last executing test programs: 14m6.434841983s ago: executing program 4 (id=309): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01040000000000000017750000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc14000000110001000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000540b00000012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m6.100344243s ago: executing program 4 (id=314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) 14m5.881810862s ago: executing program 4 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000005c0)={@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, {&(0x7f0000000100)=""/122, 0x7a}, &(0x7f0000000340), 0x18}, 0xa0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0xb987f000) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000380)=0x7, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x3}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in6=@remote, @in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x6c, 0x2, 0x0, 0x34ff, 0x2, 0x2}]}]}, 0x108}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x17, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40c0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) 14m4.849738051s ago: executing program 4 (id=334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r5, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x21, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x4000850) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14m4.377248149s ago: executing program 4 (id=338): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@buf={0xb5, &(0x7f00000000c0)="53db021d78ec45a9339727b508a638a73cd4f5cba6fff89562990472ad0ed349a4b30dafbe9cba1b70d404df35088755ba96575b17c3d50c56dcc69a544018051b49c2f1ad92fd2a1d16475a8e26f7f278bf60c9d867fef7663ddc3611a94066f7d9322cbeea73aa9c121b9e2bfbbf8be1e48d283c00b4d9483726b4edae7eb3cb03bdc05f1ba034675d8fbc34200f6f2b1e77305adc988cdabad1c59c778780a126c2d4600c5b32b4fdb94b8b9c60e77366391672"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r5, 0x0, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf253700000008000300", @ANYRES32=r4, @ANYBLOB="0800260071160000050019010d0004000000000000000000caf446a2f9f0786d838c62a9b4f6"], 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x4880) 14m3.324250262s ago: executing program 32 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf253700000008000300", @ANYRES32=r2, @ANYBLOB="0800260071160000050019010d0004000000000000000000caf446a2f9f0786d838c62a9b4f6"], 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x4880) 14m3.1886931s ago: executing program 33 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000005c0)={@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, {&(0x7f0000000100)=""/122, 0x7a}, &(0x7f0000000340), 0x18}, 0xa0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0xb987f000) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000380)=0x7, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x3}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in6=@remote, @in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x6c, 0x2, 0x0, 0x34ff, 0x2, 0x2}]}]}, 0x108}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x17, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40c0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) 14m3.161171875s ago: executing program 4 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 14m3.153231829s ago: executing program 34 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 9m7.456209962s ago: executing program 3 (id=2927): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1ac, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xfff2}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x178, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0xfff1}}, @TCA_BPF_ACT={0x16c, 0x1, [@m_vlan={0x168, 0x15, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xa2e8, 0x5, 0x9, 0x3cc54785}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x301}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0x1, 0x4, 0xc5, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb24}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x557}]}, {0xcc, 0x6, "a99a5167f49148445cc1ac8f0bf46c1f5cc1b882357f48ceff86fd9718dc7d049dcfbd639c6d3f86c37582fdb4516d22a32ce33451578a6ac8889c30eb903705973b5881827ee215f08421fe6d26a18b249df402012f29da1a9015aceb209f20a5b25713aa409cc13620dcfed27fdf0a0b76cb43290f9ce5153f7188938c2d392d0f82e6c037ee9a1303c7e760575212a10807ad0396ef49559fc7b015d3d699b734f3c6327a2e068689f7d8650037647ebd688108886cf23cf1a4c10c03dd392300191d7f7485e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x3, &(0x7f0000000080), 0x4) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)=ANY=[@ANYBLOB="c08969413142a1960083ad38aebb11bc928cc8a5", @ANYRES32=0x0, @ANYBLOB="0f000180080000000000000063243900"], 0x28}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) (async) syz_emit_ethernet(0x2f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaacbaa0180c20000000800450000210000000000119078000000000000000000004e20000d90785e600c559fdb60cd6f55383cde3979cf5773f4baae9d8c4a2f555b9fecf81dfdf814d91f68050020fa8c937fa3c607f300"], 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r9, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r10], 0x24}}, 0x0) (async) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9m7.230593676s ago: executing program 3 (id=2931): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000003}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0x1008}) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000001c0)={0x8, 'sit0\x00', {'bridge0\x00'}, 0x62f}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket(0x29, 0x80000, 0x6) 9m6.851204907s ago: executing program 3 (id=2938): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002480300000000000040000000090900020073797a3200000000140000001100010000000000000000000200000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = accept4$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x0, 0x36, 0x0, 0x1}, 0x28) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000002c0)={0x4, &(0x7f0000000300)=[{0x61, 0x0, 0x6d}, {0x6, 0x3, 0x2}, {0x9ae, 0xf, 0x1, 0x8}, {0xff, 0x0, 0x8}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001002000000000000000000000000000a58000000060a04000000000000000000170000002c0004802800018007000100637400004000000000080002400000000d05000300000000170900010073797a30000000000900020073797a320000000014000000110001000000bbd3b88389793c74000a80ead61288a49f70f5c7bc3ee041d80c8fdcf1e38f0f386ec507535102f495f8202bfb7b2a20292e6bd900d50cf286a17606e435c06b537be05efa2e0f2e6fc4351c91b0605bff492f81d356ccb8d0b1b27e531887a65ea83dea"], 0x80}, 0x1, 0x0, 0x0, 0x24024004}, 0x8000) r7 = socket$inet6(0xa, 0x80802, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x38}], 0x1}, 0x0) ioctl$int_in(r4, 0x5452, 0x0) sendmmsg$inet6(r7, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {}], 0x3, 0x1c000) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x2c, 0x0, &(0x7f0000000180)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00'}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="8d185acb4131"}, 0x10) 9m6.485818542s ago: executing program 3 (id=2944): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac141439000000000000000000000000ac1e0101000000000000000000000000000000004e210000020020002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000057717e2f00000000fdffffffffffffff000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/168], 0xf0}}, 0x8000) 9m6.335181208s ago: executing program 3 (id=2946): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) socket(0x25, 0x80000, 0xff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000003c0)={0x78, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0fbc789d2a8d405e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e19fc16b9fc5880b792504f9eea11fd8017aa9aaa1eca7a109e0bd84a9051a02"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3ae110d37cfd5ed0c481e3aedc5d05bc900fcc1dad00"}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000040) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e20, 0x3, 'none\x00', 0x0, 0x3, 0x3}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xfffffffffffffee8, &(0x7f0000000140)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @broadcast, @local, @loopback}}}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f00000001c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x28, r10, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8d8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 9m5.128518314s ago: executing program 1 (id=2963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x400c404) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) 9m4.987792281s ago: executing program 1 (id=2966): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000020c00"/16, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x77359400, @ANYRES64=r5, @ANYBLOB="0000000001000000000000201d01000062af510bb8cc908fe70b7f04ce9bf921f2c5f5c085ede7c77fa0601b1c2f77ffaf5d4095b4c27212333d3ddd460a3fe836ce0f88ab294b8b06d2b55fb8d14a9230836d545ccbd45654dcf7c52cd4d99f0aeb8c5ceffd87d78455d6e40e4aa46b7597dca1d76d60314a745b1f"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000008db879e2b2fa56da00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x38}}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r3, @ANYRES16=r6], 0x54}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000020c00"/16, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x77359400, @ANYRES64=r5, @ANYBLOB="0000000001000000000000201d01000062af510bb8cc908fe70b7f04ce9bf921f2c5f5c085ede7c77fa0601b1c2f77ffaf5d4095b4c27212333d3ddd460a3fe836ce0f88ab294b8b06d2b55fb8d14a9230836d545ccbd45654dcf7c52cd4d99f0aeb8c5ceffd87d78455d6e40e4aa46b7597dca1d76d60314a745b1f"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000008db879e2b2fa56da00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x38}}, 0x20000000) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r3, @ANYRES16=r6], 0x54}}, 0x0) (async) 9m4.928099925s ago: executing program 7 (id=2968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8041}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f00000003c0)=""/52, 0x34) r5 = socket(0x2, 0x2, 0x1) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r2, 0x681}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e24, 0xc, @empty, 0xf7}}, 0x57, 0x72fc}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 9m4.675297872s ago: executing program 7 (id=2969): socket(0x1e, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x97ffffff}, 0x1c, 0x0}}], 0x1, 0x4001) 9m4.674614104s ago: executing program 1 (id=2970): socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x80fe}}], 0x1, 0x4001) 9m4.620976099s ago: executing program 1 (id=2971): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r3, @ANYBLOB="280050800500020007000000090001007ee5d52ffd0000000500090002000000080003000dac0f"], 0x44}}, 0x40000) 9m4.564485055s ago: executing program 7 (id=2972): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x1000000}, 0x1c, 0x0}}], 0x1, 0x4001) 9m4.466223435s ago: executing program 7 (id=2973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x1, @remote, 0x6c7}}, 0x1}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x100, 0x2}, &(0x7f0000000140)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x3, 0x342, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000001c0], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x2, 0x8b18, 'vlan0\x00', 'wlan1\x00', 'gretap0\x00', 'virt_wifi0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x6, 0x20, 0x86dd, 'veth0_virt_wifi\x00', 'geneve0\x00', 'veth1_virt_wifi\x00', 'dummy0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, [0x0, 0x0, 0xff, 0xff], 0xfe, 0xfe, 0x12e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x3, 0x7ff, 0x4, {0x1}}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'netbios-ns\x00'}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x6006, 'wg0\x00', 'veth0_to_batadv\x00', 'virt_wifi0\x00', 'veth0_macvtap\x00', @random="78bfcc01310e", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xe6, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@ERROR={'ERROR\x00', 0x20, {"f61ae230546806c0de6c3d2b4c8518aa312a38c3ee9b84973b3593c3cd67"}}}]}]}, 0x3ba) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000005c0)={r2, 0x9}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000640)={0x3ff, 0x8, 0x8, 0x4, r4}, &(0x7f0000000680)=0x10) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000006c0)={0xfffb, 0x8003, 0x6, 0x7, r2}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000740)={r4, 0x3}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0xc98, 0x0, 0xb50, 0x8a0, 0x960, 0x960, 0xc00, 0xc00, 0xc00, 0xc00, 0xc00, 0x6, &(0x7f0000000780), {[{{@uncond, 0x0, 0x878, 0x8a0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x1000, 0x1}, {0x6f3}, {0x8, 0x2}, {0x7, 0x3}, {0xffffff17}, {0xfffffff8, 0x2}, {0x3, 0x2}, {0x9, 0x1}, {0x11, 0x3}, {0x3d5bf498, 0x1}, {0xc, 0x2}], [{0x3, 0x101}, {0xd8, 0x2}, {0x2, 0x8000}, {0xdb4e, 0x3}, {0x8, 0x2}, {0x450, 0x81}, {0x1, 0x8}, {0x7, 0x6}, {0xa, 0x39f5}, {0x6, 0xd4c}, {0x1, 0x2}], 0xb, 0x2}, {[{0x7, 0x3}, {0x101}, {0x7}, {0x80000000, 0x2}, {0x2, 0x1}, {0x40}, {0x0, 0x1}, {}, {0xf, 0x2}, {0x4, 0x3}, {0x2, 0x6}], [{0xff, 0x8}, {0x1, 0x1000}, {0xf2, 0xffff96ca}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x10001}, {0xa74c, 0x6}, {0x8, 0x2}, {0x0, 0x2}, {0x8, 0x100}, {0x7, 0xffffffff}], 0x0, 0xa}, {[{0x7, 0x2}, {0xfffffffe, 0x1}, {0x3, 0x3}, {0xf, 0x3}, {0x7, 0x1}, {0x9, 0x3}, {0xd90, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {}, {0x1, 0x3}], [{0xffffffff, 0xff}, {0x0, 0x8}, {0x5}, {0x385e, 0x4}, {0x1, 0xac7ffd7}, {0x5a83}, {0x2, 0x6c9}, {0x9, 0x5ea}, {0x5, 0x40}, {0x7, 0x7fffffff}, {0x8, 0x100}], 0x5, 0x6}, {[{0x4, 0x1}, {0x8}, {0x5, 0x3}, {0x80}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x7f, 0x2}, {0x8}, {0xfffffffe}, {0xb77, 0x1}], [{0x5, 0x2}, {0x4, 0x2}, {0x6, 0x4}, {0x10000, 0x7}, {0x6, 0x7f}, {0x0, 0x5b7a}, {0xfffffffb, 0xc441}, {0x401, 0x8}, {0x8, 0x5}, {0x7, 0x2}, {0x5, 0x2}], 0x2, 0xb}, {[{0x7, 0x2}, {0x1ff, 0x1}, {0xa6, 0x3}, {0xfffff800, 0x2}, {0x100, 0x3}, {0x4, 0x1}, {0x75800000}, {0x1, 0x2}, {0x4, 0x2}, {0xfffffff6, 0x2}, {0xea, 0x3}], [{0x8, 0x8}, {0x8001, 0x10000}, {0x2, 0x8}, {0x7fffffff, 0x7fffffff}, {0x6000, 0x2}, {0x3, 0x8000}, {0x8, 0xfffffffe}, {0x7, 0x8857}, {0x3ff, 0xb9e1}, {0x1, 0xf}, {0x39b, 0x101}], 0x3, 0x5}, {[{0x4}, {0xff, 0x3}, {0xc, 0x3}, {0x4, 0x1}, {0x1d41e44, 0x2}, {0x0, 0x1}, {0x7}, {0xc10, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x2049, 0x2}], [{0xf0, 0x401}, {0x3ff, 0x8}, {0x7, 0x1ff}, {0x56e, 0x80000000}, {0x9, 0xff}, {0x3, 0xe3}, {0x4, 0x84a4}, {0xb8, 0x10000}, {0x3, 0xfffffff4}, {0x1, 0x7}, {0xfff, 0x9}], 0x3, 0xa}, {[{0x8, 0x1}, {0x6, 0x2}, {0x1000, 0x3}, {0x7}, {0x400}, {0x9ef, 0x3}, {0x8, 0x3}, {0xfffff4c2, 0x2}, {0x6, 0x1}, {0x1}, {0x0, 0x1}], [{0x2, 0x400000}, {0x3, 0x2}, {0x1000, 0x800}, {0x10, 0x2}, {0xd, 0x6f0}, {0x80000000, 0xf657}, {0xb, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x73c, 0x3}], 0xa, 0xa}, {[{0x2, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0x8}, {0x4}, {0x7}, {0x5, 0x1}, {0xfffffeff, 0x1}, {0x0, 0x3}, {0x9, 0x2}], [{0x8, 0x445}, {0x4, 0x2}, {0xc5, 0x3}, {0x1, 0x9}, {0x10, 0x8}, {0x8, 0x6}, {0x6, 0xda}, {0x81, 0x2}, {0x1ff, 0x7}, {0x9, 0xfffffaf2}, {0x0, 0x8}], 0x2, 0xb}, {[{0x21d0}, {0x3, 0x1}, {0x3}, {0xff, 0x1}, {0xffff, 0x3}, {0x1e8d}, {0x7fffffff, 0x2}, {0x7, 0x2}, {0x7fffffff}, {0x7}, {0x20688c7e, 0x3}], [{0x8, 0x6}, {0x41c, 0xca1}, {0x7, 0x80}, {0x4, 0xffffffff}, {0x101, 0x6}, {0x1, 0x100}, {0x8, 0x4}, {0x5, 0x2}, {0x7, 0x20}, {0x7, 0xc46}, {0x1, 0xff}], 0x6, 0x4}, {[{0x5, 0x3}, {0xd7c}, {0x7fff}, {0x5, 0x3}, {0xfffff001, 0x1}, {0x800}, {0x2, 0x1}, {0xffffffff}, {0x9, 0x3}, {0x4, 0x2}, {0xffffffff}], [{0x24d, 0x8}, {0x2, 0xca63}, {0x3, 0x5}, {0x0, 0xdde5}, {0x10001, 0x5}, {0xfffffff8, 0xb}, {0x8, 0x2}, {0x1, 0x5}, {0xfffffffe, 0xaf8a}, {0x5, 0x6}, {0xa921, 0x63}], 0xa, 0x2}, {[{0x800, 0x1}, {0x54d, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x125c}, {0x8, 0x1}, {0x7c, 0x1}, {0x8}, {0x800}, {0x6, 0x7}, {0x400}], [{0x3, 0xfff}, {0x3, 0x3}, {0x8, 0xfffffffd}, {0x8, 0xc36b}, {0xb, 0xffffffff}, {0x8000}, {0x200, 0x2}, {0x3, 0x8}, {0x1724f3fd, 0x22}, {0x7c000, 0xff}, {0x9, 0x100}], 0xb, 0x7}], 0x7}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x80}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xff}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x5d}}}, {{@ip={@private=0xa010100, @empty, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'vxcan1\x00', {}, {}, 0x2f, 0xf23385aa99f47b66, 0x40}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "09c3"}}, @common=@inet=@udplite={{0x30}, {[0x4e21, 0x4e23], [0x4e22, 0x4e24], 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 'veth1_vlan\x00', 'gre0\x00', {0xff}, {}, 0x84, 0x3, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x5, 0x5, 0x1, 0x2, 0x4, 0x6], 0x0, 0x1}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x7, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x101, @ipv6=@loopback, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000001500)={0x5f22, 0x7f, 0x3ff}, 0xc) listen(r0, 0x401) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001540)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001640)={'gre0\x00', &(0x7f0000001580)={'erspan0\x00', r7, 0x780, 0x8000, 0x3, 0xc, {{0x1c, 0x4, 0x0, 0x7, 0x70, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@noop, @lsrr={0x83, 0x2b, 0x30, [@private=0xa010101, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @broadcast, @local, @multicast2, @empty, @broadcast]}, @generic={0x94, 0x4, "588e"}, @noop, @noop, @cipso={0x86, 0xb, 0x2, [{0x5, 0x5, "2475a9"}]}, @rr={0x7, 0x7, 0x88, [@multicast2]}, @lsrr={0x83, 0x17, 0x34, [@local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @local]}]}}}}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001680)={0x0}, &(0x7f00000016c0)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001780)={r8, 0xee00, r9}, 0xc) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000017c0), &(0x7f0000001800)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000001840)=[@in6={0xa, 0x4e21, 0xe7e1, @remote, 0xfcf}, @in6={0xa, 0x4e21, 0x2a20, @loopback, 0x7fff}, @in={0x2, 0x4e21, @local}], 0x48) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d00)=@nat={'nat\x00', 0x19, 0x3, 0x3f2, [0x200000001900, 0x0, 0x0, 0x200000001930, 0x200000001960], 0x0, &(0x7f00000018c0), &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x1, 0x69, 0x8864, 'pim6reg\x00', 'ip6_vti0\x00', 'nicvf0\x00', 'veth1_to_team\x00', @link_local, [0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xae, 0xe6, 0x11e, [@time={{'time\x00', 0x0, 0x18}, {{0x5, 0xc, 0xe414, 0xa365, 0x9, 0x4, 0x2}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0x11}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}, {0x5, 0x1, 0x8809, 'vlan1\x00', '\x00', 'macsec0\x00', 'dvmrp1\x00', @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0x0, 0x0, 0x0, 0xff, 0xff], 0xbe, 0x13e, 0x176, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@private=0xa010101, [0xff, 0xff, 0x0, 0xff], 0x4e20, 0x0, 0x1, 0x4e21, 0x8, 0x8}}}], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x6, 0x7, {0x7}}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0x5, 0x1, [{0x9, 0x2a, 0x15, 'syzkaller1\x00', 'vlan1\x00', 'veth0_vlan\x00', 'team_slave_0\x00', @multicast, [0x0, 0x0, 0x0, 0x0, 0xff], @link_local, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x46a) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r10, &(0x7f0000001d80)="afccaa8cbe1bd224e9bc2549c31f2bcfc7a56fff9ee11b3761f6d5adb94dd597e8f48aa7352ac64584253a6360181b97deaebcd25414993305a29a6b1839d596c765a60ca93f9828f96d69fb3f60cfe7335ec7e64d1b4aca49c2599ad8b83b", 0x5f, 0x20004001, 0x0, 0x0) socketpair(0x1a, 0x2, 0x8, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = accept$ax25(r11, &(0x7f0000001e40)={{0x3, @bcast}, [@bcast, @default, @null, @null, @default, @remote, @netrom, @bcast]}, &(0x7f0000001ec0)=0x48) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r13) ioctl$sock_inet_SIOCGIFADDR(r12, 0x8915, &(0x7f0000001f40)={'batadv_slave_1\x00', {0x2, 0x0, @dev}}) 9m4.363237711s ago: executing program 1 (id=2975): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4086, 0xff6}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}, 0xffffffff}], 0x1, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x6, 'net'}]}, 0x5) splice(r1, 0x0, r3, 0x0, 0x3, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r5 = socket(0x10, 0x80000, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r8, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x706d9}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x12) sendmsg$can_j1939(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000200)="684b8728cb2e045a5cfc065d928874b7036ac73ed2017af4655e4deeffcbbebecbb1d22b14cc6591d1ae8e86927b7bd36360e453597f4ba288fcc7d5dc6b2a1796e6538a1a502f236f78bc8d07a558508031efe57d4f94dfcf86a9bcb0cd0133a4d24d1d6ef978dee2", 0x69}, 0x1, 0x0, 0x0, 0x50}, 0x0) 9m4.336522897s ago: executing program 7 (id=2976): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) (async) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x23, &(0x7f0000000440)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0xaf400, 0x0, 0x1}, {0xfff00, 0x0, 0x1}], @generic="47eb59bb494207927d2bd9ab87"}}}}, 0x0) (async) syz_emit_ethernet(0x23, &(0x7f0000000440)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0xaf400, 0x0, 0x1}, {0xfff00, 0x0, 0x1}], @generic="47eb59bb494207927d2bd9ab87"}}}}, 0x0) syz_emit_ethernet(0xa0, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x92, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xfe, 0x0, {0x1c, 0x4, 0x1, 0x12, 0x6, 0x64, 0x8b6, 0x4, 0x2e, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x75, 0x3, 0x5, [{@multicast2, 0x5}, {@local, 0x5}, {@multicast2, 0x4}, {@broadcast}, {@loopback, 0xca2}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x4}, {@remote, 0xff}, {@private=0xa010102, 0x8a}]}, @timestamp={0x44, 0x10, 0xf4, 0x0, 0xd, [0x7f, 0xffff2a19, 0x3]}]}}, "7b7e1f4d69bb"}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x40, @empty}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x40, @empty}, 0x1c) listen(r4, 0x0) (async) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000110800020073797a3100000000000000000000063102000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003800010020000000000100"/28], 0x1c}}, 0x40010) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) 9m4.051333717s ago: executing program 7 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x1}, ["", ""]}, 0x1c}}, 0x0) 9m3.537771337s ago: executing program 35 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x1}, ["", ""]}, 0x1c}}, 0x0) 9m3.525608295s ago: executing program 1 (id=2980): socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x88ff}}], 