last executing test programs: 3m52.4501921s ago: executing program 2 (id=3473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000004680)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000046c0)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000004700), 0x3c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004780)=[{&(0x7f00000047c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002980)=[{&(0x7f0000002a40)="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", 0x11d}, {&(0x7f0000002b80)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xf6}, {&(0x7f0000002c80)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0xfeed}, {&(0x7f0000002d00)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28db922c628a534fb91191d25f636a589", 0x59}, {&(0x7f0000002d80)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3531f795bf2f172d6fb23f3549b9734f2eef416b7698a93335a94b8cda61325b62cda1807b03675c6347b431f2d71baa6bc59e9047069153d70ffba20956e58971501c2d9f299fdfa3a38fa73a5da43ba2506d8704592ee5c19ca0d2075ddc9313d8bd2202a89dae6a689d3900818f892f3f17957cd53023399810da5655e0fd0f0f394c9a8bedc", 0xca}, {&(0x7f0000002e80)="0f15ce0e2a894e2afb7a77dc4a4ec84b8109b2c95397d40adb9d5e8df8fd9a3167faa56aa764e61ba1a6cc8fd041bb89bee6d17105e169dd8d68d5b79eb5958574299b9035fbed2942a75e731b7571c29a760623e725792c", 0x58}, {&(0x7f0000002f00)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae187918e", 0x23}, {&(0x7f0000002f40)="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", 0x18e}, {&(0x7f0000003100)="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", 0xfe68}, {&(0x7f0000003240)="23c8f8e7bb8d0ba65b2d53e1b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff281c807953060a280f32e718b432d2031c73f6ca657519e04cf1b39497f7d785fff277a2a5612abf6c830c8b72579207ac0dda5", 0x83}, {&(0x7f0000003300)="ca3fcea77620b98213d60f78fe2e503ccb6662d189d191886f4fe8db857b07f574782f7bb888b8333220361011eec01501a2772a0392eaa06aca70b89b89f7ffd6ad7838ab27f246f9b78fa61a5ee5", 0x4f}], 0xb, 0x8) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000001840)={r3}, 0x8) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x3, 0xb, &(0x7f0000001940)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f00000019c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000004a80)={@dev={0xfe, 0x80, '\x00', 0x29}}, 0x14) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000048c0)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="2f00004c000000000000000082daf87bc4d4061bd9b1375218bd2938f9b2d87f42f76087f7300824c7c0f74c55dbb2e4043f41b3fc510335ced0b6388ff0258385bd3cdf91a532626f8cc03b1e37e946a0a58edc9142139f9f3b36", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000002880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000028c0)={r6, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000002940)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2b, 0x80801, 0x1) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)={0x10000009}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000034c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000004880)=ANY=[@ANYBLOB="180000000000000000000000000000d6bb58db009500000000000000"], &(0x7f00000035c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0x4}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004640)={r3, 0x20, &(0x7f0000004600)={&(0x7f0000000280)=""/31, 0x1f, 0x0, &(0x7f0000003600)=""/4096, 0x1000}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r11, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x6, 0x4, &(0x7f0000003440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34c05}]}, &(0x7f0000003480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000000000063113400000000008520002002000000850000002300000095000000000000009500a50500000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r12, 0x6}, 0x94) r13 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r13}}, 0x40) 3m52.063261959s ago: executing program 2 (id=3474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000380)=[{r1, 0x402}], 0x1, 0xeb) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000800)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r6, r8, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r6, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f00000003c0)={&(0x7f0000000380), 0x0, 0x20, 0xfb, 0xffff}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="6800000058b06a4fd9c6ee683eac29c0ed4091c5d253584862b616b515795005f8fd30f5e2bd895820c61bb2a7c5d7896c80ee100d3d8a00703b99b362934e4a3bceb0a297171b8ed184251e1025c1a44306d730a3ecd0a7629c97e190c06412a366b85cd2b804ad9a6048a0d8bfcfff6b99ece470843db56cc798e77ff3ac45b26355e3353a775fb7", @ANYRES16=r9, @ANYBLOB="0100ffffffff00000000010000000000000007410000004c00180000000575647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000880) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000280)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40}, @exit], &(0x7f00000002c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001180)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff42, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f0000000b40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000200", @ANYRES16=r11, @ANYBLOB="000326bd7000fedbdf250200000005000600400000000c0016000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) 3m51.222143591s ago: executing program 2 (id=3479): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xe, 0x20000000, &(0x7f0000000600)={0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3m50.027587148s ago: executing program 2 (id=3484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x11, 0x64, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1fd, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0xe0, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'wlan1\x00', {0x11, 0x7fffffff, 0x91, 0x6, 0x2f800000, 0x80000000, 0x6, 0x60, 0x80}, {0x7ff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x418) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x11, 0x64, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1fd, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0xe0, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'wlan1\x00', {0x11, 0x7fffffff, 0x91, 0x6, 0x2f800000, 0x80000000, 0x6, 0x60, 0x80}, {0x7ff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x418) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40030000000b010300000000000000000200000311000100403a28272c26282d2d3a402100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d400000009060300000000003ee4d9e70000000000000001240007800140ac1414aa0c000280080001400000000090000880100007800900f5eabdd7a4edc0120073797a31000000000c000780000008400000000c100007800c001b40000000000000001b0c000780060004404e220000100007800c00194000000000000003ff100007800900120073797a31000000001c00078018000280986ef4979f4427cd047b84194e1588f014000240fc0200000000000000000000000000011800078014c9170073797a5f74756e0000000000000000000900020073797a31f5658b42ac84eec52b83e8c4225061a529a54b8afcc25c2790420f924d2f9ea4debae2cfd16222aac92e8767ac30fbff8ea25afd9d39cafa23375ee3f942960efececa6d3a9aa212781d9992b8c775a6281c921a2399b98509c3ac2a52b73b3e08859e47176390326d38291ba6f82a8e7d859c45eed271c8cc8bb9c2c1b50060aa1ba6c6bb8953da57bc016f05067a0d185b61a2abebcdbf0f3dae628f2df25b3b6cfd4b88ade76122271f564d3b2621d6"], 0xd4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000081) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000081) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x24, r3, 0x1, 0x78bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x24, r3, 0x1, 0x78bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, 0x0, 0x80) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x40) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000004001a80140003006970766c616e30000000000000000000e90be920fc60da2a168fb3e2d6be6d273bf568820425fc1910150ea28d80ce19b28325d9ba10d2c7c88b4481a0bd4f53060547800c9712c34e428dc50973732c27fb2f10027229d0196ea69f1e7272f10e7ab6ed6da327f0f0262ae85f3f26c4fb614bcde09062c11ed1e75d493f61e6b4d364a4d1ea4bad0a0960b256bc647f0812d75bf90c03402019190b63365d3ca6f10c18e2143818756130f1a0d8adb9c8"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3m48.673730481s ago: executing program 2 (id=3489): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000580)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x800000000000005c}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000400)) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) unshare(0x2020c00) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000020900020073797a30010000000900010073797a30000000002c0003800800014000000000180003801400010076657468305f766c616e000000000000080002400000000414000000110001"], 0x80}}, 0x20048000) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) close(0x3) 3m47.914342434s ago: executing program 2 (id=3491): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000b00)={0x2, @in6={{0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfd}}, 0x5}, &(0x7f0000000bc0)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)='?', 0x1}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async, rerun: 64) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000a00)="94", 0x1) (async) tee(r4, r6, 0x1, 0x100000000000000) (async) write(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000008c0)={r2, &(0x7f0000000780)='\x00', 0x404000, &(0x7f00000007c0)={@align=0x3, {0x7, 0x33, 0xfff, 0xfffffffffffffff9}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x0, &(0x7f0000000780), &(0x7f0000000800)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000580)={{r2, &(0x7f0000000140)=')\x00', 0x0, &(0x7f00000001c0)={@align=0x5, {0xc95, 0x8, 0xf, 0x5}}, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x744}, {[0x200, 0x7a0, 0x4, 0x4]}, 0x7, 0x0, &(0x7f0000000540)}) (rerun: 64) ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000000600)={0x50, "0d5b7f7aa9cf153c1f7828000552be96d11301c19611546347a41ba93e3c969bd4d5dd3f47845b1361d3707d200fd5a4eb14d0c9afbf604c35d9e1f8a7facfcc6bc28e58056e372d856f403ababa1465bd1ed4978e9495032033c1a10fc0d278b0b8910de92ff8edcfdadfcd7c4711c74031bbbcc639914b47e2d001166688d9"}) (async, rerun: 64) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000540)) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) write$cgroup_freezer_state(r8, &(0x7f00000006c0)='THAWED\x00', 0x7) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x44000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRESHEX=r1, @ANYBLOB="14000280060001002800000006"], 0x2c}}, 0x0) (async) r11 = socket$kcm(0x10, 0x2, 0x0) (async) r12 = socket(0x1d, 0x2, 0x6) unshare(0x22020400) poll(&(0x7f0000000700)=[{r12, 0x2120}], 0x1, 0xda5) (async, rerun: 64) sendmsg$inet(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="1800000072006bcd9e3fe3dc6e0800000709000013000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0x1c, 0xe, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xaf, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m32.820008112s ago: executing program 32 (id=3491): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000b00)={0x2, @in6={{0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfd}}, 0x5}, &(0x7f0000000bc0)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)='?', 0x1}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async, rerun: 64) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000a00)="94", 0x1) (async) tee(r4, r6, 0x1, 0x100000000000000) (async) write(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000008c0)={r2, &(0x7f0000000780)='\x00', 0x404000, &(0x7f00000007c0)={@align=0x3, {0x7, 0x33, 0xfff, 0xfffffffffffffff9}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x0, &(0x7f0000000780), &(0x7f0000000800)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000580)={{r2, &(0x7f0000000140)=')\x00', 0x0, &(0x7f00000001c0)={@align=0x5, {0xc95, 0x8, 0xf, 0x5}}, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x744}, {[0x200, 0x7a0, 0x4, 0x4]}, 0x7, 0x0, &(0x7f0000000540)}) (rerun: 64) ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000000600)={0x50, "0d5b7f7aa9cf153c1f7828000552be96d11301c19611546347a41ba93e3c969bd4d5dd3f47845b1361d3707d200fd5a4eb14d0c9afbf604c35d9e1f8a7facfcc6bc28e58056e372d856f403ababa1465bd1ed4978e9495032033c1a10fc0d278b0b8910de92ff8edcfdadfcd7c4711c74031bbbcc639914b47e2d001166688d9"}) (async, rerun: 64) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000540)) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) write$cgroup_freezer_state(r8, &(0x7f00000006c0)='THAWED\x00', 0x7) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x44000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRESHEX=r1, @ANYBLOB="14000280060001002800000006"], 0x2c}}, 0x0) (async) r11 = socket$kcm(0x10, 0x2, 0x0) (async) r12 = socket(0x1d, 0x2, 0x6) unshare(0x22020400) poll(&(0x7f0000000700)=[{r12, 0x2120}], 0x1, 0xda5) (async, rerun: 64) sendmsg$inet(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="1800000072006bcd9e3fe3dc6e0800000709000013000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0x1c, 0xe, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xaf, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m27.957439432s ago: executing program 5 (id=3755): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@arena={0x21, 0x0, 0x0, 0x32, 0x60000, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f00000002c0)=@tcp6=r4}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000380)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x40004}}, 0x10) bind$tipc(r7, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000480)={0x42}, 0x10) bind$tipc(r6, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = socket$packet(0x11, 0x3, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000680)=r11, 0x4) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x20}}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) close(r6) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) shutdown(r4, 0x1) 2m26.975204884s ago: executing program 5 (id=3757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000840)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f00000008c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000980)="e0b9547ed387dbe9005bec6886dd", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m26.318766231s ago: executing program 5 (id=3759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x8, &(0x7f00000001c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES8=r3, @ANYRESHEX=r1, @ANYRES16, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2m25.55025289s ago: executing program 5 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8011) (async) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20008801) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004041}, 0x4004) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000580)=0x1, 0x4) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x3, 0x8000, {{0x13, 0x4, 0x3, 0x7, 0x4c, 0x66, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback, {[@end, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x5, 0x7, "dff9f25b4e"}, {0x0, 0x10, "6d82bf980d88acfaf6eccfa923d8"}, {0x2, 0x12, "24aced703bb7006c135a45c1dfb05a35"}, {0x7, 0x5, "e5f7fd"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x18084200}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r8, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async) read(0xffffffffffffffff, &(0x7f0000000940)=""/202, 0xca) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000bc0)={{r7, &(0x7f0000000a40)='veth0_virt_wifi\x00', 0x4200, &(0x7f0000000a80)={@_ha_fsid={[0x6, 0x8148]}, {0x0, 0xfc, 0x3ff, 0xde5}}, 0x8, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0xfffffff3}, {[0x0, 0x6345, 0x101, 0x9f1]}, 0x7, 0x4e, &(0x7f0000000b40)=""/78}) sendmsg$nl_route(r12, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@ipv6_getaddr={0x34, 0x16, 0x300, 0x70bd2a, 0x25dfdbfe, {0xa, 0xb0, 0x0, 0xc8, r9}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa4ea}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x4004041) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000d40)=0x4200, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000d80)={'gre0\x00', r11, 0x8, 0x10, 0x1000, 0x6, {{0x1f, 0x4, 0x0, 0x10, 0x7c, 0x65, 0x0, 0x8, 0x4, 0x0, @broadcast, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0xb1, 0x3, 0x2, [{@remote, 0x9}, {@local, 0xffffffff}]}, @cipso={0x86, 0x53, 0x3, [{0x6, 0x12, "2d8bd0bb77f2fcac3feda7247cc2e323"}, {0x0, 0x8, "d766d1bfa046"}, {0x6, 0x8, "e9e54d47210f"}, {0x0, 0x3, "ac"}, {0x0, 0xb, "fe110bcb9c9a738374"}, {0x0, 0xd, "d7175a33b938d977a2dbe2"}, {0x6, 0x10, "fc258263208a8cfa331f26242dab"}]}]}}}}}) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r13, 0xc0385868, &(0x7f0000001000)={r3, &(0x7f0000000f00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, &(0x7f0000000f40)={@_ha_fsid={[0x1, 0x80000001]}, {0x7, 0x0, 0x3, 0x7}}, 0x5, &(0x7f0000000f80)={@_ha_fsid}, &(0x7f0000000fc0)=0x10000}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001040)='wlan1\x00', 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x32}, @void, @val={0xc, 0x99, {0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000001180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000001580)={"5af43e1b9822af200eb68d04527c0989", r14, r15, {0x41e4, 0x1000}, {0xec03, 0x1}, 0x78e, [0x1, 0xa, 0xffffffff, 0x1, 0x8, 0x6, 0x0, 0x1, 0x7, 0x4, 0xa5e, 0x9, 0xfffffffffffffffc, 0xe, 0x7, 0x4]}) 2m24.954039153s ago: executing program 5 (id=3765): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) 2m24.394366889s ago: executing program 5 (id=3768): socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000004280)=0x3fa, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000880)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34044840) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, 