last executing test programs: 19m23.85502422s ago: executing program 1 (id=3680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xeaffffff}]}}}]}, 0x3c}}, 0x0) (async) close(r6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xb, 0x3}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc0d0) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x8}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="27030200080314000e00072f01000000000000113cfd8aa3bc10b03dda092f646855d8b685c8f1e667e73f388639466389cbbc24f4fbcf2f21b20348fff4a1f786903db6089a079b7b2f40b465fbdb", 0x4f}, {}], 0x2}, 0x5) 19m23.07128448s ago: executing program 2 (id=3684): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) ppoll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600008006", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/100, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1009, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x94) 19m23.040983534s ago: executing program 3 (id=3685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000001010102000000000000000002000006faffffff14000180080001000000000008000200ac1414aa0c0019800800010082000000"], 0x38}, 0x1, 0x0, 0x0, 0x48d4}, 0x24000002) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000001010102000000000000000002000006faffffff14000180080001000000000008000200ac1414aa0c0019800800010082000000"], 0x38}, 0x1, 0x0, 0x0, 0x48d4}, 0x24000002) (async) 19m22.901456154s ago: executing program 2 (id=3686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa000000000000711013000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x80, 0x6}, {0xfa, 0x1}, {0x94, 0x5}, {0x10, 0x3}], "da3277cc0ed04c25"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x8000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000040)) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m18.104434212s ago: executing program 1 (id=3687): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 19m17.452252079s ago: executing program 2 (id=3688): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000d609000000000000040000048911bc000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x633c}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x11, &(0x7f0000001680)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=0x0, @ANYBLOB="010422bd7000f80008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600008006", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x95) 19m16.702817358s ago: executing program 3 (id=3689): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 19m16.560393812s ago: executing program 1 (id=3690): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) close(r1) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) write(r1, &(0x7f0000000000)="ea", 0x1) (async) write(r1, &(0x7f00000002c0)="04", 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) (async) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) close(r1) (async) 19m15.391700358s ago: executing program 3 (id=3693): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48001900", @ANYRES16=0x0, @ANYBLOB="553900000000000000000100000008000100030000002400048005000300010000000500030000000000050003000000000005000300020000000800020003000000"], 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f0001"], 0x90}}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0x20000000) 19m13.519584413s ago: executing program 2 (id=3695): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x4040000) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$netlink(0x10, 0x3, 0xc) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19m12.642328044s ago: executing program 3 (id=3697): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='<\x00\x00\x00 \x00\x00\x00', @ANYRES32, @ANYBLOB="40207633041f34579125198eb042087536a6d847ba4b137da6daa6c52b55aebf9a8d1d6d1d846805e4e16184b485d393f5ad0ff6b4b3d19fef011b9baea1437182721467e772e689fe5c4ccd3b93bc471a03ae09f96afcf7973642bf5cb2ad211a8c3c05b70d02ed080bedb36a65394445d95308d57600e47bf2af8254491077697ddbf7018066f56b26ae10d2235d75b5aa31d41e0fe8f0e2cc47bc371d5be6d9f587e0c13ea7845146f1d5ef747cd1e82adee299b0cae6e4f72a18abdfa6953101da41c62b5e1182ff9d1e32d9d75e19f1cad057f1309f92bc2099d2cfd1fe46320bf896b6", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000900)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) read(r5, &(0x7f00000000c0)=""/102, 0x66) poll(&(0x7f00000002c0)=[{r5, 0xc010}, {r1, 0x80}, {r0, 0x2080}], 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000002000258f29bd7020fddbdf250a006e8aaab18f4576800000080006c0d7e1ffff130002"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x840) r7 = gettid() sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xb0, 0x21, 0x800, 0x70bd2d, 0x25dfdbfc, {0x1}, [@nested={0x9a, 0x31, 0x0, 0x1, [@nested={0x4, 0x6e}, @generic="cdd573f7a2c29e1411160a54d62675bbfe41d2b6e8766528f60325832706e9484a7c807424fd52b833d494cfa74ceac4af7bb6ffc225f5511133745dff4f27e8b559ce582b8530bf322dddc10381f0f60d857998d739a80fa15978d6b22a352bdd6f162a11162badaacb9ddecf9a5c742e9fe892548fc00b2f19ec7bc5eaed81af8d7c561456", @typed={0x8, 0xc8, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x145}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000010800000000fddbb32fd10e0000", @ANYRES32=0x0, @ANYBLOB="100000008196010014001680100001800c000400700300000700000008001b0000000000"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r9, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x20001}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000003"], 0x10}}], 0x2, 0xc88c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19m12.453376658s ago: executing program 1 (id=3698): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x6c7fb8fd469b60ec, 0x803, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0xd, {0xa, 0x4e24, 0x0, @mcast1, 0x3}}, 0x24) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000500)={r7, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r6, 0x8}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@ipv4_delrule={0x6c, 0x21, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x80, 0x0, 0xf, 0x1, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_SRC={0x8, 0x2, @broadcast}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x900}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x80000000}]}, 0x6c}}, 0x4000051) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 19m9.918575271s ago: executing program 1 (id=3701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "bfae21282fec1ee0", "b982e213f1b4f6b1188f9221a604dad1"}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) sendmmsg$inet_sctp(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="0268274727e1d9af3bca61458b6e9a732fe93b77d47995e195e3b5cfca1af274a4b3e9d9b64964022693541e2cc44d208fa12868d549f64eed7f6498157f2b59efb726627775bfedf8a81a54ec87363fd1cca6132215bead53688a547a3f065851965fdb0b00e80aaa71e5f5e7458674583121b2338afa624cf78fc3f6b89e66", 0x80}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001200000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt(r3, 0x7fffffff, 0x9, &(0x7f0000005e80)="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", 0x1000) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4e82, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0x5, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0x9, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x0, 0x4, 0x3, 0x80000000, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0xc, 0x6, 0x1000, 0x6, 0xa, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x5, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x8000, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x2, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x2000007, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x4}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0x8, 0x4, 0x0, 0x4, 0x9, 0xfffffff8, 0x1d, 0xff, 0x4, 0x7, 0x2, 0xfffffffc, 0x275d, 0xffffffff, 0x4, 0x5, 0x4b, 0x8, 0x7, 0x2, 0x100400, 0x9, 0x7d4, 0x6d59c30b, 0x6, 0x0, 0x9, 0x1, 0x1ff, 0xff, 0x3, 0xffff, 0x400, 0x20a, 0x200, 0xd8e9, 0xa48, 0xc70, 0x400, 0x7, 0x7a, 0x7fff, 0x7, 0x13, 0x4, 0xfffffffe, 0x7, 0x1800000, 0x4, 0xffff, 0x80000000, 0x3, 0x0, 0x4, 0x5, 0xd69, 0x7, 0x5, 0x2, 0x101, 0xd, 0x7, 0xffffffff, 0x9, 0x4, 0xc, 0x3, 0x3, 0x8, 0xe, 0x6, 0x5, 0x8, 0x2d, 0x0, 0x13, 0x10, 0x1ff, 0xa8, 0x2, 0x3, 0x401, 0x7, 0xf, 0x0, 0x4f, 0xffffffff, 0x7, 0x7fff, 0x6, 0xc5c, 0x5, 0xd, 0xb4, 0x80, 0x7, 0x7f, 0x4, 0x3d62, 0x7, 0x8, 0x200, 0x5, 0x100, 0xc2c, 0x6, 0x80, 0x63, 0x80, 0x6, 0x1, 0x4, 0x4, 0x4, 0xb, 0x5, 0x7, 0x9d, 0x120, 0x9, 0xfffffff6, 0x0, 0x0, 0x96, 0x1, 0xa2, 0x8, 0x3, 0x6, 0x7, 0x6, 0x3, 0x80, 0x6281, 0x125, 0x9, 0x10, 0xfffff000, 0x2, 0xfffffff8, 0x9, 0x9, 0x101, 0x6, 0x3, 0x2, 0x8, 0x7fff, 0x0, 0x0, 0x2f3, 0x4, 0x0, 0x0, 0x3, 0xa80, 0x8, 0x8, 0x7d2, 0x7f, 0x60000, 0x2, 0xfffffc01, 0x8, 0xfffffff9, 0x988, 0x101, 0xac3, 0x49da481b, 0x0, 0x0, 0x7fffffff, 0xa45, 0x7, 0xb, 0x9, 0x0, 0xffffffc0, 0x6b50, 0x0, 0xabd, 0x1, 0xef9c, 0x7, 0x6e, 0x9, 0x1, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x9, 0x7, 0x4, 0x6, 0x0, 0x2, 0x0, 0x4, 0x7fff, 0x81, 0x8, 0x80, 0x0, 0xfff, 0x4, 0xdb4d, 0x975, 0x2, 0x3fffc00, 0x0, 0x0, 0x6d, 0x9, 0x80000000, 0x2ad, 0xf4c, 0x9a27, 0x0, 0xfff, 0x6, 0x3ff, 0x10001, 0x0, 0x9, 0xc, 0x61c, 0x7, 0x3, 0x1ff, 0x10000, 0x9, 0xffffffff, 0x2, 0x9, 0x7e0995af, 0xfffffff9, 0x0, 0x7, 0xfff, 0x2, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x8, 0xa150, 0x4, 0x71, 0x9, 0x4, 0x7fe]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) 19m8.115672404s ago: executing program 3 (id=3702): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0xf8, 0x18, 0x1, 0x0, 0x100, {{@in=@initdev={0xac, 0x1e, 0x3, 0x0}, @in=@remote, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in6=@mcast1, {0xfe, 0x7, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@proto={0x5, 0x19, 0x2b}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00'}) accept$packet(r0, 0x0, 0x0) 19m8.06021578s ago: executing program 2 (id=3703): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}}, 0x4044000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000140)=""/222, 0x0, 0x8}, 0x94) 19m4.319011748s ago: executing program 2 (id=3706): r0 = epoll_create1(0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x13, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e23, 0x7, @dev, 0x400000}, 0xffffffffffffffff, {[0x0, 0x10000, 0x0, 0xfffffffc, 0xfffffffe, 0x3, 0x0, 0x200]}}, 0x5c) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) recvmmsg(r2, 0x0, 0x0, 0x43, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x2010, r3, 0x27577000) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) shutdown(r2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a300000000014000280060001", 0x27}], 0x1}, 0x4008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(r0) 19m3.163983658s ago: executing program 3 (id=3707): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x51afb96f, @vifc_lcl_addr=@rand_addr=0x64010100, @private=0xa010102}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 19m2.125024478s ago: executing program 1 (id=3708): r0 = socket(0x1, 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0x8004b707, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000080)='{[\x00', 0xa000, &(0x7f0000000100)={@_ha_fsid={[0x7fffffff, 0x1]}, {0xffff, 0x2, 0x9, 0x2}}, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x15, '\x00', 0x0, @sk_skb, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000006d0001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a00000003000000180034801400350070696d367265673100000000000000001400350062726964676530"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c) listen(r6, 0x0) ppoll(&(0x7f0000000180), 0x1f, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000180)={[0x9da6]}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x0, {{0x2d, 0x4, 0x0, 0xa, 0xb4, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xe1, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, @rr={0x7, 0x7, 0x1e, [@remote]}, @noop, @cipso={0x86, 0x64, 0x5, [{0x7, 0x12, "45256be4134cde8af8abcb6f7542102e"}, {0x2, 0x2}, {0x0, 0x3, ')'}, {0x5, 0x7, "4136ed9857"}, {0x2, 0x8, "a091c9bc5103"}, {0x7, 0xc, "382f0e4a7be9ac966531"}, {0x6, 0xd, "4f84596500103212a51881"}, {0x1, 0x10, "ba19c71ea64a11fb39a2da53bdef"}, {0x7, 0xf, "6bfca33e3c09813b7431ed153a"}]}, @lsrr={0x83, 0xb, 0xac, [@private=0xa010100, @local]}, @ssrr={0x89, 0x7, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000400)={0x1, 0x0, 0xde, 0xc81, @vifc_lcl_ifindex=r7, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18150000", @ANYRES32=r4, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000006000000185a00000900000000000000000000000000185a000007000000000000000000000017302000080000009500000000000000000000000000850000004000"/146], &(0x7f0000000600)='syzkaller\x00', 0x8, 0xea, &(0x7f0000000640)=""/234, 0x41100, 0x60, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r4], &(0x7f00000007c0)=[{0x0, 0x4, 0x9, 0x4}, {0x2, 0x2, 0xc, 0x5}], 0x10, 0x2}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000100)="200000001a005f0400f9f4070009040580022000000009000000000008000100", 0x20) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r10, 0xf5f) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000fddbdf250100f3ffa0b61ab65f7b7be7fa6ba943"], 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) close(0x3) 18m51.022794854s ago: executing program 32 (id=3704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv4_deladdr={0x28, 0x15, 0x300, 0x70bd26, 0x25dfdbff, {0x2, 0x7f, 0x8, 0x0, r9}, [@IFA_BROADCAST={0xfffffd0e, 0x4, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb5d7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x20000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r12, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r12, 0xda90) accept4(r12, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) syz_emit_ethernet(0x46, &(0x7f0000000a80)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x6, 0x6, "e295e6", 0x8, 0x11, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4e20, 0x4e21, 0x8}}}}}}, 0x0) 18m49.131790055s ago: executing program 33 (id=3705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc03, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x1, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x8, 0x6, 0x0, 0x1, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004865}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf25100000001400010002"], 0x28}}, 0x4000080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f00000000c0)=']', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x15, r3, 0x1, 0x2}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf250907000008000200080000002c0001800800060002000000050002000500000008000300e0000002060005004e210000080006000200000014000180060005004e2400000600010008000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010041f68500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 18m47.937433727s ago: executing program 34 (id=3706): r0 = epoll_create1(0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x13, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e23, 0x7, @dev, 0x400000}, 0xffffffffffffffff, {[0x0, 0x10000, 0x0, 0xfffffffc, 0xfffffffe, 0x3, 0x0, 0x200]}}, 0x5c) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) recvmmsg(r2, 0x0, 0x0, 0x43, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x2010, r3, 0x27577000) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) shutdown(r2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a300000000014000280060001", 0x27}], 0x1}, 0x4008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(r0) 18m45.868131051s ago: executing program 35 (id=3708): r0 = socket(0x1, 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0x8004b707, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000080)='{[\x00', 0xa000, &(0x7f0000000100)={@_ha_fsid={[0x7fffffff, 0x1]}, {0xffff, 0x2, 0x9, 0x2}}, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x15, '\x00', 0x0, @sk_skb, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000006d0001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a00000003000000180034801400350070696d367265673100000000000000001400350062726964676530"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c) listen(r6, 0x0) ppoll(&(0x7f0000000180), 0x1f, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000180)={[0x9da6]}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x0, {{0x2d, 0x4, 0x0, 0xa, 0xb4, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xe1, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, @rr={0x7, 0x7, 0x1e, [@remote]}, @noop, @cipso={0x86, 0x64, 0x5, [{0x7, 0x12, "45256be4134cde8af8abcb6f7542102e"}, {0x2, 0x2}, {0x0, 0x3, ')'}, {0x5, 0x7, "4136ed9857"}, {0x2, 0x8, "a091c9bc5103"}, {0x7, 0xc, "382f0e4a7be9ac966531"}, {0x6, 0xd, "4f84596500103212a51881"}, {0x1, 0x10, "ba19c71ea64a11fb39a2da53bdef"}, {0x7, 0xf, "6bfca33e3c09813b7431ed153a"}]}, @lsrr={0x83, 0xb, 0xac, [@private=0xa010100, @local]}, @ssrr={0x89, 0x7, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000400)={0x1, 0x0, 0xde, 0xc81, @vifc_lcl_ifindex=r7, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18150000", @ANYRES32=r4, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000006000000185a00000900000000000000000000000000185a000007000000000000000000000017302000080000009500000000000000000000000000850000004000"/146], &(0x7f0000000600)='syzkaller\x00', 0x8, 0xea, &(0x7f0000000640)=""/234, 0x41100, 0x60, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r4], &(0x7f00000007c0)=[{0x0, 0x4, 0x9, 0x4}, {0x2, 0x2, 0xc, 0x5}], 0x10, 0x2}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000100)="200000001a005f0400f9f4070009040580022000000009000000000008000100", 0x20) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r10, 0xf5f) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000fddbdf250100f3ffa0b61ab65f7b7be7fa6ba943"], 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) close(0x3) 18m44.622684954s ago: executing program 36 (id=3707): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x51afb96f, @vifc_lcl_addr=@rand_addr=0x64010100, @private=0xa010102}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m45.672846265s ago: executing program 9 (id=9047): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x33) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m45.430907185s ago: executing program 9 (id=9049): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000bf030000000000002500000006000000be91000000000000b5020000020000008500000005000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000002c0)=""/104, &(0x7f0000000340)=0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', r2, 0x2f, 0x8, 0x1, 0x2, 0x8, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0x81, 0x312a1fdd}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 2m44.85580241s ago: executing program 9 (id=9052): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a400fe0000000072030200000000131d400500000000004704000001ed00006b03feff000000001d440000000000007a0a00fe00ffffffd403000040000000b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m43.878049929s ago: executing program 9 (id=9063): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x300440f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9], 0x3c}}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140)=0xd669, 0x4) getsockopt$sock_int(r2, 0x1, 0x4a, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) 2m43.152350821s ago: executing program 9 (id=9068): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x18) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$unix(r1, &(0x7f0000000b00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 2m42.912573744s ago: executing program 9 (id=9072): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x40000}}], 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @uid=r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$unix(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9], 0x18, 0x4000840}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r0, r1+10000000}) socket$nl_route(0x10, 0x3, 0x0) 2m28.172647878s ago: executing program 6 (id=9167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x62080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1, 0x80000000}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x49, 0x0, 0x30, 0x1}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9484d11a3774547e}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2m27.983105418s ago: executing program 6 (id=9170): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) getpeername$l2tp6(r1, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x84}], 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000806400001c10000000000000a500feffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x6, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100210000000000000000008500000097000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="00ba5472d387dbe9abc89bc00187", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8=r3, @ANYRESHEX=r2], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x40, 0x9, 0x401, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}, 0x8000, 0x0, 0xa3, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x10, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) 2m27.80883703s ago: executing program 6 (id=9171): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a000000000106"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX], 0xe8}}, 0x0) close(r2) 2m27.763741576s ago: executing program 37 (id=9072): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x40000}}], 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @uid=r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$unix(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9], 0x18, 0x4000840}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r0, r1+10000000}) socket$nl_route(0x10, 0x3, 0x0) 2m27.503205695s ago: executing program 6 (id=9174): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xbc, 0x0, 0x32a, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf0}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x65a7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004) 2m26.975579987s ago: executing program 6 (id=9178): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000200)='H', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005680), 0x0, 0x404c044) (async) sendmmsg(r1, &(0x7f0000005680), 0x0, 0x404c044) 2m26.683965647s ago: executing program 6 (id=9180): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x4, @void}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x41, 0x1, 0x70bd25, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x9, 0xb, 0x0, 0x0, @str='}&:}\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76, 0x0, 0x0, 0x2b000000}, [@generic={0x7, 0x7, 0x0, 0xc, 0xb78b}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) socket$netlink(0x10, 0x3, 0x4) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r14, &(0x7f0000002fc0)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r14, 0x1) 2m11.60049578s ago: executing program 38 (id=9180): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x4, @void}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x41, 0x1, 0x70bd25, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x9, 0xb, 0x0, 0x0, @str='}&:}\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76, 0x0, 0x0, 0x2b000000}, [@generic={0x7, 0x7, 0x0, 0xc, 0xb78b}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) socket$netlink(0x10, 0x3, 0x4) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r14, &(0x7f0000002fc0)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r14, 0x1) 26.934655454s ago: executing program 5 (id=9752): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/43, 0x2b}, 0x7}], 0x1, 0x40000122, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r3], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58e5ffff170001040500"/20, @ANYRES32=0x0, @ANYBLOB="eab0817d0000000024001280110001006272696467655f736c617665000000000c00058005001b0001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f030200000000000000070000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff, 0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xff], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x168, 0x188, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) 25.996785517s ago: executing program 5 (id=9755): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="08002cbd7000ffdbdf25370000000c009900ce0a0000ff7f00000800a100ffffff7f0800a10006000000080057000008000005001901080000000800a000ff7f000008009f000300000005001801290000000800270003000000080027000100000008009f00060000000800a00007000000080022018e000000050018012500000008002201fd020000080027000100000008009f00020000000500000000000000000aa100070000000800a000010000000500190108000000"], 0xc0}}, 0x48080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014011a80100102803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f"], 0x134}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xcdc6594e517b92e0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68c1}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24044010) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400000000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="5606090000006f761c79f911e8cf0f003500128009000100626f6e644a235d6a0000000000000000000000001ba1489d0000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r8, 0x1, 0x8000, 0xe, 0xe, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x65, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@cipso={0x86, 0x44, 0x2, [{0x1, 0x7, "0137132ed2"}, {0x0, 0x4, "9be4"}, {0x5, 0x3, "c5"}, {0x0, 0xb, "484b1a97a454f1025b"}, {0x2, 0x8, "8164d1c6776d"}, {0x0, 0xf, "81c7006142920c5d0d660183e9"}, {0x6, 0xe, "f411de6f1e585c0624dc5bd1"}]}, @end, @ssrr={0x89, 0xb, 0x7d, [@loopback, @multicast1]}]}}}}}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r10, 0x89f0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000680)=0xe8) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)={0x14, 0x3d, 0x301, 0x70bd25, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x80) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000400)=@buf) 20.145621348s ago: executing program 5 (id=9761): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000280), 0x4) (async) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000340)={0xfff, 0x7ff, 0xb8}, 0xc) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000380)={@private=0xa010101, @private=0xa010100, @multicast2}, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000882}, 0x20000000) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000500)={0x8, 'syz_tun\x00', {'team0\x00'}, 0x40}) (async) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f00000005c0), &(0x7f0000000600)=0x40) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_MAC={0xa, 0x6, @random="46af134f8f75"}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d8afb6f753"}]]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0xc000) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000780)=@ethtool_channels={0x3c, 0x101, 0x0, 0x1ff, 0xf, 0x9, 0x9d, 0x5, 0x80000001}}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000900)={&(0x7f0000000800)=""/238, 0xee}) (async) splice(0xffffffffffffffff, &(0x7f0000000940)=0xffffffffffffe284, r4, &(0x7f0000000980)=0x81, 0x9, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_NETNS_COOKIE(0xffffffffffffffff, 0x1, 0x47, &(0x7f00000009c0), &(0x7f0000000a00)=0x8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x1d0, 0x1d0, 0xffffffff, 0x1d0, 0x2a8, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f0000000a40), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1f}, @loopback, 0x0, 0xffffffff, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x32, 0x2, 0x9}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x514, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x1b, "e0a2"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @empty, @local, @gre_key=0x80d, @gre_key=0xff2}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x31}, @multicast1, 0x0, 0xffffffff, 'ip6gre0\x00', 'gretap0\x00', {}, {}, 0x32, 0x2, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x3, 0x2, 0x2, 0x4, 0x4], 0x0, 0x2}, {0x0, [0x2, 0x1, 0x7, 0x6, 0x1], 0x5}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0xffff, 0x2]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, @gre_key=0x8, @port=0x4e21}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7fff, 0x3ff}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @broadcast, @local, @icmp_id=0x66, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000f40)={{0x3a, @rand_addr=0x64010102, 0x4e20, 0x1, 'lblc\x00', 0x17, 0x2, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0x6, 0x9, 0x8}}, 0x44) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4081) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000002c}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r10, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) 19.984354971s ago: executing program 5 (id=9763): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x1c, r1, 0x303, 0x0, 0xdfffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040890) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0}, &(0x7f0000000ec0)=0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x3ffffffe}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x1a00, 0xffffffff, 0x0, 0x70bd28, 0x70bd2d}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x30, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r12}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x7, 0x65, 0x0, 0x0, @str='^^\x00'}]}]}, 0x30}], 0x1}, 0x0) r13 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r18 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x141d, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)={0x20, 0x2a, 0x120, 0x70bd29, 0x7, "", [@typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xdc, 0x0, 0x0, @uid=r15}]}, 0x20}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r17}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, r13}}}, @rights={{0x18, 0x1, 0x1, [r18, r0]}}], 0xa8, 0x20008012}, 0x4000801) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r19 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r19, 0x0, 0xd0, 0x0, 0x0) 19.542637116s ago: executing program 5 (id=9766): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x0, {0x1, 0xff, 0x1}}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) (async) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) (async, rerun: 32) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 16.200201042s ago: executing program 5 (id=9771): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="5200000023000101f4020600"/41, 0x29) bind(r0, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x20}, 0x80) 3.943791646s ago: executing program 4 (id=9820): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000140)=0x5, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r10, @ANYBLOB="140012800b00010062726964676500000400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x69, 0x1000, 0x4, 0x500, 0x1, 0x2020000, r11}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}}, 0x0) 3.575843451s ago: executing program 0 (id=9824): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0xf5b1, 0x1ff, 0x1440, r2, 0x6, '\x00', r3, r1, 0x4, 0x0, 0x4, 0x806}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x8002, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000040)={0x62, 0x6, '\x00', [@ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) 3.332623312s ago: executing program 0 (id=9827): syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5c, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7ae"}}}}}}}, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x4e22, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x2, 0x48, 0x3, 0xffff, 0x5}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.380916605s ago: executing program 7 (id=9828): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4880) 2.277565757s ago: executing program 7 (id=9829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x1e, 0x3, 0xfffffffd) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7020000020000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000400b70400000000000085000000450000009500000000000000", @ANYRESHEX=r5], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r8, 0x25, 0x0, @void}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x228}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @printk={@lu}, @generic={0x5, 0x6, 0x3, 0x0, 0xa2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @map_val={0x18, 0x0, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x2, 0x4, 0x5, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000a00)='GPL\x00', 0x2, 0x4a, &(0x7f0000000a40)=""/74, 0x40f00, 0x64, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000000ac0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x5, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000b40)=[{0x0, 0x1, 0xe, 0x1}, {0x4, 0x2, 0x6, 0xc}, {0x5, 0x2, 0xd, 0x6}, {0x2, 0x4, 0xb, 0xb}], 0x10, 0xfffffff9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', r8, 0x10, 0x40, 0x8, 0x3, {{0x10, 0x4, 0x3, 0x1a, 0x40, 0x65, 0x0, 0x7, 0x2d, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @noop, @noop, @rr={0x7, 0xf, 0x91, [@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xdf, 0x0, 0x1, [0xe, 0x1, 0x200]}, @end]}}}}}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r15 = socket$inet6(0xa, 0x3, 0x7) socketpair(0x1e, 0x3, 0xc330, &(0x7f0000000140)={0xffffffffffffffff}) connect(r16, &(0x7f0000000480)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80) setsockopt$inet6_buf(r15, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r15, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r15, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 2.22776988s ago: executing program 8 (id=9830): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x25}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, &(0x7f0000000180)) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.226396024s ago: executing program 4 (id=9831): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x2, 0x2, 0x8, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x4}, 0x8) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d6b169576f728bb8ba1577c3c4d4076c58b2d47d0f603b35941a563a4edd700e1afaa41bb8e83e748e53c480938c282ffc74f8d910af08b840ac0cf8af4263e4f596abf79d771489fef7bfbe618f91a45158da81d1a9cc7afa503147066c", 0x5e}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="7ca68c9a8fc129087da83de31e95ef25061da3b414a4a908d40ca6b25b853d7076b5b103e9671a7dae08", 0x2a}, {&(0x7f0000000240)="4dcb8d606c231339ea12e79f0dc0a9dede3a0d5469e671ec75583cbbb53bd74a894827110c34cb882a5ce4d89ef1de6991c34301773addfef09be28fef7503", 0x3f}, {&(0x7f0000000280)="d1b7d8572d8e495a936bb5622bc4063b960571f5cead3b33820e22df8ada84bbf6145b2da94be7ee36275610302a2a86ed71ed62fd1263087960d71130c48c06dfcf48", 0x43}, {&(0x7f0000000300)="4e3d6eedbe39ac98bf90b23aa1dd2eaf3d25ec69884ebca150477a1076786f93a5527c8c7a7ae6e674ed4c83ac66ae694fbd5729fa7c28b4ede218120e65600cd4ae73653aa75a577731419bc90d1491cbc4b1562f1f794f2d6009e9a8fb12d8300a279f32a62a80b695072e6253e6a9c3800707f56b72cb68789ffe1633f8d10ea9e1746d3009dc38746391b3a249bd4a86daaf1c11", 0x96}, {&(0x7f00000003c0)="fd1b3ac747bba069327210da8e58508bb9a052b83efb3843a121f8225ae07c8eea036fb303d25908c740e0633451cf32be4e032298bcc84c6120385994aa72e68bc189bd0dd6ce911c6ae73c668281103f46b959fab9724af206da10b444dcff58e6804e6b677d67eda298f172f952dd360a707d0a7f934fca238c50dbdd8b63f3541b6d345a3424cd0d28069391c994b2fc02aaee3171a7bea1addaa1e61d28e34886f57d4774866070", 0xaa}, {&(0x7f0000000480)="52d91d44518a9ec71f75849772476ca6000d2bf440a1d7ffa22fe706128fc63e3a74f44918f2271d8a669db19db4c761a29f788fa5b7361b9493b6bb304a6bd96008775f1616129f31ef90cd0a7006118261b6b9460c5d2e", 0x58}], 0x8}, 0x4004000) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000600)=r4, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000640)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e21, @empty}, {0x307, @local}, 0x2, {0x2, 0x4e22, @loopback}, 'dummy0\x00'}) recvmsg(r5, &(0x7f00000029c0)={&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002900)=[{&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/22, 0x16}], 0x4, &(0x7f0000002940)=""/87, 0x57}, 0x40000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x1c, &(0x7f0000002a00)=[@in6={0xa, 0x4e20, 0x7, @loopback, 0x4}]}, &(0x7f0000002a80)=0x10) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000002ac0)=""/110, &(0x7f0000002b40)=0x6e) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002b80)={0x8, 0x5}, 0x2) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) close(r8) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000002bc0)) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f0000002c00)=0x400, 0x4) bind(r6, &(0x7f0000002c40)=@x25, 0x80) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002d00), r6) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000002f40)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d40)={0x1b0, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) bind$alg(r6, &(0x7f0000002f80)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000003000)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000003100)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000003140)={{{@in=@rand_addr=0x64010102, @in6=@private0, 0x4e22, 0x0, 0x4e22, 0x6, 0x8, 0xa0, 0xc0, 0x21, 0x0, r10}, {0x12, 0x100000001, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x7, 0x6, 0x3, 0xec72}, {0x830, 0xfffffffffffffffa, 0x7, 0xffffffffffffffff}, 0xc, 0x6e6bbb, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3501, 0x3, 0x3, 0xff, 0x6, 0x4b, 0x6}}, 0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000003240)={'dvmrp0\x00', 0x402}) 2.117638964s ago: executing program 0 (id=9832): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@random="b39325b29998", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@random="b39325b29998", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x2c000010) (async) sendmsg$nl_xfrm(r3, 0x0, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000400000000000000fc0000000000000000000000000000010000000000000000000000000000000000000000000000000a00108000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000030000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030200000000"], 0xb8}}, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000170aca4b32d08437c24c700103000000"], 0x14}, 0x1, 0x0, 0x0, 0x8019}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES8, @ANYRES32=r4, @ANYRES8=r4], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16=r6], 0x14) (async) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16=r6], 0x14) 2.028672526s ago: executing program 8 (id=9833): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000540)=0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$packet(r1, &(0x7f0000000840), 0x0, 0x24000890, &(0x7f0000000900)={0x11, 0x19, 0x0, 0x1, 0x5}, 0x14) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x11f}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98caee4fdbcfd11e35a7700"/141, 0xfffffffffffffeb4}, {&(0x7f0000000700)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd183679ad523d24d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b70a1b97fb3b8ef8f3b3c5b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512", 0x4a}, {&(0x7f0000000040)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d", 0x36}, {&(0x7f00000000c0)="fb411a9c85180744d674c3699fcb27d2e189c6", 0x13}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad805621611135174ea1fda23d1b330707712f0a6727094a6c9aed535e59d97ed4b742ac7c3bd29c5a66d576c5a0bb72826a3ec940c52a66bc0d72a103aace82852fc24e74c54f32186595aa44cb19d88f92aa9c7cec73bffb94fa7e26af47c8a37f8996e811cf7bf2edde3cee787", 0x98}], 0x7) write(r2, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003f", 0x3de) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000018c0)=@nat={'nat\x00', 0x19, 0x1, 0x166, [0x200000001740, 0x0, 0x0, 0x200000001770, 0x200000001846], 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/358]}, 0x1de) 1.864662816s ago: executing program 8 (id=9834): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) 1.573183694s ago: executing program 0 (id=9835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x20044000) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000040)={r1, 0x0, 0x6e4, 0x5, 0x2, 0x0, [0x2622, 0x8, 0xc7, 0xfff, 0x1, 0x298]}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0xa8011, r0, 0x2000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) 1.294444939s ago: executing program 4 (id=9836): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 1.163217383s ago: executing program 0 (id=9837): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x19) (async) r2 = socket$inet6(0xa, 0x6, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x48, 0x2, {{0x16, 0x4, 0x1, 0x15, 0x58, 0x65, 0x0, 0x3, 0x0, 0x0, @rand_addr=0x64010101, @multicast2, {[@ra={0x94, 0x4}, @generic={0x94, 0xf, "121b537a62655391b5462c8f2c"}, @cipso={0x86, 0x1b, 0x2, [{0x6, 0x3, 's'}, {0x7, 0xe, "00a138a475e4a60a29d28d5a"}, {0x0, 0x4, "9c35"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xb2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @end]}}}}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r2, 0x7, 0x4, 0x6}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000}, [@exit, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}, @ldst={0x0, 0x2, 0x3, 0x1, 0x1, 0x100, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x2, 0x9, 0x7, 0x40, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0xe1, &(0x7f0000000280)=""/225, 0x41100, 0x12, '\x00', r3, 0x1b, r4, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0xfffffff8, 0x5}, 0x10, r5, 0x0, 0xa, 0x0, &(0x7f0000000540)=[{0x4, 0x3, 0xc, 0x4}, {0x2, 0x1, 0x4, 0x7}, {0x4, 0x4, 0x4, 0x1}, {0x4, 0x5, 0xc, 0x8}, {0x1, 0x5, 0xc, 0x2}, {0x5, 0x3, 0x6, 0x4}, {0x2, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x2, 0xd}, {0x0, 0x1, 0xc, 0x6}, {0x2, 0x5, 0x1, 0x4}], 0x10, 0x4}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.events.local\x00', 0x0, 0x0) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x5, '\x00', r3, r1, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x10001, 0x24d, 0x3, 0x10, r9, 0x2, '\x00', r3, r4, 0x2, 0x4, 0x0, 0x3}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000840)={0x0, 0x10, '\x00', 0x1, &(0x7f0000000800)=[0x0, 0x0]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r8, 0x20, &(0x7f0000000a00)={&(0x7f0000000880)=""/104, 0x68, 0x0, &(0x7f0000000900)=""/233, 0xe9}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000000ac0)={0x1224, 0x36, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@typed={0xc5, 0x29, 0x0, 0x0, @binary="0637df50702152325fd45aca46899b27e96bc12f25e7d64df65751c7aa021b6d1c19c2e5421bb0da33be05c1f3efce401af7a932d58fe60ed2b858242460faf847ccd68c136856b6c7791f0e1f616715752dd5c859285c52ea88142991b3e12a5561c832343f4669d1e290b7501676dd7073ceeba0fef15a02a8099278be081907e23e8650e24d7f0704878ec829f8ce54fed79eae47c022cae14208ec0c6c2f6bcebcfa066852b585fa9d2fafff305edea028e4aad194fa0d4f0f39c265d53b98"}, @generic="74671abca299eab4cf16a5c26059511c1aa6d1a31961bf801ea2f57741b0e2b138bbb91e19388ad30a1753b4b622976c05964a8eed05e75cb134a3a9cb3b54c481e3fe0191db62a55bb5e91692d03c7988e877eae5ed3d99fd5efb36dca4e910a94b4b1e81639a958175b20303c126ce57a3d2d318e28e16a6e8d608c44bc8b2e09059c1cd1d7ed93afb684b751e8af660fa6a74c54054ddab96feabf9b6aac1ad4343cc702fe14c5e2a618ce591655a4960fb5872b1b73d156e542d5c35d237", @nested={0x8, 0x28, 0x0, 0x1, [@nested={0x4, 0x6f}]}, @generic="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", @generic="3495967474e89298230b545bb588b4092a8f2a9cc00402619944fb692514b1c527d66772cedf9fe378e2418fd720721847bc94bbf5436481f936f2c1957daf048b263a8bb3cbf90f475f9e", @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="69e26fbffd5c75f72009928a9e3e0df1ae1b6d215ba38b36"]}, 0x1224}, 0x1, 0x0, 0x0, 0x20000080}, 0x4854) close(r0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001d80)={0x7, 'ip6_vti0\x00', {0x99f}, 0xba}) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000001dc0)={0x0, 0xd, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0xfff1, [0x0, 0x2, 0x0, 0x17]}}, @generic={0x6, 0x1, 'd'}, @jumbo={0xc2, 0x4, 0xf5}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private2}, @pad1]}, 