0x1, 0x4001) 9m3.52526656s ago: executing program 36 (id=2980): socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x88ff}}], 0x1, 0x4001) 9m3.508201031s ago: executing program 3 (id=2951): r0 = epoll_create(0xc51c) r1 = socket$isdn(0x22, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x2000}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r3 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = accept4(r3, 0x0, &(0x7f0000000140), 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000180)={0x8, 'veth1\x00', {'pim6reg\x00'}, 0xa}) write(r3, &(0x7f00000002c0)="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", 0xfc) connect$netlink(r3, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) 9m3.175593933s ago: executing program 37 (id=2951): r0 = epoll_create(0xc51c) r1 = socket$isdn(0x22, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x2000}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r3 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = accept4(r3, 0x0, &(0x7f0000000140), 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000180)={0x8, 'veth1\x00', {'pim6reg\x00'}, 0xa}) write(r3, &(0x7f00000002c0)="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", 0xfc) connect$netlink(r3, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) 45.020585139s ago: executing program 9 (id=8544): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f00000000c0)=0x28) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000005c0)="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", 0x1000) 44.98258357s ago: executing program 9 (id=8547): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x3, 0x10000, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x65, 0x0, 0xff, 0x29, 0x0, @multicast1, @remote, {[@noop, @rr={0x7, 0x7, 0xc4, [@remote]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x89, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x8}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x37}}, {@private=0xa010101, 0x8}, {@multicast1, 0xfe50}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfd36, &(0x7f0000000280)={&(0x7f0000000a40)=@delchain={0x0, 0x65, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xa, 0xa45267dc77590a97}, {0xb, 0xffe0}}, [@TCA_RATE={0x0, 0x5, {0xb, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x3, {0x3, 0xff, 0x6}, 0x2}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000051c0)=[{0x0}, {&(0x7f0000004fc0)="14733f9daa4e98c0c27ea7b2", 0xc}], 0x2}}], 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000085000013950000d843005d4a4d140000000000"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x4}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e26}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) close(0xffffffffffffffff) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}, {{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @broadcast}}, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/155}, {&(0x7f0000000080)=""/16}, {&(0x7f0000000600)=""/233}, {&(0x7f00000009c0)=""/91}]}, 0xfff}], 0x400000000000113, 0x20010060, 0x0) connect$can_j1939(r0, &(0x7f0000000400)={0x1d, r3, 0x1, {0x1, 0xf0, 0x1}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 44.803191386s ago: executing program 9 (id=8551): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000200)=[{0xd, 0x1, 0xfa, 0x40}, {0x9, 0xb, 0x2d, 0xffffffff}, {0x0, 0x3, 0xf9, 0xc4ec}]}, 0xffffffffffffffac) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x9}, @void, @arp=@generic={0x104, 0x9300, 0x6, 0xf, 0x3, @remote, "34aa4719180e961c144b2bc81998ca", @local, "14"}}, 0x28) (async, rerun: 32) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x0) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) (async, rerun: 32) listen(r3, 0x100) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) (async) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async, rerun: 64) socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) 44.707478381s ago: executing program 9 (id=8553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', 0x100}) 44.60020022s ago: executing program 9 (id=8555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='caif0\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="01000000020c00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000201d01000062af510b0b7f1dce9bf921f6c5f5c085ede7c77fa0601b1c2f77ffaf5d4095b4c27212333d3ddd460a3fe83bced14a92c421a907b2"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14a3000000000029e9a6f9f467aa867bc99c09329ecb6be61eadfc5c2427ba485eb668c7e55f0b426feb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x38}}, 0x20000000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027f00000101000000020000007f"], 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'lo\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4ca4c42e}, &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000575b7e07060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002402000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a310000000009000200"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) 44.341249926s ago: executing program 9 (id=8559): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r1, 0x0, 0xfb3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf59e}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r5}]}, 0x40}}, 0x40040d0) bind$802154_dgram(r2, &(0x7f00000000c0)={0x24, @long}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 29.276439858s ago: executing program 38 (id=8559): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r1, 0x0, 0xfb3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf59e}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r5}]}, 0x40}}, 0x40040d0) bind$802154_dgram(r2, &(0x7f00000000c0)={0x24, @long}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 13.457465524s ago: executing program 8 (id=8967): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000f1400442a75252767f1688532bd7000fd3cc804"], 0x18}, 0x1, 0x0, 0x0, 0x480}, 0x40045) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) 13.131424683s ago: executing program 8 (id=8974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x1300000000000000) 12.855107935s ago: executing program 8 (id=8978): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000280)={0x3, 0x8, 0xa0, &(0x7f00000000c0)=""/160}) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@null, 0x1, 'vlan0\x00'}) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@remote, @loopback}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf8, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @random="36fe59b35ef6", {0x4, 0x6}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x22, @void}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x1}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1c}, @broadcast, @device_b}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x10}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x2}, @broadcast, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x1, {0xf, 0xffe}, "4eb20866c3cde894"}, {0x0, 0x7, {0x9, 0x4f4}, "bdd1e57b45371df5"}], {0x0, 0x9, {0x7}, "62067f6ada2d2fd4"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x9}, {0xfff3}}}, 0x24}}, 0x0) 12.678635405s ago: executing program 8 (id=8982): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) read$alg(r0, &(0x7f0000000200)=""/82, 0x52) write(r1, &(0x7f0000000680)="4ede", 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) 12.503167085s ago: executing program 8 (id=8984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c000c00028005001600010000004fa3907dad9d05f6315b72b1eff44974b32112d2602c155469cfbd740ea0fb763d07ab003f31f1cc41fde1b170210819764099895c0e8665ffdf3d484e628b14af660131f25209468500"/109], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) (async) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan0\x00'}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0x16}], 0x1, 0x0, 0x0, 0x0) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4096, 0x1000, 0x1, 0xffffffffffffffff}, &(0x7f0000000240)=0x40) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010029bd7000fddbdf250218c002", @ANYRES32=r10, @ANYBLOB="08000200ffffffff14000600bbff0048cb"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 12.410616771s ago: executing program 8 (id=8986): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x2}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) epoll_pwait(r6, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@fwd={0x9}, @const={0x7}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000600)=""/29, 0x3f, 0x1d, 0x0, 0x3dc}, 0x28) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xdd4a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r11}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11, 0x1000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1e, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ldst={0x3, 0x2, 0x2, 0x3, 0x8, 0x18, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0xf, &(0x7f0000000540)=""/15, 0x41100, 0x12, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000680)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xe, 0xa2bf, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[r9, r10, r12, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x1, 0x8, 0x6}, {0x2, 0x3, 0xf, 0x2}, {0x3, 0x3, 0xc, 0x5}, {0x0, 0x3, 0x9, 0x3}, {0x3, 0x5, 0xa, 0x8}, {0x5, 0x4, 0x5}, {0x0, 0x5, 0x3, 0x8}, {0x5, 0x3, 0x0, 0xc}], 0x10, 0x3}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r13, 0x0, 0xf}, 0x18) 10.793990982s ago: executing program 5 (id=9016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940), 0x8040) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r5], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0xffffffffffffffb4, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x72, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f00000007c0), &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r10, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000000400010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400040c4}, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@newtclass={0x154, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x7, 0xc}, {0x2, 0xe}, {0xfff8, 0xf}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_atm={{0x8}, {0xe0, 0x2, [@TCA_ATM_HDR={0x3b, 0x3, "b0a55948b3092210799119a1cc8be6a13f68293d459f3e560273ca46f4c8b6fc338360f5af32886a10e19c215357d0819f2600619dba27"}, @TCA_ATM_HDR={0x1e, 0x3, "0cd7e9d516da195b000c057310e8c940c7480ebdc827160f2628"}, @TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x1a, 0x3, "2cdbce47e1f0131d818894d8d609046c204d5b72d49d"}, @TCA_ATM_HDR={0x3c, 0x3, "d8eab8082cdabcc65c45eb137806fdf909a6f82d8bacd60e004cba970134b2315e5588c6442df80b5d0de73eb78ad531fa1025fe3e5d4596"}, @TCA_ATM_FD={0x8, 0x1, r13}, @TCA_ATM_FD={0x8, 0x1, r14}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x40805) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e24, 0x9d0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='mm_vmscan_lru_isolate\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0e009900f707000070200061fd820000000000007a6b616c6c657230000000000000088005c54697e3fc2497710ce121dd0007000000"], 0xfffffffffffffe6c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r15, r16+10000000}, &(0x7f00000003c0)) 10.559793708s ago: executing program 5 (id=9021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0xffff000000000000) 10.407738578s ago: executing program 5 (id=9024): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x3, 0x7}, 0xc) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018006000600800a0000080002"], 0x2c}}, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f0000000000)=[{r4, 0x2000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="00000000050000000000000000", 0xd}], 0x1}, 0x0) 10.166213081s ago: executing program 5 (id=9027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700010000000000000a000000060001002a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3ff}}, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000180)=0x20000000, &(0x7f0000000200)=0x4) 10.109327747s ago: executing program 5 (id=9028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000100)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100003a00000009500740000000000079c69dc7ded5dbe11b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef790bb41931f9a3d4dd127c1b4e49f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e0648aa223a1f97a9832f442e8"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xcc, &(0x7f0000000180)=""/204, 0x0, 0x10, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x6008, r0}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000000040000000400000007"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r8, &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x24, &(0x7f00000007c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xea1c7209661da9db, 0x5, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x1, 0x8, 0x7, 0x9, 0x1, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x8, 0x30, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x8268, 0xb8, &(0x7f0000000340)=""/184, 0x41000, 0x18, '\x00', r4, @fallback=0xc, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x4, 0x8000}, 0x10, r6, r0, 0x3, &(0x7f00000004c0)=[0x1, r7, r8], &(0x7f0000000500)=[{0x3, 0x3, 0xd, 0x4}, {0x3, 0x5, 0xb, 0x3}, {0x4, 0x2, 0xa, 0x1}], 0x10, 0xd}, 0x94) 10.002508509s ago: executing program 5 (id=9032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_ack_irq\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.908621892s ago: executing program 2 (id=9148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x8000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) 1.839849763s ago: executing program 2 (id=9150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 1.772689762s ago: executing program 2 (id=9152): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b4050000000000007110ae0000000000060000000000000095000000000000001f3d4eb3edc86c04e323b24d9426e5339e162b4915ca4c92ec3a4a3935b6d581c304908f84d3f0e99ac4402141407b980e454bd575dd0dc0f1a682f6ba574e0700000000000000515ec25d0b1f1c8c9cd8eb72385ad6136789dcd5a694d3cfb4cec510d0d4d980e649aa4492032c5888f5f9b246b9f5117cb89f3ff246280a1ab186bbd42370e30e9a2028d82bd071a329b281c4393e1e8ce723f67552961cd23f056542399289825a0d3e13b1401cda214d8f87ba4e8a5fff7be68fe15f3c1df84f2086f79ab69bbb072848357dc3bbc144cca554fdf459a2b6dd58c29bafe29a5b1d630a94c14753a1b0d26203185b5735d393c9a6367767ff9f9edf5e6e7e94aefd0d49ad707a4a7027185086a66c0a321f386bc40caed35d63967e3809ad3187a72972c5c22c085f0a481e7ce9458e8c21647d100c9fc91eb8fe87d05e6545dcbe6cd28444fcdaac12f6469abc71af781f79c7aeafcdcadda97413e2539860ae46370405f742edd486fc26697c52d18f7adeaf79101b3da624ef12673df25d15d6f3f0be93636d8ea88eaafe20257812496258c87d3e97c35fbf3967e1ae86639489758fa8759006669c0d7ed1710d80bf8424e190cb78e36dd7e2e01034991761ff243405d75021155bf4e831208f0a845897ac198e36dc9e0928727ea3a6dc3f2f64aa4007cf52c41ffff9c7a51dc635d7d34f509725530e2f1d1f5ba90c325591f90c354764997bd47abcab66966d683c392ea96668506002589df1c948237f1533f3157fec94ebf2ce6347f6516a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x25}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c810}, 0x40040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="eeed7e572457eeacf13f6bc8b6671528ea4d10df85d84dae0a147a43a1a1929d7d"], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$inet6(0xa, 0x5, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000040)={r11, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000180)=0x0) sendmsg$sock(r8, &(0x7f0000001bc0)={&(0x7f00000001c0)=@nfc={0x27, r12, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000002c0)="ffb9790dadafe86d609603600e3a03095f488dcc26bdcf827a769f1b81c76ccdde9575d32a2232596fe434a99fe22d39f8109c0fafdea6e24940a0a3a156c4c92ef4f43fe26f83727db7994e64e48563a6e3906e29a1d83126b259a91bdcb10737769367772cfb1649dbc881dab0d885f65c25b06b23c8b8fece4fe0559d25cc095ab1fa94e3d808a2ed5473db904595c83ee207e60466b8", 0x98}, {&(0x7f0000000380)="b443c560f0bda1a3985af946f34021d286947895b16de83c6aebcc1fbc098e39144e362f939e81ef62dabde27b8ef6dd666449b5b8ea46a09e3c4b4392bc1c82e1ecc3a1bf8f5516677e4c1847bd9aa6e3e77bc43fbf1d547e20f98470ac7c65532af61e0798a272a5979ac37c3b2a7f9fa50615d669324db7a0432086f5bb3dbcb253072d0c092bf28d4e525fa663a67db2827bc2a4b7e2", 0x98}, {&(0x7f0000000440)="91b00d9ca05702e615c41c543fd01477e620bdd070dcbeb043844a0e4593465c626e1e648d80477b0455af2fc374bd38e85ff7fd33dfb6a266181effdd0357f0a04cacb945507f697eb0f082ba83a4de5a5e18f4770461158dc9a3d4c9aebce9cbde6e28fe642acb3a84e21ddc6bcc768ff7351a48e998fa0c56696aa0cc5c9fbaeda0a3bbc273c37e6a01dad2c6ddf84f5573914d0859c72e3948f73d425ee9740871b413d7b0ac4ab63709dc26641acfb7004de0ca213763da6ed2229d041b224e51c8f95fbac04b449e69300068da3e", 0xd1}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000540)="ff91519aa57356f046786bbd8dd950f9d8c55a58801591d9f6243cc49768921bc6b0a4e7085d75fe7f00b22ab6ecc5c0645f7c1141772adf32887faa1e60a6d5f9214ca6a4b4fb705d0a3a7b583fd2fb2fd5902627cf51e2ffdbdd143fc05c134728f7c7408f0aab5d398a7702d5519d8a7c74bbdf9db784fa3cd46bf41749b8d8b5a22c61feedd9e426e82e970bcc55b56d1bf59334f33c03381bc59bb986d5836a19cefea1f8d1cd6a1a344770", 0xae}, {&(0x7f0000000600)="858dce9e3d22227cebbdef0b222da34fc4157d27dab2ab1b3879958e396e9c1abab3cb71ac0fb289654a39dd3bdc9ea377c0f842fdc83e618febc43014eba82036875a3bee3f896e0071e8089f47346b7b7dfb60a1c9adb14700", 0x5a}, {&(0x7f0000000700)="1cb1f410f529371188987295495b2e1f772ac47fbe0af05ca77792b52e3168dca26959cc54a14a6f03858f0f5e9ff386cc052157523e1e9f610667fea0efc3944b676ddf61eaf642a83b364b8afd573de763816b8382ca125f883b40805a9f55558f2e237b18cc5929784be24213795ffd279fe2417c93f7fd5dbf2a1e6750ef97a56358b1b65690dea9644378aaf024b10bf9bd", 0x94}, {&(0x7f0000000240)="237fd2510e7ba79f03f8f15319a004579b38e5e1745a7938595f38e065738fa79d26e812", 0x24}, {&(0x7f00000007c0)="6b2f5bded8648b899be294c6cd89b01a15e34f50e41736da61bc663be7def00adc38274ba63d457f33944552cd3ce2df2d996388920d5bdf00e5a8a9dfc120fc0747cb48", 0x44}], 0x9, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}, 0x10) 1.634278567s ago: executing program 2 (id=9155): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111730000000000851000000200000085000000000000009500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x700, 0x80, 0x9, 0x3c53, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @local, {[@timestamp={0x44, 0x8, 0xbd, 0x0, 0xd, [0x1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x2, 0x1, {{0x12, 0x4, 0x3, 0x8, 0x48, 0x67, 0x0, 0x28, 0x4, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x1b, 0xd2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @remote, @rand_addr=0x64010102, @private=0xa010100, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x48, [@broadcast, @multicast2, @loopback, @multicast2]}, @end]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8, 0x20, 0x10001, 0x800, {{0x25, 0x4, 0x2, 0x5, 0x94, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x3d, 0x1, [{0x2, 0xe, "201366429e6ae549fa37b1ee"}, {0x6, 0xe, "f758ebfbd2bbc22d4aa8a85d"}, {0x7, 0xe, "f7fd2ac119ffd5573407e10e"}, {0x6, 0xd, "1388d19fdd1a5785ec7e68"}]}, @cipso={0x86, 0x14, 0x2, [{0x0, 0xe, "8876d7f47516c2a492cde009"}]}, @noop, @generic={0x82, 0xb, "54763cc651e404b7f5"}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0xf, "28dea641172a3e48a5cdf98ad5"}, @timestamp={0x44, 0x8, 0x1f, 0x0, 0x8, [0x1]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004050) 1.578508923s ago: executing program 2 (id=9156): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @loopback}, &(0x7f0000000400)=0xc) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000090a010400000000000000000a0000030900010073797a310000000008000540000000020900020095ed6470c62773797a32000000000900020073797a3000000000300011804eff01006c6f6f6b75700000a0ffffff1100010000000000000000000100000a77f82c577637bf543b1ef22cab825dc0ef5ea2d3959af7fce3f73e0971b1f681e33880689e9030d169c1dfcfa995a1cb19b59ee3d2b66b309c57ff0e6eabbc6e3fd69ebe08"], 0x98}, 0x1, 0x0, 0x0, 0x44000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) write(r5, &(0x7f0000000580)="240000001e005f03ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x22) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) recvfrom$x25(r5, &(0x7f0000000380)=""/93, 0x5d, 0x2, &(0x7f00000001c0), 0x12) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) socket$netlink(0x10, 0x3, 0xf) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) socket$inet_sctp(0x2, 0x1, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r9, 0x0, 0xfffffffffffffff9}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r10}, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) 918.915805ms ago: executing program 0 (id=9170): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="33d702f6741d64298eab3dc282428f8a", 0x10}], 0x1, 0x0, 0x0, 0x18800}], 0x1, 0x20044000) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x5, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 875.443227ms ago: executing program 6 (id=9171): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) clock_gettime(0xaf098b49fff259ae, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000100)) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) (async) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002700)=""/4089, &(0x7f0000001000)=0xff9) unshare(0x54010280) r3 = socket(0x8, 0x3, 0x0) (async) r4 = socket(0x2c, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000000c0)={0xca, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x108) (async) ioctl$IMGETCOUNT(r3, 0x61d9, 0x0) 839.688671ms ago: executing program 6 (id=9172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x7, 0x4, {{0x6, 0x4, 0x1, 0x14, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end]}}}}}) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}, @ldst={0x1, 0x2, 0x2, 0x1, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xf5}, @exit, @exit, @cb_func={0x18, 0xd, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x69, &(0x7f0000000240)=""/105, 0x41000, 0x9, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=[{0x3, 0x5, 0xb, 0x4}, {0x2, 0x5, 0x8, 0xb}, {0x2, 0x4, 0x10, 0xc}, {0x1, 0x3, 0xc, 0x9}], 0x10, 0x1000}, 0x94) 810.699422ms ago: executing program 0 (id=9173): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xfff, 0x6, 0x1ff}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)="70ed2c617ef3217f9a7061bce5589a8d7d1e8904c0d7aa955c39ddcb64fe9e7045a0e435a8f8fb51c1198433b78030f430d2e8ea384242cc9a0abca97de7189a7d2431d328ca55a7ad28ba19dcee8c59abf63c4978d5935b0a04ef7b1a6a7573de3882b63e9eb02aacb24f3bf9959a198fe1e03666f0163ab325df63b7745517936eb512d77cbb6f6000ea626bde2adea1f57fe592cd2630c8497efbb63cd0766b31ccf87f", 0xa5) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c0002800800034000000002080001400000001408000240000000120800064000000000080006400000000a0900010073797a30"], 0x110}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 699.445324ms ago: executing