0x0) bind$inet6(r0, &(0x7f00000042c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c010000130001010000000000000000fe880000000000000000000000000101640101020000000000000000000000004e20000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000a000000000000000000000000060000000000000003000000000000000500000000000000080000000000000000000000000000000100000000000000000000000000000000010000000000000800000000000000000000000000000084000500ff010000000000000000000000000001000004d5320000000a000000fc0000000000000000000000000000010000000002024800040000000080000005000000fe880000000000000000000000000001000004d42b0000000a00d5fadbcbfe8ad549000000000000000000000006000004020300000000000200000006000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003dc0)={0x11, 0x14, &(0x7f0000003e80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000003f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003f80)={r9}, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002900010027bd7000fddbdf0406000000"], 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000004000)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x30000009, 0xa5f, 0xfff}, @remote, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000280)={0x0, 0x4d, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010040000000000000000700000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a030000000000000000000100000a0900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100fa000000080002400000000008000140000000000900010073797a30"], 0xd4}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022bbd7000fd8cdf4627bedbdf2502000000240001800800050000000000060004004e2100000002000000060004004e220000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 2m8.768951328s ago: executing program 33 (id=3768): socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000004280)=0x3fa, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000880)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34044840) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, 0x0) bind$inet6(r0, &(0x7f00000042c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c010000130001010000000000000000fe880000000000000000000000000101640101020000000000000000000000004e20000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000a000000000000000000000000060000000000000003000000000000000500000000000000080000000000000000000000000000000100000000000000000000000000000000010000000000000800000000000000000000000000000084000500ff010000000000000000000000000001000004d5320000000a000000fc0000000000000000000000000000010000000002024800040000000080000005000000fe880000000000000000000000000001000004d42b0000000a00d5fadbcbfe8ad549000000000000000000000006000004020300000000000200000006000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003dc0)={0x11, 0x14, &(0x7f0000003e80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000003f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003f80)={r9}, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002900010027bd7000fddbdf0406000000"], 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000004000)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x30000009, 0xa5f, 0xfff}, @remote, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000280)={0x0, 0x4d, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010040000000000000000700000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a030000000000000000000100000a0900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100fa000000080002400000000008000140000000000900010073797a30"], 0xd4}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022bbd7000fd8cdf4627bedbdf2502000000240001800800050000000000060004004e2100000002000000060004004e220000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 11.906389857s ago: executing program 4 (id=4159): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000cd8a58c5dfae56302b01c7539e6260fc051b484896acb0ef2d2d0b3b0a0ac1079153271494b690f426fbdf0c9f03e556fe9adbd3edf00ad6c76702ae5ff2d9da40028ab0965db540e706bfa7a873fce71fffc58b65ea0ed16595ad3aa763bdc5c815aabe88c555dd90cd3859a7d2676363e55062053b75f600e53999ca0de255b48cfa5d2ec345301a"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x40000000) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000540)=0x30a708, 0x4) (async) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000540)=0x30a708, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001840), 0x3b, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r5, @ANYBLOB="312288bd7000fcffffff190001000c0001800800e1ff02000000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x14, r7, 0x37}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) (async) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x28c0aa9df6c5754f}, 0x10) 11.860510029s ago: executing program 3 (id=4161): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x9, 0xf, 0x0, 0x0, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bb3, 0xa56fc80, {0x6, 0xff, 0xf, 0x9, 0x0, 0x9, 0x0, @in=@broadcast, @in6=@mcast2}}, @sadb_sa={0x2, 0x1, 0x8004d5, 0x0, 0x1, 0x4, 0x1, 0xc0000001}, @sadb_address={0x3, 0x5, 0x3c, 0x20, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}]}, 0x78}}, 0x4000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000280), 0x4) (async) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000300)) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@arp={@loopback, @remote, 0xffffff00, 0x0, 0x0, 0x2b, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffe, 0xfffc, 0x0, 0x1, 'veth1_vlan\x00', 'erspan0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x1}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xffffffff, 0xf, 0x5, {@empty, {[0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xca63d3e56e13e625]}}, 0x0, 0x1, 0x4, 0xe4, 0x1, 0xfd, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0x1fe}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x42}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640), 0x0, 0x55, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', r6, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000940)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r7, 0x0, 0xe, 0x0, &(0x7f0000000a00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0xa, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @enum64={0x9, 0x2, 0x0, 0x13, 0x1, 0x2, [{0xb, 0x7, 0x1}, {0x6, 0x7, 0x8}]}, @datasec={0xc, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x6, 0x6}, {0x1, 0x0, 0x4}], "9d"}]}, {0x0, [0x30, 0x2e, 0x30, 0x0, 0x5f, 0x0, 0x2e, 0x30]}}, &(0x7f0000000b00)=""/47, 0x7a, 0x2f, 0x0, 0x9}, 0x28) (async) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000002c0)=0x200, 0x4) close(0x4) r8 = accept(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$team(&(0x7f0000000100), r8) 10.608805414s ago: executing program 3 (id=4165): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="03000000060080000401000f4a"], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x4, 0x8, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x140a, 0x109, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000fa03200000080000000d0f000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000feffffff00"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xd, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001080)={r10}, 0xc) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000cc0)={0x28, r6, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10001) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000640)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7400fedbdf255100000008000300", @ANYRES32=r8, @ANYBLOB="0c009900000000002b00008005008a00030000000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x54}, 0x1, 0x0, 0x0, 0x4049801}, 0x4044880) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000bc0)={{0x20, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x91b2868}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7300000000003900000008000300", @ANYRES32=r13, @ANYBLOB="28005a802400008004000200050001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYRESOCT=r13], 0xdc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18010000000000000000000001000000852000005844030095"], &(0x7f0000000b80)='GPL\x00', 0x7cb1, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 9.686753892s ago: executing program 3 (id=4167): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000880)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000000c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0x81}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x1, 0x4000040) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={@remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3, 0xfff, 0x200, 0x400, 0x6, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000cf000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901000010000095000000000000002d90000000000000bf91000000000000b702000003000000850000002a040000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 9.030612047s ago: executing program 4 (id=4169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000380)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x4, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmmsg$sock(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff5", 0xca}, {&(0x7f0000000a00)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394", 0x42}], 0x2}}], 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000bbbbbbbbbba6bbbbbbbbbbbb88a84d00810066000800d66abc325898f0bb14119078ac1414297f0000013eda35701bfb0bc2"], 