0x78) (async) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001e40)=r3) (async) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xc, 0x37}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x18000}, 0x4000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000002200)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x160, 0x9, 0xa, 0x5, 0x0, 0x0, {0xaf58b03570a438c9, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x11c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_DESC_CONCAT={0x110, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1de}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x807}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x220}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc15}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfeb2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x10000880) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002240)={@initdev, @empty, 0x0}, &(0x7f0000002280)=0xc) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000022c0)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r11, r12, 0x3, 0x1, 0x3}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x4, 0x10000, 0x10, 0x0, r8, 0x10000, '\x00', r3, r7, 0x2, 0x4, 0x3, 0x9}, 0x50) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r13, 0x40086e81, &(0x7f0000002440)=0xfff) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r13, 0x40189429, &(0x7f0000002480)={0x0, 0x7fffffffffffffff, 0x1}) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000024c0)={0x0, 0x0}, &(0x7f0000002500)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002540)={{{@in6=@mcast1, @in6=@local, 0x4e20, 0x38, 0x4e20, 0x6, 0xa, 0x20, 0x0, 0x87, 0x0, r14}, {0xfffffffffffffffd, 0x1, 0x0, 0x4, 0x401, 0x6, 0x59, 0x5770}, {0x13d7f0d0c000, 0x2, 0x7fff, 0x6}, 0x0, 0x6e6bb4, 0x1, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0x2b}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfffffff1, 0xfffffff9}}, 0xe8) 1.081807642s ago: executing program 4 (id=9838): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4880) 942.220296ms ago: executing program 7 (id=9839): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x3, 0xff, 0x1}, 0x2}, 0x18) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000040000000000000000000003000000000300000003000000000001010100000000000008000000"], 0x0, 0x58, 0x0, 0xa}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) listen(0xffffffffffffffff, 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000100), 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000006c0)={0x2c, r8, 0x1, 0x70bd2b, 0x25dfcbbf, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480d1}, 0x4c044) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x4, 0x1000, 0x0, 0xfffe, {[@window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0) 879.862688ms ago: executing program 8 (id=9840): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) getpeername(r0, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000880)=@ethtool_gstrings={0x1b, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r6, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000024001a80200004801c000180"], 0x44}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 810.838631ms ago: executing program 4 (id=9841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x14, 0x2d, 0x107, 0x70bd2e, 0x25dfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 583.532165ms ago: executing program 0 (id=9842): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @multicast2}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x4080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x8, [@union={0xb, 0x9, 0x0, 0x5, 0x1, 0x33b, [{0x6, 0x2, 0xf}, {0x3, 0x5, 0x5}, {0xa, 0x0, 0x3}, {0x9, 0x1, 0x80000000}, {0x8, 0x5, 0x7fff}, {0xf, 0x4, 0x97}, {0xb, 0x1, 0x5}, {0xe, 0x4, 0x9}, {0x4002, 0x4, 0x7}]}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xc, 0x3, 0x1000}]}, @var={0x4, 0x0, 0x0, 0xe, 0x3}, @fwd={0xd}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0xf}]}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0x800000, [{0xd, 0x4, 0x1b1}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x61, 0x30, 0x5f]}}, &(0x7f0000000600)=""/261, 0x10c, 0x105, 0x1, 0x8}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x4d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a0010006810000240012800b0001006272696467650000"], 0x50}}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r1, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 528.240366ms ago: executing program 7 (id=9843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x4101}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 424.705554ms ago: executing program 4 (id=9844): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000005780)=""/4097, 0x1001}, {&(0x7f00000003c0)=""/151, 0x97}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003580)=""/4072, 0xfe8}, {&(0x7f0000001040)=""/4095, 0xfff}, {&(0x7f0000000180)=""/166, 0xa6}], 0x3}, 0x7}], 0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 337.901121ms ago: executing program 8 (id=9845): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6e23, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 218.654609ms ago: executing program 7 (id=9846): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001a1401000c000000fbdbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x4000441}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x39, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRES8=0x0, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x200002, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 58.373982ms ago: executing program 7 (id=9847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="fd", 0x1}], 0x1}, 0x4) 0s ago: executing program 8 (id=9848): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sendmsg$rds(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r3 = socket(0x15, 0x5, 0x0) (rerun: 64) getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05008510000002000000850000007600000095000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}, 0x0) kernel console output (not intermixed with test programs): ][T13614] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9164'. [ 1497.201575][T13610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9164'. [ 1497.359490][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1497.793501][T13638] tipc: Enabling of bearer rejected, failed to enable media [ 1497.977055][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9173'. [ 1498.001263][T13643] netlink: 'syz.8.9173': attribute type 1 has an invalid length. [ 1498.063241][T13643] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1498.308658][T18763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1498.328510][T18763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1498.330276][T18763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1498.339227][T18763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1498.354385][T18763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1498.392142][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1498.616726][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9179'. [ 1498.620550][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9179'. [ 1498.771680][T13674] lo: left promiscuous mode [ 1498.779131][T13674] tunl0: left promiscuous mode [ 1498.785469][T13674] gre0: left promiscuous mode [ 1498.840957][T13674] erspan0: left promiscuous mode [ 1498.843707][T13674] ip_vti0: left promiscuous mode [ 1498.845099][T13674] ip6_vti0: left promiscuous mode [ 1498.847282][T13674] sit0: left promiscuous mode [ 1498.931323][T13674] ip6tnl0: left promiscuous mode [ 1498.935619][T13674] ip6gre0: left promiscuous mode [ 1498.937552][T13674] ip6gretap0: left promiscuous mode [ 1498.941492][T13674] .`: left promiscuous mode [ 1498.944578][T13674] 8021q: adding VLAN 0 to HW filter on device .` [ 1498.945382][T13674] nlmon0: left promiscuous mode [ 1498.946754][T13674] batadv0: left promiscuous mode [ 1498.948563][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.056736][T13674] geneve1: left promiscuous mode [ 1499.070927][T13674] ip6gre2: left promiscuous mode [ 1499.078692][T13674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1499.090412][T13674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1499.098893][ T5727] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1499.115198][T13674] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1499.136295][T13674] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1499.163268][T13674] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1499.165457][T13674] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1499.167548][T13674] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1499.169669][T13674] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1499.205644][T13674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1499.207881][T13674] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1499.208602][T13674] mac80211_hwsim hwsim127 wlan0: entered promiscuous mode [ 1499.210603][T13674] bridge0: port 1(batadv1) entered blocking state [ 1499.210707][T13674] bridge0: port 1(batadv1) entered forwarding state [ 1499.210941][T13674] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1499.293596][T13674] ip6gre3: left promiscuous mode [ 1499.316821][T13702] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 1499.352448][T11321] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1499.432361][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1499.562018][T13701] netlink: 'syz.6.9180': attribute type 1 has an invalid length. [ 1499.599621][T24682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1499.627146][T24682] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1499.737743][T13712] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9182'. [ 1499.925575][T13656] lo speed is unknown, defaulting to 1000 [ 1500.011299][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9184'. [ 1500.288033][T13721] erspan0: entered allmulticast mode [ 1500.472201][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1500.473601][ T1401] Bluetooth: hci0: command tx timeout [ 1500.770118][T13752] netlink: 'syz.5.9187': attribute type 11 has an invalid length. [ 1501.132375][T13767] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9189'. [ 1501.277535][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9190'. [ 1501.512420][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1501.554966][T13795] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9192'. [ 1501.611704][T13801] netlink: 'syz.8.9193': attribute type 10 has an invalid length. [ 1501.878774][T13656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.879015][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.879161][T13656] bridge_slave_0: entered allmulticast mode [ 1501.881162][T13656] bridge_slave_0: entered promiscuous mode [ 1501.885469][T13656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.885607][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.885748][T13656] bridge_slave_1: entered allmulticast mode [ 1501.887547][T13656] bridge_slave_1: entered promiscuous mode [ 1501.950477][T13801] netlink: 'syz.8.9193': attribute type 10 has an invalid length. [ 1501.966890][T13656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.986022][T13801] team0: Port device netdevsim1 removed [ 1502.024676][T13801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1502.029217][T13801] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 1502.029404][T13801] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 1502.039333][T13801] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 1502.050163][T13656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.266879][T13656] team0: Port device team_slave_0 added [ 1502.269707][T13656] team0: Port device team_slave_1 added [ 1502.386565][T13656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.386585][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.386612][T13656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.417353][T13656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.417371][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.417398][T13656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.517957][T13656] hsr_slave_0: entered promiscuous mode [ 1502.518966][T13656] hsr_slave_1: entered promiscuous mode [ 1502.519972][T13656] debugfs: 'hsr0' already exists in 'hsr' [ 1502.519992][T13656] Cannot create hsr debugfs directory [ 1502.552119][ T1401] Bluetooth: hci0: command tx timeout [ 1502.552389][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1502.809601][T13831] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9197'. [ 1502.849108][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9198'. [ 1502.936170][T13840] bond14: option lacp_active: invalid value (5) [ 1502.978187][T13840] bond14 (unregistering): Released all slaves [ 1503.432255][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1503.592421][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1503.904424][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9203'. [ 1504.012184][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1504.426813][T13904] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9208'. [ 1504.562929][T13907] ip_tables: iptables: counters copy to user failed while replacing table [ 1504.632453][ T1401] Bluetooth: hci0: command tx timeout [ 1504.633249][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1505.183454][T13944] netlink: 'syz.5.9212': attribute type 2 has an invalid length. [ 1505.183478][T13944] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9212'. [ 1505.280599][T13656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1505.292548][T13656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1505.293365][T13656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1505.311237][T13656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1505.321281][T13656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1505.333687][T13656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1505.335173][T13656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1505.363719][T13656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1505.595542][T13656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.657942][T13656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.672378][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1505.696686][T19865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.696793][T19865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.730131][T24676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.730239][T24676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.793279][T13968] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9217'. [ 1505.798700][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9216'. [ 1505.840493][T13968] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9217'. [ 1505.878804][T13656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1506.025691][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9218'. [ 1506.302959][T13998] netlink: NAT attribute has 4 unknown bytes [ 1506.302993][T13998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.303880][T13988] netlink: 27 bytes leftover after parsing attributes in process `syz.7.9219'. [ 1506.712182][ T1401] Bluetooth: hci0: command tx timeout [ 1506.712245][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1506.781526][T13656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.280807][T13656] veth0_vlan: entered promiscuous mode [ 1507.302441][T13656] veth1_vlan: entered promiscuous mode [ 1507.341190][T13656] veth0_macvtap: entered promiscuous mode [ 1507.345898][T13656] veth1_macvtap: entered promiscuous mode [ 1507.378236][T13656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.388217][T13656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.414487][T19846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.416834][ T6347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.416875][ T6347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.416909][ T6347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.752373][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1508.792304][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1509.166317][T13987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1509.364533][T24669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.364556][T24669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.478693][T14107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9224'. [ 1509.584729][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9226'. [ 1509.686449][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.686472][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.832277][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1509.956609][T14133] lo: entered allmulticast mode [ 1509.957443][T14133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1510.337675][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9232'. [ 1510.337731][T14158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9232'. [ 1510.675145][T14179] tipc: Enabling of bearer rejected, failed to enable media [ 1510.678014][T14174] vcan0: tx address claim with dlc 0 [ 1510.872194][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1511.005289][T14194] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1511.272695][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1511.526944][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9239'. [ 1511.645731][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9243'. [ 1511.913267][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1512.952191][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1513.104811][T14282] tipc: Enabling of bearer rejected, failed to enable media [ 1513.192559][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1513.300995][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9250'. [ 1513.704340][T14298] Bluetooth: MGMT ver 1.23 [ 1513.739999][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9252'. [ 1513.740037][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9252'. [ 1513.992218][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1514.100467][T14311] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9256'. [ 1514.359995][T13659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1514.369753][T13659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1514.381582][T13659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1514.391654][T13659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1514.403015][T13659] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1515.032270][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1515.071488][T14348] ip_tables: iptables: counters copy to user failed while replacing table [ 1515.128166][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1515.265758][T14353] netlink: 'syz.4.9259': attribute type 16 has an invalid length. [ 1515.265780][T14353] netlink: 'syz.4.9259': attribute type 17 has an invalid length. [ 1515.305854][T14348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.328114][T14348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.330421][T14360] netlink: 'syz.4.9259': attribute type 4 has an invalid length. [ 1515.471485][T14353] lo: left allmulticast mode [ 1515.521642][T14353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.521901][T14353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.545329][T14353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.545446][T14353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.752775][T18763] Bluetooth: hci0: command 0x0c13 tx timeout [ 1515.752870][ T1401] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1515.989462][T14324] lo speed is unknown, defaulting to 1000 [ 1516.072387][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1516.375508][T14390] syzkaller0: entered promiscuous mode [ 1516.375531][T14390] syzkaller0: entered allmulticast mode [ 1516.453097][T14395] netlink: 'syz.8.9265': attribute type 2 has an invalid length. [ 1516.473377][ T1401] Bluetooth: hci6: command tx timeout [ 1516.869390][T14410] netlink: 'syz.4.9268': attribute type 12 has an invalid length. [ 1517.017642][T14417] netlink: 'syz.8.9267': attribute type 11 has an invalid length. [ 1517.112315][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1517.307437][T14324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.319110][T14324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.319284][T14324] bridge_slave_0: entered allmulticast mode [ 1517.341305][T14324] bridge_slave_0: entered promiscuous mode [ 1517.358560][T14324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.358725][T14324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.358871][T14324] bridge_slave_1: entered allmulticast mode [ 1517.384660][T14324] bridge_slave_1: entered promiscuous mode [ 1517.481394][T14436] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9269'. [ 1517.644737][T14324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.649492][T14439] syzkaller1: entered promiscuous mode [ 1517.649513][T14439] syzkaller1: entered allmulticast mode [ 1517.680795][T14324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.877737][T14324] team0: Port device team_slave_0 added [ 1517.880969][T14324] team0: Port device team_slave_1 added [ 1517.899879][T14451] netlink: 'syz.5.9272': attribute type 1 has an invalid length. [ 1518.016217][T14324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.016234][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.016260][T14324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.066896][T14452] veth7: entered allmulticast mode [ 1518.084414][T14452] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1518.091060][T14324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.091075][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.091102][T14324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.152964][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1518.187723][T14451] bond5: (slave veth0_to_bond): making interface the new active one [ 1518.190991][T14451] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1518.263751][T14451] macvlan3: entered promiscuous mode [ 1518.263778][T14451] macvlan3: entered allmulticast mode [ 1518.264159][T14451] bond5: entered promiscuous mode [ 1518.264169][T14451] veth0_to_bond: entered promiscuous mode [ 1518.264722][T14451] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1518.265223][T14451] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1518.265280][T14451] bond5: left promiscuous mode [ 1518.265289][T14451] veth0_to_bond: left promiscuous mode [ 1518.308679][T14324] hsr_slave_0: entered promiscuous mode [ 1518.310858][T14324] hsr_slave_1: entered promiscuous mode [ 1518.311626][T14324] debugfs: 'hsr0' already exists in 'hsr' [ 1518.311645][T14324] Cannot create hsr debugfs directory [ 1518.424903][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9274'. [ 1518.552444][ T1401] Bluetooth: hci6: command tx timeout [ 1518.553768][T14463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1518.553791][T14463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1518.553808][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1519.192207][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1519.342163][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1519.370172][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1519.736589][T14500] lo speed is unknown, defaulting to 1000 [ 1519.736682][T14500] lo speed is unknown, defaulting to 1000 [ 1519.737501][T14500] lo speed is unknown, defaulting to 1000 [ 1519.738170][T14508] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 1519.741464][T14500] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1519.741485][T14500] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1519.741506][T14500] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1519.805103][T14508] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1519.805140][T14508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1519.805498][T14508] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1519.805527][T14508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1519.806032][T14508] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1519.806069][T14508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1519.831108][T14508] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1519.831146][T14508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1519.831547][T14508] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1519.936243][T14500] lo speed is unknown, defaulting to 1000 [ 1519.950177][T14500] lo speed is unknown, defaulting to 1000 [ 1519.958937][T14500] lo speed is unknown, defaulting to 1000 [ 1519.973769][T14500] lo speed is unknown, defaulting to 1000 [ 1519.986829][T14500] lo speed is unknown, defaulting to 1000 [ 1520.001150][T14500] lo speed is unknown, defaulting to 1000 [ 1520.012205][T14500] lo speed is unknown, defaulting to 1000 [ 1520.037604][T14500] lo speed is unknown, defaulting to 1000 [ 1520.038743][T14500] lo speed is unknown, defaulting to 1000 [ 1520.057480][T14500] lo speed is unknown, defaulting to 1000 [ 1520.070413][T14517] FAULT_INJECTION: forcing a failure. [ 1520.070413][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.070436][T14517] CPU: 0 UID: 0 PID: 14517 Comm: syz.5.9282 Not tainted syzkaller #0 PREEMPT(full) [ 1520.070448][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1520.070456][T14517] Call Trace: [ 1520.070461][T14517] [ 1520.070466][T14517] dump_stack_lvl+0xe8/0x150 [ 1520.070485][T14517] should_fail_ex+0x410/0x560 [ 1520.070501][T14517] should_failslab+0xa8/0x100 [ 1520.070516][T14517] __kvmalloc_node_noprof+0x176/0x820 [ 1520.070530][T14517] ? bpf_compute_postorder+0x83/0x970 [ 1520.070541][T14517] ? bpf_compute_postorder+0x83/0x970 [ 1520.070556][T14517] bpf_compute_postorder+0x83/0x970 [ 1520.070567][T14517] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1520.070581][T14517] ? add_kfuncs+0x251/0x2e0 [ 1520.070596][T14517] bpf_check+0x261f/0x2ef0 [ 1520.070616][T14517] ? __pfx_bpf_check+0x10/0x10 [ 1520.070630][T14517] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1520.070647][T14517] bpf_prog_load+0x14d6/0x1c20 [ 1520.070666][T14517] ? __pfx_bpf_prog_load+0x10/0x10 [ 1520.070691][T14517] __sys_bpf+0xd0d/0xd90 [ 1520.070707][T14517] ? __pfx___sys_bpf+0x10/0x10 [ 1520.070725][T14517] ? __fget_files+0x2a/0x420 [ 1520.070749][T14517] ? ksys_write+0x242/0x270 [ 1520.070766][T14517] ? __pfx_ksys_write+0x10/0x10 [ 1520.070785][T14517] __x64_sys_bpf+0xba/0xd0 [ 1520.070798][T14517] do_syscall_64+0x166/0x520 [ 1520.070812][T14517] ? trace_irq_disable+0x3b/0x140 [ 1520.070823][T14517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.070841][T14517] ? clear_bhb_loop+0x70/0xc0 [ 1520.070854][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.070865][T14517] RIP: 0033:0x7f0fea79e159 [ 1520.070877][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.070887][T14517] RSP: 002b:00007f0feb5df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1520.070899][T14517] RAX: ffffffffffffffda RBX: 00007f0feaa25fa0 RCX: 00007f0fea79e159 [ 1520.070907][T14517] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1520.070915][T14517] RBP: 00007f0feb5df090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.070922][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.070928][T14517] R13: 00007f0feaa26038 R14: 00007f0feaa25fa0 R15: 00007ffd645a1588 [ 1520.070945][T14517] [ 1520.375802][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9283'. [ 1520.621132][T14500] lo speed is unknown, defaulting to 1000 [ 1520.641300][T14500] lo speed is unknown, defaulting to 1000 [ 1520.642192][ T1401] Bluetooth: hci6: command tx timeout [ 1520.665006][T14500] lo speed is unknown, defaulting to 1000 [ 1521.142636][T14538] netlink: 1371 bytes leftover after parsing attributes in process `syz.4.9286'. [ 1521.472298][T14552] batman_adv: batadv0: Adding interface: gretap0 [ 1521.472326][T14552] batman_adv: batadv0: The MTU of interface gretap0 is too small (1410) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.472633][T14552] batman_adv: batadv0: Interface activated: gretap0 [ 1521.764279][T14324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1521.776543][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1521.779081][T14324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1521.806678][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1521.814752][T14324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1521.847229][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1521.850331][T14324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1521.909979][T14324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1522.345292][T14324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.383598][T14324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.400411][T19867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.400501][T19867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.436154][T19867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.436268][T19867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.538173][T14594] atomic_op ffff88804a1c91e0 conn xmit_atomic 0000000000000000 [ 1522.723014][ T1401] Bluetooth: hci6: command tx timeout [ 1522.869537][T14608] netlink: 'syz.5.9298': attribute type 19 has an invalid length. [ 1522.886294][T14608] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1522.889496][T14608] netlink: 'syz.5.9298': attribute type 1 has an invalid length. [ 1522.889516][T14608] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9298'. [ 1523.208789][T14615] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1523.396090][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9302'. [ 1523.396789][T14632] veth0_vlan: left promiscuous mode [ 1523.581364][T14641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9304'. [ 1523.581396][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9304'. [ 1524.073253][ T1997] block nbd8: Possible stuck request ffff8880281a7000: control (read@0,4096B). Runtime 240 seconds [ 1524.214120][T14673] bridge1: entered promiscuous mode [ 1524.370675][T14688] batadv_slave_1: entered promiscuous mode [ 1524.392332][ C0] net_ratelimit: 18 callbacks suppressed [ 1524.392355][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1524.418630][T14324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.535781][T14324] veth0_vlan: entered promiscuous mode [ 1524.561623][T14324] veth1_vlan: entered promiscuous mode [ 1524.577635][T14692] xt_bpf: check failed: parse error [ 1524.583047][T14693] xt_bpf: check failed: parse error [ 1524.628826][T14695] netlink: 'syz.8.9314': attribute type 6 has an invalid length. [ 1524.628847][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9314'. [ 1524.655954][T14324] veth0_macvtap: entered promiscuous mode [ 1524.661797][T14324] veth1_macvtap: entered promiscuous mode [ 1524.694035][T14324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.719459][T14324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.775929][T19864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.791012][T24681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.797578][T19867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.858685][ T6347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.871697][T14659] batadv_slave_1: left promiscuous mode [ 1525.432296][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1526.472450][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1527.041770][T14678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1527.127119][T24669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.127142][T24669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.249468][T24682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.249491][T24682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.272243][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1527.415567][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9318'. [ 1527.487310][T14803] netlink: 'syz.5.9322': attribute type 3 has an invalid length. [ 1527.487332][T14803] netlink: 'syz.5.9322': attribute type 1 has an invalid length. [ 1527.487345][T14803] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9322'. [ 1527.520019][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1527.800612][T14813] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9255'. [ 1527.806374][T14813] syzkaller0: entered promiscuous mode [ 1527.806396][T14813] syzkaller0: entered allmulticast mode [ 1527.890027][T14819] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9323'. [ 1527.903639][T14825] netlink: 'syz.4.9326': attribute type 21 has an invalid length. [ 1527.970938][T14813] 0: reclassify loop, rule prio 0, protocol 700 [ 1528.438607][T14844] netlink: 'syz.4.9330': attribute type 1 has an invalid length. [ 1528.438629][T14844] netlink: 'syz.4.9330': attribute type 2 has an invalid length. [ 1528.493316][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9330'. [ 1528.503592][T14848] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9331'. [ 1528.507317][T14849] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9331'. [ 1528.523070][T14846] netlink: 'syz.5.9331': attribute type 11 has an invalid length. [ 1528.553338][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1528.623191][T14857] veth1_to_bond: entered promiscuous mode [ 1528.624802][T14857] bridge0: port 3(veth1_to_bond) entered blocking state [ 1528.625083][T14857] bridge0: port 3(veth1_to_bond) entered disabled state [ 1528.625279][T14857] veth1_to_bond: entered allmulticast mode [ 1528.627519][T14857] bridge0: port 3(veth1_to_bond) entered blocking state [ 1528.627618][T14857] bridge0: port 3(veth1_to_bond) entered forwarding state [ 1528.695345][T14845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1528.777178][T14866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9336'. [ 1528.817383][T14866] macvlan2: entered promiscuous mode [ 1528.820611][T14866] bond0: entered promiscuous mode [ 1528.820632][T14866] bond_slave_0: entered promiscuous mode [ 1528.820864][T14866] bond_slave_1: entered promiscuous mode [ 1528.844959][T14866] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1528.849750][T14866] bond1: (slave macvlan2): making interface the new active one [ 1528.851118][T14866] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1528.859900][T14872] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9335'. [ 1528.859924][T14872] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9335'. [ 1529.248118][T14892] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9339'. [ 1529.259686][T14891] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9339'. [ 1529.524367][T14905] x_tables: duplicate underflow at hook 1 [ 1529.554669][T14904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.592157][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1529.769645][T14918] netlink: 356 bytes leftover after parsing attributes in process `syz.5.9342'. [ 1529.769793][T14918] netlink: 356 bytes leftover after parsing attributes in process `syz.5.9342'. [ 1530.128902][T14930] xt_ecn: cannot match TCP bits for non-tcp packets [ 1530.239981][ T4985] udevd[4985]: worker [5557] /devices/virtual/block/nbd8 timeout; kill it [ 1530.240077][ T4985] udevd[4985]: seq 47365 '/devices/virtual/block/nbd8' killed [ 1530.628845][T14942] netlink: 'syz.0.9347': attribute type 1 has an invalid length. [ 1530.632480][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1530.658366][T14953] netlink: 'syz.7.9350': attribute type 11 has an invalid length. [ 1531.061568][T14973] siw: device registration error -23 [ 1531.112680][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1531.672207][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1532.590229][T15027] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1532.590367][T15027] syzkaller0: linktype set to 768 [ 1532.712451][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1532.715318][T15036] xt_CT: No such helper "snmp_trap" [ 1533.459212][T15060] pim6reg: entered allmulticast mode [ 1533.657476][T15068] __nla_validate_parse: 266 callbacks suppressed [ 1533.657499][T15068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9378'. [ 1533.752492][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1533.894282][T15071] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 1533.937449][T15072] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.9378'. [ 1534.115854][T15075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1534.480191][T24682] IPVS: starting estimator thread 0... [ 1534.562259][T15083] IPVS: using max 28 ests per chain, 67200 per kthread [ 1534.754407][T15087] netlink: 'syz.4.9383': attribute type 1 has an invalid length. [ 1534.754429][T15087] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1534.756981][T15087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1534.786916][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9384'. [ 1534.792423][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1534.853143][T15089] bridge0: port 2(veth0) entered blocking state [ 1534.853328][T15089] bridge0: port 2(veth0) entered disabled state [ 1534.853518][T15089] veth0: entered allmulticast mode [ 1534.855290][T15090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1534.861578][T15089] veth0: entered promiscuous mode [ 1534.866013][T15089] bridge0: port 2(veth0) entered blocking state [ 1534.866134][T15089] bridge0: port 2(veth0) entered forwarding state [ 1535.378877][T15102] FAULT_INJECTION: forcing a failure. [ 1535.378877][T15102] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.378911][T15102] CPU: 0 UID: 0 PID: 15102 Comm: syz.4.9388 Not tainted syzkaller #0 PREEMPT(full) [ 1535.378934][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1535.378947][T15102] Call Trace: [ 1535.378955][T15102] [ 1535.378964][T15102] dump_stack_lvl+0xe8/0x150 [ 1535.379000][T15102] should_fail_ex+0x410/0x560 [ 1535.379030][T15102] should_failslab+0xa8/0x100 [ 1535.379057][T15102] __kvmalloc_node_noprof+0x176/0x820 [ 1535.379083][T15102] ? __kvmalloc_node_noprof+0x345/0x820 [ 1535.379104][T15102] ? bpf_compute_scc+0xd2/0xb10 [ 1535.379124][T15102] ? bpf_compute_scc+0xd2/0xb10 [ 1535.379151][T15102] bpf_compute_scc+0xd2/0xb10 [ 1535.379192][T15102] bpf_check+0x2720/0x2ef0 [ 1535.379234][T15102] ? __pfx_bpf_check+0x10/0x10 [ 1535.379260][T15102] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1535.379298][T15102] bpf_prog_load+0x14d6/0x1c20 [ 1535.379334][T15102] ? __pfx_bpf_prog_load+0x10/0x10 [ 1535.379386][T15102] __sys_bpf+0xd0d/0xd90 [ 1535.379417][T15102] ? __pfx___sys_bpf+0x10/0x10 [ 1535.379453][T15102] ? __fget_files+0x2a/0x420 [ 1535.379500][T15102] ? ksys_write+0x242/0x270 [ 1535.379533][T15102] ? __pfx_ksys_write+0x10/0x10 [ 1535.379570][T15102] __x64_sys_bpf+0xba/0xd0 [ 1535.379593][T15102] do_syscall_64+0x166/0x520 [ 1535.379622][T15102] ? trace_irq_disable+0x3b/0x140 [ 1535.379642][T15102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.379663][T15102] ? clear_bhb_loop+0x70/0xc0 [ 1535.379688][T15102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.379708][T15102] RIP: 0033:0x7f49c019e159 [ 1535.379728][T15102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.379746][T15102] RSP: 002b:00007f49c0fe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1535.379768][T15102] RAX: ffffffffffffffda RBX: 00007f49c0425fa0 RCX: 00007f49c019e159 [ 1535.379783][T15102] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1535.379797][T15102] RBP: 00007f49c0fe2090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.379811][T15102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.379829][T15102] R13: 00007f49c0426038 R14: 00007f49c0425fa0 R15: 00007ffdb4298298 [ 1535.379863][T15102] [ 1535.833102][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1536.083343][T15117] openvswitch: netlink: IPv4 tun info is not correct [ 1536.332257][T22158] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1536.388446][T15124] netlink: 'syz.4.9393': attribute type 25 has an invalid length. [ 1536.409004][T15103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1536.482799][T22158] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1536.556371][T24681] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1536.618710][T15130] wg2: Caught tx_queue_len zero misconfig [ 1536.840823][T15139] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1536.881366][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1536.954650][T15141] FAULT_INJECTION: forcing a failure. [ 1536.954650][T15141] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.954686][T15141] CPU: 0 UID: 0 PID: 15141 Comm: syz.8.9399 Not tainted syzkaller #0 PREEMPT(full) [ 1536.954710][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1536.954722][T15141] Call Trace: [ 1536.954731][T15141] [ 1536.954740][T15141] dump_stack_lvl+0xe8/0x150 [ 1536.954774][T15141] should_fail_ex+0x410/0x560 [ 1536.954804][T15141] should_failslab+0xa8/0x100 [ 1536.954832][T15141] __kvmalloc_node_noprof+0x176/0x820 [ 1536.954856][T15141] ? __kvmalloc_node_noprof+0x345/0x820 [ 1536.954878][T15141] ? bpf_compute_scc+0x106/0xb10 [ 1536.954897][T15141] ? bpf_compute_scc+0x106/0xb10 [ 1536.954923][T15141] bpf_compute_scc+0x106/0xb10 [ 1536.954974][T15141] bpf_check+0x2720/0x2ef0 [ 1536.955019][T15141] ? __pfx_bpf_check+0x10/0x10 [ 1536.955046][T15141] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1536.955078][T15141] bpf_prog_load+0x14d6/0x1c20 [ 1536.955116][T15141] ? __pfx_bpf_prog_load+0x10/0x10 [ 1536.955189][T15141] __sys_bpf+0xd0d/0xd90 [ 1536.955232][T15141] ? __pfx___sys_bpf+0x10/0x10 [ 1536.955272][T15141] ? __fget_files+0x2a/0x420 [ 1536.955326][T15141] ? ksys_write+0x242/0x270 [ 1536.955369][T15141] ? __pfx_ksys_write+0x10/0x10 [ 1536.955406][T15141] __x64_sys_bpf+0xba/0xd0 [ 1536.955440][T15141] do_syscall_64+0x166/0x520 [ 1536.955470][T15141] ? trace_irq_disable+0x3b/0x140 [ 1536.955490][T15141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.955510][T15141] ? clear_bhb_loop+0x70/0xc0 [ 1536.955535][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.955564][T15141] RIP: 0033:0x7fc67139e159 [ 1536.955585][T15141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.955614][T15141] RSP: 002b:00007fc672299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1536.955638][T15141] RAX: ffffffffffffffda RBX: 00007fc671625fa0 RCX: 00007fc67139e159 [ 1536.955662][T15141] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1536.955676][T15141] RBP: 00007fc672299090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.955690][T15141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.955703][T15141] R13: 00007fc671626038 R14: 00007fc671625fa0 R15: 00007fffb5b8e598 [ 1536.955737][T15141] [ 1537.487567][T15160] veth0: Caught tx_queue_len zero misconfig [ 1537.615761][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9402'. [ 1537.877100][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9406'. [ 1537.912184][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1537.917313][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9409'. [ 1537.917342][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9409'. [ 1537.970824][T15170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.116396][T15186] xt_nat: multiple ranges no longer supported [ 1538.953219][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1539.104857][T15212] __nla_validate_parse: 2 callbacks suppressed [ 1539.104878][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9416'. [ 1539.156934][T15209] syzkaller0: entered promiscuous mode [ 1539.156960][T15209] syzkaller0: entered allmulticast mode [ 1539.174428][T15215] syzkaller0: entered promiscuous mode [ 1539.174449][T15215] syzkaller0: entered allmulticast mode [ 1539.177133][T15215] tipc: Enabled bearer , priority 0 [ 1539.188314][T15209] netlink: 'syz.5.9415': attribute type 1 has an invalid length. [ 1539.188335][T15209] netlink: 'syz.5.9415': attribute type 2 has an invalid length. [ 1539.224890][T15219] tipc: Resetting bearer [ 1539.235579][T15219] netlink: 52 bytes leftover after parsing attributes in process `syz.8.9417'. [ 1539.311590][T24682] IPVS: starting estimator thread 0... [ 1539.368311][T15213] tipc: Resetting bearer [ 1539.380732][T15223] netlink: 'syz.7.9419': attribute type 21 has an invalid length. [ 1539.380754][T15223] netlink: 128 bytes leftover after parsing