program 0 (id=9174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 557.061547ms ago: executing program 2 (id=9175): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r6}]}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)={0x478, 0x38, 0x100, 0x70bd2a, 0x25dfdbfe, {0x3}, [@nested={0x198, 0xd3, 0x0, 0x1, [@generic="0d2ba522766c1068b35913d4c3d93d2f8aaa277c1b70a5e551389e0f8c55e549f7c41c6bd372c783e66e76604881ca193e125e3dad925a5ab64a705b6101b34d5f4a6f83e1af8c5be34b55790892fb02dc25b4e65f2189536352407065e9e339a6cb782b56874464dce71bb825b91197ce18052392a57eacc41fd84b0ca7d3439df3e8cc63c621b9be281953eb10b2a118533a0fb224b29f409dec5158c972ca0c9d156a6ed5c7d9439e75c880d3a872a2fcc2dff7a525c5db71e055720620c14769f5", @generic="2b64e2f2163482867c19eda2b6066e8990730d38b1d5b1a3f836be506768e9921d97e6b1a97e542294d64efd6714fb3886c3d865135fa4bc3e55473b6823ccde817497e6c8c1e413e83f562ebd53", @typed={0xc, 0xc7, 0x0, 0x0, @u64=0xe1a}, @generic="7f2ed950038402bdb7d7157190e422a79a8b3a270f6dea90b69c3c9bd105ac177175d421ddedb96d78ae53f7db7d075a0b5fbf55d6cb164a79f7a3873a737eb11096c1a98928faf180a60cd1866166b7f0433351bc8d6aa7dea1e0e0a65293f20f2037179e7a314cfefbf7", @nested={0x4, 0xe9}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r6}]}, @generic, @typed={0x4, 0x10b}, @typed={0x4, 0x2a}, @nested={0xc, 0x8f, 0x0, 0x1, [@typed={0x8, 0xf7, 0x0, 0x0, @pid=r5}]}, @nested={0x11e, 0x11d, 0x0, 0x1, [@generic="3e283821c327ac2dee1723715b1d5400bce07b120577e424e33320cf25893dafde47cb7f65d5e8de7db9b1620908fe1b0d642b69b463f2cb32c1a2379c3c0632da7b031c70faa3064fff1809fd0d57cea396d817f0f1fd8888d94a0a00d8b4962b0867ad8ac0163deb22f945", @nested={0x4, 0x69}, @nested={0x4, 0x8f}, @nested={0x4, 0x11c}, @generic="b2f77e775b1f14ecf729a2652a53ffaea141060144feacef57dbb41b2d827ee58b44e5296f269b928fd796235d0a63bab1e26167789b220666821941b72178e7187a53368c5f268359522a1079b824533de7989d4522be2b4cfe89379be7529a13ca4a98be9ec7ccdfc20a5fedfa2461077f6863716768f505ad9fb74de57bcc13d248e4458d9254be59184bc043d9699a7bba443ce3db8dae53d7fa41ec9e2c1609"]}, @nested={0x6f, 0x116, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @nested={0x33, 0xa4, 0x0, 0x1, [@generic="d0789f3e166edb20212ccdc3926d2c9a43294bdc0e9b0e4e7f456c0649be096b91aaae2de5c2b8017deefb75fbb136"]}, @generic="8081a2732b670fc872791c873cadb510b370678545a808c7fad1b133ab7f063eaae38e6e980723256bcb0b1a02b5c1"]}, @generic="ab79c7027acdd77288129fd9f3332bf0bd86a489abb0fc3c98f8bb8907fdd1454c324bea87e6213c63d18713087b850153ffad910a91946ebe7033df7cd6421d58fe882b0e0cdbb3b17554d94bb376294afa0e53d29b267ce53c899dcff05f623a0021686ced4fcf80", @generic="acc7bc35d82815ecbdf49c4bc706165163e96daf4e71e78becae84de85056b3734cff4188d3d34720bcaef2a89e684a9753dca1c0f796cd07bdcf5f20d26b5a2786a063751e55f1e436684d95d4e58e0ee1e9b3b9d2097ae8f169afeca48a68fad3a94eecf579186e05327b3256f3e339d80cb2a78f0185ec9312351a410e29ec6e4cd5317850d094a4fe2207a89927591f564bf2ee62a6d2e8cfdfeaa98969997a24b530ce2150408aca75276a582997cfa832b", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@local}]}, 0x478}}, 0x4000085) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @local}, 0x10) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e20, @broadcast}}) close(0x3) 490.202983ms ago: executing program 0 (id=9176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000004000000000000000000000000000010000000a"], 0xb8}}, 0x0) 407.222219ms ago: executing program 6 (id=9177): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x1000}, 0x4) bind$isdn_base(r0, &(0x7f00000000c0)={0x22, 0xe2, 0x2, 0x7, 0xf7}, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r4 = openat$cgroup_ro(r0, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5e699453eb4b78a4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb13}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x12}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x98}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x84d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="59973c72d9e5"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0x1c0, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x5a, 0x3, 0x7, [{@private=0xa010102, 0x4}, {@remote, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x2}, {@local, 0x8}]}, @rr={0x7, 0xb, 0x80, [@multicast2, @multicast1]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x84, [@empty, @empty, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_addr={0x44, 0x2c, 0x6f, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xf3a5}, {@remote, 0x6a57}, {@private=0xa010102, 0x706}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x14, 0x62, 0x1, 0xd, [{@rand_addr=0x64010102, 0x3ff}, {@private=0xa010100, 0x6}]}, @rr={0x7, 0x7, 0x67, [@multicast2]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r4, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x14c, r2, 0x400, 0x2, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xafa380c25cef045b}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe0d9a41906b73a10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'tunl0\x00', r1, 0x7, 0x700, 0x7fff, 0x1, {{0xe, 0x4, 0x1, 0x12, 0x38, 0x65, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @local, {[@lsrr={0x83, 0x23, 0x20, [@multicast2, @private=0xa010100, @broadcast, @rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) bind$xdp(r4, &(0x7f0000000bc0)={0x2c, 0x0, r9, 0x2c, r4}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000c00)={r0}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, r11, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x72}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x200408d4}, 0x4008000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000d80)={0x2, 'veth0_macvtap\x00', {0x7db3}, 0x8}) sendmsg$unix(r10, &(0x7f0000000ec0)={&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000e40)="005a0be7f749011ed11ce36026ae24641c", 0x11}], 0x1, 0x0, 0x0, 0x20040080}, 0x20040041) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000f00)=[{0x1, 0x2, {0x0, 0xff}, {0xb1477cce8314b408, 0xff, 0x4}, 0xff, 0x1ff}, {0x3, 0x3, {0x1, 0x1, 0x3}, {0x2, 0xff, 0x1}, 0x2, 0xfe}, {0x1, 0x1, {0x2, 0xf0, 0x4}, {0x3, 0xf0, 0x2}, 0x45c71452e703fbfe, 0x1}, {0x0, 0x0, {}, {0x0, 0xf0, 0x3}, 0x1}], 0x80) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x99, 0x40}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x3f2, 0x200, 0x70bd2b, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001200)={'ip_vti0\x00', &(0x7f0000001180)={'erspan0\x00', r9, 0x80, 0x40, 0x1, 0x1000, {{0xc, 0x4, 0x0, 0x3f, 0x30, 0x64, 0x0, 0x7, 0x2f, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0xf, [{@loopback, 0xffff6470}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7, 0x3, 0x7]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) 375.894651ms ago: executing program 6 (id=9178): r0 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) r2 = socket$inet(0x2, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r5}, 0x10) (async) getsockopt$inet_int(r2, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 32) close(0x3) (rerun: 32) r6 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (rerun: 32) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x2, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) sendmsg$inet(r6, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 360.294795ms ago: executing program 0 (id=9179): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_queue_async_work\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) 182.445202ms ago: executing program 0 (id=9181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2, {}, 0xfd}, 0x18) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="3bcdcfc108e1480aac23bf257e46566ec7b4fe2adab1f8c50a0cc3f81d536aaf1f8e00e194412b8059ab1d01088aa8a9006aac035f87c006bde7e1bac09c12e31f5541664281807549936ef1d9ff4a06f13be5f23b319f69010727d1f214f86c62b657ef2b5714", 0x67}, {&(0x7f0000000080)="2edec18c74ea111b05b87e8f779a7e4e3145b851e20a7de064d019976aff2d38ae3328094065fd79e66ad7a5ee8968f72843b080e18b2814910c09a0c1b8", 0x3e}, {&(0x7f0000000100)="03b6f618830c98799084405a4904b0815238399bda1aecc815dbcf8e36afad6fe11b77347f08c3f015cb", 0x2a}, {&(0x7f0000000500)="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", 0xf31}], 0x4}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) r5 = gettid() write$cgroup_pid(r3, &(0x7f0000002f80)=r5, 0x12) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="f42f962fd4884c3c6b7ef226cdeba55f0051a6a31c11f6a8687d49588292fc67491cd66f4910eb09fae79a963f934e67a460450216f9bc1c0e7ba0a89ebac83a4d331c87ae117f2a9ceaf460428c61db27d8e9072eddf16695c8ca4b92ac0853fe170979c68c4fdfabf4c72235da7298da9094d989f425a362cbf247d842cd99d946b706c95d49e9994ddb1f178227f5e2070c7d733923b948b96eaf52b82c21859a65b8be712fdf539d820c0056000400000000000000cc5e1b77e3ce9cdfda47e461262c1c6bce4096e6fc75f082309693f826e71460bbf7314d333906cf723322320ba1c583a8f0484af7d44f07714cf909ca7f8d50b63c14b23fa8896a0c82ed46f3f6819878e16b23c8fde57c9d040018800000ec160f2a6fc2ea6b57f3c640f337df119de4952d14f765d3d1bb92f917cd0fe06900f6d2fda6de5cc6af739065140af11e2221b53440196f956a883513cfe6ed321238dd9181cca1eb9a8206845daf1ce02def5337589d162b82eccac7474038e94ede2677e4a679c0d04769aa5b385165050745466a0e4ff0d718ed707c8ce3b486ecb9dae2afa4d1966ef3a1ca3194d31a7a4df101ea8014008000ff0200000000000000000000000000016abd963524f3b455d358370bad0323094448684687de2846feb1cf6ef185ee3b8c66f06b5d3ff260c8492fae66e9248da67dd8b4e2bf6f9402bacd235caed1fa0c412f71c029a72fa48dca0b64fb8aaaa244b534d386acd710683c2db71d25f5993a0d476a5c7d539683c1e9051bb5a8e0462475e747f2b3551e81ec453e1b733e557c26d3944ef7364e6463745b7c4a14e950ab6b863f8308badf64e1827077b5398c13db022bbfcf96bc2ed830e1dc959a8f81351313c90935b75976ce6d9a26da148aea76ebec7dd0e232ccde40fd54f8ca7ece159f6eb40d0364f0596db87c02f0fca58100702a18af01f49f597d494a4fb7056c8fb7f8cfad776d675681737e0e42a740d3bc7a5ef848da479ae0fe9774eb6b0dff2a62ff341bdf1ebd408f75eadb5f018f0b3087b8818bffcf9896f65069fc8f772053f34ad71f4ab0dd74869cacd9c42f1291b52511deb99dd01d7f5c862c3fd4929f97eb1c77552250d34b105b0ba24bf8009a25754cc7cbac93eb7124345e04515efb69ac40699d671e19192bb232501389b7e7b7706ef1117141a5d5be00f77ec3edde67ff375bdd472d03ff21ee2c82dcef3cd7f6fa279b3b6a2486ebd332efaab339c4cdf2a5c4ff44207f6bbccf75aa9104008b80caf9ffdcbeaafd4bcac724ad72651e08000f00ac1414aa000000d1da8c8b8f8227e038d20d7b527bd632d41d8437ae63d2459a0ea2f12a2d9e84c19f31322825c158e23eeeac3b5469d4be388680e5250287fa843acb36197d7cac139b3612ec897278a5f53b92fd6bc11e24dfaa3ac5fe3461bb44a506a9b382e56ac949f4c5ee6cc61ccfab10eaccfd5d2e20406a0978242c831b080fc6553d48026bfc2bef12ab45bbdf16b94d40ddc5ecd40a805cfd2f6748c7929c57ddb907909c9a2fde85142b0fc9326dd1f28b051d502828de8a81"], 0x60c}, 0x1, 0x0, 0x0, 0x10}, 0x40000004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) 113.644818ms ago: executing program 6 (id=9182): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) 0s ago: executing program 6 (id=9183): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000003c0)={{0x8, 0x40}, 0x100, './file0\x00'}) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) (async) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x80000000, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6, @ANYBLOB="a63f85b633382af07855162bb98a0c85810756e9f038c97ca8620a65b476e2f00ffeac0973f6c56558e3caabcc0a7b1f5871d06bd59ae7f52589d01421214cf3aed8a29700d163479ad097f24ec4bd46f609eb2b6b91a9dc1fd51ded84cf29597a6109fdc8b40536b8098c2ec7967681f4d2820912f49d3f3c8819488ebbf621dc5fcc5f015990d1487ac67a99555dedbc025d52b99807efa4f7382534586b944ebf8a80af70c84fe2c4450c492d192b259773a01c91090b2a46488acd45b41bb33d57ae4226921847bfd37ee81eb1"], 0x44}}, 0x0) (async) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) sendmsg$tipc(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/149, 0x95}, {&(0x7f00000001c0)="fa317b27f1d3543cd89fca", 0xb}], 0x2, 0x0, 0x0, 0x84}, 0x8084) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r12) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFHWADDR(r12, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async) pread64(r11, &(0x7f0000000640)=""/4096, 0x1000, 0x100000001) (async) close(r10) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): ] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.990881][T31301] R13: 00007ff83abe6038 R14: 00007ff83abe5fa0 R15: 00007ffc05f1a0f8 [ 812.990916][T31301] [ 813.278094][T31293] tipc: Started in network mode [ 813.283624][T31293] tipc: Node identity 8ae55ee0a3da, cluster identity 4711 [ 813.292139][T31293] tipc: Enabled bearer , priority 0 [ 813.317716][T31296] syzkaller0: entered promiscuous mode [ 813.328131][T31296] syzkaller0: entered allmulticast mode [ 813.347013][T31293] tipc: Resetting bearer [ 813.359062][T31307] lo: left promiscuous mode [ 813.363765][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.381341][T31298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7574'. [ 813.406131][T31291] tipc: Resetting bearer [ 813.490479][T31291] tipc: Disabling bearer [ 813.582025][T31313] netlink: 'syz.9.7581': attribute type 15 has an invalid length. [ 813.611126][T31316] netlink: 'syz.2.7580': attribute type 1 has an invalid length. [ 813.727132][T31314] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7579'. [ 814.189945][T31345] netlink: 100 bytes leftover after parsing attributes in process `syz.8.7591'. [ 814.293023][T31349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7590'. [ 814.397228][T31354] syzkaller0: entered allmulticast mode [ 814.773715][T31376] xt_l2tp: unknown flags: 10 [ 814.853748][T31373] can: request_module (can-proto-0) failed. [ 815.012341][T31384] sctp: [Deprecated]: syz.6.7603 (pid 31384) Use of int in max_burst socket option. [ 815.012341][T31384] Use struct sctp_assoc_value instead [ 815.154228][T31390] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 815.185018][T31390] team0: Device gtp0 is up. Set it down before adding it as a team port [ 815.437922][T31412] netlink: 'syz.9.7609': attribute type 1 has an invalid length. [ 815.992008][T15671] Bluetooth: hci2: command 0x0406 tx timeout [ 816.211445][T31453] __nla_validate_parse: 9 callbacks suppressed [ 816.211468][T31453] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7620'. [ 816.282814][T31447] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7619'. [ 816.295962][T31447] tc_dump_action: action bad kind [ 816.473879][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7626'. [ 816.669930][T31475] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7627'. [ 816.673012][T31481] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7627'. [ 817.162992][T31500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7635'. [ 817.185884][T31500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7635'. [ 817.207919][T31500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7635'. [ 817.420312][T31514] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 817.437314][T31514] tipc: Enabled bearer , priority 10 [ 817.471794][T31510] hsr0 speed is unknown, defaulting to 1000 [ 817.503824][T31515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7639'. [ 817.520455][T31510] lo speed is unknown, defaulting to 1000 [ 817.583136][T31510] lo speed is unknown, defaulting to 1000 [ 817.848543][T31534] netlink: 'syz.9.7646': attribute type 1 has an invalid length. [ 817.892097][T31536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.027745][T31542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7647'. [ 818.136139][T31538] gretap1: entered promiscuous mode [ 818.175872][T31538] bond9: (slave gretap1): making interface the new active one [ 818.188326][T31538] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 818.198118][T31540] 8021q: VLANs not supported on ipvlan1 [ 818.249276][T31541] macvlan2: entered promiscuous mode [ 818.281843][T31541] macvlan2: entered allmulticast mode [ 818.307149][T31541] bond9: entered promiscuous mode [ 818.329447][T31541] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 818.357543][T31541] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 818.394421][T31541] bond9: left promiscuous mode [ 818.880445][T31562] tipc: Enabled bearer , priority 0 [ 818.913278][T31559] syzkaller0: entered promiscuous mode [ 818.938765][T31559] syzkaller0: entered allmulticast mode [ 818.949203][T31559] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 819.089900][T31562] tipc: Resetting bearer [ 819.180384][T31568] veth9: entered promiscuous mode [ 819.185546][T31568] veth9: entered allmulticast mode [ 819.219858][T31557] tipc: Resetting bearer [ 819.329136][T31576] netlink: 'syz.8.7656': attribute type 5 has an invalid length. [ 819.371124][T31557] tipc: Disabling bearer [ 819.891085][T31595] openvswitch: netlink: Key type 228 is out of range max 32 [ 820.128776][T31589] netlink: 'syz.8.7660': attribute type 1 has an invalid length. [ 820.243040][T31608] veth0: entered promiscuous mode [ 820.268346][T31607] veth0: left promiscuous mode [ 820.756778][T31627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.764094][T31627] IPv6: NLM_F_CREATE should be set when creating new route [ 820.878260][T31638] netlink: 'syz.9.7675': attribute type 16 has an invalid length. [ 820.934223][T31638] netlink: 'syz.9.7675': attribute type 17 has an invalid length. [ 821.016505][T31638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.028013][T31638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.125316][T31638] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 821.134620][T31638] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 821.142931][T31638] veth1_vlan: left promiscuous mode [ 821.154856][T31638] veth1_vlan: entered promiscuous mode [ 821.166477][T31638] veth1_macvtap: left promiscuous mode [ 821.196092][T31638] veth0_macvtap: left promiscuous mode [ 821.204562][T31638] veth0_macvtap: entered promiscuous mode [ 821.222540][T31638] veth1_macvtap: entered promiscuous mode [ 821.251132][T31638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 821.307477][T31638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 821.330132][T31638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 821.349930][ T49] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.350402][T31638] veth7: left promiscuous mode [ 821.367550][T31638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 821.385660][T31638] 8021q: adding VLAN 0 to HW filter on device bond7 [ 821.390236][ T1160] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.395359][T31638] 8021q: adding VLAN 0 to HW filter on device bond8 [ 821.411508][T31638] 8021q: adding VLAN 0 to HW filter on device bond9 [ 821.419233][T31638] gretap1: left promiscuous mode [ 821.426293][T31638] veth9: left promiscuous mode [ 821.433879][T31651] __nla_validate_parse: 9 callbacks suppressed [ 821.433897][T31651] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7679'. [ 821.449015][ T1160] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.450503][T31638] veth9: left allmulticast mode [ 821.465019][T24189] lo speed is unknown, defaulting to 1000 [ 821.471022][T24189] syz0: Port: 1 Link ACTIVE [ 821.538578][ T49] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.560325][ T49] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.609540][ T6476] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.644043][ T12] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.649031][T28154] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.653697][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.669549][T31650] tipc: Enabling of bearer rejected, failed to enable media [ 821.679666][T24189] lo speed is unknown, defaulting to 1000 [ 821.683045][ T6062] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 821.729070][ T6062] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 821.729483][T28154] bond5: (slave ip6gretap1): link status up again after 0 ms [ 821.745413][ T6062] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 821.785447][ T6062] bond4: (slave veth3): making interface the new active one [ 821.825802][ T6062] bond4: active interface up! [ 821.849906][ T12] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.876742][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.896036][T31656] FAULT_INJECTION: forcing a failure. [ 821.896036][T31656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.902770][ T12] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.954384][T31656] CPU: 0 UID: 0 PID: 31656 Comm: syz.6.7681 Not tainted syzkaller #0 PREEMPT(full) [ 821.954415][T31656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 821.954428][T31656] Call Trace: [ 821.954437][T31656] [ 821.954447][T31656] dump_stack_lvl+0x189/0x250 [ 821.954477][T31656] ? __pfx____ratelimit+0x10/0x10 [ 821.954500][T31656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.954525][T31656] ? __pfx__printk+0x10/0x10 [ 821.954553][T31656] ? __might_fault+0xb0/0x130 [ 821.954595][T31656] should_fail_ex+0x414/0x560 [ 821.954637][T31656] _copy_from_user+0x2d/0xb0 [ 821.954665][T31656] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 821.954692][T31656] ? rcu_is_watching+0x15/0xb0 [ 821.954719][T31656] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 821.954745][T31656] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 821.954770][T31656] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 821.954800][T31656] ? policy_nodemask+0x27c/0x720 [ 821.954842][T31656] ip_generic_getfrag+0x12f/0x2b0 [ 821.954874][T31656] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 821.954902][T31656] ? skb_page_frag_refill+0x199/0x320 [ 821.954940][T31656] __ip6_append_data+0x222d/0x3f30 [ 821.954971][T31656] ? __lock_acquire+0xab9/0xd20 [ 821.955025][T31656] ? __pfx_raw6_getfrag+0x10/0x10 [ 821.955069][T31656] ? __pfx___ip6_append_data+0x10/0x10 [ 821.955098][T31656] ? __pfx_ip6_mtu+0x10/0x10 [ 821.955138][T31656] ip6_append_data+0x1c4/0x380 [ 821.955174][T31656] ? __pfx_raw6_getfrag+0x10/0x10 [ 821.955200][T31656] rawv6_sendmsg+0x127a/0x1820 [ 821.955242][T31656] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 821.955273][T31656] ? __lock_acquire+0xab9/0xd20 [ 821.955319][T31656] ? __pfx_aa_sk_perm+0x10/0x10 [ 821.955355][T31656] ? sock_rps_record_flow+0x19/0x410 [ 821.955387][T31656] ? inet_sendmsg+0x2f4/0x370 [ 821.955415][T31656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.955441][T31656] __sock_sendmsg+0x19c/0x270 [ 821.955475][T31656] sock_write_iter+0x258/0x330 [ 821.955507][T31656] ? __pfx_sock_write_iter+0x10/0x10 [ 821.955562][T31656] do_iter_readv_writev+0x619/0x8b0 [ 821.955596][T31656] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 821.955627][T31656] ? common_file_perm+0x1b5/0x230 [ 821.955653][T31656] ? bpf_lsm_file_permission+0x9/0x20 [ 821.955677][T31656] ? security_file_permission+0x75/0x290 [ 821.955706][T31656] ? rw_verify_area+0x255/0x4d0 [ 821.955737][T31656] vfs_writev+0x31a/0x960 [ 821.955763][T31656] ? __lock_acquire+0xab9/0xd20 [ 821.955795][T31656] ? __pfx_vfs_writev+0x10/0x10 [ 821.955832][T31656] ? __fget_files+0x2a/0x420 [ 821.955857][T31656] ? __fget_files+0x3a0/0x420 [ 