0x36) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x1}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f0301000000feff9500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 8.160499537s ago: executing program 3 (id=4174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x40241, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000010c0)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001100)={@ipv4={'\x00', '\xff\xff', @remote}, 0x8000000, 0x2, 0x3, 0x2, 0xc1e2, 0x8}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001040)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff02000000000000000000000000000112"], 0xfdef) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000640)={r1, &(0x7f0000000100)='/\x00', 0x4080c0, &(0x7f0000000580)={@_ha_fsid={[0x8, 0x1ff]}, {0x9, 0xc, 0x1, 0xffffffffbaa0f0b1}}, 0x6, &(0x7f00000005c0), &(0x7f0000000600)=0x5f}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000f40)={{0xffffffffffffffff, &(0x7f0000000780)='{+&):@,\x00', 0x2100, &(0x7f00000007c0)={@_ha_fsid={[0xa9a, 0x7f]}, {0xd7, 0x3, 0x6, 0xb}}, 0x0, &(0x7f0000000800), &(0x7f0000000840)=0x9}, 0x7, &(0x7f0000000e40)=[{0x3, 0x5, &(0x7f0000000880)='@+,/,\x91:\x00', &(0x7f00000008c0)="85817b84cc9bdf00323a68fe0dcbbd6c1f0fbf61448bed31df90bdfeb486d19604165d8c322f8954f64ace4a5a3320ab8cd5c2d9ecfa7d8ef467fbd996b2d1971ed52d8dc7f32cd70b6dc21faee84feaa62f684f6ab8d962c2a5d07d08313ac6e733dc2af2f5e400678f0d42663d9ffef2183982f55b06714b14fd214106c1ae579a96af40728660bca71d838eab0dabda333e3f8db484d0a71148114093305b0c9041dea764ae3d3fb74c337fa2ab", 0xaf, 0x1a}, {0x1, 0x1, &(0x7f0000000980)=')(]+^\x00', &(0x7f00000009c0)="a464b137df8fc762f65b2781bc961f204b5d6ea8442b01c53ce9ab10cec0b7f2c968e60dc2ef1a8a0851a31a9ee6b650feb7", 0x32, 0x18}, {0x1, 0x97, &(0x7f0000000a00)='/\x00', &(0x7f0000000a40)="f2750911", 0x4, 0x28}, {0x1, 0xddaf, &(0x7f0000000a80)='!]\x00', &(0x7f0000000ac0)="440b3b9f9179aab790fd79ca8b98b3d576aea5bf43939e31a8920e4ae1afc987b87e351de53f61e4322ead99a13c1a1a0ebb", 0x32, 0x18}, {0x1, 0x1, &(0x7f0000000b00)='GPL\x00', &(0x7f0000000b40)="1a5bd94b795dfdb434ec55a47bc4e704f6f610deaefe7ab6628635be3a9be349edf9eedf654ffc2da348bdbf79be2fb35fbc97df7f56c2800ad54939815192c47b6c1fc08a9e78939edbc803a684d0134f39a10f596c373749", 0x59, 0xa}, {0x2, 0x1, &(0x7f0000000bc0)='/\x00', &(0x7f0000000c00)="2529a86484cae3e5eb4bcf8bfd5673e2be431d0785553b41f91a683a6c4d64b0d18520e3b4932bf21bb9bca0a6fc8a55142432a6458dd332b33e32163c950f4c2da1511510df777875b7c587c06c2c59abeaca6677d856551ff4866e0604cf81d01139500dff6880608bcedcc14f15c8b6db7dfdf8f4d45cc5a6e37dc02fa814e9d2bf8212fb9ba51fbf490047829c86b52b2e887800147103b9d438f4fdaa61bbdc00aac8828f377b1b2032ce6ebacb055e851d21153c19b4559f6e4030f6eaba390eec00a755bddcfbe2536eb931b5141b64b5620e01d02ce50988790f061695227d67d2ca32a9efaa6c0ae24de97f", 0xf0}, {0x2, 0x10, &(0x7f0000000d00)='\x00', &(0x7f0000000d40)="eb7ea17ec01d202455d6e50e0827820f5b5ee1d507a4c53bdaf4f94e68f1e782b9bc35ca095c10c461ee09fad0f1d17d525dd856f4e0f5a54bb6ca4b0c07ed9b8d524fc24c3e4683ba5633f6027da008b07687d2ca5e81b801b62d83875f4f9d1bcb44a4211d16d4ec4cbdf439d504ae591f51087559019b6fc4b742d5e2c1a03c72ce4ae7e3b0b008bdcad4c6083bfa146dc2cde92bfbe892c12d5316b2a5f91311b4e9e8b25e937c889bdb0a4deb4a8c784b16f0f9503d170dd09efe330c1fbe5d3057286f3ce11cd78bd542417173d5d42ff631afb59efcc8975176da75b6e184271475fc8a9b7a026820716f6ef7c5cf7f", 0xf3, 0x20}]}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000170a0a010800000000000000000200000908000f400000000110001180090001006861736800000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x200040c0) (async) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000170a0a010800000000000000000200000908000f400000000110001180090001006861736800000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x200040c0) 7.567773723s ago: executing program 1 (id=4176): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4044015}, 0x54) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x1098e000) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x19, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x424401, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) sendto$inet(r5, &(0x7f0000000440)='zd', 0x2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) 7.434468586s ago: executing program 4 (id=4177): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000001580)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000016c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000001780)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x81, @loopback, 0xfffffe01}}}, 0x108) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f0000000100)={'wlan0\x00', 0x1}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="5f69fcffecff0efb451a7900", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009470c0ff10000000066ef61f03000000186900000300000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008100000085000000060000001839000001000000000000000000000018400000ffffffff0000000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x4f27, 0x80, &(0x7f0000000440)=""/128, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x10, 0x4, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0xc38, 0xfffffd37, &(0x7f0000000b40)=""/181, 0x0, 0x0, '\x00', 0x0, @sk_msg, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000f00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x366, 0x10, &(0x7f0000001040), 0x1dd}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000010c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) sendmsg$inet(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r13}, &(0x7f0000001200), &(0x7f0000001240)=r9}, 0x20) sendmsg$inet(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)=""/229, 0xec1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r7, 0x0, 0xcb, 0xfb, &(0x7f0000000600)="6fecff198ce9fa373c2e34c41310c3ca1d2fb7016711477503e9c7220675885b3d4ffd9f2343e913b758d4e8ea256998d0471ae9926060f81e412df5b14abe623918a467255caa77425e523824ac8a573a51d00591725284f826b857c70998828f803ef60cac763005ea0b6df29b871182cf3dcaf4508837f05daf2c5db8b770a7de983e4c695fa9a0af158e4fdb37d9c3835155a237bf381d82b99cf1aa4a54684f8137b858fa815e5e922cd1d799c6f1967d02a00cedfd192321246b5398819f2e52096f7d37f3aeffca", &(0x7f0000000700)=""/251, 0x10, 0x0, 0xdf, 0x77, &(0x7f0000000800)="731750823fb217573944c5c844c4bccd1bae29a318d32d02209436bfdcc14bd55357a81e43b46191ebb572033b5bcfa1fb08f8d9b78545bb68825b517b8d57a4d41bf5f016bc4654bcb95490cfc78f32c7ba060dfa663f5c0a054956e480ae5c76b2ff3b2bc57a48ec5b5d5a3bc7291ca338aad582689078b7416b0184f7cfd5ebe853fc8ff25fb8ea1c54521d775251ffe9017536428c25009b71b4155341403cfbbd0df5f9db4f6bb8d16a7b9bd991e2541d133289d2a1f6b4dea2f3965f1a7d0c07525f67fb8589f976d2c8169c12ada211fe2c7b76d7d125807d675dd1", &(0x7f0000000900)="840d19d4668cd1ead386c551d57d143777131b28a5900823c91379f911c462429ef769bb0cfcf513bae90c64840357496193f24e419cdb1afa1690b9d4c5d25fc61a38a3e1a907be7321a31e51852c67b07d687ab35001f1b1ea0874d906980befdbc43732b862adeddb48c2c8b3c6cc038bbd4eaff8ca", 0x1, 0x0, 0x1}, 0x50) ioctl(r5, 0x8b01, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000ffff25bd7000fbdbdf2580000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000280012800c0001006d6163766c616e0018000280080003000300000008000100100000000400058008000500", @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 7.069113221s ago: executing program 6 (id=4178): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x17, 0x301, 0x70bd2b, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x6, 0x10}, 0x20) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x4, 0x8}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0xb, 0x100a, &(0x7f00000005c0)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0xc, &(0x7f0000001b80)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000001c00)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001c40)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff164000000000000000000011400"], 0xa4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000001dc0)=[{&(0x7f0000001e00)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a00010005000000000000720800", 0x32}], 0x1) 6.5026208s ago: executing program 4 (id=4180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x80001, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x11, 0x3, &(0x7f00000027c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8080ffd0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000002800)='GPL\x00', 0x2, 0xde, &(0x7f0000002840)=""/222, 0x41100, 0x8}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000002940)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x310) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000002b40)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='memory.numa_stat\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000200)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000240)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000200)={&(0x7f0000000380)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="6717020000002c", 