous mode [ 565.925806][T19352] veth0_macvtap: entered promiscuous mode [ 565.992297][T19352] veth1_macvtap: entered promiscuous mode [ 566.058521][T19352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.115611][T19352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.175762][ T33] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.211162][ T33] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.251537][ T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.270522][ T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.534666][T15260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.561604][T15260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.614762][T19768] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 566.624808][T19768] bridge2: entered allmulticast mode [ 566.665048][T15260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.683468][T15260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.755216][T19771] lo speed is unknown, defaulting to 1000 [ 566.986038][T19779] netlink: 'syz.1.3205': attribute type 2 has an invalid length. [ 567.173983][T19788] syzkaller1: entered promiscuous mode [ 567.180130][T19788] syzkaller1: entered allmulticast mode [ 567.192423][T19788] netlink: 'syz.5.3296': attribute type 29 has an invalid length. [ 567.711729][T19813] pim6reg: entered allmulticast mode [ 567.750635][T19815] tipc: Started in network mode [ 567.768709][T19815] tipc: Node identity 2630bce2ba2b, cluster identity 4711 [ 567.777474][T19815] tipc: Enabled bearer , priority 0 [ 567.785911][T19813] pim6reg: left allmulticast mode [ 567.891944][T19821] __nla_validate_parse: 7 callbacks suppressed [ 567.891968][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 567.916751][T19815] syzkaller0: entered promiscuous mode [ 567.932752][T19815] syzkaller0: entered allmulticast mode [ 567.951437][T19815] tipc: Resetting bearer [ 567.967544][T19829] IPv6: Can't replace route, no match found [ 567.975371][T19829] IPv6: Can't replace route, no match found [ 568.057493][T19823] vlan2: entered allmulticast mode [ 568.085810][T19823] bond0: entered allmulticast mode [ 568.312783][T15264] tipc: Resetting bearer [ 568.424642][T19803] tipc: Resetting bearer [ 568.610283][T11925] IPVS: starting estimator thread 0... [ 568.696626][T19865] netlink: 364 bytes leftover after parsing attributes in process `syz.5.3315'. [ 568.708462][T19861] IPVS: using max 29 ests per chain, 69600 per kthread [ 568.981165][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3316'. [ 569.159494][ T5904] IPVS: starting estimator thread 0... [ 569.259570][T19873] IPVS: using max 28 ests per chain, 67200 per kthread [ 572.274032][T19803] tipc: Disabling bearer [ 572.284771][T19856] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3311'. [ 572.294511][T19856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3311'. [ 572.303698][T19856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3311'. [ 572.316569][T19865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3315'. [ 572.350157][T19865] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3315'. [ 572.376835][T19865] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3315'. [ 572.401072][T19865] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3315'. [ 572.410945][T11925] tipc: Node number set to 2619063522 [ 572.442428][T19868] ip6gre1: entered promiscuous mode [ 572.888485][T19892] syzkaller1: entered promiscuous mode [ 572.899399][T19892] syzkaller1: entered allmulticast mode [ 572.924417][T19912] __nla_validate_parse: 2 callbacks suppressed [ 572.924436][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 572.980896][T19910] netlink: 'syz.1.3323': attribute type 1 has an invalid length. [ 572.989668][T19904] lo speed is unknown, defaulting to 1000 [ 572.997848][T19910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.174169][T19918] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3326'. [ 573.229444][T19918] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.237221][T19918] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.266629][T19918] bridge0: entered allmulticast mode [ 573.548366][T19938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3333'. [ 573.907927][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'. [ 574.120369][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 574.293845][T19973] netlink: 'syz.2.3343': attribute type 32 has an invalid length. [ 574.308307][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'. [ 574.345300][T19973] bond2: Setting coupled_control to off (0) [ 574.656229][T19994] tunl0: Caught tx_queue_len zero misconfig [ 574.683436][T19994] macsec1: entered promiscuous mode [ 574.688993][T19994] macsec1: entered allmulticast mode [ 574.709757][T19995] dummy0: entered promiscuous mode [ 574.717665][T19995] vlan2: entered promiscuous mode [ 575.096165][T20011] lo speed is unknown, defaulting to 1000 [ 575.902093][T20046] netlink: 'syz.5.3367': attribute type 1 has an invalid length. [ 575.925873][T20046] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3367'. [ 575.945168][T20046] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3367'. [ 576.244281][T20058] ipvlan2: entered promiscuous mode [ 576.259037][T20058] bridge0: port 3(ipvlan2) entered blocking state [ 576.276054][T20058] bridge0: port 3(ipvlan2) entered disabled state [ 576.297887][T20058] ipvlan2: entered allmulticast mode [ 576.313746][T20058] bridge0: entered allmulticast mode [ 576.342380][T20058] ipvlan2: left allmulticast mode [ 576.349196][T20058] bridge0: left allmulticast mode [ 576.413232][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'. [ 576.438396][T20063] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20003 [ 576.683455][T20075] lo speed is unknown, defaulting to 1000 [ 576.822157][T20084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 576.964174][T20088] FAULT_INJECTION: forcing a failure. [ 576.964174][T20088] name failslab, interval 1, probability 0, space 0, times 0 [ 576.980857][T20088] CPU: 0 UID: 0 PID: 20088 Comm: syz.1.3379 Not tainted syzkaller #0 PREEMPT(full) [ 576.980888][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 576.980912][T20088] Call Trace: [ 576.981009][T20088] [ 576.981074][T20088] dump_stack_lvl+0xe8/0x150 [ 576.981186][T20088] should_fail_ex+0x412/0x560 [ 576.981395][T20088] should_failslab+0xa8/0x100 [ 576.981472][T20088] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 576.981519][T20088] ? __alloc_skb+0x186/0x7d0 [ 576.981671][T20088] ? __alloc_skb+0x1d0/0x7d0 [ 576.981696][T20088] ? __local_bh_enable_ip+0xd0/0x130 [ 576.981762][T20088] __alloc_skb+0x1d0/0x7d0 [ 576.981797][T20088] pfkey_sendmsg+0x212/0x1120 [ 576.981917][T20088] ? unwind_next_frame+0xa6/0x2550 [ 576.981968][T20088] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 576.982008][T20088] ? aa_sk_perm+0x6d5/0x900 [ 576.982166][T20088] ? __pfx_aa_sk_perm+0x10/0x10 [ 576.982203][T20088] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 576.982320][T20088] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.982378][T20088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.982438][T20088] ____sys_sendmsg+0x972/0x9f0 [ 576.982508][T20088] ? __might_fault+0xaf/0x130 [ 576.982546][T20088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.982590][T20088] ? import_iovec+0x73/0xa0 [ 576.982660][T20088] ___sys_sendmsg+0x2a5/0x360 [ 576.982711][T20088] ? __lock_acquire+0x6b5/0x2cf0 [ 576.982761][T20088] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.982832][T20088] ? __fget_files+0x2a/0x420 [ 576.982878][T20088] ? __fget_files+0x3a0/0x420 [ 576.982918][T20088] __x64_sys_sendmsg+0x1bd/0x2a0 [ 576.982956][T20088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.983001][T20088] ? __pfx_ksys_write+0x10/0x10 [ 576.983043][T20088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.983093][T20088] do_syscall_64+0x15f/0xf80 [ 576.983221][T20088] ? trace_irq_disable+0x3b/0x140 [ 576.983264][T20088] ? clear_bhb_loop+0x40/0x90 [ 576.983291][T20088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.983318][T20088] RIP: 0033:0x7f2402b9c819 [ 576.983376][T20088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.983428][T20088] RSP: 002b:00007f2403af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.983453][T20088] RAX: ffffffffffffffda RBX: 00007f2402e15fa0 RCX: 00007f2402b9c819 [ 576.983470][T20088] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 576.983483][T20088] RBP: 00007f2403af1090 R08: 0000000000000000 R09: 0000000000000000 [ 576.983497][T20088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.983510][T20088] R13: 00007f2402e16038 R14: 00007f2402e15fa0 R15: 00007ffdfa954348 [ 576.983545][T20088] [ 577.380383][T15256] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.491734][T20095] bond10 (unregistering): Released all slaves [ 577.580090][T15256] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.589291][T15256] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.599677][T15256] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.681171][T20110] syz.2.3383 (20110) used obsolete PPPIOCDETACH ioctl [ 577.793373][T20117] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 578.199671][T20134] veth0_macvtap: entered allmulticast mode [ 578.225563][T20134] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 578.298463][T20136] dummy0: Caught tx_queue_len zero misconfig [ 578.531042][T20158] netem: change failed [ 578.967069][T20175] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 579.050409][T20175] vlan2: entered allmulticast mode [ 579.055704][T20175] mac80211_hwsim hwsim51 wlan3: entered allmulticast mode [ 579.093134][T20181] __nla_validate_parse: 6 callbacks suppressed [ 579.093157][T20181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3405'. [ 579.404030][T20186] bridge0: entered promiscuous mode [ 579.416075][T20186] macsec1: entered promiscuous mode [ 579.422968][T20186] vlan2: entered promiscuous mode [ 579.442148][T20186] vlan2: left promiscuous mode [ 579.447758][T20186] bridge0: left promiscuous mode [ 579.507612][T20196] lo speed is unknown, defaulting to 1000 [ 579.707369][T20217] openvswitch: netlink: IP tunnel dst address not specified [ 580.021969][T20243] block nbd0: Unsupported socket: should be TCP or UNIX. [ 580.040294][T20244] veth0_to_batadv: entered promiscuous mode [ 580.065403][T20244] veth0_to_batadv: entered allmulticast mode [ 580.246489][T20248] netlink: 'syz.3.3421': attribute type 11 has an invalid length. [ 580.342635][T20255] syz_tun: entered allmulticast mode [ 580.372965][T20255] C: renamed from team_slave_0 (while UP) [ 580.395164][T20255] netlink: 'syz.6.3423': attribute type 8 has an invalid length. [ 580.413053][T20255] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 580.704337][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'. [ 580.962200][T20278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.043119][T20289] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3426'. [ 581.124370][T20280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.135489][T20280] bond3: (slave bond4): Enslaving as an active interface with an up link [ 582.469214][T20370] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3450'. [ 582.728834][T20378] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3452'. [ 582.740933][T20378] syzkaller0: entered promiscuous mode [ 582.746611][T20378] syzkaller0: entered allmulticast mode [ 582.867878][T20380] lo speed is unknown, defaulting to 1000 [ 583.082387][T20393] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3457'. [ 583.250797][T20398] veth0_macvtap: left allmulticast mode [ 583.259399][T20398] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 583.267367][T20401] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3460'. [ 583.275020][T20398] gretap1: left promiscuous mode [ 583.281865][T20398] gretap1: left allmulticast mode [ 583.297315][T20398] ip6gre1: left promiscuous mode [ 583.304890][T11923] lo speed is unknown, defaulting to 1000 [ 583.320098][T11923] syz2: Port: 1 Link DOWN [ 583.334715][T11923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.352471][T20401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3460'. [ 583.377073][T20395] lo speed is unknown, defaulting to 1000 [ 583.490346][T20404] FAULT_INJECTION: forcing a failure. [ 583.490346][T20404] name failslab, interval 1, probability 0, space 0, times 0 [ 583.519038][T20404] CPU: 0 UID: 0 PID: 20404 Comm: syz.6.3461 Not tainted syzkaller #0 PREEMPT(full) [ 583.519070][T20404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 583.519094][T20404] Call Trace: [ 583.519102][T20404] [ 583.519113][T20404] dump_stack_lvl+0xe8/0x150 [ 583.519151][T20404] should_fail_ex+0x412/0x560 [ 583.519189][T20404] should_failslab+0xa8/0x100 [ 583.519213][T20404] ? skb_clone+0x212/0x3a0 [ 583.519234][T20404] kmem_cache_alloc_noprof+0x87/0x650 [ 583.519276][T20404] skb_clone+0x212/0x3a0 [ 583.519302][T20404] pfkey_sendmsg+0x4a3/0x1120 [ 583.519336][T20404] ? unwind_next_frame+0xa6/0x2550 [ 583.519374][T20404] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 583.519438][T20404] ? aa_sock_msg_perm+0xf1/0x1b0 [ 583.519471][T20404] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 583.519511][T20404] ____sys_sendmsg+0x972/0x9f0 [ 583.519545][T20404] ? __might_fault+0xaf/0x130 [ 583.519598][T20404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.519643][T20404] ? import_iovec+0x73/0xa0 [ 583.519669][T20404] ___sys_sendmsg+0x2a5/0x360 [ 583.519701][T20404] ? __lock_acquire+0x6b5/0x2cf0 [ 583.519734][T20404] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.519806][T20404] ? __fget_files+0x2a/0x420 [ 583.519832][T20404] ? __fget_files+0x3a0/0x420 [ 583.519870][T20404] __x64_sys_sendmsg+0x1bd/0x2a0 [ 583.519907][T20404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.519952][T20404] ? __pfx_ksys_write+0x10/0x10 [ 583.519994][T20404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.520018][T20404] do_syscall_64+0x15f/0xf80 [ 583.520043][T20404] ? trace_irq_disable+0x3b/0x140 [ 583.520066][T20404] ? clear_bhb_loop+0x40/0x90 [ 583.520101][T20404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.520122][T20404] RIP: 0033:0x7fd5bd19c819 [ 583.520144][T20404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.520162][T20404] RSP: 002b:00007fd5be02f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.520186][T20404] RAX: ffffffffffffffda RBX: 00007fd5bd415fa0 RCX: 00007fd5bd19c819 [ 583.520201][T20404] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 583.520215][T20404] RBP: 00007fd5be02f090 R08: 0000000000000000 R09: 0000000000000000 [ 583.520228][T20404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.520241][T20404] R13: 00007fd5bd416038 R14: 00007fd5bd415fa0 R15: 00007ffd840d0578 [ 583.520276][T20404] [ 583.962061][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.174393][T20416] lo speed is unknown, defaulting to 1000 [ 584.253799][T20426] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 584.276646][T20426] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3467'. [ 584.289847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.321954][T20426] netlink: 'syz.1.3467': attribute type 2 has an invalid length. [ 584.374045][T20426] !: entered promiscuous mode [ 584.448205][T20433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3469'. [ 584.764877][T20448] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3472'. [ 584.874108][T20452] ÿÿÿÿÿÿ: renamed from lo [ 585.004775][T20459] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20001 [ 585.014464][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.803064][T20502] syzkaller0: entered promiscuous mode [ 586.019001][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3498'. [ 586.028668][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3498'. [ 586.038590][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.280541][T20523] syzkaller1: entered promiscuous mode [ 586.292374][T20523] syzkaller1: entered allmulticast mode [ 586.382599][T20526] ip6tnl1: entered allmulticast mode [ 586.522019][T20534] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 586.634076][T20539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.645046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.657059][T20539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.665636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.674553][T20539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.464236][T20563] syzkaller0: entered promiscuous mode [ 587.479062][T20563] syzkaller0: entered allmulticast mode [ 587.565473][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'. [ 587.875957][T20583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3532'. [ 587.885646][T20583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3532'. [ 587.969671][T20586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3533'. [ 587.988206][T20586] netlink: 'syz.6.3533': attribute type 7 has an invalid length. [ 588.006958][T20586] netlink: 'syz.6.3533': attribute type 8 has an invalid length. [ 588.026921][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3533'. [ 588.305271][ T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.330948][ T5882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.339283][ T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.568582][ T5882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.998768][T20626] bridge0: port 3(syz_tun) entered blocking state [ 589.018342][T20626] bridge0: port 3(syz_tun) entered disabled state [ 589.032880][T20626] syz_tun: entered allmulticast mode [ 589.049298][T20626] syz_tun: entered promiscuous mode [ 589.055254][T20626] bridge0: port 3(syz_tun) entered blocking state [ 589.061905][T20626] bridge0: port 3(syz_tun) entered forwarding state [ 589.113465][T20631] sock: sock_timestamping_bind_phc: sock not bind to device [ 589.158287][ T5882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 589.190742][ T5961] net_ratelimit: 2054 callbacks suppressed [ 589.190762][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.881061][T20670] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 3, id = 0 [ 590.022706][T20680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.035445][T20680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.069318][T20680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.069705][T20683] __nla_validate_parse: 2 callbacks suppressed [ 590.069766][T20683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3579'. [ 590.094472][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.103904][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.129608][T20680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.145831][T20680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.198557][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.932302][T20709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3590'. [ 590.956995][T20709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 591.693726][T20738] netlink: 'syz.6.3601': attribute type 1 has an invalid length. [ 591.762104][T20738] bond1: entered promiscuous mode [ 591.770201][T20738] bond1: entered allmulticast mode [ 591.779057][T20738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 591.810447][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3601'. [ 591.853135][T20741] erspan1: entered allmulticast mode [ 591.864419][T20741] bond1: (slave erspan1): making interface the new active one [ 591.874353][T20741] erspan1: entered promiscuous mode [ 591.891722][T20741] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 592.095369][T20751] netlink: 'syz.1.3605': attribute type 10 has an invalid length. [ 592.104586][T20751] bond0: (slave wlan1): Opening slave failed [ 592.198184][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 592.502502][T20772] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3613'. [ 592.651161][T20782] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 592.661990][T20780] IPVS: stopping master sync thread 20782 ... [ 594.143866][T20832] netlink: 'syz.2.3637': attribute type 10 has an invalid length. [ 594.358431][ T5904] net_ratelimit: 27 callbacks suppressed [ 594.358453][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.502106][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.521942][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.532956][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.541649][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.550176][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.636695][T20847] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 594.851018][T20847] chnl_net:caif_netlink_parms(): no params data found [ 594.984045][T20847] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.993187][T20847] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.001371][T20847] bridge_slave_0: entered allmulticast mode [ 595.010537][T20847] bridge_slave_0: entered promiscuous mode [ 595.022298][T20847] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.030869][T20847] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.038836][T20847] bridge_slave_1: entered allmulticast mode [ 595.048754][T20847] bridge_slave_1: entered promiscuous mode [ 595.102134][T20847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.116713][T20847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.161388][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.179395][T20847] team0: Port device team_slave_0 added [ 595.190528][T20847] team0: Port device team_slave_1 added [ 595.244749][T20847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.258837][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.290097][T20847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.312563][T20847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.323348][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.353544][T20847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.408595][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.517705][T20847] hsr_slave_0: entered promiscuous mode [ 595.531685][T20847] hsr_slave_1: entered promiscuous mode [ 595.538835][T20847] debugfs: 'hsr0' already exists in 'hsr' [ 595.544741][T20847] Cannot create hsr debugfs directory [ 595.936969][T20888] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3660'. [ 596.283236][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.443074][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.571776][T20847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 596.598891][ T5833] Bluetooth: hci2: command tx timeout [ 596.616932][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.629207][T20847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 596.646097][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.662431][T20847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 596.681079][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.689771][T20847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 596.712350][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.016678][T20847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.077409][T20847] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.084568][T11925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.114224][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.121550][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.141528][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.148777][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.158447][T20931] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 597.178727][T20931] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 597.435001][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.478519][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.559096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.704940][T20935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 597.796899][T20940] vlan3: entered promiscuous mode [ 597.829646][T20940] bond1: entered promiscuous mode [ 597.848340][T20940] vlan3: entered allmulticast mode [ 597.861442][T20940] bond1: entered allmulticast mode [ 597.945688][T20935] gretap1: entered promiscuous mode [ 597.951794][T20935] gretap1: entered allmulticast mode [ 597.959824][T20935] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 598.120632][T20847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.494610][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.688250][ T5833] Bluetooth: hci2: command tx timeout [ 598.845922][T20847] veth0_vlan: entered promiscuous mode [ 598.869183][T20847] veth1_vlan: entered promiscuous mode [ 598.930612][T20847] veth0_macvtap: entered promiscuous mode [ 598.963435][T20847] veth1_macvtap: entered promiscuous mode [ 