attributes in process `syz.7.9419'. [ 1539.405175][T15221] IPVS: using max 31 ests per chain, 74400 per kthread [ 1539.492985][T15213] tipc: Disabling bearer [ 1539.529037][T15229] netlink: 'syz.4.9422': attribute type 17 has an invalid length. [ 1539.543220][T15223] netlink: 'syz.7.9419': attribute type 4 has an invalid length. [ 1539.543240][T15223] netlink: 'syz.7.9419': attribute type 5 has an invalid length. [ 1539.543254][T15223] netlink: 3 bytes leftover after parsing attributes in process `syz.7.9419'. [ 1539.621426][T15237] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1539.636660][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9423'. [ 1539.776680][T15240] netlink: 'syz.4.9424': attribute type 1 has an invalid length. [ 1539.777073][T15237] bond0: (slave bond_slave_1): Releasing backup interface [ 1539.883599][T15240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1539.992274][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1540.134511][T15257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9429'. [ 1540.175521][T15264] IPv6: sit1: Disabled Multicast RS [ 1540.315012][T15268] syzkaller0: entered promiscuous mode [ 1540.315038][T15268] syzkaller0: entered allmulticast mode [ 1540.400992][T15275] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1540.768016][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9435'. [ 1540.791346][T15288] ip_tables: iptables: counters copy to user failed while replacing table [ 1540.807966][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9436'. [ 1540.839756][T15288] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1540.840827][T15288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1540.901763][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9435'. [ 1541.033230][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1542.085327][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1543.112298][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1544.152300][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1545.193144][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1546.232296][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1546.499940][T15321] tc_dump_action: action bad kind [ 1546.550351][T15317] syzkaller0: entered promiscuous mode [ 1546.550368][T15317] syzkaller0: entered allmulticast mode [ 1546.677784][T15317] tipc: Enabled bearer , priority 0 [ 1546.691045][T15314] tipc: Resetting bearer [ 1546.773620][T15314] tipc: Disabling bearer [ 1546.898698][T15331] xt_nfacct: accounting object `' does not exist [ 1546.930760][T15331] tipc: Started in network mode [ 1546.930792][T15331] tipc: Node identity 5ec98b869f61, cluster identity 4711 [ 1546.930976][T15331] tipc: Enabled bearer , priority 0 [ 1547.098574][T15329] tipc: Disabling bearer [ 1547.166247][T15349] netlink: 'syz.0.9452': attribute type 2 has an invalid length. [ 1547.166291][T15349] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9452'. [ 1547.272444][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1547.385594][T15352] netlink: 'syz.5.9454': attribute type 11 has an invalid length. [ 1547.385618][T15352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9454'. [ 1547.585533][T15370] syzkaller0: entered promiscuous mode [ 1547.585558][T15370] syzkaller0: entered allmulticast mode [ 1547.851127][T15383] FAULT_INJECTION: forcing a failure. [ 1547.851127][T15383] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.851163][T15383] CPU: 0 UID: 0 PID: 15383 Comm: syz.5.9461 Not tainted syzkaller #0 PREEMPT(full) [ 1547.851186][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1547.851198][T15383] Call Trace: [ 1547.851207][T15383] [ 1547.851217][T15383] dump_stack_lvl+0xe8/0x150 [ 1547.851253][T15383] should_fail_ex+0x410/0x560 [ 1547.851283][T15383] should_failslab+0xa8/0x100 [ 1547.851311][T15383] __kvmalloc_node_noprof+0x176/0x820 [ 1547.851338][T15383] ? record_stack_access+0xc71/0x1110 [ 1547.851368][T15383] ? record_stack_access+0xc71/0x1110 [ 1547.851399][T15383] record_stack_access+0xc71/0x1110 [ 1547.851430][T15383] ? __pfx_arg_track_join+0x10/0x10 [ 1547.851457][T15383] ? __pfx_record_stack_access+0x10/0x10 [ 1547.851491][T15383] analyze_subprog+0x4544/0x9e00 [ 1547.851512][T15383] ? fetch_store_string+0x19f/0x260 [ 1547.851588][T15383] ? __pfx_analyze_subprog+0x10/0x10 [ 1547.851609][T15383] ? __x64_sys_bpf+0xba/0xd0 [ 1547.851628][T15383] ? do_syscall_64+0x166/0x520 [ 1547.851655][T15383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.851715][T15383] ? call_instance+0x263/0x560 [ 1547.851736][T15383] ? rcu_is_watching+0x16/0xb0 [ 1547.851760][T15383] ? call_instance+0x263/0x560 [ 1547.851781][T15383] ? trace_kmalloc+0x2a/0xf0 [ 1547.851802][T15383] ? call_instance+0x263/0x560 [ 1547.851821][T15383] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1547.851842][T15383] ? __kvmalloc_node_noprof+0x345/0x820 [ 1547.851862][T15383] ? call_instance+0x263/0x560 [ 1547.851881][T15383] ? call_instance+0x263/0x560 [ 1547.851922][T15383] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1547.851945][T15383] ? bpf_base_func_proto+0xaa/0xb00 [ 1547.851971][T15383] ? __pfx_sk_reuseport_func_proto+0x10/0x10 [ 1547.852027][T15383] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1547.852057][T15383] ? __kvmalloc_node_noprof+0x345/0x820 [ 1547.852079][T15383] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1547.852101][T15383] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1547.852132][T15383] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1547.852177][T15383] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1547.852213][T15383] bpf_check+0x2746/0x2ef0 [ 1547.852255][T15383] ? __pfx_bpf_check+0x10/0x10 [ 1547.852280][T15383] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1547.852314][T15383] bpf_prog_load+0x14d6/0x1c20 [ 1547.852356][T15383] ? __pfx_bpf_prog_load+0x10/0x10 [ 1547.852407][T15383] __sys_bpf+0xd0d/0xd90 [ 1547.852439][T15383] ? __pfx___sys_bpf+0x10/0x10 [ 1547.852475][T15383] ? __fget_files+0x2a/0x420 [ 1547.852521][T15383] ? ksys_write+0x242/0x270 [ 1547.852554][T15383] ? __pfx_ksys_write+0x10/0x10 [ 1547.852590][T15383] __x64_sys_bpf+0xba/0xd0 [ 1547.852614][T15383] do_syscall_64+0x166/0x520 [ 1547.852641][T15383] ? trace_irq_disable+0x3b/0x140 [ 1547.852662][T15383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.852682][T15383] ? clear_bhb_loop+0x70/0xc0 [ 1547.852707][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.852727][T15383] RIP: 0033:0x7f0fea79e159 [ 1547.852746][T15383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.852764][T15383] RSP: 002b:00007f0feb5df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1547.852786][T15383] RAX: ffffffffffffffda RBX: 00007f0feaa25fa0 RCX: 00007f0fea79e159 [ 1547.852801][T15383] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1547.852815][T15383] RBP: 00007f0feb5df090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.852828][T15383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1547.852841][T15383] R13: 00007f0feaa26038 R14: 00007f0feaa25fa0 R15: 00007ffd645a1588 [ 1547.852874][T15383] [ 1548.312104][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9465'. [ 1548.315492][T15394] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9464'. [ 1548.324198][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1549.180815][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9475'. [ 1549.226387][T15437] ip6tnl2: entered allmulticast mode [ 1549.319726][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9479'. [ 1549.352255][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1549.413060][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9477'. [ 1549.414444][T15445] veth3: entered allmulticast mode [ 1549.586015][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9481'. [ 1549.587513][T15452] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9480'. [ 1549.616113][T15452] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9480'. [ 1549.640586][T15467] netlink: 'syz.4.9484': attribute type 8 has an invalid length. [ 1549.713070][T15452] bridge0: port 2(veth0) entered disabled state [ 1549.713560][T15452] bridge0: port 1(batadv1) entered disabled state [ 1550.204372][T15467] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1550.204396][T15467] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1550.244299][ T6345] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1550.244331][ T6345] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.244370][ T6345] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1550.244394][ T6345] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.244458][ T6345] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1550.244506][ T6345] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.244539][ T6345] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1550.244562][ T6345] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.249327][T15479] syzkaller1: entered promiscuous mode [ 1550.249348][T15479] syzkaller1: entered allmulticast mode [ 1550.392351][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1550.409325][T15484] veth0: left allmulticast mode [ 1550.409349][T15484] veth0: left promiscuous mode [ 1550.409522][T15484] bridge0: port 2(veth0) entered disabled state [ 1550.744109][T15499] macsec1: entered allmulticast mode [ 1550.744319][T15499] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1550.749942][T15499] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1550.836238][ T5727] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1551.209437][T15520] veth9: entered allmulticast mode [ 1551.429423][T15522] bridge0: left promiscuous mode [ 1551.431800][T15522] 8021q: adding VLAN 0 to HW filter on device .` [ 1551.432309][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1551.476292][T15522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.661363][T15522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1551.661389][T15522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1551.683777][T15522] veth1_macvtap: left promiscuous mode [ 1551.684798][T15522] veth0_macvtap: left promiscuous mode [ 1551.690154][T15522] veth0_macvtap: entered promiscuous mode [ 1551.693406][T15522] veth1_macvtap: entered promiscuous mode [ 1551.698645][T15522] mac80211_hwsim hwsim127 wlan0: left promiscuous mode [ 1551.781507][T15532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1551.809829][T15522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1551.823443][T15522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1551.829777][T15522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.902366][T15522] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1551.906224][T15522] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1551.907838][T15522] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1551.910967][T15522] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1551.948095][T15522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1551.967638][T15522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1551.969946][T15522] mac80211_hwsim hwsim127 wlan0: entered promiscuous mode [ 1551.987931][T15522] bridge0: port 1(batadv1) entered blocking state [ 1551.988064][T15522] bridge0: port 1(batadv1) entered forwarding state [ 1551.988908][T15522] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1552.223861][T15522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1552.246487][T19867] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.246523][T19867] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.246860][T24681] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.246887][T24681] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.259193][T15524] bridge0: entered promiscuous mode [ 1552.394500][T19843] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.394553][T19843] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.395854][T24681] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.395884][T24681] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.463667][T15544] syzkaller0: entered promiscuous mode [ 1552.463690][T15544] syzkaller0: entered allmulticast mode [ 1552.472230][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1552.559088][ T6345] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1552.570913][ T6345] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1552.571109][ T6345] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1552.593125][T22165] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1552.593388][ T6345] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1552.748845][T15549] __nla_validate_parse: 222 callbacks suppressed [ 1552.748871][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9503'. [ 1552.774872][T15549] ip6gre3: entered promiscuous mode [ 1552.774894][T15549] ip6gre3: entered allmulticast mode [ 1553.045808][T25818] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1553.064501][T24676] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1553.064789][T24676] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1553.093229][ T9983] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1553.279114][T15580] netlink: 'syz.0.9510': attribute type 1 has an invalid length. [ 1553.434019][ T9983] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1553.505883][T15583] batman_adv: batadv0: Adding interface: syzkaller0 [ 1553.506002][T15583] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.506037][T15583] batman_adv: batadv0: Interface activated: syzkaller0 [ 1553.506531][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9511'. [ 1553.513672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1553.557623][T15582] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1553.635711][T15582] batman_adv: batadv0: Removing interface: syzkaller0 [ 1554.153645][ T1997] block nbd8: Possible stuck request ffff8880281a7000: control (read@0,4096B). Runtime 270 seconds [ 1554.257866][T15609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9517'. [ 1554.552490][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1554.819559][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1554.821710][T15628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1554.857146][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1554.882654][T15626] sctp: [Deprecated]: syz.0.9524 (pid 15626) Use of int in maxseg socket option. [ 1554.882654][T15626] Use struct sctp_assoc_value instead [ 1555.204053][T15643] netlink: 76 bytes leftover after parsing attributes in process `syz.8.9529'. [ 1555.318770][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9527'. [ 1555.592287][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1555.886907][T15666] syzkaller1: entered promiscuous mode [ 1555.886933][T15666] syzkaller1: entered allmulticast mode [ 1555.888989][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9531'. [ 1556.291736][T15692] netlink: 'syz.7.9539': attribute type 21 has an invalid length. [ 1556.294009][T15692] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9539'. [ 1556.299340][T15693] netlink: 'syz.7.9539': attribute type 21 has an invalid length. [ 1556.326890][T15691] tunl0: Caught tx_queue_len zero misconfig [ 1556.326958][T15691] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1556.444040][T15702] netlink: 'syz.5.9542': attribute type 26 has an invalid length. [ 1556.444932][T15702] netlink: 'syz.5.9542': attribute type 26 has an invalid length. [ 1556.632271][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1556.895127][T15712] netlink: 'syz.4.9544': attribute type 1 has an invalid length. [ 1557.147881][T15712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1557.242942][T15720] nbd5: detected capacity change from 0 to 1665372 [ 1557.244843][ T1997] block nbd5: Dead connection, failed to find a fallback [ 1557.244867][ T1997] block nbd5: shutting down sockets [ 1557.245029][ T1997] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1557.245131][ T1997] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1557.247654][ T1997] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1557.306115][ T2449] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1557.306153][ T2449] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1557.306170][ T2449] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1557.307282][ T2449] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1557.307300][ T2449] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1557.307310][ T2449] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1557.312326][ T1997] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1557.312362][ T1997] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1557.312502][ T1997] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1557.312524][ T1997] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1557.312649][ T1997] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1557.312668][ T1997] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1557.312748][ T1997] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1557.312769][ T1997] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1557.312907][ T1997] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1557.312999][ T1997] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1557.313115][ T1997] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1557.313369][ T9229] ldm_validate_partition_table(): Disk read failed. [ 1557.431558][ T9229] Dev nbd5: unable to read RDB block 0 [ 1557.446715][ T9229] nbd5: unable to read partition table [ 1557.502410][T15718] bond4: (slave gretap1): making interface the new active one [ 1557.503298][T15718] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1557.631229][ T9229] ldm_validate_partition_table(): Disk read failed. [ 1557.638826][ T9229] Dev nbd5: unable to read RDB block 0 [ 1557.642907][ T9229] nbd5: unable to read partition table [ 1557.658471][T15728] vlan0: entered promiscuous mode [ 1557.658495][T15728] erspan0: entered promiscuous mode [ 1557.674666][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1557.884244][T15741] __nla_validate_parse: 9 callbacks suppressed [ 1557.884265][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9554'. [ 1557.975298][T18763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1557.981119][T18763] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1558.006457][T18763] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1558.009015][T18763] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1558.009891][T18763] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1558.712229][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1559.163844][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9560'. [ 1559.168193][ T6345] bond0: (slave netdevsim1): Releasing backup interface [ 1559.200606][ T6345] netdevsim netdevsim8 netdevsim1 (unregistering): left promiscuous mode [ 1559.200638][ T6345] netdevsim netdevsim8 netdevsim1 (unregistering): left allmulticast mode [ 1559.340793][T15796] ip_tables: iptables: counters copy to user failed while replacing table [ 1559.414299][T15788] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9559'. [ 1559.495954][T15783] lo speed is unknown, defaulting to 1000 [ 1559.752534][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1560.085503][T18763] Bluetooth: hci7: command tx timeout [ 1560.364688][T15783] lo speed is unknown, defaulting to 1000 [ 1560.366672][T15812] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9566'. [ 1560.371375][T15743] lo speed is unknown, defaulting to 1000 [ 1560.471341][T15811] batman_adv: batadv0: Interface deactivated: veth0 [ 1560.471373][T15811] batman_adv: batadv0: Removing interface: veth0 [ 1560.494860][T15811] bridge_slave_0: left allmulticast mode [ 1560.494885][T15811] bridge_slave_0: left promiscuous mode [ 1560.495097][T15811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.533430][T15811] bridge_slave_1: left allmulticast mode [ 1560.533453][T15811] bridge_slave_1: left promiscuous mode [ 1560.533702][T15811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.567559][T15811] bond0: (slave bond_slave_0): Releasing backup interface [ 1560.604868][T15811] team0: Port device team_slave_1 removed [ 1560.607200][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1560.607220][T15811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.613088][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1560.613107][T15811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.619711][T15811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1560.792231][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1560.834390][T15743] lo speed is unknown, defaulting to 1000 [ 1561.832539][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1562.046551][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9572'. [ 1562.157970][T18763] Bluetooth: hci7: command 0x041b tx timeout [ 1562.182229][T15848] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9572'. [ 1562.573335][ T6345] bond0: left allmulticast mode [ 1562.573363][ T6345] bond0: left promiscuous mode [ 1562.573648][ T6345] bridge0: port 1(bond0) entered disabled state [ 1562.675137][ T6345] pim6reg: left allmulticast mode [ 1562.688026][ T6345] batman_adv: batadv0: Interface deactivated: gretap0 [ 1562.847834][T15863] FAULT_INJECTION: forcing a failure. [ 1562.847834][T15863] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.847871][T15863] CPU: 1 UID: 0 PID: 15863 Comm: syz.0.9574 Not tainted syzkaller #0 PREEMPT(full) [ 1562.847893][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1562.847906][T15863] Call Trace: [ 1562.847914][T15863] [ 1562.847923][T15863] dump_stack_lvl+0xe8/0x150 [ 1562.847956][T15863] should_fail_ex+0x410/0x560 [ 1562.847985][T15863] should_failslab+0xa8/0x100 [ 1562.848012][T15863] __kmalloc_cache_noprof+0xa3/0x600 [ 1562.848032][T15863] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 1562.848064][T15863] ? bpf_is_state_visited+0x2e49/0x48b0 [ 1562.848085][T15863] ? bpf_is_state_visited+0x2e49/0x48b0 [ 1562.848113][T15863] bpf_is_state_visited+0x2e49/0x48b0 [ 1562.848143][T15863] ? krealloc_node_align_noprof+0x1e0/0x390 [ 1562.848172][T15863] ? krealloc_node_align_noprof+0x235/0x390 [ 1562.848201][T15863] ? bpf_push_jmp_history+0x27d/0x6d0 [ 