0x7}, {&(0x7f0000000440)="9e91d91a92dc7c8f2bc24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df50fa", 0x23}], 0x2}, 0x24048b88) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) recvfrom(r0, &(0x7f00000005c0)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000001640)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000001700)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f00000017c0)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000001880)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000018c0)="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", 0xdf3}], 0x5) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000026c0)=0xffff1884, 0x4) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000020601010000000000000000050000010c00078008000800000000890500010006000000050005000200000005000400020000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) 6.076238285s ago: executing program 1 (id=4181): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x67, 0x2, {{'cbc(serpent)\x00'}, 0xf8, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b270566"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 5.566117692s ago: executing program 0 (id=4182): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, 0x0, 0x20048081) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@newtaction={0x100, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0xec, 0x1, [@m_connmark={0xe8, 0x7, 0x0, 0x0, {{0xd}, {0x4}, {0xb7, 0x6, "0463cc05cbeb0a343f2b1a0bf7c9ea19cb2d0aee8057abacd395642cfb2d24364897f4b0f0a1b50a6f8a0f04fde622174d7afb2416906b964b800951df24905326f17d3534580d2fe1dab9b7e0b89650af11e337b16529f777afb8fa711396ed66593000b8830e3822dde727a773878d5c05d1ebce95f02ec1dce31f266815a3d99a6d16cff6d589c86bf4335fdd1c4b517e75b7f1e3f4e0ee804b1bec83935d5f605d9126ab76259b36aa7987f2ab98b7fc60"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}]}, 0x100}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000046d04ecea73797a300000000028000000030a010400000000000000000200000a0900010073797a300000000008000b4000000004140000001100010000000000000000000200000a"], 0x70}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000580)={0x0, 0x10, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000010700000000000000000000070000000900010073797a30000700000c00024000000000000000070c00064000000000000001b1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000990) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) unshare(0x8040480) (async) preadv(r4, 0x0, 0x0, 0x2, 0x7ff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000010000000ff00000000000000", @ANYRES32, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES16=r2], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f0000000200)="8ed5bbaa7cd80b0bda116e214dc9e19cc809667507bc24efa3aa72d7df49889539c7994ab3faf22b9131407b99ab5387d20c23988e05a57bae83edec7a5b624d0ef5ab2fa535a48cac8e9407f67960879bde1bf4c6f8631d93e11fb93a135f326af9cf54a98d9989cfbd1fb6b5baf028cdfe6bcb75eab04b693918de37b0af92909f4c311200"/143, &(0x7f0000000d80)=""/169}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000a00)={'wg0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000a40)={0x0, 0xe0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8], 0x22c}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f00000008c0)=0x94b, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2e86dd6100272400383aff00000000000000070000000000000000ff0200000000000000000000000000010200907800000500663a794500023a01fc020000000000000000000000000001fc02000000000000000000000000000080fa0ee2e0f62506066eeadd6f81c94229335287b7a081"], 0x0) (async) recvmmsg(r9, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 5.266951857s ago: executing program 1 (id=4183): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f00000000c0)=0x13, 0x4) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x2, 0x0) 4.644439494s ago: executing program 1 (id=4184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bond0\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) (async) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000140)=0x3) (async) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) (async) write$cgroup_devices(r3, 0x0, 0x6) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) write$6lowpan_enable(r3, &(0x7f0000000080)='0', 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, r1}, 0x14) 4.632795731s ago: executing program 0 (id=4185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x40, 0xe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'wg0\x00', &(0x7f0000000140)=@ethtool_rx_ntuple={0x35, {0xe, @esp_ip4_spec={@rand_addr=0x64010101, @broadcast, 0x7925, 0xe}, @sctp_ip4_spec={@broadcast, @rand_addr=0x64010101, 0x4e20, 0x4e22, 0x45}, 0x7, 0x3022, 0x400, 0xa, 0xfffffffffffffffe}}}) socket(0x10, 0x3, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x43) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/9, 0x9, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0x8, 0xc}, {0x6, 0xff}]}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x6, [{0x10, 0x4, 0x3}, {0x0, 0x5, 0x8}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x30, 0x61, 0x0, 0x30, 0x0]}}, &(0x7f00000019c0)=""/162, 0x6b, 0xa2, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r6, 0x4, 0x2, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xf, 0x3}, {0x7}]}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x9}, {0xf, 0x2}]}, @enum={0x9, 0x6, 0x0, 0x6, 0x4, [{0xc, 0x7}, {0x8}, {0x9, 0x2}, {0x1, 0x6}, {0x0, 0x428}, {0x9, 0xff}]}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x1, [{0x5, 0x3, 0x203}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x5}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0xa}]}}, &(0x7f0000000380)=""/97, 0xce, 0x61, 0x0, 0x6, 0x10000, @value=r7}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.374342418s ago: executing program 0 (id=4186): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x41, 0x18}}}, 0x10, 0x0}, 0x20001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x53, 0x20000003, 0x50, @empty, @mcast2={0xff, 0x5}, 0x80, 0x40, 0xe3e1, 0xcff}}) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9ffffc}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x9, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x27}, 0x94) 3.127391273s ago: executing program 6 (id=4187): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x17, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380)) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000200)="112233", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 2.991814692s ago: executing program 0 (id=4188): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)="20352ea2", 0x4}], 0x2}}], 0x1, 0x4040000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x101, 0xfffffffe, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x40, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0xa6, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x5, 0x1, 0x1, 0x5, 0x2, 0x80000001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000600)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000640)={0x4, &(0x7f0000000680)=[{0x3d, 0x2, 0x80}, {0x9, 0xd, 0xd, 0x1}, {0x7, 0xa4, 0xfa, 0x6}, {0x8007, 0x1, 0x7, 0x8}]}) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0xe2e4e67761683fba}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x10000000) socket(0xa, 0x3, 0x87) (async) sendmmsg$unix(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)="20352ea2", 0x4}], 0x2}}], 0x1, 0x4040000) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x101, 0xfffffffe, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x40, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0xa6, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x5, 0x1, 0x1, 0x5, 0x2, 0x80000001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000600)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000640)={0x4, &(0x7f0000000680)=[{0x3d, 0x2, 0x80}, {0x9, 0xd, 0xd, 0x1}, {0x7, 0xa4, 0xfa, 0x6}, {0x8007, 0x1, 0x7, 0x8}]}) (async) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0xe2e4e67761683fba}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x10000000) (async) 2.806308261s ago: executing program 4 (id=4189): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair(0x2a, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004040) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030d2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8621020017820000400012800e0001006970366772657461700000002c000280140006000000000000000000000000000000000114000700ff"], 0x60}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035570970880) socket$kcm(0x29, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004040) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030d2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8621020017820000400012800e0001006970366772657461700000002c000280140006000000000000000000000000000000000114000700ff"], 0x60}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035570970880) (async) 1.518546919s ago: executing program 6 (id=4190): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'caif0\x00', 0x7f}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000080)='caif0\x00', 0x400000, &(0x7f00000000c0)={@_ha_fsid={[0x7, 0x8]}, {0x6, 0x7, 0xc, 0xc}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x189}, {[0xfffff801, 0xd46, 0x862, 0xb]}, 0x9, 0xb4, &(0x7f0000000180)=""/180}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000340)="b19c02f80d30004e6940f133c4da6d42073f754dc900eadb1cb675cf42d4549af3cca5d0849ba54976617a958181d5b96913607fb4b6d0d6be98978d63a0dd6820202c6be9ee96c1727536277e1e94cfa613cb2cf85e3a5bbc4cd716c70b862f1a004c19ddaacc9dd6e8b727bb5213c216070c1c3cfae32bbb6035d7ce27acda9b785a907cc9d71c14c609007e9f59f549193b3b639229c3210776cbed304925c4ecddc5ce65c44d27fb0e8ba3cfc76f8d0e96e7f4881438607604da81430cec1051fb7b9dcd467e81953af740ea443004e80850ecc70be919955192fa77be2d7c70", 0xe2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000640)={0x1, 0x2, 0x1000, 0xfe, &(0x7f0000000440)="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", 0xef, 0x0, &(0x7f0000000540)="8190ceaf689e96c18a3fc77dff2126bedbda98a0c263589a50de05ec2205e2d8cae71f2c6b6580a2febb2e83c926fe026b9df58ac86a4022f5ad97813949fdb5224631cf828c90326181ca9939eb47fd955b1d679360484e183713b359018e73787a2a47856882e0d1582aa4e3eb63af0e608b1248a79fe3bb99473eba04f5f872687e7e48ca34304bd29fe4dd3bce4ef2527cef396c029816cd38b775ff49bb686b360584f24def5a80a98ed2237c4aa3e9c2be05be1366546f2591215def61dc105f283ee8644e62faea4e2a1ca8d39b1a1972734bf9ac3cd567996d2db1fe7134ebfe2746b5e7e052ec8b8b7e7a"}) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r1) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000700)={@dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x40}, 0x1, "bb06145a8734dfb51ae4ce5069ec4c5aa2ba6984636d05df5f16b095848b060b", 0x80, 0x400, 0x9, 0x1}, 0x3c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000740)={r2, 0x2, 0x0, 0x38a}, &(0x7f0000000780)=0x18) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000007c0)={{0x2b, @local, 0x4e23, 0x3, 'ovf\x00', 0x2e, 0x8, 0xe}, {@private=0xa010102, 0x4e21, 0x3, 0x2, 0x6, 0x8}}, 0x44) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000840)={'veth1_to_batadv\x00', @multicast}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000880)={0x1, 0x2000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x6, 0x0, {{0x21, 0x4, 0x0, 0x3, 0x84, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xce, [@loopback, @remote, @remote]}, @lsrr={0x83, 0x23, 0xa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2, @local, @multicast1, @multicast1, @broadcast, @remote]}, @timestamp={0x44, 0x8, 0xa8, 0x0, 0x6, [0x2]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x1, 0x3, "9a"}, {0x6, 0x3, "10"}, {0x0, 0x4, "7492"}, {0x0, 0xd, "14f22248f0ddf26eb5a121"}, {0x2, 0xa, "7e06c8ff4c2d03a0"}, {0x0, 0x2}, {0x1, 0x4, "98cd"}, {0x7, 0x7, "19bca1509f"}]}]}}}}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={r3, @empty, @remote}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x9092baf3e610559d) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000b40)={@private1, @loopback}) close(r0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000b80)={0x1, 0x800, 0x9, 0x2, 0x1, 0x5, 0x8, 0x6}) getsockname$inet(r1, &(0x7f0000000c00)={0x2, 0x0, @private}, &(0x7f0000000c40)=0x10) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001680)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f0000000cc0)={0x964, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2}, [{{0x254, 0x1, {{0x1, 0x3c3}, 0x5, 0xa, 0x1ff, 0x6, 0x14, 'syz0\x00', "6b16a8cad69c4e86e6bbf9c6cbbdb087f9cd69d30c98be5019d507cbbb61b523", "406e4faaacd0972155fb9b5faf53472012fb5d2e78fbee6dcfa19f5d93715282", [{0x8, 0x7, {0x0, 0x80000000}}, {0x5d07, 0x7ff, {0x3, 0x9ea}}, {0x400, 0x3, {0x2, 0x7}}, {0x0, 0x7ff, {0x3}}, {0x3, 0x7f06, {0x2, 0x8c}}, {0x3, 0x0, {0x2, 0x40}}, {0x6, 0xbb, {0x3, 0x600}}, {0x4, 0x6, {0x1, 0xe16b}}, {0x6, 0x4, {0x3, 0x5}}, {0x0, 0x3, {0x1, 0x3ff}}, {0x0, 0x6, {0x3, 0x7f}}, {0x0, 0x10, {0x1, 0x40}}, {0x4, 0x2, {0x0, 0x9e}}, {0x6, 0x2, {0x0, 0xddc}}, {0x4, 0x40, {0x1}}, {0x0, 0x8, {0x2, 0x800}}, {0x7, 0xfff8, {0x0, 0x2}}, {0xff, 0x9, {0x0, 0x9}}, {0x8, 0x3ff, {0x0, 0x8}}, {0xef7, 0x2e6, {0x2, 0x80}}, {0x3ff, 0x8000, {0x0, 0x1}}, {0x0, 0x9, {0x2, 0x40}}, {0x1, 0x3, {0x3, 0x80}}, {0x4, 0xa, {0x1, 0x6}}, {0x1994, 0x5, {0x1, 0xffff8001}}, {0x9, 0x7b1c, {0x3, 0x7}}, {0x1000, 0x3, {0x1, 0x9}}, {0xf89a, 0x8d51, {0x2, 0x3}}, {0x4, 0x7, {0x0, 0xffffffcd}}, {0x4, 0x2, {0x2, 0x100}}, {0x0, 0x2, {0x1, 0x3}}, {0x0, 0x5, {0x1, 0x3}}, {0xfff8, 0x440, {0x0, 0x2}}, {0x0, 0xe, {0x2, 0xe1e9}}, {0x223f, 0x4, {0x3, 0x800}}, {0x3ff, 0x9, {0x2, 0x6}}, {0x40f0, 0xb, {0x0, 0x4}}, {0x7fff, 0x4, {0x3, 0x2}}, {0x3ff, 0x4, {0x1, 0x101}}, {0x3, 0x4, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x6f, 0x6, 0x9, 0xf, 0x11, 'syz1\x00', "c96f53826015ca54fcd3b25a16ff09174d80537320bcc075cabe193e603c404d", "d1f545d4d5858e6096ab449979a4785a133feef37238a79e66cea1c91f3f615b", [{0x12, 0x6, {0x3, 0x1000}}, {0x4, 0x9, {0x3, 0x5}}, {0x3, 0x5, {0x1, 0xcf44}}, {0x10, 0x5, {0x1, 0x2}}, {0x7e, 0x3, {0x5de28f91a3e52186}}, {0xfff9, 0x3, {0x2, 0x4}}, {0x0, 0x1, {0x1, 0x8}}, {0x6, 0x7, {0x0, 0xe7c}}, {0x9, 0x6ad, {0x0, 0x5}}, {0x0, 0x1, {0x0, 0x4}}, {0x5, 0x4, {0x3, 0x3}}, {0x0, 0xac6d, {0x2, 0x1}}, {0x4, 0xe05c, {0xdb6c590dc5b2bdc3, 0x9}}, {0xfff3, 0xff, {0x0, 0xa8}}, {0x1ff, 0x2, {0x3, 0x62bd5766}}, {0x4, 0x8, {0x2}}, {0x6, 0x7, {0x3, 0x1}}, {0x6, 0x8, {0x1, 0x7}}, {0x4, 0x8, {0x3}}, {0x8cc, 0x9, {0x1, 0x6}}, {0xde90, 0x9ce9, {0x2, 0x5}}, {0xe1c, 0x2326, {0x2}}, {0x1, 0x78cf, {0x1, 0x7}}, {0xb6, 0x5, {0x1, 0x4}}, {0xffff, 0x1, {0x1, 0x400}}, {0x4, 0x2, {0x3, 0x8}}, {0x7fff, 0x5, {0x2, 0x8}}, {0x2, 0xfff, {0x0, 0x1000}}, {0x6, 0x4, {0x0, 0x4}}, {0x7, 0x101, {0x1, 0x2}}, {0x53, 0xef, {0x2, 0x7}}, {0x907, 0x6, {0x2, 0x1}}, {0x7, 0x2, {0x1, 0x80000001}}, {0xc4, 0x401, {0x1}}, {0x4c3c, 0x1, {0x1, 0x2}}, {0xd5c5, 0x4, {0x1}}, {0x5, 0x9, {0x3, 0x6}}, {0x800, 0x4d, {0x3, 0x7ff}}, {0x7, 0x7fff, {0x1, 0x4}}, {0x5, 0x5, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x1, 0x7, 0x1, 0x3, 0xf, 'syz1\x00', "05835780c2d97cdd6e91a0dfdbca8d4c681de0531f36e4272419e785817307f7", "c0bcd2dc48c1f689fc9a7edfdd11cd5cf67adff69967b3969805cc99ac171488", [{0x2, 0x83ed, {0x0, 0x1}}, {0x9, 0x80}, {0x8, 0x1000, {0x3, 0x2}}, {0x81, 0x7, {0x0, 0x2}}, {0x6, 0x0, {0x0, 0x9}}, {0x1, 0x0, {0x3, 0x8}}, {0xffff, 0xd3, {0x3, 0x80}}, {0xfffc, 0x4369, {0x2, 0x7}}, {0x0, 0xcfd3, {0x0, 0xc7}}, {0x68b8, 0x3, {0x3, 0xffffffff}}, {0x7, 0x0, {0x3, 0x100}}, {0x8, 0x8ca6, {0x2, 0x3}}, {0x9, 0x8, {0x3, 0xd0}}, {0x6, 0x1000, {0x1, 0x10}}, {0x4, 0x5, {0x3, 0x4}}, {0x3485, 0x146e, {0x1, 0x1}}, {0x1, 0x1, {0x1, 0x7}}, {0x5, 0x8, {0x1, 0x1}}, {0x55c6, 0x1, {0x1}}, {0x3ff, 0x2, {0x2, 0xffff}}, {0x3, 0xac07, {0x2, 0x9}}, {0xede, 0x401, {0x3, 0x100}}, {0x0, 0x3, {0x2, 0x7}}, {0xf001, 0xfff9, {0x3, 0x2}}, {0x101, 0xff9b, {0x1, 0x3}}, {0xfef3, 0x7ff, {0x1, 0x4}}, {0x81, 0x2, {0x1, 0x6}}, {0x9d4, 0x9, {0x1, 0x4}}, {0xff, 0x6, {0x0, 0xc}}, {0x7ff, 0x2, {0x3, 0x2}}, {0x1000, 0x5, {0x1}}, {0x8, 0x0, {0x0, 0x5}}, {0x3, 0x82, {0x1, 0x6}}, {0x7, 0x7, {0x0, 0x6}}, {0x15, 0x19c, {0x0, 0x4}}, {0xd41, 0xfffc, {0x2, 0x3}}, {0x1b16, 0x5, {0x3, 0x4}}, {0x2, 0x8, {0x3, 0x7}}, {0x7, 0x40, {0x2, 0x9}}, {0x4, 0xbb3e, {0x3, 0x3a}}]}}}, {{0x254, 0x1, {{0x2, 0x1ff}, 0x80, 0xf2, 0x8, 0x80, 0x16, 'syz0\x00', "5ee9d578e8a8c1ac33e901440b229b512df07114e4979edb3d489d39dc242d60", "db1a2f9b71cbee6c74590ee3edb05a756470f67fc83f2af58dbfefee072a5091", [{0x6, 0x3, {0x1, 0x80000001}}, {0x4, 0x0, {0x0, 0x4}}, {0xff, 0x8001, {0x2, 0x9}}, {0x9, 0x1, {0x2, 0xfc}}, {0x4, 0x9, {0x2, 0x6}}, {0x4, 0x40, {0x0, 0x4}}, {0x8001, 0x0, {0x2, 0xffff}}, {0x9, 0x42ea, {0x0, 0x1}}, {0x3, 0x8, {0x0, 0x7}}, {0x3, 0x8ca0, {0x1, 0x1}}, {0x8, 0x5, {0x2, 0x66ba5808}}, {0x1, 0xd, {0x3, 0x7}}, {0x43f, 0x0, {0x1, 0xffff1fbd}}, {0xfffe, 0x9, {0x3, 0x8}}, {0x6, 0x7ff, {0x0, 0x80000000}}, {0x200, 0x4, {0x0, 0x392e}}, {0x8, 0xfbc8, {0x1}}, {0x3, 0x2, {0x0, 0x8}}, {0x0, 0x6, {0x1, 0x3}}, {0x3b, 0xa, {0x2, 0xb090}}, {0x9, 0xbcc, {0x1, 0x9}}, {0x28, 0x5, {0x0, 0x1}}, {0x1ff, 0x32, {0x0, 0x3}}, {0xea37, 0x5, {0x1, 0x1}}, {0x9, 0x0, {0x2, 0x3}}, {0x400, 0x9, {0x2, 0x9}}, {0xfc, 0x0, {0x2, 0x10}}, {0x2, 0x6, {0x3, 0x1}}, {0x2, 0x40, {0x2, 0x64a0}}, {0xfffd, 0xfffd, {0x1, 0x2}}, {0x5, 0x3, {0x2, 0x9}}, {0x2, 0xff1, {0x2, 0xbb4}}, {0x40, 0xffff}, {0xb4eb, 0xff, {0x3, 0x8}}, {0x3678, 0xbb3, {0x2, 0xfff}}, {0x0, 0x6, {0x0, 0xf23b}}, {0x2, 0x6, {0x3, 0x800}}, {0x5, 0x1, {0x0, 0x1539331b}}, {0x4, 0x9, {0x0, 0x3000000}}, {0x2, 0x5, {0x3, 0xd}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000016c0)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f00000017c0)=0xe8) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001940)={'filter\x00', 0x0, 0x4, 0xba, [0x2, 0x7, 0x0, 0x4, 0x6, 0x9], 0x5, &(0x7f0000001800)=[{}, {}, {}, {}, {}], &(0x7f0000001880)=""/186}, &(0x7f00000019c0)=0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000001a00)={'syztnl1\x00', r6, 0x10, 0x20, 0x5, 0x0, {{0x15, 0x4, 0x1, 0x3, 0x54, 0x67, 0x0, 0xe, 