599.025361][T20847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.049374][T20847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.081447][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.108318][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.141102][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.164306][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.532680][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.559949][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.574532][ T5904] net_ratelimit: 7 callbacks suppressed [ 599.574552][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.638264][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 599.657642][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.684040][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.703075][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.069392][T20989] netlink: 'syz.6.3694': attribute type 4 has an invalid length. [ 600.088302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.126158][T20990] netlink: 'syz.6.3694': attribute type 4 has an invalid length. [ 600.239882][T20993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3696'. [ 600.258272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.289548][T20995] netlink: 'syz.2.3697': attribute type 1 has an invalid length. [ 600.388318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.535139][T21003] netlink: 'syz.6.3698': attribute type 4 has an invalid length. [ 600.574144][T21002] syzkaller0: entered promiscuous mode [ 600.597895][T21002] syzkaller0: entered allmulticast mode [ 600.605700][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.758414][ T5833] Bluetooth: hci2: command tx timeout [ 600.854696][T21008] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 600.873114][T21008] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 601.102534][T21020] netlink: 'syz.6.3707': attribute type 29 has an invalid length. [ 601.180687][T21026] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 601.279295][T21028] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 601.638467][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.716873][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3715'. [ 601.770175][T21046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3716'. [ 601.859508][T21048] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3717'. [ 601.999985][T21053] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3719'. [ 602.143727][T21056] syz_tun: left allmulticast mode [ 602.165199][T21056] syz_tun: left promiscuous mode [ 602.192823][T21056] bridge0: port 3(syz_tun) entered disabled state [ 602.310409][T21056] bridge_slave_0: left allmulticast mode [ 602.331003][T21056] bridge_slave_0: left promiscuous mode [ 602.349453][T21056] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.393578][T21056] bridge_slave_1: left allmulticast mode [ 602.411424][T21056] bridge_slave_1: left promiscuous mode [ 602.425841][T21056] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.471757][T21069] Cannot find add_set index 2 as target [ 602.482667][T21056] bond0: (slave bond_slave_0): Releasing backup interface [ 602.513517][T21056] bond0: (slave bond_slave_1): Releasing backup interface [ 602.537462][T21056] team0: Port device team_slave_0 removed [ 602.562896][T21056] team0: Port device team_slave_1 removed [ 602.596280][T21056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.634736][T21056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.688622][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.727911][T21056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 602.840344][ T5833] Bluetooth: hci2: command tx timeout [ 603.201619][T21110] bond0: entered promiscuous mode [ 603.219817][T21110] bond_slave_0: entered promiscuous mode [ 603.232669][T21110] bond_slave_1: entered promiscuous mode [ 603.267201][T21110] batadv0: entered promiscuous mode [ 603.291296][T21110] debugfs: 'hsr1' already exists in 'hsr' [ 603.310785][T21110] Cannot create hsr debugfs directory [ 603.320105][T21110] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 603.720972][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.024098][T21141] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 604.092778][T21144] netlink: 'syz.3.3741': attribute type 1 has an invalid length. [ 604.173185][T21144] syzkaller0: entered promiscuous mode [ 604.179524][T21144] syzkaller0: entered allmulticast mode [ 604.340369][T21151] netlink: 'syz.6.3744': attribute type 1 has an invalid length. [ 604.716673][T21164] veth0_macvtap: entered allmulticast mode [ 604.742124][T21164] net_ratelimit: 3 callbacks suppressed [ 604.742143][T21164] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 604.772403][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.904548][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'. [ 604.920024][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'. [ 605.022191][T21188] xt_recent: Unsupported userspace flags (000000b1) [ 605.161487][T21196] netlink: 'syz.3.3757': attribute type 1 has an invalid length. [ 605.395051][T21202] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 605.523736][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3765'. [ 605.799511][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.897601][T21217] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 606.122969][T21242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3772'. [ 606.654344][T21266] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 606.680772][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.844145][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.095535][T21279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3782'. [ 607.399192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.410081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.418876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.427458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.554925][T21295] netlink: 'syz.1.3787': attribute type 39 has an invalid length. [ 607.672282][T21301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.023129][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.034047][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.044574][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.054427][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.065467][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.076941][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.087106][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.100467][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.110346][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 608.458624][T21325] bond2: option fail_over_mac: invalid value (127) [ 608.482064][T21325] bond2 (unregistering): Released all slaves [ 608.500544][T21334] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 609.593045][T21389] bond5: entered promiscuous mode [ 609.600289][T21389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.647826][T21387] Bluetooth: MGMT ver 1.23 [ 609.959503][ T5189] net_ratelimit: 8 callbacks suppressed [ 609.959526][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.343753][ T5189] IPVS: starting estimator thread 0... [ 610.399602][T21420] : entered promiscuous mode [ 610.448082][T21418] IPVS: using max 35 ests per chain, 84000 per kthread [ 610.520472][T11925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.838265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.846981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.855742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.998391][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.057145][T21446] dummy0: entered promiscuous mode [ 611.063447][T21446] netlink: 'syz.1.3839': attribute type 4 has an invalid length. [ 611.075322][T21444] dummy0: left promiscuous mode [ 611.318106][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 611.522580][T21463] netlink: 'syz.1.3845': attribute type 1 has an invalid length. [ 611.754523][T21468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 611.772436][T21443] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 611.788668][T21468] bond2: (slave bond3): making interface the new active one [ 611.819973][T21468] bond2: (slave bond3): Enslaving as an active interface with an up link [ 611.863432][T21477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.920795][T21483] team0: No ports can be present during mode change [ 612.041485][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.424467][T21503] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 612.544541][T21510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.608541][T21507] tipc: Started in network mode [ 612.647828][T21507] tipc: Node identity , cluster identity 4711 [ 612.661870][T21507] tipc: Failed to obtain node identity [ 612.679981][T21507] tipc: Enabling of bearer rejected, failed to enable media [ 612.762467][T21514] __nla_validate_parse: 87 callbacks suppressed [ 612.762488][T21514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3858'. [ 613.044143][T21517] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 613.081043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.118188][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.607338][T21527] netlink: 'syz.6.3862': attribute type 29 has an invalid length. [ 613.664976][T21531] netlink: 'syz.7.3864': attribute type 39 has an invalid length. [ 613.982808][T21550] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 613.982808][T21550] Please contact the netfilter-devel mailing list or update your nftables rules. [ 614.358207][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.472480][T21570] xt_bpf: check failed: parse error [ 614.750001][ T5904] IPVS: starting estimator thread 0... [ 614.878939][T21581] IPVS: using max 27 ests per chain, 64800 per kthread [ 615.055171][T21591] netlink: 'syz.3.3885': attribute type 21 has an invalid length. [ 615.074002][T21591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3885'. [ 615.233524][T21600] netlink: 'syz.1.3888': attribute type 1 has an invalid length. [ 615.243557][ T5904] net_ratelimit: 4 callbacks suppressed [ 615.243579][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.316202][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 615.365382][T21601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.499684][T21606] sctp: [Deprecated]: syz.7.3889 (pid 21606) Use of int in max_burst socket option deprecated. [ 615.499684][T21606] Use struct sctp_assoc_value instead [ 615.632590][T21608] tipc: Failed to remove unknown binding: 66,0,0/0:2356512174/2356512175 [ 615.652596][T21608] tipc: Failed to remove unknown binding: 66,0,0/0:2356512174/2356512175 [ 616.161393][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 616.290995][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.312049][T21624] syzkaller1: entered promiscuous mode [ 616.317996][T21624] syzkaller1: entered allmulticast mode [ 616.570211][T21639] netlink: 'syz.7.3900': attribute type 29 has an invalid length. [ 616.769536][T21648] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3903'. [ 617.001162][T21656] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3905'. [ 617.025530][T21656] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3905'. [ 617.318404][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.416887][T21668] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3908'. [ 617.560419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.569065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.577645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.800241][T21681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3911'. [ 618.043242][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 618.190334][T21692] "syz.1.3915" (21692) uses obsolete ecb(arc4) skcipher [ 618.358285][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.467409][T21700] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 618.549082][T21706] IPVS: sh: FWM 3 0x00000003 - no destination available [ 619.094509][T21728] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 619.187055][T21733] macsec1: entered promiscuous mode [ 619.196314][T21735] Bluetooth: MGMT ver 1.23 [ 619.201947][T21733] macsec1: entered allmulticast mode [ 619.394318][T21745] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3929'. [ 619.403958][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.494928][T21750] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3927'. [ 619.695426][T21753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3931'. [ 