821.955874][T31656] ? __fget_files+0x2a/0x420 [ 821.955904][T31656] do_writev+0x14d/0x2d0 [ 821.955928][T31656] ? __pfx_do_writev+0x10/0x10 [ 821.955946][T31656] ? rcu_is_watching+0x15/0xb0 [ 821.955972][T31656] ? do_syscall_64+0xbe/0x3b0 [ 821.955997][T31656] do_syscall_64+0xfa/0x3b0 [ 821.956019][T31656] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.956040][T31656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.956060][T31656] ? clear_bhb_loop+0x60/0xb0 [ 821.956085][T31656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.956105][T31656] RIP: 0033:0x7fa57018eec9 [ 821.956124][T31656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.956143][T31656] RSP: 002b:00007fa570f6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 821.956164][T31656] RAX: ffffffffffffffda RBX: 00007fa5703e5fa0 RCX: 00007fa57018eec9 [ 821.956180][T31656] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 821.956194][T31656] RBP: 00007fa570f6e090 R08: 0000000000000000 R09: 0000000000000000 [ 821.956207][T31656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.956220][T31656] R13: 00007fa5703e6038 R14: 00007fa5703e5fa0 R15: 00007ffdb68a59e8 [ 821.956254][T31656] [ 822.358285][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.378939][ T12] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.398716][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.421934][T31662] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7683'. [ 822.480721][T31662] netlink: 'syz.9.7683': attribute type 1 has an invalid length. [ 822.498832][T31662] netlink: 'syz.9.7683': attribute type 2 has an invalid length. [ 822.947793][T31677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7687'. [ 822.983007][T31683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7689'. [ 822.993656][ T6472] net_ratelimit: 12 callbacks suppressed [ 822.993677][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 823.175011][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 823.225600][T31691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7692'. [ 823.355341][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 823.517651][T31701] netlink: 'syz.9.7694': attribute type 10 has an invalid length. [ 823.568708][T31701] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 823.591514][T31704] netlink: 'syz.9.7694': attribute type 10 has an invalid length. [ 823.600810][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 823.622614][T31703] netlink: 'syz.6.7693': attribute type 4 has an invalid length. [ 823.751219][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 823.805582][T31707] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7695'. [ 823.821784][T31709] FAULT_INJECTION: forcing a failure. [ 823.821784][T31709] name failslab, interval 1, probability 0, space 0, times 0 [ 823.840324][T31709] CPU: 0 UID: 0 PID: 31709 Comm: syz.5.7696 Not tainted syzkaller #0 PREEMPT(full) [ 823.840354][T31709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 823.840367][T31709] Call Trace: [ 823.840375][T31709] [ 823.840385][T31709] dump_stack_lvl+0x189/0x250 [ 823.840414][T31709] ? __pfx____ratelimit+0x10/0x10 [ 823.840436][T31709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.840468][T31709] ? __pfx__printk+0x10/0x10 [ 823.840503][T31709] ? __pfx___might_resched+0x10/0x10 [ 823.840529][T31709] should_fail_ex+0x414/0x560 [ 823.840564][T31709] should_failslab+0xa8/0x100 [ 823.840595][T31709] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 823.840625][T31709] ? __alloc_skb+0x112/0x2d0 [ 823.840645][T31709] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 823.840678][T31709] __alloc_skb+0x112/0x2d0 [ 823.840706][T31709] __ip6_append_data+0x2c16/0x3f30 [ 823.840737][T31709] ? __lock_acquire+0xab9/0xd20 [ 823.840791][T31709] ? __pfx_raw6_getfrag+0x10/0x10 [ 823.840835][T31709] ? __pfx___ip6_append_data+0x10/0x10 [ 823.840864][T31709] ? __pfx_ip6_mtu+0x10/0x10 [ 823.840903][T31709] ip6_append_data+0x1c4/0x380 [ 823.840940][T31709] ? __pfx_raw6_getfrag+0x10/0x10 [ 823.840965][T31709] rawv6_sendmsg+0x127a/0x1820 [ 823.841009][T31709] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 823.841039][T31709] ? __lock_acquire+0xab9/0xd20 [ 823.841085][T31709] ? __pfx_aa_sk_perm+0x10/0x10 [ 823.841119][T31709] ? sock_rps_record_flow+0x19/0x410 [ 823.841152][T31709] ? inet_sendmsg+0x2f4/0x370 [ 823.841179][T31709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.841205][T31709] __sock_sendmsg+0x19c/0x270 [ 823.841243][T31709] sock_write_iter+0x258/0x330 [ 823.841275][T31709] ? __pfx_sock_write_iter+0x10/0x10 [ 823.841330][T31709] do_iter_readv_writev+0x619/0x8b0 [ 823.841367][T31709] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 823.841394][T31709] ? common_file_perm+0x1b5/0x230 [ 823.841420][T31709] ? bpf_lsm_file_permission+0x9/0x20 [ 823.841447][T31709] ? security_file_permission+0x75/0x290 [ 823.841477][T31709] ? rw_verify_area+0x255/0x4d0 [ 823.841508][T31709] vfs_writev+0x31a/0x960 [ 823.841533][T31709] ? __lock_acquire+0xab9/0xd20 [ 823.841565][T31709] ? __pfx_vfs_writev+0x10/0x10 [ 823.841602][T31709] ? __fget_files+0x2a/0x420 [ 823.841626][T31709] ? __fget_files+0x3a0/0x420 [ 823.841643][T31709] ? __fget_files+0x2a/0x420 [ 823.841672][T31709] do_writev+0x14d/0x2d0 [ 823.841695][T31709] ? __pfx_do_writev+0x10/0x10 [ 823.841713][T31709] ? rcu_is_watching+0x15/0xb0 [ 823.841740][T31709] ? do_syscall_64+0xbe/0x3b0 [ 823.841768][T31709] do_syscall_64+0xfa/0x3b0 [ 823.841789][T31709] ? lockdep_hardirqs_on+0x9c/0x150 [ 823.841811][T31709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.841831][T31709] ? clear_bhb_loop+0x60/0xb0 [ 823.841856][T31709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.841876][T31709] RIP: 0033:0x7ff83a98eec9 [ 823.841894][T31709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.841914][T31709] RSP: 002b:00007ff83b7b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 823.841935][T31709] RAX: ffffffffffffffda RBX: 00007ff83abe5fa0 RCX: 00007ff83a98eec9 [ 823.841951][T31709] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 823.841965][T31709] RBP: 00007ff83b7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 823.841978][T31709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.841990][T31709] R13: 00007ff83abe6038 R14: 00007ff83abe5fa0 R15: 00007ffc05f1a0f8 [ 823.842024][T31709] [ 824.269950][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 824.333983][T31716] netlink: 'syz.5.7698': attribute type 1 has an invalid length. [ 824.364675][T31716] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 824.379004][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 824.614346][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 824.748979][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 824.879490][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 824.883061][T31744] netlink: 'syz.5.7706': attribute type 1 has an invalid length. [ 824.918832][T31744] netlink: 'syz.5.7706': attribute type 3 has an invalid length. [ 824.947644][T31744] netlink: 216 bytes leftover after parsing attributes in process `syz.5.7706'. [ 824.966402][T31744] NCSI netlink: No device for ifindex 813332851 [ 825.213589][T31757] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.7712'. [ 825.402517][T31766] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7715'. [ 825.417980][T31766] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7715'. [ 825.743873][T31784] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 826.316115][T31824] hsr0 speed is unknown, defaulting to 1000 [ 826.341654][T31824] lo speed is unknown, defaulting to 1000 [ 826.359501][T31824] lo speed is unknown, defaulting to 1000 [ 826.490003][T31833] __nla_validate_parse: 6 callbacks suppressed [ 826.490021][T31833] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7735'. [ 826.762833][T31843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7740'. [ 827.395312][T31877] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7752'. [ 827.554371][T31878] : entered promiscuous mode [ 827.665767][T28514] IPVS: starting estimator thread 0... [ 827.682197][T31885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7753'. [ 827.736404][T31896] atomic_op ffff88802472b998 conn xmit_atomic 0000000000000000 [ 827.778937][T31891] IPVS: using max 25 ests per chain, 60000 per kthread [ 828.078790][ T6476] net_ratelimit: 21 callbacks suppressed [ 828.078813][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 828.231461][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 828.370008][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 828.413010][T31935] netlink: 'syz.5.7769': attribute type 1 has an invalid length. [ 828.509337][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 828.802352][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 828.845354][T31949] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7776'. [ 828.931519][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 829.059197][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 829.207865][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7785'. [ 829.501246][T31992] netlink: 268 bytes leftover after parsing attributes in process `syz.9.7789'. [ 830.002949][ T6472] bond2 (unregistering): (slave gretap3): Releasing active interface [ 830.134636][ T6472] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 830.346812][ T6472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.358197][ T6472] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 830.380252][ T6472] bond0 (unregistering): Released all slaves [ 830.398803][ T6472] bond1 (unregistering): Released all slaves [ 830.414146][ T6472] bond2 (unregistering): Released all slaves [ 830.574976][ T6472] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 830.584090][ T6472] wireguard0: left promiscuous mode [ 830.592573][ T6472] bond3 (unregistering): Released all slaves [ 830.607000][ T6472] bond4 (unregistering): Released all slaves [ 830.738715][ T6472] bond5 (unregistering): Released all slaves [ 830.882260][ T6472] bond6 (unregistering): Released all slaves [ 830.901399][ T6472] bond7 (unregistering): Released all slaves [ 831.039052][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 831.132043][ T6472] : left promiscuous mode [ 831.189889][T32017] netlink: 'syz.9.7797': attribute type 1 has an invalid length. [ 831.265565][T32018] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7797'. [ 831.290772][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 831.347185][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 831.490307][ T6472] tipc: Disabling bearer [ 831.650324][T32043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7803'. [ 831.688018][ T6472] tipc: Left network mode [ 831.888169][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 831.961774][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 831.970305][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 831.979686][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 831.987838][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 831.996595][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 832.006944][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 832.031064][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 832.070363][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 832.097924][T32051] netlink: 'syz.2.7807': attribute type 2 has an invalid length. [ 832.152227][T32058] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7809'. [ 832.205541][T32058] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7809'. [ 832.253766][T32060] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7810'. [ 832.344771][T32069] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 833.055949][ T6472] hsr_slave_0: left promiscuous mode [ 833.068275][ T6472] hsr_slave_1: left promiscuous mode [ 833.084149][ T6472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.096069][ T6472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.937920][ T6472] team0 (unregistering): Port device team_slave_1 removed [ 834.011678][ T6472] team0 (unregistering): Port device team_slave_0 removed [ 834.524954][T32125] veth1_macvtap: left promiscuous mode [ 834.554956][T32129] tipc: Enabling of bearer rejected, failed to enable media [ 834.595439][ T12] net_ratelimit: 7 callbacks suppressed [ 834.595460][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 834.748617][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 834.775662][T32150] lo: entered allmulticast mode [ 834.800635][T32150] tunl0: entered allmulticast mode [ 834.822123][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7832'. [ 834.844445][T32150] gre0: left promiscuous mode [ 834.865744][T32150] gre0: entered allmulticast mode [ 834.891113][T32150] gretap0: entered allmulticast mode [ 834.906611][T32162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7832'. [ 834.970190][T32150] erspan0: entered allmulticast mode [ 835.003423][T32150] ip_vti0: entered allmulticast mode [ 835.042502][T32150] ip6_vti0: entered allmulticast mode [ 835.097420][T32150] sit0: entered allmulticast mode [ 835.144859][T32150] ip6tnl0: entered allmulticast mode [ 835.244034][T32150] ip6gre0: entered allmulticast mode [ 835.265068][T32150] syz_tun: entered allmulticast mode [ 835.280939][T32150] ip6gretap0: entered allmulticast mode [ 835.294412][T32150] bridge0: entered allmulticast mode [ 835.304612][T32150] bond0: entered allmulticast mode [ 835.337937][T32150] team0: entered allmulticast mode [ 835.368794][T32150] dummy0: entered allmulticast mode [ 835.387581][T32150] nlmon0: entered allmulticast mode [ 835.410324][T32150] batadv0: entered allmulticast mode [ 835.442958][T32150] veth0: entered allmulticast mode [ 835.470651][T32150] veth1: entered allmulticast mode [ 835.499601][T32150] wg0: entered allmulticast mode [ 835.514196][T32150] wg1: entered allmulticast mode [ 835.524212][T32150] wg2: entered allmulticast mode [ 835.542271][T32150] veth0_to_bridge: entered allmulticast mode [ 835.555030][T32150] bridge_slave_0: entered allmulticast mode [ 835.570403][T32150] veth1_to_bridge: entered allmulticast mode [ 835.582508][T32150] bridge_slave_1: entered allmulticast mode [ 835.592968][T32150] veth0_to_bond: entered allmulticast mode [ 835.611195][T32150] bond_slave_0: entered allmulticast mode [ 835.617785][T32150] veth1_to_bond: entered allmulticast mode [ 835.635782][T32150] bond_slave_1: entered allmulticast mode [ 835.643760][T32150] veth0_to_team: entered allmulticast mode [ 835.663521][T32150] team_slave_0: entered allmulticast mode [ 835.676493][T32150] veth1_to_team: entered allmulticast mode [ 835.685874][T32150] team_slave_1: entered allmulticast mode [ 835.694551][T32150] veth0_to_batadv: entered allmulticast mode [ 835.706169][T32150] batadv_slave_0: entered allmulticast mode [ 835.717465][T32150] veth1_to_batadv: entered allmulticast mode [ 835.728941][T32150] batadv_slave_1: entered allmulticast mode [ 835.740301][T32150] xfrm0: entered allmulticast mode [ 835.750697][T32150] veth0_to_hsr: entered allmulticast mode [ 835.760997][T32150] hsr_slave_0: entered allmulticast mode [ 835.784902][T32150] veth1_to_hsr: entered allmulticast mode [ 835.802999][T32150] hsr_slave_1: entered allmulticast mode [ 835.822477][T32150] hsr0: entered allmulticast mode [ 835.832322][T32150] veth1_virt_wifi: entered allmulticast mode [ 835.842498][T32150] veth0_virt_wifi: entered allmulticast mode [ 835.856598][T32150] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 835.867887][T32150] veth1_vlan: entered allmulticast mode [ 835.883349][T32150] veth0_vlan: entered allmulticast mode [ 835.924423][T32150] vlan0: entered allmulticast mode [ 835.934614][T32150] vlan1: entered allmulticast mode [ 835.946291][T32150] macvlan0: entered allmulticast mode [ 835.961249][T32150] macvlan1: entered allmulticast mode [ 835.980366][T32150] ipvlan0: entered allmulticast mode [ 835.987420][T32150] ipvlan1: entered allmulticast mode [ 835.996474][T32150] veth1_macvtap: entered allmulticast mode [ 836.012741][T32150] veth0_macvtap: entered allmulticast mode [ 836.039192][T32150] macvtap0: entered allmulticast mode [ 836.055313][T32150] geneve0: entered allmulticast mode [ 836.072049][T32150] geneve1: entered allmulticast mode [ 836.082421][T32150] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 836.100596][T32150] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 836.121769][T32150] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 836.142943][T32150] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 836.157568][T32150] mac80211_hwsim hwsim75 wlan1: entered allmulticast mode [ 836.180466][T32150] bond1: entered allmulticast mode [ 836.186697][T32150] bond2: entered allmulticast mode [ 836.193168][T32150] ipvlan2: entered allmulticast mode [ 836.199655][T32150] bridge1: entered allmulticast mode [ 836.205177][T32150] bond3: entered allmulticast mode [ 836.210760][T32150] mac80211_hwsim hwsim76 wlan2: entered allmulticast mode [ 836.219529][T32150] ipip0: entered allmulticast mode [ 836.227777][T32150] vxlan0: entered allmulticast mode [ 836.234459][T32150] bridge2: entered allmulticast mode [ 836.244872][T32150] bond4: entered allmulticast mode [ 836.251574][T32150] geneve2: entered allmulticast mode [ 836.257065][T32150] veth2: entered allmulticast mode [ 836.263184][T32150] veth3: entered allmulticast mode [ 836.269765][T32150] gre1: entered allmulticast mode [ 836.279010][T32150] bond5: entered allmulticast mode [ 836.284620][T32150] veth4: entered allmulticast mode [ 836.296549][T32150] veth5: entered allmulticast mode [ 836.304293][T32150] veth6: entered allmulticast mode [ 836.315799][T32150] veth7: entered allmulticast mode [ 836.322019][T32150] ip6gre1: entered allmulticast mode [ 836.333256][T32150] veth8: entered allmulticast mode [ 836.339282][T32150] veth9: entered allmulticast mode [ 836.345493][T32150] bridge3: entered allmulticast mode [ 836.364725][T32150] ip6gre2: entered allmulticast mode [ 836.379803][T32150] mac80211_hwsim hwsim87 wlan3: entered allmulticast mode [ 836.394650][T32150] bridge4: entered allmulticast mode [ 836.400546][T32150] mac80211_hwsim hwsim90 wlan4: entered allmulticast mode [ 836.408140][T32150] syzkaller1: entered allmulticast mode [ 836.422546][T32161] syzkaller1: entered promiscuous mode [ 836.442918][T32162] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 836.453118][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 836.472056][T32162] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 836.498901][T32162] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 836.527206][T32189] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 836.684531][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.752349][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.782417][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.810148][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.859393][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.163285][ T6472] IPVS: stop unused estimator thread 0... [ 837.165431][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.187492][T32220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7847'. [ 837.439588][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.653503][T32253] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7856'. [ 837.864350][T32267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7860'. [ 837.874584][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.911919][T32267] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7860'. [ 838.019464][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 838.064320][T32286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7865'. [ 838.138965][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 838.149598][T15843] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 838.167096][T32278] openvswitch: netlink: Invalid VLAN frame [ 838.182395][T32294] netlink: 80 bytes leftover after parsing attributes in process `syz.8.7866'. [ 838.199455][T32294] netlink: 80 bytes leftover after parsing attributes in process `syz.8.7866'. [ 839.043659][T32325] validate_nla: 25 callbacks suppressed [ 839.043678][T32325] netlink: 'syz.2.7875': attribute type 2 has an invalid length. [ 839.213311][T32334] netlink: 'syz.6.7881': attribute type 9 has an invalid length. [ 839.221393][T32334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7881'. [ 839.250715][T32342] netlink: 232 bytes leftover after parsing attributes in process `syz.8.7883'. [ 839.402422][T32352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7884'. [ 839.516373][T32356] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 839.704089][ T6476] net_ratelimit: 14 callbacks suppressed [ 839.704111][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 839.840922][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 839.959347][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 840.074347][T32378] batman_adv: batadv0: Adding interface: netdevsim0 [ 840.082254][T32378] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.111272][T32378] batman_adv: batadv0: Interface activated: netdevsim0 [ 840.130581][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 840.313200][T32389] FAULT_INJECTION: forcing a failure. [ 840.313200][T32389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.319154][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 840.336788][T32388] netlink: 'syz.6.7900': attribute type 2 has an invalid length. [ 840.355674][T32389] CPU: 0 UID: 0 PID: 32389 Comm: syz.9.7901 Not tainted syzkaller #0 PREEMPT(full) [ 840.355703][T32389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 840.355725][T32389] Call Trace: [ 840.355732][T32389] [ 840.355741][T32389] dump_stack_lvl+0x189/0x250 [ 840.355770][T32389] ? __pfx____ratelimit+0x10/0x10 [ 840.355792][T32389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.355815][T32389] ? __pfx__printk+0x10/0x10 [ 840.355843][T32389] ? __might_fault+0xb0/0x130 [ 840.355888][T32389] should_fail_ex+0x414/0x560 [ 840.355922][T32389] _copy_from_iter+0x1de/0x1790 [ 840.355950][T32389] ? rcu_is_watching+0x15/0xb0 [ 840.355971][T32389] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 840.356000][T32389] ? __pfx__copy_from_iter+0x10/0x10 [ 840.356024][T32389] ? __build_skb_around+0x257/0x3e0 [ 840.356052][T32389] ? netlink_sendmsg+0x642/0xb30 [ 840.356070][T32389] ? skb_put+0x11b/0x210 [ 840.356096][T32389] netlink_sendmsg+0x6b2/0xb30 [ 840.356128][T32389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.356153][T32389] ? aa_sock_msg_perm+0xf1/0x1d0 [ 840.356175][T32389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 840.356204][T32389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.356227][T32389] __sock_sendmsg+0x219/0x270 [ 840.356261][T32389] ____sys_sendmsg+0x505/0x830 [ 840.356291][T32389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.356324][T32389] ? import_iovec+0x74/0xa0 [ 