0x29, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x7, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x89, 0x6, "529e08c8"}, @cipso={0x86, 0x21, 0x2, [{0x7, 0x7, "44d81d0bd5"}, {0x1, 0x9, "07279a8f1de215"}, {0xed5ade11fb385d44, 0x9, "0cce43312368f3"}, {0x1, 0x2}]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0x2}, {0x0, 0x8, "ad6307d68302"}]}]}}}}}) sendto$inet(r5, &(0x7f0000001ac0)="aff45a85624095e2", 0x8, 0x40, 0x0, 0x0) close(r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) syz_open_procfs$namespace(0x0, &(0x7f0000001c40)='ns/cgroup\x00') 1.320679874s ago: executing program 3 (id=4191): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) close(0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x40080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xaa, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x74, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x2f, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @mcast2}]}], {{}, {}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x0, 0x5}}}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x29, "5c83276f6ca66225154cec95f90000010000000000335b021f5500fd2adf237b320000000000000000"}}) 1.162495218s ago: executing program 1 (id=4192): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="fb90", 0x2}], 0x1, 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f00000003c0)=0x80000000, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000206010800000000000000000500000414000780080011400000005205c92b2179f1231fae07001400dd00000005000100060000000e9505000a00000012794a2c3ddcbaf085dc55722a"], 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex=r3, 0x5, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) (async) pipe(&(0x7f00000000c0)) (async) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="fb90", 0x2}], 0x1, 0x1) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f00000003c0)=0x80000000, 0x80) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000206010800000000000000000500000414000780080011400000005205c92b2179f1231fae07001400dd00000005000100060000000e9505000a00000012794a2c3ddcbaf085dc55722a"], 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex=r3, 0x5, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) 1.075213332s ago: executing program 0 (id=4193): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@exit]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x20, 0x40, 0x3, 0x6, {{0x1d, 0x4, 0x3, 0x36, 0x74, 0x65, 0x0, 0xf9, 0x29, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x86, 0x1, 0x8, [{@remote, 0x1}, {@loopback, 0x7}, {@loopback, 0x3}, {@rand_addr=0x64010101, 0xffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@rand_addr=0x64010101, 0x13}, {@local, 0x6}]}, @ssrr={0x89, 0xb, 0x78, [@multicast1, @multicast1]}, @lsrr={0x83, 0xf, 0x2e, [@multicast1, @multicast1, @multicast1]}, @ssrr={0x89, 0x7, 0xbe, [@dev={0xac, 0x14, 0x14, 0x30}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r0, @ANYBLOB="08002abd7000fbdbdf251500000018000180140002006970366772653000000000000000000014000180080003000300000008000300020000008400018008000300010000001400020070696d7265670000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020070696d36726567310000000000000000140002007767320000000000000000000000000008000300010000001400020070696d7265673000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000300000000000800030002000000580001801400020070696d72656731000000000000000000080003000200000014000200776c616e310000000000000000000000140002006e723000000000000000000000000000080003000500000008000100", @ANYRES32=r3, @ANYBLOB="1ea7f443a47ee5a4efa221ededb88a7a43c52be5f5cec254ce63b9d37d529548147fda9fd16b1c28fe5afdf8f0f49f707b8c6c994249dc0dcb7ac67a92b331b7cbc2a6b3"], 0x11c}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) 1.00326792s ago: executing program 6 (id=4194): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f00000000c0)=0x13, 0x4) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x2, 0x0) 748.735893ms ago: executing program 0 (id=4195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x1, 0x10, &(0x7f0000002bc0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000002c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20686e64}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, 'abcd'}]}]}}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x140}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x84) sendto$inet(r3, &(0x7f0000000640)="00010002000000000000000011223344", 0x10, 0x0, &(0x7f0000000680)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000980)={{0x0, 0x7fffffff, 0x1000, 0x71129ea6, 0xfffffffffffffff9, 0x9, 0x33be, 0x0, 0x4b, 0xe, 0x0, 0x7, 0x0, 0xfff, 0x200}}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001980)={{r6, 0x0, 0x3, 0x0, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x9, 0x7, 0x6, 0xf, 0x7, 0x0, 0x401}}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002d80)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000002dc0)="03000000", 0x4}], 0x2}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000002e00)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r9, &(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000002e80), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000002ec0)=0xce0, 0x4) sendmsg$kcm(r7, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002f80)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x1, 0x0, 0x2, 0xf, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf2706e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b742e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae2282b3"}, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8800}, 0x240448c8) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000088000000a0000000004"], 0x50) socket$igmp6(0xa, 0x3, 0x2) 547.165839ms ago: executing program 6 (id=4196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) 534.595048ms ago: executing program 1 (id=4197): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x44, 0x11, 0x1, 0x2000003, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x3}, {0xfff3, 0x6}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7ec4}, {0x8, 0xb, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000000200)={0x44, r7, 0x1, 0xfffffffc, 0x2, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@remote, @in=@private}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8) r9 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000e40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffff13) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f0000000f40)=0xc) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f00000012c0)='dctcp', 0x5) getsockopt$inet_tcp_buf(r14, 0x6, 0x1a, 0x0, &(0x7f0000001300)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000003c0)="3dcf9ccef7f6466e4bf47c5c3139b35851af1dacd1bc14d5af7ea4033ed00fed14e0440bf1fa8680729e1c0333e27eb703743d4fea4d9b9349a76c112b7550a5c8d70d8f0b299bb1e0e43b550562d30d3b07a3022bf0933c15ae543dd4bbc3dee7538248b20d8f12934d7aff1c13d2fc4967b7d1fb6c9c3ba8", 0x79}, {&(0x7f0000000440)="cccc8fcbfa2ab894bfd7735f56c112d05e3bc728ff97d10d0ef240c4872c6b5d0b8c7dd429213cbd6901d5c4fb0d765e2bbe09c8d4984de77a0b116ad4d735eaa5cd1960fbbb626ed22951aba5707318026003a63789cf879cbb8ab6a32a740b5e408cab7fabf84b529516136b0923ae1d5b30129ee489ac011871c12700b6433ec6418c2824ecf8806fd5b44e06d7461bbfde9660b7450e2e67839488e01401464515c248c7", 0xa6}, {&(0x7f0000000500)="61bcf4eb41c6491d7ce7ac328753e81844d27e32e645648200f8fa65129c19df58f913e04fc40dec29bb575c9aef4dcf50beb7821e95b47a51feae2e0452a0866fb1d28628afc479a79763e3e72ae6523930568b942bfe89c1f298471fd0900ce7bba2", 0x63}, {&(0x7f0000000a00)="4b572be6d801fa4c29722e6263c748e8d30015604eee1fcba0f6fc36a0ad7ecd8dc007425dd5b9d93ee27555debea205239adc23a3c9fb72b2140bd9ac4d64a571401458eb4c9c69e9ab49e2764c", 0x4e}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000a80)="901472765afbc6d30ebd912285c34f6e8e2459329e573ddd1b948683484d650b7cf2b954f9ed10eee405ff551b24d9b43bb5d68c26add2e5d9addbb56adb7ae27c54e0b39e1476d01962d757d5670000000000000000bb204fe65c71833f763fe6e815c842ba71ca0a4f0000000000008b17325d72a8000000006acf5e300045e44bcd3f1406c1b56daef66911dee68c0bd46c9b71831dc387b74f1fb50f35811160bfdf7838b081c17606dbe0b709cd1fa74e6e8443029d5db21b9f938a19d3742ca61dcf49959aa2c893f43c02383dbee51f1bfc", 0xd5}, {&(0x7f00000024c0)="8842c288ccdd8ff913ffab6e3b000abf00f64be8d9752f6a5412a7766850bc5a04667c9088b2a05f31e22c1f95b0634c387f32e152d81d4d1190a330042bab837610f8bd787c30b5c201b8e667165237f90eb6ec268e9a1d28d87cf7906f1e39bd18ec40d574d2bdc16972931fdc4c44267f", 0x72}, {&(0x7f0000002540)="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", 0x1000}], 0x8, 0x0, 0x0, 0x8800}}, {{&(0x7f00000035c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000003640)="bb9ec12254730175ae3267a908b3e7ddd1334ad499f6456643f7fdcaa706b8323208cbae2068f6a2ab23b76d1edd5eb8f6c136ec992f0c32219b05f5eef8e4b81e761d598b3e5c18c035c88513385948ba58c8f78d06fbb95143b5362b9805c3c29a81df831c981a58fc56a96a5f41fcd5a1178eea1a02a65cd458fd444753ecf0d387f436b69bd9be47d772e040d4804bd9b67abf9b3d0136a4b349d42415d761ad7ca3299a228e6569f449125ea29ee821cd45712634c86b6a7ed75a6d853f90", 