620.019437][T21772] vcan0: tx address claim with dest, not broadcast [ 620.034544][T21773] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 620.043885][T21773] netlink: 'syz.1.3935': attribute type 2 has an invalid length. [ 620.059229][T21773] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 620.067229][T21773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.226701][T21782] x_tables: duplicate underflow at hook 2 [ 620.441989][ T5189] net_ratelimit: 1 callbacks suppressed [ 620.442010][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.690100][T21794] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.697844][T21794] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.857783][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.918246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.927006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.935595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.429919][T21794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.458561][T21794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.555025][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.039947][ T5833] Bluetooth: hci2: command 0x0401 tx timeout [ 622.046267][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 622.315923][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.330970][ T1110] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.346730][ T1110] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.365115][ T1110] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.374841][ T5905] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 622.406932][ T1110] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.599076][ T5905] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 622.618513][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.890210][T21833] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 623.151406][T21859] netlink: 'syz.7.3958': attribute type 13 has an invalid length. [ 623.177685][T21860] netlink: 'syz.7.3958': attribute type 13 has an invalid length. [ 623.206859][T21860] netlink: 'syz.7.3958': attribute type 13 has an invalid length. [ 623.206904][ T162] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.248942][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.308459][ T162] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.342142][ T162] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.351545][ T162] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.506225][T21868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3959'. [ 623.539342][T21868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3959'. [ 623.618553][T21875] netlink: 'syz.7.3961': attribute type 1 has an invalid length. [ 623.637131][T21875] netlink: 276 bytes leftover after parsing attributes in process `syz.7.3961'. [ 623.667915][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.087079][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3965'. [ 624.102328][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3965'. [ 624.947254][T21938] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3983'. [ 625.008694][T21944] netlink: 'syz.1.3984': attribute type 11 has an invalid length. [ 625.064380][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 625.087822][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 625.102551][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 625.113024][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 625.124054][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 625.206015][T21947] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 625.478219][ C1] net_ratelimit: 1 callbacks suppressed [ 625.478239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.492517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.501077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.509585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.518077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.526516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.611893][T21969] netlink: 'syz.3.3989': attribute type 12 has an invalid length. [ 625.722010][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.793355][T21947] chnl_net:caif_netlink_parms(): no params data found [ 625.983895][T21947] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.991394][T21947] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.999439][T21947] bridge_slave_0: entered allmulticast mode [ 626.007745][T21947] bridge_slave_0: entered promiscuous mode [ 626.017623][T21947] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.025585][T21947] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.033498][T21947] bridge_slave_1: entered allmulticast mode [ 626.042216][T21947] bridge_slave_1: entered promiscuous mode [ 626.115958][T21947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.130042][T21947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.176312][T21947] team0: Port device team_slave_0 added [ 626.194672][T21947] team0: Port device team_slave_1 added [ 626.331317][T21947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.351607][T21947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.395712][T21965] netlink: 'syz.7.3988': attribute type 4 has an invalid length. [ 626.406314][T21947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.420098][T21947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.427145][T21947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.473229][T21971] netlink: 'syz.7.3988': attribute type 4 has an invalid length. [ 626.483863][T21947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.669767][T21993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3992'. [ 626.701773][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3994'. [ 626.721584][T21947] hsr_slave_0: entered promiscuous mode [ 626.730127][T21947] hsr_slave_1: entered promiscuous mode [ 626.736869][T21947] debugfs: 'hsr0' already exists in 'hsr' [ 626.743461][T21947] Cannot create hsr debugfs directory [ 626.759204][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.959400][T22002] atomic_op ffff8880364d4198 conn xmit_atomic 0000000000000000 [ 626.985788][T22003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3997'. [ 626.995065][T22003] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3997'. [ 627.238753][ T5833] Bluetooth: hci8: command tx timeout [ 627.349404][T22020] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 627.809948][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.995316][T21947] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 628.035379][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.057834][T21947] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 628.173866][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.214871][T21947] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 628.257396][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.304173][T21947] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 628.351144][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.647140][T22065] __nla_validate_parse: 2 callbacks suppressed [ 628.647161][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4012'. [ 628.814093][T22068] IPVS: Error connecting to the multicast addr [ 628.880675][T21947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.962022][T22079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4015'. [ 629.007114][T21947] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.058482][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.065747][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.206784][T22082] bond2: option lacp_active: invalid value (8) [ 629.233865][T22082] bond2 (unregistering): Released all slaves [ 629.282956][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.290230][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.349953][ T5833] Bluetooth: hci8: command tx timeout [ 629.435674][T21947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.934645][T21947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.965968][T22127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4027'. [ 629.997488][T22127] netlink: 'syz.1.4027': attribute type 7 has an invalid length. [ 630.018678][T22127] netlink: 'syz.1.4027': attribute type 8 has an invalid length. [ 630.043500][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4027'. [ 630.105307][T22135] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4029'. [ 630.133060][T22130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4028'. [ 630.146653][T22127] team0: entered promiscuous mode [ 630.167396][T22127] team_slave_0: entered promiscuous mode [ 630.194272][T22127] team_slave_1: entered promiscuous mode [ 630.229003][T22127] bond0: entered promiscuous mode [ 630.250985][T22127] bond_slave_0: entered promiscuous mode [ 630.282595][T22127] bond_slave_1: entered promiscuous mode [ 630.315373][T22127] team0: left promiscuous mode [ 630.335966][T22127] team_slave_0: left promiscuous mode [ 630.349861][T22127] team_slave_1: left promiscuous mode [ 630.356438][T22142] netlink: 'syz.6.4030': attribute type 8 has an invalid length. [ 630.385813][T22127] bond0: left promiscuous mode [ 630.391807][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4030'. [ 630.406249][T22127] bond_slave_0: left promiscuous mode [ 630.420122][T22127] bond_slave_1: left promiscuous mode [ 630.491118][ T162] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.501304][T22142] netlink: 'syz.6.4030': attribute type 8 has an invalid length. [ 630.529863][ T162] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.544851][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4030'. [ 630.567328][ T162] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.580405][T22150] netlink: 'syz.3.4032': attribute type 1 has an invalid length. [ 630.605039][ T162] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.687475][T22150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 630.714888][T22152] bond4: up delay (812) is not a multiple of miimon (100), value rounded to 800 ms [ 630.768344][T22152] bond4: entered allmulticast mode [ 630.826260][T22150] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 630.923960][T13284] net_ratelimit: 6 callbacks suppressed [ 630.923980][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.076510][T22172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4036'. [ 631.284984][T21947] veth0_vlan: entered promiscuous mode [ 631.323344][T21947] veth1_vlan: entered promiscuous mode [ 631.381145][T22184] "syz.7.4041" (22184) uses obsolete ecb(arc4) skcipher [ 631.398181][ T50] Bluetooth: hci8: command tx timeout [ 631.410720][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4041'. [ 631.486314][T21947] veth0_macvtap: entered promiscuous mode [ 631.513438][T21947] veth1_macvtap: entered promiscuous mode [ 631.542686][T21947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.570091][T21947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.603296][T15264] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.633823][T15264] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.657410][T15264] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.680191][T15264] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.811773][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 631.959196][T11927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.023232][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.045742][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.082543][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.094092][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.198308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.206827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.215394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.266515][T22203] netlink: 'syz.8.3981': attribute type 10 has an invalid length. [ 632.280448][T22203] team0: Device ipvlan1 failed to register rx_handler [ 632.762917][T22220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 632.823386][T22212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input7 [ 633.012193][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.042355][T22228] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 633.479007][ T5833] Bluetooth: hci8: command tx timeout [ 633.746210][T22264] veth3: entered promiscuous mode [ 633.755325][T22268] FAULT_INJECTION: forcing a failure. [ 633.755325][T22268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.761737][T22263] xt_hashlimit: max too large, truncated to 1048576 [ 633.771767][T22268] CPU: 0 UID: 0 PID: 22268 Comm: syz.7.4063 Not tainted syzkaller #0 PREEMPT(full) [ 633.771857][T22268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 633.771904][T22268] Call Trace: [ 633.771940][T22268] [ 633.771977][T22268] dump_stack_lvl+0xe8/0x150 [ 633.772091][T22268] should_fail_ex+0x412/0x560 [ 633.772197][T22268] _copy_from_user+0x2d/0xb0 [ 633.772355][T22268] __copy_msghdr+0x3c5/0x5b0 [ 633.772455][T22268] ___sys_sendmsg+0x213/0x360 [ 633.772532][T22268] ? __lock_acquire+0x6b5/0x2cf0 [ 633.772618][T22268] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.772798][T22268] ? __fget_files+0x2a/0x420 [ 633.772871][T22268] ? __fget_files+0x3a0/0x420 [ 633.772983][T22268] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.773079][T22268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.773192][T22268] ? __pfx_ksys_write+0x10/0x10 [ 633.773318][T22268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.773395][T22268] do_syscall_64+0x15f/0xf80 [ 633.773456][T22268] ? trace_irq_disable+0x3b/0x140 [ 633.773520][T22268] ? clear_bhb_loop+0x40/0x90 [ 633.773592][T22268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.773646][T22268] RIP: 0033:0x7fc38999c819 [ 633.773699][T22268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.773750][T22268] RSP: 002b:00007fc38a81e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.773816][T22268] RAX: ffffffffffffffda RBX: 00007fc389c15fa0 RCX: 00007fc38999c819 [ 633.773858][T22268] RDX: 00000000000440e0 RSI: 0000200000000100 RDI: 0000000000000003 [ 633.773898][T22268] RBP: 00007fc38a81e090 R08: 0000000000000000 R09: 0000000000000000 [ 633.773932][T22268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.773982][T22268] R13: 00007fc389c16038 R14: 00007fc389c15fa0 R15: 00007fff615a6f48 [ 633.774070][T22268] [ 633.998962][T22263] xt_ecn: cannot match TCP bits for non-tcp packets [ 634.039564][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.527300][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880935eac00: rx timeout, send abort [ 634.633053][T22296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.643806][T22296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.653016][T22296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.027440][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880935eb400: rx timeout, send abort [ 635.040031][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880935eac00: abort rx timeout. Force session deactivation [ 635.074701][T22306] FAULT_INJECTION: forcing a failure. [ 635.074701][T22306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.123332][T22306] CPU: 1 UID: 0 PID: 22306 Comm: syz.3.4074 Not tainted syzkaller #0 PREEMPT(full) [ 635.123363][T22306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 635.123377][T22306] Call Trace: [ 635.123385][T22306] [ 635.123395][T22306] dump_stack_lvl+0xe8/0x150 [ 635.123442][T22306] should_fail_ex+0x412/0x560 [ 635.123480][T22306] _copy_from_user+0x2d/0xb0 [ 635.123504][T22306] ____sys_sendmsg+0x308/0x9f0 [ 635.123549][T22306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.123591][T22306] ? import_iovec+0x73/0xa0 [ 635.123617][T22306] ___sys_sendmsg+0x2a5/0x360 [ 635.123648][T22306] ? __lock_acquire+0x6b5/0x2cf0 [ 635.123688][T22306] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.123758][T22306] ? __fget_files+0x2a/0x420 [ 635.123786][T22306] ? __fget_files+0x3a0/0x420 [ 635.123824][T22306] __x64_sys_sendmsg+0x1bd/0x2a0 [ 635.123861][T22306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.123904][T22306] ? __pfx_ksys_write+0x10/0x10 [ 635.123944][T22306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.123968][T22306] do_syscall_64+0x15f/0xf80 [ 635.123993][T22306] ? trace_irq_disable+0x3b/0x140 [ 635.124033][T22306] ? clear_bhb_loop+0x40/0x90 [ 635.124061][T22306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.124082][T22306] RIP: 0033:0x7fbdbd19c819 [ 635.124103][T22306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.124121][T22306] RSP: 002b:00007fbdbe087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.124145][T22306] RAX: ffffffffffffffda RBX: 00007fbdbd415fa0 RCX: 00007fbdbd19c819 [ 635.124161][T22306] RDX: 00000000000440e0 RSI: 0000200000000100 RDI: 0000000000000003 [ 635.124176][T22306] RBP: 00007fbdbe087090 R08: 0000000000000000 R09: 0000000000000000 [ 635.124189][T22306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.124202][T22306] R13: 00007fbdbd416038 R14: 00007fbdbd415fa0 R15: 00007ffcb8f72838 [ 635.124235][T22306] [ 635.424202][T22314] netlink: 'syz.3.4079': attribute type 3 has an invalid length. [ 635.434423][T22314] __nla_validate_parse: 6 callbacks suppressed [ 635.434441][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 635.536036][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880935eb400: abort rx timeout. Force session deactivation [ 635.661108][T22319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4078'. [ 635.683191][T22325] tipc: Enabling of bearer rejected, failed to enable media [ 635.809297][T22332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4087'. [ 636.119915][T13284] net_ratelimit: 6 callbacks suppressed [ 636.119936][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.149393][T22349] FAULT_INJECTION: forcing a failure. [ 636.149393][T22349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.206738][T22349] CPU: 1 UID: 0 PID: 22349 Comm: syz.1.4090 Not tainted syzkaller #0 PREEMPT(full) [ 636.206771][T22349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 636.206785][T22349] Call Trace: [ 636.206795][T22349] [ 636.206804][T22349] dump_stack_lvl+0xe8/0x150 [ 636.206844][T22349] should_fail_ex+0x412/0x560 [ 636.206881][T22349] _copy_to_user+0x31/0xb0 [ 636.206907][T22349] simple_read_from_buffer+0xe1/0x170 [ 636.206943][T22349] proc_fail_nth_read+0x1bb/0x230 [ 636.207022][T22349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.207056][T22349] ? rw_verify_area+0x2a6/0x4d0 [ 636.207094][T22349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.207126][T22349] vfs_read+0x20c/0xa70 [ 636.207163][T22349] ? __pfx___mutex_lock+0x10/0x10 [ 636.207257][T22349] ? __pfx_vfs_read+0x10/0x10 [ 636.207298][T22349] ? __fget_files+0x2a/0x420 [ 636.207330][T22349] ? __fget_files+0x3a0/0x420 [ 636.207357][T22349] ? __fget_files+0x2a/0x420 [ 636.207395][T22349] ksys_read+0x150/0x270 [ 636.207429][T22349] ? __pfx_ksys_read+0x10/0x10 [ 636.207470][T22349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.207495][T22349] do_syscall_64+0x15f/0xf80 [ 636.207521][T22349] ? trace_irq_disable+0x3b/0x140 [ 636.207548][T22349] ? clear_bhb_loop+0x40/0x90 [ 636.207575][T22349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.207597][T22349] RIP: 0033:0x7f2402b5d04e [ 636.207618][T22349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 636.207636][T22349] RSP: 002b:00007f2403af0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.207661][T22349] RAX: ffffffffffffffda RBX: 00007f2403af16c0 RCX: 00007f2402b5d04e [ 636.207676][T22349] RDX: 000000000000000f RSI: 00007f2403af10a0 RDI: 0000000000000004 [ 636.207690][T22349] RBP: 00007f2403af1090 R08: 0000000000000000 R09: 0000000000000000 [ 636.207704][T22349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.207717][T22349] R13: 00007f2402e16038 R14: 00007f2402e15fa0 R15: 00007ffdfa954348 [ 636.207753][T22349] [ 636.469671][T22357] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4092'. [ 636.538508][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4093'. [ 636.771931][T22373] sctp: [Deprecated]: syz.6.4096 (pid 22373) Use of int in maxseg socket option. [ 636.771931][T22373] Use struct sctp_assoc_value instead [ 637.005967][T22384] netlink: 'syz.6.4101': attribute type 1 has an invalid length. [ 637.070018][T22383] sctp: [Deprecated]: syz.1.4100 (pid 22383) Use of int in maxseg socket option. [ 637.070018][T22383] Use struct sctp_assoc_value instead [ 637.157145][T22391] netlink: 'syz.1.4103': attribute type 1 has an invalid length. [ 637.170463][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.212941][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4102'. [ 637.227891][T22391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 637.340395][T22395] bond4: (slave gretap2): making interface the new active one [ 637.403509][T22395] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 637.475340][T22399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4104'. [ 637.521860][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4106'. [ 637.582316][T22401] delete_channel: no stack [ 637.714019][T22414] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4109'. [ 637.736205][T22416] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002 [ 637.749660][T22402] bond3 (unregistering): Released all slaves [ 637.777749][T22407] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4108'. [ 637.848414][T22404] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 637.881916][T22411] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 637.960051][T22419] IPVS: set_ctl: invalid protocol: 136 172.20.20.31:20000 [ 638.116493][T22420] bridge3: port 1(vlan0) entered blocking state [ 638.123444][T22420] bridge3: port 1(vlan0) entered disabled state [ 638.131008][T22420] vlan0: entered allmulticast mode [ 638.136536][T22420] bridge3: entered allmulticast mode [ 638.146005][T22420] vlan0: left allmulticast mode [ 638.151787][T22420] bridge3: left allmulticast mode [ 638.199062][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.379016][T22427] IPv6: sit1: Disabled Multicast RS [ 638.751900][T22443] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 638.964731][T22457] ip6erspan0: entered allmulticast mode [ 638.981795][ T162] nci: nci_rsp_packet: unknown rsp opcode 0x629 [ 638.998290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.006922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.015525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.240373][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.264756][T22466] xt_hashlimit: size too large, truncated to 1048576 [ 639.989886][T13288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.061906][T22495] gre0 speed is unknown, defaulting to 1000 [ 640.101566][T22495] gre0 speed is unknown, defaulting to 1000 [ 640.111156][T22495] gre0 speed is unknown, defaulting to 1000 [ 640.289225][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.375294][T13284] gre0 speed is unknown, defaulting to 1000 [ 640.378424][T22495] infiniband syz1: set active [ 640.387385][T22495] infiniband syz1: added gre0 [ 640.395414][T22495] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 640.398314][T22495] infiniband syz1: Couldn't open port 1 [ 640.436227][T22495] RDS/IB: syz1: added [ 640.442521][T22495] smc: adding ib device syz1 with port count 1 [ 640.451134][T22495] smc: ib device syz1 port 1 has no pnetid [ 640.460548][ T5882] gre0 speed is unknown, defaulting to 1000 [ 640.471525][T22495] gre0 speed is unknown, defaulting to 1000 [ 640.637747][T22495] gre0 speed is unknown, defaulting to 1000 [ 640.797298][T22495] gre0 speed is unknown, defaulting to 1000 [ 640.958570][T22495] gre0 speed is unknown, defaulting to 1000 [ 641.119163][T22495] gre0 speed is unknown, defaulting to 1000 [ 641.281502][T22495] gre0 speed is unknown, defaulting to 1000 [ 641.320540][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.445874][T22495] gre0 speed is unknown, defaulting to 1000 [ 641.604529][T22495] gre0 speed is unknown, defaulting to 1000 [ 641.764576][T22495] gre0 speed is unknown, defaulting to 1000 [ 641.832927][T22451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.369826][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.598200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.604907][T22532] bond_slave_0: entered promiscuous mode [ 642.609626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.614683][T22532] bond_slave_1: entered promiscuous mode [ 642.623683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.737153][T22532] vlan0: entered promiscuous mode [ 642.756581][T22532] bond0: entered promiscuous mode [ 642.773703][T22543] __nla_validate_parse: 9 callbacks suppressed [ 642.773725][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4141'. [ 642.878559][T22540] syzkaller1: entered promiscuous mode [ 642.900402][T22540] syzkaller1: entered allmulticast mode [ 643.183570][T22562] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4148'. [ 643.217633][T22562] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.225408][T22562] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.401671][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.475418][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4152'. [ 643.498192][T22577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4152'. [ 643.515841][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4152'. [ 643.538370][T22577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4152'. [ 643.794997][T22583] xt_hashlimit: size too large, truncated to 1048576 [ 643.802392][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 643.829759][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4156'. [ 643.894614][T22598] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4156'. [ 643.921263][T22595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4155'. [ 643.944988][T22588] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 643.957143][T22589] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 644.121518][T22595] bond5: entered promiscuous mode [ 644.134784][T22595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.171454][T22588] gre0 speed is unknown, defaulting to 1000 [ 644.235761][T11927] gre0 speed is unknown, defaulting to 1000 [ 644.440871][T11927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.934155][T22589] gre0 speed is unknown, defaulting to 1000 [ 645.496270][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.565631][T22642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.576854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.664784][T22646] netlink: 'syz.3.4170': attribute type 13 has an invalid length. [ 645.719311][T22646] netlink: 'syz.3.4170': attribute type 17 has an invalid length. [ 645.854885][T22644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4170'. [ 646.536645][T11927] net_ratelimit: 8 callbacks suppressed [ 646.536668][T11927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.171814][T22679] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 647.559796][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.657173][T22672] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 648.000435][T22692] veth0_to_batadv: left promiscuous mode [ 648.013040][T22692] veth0_to_batadv: left allmulticast mode [ 648.041853][T22692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.106649][T22692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.529753][T22692] vlan2: left allmulticast mode [ 648.544814][T22692] mac80211_hwsim hwsim51 wlan3: left allmulticast mode [ 648.559121][T22692] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 648.578201][T22692] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 648.606730][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.696528][T22692] vlan3: left promiscuous mode [ 648.729070][T22692] bond1: left promiscuous mode [ 648.762762][T22692] gretap1: left promiscuous mode [ 648.794028][T22692] vlan3: left allmulticast mode [ 648.836336][T22692] bond1: left allmulticast mode [ 648.868769][T22692] gretap1: left allmulticast mode [ 648.936796][T22692] bond5: left promiscuous mode [ 648.983858][T22697] 8021q: VLANs not supported on nlmon0 [ 648.993201][T15264] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.024847][T15264] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.059123][T15264] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.094642][T15264] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.152024][T22744] __nla_validate_parse: 3 callbacks suppressed [ 649.152047][T22744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4193'. [ 649.185558][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'. [ 649.270078][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4197'. [ 649.299617][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4197'. [ 649.315067][T22749] netlink: 'syz.7.4197': attribute type 3 has an invalid length. [ 649.323580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.323908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.324220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.343946][T22751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4195'. [ 649.363384][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4197'. [ 649.374330][T22752] syzkaller0: entered promiscuous mode [ 649.392855][T22752] syzkaller0: entered allmulticast mode [ 649.562471][T13288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.655696][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.673858][T22773] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4202'. [ 649.690849][T22773] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4202'. [ 649.707668][T22771] netlink: 496 bytes leftover after parsing attributes in process `syz.3.4201'. [ 649.720031][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4202'. [ 650.319780][T22802] bond1 (unregistering): Released all slaves [ 650.527022][T22810] syzkaller0: entered promiscuous mode [ 650.684890][T22814] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 650.693346][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.702865][T22814] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 651.152974][T22828] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 651.174946][T22828] syzkaller0: entered promiscuous mode [ 651.182057][T22828] syzkaller0: entered allmulticast mode [ 651.267734][T22827] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 651.277481][T22827] gre0 speed is unknown, defaulting to 1000 [ 651.729240][ T5905] net_ratelimit: 9 callbacks suppressed [ 651.729263][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.523612][T22875] bridge2: entered allmulticast mode [ 652.678452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.688279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.696890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.705404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.759524][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.246265][T22805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.256119][T22835] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 653.543388][T22879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.813998][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.860742][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.889300][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.048247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.942090][T13284] net_ratelimit: 3 callbacks suppressed [ 656.942113][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.978498][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.133295][T22915] __nla_validate_parse: 13 callbacks suppressed [ 658.133317][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4241'. [ 658.185268][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 658.230960][T22916] hsr_slave_0: left promiscuous mode [ 658.252398][T22919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.265330][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4243'. [ 658.280331][T22919] netlink: 'syz.6.4242': attribute type 15 has an invalid length. [ 658.289646][T22915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 658.298906][T22923] netlink: 'syz.7.4243': attribute type 2 has an invalid length. [ 658.309089][T22916] hsr_slave_1: left promiscuous mode [ 658.320341][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4244'. [ 658.331473][T22923] nbd: must specify at least one socket [ 658.341812][T22927] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4241'. [ 658.382772][T22927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.397537][T22927] bond_slave_0: left promiscuous mode [ 658.437398][T22927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.454202][T22927] bond_slave_1: left promiscuous mode [ 658.461614][T22927] bond0 (unregistering): Released all slaves [ 658.487096][T22933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.497734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.669330][T22934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 658.775787][T22948] Cannot find del_set index 1 as target [ 658.836491][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.847866][T22948] netlink: 'syz.1.4251': attribute type 2 has an invalid length. [ 658.858794][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.866363][T22948] netlink: 'syz.1.4251': attribute type 1 has an invalid length. [ 658.893221][T22953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.921490][T22953] tipc: Enabling of bearer rejected, failed to enable media [ 658.999324][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.141331][T22939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4248'. [ 659.151268][T22939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4248'. [ 659.166352][T13288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.210959][T22939] bond5: entered promiscuous mode [ 659.244327][T22939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.414560][T22969] TC_ACT_REPEAT abuse ? [ 659.478438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.487418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.122627][T22999] FAULT_INJECTION: forcing a failure. [ 660.122627][T22999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.142441][T22999] CPU: 1 UID: 0 PID: 22999 Comm: syz.8.4262 Not tainted syzkaller #0 PREEMPT(full) [ 660.142473][T22999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 660.142487][T22999] Call Trace: [ 660.142496][T22999] [ 660.142507][T22999] dump_stack_lvl+0xe8/0x150 [ 660.142550][T22999] should_fail_ex+0x412/0x560 [ 660.142588][T22999] _copy_from_user+0x2d/0xb0 [ 660.142613][T22999] ___sys_sendmsg+0x1c6/0x360 [ 660.142647][T22999] ? __lock_acquire+0x6b5/0x2cf0 [ 660.142681][T22999] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.142756][T22999] ? __fget_files+0x2a/0x420 [ 660.142784][T22999] ? __fget_files+0x3a0/0x420 [ 660.142823][T22999] __x64_sys_sendmsg+0x1bd/0x2a0 [ 660.142860][T22999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.142904][T22999] ? __pfx_ksys_write+0x10/0x10 [ 660.142946][T22999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.142971][T22999] do_syscall_64+0x15f/0xf80 [ 660.142999][T22999] ? trace_irq_disable+0x3b/0x140 [ 660.143023][T22999] ? clear_bhb_loop+0x40/0x90 [ 660.143050][T22999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.143073][T22999] RIP: 0033:0x7ffaa979c819 [ 660.143093][T22999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.143112][T22999] RSP: 002b:00007ffaaa5bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.143137][T22999] RAX: ffffffffffffffda RBX: 00007ffaa9a15fa0 RCX: 00007ffaa979c819 [ 660.143153][T22999] RDX: 00000000000440e0 RSI: 0000200000000100 RDI: 0000000000000003 [ 660.143168][T22999] RBP: 00007ffaaa5bd090 R08: 0000000000000000 R09: 0000000000000000 [ 660.143181][T22999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.143195][T22999] R13: 00007ffaa9a16038 R14: 00007ffaa9a15fa0 R15: 00007fffc0b30548 [ 660.143230][T22999] [ 661.476203][T23052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4281'. [ 661.489228][T23052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4281'. [ 662.054770][T23085] xt_hashlimit: size too large, truncated to 1048576 [ 662.120125][ T5905] net_ratelimit: 3 callbacks suppressed [ 662.120147][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.565022][T23098] syzkaller0: entered promiscuous mode [ 662.571317][T23098] syzkaller0: entered allmulticast mode [ 662.848241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.856874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.865359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.983533][T23102] syz.1.4297 uses old SIOCAX25GETINFO [ 663.169021][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.453899][T23116] __nla_validate_parse: 9 callbacks suppressed [ 663.453922][T23116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4299'. [ 664.209482][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.258275][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.292533][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.358259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.366836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.014000][T23105] vlan3: entered promiscuous mode [ 667.019363][T23105] erspan0: entered promiscuous mode [ 667.229391][T23127] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 667.256817][T23129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4304'. [ 667.319073][T13284] net_ratelimit: 1 callbacks suppressed [ 667.319094][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.640873][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 667.929935][T23161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.938421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.955814][T23147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.972857][T23147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.160630][T23147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.172319][T23147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.256059][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4313'. [ 668.300149][T23147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.332399][T23147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.359424][T11927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.372318][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.390460][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.414497][T11927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.531939][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4314'. [ 668.642893][T23147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.669593][T23147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.759444][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.215268][T23183] syzkaller1: entered promiscuous mode [ 669.229566][T23183] syzkaller1: entered allmulticast mode [ 669.353643][T23185] FAULT_INJECTION: forcing a failure. [ 669.353643][T23185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.389204][T23185] CPU: 0 UID: 0 PID: 23185 Comm: syz.8.4318 Not tainted syzkaller #0 PREEMPT(full) [ 669.389237][T23185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 669.389251][T23185] Call Trace: [ 669.389260][T23185] [ 669.389270][T23185] dump_stack_lvl+0xe8/0x150 [ 669.389317][T23185] should_fail_ex+0x412/0x560 [ 669.389353][T23185] _copy_from_iter+0x1d3/0x1670 [ 669.389482][T23185] ? unwind_next_frame+0xa6/0x2550 [ 669.389511][T23185] ? __pfx__copy_from_iter+0x10/0x10 [ 669.389561][T23185] bcm_sendmsg+0x172/0x6c0 [ 669.389644][T23185] ? __pfx_bcm_sendmsg+0x10/0x10 [ 669.389679][T23185] ? aa_sock_msg_perm+0xf1/0x1b0 [ 669.389711][T23185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.389749][T23185] ____sys_sendmsg+0x972/0x9f0 [ 669.389789][T23185] ? __might_fault+0xaf/0x130 [ 669.389827][T23185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.389871][T23185] ? import_iovec+0x73/0xa0 [ 669.389902][T23185] ___sys_sendmsg+0x2a5/0x360 [ 669.389933][T23185] ? __lock_acquire+0x6b5/0x2cf0 [ 669.389967][T23185] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.390040][T23185] ? __fget_files+0x2a/0x420 [ 669.390066][T23185] ? __fget_files+0x3a0/0x420 [ 669.390100][T23185] __x64_sys_sendmsg+0x1bd/0x2a0 [ 669.390130][T23185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.390167][T23185] ? __pfx_ksys_write+0x10/0x10 [ 669.390201][T23185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.390220][T23185] do_syscall_64+0x15f/0xf80 [ 669.390243][T23185] ? trace_irq_disable+0x3b/0x140 [ 669.390262][T23185] ? clear_bhb_loop+0x40/0x90 [ 669.390285][T23185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.390309][T23185] RIP: 0033:0x7ffaa979c819 [ 669.390327][T23185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.390343][T23185] RSP: 002b:00007ffaaa5bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.390363][T23185] RAX: ffffffffffffffda RBX: 00007ffaa9a15fa0 RCX: 00007ffaa979c819 [ 669.390376][T23185] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000003 [ 669.390388][T23185] RBP: 00007ffaaa5bd090 R08: 0000000000000000 R09: 0000000000000000 [ 669.390399][T23185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.390409][T23185] R13: 00007ffaa9a16038 R14: 00007ffaa9a15fa0 R15: 00007fffc0b30548 [ 669.390438][T23185] [ 669.687942][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.702085][T23189] netlink: 'syz.8.4320': attribute type 1 has an invalid length. [ 669.786294][T23192] netlink: 'syz.7.4319': attribute type 39 has an invalid length. [ 669.798298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.933645][T23187] gre1: entered promiscuous mode [ 670.019133][ T162] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.038844][ T162] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.134486][ T162] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.148338][ T162] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.249326][ T162] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.293583][ T162] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.342998][T23204] netlink: 'syz.8.4323': attribute type 21 has an invalid length. [ 670.365339][ T13] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.384483][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.403449][T23204] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4323'. [ 670.424280][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4323'. [ 670.746963][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4326'. [ 670.803000][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4326'. [ 670.818569][T23211] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4326'. [ 671.092188][T23225] FAULT_INJECTION: forcing a failure. [ 671.092188][T23225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.109861][T23225] CPU: 1 UID: 0 PID: 23225 Comm: syz.6.4330 Not tainted syzkaller #0 PREEMPT(full) [ 671.109892][T23225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 671.109906][T23225] Call Trace: [ 671.109915][T23225] [ 671.109924][T23225] dump_stack_lvl+0xe8/0x150 [ 671.109964][T23225] should_fail_ex+0x412/0x560 [ 671.110001][T23225] _copy_to_user+0x31/0xb0 [ 671.110027][T23225] simple_read_from_buffer+0xe1/0x170 [ 671.110060][T23225] proc_fail_nth_read+0x1bb/0x230 [ 671.110093][T23225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.110128][T23225] ? rw_verify_area+0x2a6/0x4d0 [ 671.110158][T23225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.110189][T23225] vfs_read+0x20c/0xa70 [ 671.110225][T23225] ? __pfx___mutex_lock+0x10/0x10 [ 671.110264][T23225] ? __pfx_vfs_read+0x10/0x10 [ 671.110297][T23225] ? __fget_files+0x2a/0x420 [ 671.110330][T23225] ? __fget_files+0x3a0/0x420 [ 671.110355][T23225] ? __fget_files+0x2a/0x420 [ 671.110402][T23225] ksys_read+0x150/0x270 [ 671.110436][T23225] ? __pfx_ksys_read+0x10/0x10 [ 671.110477][T23225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.110502][T23225] do_syscall_64+0x15f/0xf80 [ 671.110528][T23225] ? trace_irq_disable+0x3b/0x140 [ 671.110552][T23225] ? clear_bhb_loop+0x40/0x90 [ 671.110580][T23225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.110602][T23225] RIP: 0033:0x7fd5bd15d04e [ 671.110622][T23225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 671.110640][T23225] RSP: 002b:00007fd5be02efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 671.110663][T23225] RAX: ffffffffffffffda RBX: 00007fd5be02f6c0 RCX: 00007fd5bd15d04e [ 671.110680][T23225] RDX: 000000000000000f RSI: 00007fd5be02f0a0 RDI: 0000000000000004 [ 671.110693][T23225] RBP: 00007fd5be02f090 R08: 0000000000000000 R09: 0000000000000000 [ 671.110706][T23225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.110717][T23225] R13: 00007fd5bd416038 R14: 00007fd5bd415fa0 R15: 00007ffd840d0578 [ 671.110753][T23225] [ 671.417120][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4332'. [ 671.445645][T23228] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4332'. [ 671.512440][T23228] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 671.569901][T23228] gre0 speed is unknown, defaulting to 1000 [ 671.635025][T23233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4332'. [ 671.793888][T23241] netlink: 'syz.7.4333': attribute type 13 has an invalid length. [ 671.835604][T23241] netlink: 'syz.7.4333': attribute type 17 has an invalid length. [ 671.986349][ T1110] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.184024][T23241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.203115][T23241] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.224278][ T1110] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.350325][ T1110] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.364933][ T1110] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.761354][T23259] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 672.778278][T19042] Bluetooth: hci7: command 0x0406 tx timeout [ 672.781051][T23261] tipc: Started in network mode [ 672.792017][T23261] tipc: Node identity 46a37b351423, cluster identity 4711 [ 672.801092][T23261] tipc: Enabled bearer , priority 0 [ 672.859000][T11928] net_ratelimit: 6 callbacks suppressed [ 672.859022][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.922491][T23264] syzkaller0: entered promiscuous mode [ 672.928636][T23264] syzkaller0: entered allmulticast mode [ 672.935063][T23264] tipc: Resetting bearer [ 672.944111][T23259] gre0 speed is unknown, defaulting to 1000 [ 672.954147][T23266] netlink: 'syz.1.4340': attribute type 10 has an invalid length. [ 672.962499][T23266] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4340'. [ 672.962761][T23260] tipc: Resetting bearer [ 673.398753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.407320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.415865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.492564][ T5833] Bluetooth: hci8: command 0x0405 tx timeout [ 673.879158][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.896338][T13284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.905598][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.934183][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.805050][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.814023][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.473506][ T31] INFO: task syz.0.3048:18658 blocked for more than 143 seconds. [ 676.481605][ T31] Not tainted syzkaller #0 [ 676.486643][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.495887][ T31] task:syz.0.3048 state:D stack:25688 pid:18658 tgid:18657 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 676.508411][ T31] Call Trace: [ 676.511806][ T31] [ 676.514822][ T31] __schedule+0x17b4/0x5680 [ 676.519880][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.525249][ T31] ? __pfx___schedule+0x10/0x10 [ 676.530340][ T31] ? schedule+0x90/0x360 [ 676.534794][ T31] schedule+0x164/0x360 [ 676.539832][ T31] schedule_preempt_disabled+0x13/0x30 [ 676.545377][ T31] __mutex_lock+0x7f5/0x1550 [ 676.550476][ T31] ? __mutex_lock+0x606/0x1550 [ 676.555307][ T31] ? nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 676.561545][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 676.566945][ T31] ? net_generic+0x1e/0x240 [ 676.571914][ T31] ? net_generic+0x1e/0x240 [ 676.576482][ T31] nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 676.582588][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 676.588537][ T31] ? __asan_memcpy+0x40/0x70 [ 676.593226][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 676.601477][ T31] ? bpf_lsm_capable+0x9/0x20 [ 676.606225][ T31] ? security_capable+0x7e/0x2c0 [ 676.611788][ T31] genl_rcv_msg+0x61c/0x7a0 [ 676.616375][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.621667][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 676.628410][ T31] netlink_rcv_skb+0x232/0x4b0 [ 676.633340][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.639242][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.644725][ T31] ? down_read+0x270/0x2e0 [ 676.649457][ T31] ? genl_rcv+0xd/0x40 [ 676.653719][ T31] genl_rcv+0x28/0x40 [ 676.657733][ T31] netlink_unicast+0x75c/0x8e0 [ 676.662756][ T31] netlink_sendmsg+0x813/0xb40 [ 676.667700][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.674138][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.679440][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.684807][ T31] ____sys_sendmsg+0x972/0x9f0 [ 676.689783][ T31] ? __might_fault+0xaf/0x130 [ 676.694545][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.700448][ T31] ? import_iovec+0x73/0xa0 [ 676.705027][ T31] ___sys_sendmsg+0x2a5/0x360 [ 