840.356350][T32389] ___sys_sendmsg+0x21f/0x2a0 [ 840.356377][T32389] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.356434][T32389] ? __fget_files+0x2a/0x420 [ 840.356451][T32389] ? __fget_files+0x3a0/0x420 [ 840.356483][T32389] __x64_sys_sendmsg+0x19b/0x260 [ 840.356512][T32389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.356548][T32389] ? __pfx_ksys_write+0x10/0x10 [ 840.356571][T32389] ? rcu_is_watching+0x15/0xb0 [ 840.356596][T32389] ? do_syscall_64+0xbe/0x3b0 [ 840.356621][T32389] do_syscall_64+0xfa/0x3b0 [ 840.356641][T32389] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.356660][T32389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.356680][T32389] ? clear_bhb_loop+0x60/0xb0 [ 840.356704][T32389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.356722][T32389] RIP: 0033:0x7f805898eec9 [ 840.356741][T32389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.356759][T32389] RSP: 002b:00007f80597e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.356782][T32389] RAX: ffffffffffffffda RBX: 00007f8058be5fa0 RCX: 00007f805898eec9 [ 840.356798][T32389] RDX: 0000000004004000 RSI: 0000200000000240 RDI: 0000000000000004 [ 840.356812][T32389] RBP: 00007f80597e1090 R08: 0000000000000000 R09: 0000000000000000 [ 840.356824][T32389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.356837][T32389] R13: 00007f8058be6038 R14: 00007f8058be5fa0 R15: 00007ffe43ac5b08 [ 840.356869][T32389] [ 840.684604][T32395] dvmrp0: left allmulticast mode [ 840.759838][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 840.870024][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 840.896885][T32402] lo: left allmulticast mode [ 841.114767][T32402] tunl0: left allmulticast mode [ 841.135344][T32402] gre0: left allmulticast mode [ 841.145481][T32402] gretap0: left allmulticast mode [ 841.169758][T32402] erspan0: left allmulticast mode [ 841.175218][T32402] ip_vti0: left allmulticast mode [ 841.190849][T32402] ip6_vti0: left allmulticast mode [ 841.196217][T32402] sit0: left allmulticast mode [ 841.205481][T32402] ip6tnl0: left allmulticast mode [ 841.212724][T32402] ip6gre0: left allmulticast mode [ 841.215927][T32415] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 841.218054][T32402] syz_tun: left allmulticast mode [ 841.224375][T32415] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 841.241577][T32402] ip6gretap0: left allmulticast mode [ 841.251618][T32402] bond0: left allmulticast mode [ 841.268044][T32402] team0: left allmulticast mode [ 841.276624][T32402] dummy0: left allmulticast mode [ 841.282195][T32402] nlmon0: left allmulticast mode [ 841.287567][T32402] batadv0: left allmulticast mode [ 841.293062][T32402] veth0: left allmulticast mode [ 841.300429][T32402] veth1: left allmulticast mode [ 841.306263][T32402] wg0: left allmulticast mode [ 841.311759][T32402] wg1: left allmulticast mode [ 841.316815][T32402] wg2: left allmulticast mode [ 841.322134][T32402] veth0_to_bridge: left allmulticast mode [ 841.331579][T32402] bridge_slave_0: left allmulticast mode [ 841.340865][T32402] veth1_to_bridge: left allmulticast mode [ 841.347651][T32402] bridge_slave_1: left allmulticast mode [ 841.354301][T32402] veth0_to_bond: left allmulticast mode [ 841.361421][T32402] bond_slave_0: left allmulticast mode [ 841.367821][T32402] veth1_to_bond: left allmulticast mode [ 841.374772][T32402] bond_slave_1: left allmulticast mode [ 841.382519][T32402] veth0_to_team: left allmulticast mode [ 841.389654][T32402] team_slave_0: left allmulticast mode [ 841.395953][T32402] veth1_to_team: left allmulticast mode [ 841.402503][T32402] team_slave_1: left allmulticast mode [ 841.410283][T32402] veth0_to_batadv: left allmulticast mode [ 841.416972][T32402] batadv_slave_0: left allmulticast mode [ 841.424798][T32402] veth1_to_batadv: left allmulticast mode [ 841.431645][T32402] batadv_slave_1: left allmulticast mode [ 841.438085][T32402] xfrm0: left allmulticast mode [ 841.443523][T32402] veth0_to_hsr: left allmulticast mode [ 841.451639][T32402] veth1_to_hsr: left allmulticast mode [ 841.460400][T32402] hsr0: left allmulticast mode [ 841.465904][T32402] hsr_slave_0: left allmulticast mode [ 841.471766][T32402] hsr_slave_1: left allmulticast mode [ 841.477447][T32402] veth1_virt_wifi: left allmulticast mode [ 841.484366][T32402] veth0_virt_wifi: left allmulticast mode [ 841.491168][T32402] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 841.498526][T32402] veth1_vlan: left allmulticast mode [ 841.504791][T32402] vlan0: left allmulticast mode [ 841.510236][T32402] vlan1: left allmulticast mode [ 841.515238][T32402] macvlan0: left allmulticast mode [ 841.520663][T32402] macvlan1: left allmulticast mode [ 841.526053][T32402] ipvlan0: left allmulticast mode [ 841.531307][T32402] ipvlan1: left allmulticast mode [ 841.536333][T32402] veth0_vlan: left allmulticast mode [ 841.541875][T32402] veth1_macvtap: left allmulticast mode [ 841.548233][T32402] veth0_macvtap: left allmulticast mode [ 841.555553][T32402] macvtap0: left allmulticast mode [ 841.562671][T32402] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 841.735751][T32428] Bluetooth: MGMT ver 1.23 [ 841.974412][T32437] tipc: Enabled bearer , priority 0 [ 842.025140][T32437] syzkaller0: entered promiscuous mode [ 842.036370][T32437] syzkaller0: entered allmulticast mode [ 842.091387][T32437] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 842.151857][T32437] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 842.176675][T32437] tipc: Resetting bearer [ 842.316728][T32437] tipc: Resetting bearer [ 842.354462][T32437] tipc: Disabling bearer [ 842.372479][T32459] tipc: Enabled bearer , priority 0 [ 842.380448][T32459] syzkaller0: entered promiscuous mode [ 842.386091][T32459] syzkaller0: entered allmulticast mode [ 842.416876][T32461] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 842.429380][T32461] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 842.508100][T32459] tipc: Resetting bearer [ 842.531494][T32458] tipc: Resetting bearer [ 842.611762][T32458] tipc: Disabling bearer [ 842.634431][T32468] dvmrp1: left allmulticast mode [ 842.937341][T32480] mac80211_hwsim hwsim75 wlan1: left allmulticast mode [ 842.965335][T32480] netlink: 'syz.8.7925': attribute type 10 has an invalid length. [ 843.163536][T32493] __nla_validate_parse: 5 callbacks suppressed [ 843.163557][T32493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7929'. [ 843.213286][T32494] "syz.2.7930" (32494) uses obsolete ecb(arc4) skcipher [ 843.240389][T32494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7930'. [ 843.425522][T32506] unsupported nla_type 26888 [ 843.615567][T32521] FAULT_INJECTION: forcing a failure. [ 843.615567][T32521] name failslab, interval 1, probability 0, space 0, times 0 [ 843.643928][T32527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7943'. [ 843.653277][T32521] CPU: 1 UID: 0 PID: 32521 Comm: syz.6.7940 Not tainted syzkaller #0 PREEMPT(full) [ 843.653304][T32521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 843.653315][T32521] Call Trace: [ 843.653324][T32521] [ 843.653333][T32521] dump_stack_lvl+0x189/0x250 [ 843.653362][T32521] ? __pfx____ratelimit+0x10/0x10 [ 843.653384][T32521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.653406][T32521] ? __pfx__printk+0x10/0x10 [ 843.653438][T32521] ? __pfx___might_resched+0x10/0x10 [ 843.653456][T32521] ? fs_reclaim_acquire+0x7d/0x100 [ 843.653481][T32521] should_fail_ex+0x414/0x560 [ 843.653515][T32521] should_failslab+0xa8/0x100 [ 843.653545][T32521] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 843.653573][T32521] ? __alloc_skb+0x112/0x2d0 [ 843.653602][T32521] __alloc_skb+0x112/0x2d0 [ 843.653629][T32521] netlink_ack+0x146/0xa50 [ 843.653648][T32521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 843.653673][T32521] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 843.653699][T32521] ? __pfx_nl80211_post_doit+0x10/0x10 [ 843.653725][T32521] ? __asan_memcpy+0x40/0x70 [ 843.653748][T32521] ? __pfx_ref_tracker_free+0x10/0x10 [ 843.653777][T32521] netlink_rcv_skb+0x28c/0x470 [ 843.653796][T32521] ? __lock_acquire+0xab9/0xd20 [ 843.653826][T32521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 843.653856][T32521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 843.653900][T32521] ? down_read+0x1ad/0x2e0 [ 843.653928][T32521] genl_rcv+0x28/0x40 [ 843.653961][T32521] netlink_unicast+0x82f/0x9e0 [ 843.654003][T32521] ? __pfx_netlink_unicast+0x10/0x10 [ 843.654037][T32521] ? netlink_sendmsg+0x642/0xb30 [ 843.654057][T32521] ? skb_put+0x11b/0x210 [ 843.654085][T32521] netlink_sendmsg+0x805/0xb30 [ 843.654119][T32521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.654146][T32521] ? aa_sock_msg_perm+0xf1/0x1d0 [ 843.654169][T32521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 843.654192][T32521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.654215][T32521] __sock_sendmsg+0x219/0x270 [ 843.654254][T32521] ____sys_sendmsg+0x505/0x830 [ 843.654287][T32521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.654323][T32521] ? import_iovec+0x74/0xa0 [ 843.654355][T32521] ___sys_sendmsg+0x21f/0x2a0 [ 843.654384][T32521] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.654451][T32521] ? __fget_files+0x2a/0x420 [ 843.654469][T32521] ? __fget_files+0x3a0/0x420 [ 843.654506][T32521] __x64_sys_sendmsg+0x19b/0x260 [ 843.654536][T32521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.654573][T32521] ? __pfx_ksys_write+0x10/0x10 [ 843.654602][T32521] ? rcu_is_watching+0x15/0xb0 [ 843.654629][T32521] ? do_syscall_64+0xbe/0x3b0 [ 843.654656][T32521] do_syscall_64+0xfa/0x3b0 [ 843.654678][T32521] ? lockdep_hardirqs_on+0x9c/0x150 [ 843.654699][T32521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.654720][T32521] ? clear_bhb_loop+0x60/0xb0 [ 843.654745][T32521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.654766][T32521] RIP: 0033:0x7fa57018eec9 [ 843.654784][T32521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.654803][T32521] RSP: 002b:00007fa570f6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.654824][T32521] RAX: ffffffffffffffda RBX: 00007fa5703e5fa0 RCX: 00007fa57018eec9 [ 843.654839][T32521] RDX: 0000000004004000 RSI: 0000200000000240 RDI: 0000000000000004 [ 843.654853][T32521] RBP: 00007fa570f6e090 R08: 0000000000000000 R09: 0000000000000000 [ 843.654866][T32521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.654879][T32521] R13: 00007fa5703e6038 R14: 00007fa5703e5fa0 R15: 00007ffdb68a59e8 [ 843.654913][T32521] [ 844.202873][T32534] netlink: 'syz.9.7948': attribute type 8 has an invalid length. [ 844.653912][T32569] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7962'. [ 844.718906][T15843] net_ratelimit: 21 callbacks suppressed [ 844.718936][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 844.859513][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 844.893860][T32582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7965'. [ 844.927736][T32582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7965'. [ 845.041990][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 845.182409][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 845.200028][T32597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7972'. [ 845.232509][T32600] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7972'. [ 845.331621][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 845.381214][T32606] hsr0 speed is unknown, defaulting to 1000 [ 845.389522][T32606] lo speed is unknown, defaulting to 1000 [ 845.397338][T32606] lo speed is unknown, defaulting to 1000 [ 845.432738][T32610] netlink: 300 bytes leftover after parsing attributes in process `syz.5.7976'. [ 845.478824][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 845.558524][T32616] Bluetooth: MGMT ver 1.23 [ 845.576139][T32617] tipc: Enabling of bearer rejected, failed to enable media [ 845.640102][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 845.655613][T32621] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7979'. [ 845.769271][T32626] openvswitch: netlink: IP tunnel dst address not specified [ 845.773922][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 845.979993][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 846.170220][T32648] netlink: 'syz.6.7985': attribute type 10 has an invalid length. [ 849.788769][T15843] net_ratelimit: 32 callbacks suppressed [ 849.788793][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 849.908736][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.018611][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.128815][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.238692][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.348707][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.468728][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.578517][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.688798][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 850.798644][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 854.810152][ T6062] net_ratelimit: 35 callbacks suppressed [ 854.810174][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 854.929424][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.048939][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.159818][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.268623][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.379450][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.489425][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.608584][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.718852][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 855.829253][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 859.918935][T29495] net_ratelimit: 36 callbacks suppressed [ 859.918958][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.038569][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.149620][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.268659][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.378673][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.498582][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.608535][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.718835][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.828784][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 860.938816][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 864.938978][ T1160] net_ratelimit: 35 callbacks suppressed [ 864.939001][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.058759][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.168935][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.279032][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.388944][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.498559][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.608935][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.718629][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.828663][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 865.938757][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 870.038666][ T6472] net_ratelimit: 36 callbacks suppressed [ 870.038690][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 870.159509][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 870.354961][ T6062] bond9 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 870.368234][ T6062] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 870.586397][ T6062] team0: Port device geneve2 removed [ 870.751932][T32665] __nla_validate_parse: 4 callbacks suppressed [ 870.751952][T32665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7994'. [ 870.925925][T32678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7999'. [ 870.956142][T32678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7999'. [ 871.066732][T32686] netlink: 180 bytes leftover after parsing attributes in process `syz.9.8001'. [ 871.292721][T32697] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8004'. [ 871.538568][ T6062] bond4 (unregistering): (slave macvlan2): Releasing backup interface [ 871.616037][ T6062] bond0 (unregistering): Released all slaves [ 871.646996][ T6062] bond1 (unregistering): Released all slaves [ 871.671787][ T6062] bond2 (unregistering): Released all slaves [ 871.896751][ T6062] bond3 (unregistering): Released all slaves [ 872.074868][ T6062] bond4 (unregistering): Released all slaves [ 872.238075][ T6062] bond5 (unregistering): Released all slaves [ 872.256031][ T6062] bond6 (unregistering): Released all slaves [ 872.277284][ T6062] bond7 (unregistering): Released all slaves [ 872.472230][ T6062] bond8 (unregistering): Released all slaves [ 872.679969][ T6062] bond9 (unregistering): Released all slaves [ 872.750222][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 872.881109][T29495] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 872.967962][T32713] netlink: 'syz.5.8009': attribute type 5 has an invalid length. [ 873.154380][T32720] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 873.176787][T32720] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 873.230763][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.347345][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.401665][T32735] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8019'. [ 873.415693][T32738] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8017'. [ 873.615610][T32738] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 873.646183][T32751] netlink: 196 bytes leftover after parsing attributes in process `syz.6.8023'. [ 873.695298][T32738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.761956][T32738] bond0 (unregistering): Released all slaves [ 873.860465][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.883857][T29495] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 873.907728][T29495] bond2: now running without any active interface! [ 873.971494][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 874.013790][ T302] sch_fq: defrate 0 ignored. [ 874.099232][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 874.230077][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 874.234718][ T314] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8034'. [ 874.551974][ T6062] tipc: Disabling bearer [ 874.583898][ T6062] tipc: Left network mode [ 874.743155][ T344] team0: Device gtp0 is of different type [ 874.805671][ T348] netlink: 632 bytes leftover after parsing attributes in process `syz.2.8045'. [ 874.827778][ T349] tc_dump_action: action bad kind [ 875.127687][ T366] nbd: must specify a device to reconfigure [ 875.228662][T15843] net_ratelimit: 5 callbacks suppressed [ 875.228683][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 875.327837][ T372] veth0_vlan: mtu less than device minimum [ 875.338587][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 875.439402][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 875.569588][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 875.708565][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 875.796442][ T399] __nla_validate_parse: 8 callbacks suppressed [ 875.796464][ T399] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8064'. [ 875.830775][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 875.996259][ T6062] hsr_slave_0: left promiscuous mode [ 876.015501][ T6062] hsr_slave_1: left promiscuous mode [ 876.034743][ T6062] vlan0: left allmulticast mode [ 876.049043][ T6062] veth0_vlan: left allmulticast mode [ 876.063079][ T6062] vlan0: left promiscuous mode [ 876.205375][ T426] netlink: 'syz.6.8072': attribute type 1 has an invalid length. [ 877.915955][ T420] pim6reg: entered allmulticast mode [ 877.922122][ T425] pim6reg: left allmulticast mode [ 877.970648][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 877.991158][ T426] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 878.109621][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.258447][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.365275][ T6062] IPVS: stop unused estimator thread 0... [ 878.389636][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.489979][ T485] netlink: 'syz.5.8088': attribute type 10 has an invalid length. [ 878.697744][ T490] netlink: 'syz.8.8089': attribute type 1 has an invalid length. [ 878.741180][ T490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 878.940958][ T496] hsr0 speed is unknown, defaulting to 1000 [ 878.949139][ T496] lo speed is unknown, defaulting to 1000 [ 878.956840][ T496] lo speed is unknown, defaulting to 1000 [ 879.310281][ T513] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8095'. [ 879.434778][ T518] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8096'. [ 879.592686][ T513] bond0 (unregistering): left promiscuous mode [ 879.599118][ T513] bond_slave_0: left promiscuous mode [ 879.604711][ T513] bond_slave_1: left promiscuous mode [ 879.612754][ T513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.622001][ T513] bond_slave_0: left allmulticast mode [ 879.637041][ T513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.646797][ T513] bond_slave_1: left allmulticast mode [ 879.660966][ T513] bond0 (unregistering): Released all slaves [ 879.685522][ T515] team_slave_0: entered promiscuous mode [ 879.691362][ T515] team_slave_1: entered promiscuous mode [ 879.701247][ T515] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 879.711051][ T515] team0: Device macvtap1 is already an upper device of the team interface [ 879.726188][ T515] team_slave_0: left promiscuous mode [ 879.731745][ T515] team_slave_1: left promiscuous mode [ 879.969567][ T534] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8100'. [ 880.003042][ T536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8102'. [ 880.111912][ T529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8100'. [ 880.184280][ T545] netlink: 'syz.9.8104': attribute type 3 has an invalid length. [ 880.243710][ T548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8106'. [ 880.261828][ T6062] net_ratelimit: 11 callbacks suppressed [ 880.261852][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 880.276100][ T551] netlink: 'syz.6.8105': attribute type 1 has an invalid length. [ 880.293231][ T551] netlink: 'syz.6.8105': attribute type 2 has an invalid length. [ 880.468775][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 880.585339][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 880.718505][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 880.850932][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 880.941642][ T572] netlink: 160 bytes leftover after parsing attributes in process `syz.9.8110'. [ 880.988453][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 881.099981][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 881.260111][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 881.405728][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 881.529710][ T594] veth13: entered allmulticast mode [ 