1562.848233][T15863] do_check_common+0x224b/0x55c0 [ 1562.848306][T15863] ? __pfx_do_check_common+0x10/0x10 [ 1562.848347][T15863] do_check_main+0xa2/0x1f0 [ 1562.848374][T15863] bpf_check+0x2777/0x2ef0 [ 1562.848415][T15863] ? __pfx_bpf_check+0x10/0x10 [ 1562.848441][T15863] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1562.848473][T15863] bpf_prog_load+0x14d6/0x1c20 [ 1562.848508][T15863] ? __pfx_bpf_prog_load+0x10/0x10 [ 1562.848556][T15863] __sys_bpf+0xd0d/0xd90 [ 1562.848588][T15863] ? __pfx___sys_bpf+0x10/0x10 [ 1562.848623][T15863] ? __fget_files+0x2a/0x420 [ 1562.848670][T15863] ? ksys_write+0x242/0x270 [ 1562.848703][T15863] ? __pfx_ksys_write+0x10/0x10 [ 1562.848738][T15863] __x64_sys_bpf+0xba/0xd0 [ 1562.848761][T15863] do_syscall_64+0x166/0x520 [ 1562.848790][T15863] ? trace_irq_disable+0x3b/0x140 [ 1562.848810][T15863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.848831][T15863] ? clear_bhb_loop+0x70/0xc0 [ 1562.848857][T15863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.848877][T15863] RIP: 0033:0x7fe4a7f9e159 [ 1562.848897][T15863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.848915][T15863] RSP: 002b:00007fe4a8ecb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1562.848936][T15863] RAX: ffffffffffffffda RBX: 00007fe4a8225fa0 RCX: 00007fe4a7f9e159 [ 1562.848952][T15863] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1562.848966][T15863] RBP: 00007fe4a8ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.848979][T15863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.848992][T15863] R13: 00007fe4a8226038 R14: 00007fe4a8225fa0 R15: 00007ffe04a25778 [ 1562.849026][T15863] [ 1562.876233][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1562.937281][ T6345] bond8 (unregistering): (slave ip6gre2): Releasing backup interface [ 1563.334901][ T6345] batman_adv: batadv0: Removing interface: gretap0 [ 1563.427747][ T6345] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 1563.719595][ T6345] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 1563.752064][ C0] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 1563.752086][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1563.850442][ T6345] bond0 (unregistering): Released all slaves [ 1563.871093][ T6345] bond1 (unregistering): (slave veth5): Releasing active interface [ 1563.871782][ T6345] bond1 (unregistering): Released all slaves [ 1563.897497][ T6345] bond2 (unregistering): Released all slaves [ 1563.911481][ T6345] bond3 (unregistering): Released all slaves [ 1563.912339][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1563.947789][ T6345] bond4 (unregistering): Released all slaves [ 1563.959474][ T6345] bond5 (unregistering): Released all slaves [ 1563.987930][ T6345] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1563.991486][ T6345] bond6 (unregistering): Released all slaves [ 1564.005727][ T6345] bond7 (unregistering): Released all slaves [ 1564.018839][ T6345] bond8 (unregistering): Released all slaves [ 1564.038197][ T6345] bond10 (unregistering): Released all slaves [ 1564.061441][ T6345] bond9 (unregistering): Released all slaves [ 1564.076781][ T6345] bond11 (unregistering): Released all slaves [ 1564.091516][ T6345] bond12 (unregistering): Released all slaves [ 1564.113467][ T6345] bond13 (unregistering): Released all slaves [ 1564.120550][ T6345] bond14 (unregistering): Released all slaves [ 1564.141222][ T6345] bond15 (unregistering): Released all slaves [ 1564.160113][ T6345] bond16 (unregistering): Released all slaves [ 1564.182802][ T6345] bond17 (unregistering): Released all slaves [ 1564.189942][ T6345] bond18 (unregistering): Released all slaves [ 1564.235317][ T1401] Bluetooth: hci7: command 0x041b tx timeout [ 1564.393423][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1564.540806][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.540833][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541042][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541059][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541244][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541260][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541423][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541440][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541602][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.541619][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9579'. [ 1564.806811][T15877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.855975][T15886] lo: Caught tx_queue_len zero misconfig [ 1564.952257][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1564.996188][T15878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.034300][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1565.324960][T15912] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1565.367348][T15912] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1565.411755][ T6345] tipc: Disabling bearer [ 1565.426928][ T6345] tipc: Left network mode [ 1565.864283][T15923] netlink: 'syz.0.9584': attribute type 1 has an invalid length. [ 1565.987434][T15923] bond1: option mode: invalid value (28) [ 1565.992212][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1566.030856][T15923] bond1 (unregistering): Released all slaves [ 1566.277541][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1566.287326][T15743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.287431][T15743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.287585][T15743] bridge_slave_0: entered allmulticast mode [ 1566.307329][T15743] bridge_slave_0: entered promiscuous mode [ 1566.317885][ T1401] Bluetooth: hci7: command 0x041b tx timeout [ 1566.326189][T15743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.326289][T15743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.326416][T15743] bridge_slave_1: entered allmulticast mode [ 1566.328152][T15743] bridge_slave_1: entered promiscuous mode [ 1566.560036][T15743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.575462][T15743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.618926][ T6345] IPVS: stopping backup sync thread 3088 ... [ 1566.715015][T15743] team0: Port device team_slave_0 added [ 1566.825576][T15743] team0: Port device team_slave_1 added [ 1566.980349][T15969] syzkaller1: entered promiscuous mode [ 1566.980374][T15969] syzkaller1: entered allmulticast mode [ 1566.986105][T15743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.986123][T15743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.986151][T15743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.995602][T15743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.995621][T15743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.995647][T15743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.032276][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1567.273318][T15743] hsr_slave_0: entered promiscuous mode [ 1567.274387][T15743] hsr_slave_1: entered promiscuous mode [ 1567.275107][T15743] debugfs: 'hsr0' already exists in 'hsr' [ 1567.275127][T15743] Cannot create hsr debugfs directory [ 1567.780465][T15984] syzkaller1: entered promiscuous mode [ 1567.780491][T15984] syzkaller1: entered allmulticast mode [ 1568.072235][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1568.139487][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1568.394875][ T1401] Bluetooth: hci7: command 0x041b tx timeout [ 1569.112223][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1569.424676][T16036] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1570.153023][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1570.255946][ T6345] hsr_slave_0: left promiscuous mode [ 1570.834171][T19863] smbdirect: ib_dev[syz2] removed [ 1571.192220][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1571.511657][T16081] __nla_validate_parse: 67 callbacks suppressed [ 1571.511680][T16081] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9607'. [ 1571.686418][T16100] netlink: 'syz.7.9611': attribute type 1 has an invalid length. [ 1571.910372][T16100] bond14: entered promiscuous mode [ 1571.935623][T16100] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1572.086389][T16103] bridge0: port 4(batadv1) entered blocking state [ 1572.086557][T16103] bridge0: port 4(batadv1) entered disabled state [ 1572.086741][T16103] batadv1: entered allmulticast mode [ 1572.092389][T16103] batadv1: entered promiscuous mode [ 1572.185205][ T6345] IPVS: stop unused estimator thread 0... [ 1572.237400][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1572.343666][T16123] xt_hashlimit: size too large, truncated to 1048576 [ 1572.482121][T19843] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1572.482144][T19843] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1572.540515][T16129] syzkaller0: entered promiscuous mode [ 1572.540540][T16129] syzkaller0: entered allmulticast mode [ 1572.647525][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1572.647553][T16133] netlink: 'syz.0.9618': attribute type 1 has an invalid length. [ 1572.647567][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1572.711677][T16129] tipc: Enabled bearer , priority 0 [ 1572.746978][T16133] Cannot find set identified by id 0 to match [ 1572.782537][T16133] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 1572.909057][T15743] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1572.930687][T16138] ip_tables: iptables: counters copy to user failed while replacing table [ 1572.931749][T15743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1572.938466][T15743] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1572.979395][T15743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1572.985252][T15743] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1573.019088][T15743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1573.030053][T15743] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1573.066359][T15743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1573.164972][T16140] ip_tables: iptables: counters copy to user failed while replacing table [ 1573.272279][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1573.430221][T15743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.479372][T15743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.519812][T24681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.519924][T24681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.552910][T24681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.553021][T24681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.709211][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9624'. [ 1574.141547][T16178] vlan0: entered promiscuous mode [ 1574.141574][T16178] bridge0: entered promiscuous mode [ 1574.312544][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1574.432899][T16208] tipc: Enabling of bearer rejected, failed to enable media [ 1574.788101][T16223] xt_l2tp: invalid flags combination: 8 [ 1575.353713][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1575.468037][T16248] bond1: option mode: unable to set because the bond device has slaves [ 1575.664268][T16256] bond1: (slave macvlan0): Error -98 calling set_mac_address [ 1576.392242][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1576.449184][T16276] netlink: 'syz.4.9639': attribute type 11 has an invalid length. [ 1576.449208][T16276] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9639'. [ 1576.588423][T16268] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1576.628020][T16268] team0: Port device bond15 added [ 1576.877851][T16281] tipc: Enabling of bearer rejected, already enabled [ 1576.975244][T16281] tipc: Resetting bearer [ 1577.099414][T15743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.432177][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1577.697544][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9643'. [ 1578.178231][T16310] tipc: Enabling of bearer rejected, already enabled [ 1578.472644][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1578.473534][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1579.112527][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1579.512152][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1579.514481][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9651'. [ 1579.610734][T15743] veth0_vlan: entered promiscuous mode [ 1579.896358][T15743] veth1_vlan: entered promiscuous mode [ 1580.439672][T15743] veth0_macvtap: entered promiscuous mode [ 1580.488954][T15743] veth1_macvtap: entered promiscuous mode [ 1580.528602][T16364] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9654'. [ 1580.552287][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1580.594018][T16364] sctp: [Deprecated]: syz.7.9654 (pid 16364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1580.594018][T16364] Use struct sctp_sack_info instead [ 1580.648982][T15743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.706009][T15743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.874106][T19863] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.874448][ T6345] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.874526][ T6345] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.874626][ T6345] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.337632][T16370] tipc: Enabling of bearer rejected, failed to enable media [ 1581.339109][T16383] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9659'. [ 1581.592345][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1581.673974][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1581.734588][T16387] x_tables: unsorted underflow at hook 2 [ 1581.735416][T19867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.735434][T19867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.930701][T24669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.930725][T24669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.632553][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1582.722885][T16408] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1582.722921][T16408] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1582.722959][T16408] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1583.151345][T16416] geneve2: entered promiscuous mode [ 1583.672208][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1583.915037][T16427] netlink: 'syz.4.9670': attribute type 4 has an invalid length. [ 1583.947930][T18763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1583.959085][T18763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1583.960863][T18763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1583.962624][T18763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1583.964960][T18763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1584.235049][ T1997] block nbd8: Possible stuck request ffff8880281a7000: control (read@0,4096B). Runtime 300 seconds [ 1584.480411][T16443] tipc: Enabling of bearer rejected, failed to enable media [ 1584.712345][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1585.752246][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1585.992628][T18763] Bluetooth: hci2: command tx timeout [ 1586.079828][T16470] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9679'. [ 1586.436372][T16486] netlink: 2108 bytes leftover after parsing attributes in process `syz.5.9683'. [ 1586.677524][T16497] netlink: 'syz.5.9683': attribute type 1 has an invalid length. [ 1586.783960][T16497] tipc: Enabling of bearer rejected, already enabled [ 1586.802243][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1586.852332][T16486] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1586.906125][T16428] lo speed is unknown, defaulting to 1000 [ 1587.103767][T16511] tipc: Enabling of bearer rejected, failed to enable media [ 1587.777110][T16522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9691'. [ 1587.832205][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1588.072926][T18763] Bluetooth: hci2: command tx timeout [ 1588.834066][T16538] ip_tables: iptables: counters copy to user failed while replacing table [ 1588.872378][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1589.106790][T16550] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1589.389242][ T6345] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1589.389279][ T6345] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1589.389305][ T6345] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.875263][T16546] lo speed is unknown, defaulting to 1000 [ 1589.912178][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1590.143357][ T6345] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1590.143395][ T6345] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1590.143422][ T6345] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.153972][T18763] Bluetooth: hci2: command tx timeout [ 1590.496054][T16565] netlink: 'syz.4.9697': attribute type 10 has an invalid length. [ 1590.952249][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1591.001512][T16558] bridge0: port 1(batadv1) entered disabled state [ 1591.992304][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1592.232062][T18763] Bluetooth: hci2: command tx timeout [ 1593.032184][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1593.539337][T16558] tipc: Resetting bearer [ 1593.746908][T16565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.777472][T16565] team0: entered promiscuous mode [ 1593.777496][T16565] team_slave_0: entered promiscuous mode [ 1593.777705][T16565] team_slave_1: entered promiscuous mode [ 1593.807431][T16565] bond0: (slave team0): Enslaving as an active interface with an up link [ 1593.822487][T19852] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1593.822522][T19852] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.824531][T19852] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1593.824561][T19852] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.824600][T19852] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1593.824625][T19852] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.824660][T19852] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1593.824685][T19852] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.072097][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1594.107416][ T6345] team0: Port device netdevsim1 removed [ 1594.146683][ T6345] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1594.146720][ T6345] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1594.146747][ T6345] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.565925][ T6345] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1594.565972][ T6345] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1594.565999][ T6345] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.025354][T16571] tipc: Enabling of bearer rejected, failed to enable media [ 1595.112591][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1595.410538][T16599] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1595.825411][T16612] netlink: 'syz.4.9704': attribute type 1 has an invalid length. [ 1595.825435][T16612] netlink: 248 bytes leftover after parsing attributes in process `syz.4.9704'. [ 1596.152152][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1596.786839][T16628] xt_TCPMSS: Only works on TCP SYN packets [ 1596.801124][T16628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1597.192211][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1597.345409][T16428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.345520][T16428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.348329][T16428] bridge_slave_0: entered allmulticast mode [ 1597.379124][T16428] bridge_slave_0: entered promiscuous mode [ 1597.405177][T16428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.405285][T16428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.405476][T16428] bridge_slave_1: entered allmulticast mode [ 1597.437536][T16428] bridge_slave_1: entered promiscuous mode [ 1597.878246][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9709'. [ 1598.148193][T16648] netlink: 804 bytes leftover after parsing attributes in process `syz.0.9711'. [ 1598.232146][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1598.327744][T16650] TCP: tcp_parse_options: Illegal window scaling value 75 > 14 received [ 1598.327769][T16650] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 1599.177224][ T6345] bond12 (unregistering): (slave bridge4): Releasing backup interface [ 1599.177250][ T6345] bond12 (unregistering): (slave bridge4): the permanent HWaddr of slave - 5a:d4:ac:82:27:33 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1599.177284][ T6345] bond12 (unregistering): (slave bridge5): making interface the new active one [ 1599.177446][ T6345] bond12 (unregistering): (slave bridge5): Error 16 setting MAC of new active slave [ 1599.220239][T16619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1599.269987][ T6345] bond12 (unregistering): (slave bridge5): Releasing backup interface [ 1599.270029][ T6345] bond12 (unregistering): (slave bridge6): making interface the new active one [ 1599.270178][ T6345] bond12 (unregistering): (slave bridge6): Error 16 setting MAC of new active slave [ 1599.272284][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1599.432900][ T6345] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 1599.432936][ T6345] bond12 (unregistering): (slave bridge7): making interface the new active one [ 1599.433066][ T6345] bond12 (unregistering): (slave bridge7): Error 16 setting MAC of new active slave [ 1599.489367][ T6345] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 1599.489405][ T6345] bond12 (unregistering): (slave bridge8): making interface the new active one [ 1599.489531][ T6345] bond12 (unregistering): (slave bridge8): Error 16 setting MAC of new active slave [ 1599.628148][ T6345] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 1599.628185][ T6345] bond12 (unregistering): (slave bridge9): making interface the new active one [ 1599.628306][ T6345] bond12 (unregistering): (slave bridge9): Error 16 setting MAC of new active slave [ 1599.684699][ T6345] bond12 (unregistering): (slave bridge9): Releasing backup interface [ 1599.684733][ T6345] bond12 (unregistering): (slave bridge10): making interface the new active one [ 