676.709883][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.714898][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.720572][ T31] ? futex_wake+0x4ac/0x580 [ 676.725266][ T31] ? __fget_files+0x2a/0x420 [ 676.730408][ T31] ? __fget_files+0x3a0/0x420 [ 676.735143][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 676.740383][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.746027][ T31] ? rcu_is_watching+0x15/0xb0 [ 676.751060][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.757234][ T31] do_syscall_64+0x15f/0xf80 [ 676.763213][ T31] ? trace_irq_disable+0x3b/0x140 [ 676.768547][ T31] ? clear_bhb_loop+0x40/0x90 [ 676.773632][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.779999][ T31] RIP: 0033:0x7fd93d39c819 [ 676.784725][ T31] RSP: 002b:00007fd93e33c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.793638][ T31] RAX: ffffffffffffffda RBX: 00007fd93d615fa0 RCX: 00007fd93d39c819 [ 676.801891][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000006 [ 676.810037][ T31] RBP: 00007fd93d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 676.818922][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.827119][ T31] R13: 00007fd93d616038 R14: 00007fd93d615fa0 R15: 00007fff99ab66f8 [ 676.835302][ T31] [ 676.855145][ T31] [ 676.855145][ T31] Showing all locks held in the system: [ 676.863575][ T31] 1 lock held by khungtaskd/31: [ 676.868710][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 676.879315][ T31] 3 locks held by kworker/u8:3/48: [ 676.884575][ T31] #0: ffff8880320e6940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.896555][ T31] #1: ffffc90000b87c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.909482][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 676.923038][ T31] 2 locks held by getty/5584: [ 676.927879][ T31] #0: ffff888032da80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.938202][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 676.948695][ T31] 3 locks held by kworker/u8:14/6476: [ 676.954164][ T31] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.966121][ T31] #1: ffffc900057e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.977714][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 676.987029][ T31] 2 locks held by syz.4.1731/13063: [ 676.992670][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.005823][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 677.016557][ T31] 3 locks held by kworker/1:14/13288: [ 677.022110][ T31] #0: ffff88813fe53140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 677.034603][ T31] #1: ffffc900053a7c40 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 677.046397][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90 [ 677.056354][ T31] 2 locks held by syz.0.3048/18658: [ 677.061888][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.070432][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 677.082248][ T31] 2 locks held by syz.5.3408/20191: [ 677.087772][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.096369][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 677.106967][ T31] 2 locks held by syz.2.3824/21397: [ 677.112485][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.120975][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 677.131453][ T31] 2 locks held by syz.6.4332/23228: [ 677.136678][ T31] #0: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 677.147221][ T31] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 677.157125][ T31] 2 locks held by syz.8.4337/23259: [ 677.163337][ T31] #0: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 677.172893][ T31] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 677.183102][ T31] 2 locks held by syz.7.4338/23260: [ 677.188678][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 677.198028][ T31] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 677.209097][ T31] 1 lock held by syz.1.4340/23265: [ 677.214243][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 677.223365][ T31] 3 locks held by syz.1.4340/23266: [ 677.228813][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.237117][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 677.246314][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 677.256740][ T31] 1 lock held by syz.1.4340/23267: [ 677.262012][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 677.271676][ T31] 1 lock held by syz.1.4340/23269: [ 677.276945][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x4dd/0x1780 [ 677.287102][ T31] 1 lock held by syz.3.4341/23271: [ 677.292533][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 677.302167][ T31] 1 lock held by syz.3.4341/23272: [ 677.307453][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 677.316921][ T31] 2 locks held by syz.3.4341/23274: [ 677.322241][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.330601][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 677.339840][ T31] [ 677.357343][ T31] ============================================= [ 677.357343][ T31] [ 677.366181][ T31] NMI backtrace for cpu 0 [ 677.366202][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.366228][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.366243][ T31] Call Trace: [ 677.366252][ T31] [ 677.366262][ T31] dump_stack_lvl+0xe8/0x150 [ 677.366305][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 677.366435][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 677.366474][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 677.366525][ T31] sys_info+0x135/0x170 [ 677.366558][ T31] watchdog+0xfaa/0x1000 [ 677.366592][ T31] ? watchdog+0x209/0x1000 [ 677.366627][ T31] kthread+0x388/0x470 [ 677.366653][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.366676][ T31] ? __pfx_kthread+0x10/0x10 [ 677.366703][ T31] ret_from_fork+0x514/0xb70 [ 677.366763][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 677.366797][ T31] ? __switch_to+0xc79/0x1410 [ 677.366830][ T31] ? __pfx_kthread+0x10/0x10 [ 677.366857][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.366915][ T31] [ 677.366926][ T31] Sending NMI from CPU 0 to CPUs 1: [ 677.479116][ C1] NMI backtrace for cpu 1 [ 677.479138][ C1] CPU: 1 UID: 0 PID: 23260 Comm: syz.7.4338 Not tainted syzkaller #0 PREEMPT(full) [ 677.479161][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.479174][ C1] RIP: 0010:preempt_count_sub+0x27/0x170 [ 677.479232][ C1] Code: 90 90 90 f3 0f 1e fa 55 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 20 15 49 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 c5 00 00 00 <83> 3d c2 67 b5 18 00 75 25 65 8b 05 c9 02 aa 11 89 c1 81 e1 ff ff [ 677.479251][ C1] RSP: 0018:ffffc90000a08b20 EFLAGS: 00000097 [ 677.479270][ C1] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffffff9a491503 [ 677.479286][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 677.479298][ C1] RBP: ffff8880b2a3cde0 R08: ffffffff9a705d43 R09: 1ffffffff34e0ba8 [ 677.479313][ C1] R10: dffffc0000000000 R11: fffffbfff34e0ba9 R12: ffff8880b2a3cdd8 [ 677.479328][ C1] R13: ffff8880b2a3cdc8 R14: ffffffff9a705d40 R15: 1ffff110165479bb [ 677.479343][ C1] FS: 00005555679eb500(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 677.479361][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.479374][ C1] CR2: 0000555581dc34e8 CR3: 00000000a58ea000 CR4: 00000000003526f0 [ 677.479392][ C1] Call Trace: [ 677.479399][ C1] [ 677.479408][ C1] _raw_spin_unlock_irqrestore+0x4c/0x80 [ 677.479434][ C1] debug_object_activate+0x320/0x580 [ 677.479549][ C1] ? __pfx_pwq_tryinc_nr_active+0x10/0x10 [ 677.479580][ C1] insert_work+0x35/0x330 [ 677.479611][ C1] __queue_work+0xccf/0xfc0 [ 677.479643][ C1] ? __queue_work+0x1a1/0xfc0 [ 677.479673][ C1] call_timer_fn+0x192/0x5e0 [ 677.479701][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 677.479730][ C1] ? call_timer_fn+0xd4/0x5e0 [ 677.479756][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 677.479790][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 677.479812][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 677.479843][ C1] __run_timer_base+0x67e/0x8b0 [ 677.479867][ C1] ? ktime_get+0x45/0x220 [ 677.479897][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 677.479933][ C1] run_timer_softirq+0xb7/0x170 [ 677.479959][ C1] handle_softirqs+0x22a/0x840 [ 677.479996][ C1] ? __irq_exit_rcu+0xca/0x220 [ 677.480037][ C1] __irq_exit_rcu+0xca/0x220 [ 677.480064][ C1] irq_exit_rcu+0x9/0x30 [ 677.480089][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 677.480113][ C1] [ 677.480119][ C1] [ 677.480127][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.480149][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 677.480195][ C1] Code: 81 0a 09 00 89 c6 48 c7 c7 70 09 46 96 e8 e3 1b 14 0a 90 e9 65 fe ff ff e8 f8 5a 11 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 677.480213][ C1] RSP: 0018:ffffc900041ff980 EFLAGS: 00000246 [ 677.480230][ C1] RAX: 0000000000000046 RBX: ffff888032c06268 RCX: 0000000000000046 [ 677.480244][ C1] RDX: ffffffff940184d8 RSI: ffffffff8dfcf60f RDI: ffffffff8c27f000 [ 677.480259][ C1] RBP: ffff8880367edc00 R08: ffffffff81aee918 R09: ffffffff8e95d020 [ 677.480274][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: 0000000000000000 [ 677.480288][ C1] R13: ffff888032c06269 R14: 0000000000001000 R15: 0000000000000a07 [ 677.480307][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 677.480338][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 677.480420][ C1] __qdisc_destroy+0x1ab/0x470 [ 677.480451][ C1] dev_shutdown+0x93/0x440 [ 677.480483][ C1] unregister_netdevice_many_notify+0x11b2/0x22c0 [ 677.480567][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 677.480592][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 677.480613][ C1] ? skb_queue_purge_reason+0x229/0x3b0 [ 677.480638][ C1] ? skb_queue_purge_reason+0x229/0x3b0 [ 677.480669][ C1] unregister_netdevice_queue+0x31f/0x360 [ 677.480690][ C1] ? ptr_ring_consume+0x1f8/0x420 [ 677.480715][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 677.480744][ C1] __tun_detach+0x6d9/0x15d0 [ 677.480779][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 677.480802][ C1] tun_chr_close+0x10a/0x1c0 [ 677.480825][ C1] __fput+0x44f/0xa60 [ 677.480858][ C1] task_work_run+0x1d9/0x270 [ 677.480882][ C1] ? __pfx_task_work_run+0x10/0x10 [ 677.480909][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.480930][ C1] exit_to_user_mode_loop+0xed/0x480 [ 677.480953][ C1] ? rcu_is_watching+0x15/0xb0 [ 677.480988][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.481009][ C1] do_syscall_64+0x33e/0xf80 [ 677.481035][ C1] ? clear_bhb_loop+0x40/0x90 [ 677.481058][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.481078][ C1] RIP: 0033:0x7fc38999c819 [ 677.481095][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.481113][ C1] RSP: 002b:00007fff615a70a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 677.481133][ C1] RAX: 0000000000000000 RBX: 00007fc389c17da0 RCX: 00007fc38999c819 [ 677.481146][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 677.481158][ C1] RBP: 00007fc389c17da0 R08: 00007fc389c16038 R09: 0000000000000000 [ 677.481171][ C1] R10: 00000000003ffcfc R11: 0000000000000246 R12: 00000000000a46b7 [ 677.481184][ C1] R13: 00007fc389c15fac R14: 00000000000a446a R15: 00007fff615a71b0 [ 677.481210][ C1] [ 678.018052][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 678.025069][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 678.034317][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 678.044546][ T31] Call Trace: [ 678.047866][ T31] [ 678.050848][ T31] vpanic+0x56c/0xa60 [ 678.054924][ T31] ? __pfx___schedule+0x10/0x10 [ 678.059827][ T31] ? __pfx_vpanic+0x10/0x10 [ 678.064401][ T31] ? __pfx_console_unlock+0x10/0x10 [ 678.069710][ T31] panic+0xc5/0xd0 [ 678.073515][ T31] ? __pfx_panic+0x10/0x10 [ 678.078069][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 678.083486][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 678.089857][ T31] watchdog+0xff4/0x1000 [ 678.094132][ T31] ? watchdog+0x209/0x1000 [ 678.098580][ T31] kthread+0x388/0x470 [ 678.102693][ T31] ? __pfx_watchdog+0x10/0x10 [ 678.107407][ T31] ? __pfx_kthread+0x10/0x10 [ 678.112035][ T31] ret_from_fork+0x514/0xb70 [ 678.116698][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 678.121848][ T31] ? __switch_to+0xc79/0x1410 [ 678.126660][ T31] ? __pfx_kthread+0x10/0x10 [ 678.131298][ T31] ret_from_fork_asm+0x1a/0x30 [ 678.136124][ T31] [ 678.139800][ T31] Kernel Offset: disabled [ 678.144274][ T31] Rebooting in 86400 seconds..