881.559387][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 882.123599][ T638] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8127'. [ 882.125133][ T639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8126'. [ 882.167373][ T644] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8127'. [ 882.274190][ T652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8126'. [ 882.375909][ T656] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 882.387994][ T656] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 882.815837][ T677] netlink: 'syz.6.8137': attribute type 10 has an invalid length. [ 882.853603][ T677] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 882.871586][ T676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8137'. [ 882.880657][ T676] netlink: 'syz.6.8137': attribute type 1 has an invalid length. [ 882.892382][ T676] netlink: 'syz.6.8137': attribute type 1 has an invalid length. [ 882.900229][ T676] netlink: 'syz.6.8137': attribute type 2 has an invalid length. [ 882.907957][ T676] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8137'. [ 882.932919][ T677] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 883.607635][ T721] netlink: 'syz.5.8150': attribute type 8 has an invalid length. [ 883.641127][ T723] veth0_to_team: entered promiscuous mode [ 883.668708][ T723] veth0_to_team: entered allmulticast mode [ 883.958008][ T745] bridge5: entered promiscuous mode [ 883.988777][ T745] bridge5: entered allmulticast mode [ 884.005649][ T745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8158'. [ 884.276495][ T756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8161'. [ 884.483237][ T756] hsr_slave_0 (unregistering): left promiscuous mode [ 884.616668][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8164'. [ 885.338413][ T6476] net_ratelimit: 29 callbacks suppressed [ 885.338435][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 885.383256][ T820] netlink: 'syz.6.8179': attribute type 1 has an invalid length. [ 885.391837][ T820] netlink: 'syz.6.8179': attribute type 1 has an invalid length. [ 885.518484][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 885.596133][ T830] netlink: 'syz.2.8182': attribute type 21 has an invalid length. [ 885.649302][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 885.694141][ T838] netlink: 'syz.9.8185': attribute type 1 has an invalid length. [ 885.760206][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 885.831698][ T847] syz_tun: entered promiscuous mode [ 885.838232][ T847] batadv_slave_0: entered promiscuous mode [ 885.867559][ T847] debugfs: 'hsr0' already exists in 'hsr' [ 885.884075][ T847] Cannot create hsr debugfs directory [ 885.919226][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 885.965613][ T857] __nla_validate_parse: 7 callbacks suppressed [ 885.965641][ T857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8192'. [ 886.031384][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 886.283567][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 886.314369][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8200'. [ 886.330889][ T884] netlink: 'syz.8.8199': attribute type 2 has an invalid length. [ 886.351140][ T884] netlink: 244 bytes leftover after parsing attributes in process `syz.8.8199'. [ 886.398519][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 886.443378][ T894] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8199'. [ 886.469981][ T896] netlink: 'syz.5.8203': attribute type 10 has an invalid length. [ 886.527142][ T896] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8203'. [ 886.540120][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 886.678714][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 886.932870][ T925] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8211'. [ 886.947673][ T931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8212'. [ 886.987844][ T931] netlink: 'syz.5.8212': attribute type 10 has an invalid length. [ 887.025391][ T936] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 887.058840][ T931] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8212'. [ 887.272414][ T956] netlink: 'syz.6.8220': attribute type 1 has an invalid length. [ 887.294770][ T956] netlink: 'syz.6.8220': attribute type 1 has an invalid length. [ 887.534559][ T976] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8227'. [ 887.931533][ T1007] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8236'. [ 888.165727][ T1160] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.206283][ T1160] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.228402][ T1160] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.249846][ T1160] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.798426][ T1064] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 888.829145][ T1064] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 889.317776][ T1090] hsr0 speed is unknown, defaulting to 1000 [ 889.370452][ T1090] lo speed is unknown, defaulting to 1000 [ 889.378069][ T1090] lo speed is unknown, defaulting to 1000 [ 889.822744][ T1109] tipc: Enabled bearer , priority 0 [ 889.833375][ T1109] syzkaller0: entered promiscuous mode [ 889.839033][ T1109] syzkaller0: entered allmulticast mode [ 889.895362][ T1109] tipc: Enabling of bearer rejected, already enabled [ 889.923301][ T1108] tipc: Resetting bearer [ 890.032463][ T1108] tipc: Disabling bearer [ 890.222679][ T1095] validate_nla: 4 callbacks suppressed [ 890.222699][ T1095] netlink: 'syz.6.8259': attribute type 4 has an invalid length. [ 890.638514][ T1160] net_ratelimit: 27 callbacks suppressed [ 890.638536][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 890.831630][ T1146] openvswitch: netlink: Flow actions attr not present in new flow. [ 890.949191][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 891.114908][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 891.431332][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 891.623774][ T1197] tipc: New replicast peer: 255.255.255.255 [ 891.631522][ T1197] tipc: Enabled bearer , priority 10 [ 893.592438][ T1198] netlink: 'syz.8.8285': attribute type 3 has an invalid length. [ 893.608618][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 893.713793][ T1211] wg2: entered promiscuous mode [ 893.732077][ T1211] wg2: entered allmulticast mode [ 893.758122][ T1213] netlink: 'syz.8.8289': attribute type 21 has an invalid length. [ 893.758569][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 893.878637][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 894.019983][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 894.142286][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 894.274330][ T1246] __nla_validate_parse: 14 callbacks suppressed [ 894.274375][ T1246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8297'. [ 894.398165][ T1249] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8299'. [ 894.411339][ T1249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8299'. [ 894.454094][ T1251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8297'. [ 894.506599][ T1252] netdevsim netdevsim9: Direct firmware load for /.€ failed with error -2 [ 894.525093][ T1252] netdevsim netdevsim9: Falling back to sysfs fallback for: /.€ [ 894.735863][ T1258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8301'. [ 895.146432][ T1268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8304'. [ 895.660006][ T1160] net_ratelimit: 13 callbacks suppressed [ 895.660027][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 895.828633][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 895.939699][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 895.972442][ T1330] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8318'. [ 896.046991][T15843] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4a [ 896.060205][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 896.133236][ T1338] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8318'. [ 896.147924][ T1338] openvswitch: netlink: Flow actions attr not present in new flow. [ 896.172601][ T1340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8322'. [ 896.191735][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 896.318625][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 896.332784][ T1350] netlink: 18 bytes leftover after parsing attributes in process `syz.6.8324'. [ 896.439242][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 896.548632][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 896.658492][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 897.266575][ T1380] syzkaller0: entered promiscuous mode [ 897.272735][ T1380] syzkaller0: entered allmulticast mode [ 897.434243][ T1397] netlink: 'syz.5.8336': attribute type 18 has an invalid length. [ 899.432859][ T1412] __nla_validate_parse: 2 callbacks suppressed [ 899.432880][ T1412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8340'. [ 899.573198][ T1409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8340'. [ 900.027004][ T1438] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8349'. [ 900.535615][ T1468] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8357'. [ 900.562072][ T1472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8358'. [ 900.571360][ T1472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8358'. [ 900.598473][ T1468] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8357'. [ 900.616023][ T1468] netlink: 'syz.8.8357': attribute type 5 has an invalid length. [ 900.624038][ T1468] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8357'. [ 900.646378][ T1468] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8357'. [ 900.772462][ T1484] sock: sock_timestamping_bind_phc: sock not bind to device [ 900.781260][ T49] net_ratelimit: 17 callbacks suppressed [ 900.781282][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 900.912632][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 901.026462][ T1500] tipc: Enabled bearer , priority 0 [ 901.037189][ T1500] tipc: Resetting bearer [ 901.045746][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 901.147829][ T1509] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8370'. [ 901.170628][ T1502] netlink: zone id is out of range [ 901.175868][ T1502] netlink: zone id is out of range [ 901.182392][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 901.187671][ T1502] netlink: zone id is out of range [ 901.195297][ T1502] netlink: zone id is out of range [ 901.200457][ T1502] netlink: zone id is out of range [ 901.205564][ T1502] netlink: zone id is out of range [ 901.214457][ T1502] netlink: 'syz.6.8368': attribute type 1 has an invalid length. [ 901.222465][ T1502] netlink: 'syz.6.8368': attribute type 10 has an invalid length. [ 901.230566][ T1502] netlink: 'syz.6.8368': attribute type 4 has an invalid length. [ 901.243934][ T1512] netlink: 'syz.2.8371': attribute type 1 has an invalid length. [ 901.268519][ T1512] netlink: 'syz.2.8371': attribute type 2 has an invalid length. [ 901.463362][ T1519] syzkaller0: entered promiscuous mode [ 901.485039][ T1519] syzkaller0: entered allmulticast mode [ 901.746233][ T1525] netlink: 'syz.6.8375': attribute type 4 has an invalid length. [ 902.342905][ T1558] tipc: Enabling of bearer rejected, failed to enable media [ 902.697666][ T1582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 903.208932][ T1597] vlan2: entered allmulticast mode [ 903.226736][ T1597] syz_tun: entered allmulticast mode [ 903.780002][ T1633] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 903.977473][ T1658] netlink: 'syz.9.8409': attribute type 1 has an invalid length. [ 903.987623][ T1658] netlink: 'syz.9.8409': attribute type 1 has an invalid length. [ 904.347866][ T1677] x_tables: ip_tables: owner.1 match: invalid size 24 (kernel) != (user) 40 [ 904.384658][ T1671] netlink: 'syz.2.8415': attribute type 1 has an invalid length. [ 904.589249][ T1687] syzkaller0: entered promiscuous mode [ 904.594790][ T1687] syzkaller0: entered allmulticast mode [ 904.776869][ T1698] delete_channel: no stack [ 904.887147][ T1710] __nla_validate_parse: 11 callbacks suppressed [ 904.887169][ T1710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8423'. [ 905.193923][ T1732] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8433'. [ 905.204528][ T1730] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 905.295459][ T1723] veth7: entered promiscuous mode [ 905.312570][ T1723] veth7: entered allmulticast mode [ 905.754668][ T1752] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8438'. [ 905.783711][ T1754] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8438'. [ 905.799513][ T1160] net_ratelimit: 56 callbacks suppressed [ 905.799541][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 905.953457][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 905.982255][ T1758] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 906.142617][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.197890][ T1772] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8442'. [ 906.244394][ T1772] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8442'. [ 906.315657][ T1781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8444'. [ 906.414755][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.547644][ T1786] 8021q: VLANs not supported on ip6_vti0 [ 906.570104][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.670716][ T1798] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8450'. [ 906.682798][ T1798] netlink: 104 bytes leftover after parsing attributes in process `syz.9.8450'. [ 906.698828][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.707465][ T1798] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8450'. [ 906.841028][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.919273][ T1807] openvswitch: netlink: Flow actions attr not present in new flow. [ 906.935950][ T1808] bridge0: port 1(vlan2) entered blocking state [ 906.943153][ T1808] bridge0: port 1(vlan2) entered disabled state [ 906.951554][ T1808] vlan2: entered allmulticast mode [ 906.956852][ T1808] bridge0: entered allmulticast mode [ 906.965207][ T1808] vlan2: left allmulticast mode [ 906.978460][ T1808] bridge0: left allmulticast mode [ 907.019985][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 907.081775][ T1816] openvswitch: netlink: Duplicate or invalid key (type 0). [ 909.482544][ T1933] gre0: entered promiscuous mode [ 909.611514][ T1932] geneve2: entered promiscuous mode [ 909.641298][ T1932] geneve2: entered allmulticast mode [ 909.890181][ T1943] netlink: 'syz.2.8497': attribute type 8 has an invalid length. [ 910.075671][ T1954] __nla_validate_parse: 18 callbacks suppressed [ 910.075691][ T1954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8500'. [ 910.106552][ T1956] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8502'. [ 910.146650][ T1954] bond0: entered promiscuous mode [ 910.196885][ T1954] bond0: left promiscuous mode [ 910.306931][ T1967] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8506'. [ 910.355197][ T1969] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8507'. [ 910.606922][ T1982] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8510'. [ 910.939975][ T6476] net_ratelimit: 38 callbacks suppressed [ 910.940265][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.079638][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.193241][ T2005] netlink: 'syz.2.8519': attribute type 4 has an invalid length. [ 911.199239][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.380178][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.539754][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.691804][ T2021] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 911.738647][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.833701][ T2027] netlink: 'syz.8.8527': attribute type 12 has an invalid length. [ 911.871379][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.883790][ T2029] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8528'. [ 911.916650][ T2030] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8527'. [ 911.927321][ T2029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8528'. [ 911.940712][ T2030] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8527'. [ 911.954304][ T2029] veth0_macvtap: left promiscuous mode [ 911.963338][ T2027] netlink: 'syz.8.8527': attribute type 12 has an invalid length. [ 912.059530][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 912.159043][ T2047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8532'. [ 912.190603][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 912.308512][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 912.495547][ T2067] netlink: 'syz.2.8538': attribute type 1 has an invalid length. [ 912.507266][ T2069] dvmrp0: entered allmulticast mode [ 912.525153][ T2073] dvmrp0: entered allmulticast mode [ 912.611975][ T2067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 912.797684][ T2084] netlink: 'syz.5.8543': attribute type 1 has an invalid length. [ 912.824410][ T2088] netlink: 'syz.5.8543': attribute type 1 has an invalid length. [ 912.855051][ T2084] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 912.857337][ T2084] netlink: 'syz.5.8543': attribute type 12 has an invalid length. [ 913.003466][ T2075] bond6 (unregistering): Released all slaves [ 913.101827][ T2102] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 913.133018][ T2102] netlink: 'syz.9.8547': attribute type 1 has an invalid length. [ 913.417123][ T2123] pim6reg: entered allmulticast mode [ 913.441822][ T2123] netlink: 'syz.2.8554': attribute type 2 has an invalid length. [ 913.512303][ T2128] syzkaller0: entered promiscuous mode [ 913.532647][ T2128] syzkaller0: entered allmulticast mode [ 913.557450][ T5943] lo speed is unknown, defaulting to 1000 [ 913.572753][ T5943] syz0: Port: 1 Link DOWN [ 913.636474][ T5943] lo speed is unknown, defaulting to 1000 [ 913.987704][ T2151] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 914.003259][ T2151] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 914.011440][ T2151] gretap1: entered promiscuous mode [ 914.016775][ T2151] gretap1: entered allmulticast mode [ 914.162807][ T2164] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 914.461197][ T2185] syzkaller1: entered promiscuous mode [ 914.478294][ T2185] syzkaller1: entered allmulticast mode [ 914.522589][ T2192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.532468][ T2191] vxcan1: entered allmulticast mode [ 914.547918][ T2192] bond2: (slave veth0_to_bond): Releasing active interface [ 914.563263][ T2192] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 914.600259][ T2192] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 914.848097][ T2203] hsr0 speed is unknown, defaulting to 1000 [ 914.860528][ T2203] lo speed is unknown, defaulting to 1000 [ 914.875384][ T2203] lo speed is unknown, defaulting to 1000 [ 915.233389][ T2217] validate_nla: 1 callbacks suppressed [ 915.233418][ T2217] netlink: 'syz.5.8584': attribute type 8 has an invalid length. [ 915.446173][ T2227] __nla_validate_parse: 9 callbacks suppressed [ 915.446194][ T2227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8587'. [ 915.542758][ T2204] netlink: 3 bytes leftover after parsing attributes in process `syz.6.8581'. [ 915.616647][ T2238] netlink: 'syz.2.8593': attribute type 1 has an invalid length. [ 915.719624][ T2238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 915.754259][ T2246] tipc: Enabling of bearer rejected, failed to enable media [ 915.828281][ T2252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8597'. [ 915.891135][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8598'. [ 916.049642][ T2257] tipc: Enabled bearer , priority 0 [ 916.057259][ T2258] syzkaller0: entered promiscuous mode [ 916.063532][ T2258] syzkaller0: entered allmulticast mode [ 916.077812][ T2259] tipc: Resetting bearer [ 916.118895][ T2256] tipc: Resetting bearer [ 916.194199][ T2256] tipc: Disabling bearer [ 916.200176][ T2271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8604'. [ 916.239701][ T1160] net_ratelimit: 23 callbacks suppressed [ 916.239724][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.458623][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.629482][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.748519][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.825583][ T2300] tipc: Enabling of bearer rejected, already enabled [ 916.851282][ T2300] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode [ 916.859661][ T2300] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode [ 916.868099][ T2300] tipc: Resetting bearer [ 916.869000][ T2305] netlink: 'syz.5.8617': attribute type 18 has an invalid length. [ 916.881839][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.977154][ T2300] netlink: 'syz.8.8615': attribute type 1 has an invalid length. [ 917.044477][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8620'. [ 917.054825][ T2300] 8021q: adding VLAN 0 to HW filter on device bond7 [ 917.085150][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 917.117382][ T2308] bond7: (slave gretap1): making interface the new active one [ 917.131390][ T2308] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 917.175625][ T2321] IPVS: Error joining to the multicast group [ 917.229373][ T6062] tipc: Resetting bearer [ 917.250254][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 917.291753][ T2326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8623'. [ 917.312527][ T2327] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8624'. [ 917.372148][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 917.476554][ T2337] netlink: 'syz.5.8627': attribute type 2 has an invalid length. [ 917.508049][ T2337] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8627'. [ 917.518932][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 917.529777][ T2340] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8627'. [ 917.649962][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 917.827452][ T2358] netlink: 'syz.2.8635': attribute type 1 has an invalid length. [ 917.926048][ T2366] bond7: (slave gretap1): making interface the new active one [ 917.952238][ T2366] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 917.964190][ T2358] 8021q: adding VLAN 0 to HW filter on device bond7 [ 918.646151][ T2422] syzkaller0: entered promiscuous mode [ 918.651975][ T2422] syzkaller0: entered allmulticast mode [ 920.852203][ T2460] __nla_validate_parse: 10 callbacks suppressed [ 920.852222][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8658'. [ 920.877716][ T2459] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8660'. [ 921.060231][ T2480] netlink: 12856 bytes leftover after parsing attributes in process `syz.2.8664'. [ 921.075579][ T2485] netlink: 'syz.5.8665': attribute type 32 has an invalid length. [ 921.101184][ T2480] syz.2.8664: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 