1599.684855][ T6345] bond12 (unregistering): (slave bridge10): Error 16 setting MAC of new active slave [ 1599.758312][ T6345] bond12 (unregistering): (slave bridge10): Releasing backup interface [ 1599.758346][ T6345] bond12 (unregistering): (slave bridge11): making interface the new active one [ 1599.758557][ T6345] bond12 (unregistering): (slave bridge11): Error 16 setting MAC of new active slave [ 1599.857593][ T6345] bond12 (unregistering): (slave bridge11): Releasing backup interface [ 1599.857628][ T6345] bond12 (unregistering): (slave bridge12): making interface the new active one [ 1599.857755][ T6345] bond12 (unregistering): (slave bridge12): Error 16 setting MAC of new active slave [ 1599.937562][ T6345] bond12 (unregistering): (slave bridge12): Releasing backup interface [ 1599.937595][ T6345] bond12 (unregistering): (slave bridge13): making interface the new active one [ 1599.937717][ T6345] bond12 (unregistering): (slave bridge13): Error 16 setting MAC of new active slave [ 1600.014793][ T6345] bond12 (unregistering): (slave bridge13): Releasing backup interface [ 1600.014828][ T6345] bond12 (unregistering): (slave bridge14): making interface the new active one [ 1600.014956][ T6345] bond12 (unregistering): (slave bridge14): Error 16 setting MAC of new active slave [ 1600.113001][ T6345] bond12 (unregistering): (slave bridge14): Releasing backup interface [ 1600.113035][ T6345] bond12 (unregistering): (slave bridge15): making interface the new active one [ 1600.113156][ T6345] bond12 (unregistering): (slave bridge15): Error 16 setting MAC of new active slave [ 1600.256702][ T6345] bond12 (unregistering): (slave bridge15): Releasing backup interface [ 1600.256736][ T6345] bond12 (unregistering): (slave bridge16): making interface the new active one [ 1600.256857][ T6345] bond12 (unregistering): (slave bridge16): Error 16 setting MAC of new active slave [ 1600.312210][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1600.380436][ T6345] bond12 (unregistering): (slave bridge16): Releasing backup interface [ 1600.380470][ T6345] bond12 (unregistering): (slave bridge17): making interface the new active one [ 1600.380590][ T6345] bond12 (unregistering): (slave bridge17): Error 16 setting MAC of new active slave [ 1600.456751][ T6345] bond12 (unregistering): (slave bridge17): Releasing backup interface [ 1600.456786][ T6345] bond12 (unregistering): (slave bridge18): making interface the new active one [ 1600.456910][ T6345] bond12 (unregistering): (slave bridge18): Error 16 setting MAC of new active slave [ 1600.500201][ T6345] bond12 (unregistering): (slave bridge18): Releasing backup interface [ 1600.500235][ T6345] bond12 (unregistering): (slave bridge19): making interface the new active one [ 1600.500392][ T6345] bond12 (unregistering): (slave bridge19): Error 16 setting MAC of new active slave [ 1600.556936][ T6345] bond12 (unregistering): (slave bridge19): Releasing backup interface [ 1600.556969][ T6345] bond12 (unregistering): (slave bridge20): making interface the new active one [ 1600.557087][ T6345] bond12 (unregistering): (slave bridge20): Error 16 setting MAC of new active slave [ 1600.603343][ T6345] bond12 (unregistering): (slave bridge20): Releasing backup interface [ 1600.603375][ T6345] bond12 (unregistering): (slave bridge21): making interface the new active one [ 1600.604281][ T6345] bond12 (unregistering): (slave bridge21): Error 16 setting MAC of new active slave [ 1600.666803][ T6345] bond12 (unregistering): (slave bridge21): Releasing backup interface [ 1600.666835][ T6345] bond12 (unregistering): (slave bridge22): making interface the new active one [ 1600.667034][ T6345] bond12 (unregistering): (slave bridge22): Error 16 setting MAC of new active slave [ 1600.749215][ T6345] bond12 (unregistering): (slave bridge22): Releasing backup interface [ 1600.749249][ T6345] bond12 (unregistering): (slave bridge23): making interface the new active one [ 1600.749368][ T6345] bond12 (unregistering): (slave bridge23): Error 16 setting MAC of new active slave [ 1600.860343][ T6345] bond12 (unregistering): (slave bridge23): Releasing backup interface [ 1600.901738][ T6345] bond0 (unregistering): Released all slaves [ 1600.922454][ T6345] bond1 (unregistering): Released all slaves [ 1600.954461][ T6345] bond2 (unregistering): Released all slaves [ 1601.027251][ T6345] bond3 (unregistering): Released all slaves [ 1601.072790][ T6345] bond4 (unregistering): Released all slaves [ 1601.101455][ T6345] bond5 (unregistering): Released all slaves [ 1601.159174][ T6345] bond6 (unregistering): Released all slaves [ 1601.180908][ T6345] bond7 (unregistering): Released all slaves [ 1601.205404][ T6345] bond8 (unregistering): Released all slaves [ 1601.308760][ T6345] bond9 (unregistering): Released all slaves [ 1601.352198][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1601.354887][ T6345] bond10 (unregistering): (slave bond11): Releasing backup interface [ 1601.355794][ T6345] bond10 (unregistering): Released all slaves [ 1601.426882][ T6345] bond11 (unregistering): Released all slaves [ 1601.477073][ T6345] bond12 (unregistering): Released all slaves [ 1601.521230][ T6345] bond13 (unregistering): Released all slaves [ 1601.551257][ T6345] bond14 (unregistering): Released all slaves [ 1601.577245][ T6345] team0: Port device bond15 removed [ 1601.578695][ T6345] bond15 (unregistering): Released all slaves [ 1601.783060][T16641] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1601.812656][T16428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.882721][T16428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.904331][T16665] tipc: Enabling of bearer rejected, failed to enable media [ 1602.046190][T16673] netlink: 'syz.8.9716': attribute type 1 has an invalid length. [ 1602.046212][T16673] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9716'. [ 1602.046228][T16673] netlink: 'syz.8.9716': attribute type 2 has an invalid length. [ 1602.046240][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9716'. [ 1602.229133][T16681] IPv6: Can't replace route, no match found [ 1602.229351][T16681] IPv6: Can't replace route, no match found [ 1602.392138][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1602.414563][T16428] team0: Port device team_slave_0 added [ 1602.445558][T16428] team0: Port device team_slave_1 added [ 1602.932337][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9720'. [ 1603.157933][ T6345] : left promiscuous mode [ 1603.329625][T16428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.329644][T16428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.329672][T16428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.393936][T16428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.396488][T16428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.396522][T16428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.432506][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1603.570626][T16705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1603.570664][T16705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1603.594515][ T6345] tipc: Disabling bearer [ 1603.594797][ T6345] tipc: Disabling bearer [ 1603.661323][ T6345] tipc: Left network mode [ 1603.774667][T16704] erspan0: entered promiscuous mode [ 1603.774841][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9722'. [ 1603.774861][T16710] erspan0: left promiscuous mode [ 1603.836763][T16710] xt_ecn: cannot match TCP bits for non-tcp packets [ 1603.838915][T16710] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9722'. [ 1603.893577][T16712] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9723'. [ 1604.171439][T16428] hsr_slave_0: entered promiscuous mode [ 1604.193530][T16428] hsr_slave_1: entered promiscuous mode [ 1604.215711][T16428] debugfs: 'hsr0' already exists in 'hsr' [ 1604.215736][T16428] Cannot create hsr debugfs directory [ 1604.472168][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1605.512335][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1605.820361][ T6345] IPVS: stopping master sync thread 8625 ... [ 1606.076995][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1606.199959][T16719] lo speed is unknown, defaulting to 1000 [ 1606.248009][T16751] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1606.552110][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1607.197302][T16770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9731'. [ 1607.592161][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1607.716049][T16775] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9732'. [ 1608.632142][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.672232][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1610.712120][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1610.763949][ T6345] hsr_slave_0: left promiscuous mode [ 1610.783274][ T6345] hsr_slave_1: left promiscuous mode [ 1610.835779][ T6345] veth1_vlan: left promiscuous mode [ 1611.752576][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1612.587725][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1612.792171][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.133736][T16847] Cannot find add_set index 0 as target [ 1613.834668][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.978887][T16832] batman_adv: batadv0: Adding interface: syzkaller0 [ 1613.978905][T16832] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.978937][T16832] batman_adv: batadv0: Interface activated: syzkaller0 [ 1614.121637][T16838] bridge0: left promiscuous mode [ 1614.133595][T16838] 8021q: adding VLAN 0 to HW filter on device .` [ 1614.140631][T16838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.266227][T16838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1614.266255][T16838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1614.468013][T16838] veth1_macvtap: left promiscuous mode [ 1614.489747][T16838] veth0_macvtap: left promiscuous mode [ 1614.500402][T16838] veth0_macvtap: entered promiscuous mode [ 1614.510791][T16838] veth1_macvtap: entered promiscuous mode [ 1614.534917][T16838] mac80211_hwsim hwsim127 wlan0: left promiscuous mode [ 1614.644924][T16838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1614.647790][T16838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1614.650394][T16838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.667733][ T1997] block nbd8: Possible stuck request ffff8880281a7000: control (read@0,4096B). Runtime 330 seconds [ 1614.777824][T16838] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1614.780575][T16838] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1614.789673][T16838] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1614.808577][T16838] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1614.818402][T16838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1614.872188][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.993198][T16838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1614.993881][T16838] mac80211_hwsim hwsim127 wlan0: entered promiscuous mode [ 1614.996850][T16838] bridge0: port 1(batadv1) entered blocking state [ 1614.996973][T16838] bridge0: port 1(batadv1) entered forwarding state [ 1614.997248][T16838] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1615.097556][T16838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1615.244431][T19846] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.244468][T19846] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.244547][T19846] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.244573][T19846] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.244609][T19846] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.244634][T19846] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.244669][T19846] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.244694][T19846] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.553706][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9744'. [ 1615.912200][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1616.024963][T16829] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1616.395434][T16829] batman_adv: batadv0: Removing interface: syzkaller0 [ 1616.401275][T26226] bridge0: entered promiscuous mode [ 1616.952138][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1617.001241][ T6347] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1617.001480][ T6347] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1617.026700][ T5727] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1617.143906][ T1290] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1617.144121][ T1290] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1617.172302][T22158] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1617.173188][T22158] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1617.174386][ T1290] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1617.174614][ T1290] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1617.273175][T22185] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1617.936014][T16875] syzkaller0: entered promiscuous mode [ 1617.936038][T16875] syzkaller0: entered allmulticast mode [ 1617.992197][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1618.013780][T16875] tipc: Started in network mode [ 1618.013800][T16875] tipc: Node identity , cluster identity 4711 [ 1618.013814][T16875] tipc: Failed to obtain node identity [ 1618.013844][T16875] tipc: Enabling of bearer rejected, failed to enable media [ 1618.017609][T16882] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9749'. [ 1618.080408][ T6345] IPVS: stop unused estimator thread 0... [ 1618.275233][T16883] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9749'. [ 1618.275293][T16883] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9749'. [ 1618.584894][T16883] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9749'. [ 1618.584956][T16883] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9749'. [ 1619.032149][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1619.208000][T16899] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9752'. [ 1619.947092][T16911] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9755'. [ 1619.947124][T16911] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9755'. [ 1619.988358][T16428] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1619.999225][T16428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1620.000083][T16428] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1620.038332][T16428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1620.057583][T16428] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1620.063865][T16911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9755'. [ 1620.072470][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1620.079566][T16428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1620.097340][T16428] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1620.107231][T16428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1620.129726][T16919] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1620.129757][T16919] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1620.201297][T16911] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1620.340449][T16933] syzkaller0: entered promiscuous mode [ 1620.340475][T16933] syzkaller0: entered allmulticast mode [ 1621.112213][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1622.152387][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1622.727020][T16912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1623.200041][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1623.275272][ C0] tipc: RX(feffffff000000000000ffffffffffff): key[1] is activated [ 1624.232415][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.272206][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.348718][T16981] x_tables: duplicate underflow at hook 1 [ 1625.438056][T16989] netlink: 'syz.0.9762': attribute type 5 has an invalid length. [ 1625.718726][T16428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.803101][T16428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.829425][T24681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.829524][T24681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.887133][T19867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.887236][T19867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.012957][T17015] x_tables: duplicate underflow at hook 2 [ 1626.028607][T19852] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1626.312313][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1626.663140][T17050] __nla_validate_parse: 4 callbacks suppressed [ 1626.663160][T17050] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9768'. [ 1626.766186][T17050] vlan2: entered promiscuous mode [ 1626.766208][T17050] veth1_to_team: entered promiscuous mode [ 1627.065797][T16428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.352279][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1627.480066][T16428] veth0_vlan: entered promiscuous mode [ 1627.501049][T16428] veth1_vlan: entered promiscuous mode [ 1627.539923][T16428] veth0_macvtap: entered promiscuous mode [ 1627.551016][T16428] veth1_macvtap: entered promiscuous mode [ 1627.576787][T16428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1627.594958][T16428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1627.713606][T24676] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.715814][T24676] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.716238][T24676] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.723674][T19863] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.392430][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 1628.392450][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1628.392755][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1628.890544][T17017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1628.890902][T17013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9764'. [ 1628.997131][T19852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.997148][T19852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.140054][T24676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.140079][T24676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.319419][T17134] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1629.320901][T17134] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1629.432250][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1629.672025][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1629.672277][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1629.727958][ T31] audit: type=1800 audit(1791079200.033:33): pid=17142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9772" name=B702 dev="tmpfs" ino=504 res=0 errno=0 [ 1630.076647][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9774'. [ 1630.224264][T18763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1630.228065][T18763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1630.230678][T18763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1630.247897][T18763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1630.263618][T18763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1630.472398][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1630.812485][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9779'. [ 1630.858216][T17176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9780'. [ 1630.858241][T17176] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9780'. [ 1630.869016][T17175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9780'. [ 1630.869039][T17175] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9780'. [ 1631.170172][T17181] hsr0: entered allmulticast mode [ 1631.170195][T17181] hsr_slave_0: entered allmulticast mode [ 1631.170214][T17181] hsr_slave_1: entered allmulticast mode [ 1631.214697][T17181] hsr_slave_0: left promiscuous mode [ 1631.217050][T17181] hsr_slave_1: left promiscuous mode [ 1631.244042][T17181] hsr0 (unregistering): left allmulticast mode [ 1631.309632][T17157] lo speed is unknown, defaulting to 1000 [ 1631.512187][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1631.615284][T17204] netlink: 'syz.8.9786': attribute type 1 has an invalid length. [ 1631.637319][T17196] netlink: zone id is out of range [ 1631.637334][T17196] netlink: zone id is out of range [ 1631.637343][T17196] netlink: zone id is out of range [ 1631.637351][T17196] netlink: zone id is out of range [ 1631.637359][T17196] netlink: zone id is out of range [ 1631.637367][T17196] netlink: zone id is out of range [ 1631.680259][T17205] __nla_validate_parse: 8 callbacks suppressed [ 1631.680271][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9786'. [ 1631.753424][T17193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.756426][T17193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.060006][T17193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1632.068232][T17193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1632.312016][ T1401] Bluetooth: hci1: command tx timeout [ 1632.361100][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9790'. [ 1632.412939][ T6347] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.413811][T19863] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.414434][T19863] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.415044][T19863] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.853630][T17229] netlink: 'syz.4.9792': attribute type 1 has an invalid length. [ 1632.853655][T17229] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9792'. [ 1633.439832][T17238] net_ratelimit: 501 callbacks suppressed [ 1633.439855][T17238] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1633.481764][T17238] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1633.580029][T19863] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1633.580068][T19863] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.592794][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1634.249014][T17250] syzkaller0: entered promiscuous mode [ 1634.249040][T17250] syzkaller0: entered allmulticast mode [ 1634.396447][ T1401] Bluetooth: hci1: command tx timeout [ 1634.632270][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1634.805707][T17285] netlink: 