921.140848][ T2480] CPU: 1 UID: 0 PID: 2480 Comm: syz.2.8664 Not tainted syzkaller #0 PREEMPT(full) [ 921.140876][ T2480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 921.140890][ T2480] Call Trace: [ 921.140899][ T2480] [ 921.140909][ T2480] dump_stack_lvl+0x189/0x250 [ 921.140942][ T2480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.140967][ T2480] ? __pfx__printk+0x10/0x10 [ 921.140996][ T2480] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 921.141021][ T2480] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 921.141047][ T2480] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 921.141075][ T2480] warn_alloc+0x214/0x310 [ 921.141108][ T2480] ? stack_depot_save_flags+0x40/0x860 [ 921.141141][ T2480] ? __pfx_warn_alloc+0x10/0x10 [ 921.141174][ T2480] ? kasan_save_track+0x4f/0x80 [ 921.141201][ T2480] ? xskq_create+0x56/0x170 [ 921.141220][ T2480] ? xsk_init_queue+0xb0/0x110 [ 921.141243][ T2480] ? xsk_setsockopt+0x4dc/0x8d0 [ 921.141271][ T2480] ? do_sock_setsockopt+0x179/0x1b0 [ 921.141294][ T2480] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 921.141316][ T2480] ? do_syscall_64+0xfa/0x3b0 [ 921.141338][ T2480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.141367][ T2480] __vmalloc_node_range_noprof+0x125/0x12f0 [ 921.141434][ T2480] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 921.141471][ T2480] ? __kasan_kmalloc+0x93/0xb0 [ 921.141505][ T2480] vmalloc_user_noprof+0xad/0xf0 [ 921.141535][ T2480] ? xskq_create+0xbf/0x170 [ 921.141557][ T2480] xskq_create+0xbf/0x170 [ 921.141581][ T2480] xsk_init_queue+0xb0/0x110 [ 921.141601][ T2480] xsk_setsockopt+0x4dc/0x8d0 [ 921.141631][ T2480] ? __pfx_xsk_setsockopt+0x10/0x10 [ 921.141657][ T2480] ? __pfx_aa_sk_perm+0x10/0x10 [ 921.141689][ T2480] ? aa_sock_opt_perm+0xff/0x1b0 [ 921.141712][ T2480] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 921.141732][ T2480] ? __pfx_xsk_setsockopt+0x10/0x10 [ 921.141758][ T2480] do_sock_setsockopt+0x179/0x1b0 [ 921.141787][ T2480] __x64_sys_setsockopt+0x13f/0x1b0 [ 921.141817][ T2480] do_syscall_64+0xfa/0x3b0 [ 921.141839][ T2480] ? lockdep_hardirqs_on+0x9c/0x150 [ 921.141860][ T2480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.141879][ T2480] ? clear_bhb_loop+0x60/0xb0 [ 921.141903][ T2480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.141922][ T2480] RIP: 0033:0x7f489d38eec9 [ 921.141940][ T2480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.141955][ T2480] RSP: 002b:00007f489e14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 921.141975][ T2480] RAX: ffffffffffffffda RBX: 00007f489d5e5fa0 RCX: 00007f489d38eec9 [ 921.141989][ T2480] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000013 [ 921.142000][ T2480] RBP: 00007f489d411f91 R08: 0000000000000004 R09: 0000000000000000 [ 921.142012][ T2480] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.142024][ T2480] R13: 00007f489d5e6038 R14: 00007f489d5e5fa0 R15: 00007ffee42c1a48 [ 921.142056][ T2480] [ 921.142452][ T2480] Mem-Info: [ 921.165559][ T2492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8667'. [ 921.169367][ T2480] active_anon:3908 inactive_anon:0 isolated_anon:0 [ 921.169367][ T2480] active_file:3582 inactive_file:40215 isolated_file:0 [ 921.169367][ T2480] unevictable:768 dirty:87 writeback:0 [ 921.169367][ T2480] slab_reclaimable:14071 slab_unreclaimable:135702 [ 921.169367][ T2480] mapped:29467 shmem:1387 pagetables:1120 [ 921.169367][ T2480] sec_pagetables:0 bounce:0 [ 921.169367][ T2480] kernel_misc_reclaimable:0 [ 921.169367][ T2480] free:1283993 free_pcp:13851 free_cma:0 [ 921.170038][ T2492] netlink: 176 bytes leftover after parsing attributes in process `syz.8.8667'. [ 921.174563][ T2480] Node 0 active_anon:15632kB inactive_anon:0kB active_file:14328kB inactive_file:160660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117868kB dirty:348kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13732kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 921.199124][ T2492] netlink: 'syz.8.8667': attribute type 5 has an invalid length. [ 921.206612][ T2480] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 921.329091][ T49] net_ratelimit: 13 callbacks suppressed [ 921.329111][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 921.360990][ T2480] Node 0 [ 921.381182][ T2502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8669'. [ 921.416678][ T2480] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.432620][ T2501] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8669'. [ 921.442915][ T2480] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 921.651367][ T2480] Node 0 DMA32 free:1222684kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15584kB inactive_anon:0kB active_file:14328kB inactive_file:159084kB unevictable:1536kB writepending:348kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:40420kB local_pcp:20784kB free_cma:0kB [ 921.686080][ T2480] lowmem_reserve[]: 0 0 1 1 1 [ 921.691111][ T2480] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 921.696423][ T2504] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 921.721829][ T2480] lowmem_reserve[]: 0 0 0 0 0 [ 921.746873][ T2480] Node 1 Normal free:3897916kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14916kB local_pcp:8804kB free_cma:0kB [ 921.780676][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 921.805252][ T2480] lowmem_reserve[]: 0 0 0 0 0 [ 921.818647][ T2480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 921.840833][ T2480] Node 0 DMA32: 3597*4kB (UME) 1691*8kB (UME) 703*16kB (UME) 847*32kB (UM) 215*64kB (UME) 67*128kB (UME) 36*256kB (UME) 91*512kB (UME) 59*1024kB (UME) 3*2048kB (ME) 247*4096kB (UM) = 1222684kB [ 921.872387][ T2480] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 921.886994][ T2480] Node 1 Normal: 181*4kB (UE) 51*8kB (UME) 33*16kB (UME) 128*32kB (UME) 43*64kB (UME) 12*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3897916kB [ 921.909395][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 921.928500][ T2480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.949166][ T2520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8671'. [ 921.958209][ T2516] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8671'. [ 921.973572][ T2480] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 922.027445][ T2480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 922.056337][ T2480] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 922.075857][ T2480] 45183 total pagecache pages [ 922.081198][ T2480] 0 pages in swap cache [ 922.085461][ T2480] Free swap = 124996kB [ 922.090336][ T2480] Total swap = 124996kB [ 922.094617][ T2480] 2097051 pages RAM [ 922.098820][ T2480] 0 pages HighMem/MovableOnly [ 922.103532][ T2480] 425673 pages reserved [ 922.107723][ T2480] 0 pages cma reserved [ 922.145975][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 922.190862][ T2537] netlink: 'syz.2.8676': attribute type 23 has an invalid length. [ 922.273697][T15843] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 922.398512][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 922.434327][ T2552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8681'. [ 922.548712][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 922.659530][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 922.681714][ T2572] netlink: 'syz.2.8688': attribute type 12 has an invalid length. [ 922.741703][ T2579] netlink: 'syz.5.8687': attribute type 12 has an invalid length. [ 922.806114][ T2572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 922.818205][ T2579] netlink: 'syz.5.8687': attribute type 12 has an invalid length. [ 922.821871][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 922.958908][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 923.090929][ T2611] sctp: [Deprecated]: syz.6.8696 (pid 2611) Use of int in max_burst socket option. [ 923.090929][ T2611] Use struct sctp_assoc_value instead [ 923.869929][ T2650] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 923.900141][ T2650] veth0: entered promiscuous mode [ 925.348982][ T2725] dvmrp1: entered allmulticast mode [ 925.502154][ T2731] netlink: 'syz.6.8720': attribute type 2 has an invalid length. [ 925.825919][ T2760] lo: entered allmulticast mode [ 925.843133][ T2760] tunl0: entered allmulticast mode [ 925.861419][ T2760] gre0: entered allmulticast mode [ 925.866773][ T2760] gretap0: entered allmulticast mode [ 925.872724][ T2760] erspan0: entered allmulticast mode [ 925.882724][ T2760] ip_vti0: entered allmulticast mode [ 925.893559][ T2760] ip6_vti0: entered allmulticast mode [ 925.900794][ T2760] sit0: entered allmulticast mode [ 925.906880][ T2760] ip6tnl0: entered allmulticast mode [ 925.912832][ T2760] ip6gre0: entered allmulticast mode [ 925.930058][ T2760] syz_tun: entered allmulticast mode [ 925.942956][ T2760] ip6gretap0: entered allmulticast mode [ 925.956085][ T2760] bond0: entered allmulticast mode [ 925.964918][ T2760] team0: entered allmulticast mode [ 925.993844][ T2760] dummy0: entered allmulticast mode [ 926.000353][ T2760] nlmon0: entered allmulticast mode [ 926.006398][ T2760] batadv0: entered allmulticast mode [ 926.012101][ T2760] veth0: entered allmulticast mode [ 926.017652][ T2760] veth1: entered allmulticast mode [ 926.024968][ T2760] wg0: entered allmulticast mode [ 926.032454][ T2770] __nla_validate_parse: 10 callbacks suppressed [ 926.032475][ T2770] netlink: 34 bytes leftover after parsing attributes in process `syz.2.8728'. [ 926.051273][ T2760] wg1: entered allmulticast mode [ 926.056535][ T2760] wg2: entered allmulticast mode [ 926.062582][ T2760] veth0_to_bridge: entered allmulticast mode [ 926.068881][ T2760] bridge_slave_0: entered allmulticast mode [ 926.074979][ T2760] veth1_to_bridge: entered allmulticast mode [ 926.081301][ T2760] bridge_slave_1: entered allmulticast mode [ 926.087386][ T2760] veth0_to_bond: entered allmulticast mode [ 926.094069][ T2760] bond_slave_0: entered allmulticast mode [ 926.100049][ T2760] veth1_to_bond: entered allmulticast mode [ 926.106061][ T2760] bond_slave_1: entered allmulticast mode [ 926.112073][ T2760] veth0_to_team: left promiscuous mode [ 926.117734][ T2760] team_slave_0: entered allmulticast mode [ 926.123709][ T2760] veth1_to_team: entered allmulticast mode [ 926.129753][ T2760] team_slave_1: entered allmulticast mode [ 926.135671][ T2760] veth0_to_batadv: entered allmulticast mode [ 926.141966][ T2760] batadv_slave_0: entered allmulticast mode [ 926.149483][ T2760] xfrm0: entered allmulticast mode [ 926.154888][ T2760] veth0_to_hsr: entered allmulticast mode [ 926.161066][ T2760] hsr_slave_0: entered allmulticast mode [ 926.166911][ T2760] veth1_to_hsr: entered allmulticast mode [ 926.172919][ T2760] hsr_slave_1: entered allmulticast mode [ 926.178913][ T2760] hsr0: entered allmulticast mode [ 926.184118][ T2760] veth1_virt_wifi: entered allmulticast mode [ 926.190361][ T2760] veth0_virt_wifi: entered allmulticast mode [ 926.196475][ T2760] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 926.204082][ T2760] veth1_macvtap: entered allmulticast mode [ 926.212444][ T2760] veth0_macvtap: entered allmulticast mode [ 926.219313][ T2760] macvtap0: entered allmulticast mode [ 926.224956][ T2760] mac80211_hwsim hwsim75 wlan1: entered allmulticast mode [ 926.235354][ T2760] bond6: entered allmulticast mode [ 926.245525][ T2760] veth12: entered allmulticast mode [ 926.251424][ T2760] mac80211_hwsim hwsim92 wlan0: entered allmulticast mode [ 926.258996][ T2760] tipc: Resetting bearer [ 926.272347][ T2760] mac80211_hwsim hwsim92 syzkaller0: left promiscuous mode [ 926.282182][ T2760] bridge5: left promiscuous mode [ 926.295463][ T2760] erspan1: entered allmulticast mode [ 926.301266][ T2760] mac80211_hwsim hwsim94 wlan5: entered allmulticast mode [ 926.308808][ T2760] mac80211_hwsim hwsim95 wlan6: entered allmulticast mode [ 926.316058][ T2760] netdevsim netdevsim8 eth0: entered allmulticast mode [ 926.323237][ T2760] netdevsim netdevsim8 eth1: entered allmulticast mode [ 926.330468][ T2760] netdevsim netdevsim8 eth2: entered allmulticast mode [ 926.337539][ T2760] netdevsim netdevsim8 eth3: entered allmulticast mode [ 926.344547][ T2760] mac80211_hwsim hwsim96 wlan7: entered allmulticast mode [ 926.352084][ T2760] mac80211_hwsim hwsim97 wlan8: entered allmulticast mode [ 926.368580][ T2760] bond7: entered allmulticast mode [ 926.373742][ T2760] gretap1: entered allmulticast mode [ 926.386944][ T2760] sit1: entered allmulticast mode [ 926.419907][ T12] net_ratelimit: 22 callbacks suppressed [ 926.419929][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 926.524823][ T2778] rdma_op ffff88807ef661f0 conn xmit_rdma 0000000000000000 [ 926.533823][ T2780] netlink: 'syz.2.8732': attribute type 11 has an invalid length. [ 926.543420][ T2780] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8732'. [ 926.558822][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 926.680098][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 926.708206][ T2788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8734'. [ 926.726216][ T2792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8734'. [ 926.868810][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 926.989917][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 927.134352][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 927.188016][ T2831] tipc: Enabling of bearer rejected, media not registered [ 927.266934][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 927.409963][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 927.558566][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 927.641744][ T2878] netlink: 'syz.5.8746': attribute type 10 has an invalid length. [ 927.679867][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 928.246971][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8754'. [ 928.414878][ T2909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8758'. [ 928.472088][ T2912] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8759'. [ 928.537014][ T2916] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 928.779154][T15671] Bluetooth: hci1: command 0x0406 tx timeout [ 929.236842][ T2949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 929.246910][ T2949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 929.255520][ T2949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 929.269725][ T2949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 929.277590][ T2949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 929.329920][ T2955] netlink: 'syz.5.8771': attribute type 29 has an invalid length. [ 929.337974][ T2955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8771'. [ 929.362107][ T2948] hsr0 speed is unknown, defaulting to 1000 [ 929.369975][ T2948] lo speed is unknown, defaulting to 1000 [ 929.397907][ T2948] lo speed is unknown, defaulting to 1000 [ 930.364198][ T2948] chnl_net:caif_netlink_parms(): no params data found [ 930.513990][ T3010] hsr0 speed is unknown, defaulting to 1000 [ 930.565911][ T3010] lo speed is unknown, defaulting to 1000 [ 930.626271][ T3010] lo speed is unknown, defaulting to 1000 [ 930.740758][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.765424][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.794741][ T2948] bridge_slave_0: entered allmulticast mode [ 930.811533][ T3027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8796'. [ 930.822168][ T2948] bridge_slave_0: entered promiscuous mode [ 930.828134][ T3027] netlink: 'syz.2.8796': attribute type 5 has an invalid length. [ 930.844670][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.854275][ T3027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8796'. [ 930.870875][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.889152][ T2948] bridge_slave_1: entered allmulticast mode [ 930.905547][ T2948] bridge_slave_1: entered promiscuous mode [ 930.969895][ T3027] geneve3: entered promiscuous mode [ 930.975422][ T3027] geneve3: entered allmulticast mode [ 931.060647][ T2948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.081854][ T6476] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 931.096244][ T6476] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 931.129928][ T2948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.145343][ T6476] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 931.225811][ T3035] pimreg: entered allmulticast mode [ 931.263613][ T6476] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 931.286368][ T3039] pimreg: left allmulticast mode [ 931.305014][ T3039] dvmrp1: left allmulticast mode [ 931.357147][ T2949] Bluetooth: hci4: command tx timeout [ 931.388101][ T2948] team0: Port device team_slave_0 added [ 931.406997][ T2948] team0: Port device team_slave_1 added [ 931.412001][ T3045] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8800'. [ 931.470581][ T49] net_ratelimit: 22 callbacks suppressed [ 931.470605][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 931.617522][ T2948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.638524][ T2948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.695327][ T2948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.703932][ T3056] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8801'. [ 931.715251][ T2948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.730704][ T2948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.768580][ T2948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.775318][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8801'. [ 931.790754][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 931.810955][ T3055] tipc: Enabled bearer , priority 0 [ 931.833661][ T3051] syzkaller0: entered promiscuous mode [ 931.858564][ T3051] syzkaller0: entered allmulticast mode [ 932.191598][ T3054] tipc: Resetting bearer [ 932.263344][ T3050] tipc: Resetting bearer [ 932.299516][ T3050] tipc: Disabling bearer [ 932.330725][ T2948] hsr_slave_0: entered promiscuous mode [ 932.347795][ T2948] hsr_slave_1: entered promiscuous mode [ 932.360584][ T2948] debugfs: 'hsr0' already exists in 'hsr' [ 932.368255][ T2948] Cannot create hsr debugfs directory [ 932.563401][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 932.742870][ T3090] 8021q: VLANs not supported on ip6gre0 [ 932.750071][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 932.957036][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 933.119166][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 933.228615][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 933.267121][ T3115] netlink: 'syz.2.8818': attribute type 11 has an invalid length. [ 933.418561][ T2949] Bluetooth: hci4: command tx timeout [ 933.424035][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 933.480999][ T3126] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8823'. [ 933.629844][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 933.649761][ T3133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8826'. [ 933.671323][ T3133] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 933.761344][ T2948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 933.838031][ T3142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8824'. [ 933.847170][ T3142] tc_dump_action: action bad kind [ 933.868102][ T2948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.896875][ T2948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.939130][ T2948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.173635][ T3163] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 934.185273][ T3161] netlink: 232 bytes leftover after parsing attributes in process `syz.5.8831'. [ 934.205691][ T2948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.223415][ T3161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8831'. [ 934.246765][ T3161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8831'. [ 934.265328][ T2948] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.273807][ T3161] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.8831'. [ 934.321881][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.329353][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.352192][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.359414][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.576183][ T3183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 934.583492][ T3183] IPv6: NLM_F_CREATE should be set when creating new route [ 934.590806][ T3183] IPv6: NLM_F_CREATE should be set when creating new route [ 934.598073][ T3183] IPv6: NLM_F_CREATE should be set when creating new route [ 934.612613][ T3183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 934.902454][ T2948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.986043][ T2948] veth0_vlan: entered promiscuous mode [ 935.006993][ T2948] veth1_vlan: entered promiscuous mode [ 935.055777][ T2948] veth0_macvtap: entered promiscuous mode [ 935.070685][ T2948] veth1_macvtap: entered promiscuous mode [ 935.096495][ T2948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.121643][ T2948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.254783][ T6476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.271264][ T6476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.293213][ T6476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.309767][ T6476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.499407][ T2949] Bluetooth: hci4: command tx timeout [ 935.566322][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.590166][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.625216][ T6472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.633494][ T6472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.648088][ T3213] netlink: 'syz.6.8848': attribute type 14 has an invalid length. [ 935.674749][ T3213] netlink: 'syz.6.8848': attribute type 13 has an invalid length. [ 935.720504][ T3222] netlink: 'syz.8.8850': attribute type 21 has an invalid length. [ 935.760375][ T3224] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000 [ 935.831418][ T3229] siw: device registration error -23 [ 936.485494][ T3257] macvlan0: entered promiscuous mode [ 936.516743][ T3257] macvlan0: entered allmulticast mode [ 936.633708][ T49] net_ratelimit: 21 callbacks suppressed [ 936.633731][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 936.826517][ T3277] netlink: 'syz.2.8868': attribute type 1 has an invalid length. [ 936.838455][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 936.881266][ T3283] __nla_validate_parse: 9 callbacks suppressed [ 936.881285][ T3283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8868'. [ 936.904803][ T3277] 8021q: adding VLAN 0 to HW filter on device bond9 [ 936.926580][ T3282] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8869'. [ 937.064080][ T3290] openvswitch: netlink: Invalid VLAN frame [ 937.215865][ T3283] bond9 (unregistering): Released all slaves [ 937.339927][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 937.486369][ T3295] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 937.510812][ T3299] netlink: 'syz.2.8875': attribute type 21 has an invalid length. [ 937.520080][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 937.533893][ T3299] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8875'. [ 937.578785][ T2949] Bluetooth: hci4: command tx timeout [ 937.594067][ T3302] xt_socket: unknown flags 0xe4 [ 938.477492][ T3320] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8880'. [ 939.770391][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 939.899125][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 940.009037][ T3328] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8882'. [ 940.018603][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 940.019536][ T3336] netlink: 'syz.5.8885': attribute type 4 has an invalid length. [ 940.203341][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 940.334083][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 940.397147][ T3357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8892'. [ 940.556367][ T3365] netlink: 'syz.2.8895': attribute type 9 has an invalid length. [ 940.571941][ T3367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8894'. [ 941.281630][ T3406] bond9: entered promiscuous mode [ 941.286850][ T3406] bond9: entered allmulticast mode [ 941.294941][ T3406] 8021q: adding VLAN 0 to HW filter on device bond9 [ 941.306256][ T3418] netlink: 'syz.6.8909': attribute type 29 has an invalid length. [ 941.331536][ T3420] netlink: 'syz.6.8909': attribute type 29 has an invalid length. [ 941.368605][ T3418] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.8909'. [ 941.668586][T28154] net_ratelimit: 10 callbacks suppressed [ 941.668606][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 941.763127][ T3460] hsr0 speed is unknown, defaulting to 1000 [ 941.775880][ T3460] lo speed is unknown, defaulting to 1000 [ 941.783856][ T3460] lo speed is unknown, defaulting to 1000 [ 941.830215][ T6472] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 941.980521][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 942.091870][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 942.230216][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 942.380591][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 942.656933][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 942.910964][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 943.118776][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 943.212639][ T3523] : renamed from bridge_slave_0 (while UP) [ 943.239786][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 943.709188][ T3551] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8949'. [ 943.743388][ T3555] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8949'. [ 943.827684][ T3557] tipc: Started in network mode [ 943.870813][ T3557] tipc: Node identity ba6263336b01, cluster identity 4711 [ 943.880400][ T3557] tipc: Enabled bearer , priority 0 [ 943.915454][ T3564] syzkaller0: entered promiscuous mode [ 943.921328][ T3564] syzkaller0: entered allmulticast mode [ 943.943927][ T3557] tipc: Resetting bearer [ 943.983299][ T3557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8951'. [ 944.013150][ T3556] tipc: Resetting bearer [ 944.084339][ T3575] netlink: 'syz.6.8956': attribute type 1 has an invalid length. [ 944.096281][ T3556] tipc: Disabling bearer [ 944.096802][ T3568] netlink: 'syz.2.8955': attribute type 1 has an invalid length. [ 944.105054][ T3575] netlink: 'syz.6.8956': attribute type 4 has an invalid length. [ 944.127810][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8954'. [ 944.137166][ T3575] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.8956'. [ 944.139941][ T3568] netlink: 'syz.2.8955': attribute type 2 has an invalid length. [ 944.324398][ T3584] netlink: 'syz.0.8958': attribute type 1 has an invalid length. [ 944.346290][ T3584] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8958'. [ 944.629010][ T3608] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8966'. [ 944.660081][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8968'. [ 944.683063][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8966'. [ 944.896118][ T3616] hsr0 speed is unknown, defaulting to 1000 [ 944.926119][ T3616] lo speed is unknown, defaulting to 1000 [ 944.955854][ T3616] lo speed is unknown, defaulting to 1000 [ 945.041719][ T3631] pim6reg: entered allmulticast mode [ 945.056513][ T3630] IPv6: NLM_F_CREATE should be specified when creating new route [ 945.060109][ T3631] pim6reg: left allmulticast mode [ 945.119221][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8978'. [ 945.185502][ T3635] hsr_slave_0: left promiscuous mode [ 945.200437][ T3635] hsr_slave_1: left promiscuous mode [ 945.383582][ T3642] netlink: 'syz.5.8981': attribute type 17 has an invalid length. [ 945.428891][ T3644] netlink: 'syz.8.8982': attribute type 11 has an invalid length. [ 946.642739][ T3696] IPv6: NLM_F_REPLACE set, but no existing node found! [ 946.709229][ T12] net_ratelimit: 35 callbacks suppressed [ 946.709252][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 946.751467][ T3703] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 946.879012][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.013658][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.138781][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.260956][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.382426][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.445467][ T3743] netlink: 'syz.2.9019': attribute type 1 has an invalid length. [ 947.478168][ T3743] netlink: 'syz.2.9019': attribute type 4 has an invalid length. [ 947.488587][ T3741] openvswitch: netlink: Flow actions attr not present in new flow. [ 947.521039][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.709270][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.828666][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 948.324266][ T3796] syzkaller1: entered promiscuous mode [ 948.333859][ T3796] syzkaller1: entered allmulticast mode [ 948.514319][ T3802] syzkaller0: entered promiscuous mode [ 948.523800][ T3802] syzkaller0: entered allmulticast mode [ 948.546807][ T3808] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 948.555732][ T3808] 0ªî{X¹¦: entered allmulticast mode [ 948.564591][ T3809] tipc: Enabled bearer , priority 0 [ 948.596385][ T3802] tipc: Resetting bearer [ 948.615988][ T3801] tipc: Resetting bearer [ 949.610914][T24198] tipc: Node number set to 692018912 [ 950.650839][ T3801] tipc: Disabling bearer [ 950.930438][ T3841] __nla_validate_parse: 23 callbacks suppressed [ 950.930460][ T3841] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9053'. [ 950.949326][ T3843] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9054'. [ 951.127284][ T3857] netlink: 'syz.0.9059': attribute type 1 has an invalid length. [ 951.296783][ T3866] syzkaller0: entered allmulticast mode [ 951.592776][ T3885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9070'. [ 951.602188][ T3885] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9070'. [ 951.613665][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9070'. [ 951.617812][ T3886] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9069'. [ 951.629269][ T3885] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.9070'. [ 951.741065][ T6062] net_ratelimit: 16 callbacks suppressed [ 951.741089][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 951.869439][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.000805][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.129204][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.172405][ T30] audit: type=1107 audit(1758873813.518:6): pid=3898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' <ÆD9Mñ)(Ç!ˆ¦wž' [ 952.240387][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.270213][ T3906] netlink: 'syz.2.9078': attribute type 1 has an invalid length. [ 952.333993][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9078'. [ 952.349311][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.459368][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.491056][ T3916] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9081'. [ 952.533989][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9081'. [ 952.569160][ T6062] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.700595][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.828587][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.969900][ T3950] tipc: Enabled bearer , priority 0 [ 952.977530][ T3950] syzkaller0: entered promiscuous mode [ 952.983852][ T3950] syzkaller0: entered allmulticast mode [ 952.996133][ T3950] tipc: Resetting bearer [ 953.091421][ T3950] tipc: Resetting bearer [ 953.130122][ T3950] tipc: Disabling bearer [ 953.823187][ T3991] netlink: 'syz.0.9108': attribute type 1 has an invalid length. [ 954.175345][ T4011] tunl0: entered promiscuous mode [ 954.184105][ T4011] netlink: 'syz.2.9113': attribute type 3 has an invalid length. [ 955.495969][ T4066] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 955.791201][ T4089] bond0: entered allmulticast mode [ 955.796430][ T4089] bond_slave_0: entered allmulticast mode [ 955.810896][ T4089] bond_slave_1: entered allmulticast mode [ 955.816756][ T4089] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode [ 955.997443][ T4103] __nla_validate_parse: 12 callbacks suppressed [ 955.997464][ T4103] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9146'. [ 956.135084][ T4110] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9148'. [ 956.152685][ T4110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9148'. [ 956.224477][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9151'. [ 956.239003][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9151'. [ 956.401179][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9154'. [ 956.413949][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9154'. [ 956.465498][ T4133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9156'. [ 956.589251][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9156'. [ 956.599464][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9157'. [ 956.819044][ T12] net_ratelimit: 35 callbacks suppressed [ 956.819066][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 956.950503][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 956.979982][ T4161] openvswitch: netlink: IPv4 tun info is not correct [ 957.009455][ T4164] tipc: New replicast peer: 255.255.255.255 [ 957.016023][ T4164] tipc: Enabled bearer , priority 10 [ 957.072104][ T1160] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.201227][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.320328][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.432694][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.597628][T28154] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.729565][ T6476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.734592][ T4197] openvswitch: netlink: Message has 4 unknown bytes. [ 957.964237][ T4206] hsr0 speed is unknown, defaulting to 1000 [ 958.004634][ T4206] lo speed is unknown, defaulting to 1000 [ 958.038042][ T4206] lo speed is unknown, defaulting to 1000 [ 958.077124][ T4211] netlink: 'syz.6.9183': attribute type 1 has an invalid length. [ 958.128415][T28514] tipc: Node number set to 3512951603 [ 958.186683][ T4211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 958.348586][T27751] ================================================================== [ 958.356688][T27751] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 958.364270][T27751] Read of size 8 at addr ffff88805f45c0a0 by task khidpd_00070008/27751 [ 958.372587][T27751] [ 958.374906][T27751] CPU: 0 UID: 0 PID: 27751 Comm: khidpd_00070008 Not tainted syzkaller #0 PREEMPT(full) [ 958.374929][T27751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 958.374941][T27751] Call Trace: [ 958.374951][T27751] [ 958.374960][T27751] dump_stack_lvl+0x189/0x250 [ 958.374984][T27751] ? __kasan_check_byte+0x12/0x40 [ 958.375010][T27751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.375030][T27751] ? lock_release+0x4b/0x3e0 [ 958.375057][T27751] ? __virt_addr_valid+0x4a5/0x5c0 [ 958.375081][T27751] print_report+0xca/0x240 [ 958.375098][T27751] ? __mutex_lock+0x801/0x1350 [ 958.375116][T27751] kasan_report+0x118/0x150 [ 958.375140][T27751] ? __mutex_lock+0x801/0x1350 [ 958.375162][T27751] __mutex_lock+0x801/0x1350 [ 958.375182][T27751] ? __mutex_lock+0x5bb/0x1350 [ 958.375203][T27751] ? l2cap_unregister_user+0x6a/0x1b0 [ 958.375230][T27751] ? __pfx___mutex_lock+0x10/0x10 [ 958.375249][T27751] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 958.375272][T27751] l2cap_unregister_user+0x6a/0x1b0 [ 958.375298][T27751] hidp_session_thread+0x3c9/0x410 [ 958.375331][T27751] ? __pfx_hidp_session_thread+0x10/0x10 [ 958.375355][T27751] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 958.375371][T27751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 958.375399][T27751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 958.375424][T27751] ? __kthread_parkme+0x7b/0x200 [ 958.375443][T27751] ? __kthread_parkme+0x1a1/0x200 [ 958.375463][T27751] kthread+0x70e/0x8a0 [ 958.375485][T27751] ? __pfx_hidp_session_thread+0x10/0x10 [ 958.375509][T27751] ? __pfx_kthread+0x10/0x10 [ 958.375530][T27751] ? _raw_spin_unlock_irq+0x23/0x50 [ 958.375545][T27751] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.375562][T27751] ? __pfx_kthread+0x10/0x10 [ 958.375583][T27751] ret_from_fork+0x439/0x7d0 [ 958.375602][T27751] ? __pfx_ret_from_fork+0x10/0x10 [ 958.375621][T27751] ? __switch_to_asm+0x39/0x70 [ 958.375642][T27751] ? __switch_to_asm+0x33/0x70 [ 958.375662][T27751] ? __pfx_kthread+0x10/0x10 [ 958.375683][T27751] ret_from_fork_asm+0x1a/0x30 [ 958.375712][T27751] [ 958.375718][T27751] [ 958.577557][T27751] Allocated by task 27159: [ 958.581956][T27751] kasan_save_track+0x3e/0x80 [ 958.586681][T27751] __kasan_kmalloc+0x93/0xb0 [ 958.591283][T27751] __kmalloc_noprof+0x27a/0x4f0 [ 958.596147][T27751] hci_alloc_dev_priv+0x28/0x2060 [ 958.601176][T27751] vhci_create_device+0x120/0x650 [ 958.606198][T27751] vhci_write+0x3ce/0x4a0 [ 958.610528][T27751] vfs_write+0x5c9/0xb30 [ 958.614763][T27751] ksys_write+0x145/0x250 [ 958.619088][T27751] do_syscall_64+0xfa/0x3b0 [ 958.623592][T27751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.629998][T27751] [ 958.632339][T27751] Freed by task 27159: [ 958.636397][T27751] kasan_save_track+0x3e/0x80 [ 958.641075][T27751] kasan_save_free_info+0x46/0x50 [ 958.646193][T27751] __kasan_slab_free+0x5b/0x80 [ 958.650972][T27751] kfree+0x18e/0x440 [ 958.654860][T27751] bt_host_release+0x82/0x90 [ 958.659463][T27751] device_release+0x9c/0x1c0 [ 958.664085][T27751] kobject_put+0x22b/0x480 [ 958.668507][T27751] vhci_release+0x15a/0x1a0 [ 958.673010][T27751] __fput+0x44c/0xa70 [ 958.676981][T27751] task_work_run+0x1d1/0x260 [ 958.681561][T27751] do_exit+0x6b5/0x2300 [ 958.685712][T27751] do_group_exit+0x21c/0x2d0 [ 958.690294][T27751] get_signal+0x1286/0x1340 [ 958.694784][T27751] arch_do_signal_or_restart+0x9a/0x750 [ 958.700324][T27751] exit_to_user_mode_loop+0x75/0x110 [ 958.705603][T27751] do_syscall_64+0x2bd/0x3b0 [ 958.710193][T27751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.716079][T27751] [ 958.718394][T27751] Last potentially related work creation: [ 958.724090][T27751] kasan_save_stack+0x3e/0x60 [ 958.728759][T27751] kasan_record_aux_stack+0xbd/0xd0 [ 958.733949][T27751] insert_work+0x3d/0x330 [ 958.738276][T27751] __queue_work+0xbaf/0xfb0 [ 958.742772][T27751] queue_work_on+0x181/0x270 [ 958.747349][T27751] process_scheduled_works+0xae1/0x17b0 [ 958.752882][T27751] worker_thread+0x8a0/0xda0 [ 958.757460][T27751] kthread+0x70e/0x8a0 [ 958.761523][T27751] ret_from_fork+0x439/0x7d0 [ 958.766099][T27751] ret_from_fork_asm+0x1a/0x30 [ 958.770856][T27751] [ 958.773168][T27751] Second to last potentially related work creation: [ 958.779744][T27751] kasan_save_stack+0x3e/0x60 [ 958.784415][T27751] kasan_record_aux_stack+0xbd/0xd0 [ 958.789602][T27751] insert_work+0x3d/0x330 [ 958.793926][T27751] __queue_work+0xcd2/0xfb0 [ 958.798416][T27751] call_timer_fn+0x17b/0x5f0 [ 958.803011][T27751] __run_timer_base+0x646/0x860 [ 958.807853][T27751] run_timer_softirq+0xb7/0x180 [ 958.812731][T27751] handle_softirqs+0x283/0x870 [ 958.817570][T27751] __irq_exit_rcu+0xca/0x1f0 [ 958.822149][T27751] irq_exit_rcu+0x9/0x30 [ 958.826382][T27751] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 958.832005][T27751] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 958.837998][T27751] [ 958.840363][T27751] The buggy address belongs to the object at ffff88805f45c000 [ 958.840363][T27751] which belongs to the cache kmalloc-8k of size 8192 [ 958.854518][T27751] The buggy address is located 160 bytes inside of [ 958.854518][T27751] freed 8192-byte region [ffff88805f45c000, ffff88805f45e000) [ 958.868405][T27751] [ 958.870723][T27751] The buggy address belongs to the physical page: [ 958.877127][T27751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f458 [ 958.885882][T27751] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 958.894370][T27751] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 958.901908][T27751] page_type: f5(slab) [ 958.905879][T27751] raw: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122 [ 958.914455][T27751] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 958.923034][T27751] head: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122 [ 958.931705][T27751] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 958.940456][T27751] head: 00fff00000000003 ffffea00017d1601 00000000ffffffff 00000000ffffffff [ 958.949210][T27751] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 958.957870][T27751] page dumped because: kasan: bad access detected [ 958.964288][T27751] page_owner tracks the page as allocated [ 958.970007][T27751] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6472, tgid 6472 (kworker/u8:32), ts 717159027881, free_ts 717135736270 [ 958.991627][T27751] post_alloc_hook+0x240/0x2a0 [ 958.996404][T27751] get_page_from_freelist+0x21e4/0x22c0 [ 959.001943][T27751] __alloc_frozen_pages_noprof+0x181/0x370 [ 959.007765][T27751] alloc_pages_mpol+0x232/0x4a0 [ 959.012786][T27751] allocate_slab+0x8a/0x370 [ 959.017282][T27751] ___slab_alloc+0xbeb/0x1420 [ 959.021957][T27751] __kmalloc_noprof+0x305/0x4f0 [ 959.026804][T27751] __sta_info_alloc+0xce6/0x2640 [ 959.031732][T27751] ieee80211_ibss_add_sta+0x5b7/0x870 [ 959.037100][T27751] ieee80211_ibss_rx_queued_mgmt+0x1783/0x2ae0 [ 959.043258][T27751] ieee80211_iface_work+0x85f/0x12d0 [ 959.048623][T27751] cfg80211_wiphy_work+0x2bb/0x470 [ 959.053810][T27751] process_scheduled_works+0xae1/0x17b0 [ 959.059343][T27751] worker_thread+0x8a0/0xda0 [ 959.063924][T27751] kthread+0x70e/0x8a0 [ 959.067984][T27751] ret_from_fork+0x439/0x7d0 [ 959.072564][T27751] page last free pid 27102 tgid 27102 stack trace: [ 959.079052][T27751] __free_frozen_pages+0xbc4/0xd30 [ 959.084163][T27751] __put_partials+0x156/0x1a0 [ 959.088830][T27751] put_cpu_partial+0x17c/0x250 [ 959.093604][T27751] __slab_free+0x2d5/0x3c0 [ 959.098033][T27751] qlist_free_all+0x97/0x140 [ 959.102621][T27751] kasan_quarantine_reduce+0x148/0x160 [ 959.108079][T27751] __kasan_slab_alloc+0x22/0x80 [ 959.112926][T27751] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 959.118476][T27751] getname_flags+0xb8/0x540 [ 959.123093][T27751] __x64_sys_symlinkat+0x7a/0xb0 [ 959.128040][T27751] do_syscall_64+0xfa/0x3b0 [ 959.132558][T27751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.138451][T27751] [ 959.140762][T27751] Memory state around the buggy address: [ 959.146388][T27751] ffff88805f45bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 959.154529][T27751] ffff88805f45c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.162578][T27751] >ffff88805f45c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.170885][T27751] ^ [ 959.175981][T27751] ffff88805f45c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.184043][T27751] ffff88805f45c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.192093][T27751] ================================================================== [ 959.202697][T27751] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 959.209910][T27751] CPU: 0 UID: 0 PID: 27751 Comm: khidpd_00070008 Not tainted syzkaller #0 PREEMPT(full) [ 959.219704][T27751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.229750][T27751] Call Trace: [ 959.233020][T27751] [ 959.235939][T27751] dump_stack_lvl+0x99/0x250 [ 959.240528][T27751] ? __asan_memcpy+0x40/0x70 [ 959.245109][T27751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.250306][T27751] ? __pfx__printk+0x10/0x10 [ 959.254895][T27751] vpanic+0x281/0x750 [ 959.258873][T27751] ? __pfx_vpanic+0x10/0x10 [ 959.263376][T27751] ? irqentry_exit+0x74/0x90 [ 959.268319][T27751] panic+0xb9/0xc0 [ 959.272048][T27751] ? __pfx_panic+0x10/0x10 [ 959.276482][T27751] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 959.282364][T27751] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 959.288255][T27751] ? __mutex_lock+0x801/0x1350 [ 959.293014][T27751] check_panic_on_warn+0x89/0xb0 [ 959.298300][T27751] ? __mutex_lock+0x801/0x1350 [ 959.303060][T27751] end_report+0x78/0x160 [ 959.307298][T27751] kasan_report+0x129/0x150 [ 959.311799][T27751] ? __mutex_lock+0x801/0x1350 [ 959.316561][T27751] __mutex_lock+0x801/0x1350 [ 959.321153][T27751] ? __mutex_lock+0x5bb/0x1350 [ 959.325910][T27751] ? l2cap_unregister_user+0x6a/0x1b0 [ 959.331283][T27751] ? __pfx___mutex_lock+0x10/0x10 [ 959.336316][T27751] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 959.342206][T27751] l2cap_unregister_user+0x6a/0x1b0 [ 959.347406][T27751] hidp_session_thread+0x3c9/0x410 [ 959.352518][T27751] ? __pfx_hidp_session_thread+0x10/0x10 [ 959.358156][T27751] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 959.364041][T27751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 959.370286][T27751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 959.376528][T27751] ? __kthread_parkme+0x7b/0x200 [ 959.381471][T27751] ? __kthread_parkme+0x1a1/0x200 [ 959.386492][T27751] kthread+0x70e/0x8a0 [ 959.390559][T27751] ? __pfx_hidp_session_thread+0x10/0x10 [ 959.396201][T27751] ? __pfx_kthread+0x10/0x10 [ 959.400784][T27751] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.405971][T27751] ? lockdep_hardirqs_on+0x9c/0x150 [ 959.411162][T27751] ? __pfx_kthread+0x10/0x10 [ 959.415748][T27751] ret_from_fork+0x439/0x7d0 [ 959.420333][T27751] ? __pfx_ret_from_fork+0x10/0x10 [ 959.425436][T27751] ? __switch_to_asm+0x39/0x70 [ 959.430196][T27751] ? __switch_to_asm+0x33/0x70 [ 959.434952][T27751] ? __pfx_kthread+0x10/0x10 [ 959.439538][T27751] ret_from_fork_asm+0x1a/0x30 [ 959.444311][T27751] [ 959.447605][T27751] Kernel Offset: disabled [ 959.451916][T27751] Rebooting in 86400 seconds..