'syz.0.9800': attribute type 15 has an invalid length. [ 1635.632261][T17285] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1635.682681][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1636.479871][ T1401] Bluetooth: hci1: command tx timeout [ 1636.716338][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1637.760925][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1638.564495][ T1401] Bluetooth: hci1: command tx timeout [ 1638.792291][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1638.977977][T17293] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9801'. [ 1638.997154][T19863] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1638.997190][T19863] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.015701][T17293] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9801'. [ 1639.146233][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.146341][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.146510][T17157] bridge_slave_0: entered allmulticast mode [ 1639.151072][T17157] bridge_slave_0: entered promiscuous mode [ 1639.169369][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.169475][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.169620][T17157] bridge_slave_1: entered allmulticast mode [ 1639.208455][T17157] bridge_slave_1: entered promiscuous mode [ 1639.337181][T17311] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9803'. [ 1639.337207][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9803'. [ 1639.337221][T17311] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9803'. [ 1639.338354][T17309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1639.467274][T19863] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1639.467310][T19863] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.527563][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.530213][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.571779][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1639.627844][T17310] netlink: 'syz.4.9805': attribute type 12 has an invalid length. [ 1639.627864][T17310] netlink: 'syz.4.9805': attribute type 29 has an invalid length. [ 1639.627876][T17310] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1639.627908][T17310] netlink: 59 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1639.832147][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1639.936590][T19863] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1639.936612][T19863] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.954202][T17157] team0: Port device team_slave_0 added [ 1639.954456][T17322] syzkaller0: entered promiscuous mode [ 1639.954471][T17322] syzkaller0: entered allmulticast mode [ 1639.997753][T17157] team0: Port device team_slave_1 added [ 1640.122328][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.122347][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.122373][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.128105][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.128121][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.128146][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.330967][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9812'. [ 1640.331001][T17354] netlink: 'syz.7.9812': attribute type 30 has an invalid length. [ 1640.348081][T17353] netlink: 'syz.7.9812': attribute type 30 has an invalid length. [ 1640.372511][T17157] hsr_slave_0: entered promiscuous mode [ 1640.373547][T17157] hsr_slave_1: entered promiscuous mode [ 1640.374234][T17157] debugfs: 'hsr0' already exists in 'hsr' [ 1640.374258][T17157] Cannot create hsr debugfs directory [ 1640.398822][T17354] vxlan0: entered promiscuous mode [ 1640.398843][T17354] vxlan0: entered allmulticast mode [ 1640.413146][ T1290] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.413190][ T1290] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.413226][ T1290] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.422214][T19840] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.596996][T17361] netlink: 'syz.7.9815': attribute type 1 has an invalid length. [ 1640.872471][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1641.104204][T17359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.561440][T17387] netlink: 'syz.4.9820': attribute type 1 has an invalid length. [ 1641.581663][T19863] batadv1: left allmulticast mode [ 1641.581689][T19863] batadv1: left promiscuous mode [ 1641.598060][T19863] bridge0: port 1(batadv1) entered disabled state [ 1641.888870][T19863] pim6reg: left allmulticast mode [ 1641.889761][T19863] dvmrp0: left allmulticast mode [ 1641.889859][T19863] lo: left allmulticast mode [ 1641.912188][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1641.929379][T19863] tipc: Resetting bearer [ 1641.991091][T17403] ip6t_srh: unknown srh match flags 4000 [ 1642.533311][T19863] tipc: Disabling bearer [ 1642.623788][T19863] .` (unregistering): Released all slaves [ 1642.628071][T19863] bond1 (unregistering): Released all slaves [ 1642.648826][T19863] bond2 (unregistering): Released all slaves [ 1642.692686][T19863] bond0 (unregistering): Released all slaves [ 1642.716040][T19863] bond3 (unregistering): Released all slaves [ 1642.726672][T24676] smbdirect: ib_dev[syz1] removed [ 1642.754667][T19863] bond4 (unregistering): Released all slaves [ 1642.786068][T19863] bond5 (unregistering): (slave veth7): Releasing active interface [ 1642.786097][T19863] veth0_to_bond: entered promiscuous mode [ 1642.790109][T19863] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1642.790133][T19863] veth0_to_bond: left promiscuous mode [ 1642.822607][T19863] bond5 (unregistering): Released all slaves [ 1642.847180][T19863] bond6 (unregistering): Released all slaves [ 1642.871693][T17387] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1642.898846][T17394] bridge4: entered promiscuous mode [ 1642.948664][T17401] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1642.949051][T17408] netlink: 'syz.8.9826': attribute type 1 has an invalid length. [ 1642.952369][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1643.242023][T19840] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.242075][T19840] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.242110][T19840] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.270215][T24681] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.315281][T19863] ovs-s!: left promiscuous mode [ 1643.469782][T19863] tipc: Disabling bearer [ 1643.469914][T19863] tipc: Left network mode [ 1643.992296][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1645.032685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1645.035220][ T1997] block nbd8: Possible stuck request ffff8880281a7000: control (read@0,4096B). Runtime 360 seconds [ 1645.084512][T17493] __nla_validate_parse: 12 callbacks suppressed [ 1645.084534][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9842'. [ 1645.084551][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9842'. [ 1645.681586][ T32] INFO: task syz.6.9180:13687 blocked for more than 143 seconds. [ 1645.681612][ T32] Not tainted syzkaller #0 [ 1645.681624][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1645.681634][ T32] task:syz.6.9180 state:D stack:27128 pid:13687 tgid:13686 ppid:3592 task_flags:0x400140 flags:0x00080002 [ 1645.681697][ T32] Call Trace: [ 1645.681705][ T32] [ 1645.681719][ T32] __schedule+0x17db/0x58f0 [ 1645.681784][ T32] ? __pfx___schedule+0x10/0x10 [ 1645.682309][ T32] ? schedule+0x90/0x2b0 [ 1645.682342][ T32] schedule+0x164/0x2b0 [ 1645.682370][ T32] schedule_preempt_disabled+0x13/0x30 [ 1645.682395][ T32] __mutex_lock+0x7c1/0x1550 [ 1645.682427][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1645.682461][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1645.682491][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1645.682530][ T32] ? net_generic+0x1e/0x240 [ 1645.682553][ T32] ? net_generic+0x1e/0x240 [ 1645.682584][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1645.682609][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 1645.682633][ T32] ? __asan_memset+0x22/0x50 [ 1645.682662][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 1645.682688][ T32] ? do_syscall_64+0x166/0x520 [ 1645.682716][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.682740][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1645.682781][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 1645.682827][ T32] ? rcu_is_watching+0x16/0xb0 [ 1645.682853][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1645.682900][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1645.682924][ T32] ? __nla_parse+0x40/0x60 [ 1645.682955][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1645.682982][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1645.683018][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1645.683053][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1645.683095][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1645.683114][ T32] ? security_capable+0x7e/0x2c0 [ 1645.683146][ T32] genl_rcv_msg+0x614/0x7a0 [ 1645.683180][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.683206][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1645.683247][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1645.683269][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.683294][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1645.683329][ T32] ? down_read+0x2be/0x330 [ 1645.683351][ T32] genl_rcv+0x28/0x40 [ 1645.683372][ T32] netlink_unicast+0x7bd/0x940 [ 1645.683408][ T32] netlink_sendmsg+0x813/0xb40 [ 1645.683439][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.683470][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1645.683495][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.683513][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1645.683536][ T32] ____sys_sendmsg+0x54e/0x850 [ 1645.683570][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.683609][ T32] ? import_iovec+0x73/0xa0 [ 1645.683644][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1645.683670][ T32] ? __lock_acquire+0x747/0x2de0 [ 1645.683698][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.683731][ T32] ? futex_wait+0x2a2/0x390 [ 1645.683795][ T32] ? __fget_files+0x2a/0x420 [ 1645.683823][ T32] ? __fget_files+0x3a2/0x420 [ 1645.683863][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1645.683896][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1645.683944][ T32] do_syscall_64+0x166/0x520 [ 1645.683972][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.683992][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1645.684017][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.684038][ T32] RIP: 0033:0x7f5f57f9e159 [ 1645.684056][ T32] RSP: 002b:00007f5f58f11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.684077][ T32] RAX: ffffffffffffffda RBX: 00007f5f58225fa0 RCX: 00007f5f57f9e159 [ 1645.684093][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000005 [ 1645.684106][ T32] RBP: 00007f5f5803506b R08: 0000000000000000 R09: 0000000000000000 [ 1645.684119][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1645.684130][ T32] R13: 00007f5f58226038 R14: 00007f5f58225fa0 R15: 00007ffc6e7cd5e8 [ 1645.684160][ T32] [ 1645.684209][ T32] [ 1645.684209][ T32] Showing all locks held in the system: [ 1645.684221][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1645.684236][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1645.684315][ T32] locks held by dhcpcd/5280: 2, on CPU#0: [ 1645.684329][ T32] #0: ffff888053dc46e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1645.684375][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa18/0x1420 [ 1645.684427][ T32] locks held by getty/5371: 2, on CPU#1: [ 1645.684440][ T32] #0: ffff888035a8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1645.684497][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1645.684552][ T32] locks held by kworker/u8:13/6345: 3, last CPU#0: [ 1645.684566][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.684619][ T32] #1: ffffc900081b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.684681][ T32] #2: ffff888077fef258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1645.684751][ T32] locks held by kworker/u8:27/19846: 3, last CPU#0: [ 1645.684767][ T32] #0: ffff88807895b940 ((wq_completion)krds_cp_wq#8/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.684819][ T32] #1: ffffc90004f6fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.684871][ T32] #2: ffff88805322c080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1645.684932][ T32] locks held by kworker/u8:40/19863: 6, last CPU#0: [ 1645.684947][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.684997][ T32] #1: ffffc90005337c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.685049][ T32] #2: ffffffff90246248 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1645.685101][ T32] #3: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1645.685154][ T32] #4: ffff888072960800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x132/0x6a0 [ 1645.685202][ T32] #5: ffff88805e708140 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 1645.685274][ T32] locks held by kworker/u8:7/24676: 3, last CPU#0: [ 1645.685289][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.685341][ T32] #1: ffffc90005397c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.685396][ T32] #2: ffff88807a22a258 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1645.685467][ T32] locks held by udevd/5557: 1, on CPU#0: [ 1645.685481][ T32] #0: ffff8880280bf350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1645.685530][ T32] locks held by kworker/0:4/7295: 2, last CPU#0: [ 1645.685544][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.685596][ T32] #1: ffffc9000ed87c40 ((work_completion)(&(&devlink->rwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1645.685661][ T32] locks held by syz.9.9072/13109: 2, on CPU#1: [ 1645.685675][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1645.685727][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1645.685780][ T32] locks held by syz.6.9180/13687: 2, on CPU#0: [ 1645.685795][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1645.685846][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1645.685902][ T32] locks held by syz-executor/17157: 7, last CPU#1: [ 1645.685916][ T32] #0: ffff88807f99a460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1645.685977][ T32] #1: ffff888037c45c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1645.686030][ T32] #2: ffff88802a009008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1645.686086][ T32] #3: ffffffff8facbea0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6c0 [ 1645.686136][ T32] #4: ffff888053dc1128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1645.686183][ T32] #5: ffff888050ec2258 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbb0 [ 1645.686236][ T32] #6: ffffffff8ee6a4e0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 1645.686293][ T32] locks held by syz.0.9842/17498: 2, last CPU#1: [ 1645.686308][ T32] #0: ffff888077f28460 (sb_writers#5){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 1645.686366][ T32] #1: ffff8880274ed6f8 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1645.686425][ T32] locks held by syz.0.9842/17510: 1, last CPU#1: [ 1645.686440][ T32] #0: ffff88801b09d900 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 1645.686491][ T32] locks held by syz.7.9847/17509: 1, on CPU#1: [ 1645.686506][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 1645.686555][ T32] locks held by syz.8.9848/17515: 1, last CPU#0: [ 1645.686569][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1645.686616][ T32] [ 1645.686621][ T32] ============================================= [ 1645.686621][ T32] [ 1645.686644][ T32] NMI backtrace for cpu 0 [ 1645.686658][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1645.686679][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1645.686691][ T32] Call Trace: [ 1645.686700][ T32] [ 1645.686708][ T32] dump_stack_lvl+0xe8/0x150 [ 1645.686737][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1645.686762][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1645.686795][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1645.686822][ T32] sys_info+0x135/0x170 [ 1645.686843][ T32] watchdog+0xfd7/0x1030 [ 1645.686871][ T32] ? watchdog+0x1c7/0x1030 [ 1645.686899][ T32] kthread+0x38b/0x480 [ 1645.686920][ T32] ? __pfx_watchdog+0x10/0x10 [ 1645.686937][ T32] ? __pfx_kthread+0x10/0x10 [ 1645.686958][ T32] ret_from_fork+0x514/0xb70 [ 1645.686987][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1645.687016][ T32] ? __switch_to+0xc89/0x1420 [ 1645.687044][ T32] ? __pfx_kthread+0x10/0x10 [ 1645.687063][ T32] ret_from_fork_asm+0x1a/0x30 [ 1645.687104][ T32] [ 1645.687112][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1645.687150][ C1] NMI backtrace for cpu 1 [ 1645.687163][ C1] CPU: 1 UID: 0 PID: 17498 Comm: syz.0.9842 Not tainted syzkaller #0 PREEMPT(full) [ 1645.687185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1645.687196][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5e/0x80 [ 1645.687226][ C1] Code: 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c 8b 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 <48> 8d 7e 01 8b 89 1c 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 1645.687243][ C1] RSP: 0018:ffffc90005907378 EFLAGS: 00000246 [ 1645.687259][ C1] RAX: ffffffff8207164d RBX: ffffffff9aba69a0 RCX: ffff88801db3ddc0 [ 1645.687274][ C1] RDX: ffffc9002b203000 RSI: 000000000000eb95 RDI: ffffffff9aba69a0 [ 1645.687288][ C1] RBP: 0000000000000001 R08: ffffffff9079a07f R09: 1ffffffff20f340f [ 1645.687301][ C1] R10: dffffc0000000000 R11: fffffbfff20f3410 R12: dffffc0000000000 [ 1645.687316][ C1] R13: ffff88801db3e380 R14: ffff88801b09d5c0 R15: ffff8880274ed5b8 [ 1645.687330][ C1] FS: 00007fe4a8eaa6c0(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 1645.687347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1645.687361][ C1] CR2: 00007f3f859eb840 CR3: 000000005b670000 CR4: 00000000003526f0 [ 1645.687377][ C1] Call Trace: [ 1645.687384][ C1] [ 1645.687391][ C1] static_key_count+0xd/0x70 [ 1645.687410][ C1] security_vm_enough_memory_mm+0x2d/0x4f0 [ 1645.687436][ C1] shmem_inode_acct_blocks+0xd5/0x460 [ 1645.687456][ C1] ? shmem_alloc_and_add_folio+0x860/0xf60 [ 1645.687482][ C1] shmem_alloc_and_add_folio+0x8cf/0xf60 [ 1645.687506][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 1645.687535][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1645.687558][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1645.687585][ C1] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 1645.687612][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 1645.687647][ C1] shmem_write_begin+0x16c/0x330 [ 1645.687675][ C1] generic_perform_write+0x2d5/0x8f0 [ 1645.687709][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1645.687735][ C1] ? __mark_inode_dirty+0x4e7/0x13b0 [ 1645.687757][ C1] ? mnt_put_write_access_file+0xc3/0x100 [ 1645.687777][ C1] ? file_update_time_flags+0x3ab/0x440 [ 1645.687799][ C1] shmem_file_write_iter+0xf8/0x120 [ 1645.687825][ C1] iter_file_splice_write+0xa31/0x1240 [ 1645.687866][ C1] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1645.687903][ C1] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1645.687929][ C1] direct_splice_actor+0x101/0x160 [ 1645.687958][ C1] splice_direct_to_actor+0x57b/0xcb0 [ 1645.687995][ C1] ? __pfx_direct_splice_actor+0x10/0x10 [ 1645.688021][ C1] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1645.688054][ C1] do_splice_direct+0x195/0x290 [ 1645.688081][ C1] ? __pfx_do_splice_direct+0x10/0x10 [ 1645.688108][ C1] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1645.688130][ C1] ? rw_verify_area+0x203/0x4c0 [ 1645.688165][ C1] do_sendfile+0x52e/0x7c0 [ 1645.688191][ C1] ? __pfx_do_sendfile+0x10/0x10 [ 1645.688215][ C1] ? __se_sys_futex+0x3a8/0x450 [ 1645.688241][ C1] __se_sys_sendfile64+0x144/0x1a0 [ 1645.688262][ C1] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1645.688289][ C1] do_syscall_64+0x166/0x520 [ 1645.688314][ C1] ? trace_irq_disable+0x3b/0x140 [ 1645.688333][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.688351][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1645.688372][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.688391][ C1] RIP: 0033:0x7fe4a7f9e159 [ 1645.688406][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1645.688422][ C1] RSP: 002b:00007fe4a8eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1645.688440][ C1] RAX: ffffffffffffffda RBX: 00007fe4a8226090 RCX: 00007fe4a7f9e159 [ 1645.688454][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1645.688465][ C1] RBP: 00007fe4a803506b R08: 0000000000000000 R09: 0000000000000000 [ 1645.688477][ C1] R10: 000000007d1d7457 R11: 0000000000000246 R12: 0000000000000000 [ 1645.688489][ C1] R13: 00007fe4a8226128 R14: 00007fe4a8226090 R15: 00007ffe04a25778 [ 1645.688514][ C1] [ 1645.689151][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1647.122512][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1647.131619][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1647.141663][ T32] Call Trace: [ 1647.144934][ T32] [ 1647.147854][ T32] vpanic+0x56d/0xa60 [ 1647.151841][ T32] ? __pfx_vpanic+0x10/0x10 [ 1647.156341][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1647.161885][ T32] panic+0xc5/0xd0 [ 1647.165601][ T32] ? __pfx_panic+0x10/0x10 [ 1647.170014][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1647.175034][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1647.181185][ T32] watchdog+0x1030/0x1030 [ 1647.185512][ T32] ? watchdog+0x1c7/0x1030 [ 1647.189929][ T32] kthread+0x38b/0x480 [ 1647.193991][ T32] ? __pfx_watchdog+0x10/0x10 [ 1647.198664][ T32] ? __pfx_kthread+0x10/0x10 [ 1647.203242][ T32] ret_from_fork+0x514/0xb70 [ 1647.207835][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1647.212940][ T32] ? __switch_to+0xc89/0x1420 [ 1647.217612][ T32] ? __pfx_kthread+0x10/0x10 [ 1647.222188][ T32] ret_from_fork_asm+0x1a/0x30 [ 1647.226964][ T32] [ 1647.230114][ T32] Kernel Offset: disabled [ 1647.234429][ T32] Rebooting in 86400 seconds..