0xc1}, {&(0x7f0000003740)="44f2679b05b0e258e1aca08419e74d077697200ae3b803c4b790e0cf8c90532152b9042f37e86054b3879ec3dd01986fbaa81d177467bc2b459577be0aca39d1b156f87043cd95a894af2986cd14b722346fefb2dcd5c9d60bd9e1698e5fe22a4766d3c366f7b94bb7d35e829d79c2aec26c07a0c4b13a69d14bc44be4ef6e78a93344d5ba99c2871b0b788f12896bd17cd7b8531a76bcdcd4ba5c6f8d993ceeb6d915cece7fda6ab491518c937f20658f68392a0232576f4db8400b3bc6385659", 0xc1}, {&(0x7f0000003840)="d53fad15a6b1ff95c86c8afdc6e9281a8f858e11ccb77fb615c951ee60f5a2689ad22e9434450e90a2249bbbac6381c35970d149c55f93072e4c9a3646df9cee2b934e7996116f16b8b02f62b21074d61ce0350b3a78ad806bc1e0a87ee089e4f4cd3d27326a6cfad641238638ed86c82da161bbcd33220723c74b0fc5", 0x7d}, {&(0x7f00000038c0)="641b7de7b4f99a8888d80ec6cb090ebb93c25672286b00649904bc120552774cd41d7e8a5d444d9a7f1486278d5a9a3b8e0e5620ae3de7ac292e5dfa2ec69a39a25174e6a01cabddbe407656bba63bb3cda0824ab0cacc342dd3abc0457d4c66868220c48fbc982ea3d76ed5e4fb4058c6", 0x71}, {&(0x7f00000044c0)="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", 0x1000}, {&(0x7f00000054c0)="3050d0cd4a62d05687cf0d27e76740189e52fc0b4e5c79abd945a98d0d0490b4310aeed6d4bf89278bec52b01e3dbf12633cbde7ecfda7246d83e67664080530b2d3970ff14f18fc17568e584020d0ff4ea057e1236eb530a7b8c5867f2dd07682a2076bf8bd179c090d5466bd8540e2f2488da6a9bd148328e51ff8fd", 0x7d}, {&(0x7f0000005540)="2c29f266d723eed570388d3169c9b59a8a497113a6b3cbebc8618d37eba6b9587cb3288a4b82129ec5e6ad01926719aa0dabbf6936bc486f0058394d4250c4ef7a3526ab0f8e5aea346eb288eeb00e7c06d65a0fb8d8f1c6119a65516cf2ff9ba965b8bfb89d18", 0x67}, {&(0x7f00000055c0)="8ecf70333754bf14f4a71a3355f528b8b1ff8637586f73db08df99bd3ef922d82bbe8f14de3d784294270bf37ca792cb0dad22ab03ec0c4e5128e2fac18e7f", 0x3f}], 0x8, 0x0, 0x0, 0x20044850}}, {{&(0x7f0000005680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005840)=[{&(0x7f0000005700)="027dd341687c33f392d2d39862780993ec36fb80200fc0573166416b12b2f59b0c164f", 0x23}, {&(0x7f0000005740)="585abb576e88e92d9bb15cb1dd72b534b099fea055fe1d24b8cab16f89e536950ea81cbb4ca78454e4812552a8a0235d8da3684cab948efafc7d67a30214f1", 0x3f}, {&(0x7f0000005780)="072a1249c590c01764f102703132805ea8fd7d2b560cee48680dd8babc935d27c46d23a26ddd77a62073b21c0d1ed257b4dd160633e6b42bd31f12e8e09072208c139f105b07c76b15845bb777dd9d4737d2548d34be409ec847b37796d66251b88c08400db6031e44a44f0885e58ba15807fde7cfa7ec984de2d3c764e6d6d879a21e233ed445388f6261e15c14d86e1145f3ecc154b1", 0x97}], 0x3, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000005880)="a8459984302a653b82811a85ef9d212f120e514f3d7943ff11d441cb45083a00f5393ee2edbc348cbf7ca29517a2446b300d9b1f97d215e578e6e783310e92a4171a3c0f", 0x44}, {&(0x7f0000005900)="aab635e4aefffddfbb5cb4fc9c46acd1d67199df30aad34468ab2a0309d1ce608855d4f84924add3d05d48b8a5375def9082985ea9500ed4a11a2b7c26d69977a26f571da699d813d76d58a6d834575f58d5659b85803f299918d2ab9ad9d4b27a018b9d1ddff54a5b59ca0820a563c7ab7b6758d36ee3e2e2e81ef3af515136638513dd38abc845e031d4c79d8495114107208ef05a18bf9b001e302b271c5207ffb8a5eacc21bd527833fcfde98f", 0xaf}, {&(0x7f00000059c0)="cb88b477f0dfb12abb7789ec638882875312caa0b99150c150d76492de4c103e6e8e68d618801bf1a08d0f342cc8c793d1c161a61e0bd1a4a838", 0x3a}, {&(0x7f0000005a00)="d08d7423bbcabbb13253adbe824e0d593a313c33a7a09613e681b6cc3e3f8d2c4a1826e9287781d39642346648e9d2422df2e531f01196eb3e571aa1c60f1f20cdcac7ae2eb3a19336bcfef8f9145714d0a4c433325d4aa60cf2c6d3f52e96607ead387dff3a62e57f972b51d9cc2bdcf883b6630803d12bd3b793144f133ddbe9a47f0323a547f23f0fec19e26d11a7d4f8defbc600d1ec0f38efd6675bbc290bf3f7e33ba2a5ce6bb2bea87ae71137b11e60da7843ce70", 0xb8}, {&(0x7f0000005ac0)="b44a034b3904339772d831fe6c31185a3f9f128245466076d813c087cb7e146f6a5940d1a0da1f59e9a4cb57a8f99f06c46f1b09e1e6d1f6c910e66fd4ff50c3dd38dbf108f42cad69a93b03c5424aa6eae0c7d1439a2ca14c91cc0faf9df4a75e7f27467b0350cbc43f3927f4578fc64f516e69f268cc9a416f1815a202a85186", 0x81}, {&(0x7f0000005b80)="16413ec726fc361ad0ec34915883b3cc53ad8d4669434556e5ff66ca991791e66cfa498aacb7646bdc4a230c02e24e37450a35e21c2bff3842a1dc4c28ee2079fcb2691d9693b3d616937fe2961e21e29e643e78784c48531bc39c58a4bf1aca013856", 0x63}, {&(0x7f0000005c00)="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", 0x1000}], 0x7, &(0x7f0000006d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r12}}}, @rights={{0x18, 0x1, 0x1, [r4, r14]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r12}}}, @rights={{0x28, 0x1, 0x1, [r4, r6, r4, r14, r6, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r10, r13}}}, @rights={{0x18, 0x1, 0x1, [r14, r14]}}, @rights={{0x34, 0x1, 0x1, [r14, r3, r4, r6, r1, r1, 0xffffffffffffffff, r6, r3]}}], 0x128, 0x41}}], 0x4, 0x80) r15 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0}, &(0x7f0000001040)=0xc) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r17, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) 326.714033ms ago: executing program 4 (id=4198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000190001002bbd70000000000080200009fd04000500000000080003003e3b67"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0100000000009b68e5798d5c00"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) (async) r9 = socket$packet(0x11, 0xba795f88913c8b8a, 0x300) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x7a05, 0x1700) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) pwritev(r11, &(0x7f0000000600)=[{&(0x7f0000000940)="8e4013cca29b0b675783998696d4033e5fb3780e3e36106d375fab250ce017fcb02658ed92288582044b2d615dd886afd7a5a24d525e1768af77b243c44ce07384361d9ec43154bb065ba8bb243859a282d952e84f007ba83abd0cf925586881fea1679dcf966cafa6dbc5af81397fa99afdcdaabb41a4bb6b6cdef0840da8a2df9d98441da9b75da2e4212c92936ab84f3e3edba851f3fb97b4b969f77d1249109da5fd4489b23440b3e01a1a09d1a1277e4105f965dc515dd31531db4ec0d7d22be594586e3009afc418c7f553f1c61dd38a62b96f19", 0xd7}], 0x1, 0x80000001, 0x80) (async) sendfile(r11, r10, 0x0, 0xf03a0005) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x275a, 0x0) (async) getsockopt$inet_pktinfo(r12, 0x0, 0x50, 0x0, &(0x7f00000006c0)) (async) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newqdisc={0x1c4, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x4, {0x0, 0x0, 0x0, r13, {0xe}, {0x9, 0xffff}, {0xfff2}}, [@TCA_STAB={0x1a0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x3, 0x2, 0x1, 0x800, 0x27, 0x1}}, {0x6, 0x2, [0x5d]}}, {{0x1c, 0x1, {0x3, 0x81, 0x4a85, 0x10, 0x1, 0x4, 0x6c6c81bc, 0x3}}, {0xa, 0x2, [0x7, 0xff85, 0x8]}}, {{0x1c, 0x1, {0x7a, 0x9, 0x1ec5, 0x9, 0x1, 0x5, 0x1, 0x7}}, {0x12, 0x2, [0xc, 0x800, 0xff, 0x4, 0xf895, 0x2, 0xa]}}, {{0x1c, 0x1, {0x7, 0x8, 0x9, 0xef, 0x2, 0x9, 0x0, 0x2}}, {0x8, 0x2, [0x60e, 0x327]}}, {{0x1c, 0x1, {0x2, 0x2, 0x200, 0x5, 0x0, 0x101, 0x1, 0x7}}, {0x12, 0x2, [0xd, 0x4, 0x10, 0xfffb, 0x46, 0x40, 0x3b0f]}}, {{0x1c, 0x1, {0x1, 0x2, 0x8001, 0x5, 0x0, 0x79, 0x7b, 0x5}}, {0xe, 0x2, [0x0, 0xb, 0x7ff, 0x9, 0xb71f]}}, {{0x1c, 0x1, {0x3, 0x7, 0x4, 0xf, 0x0, 0x2, 0x0, 0x2}}, {0x8, 0x2, [0x945, 0xb7b]}}, {{0x1c, 0x1, {0xff, 0x10, 0x0, 0xf, 0x0, 0x8000, 0xfffffffd, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0x7, 0xd, 0x0, 0x8001, 0x4, 0x9}}, {0x16, 0x2, [0x7, 0x8, 0x2, 0xfc00, 0x0, 0x80, 0x3, 0x6, 0x8]}}, {{0x1c, 0x1, {0x56, 0x5, 0x87a, 0x315e, 0x0, 0xaf, 0x10001, 0x1}}, {0x6, 0x2, [0xd]}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x48800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 82.381896ms ago: executing program 3 (id=4199): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000340)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gretap0\x00', 0x0}) sendmsg(r2, &(0x7f0000000740)={&(0x7f0000000780)=@ll={0x11, 0x3, r3, 0x1, 0xe4, 0x6, @broadcast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000880)="2cf2565b0e508224b706a643e9a8c932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777439cc590257a0641579678f72a6fc8ea7b95649d16eac1f42d60c75087468b851b0decaf5b66d17dcaa00ab980feaf78b888dab4ac962c3fd73190f1f0443a20b2", 0x68}], 0x2}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492460027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000280), 0x40000000000009f, 0x0) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r7], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r8, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r7}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x7fff, r9}, 0x38) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e8005d135f92000000", 0x2e}], 0x1, 0xba8, 0x20000) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c000b0000400600000a0000010a0000020050005000000b0100000008601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=4200): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0xfffffd10, &(0x7f0000000680)=[{&(0x7f00000006c0)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000300)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) bind$bt_sco(r0, &(0x7f0000000000), 0x37) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x5, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000440)='ns/time_for_children\x00') syz_open_procfs$namespace(r6, &(0x7f0000000480)='ns/time_for_children\x00') sendmsg$netlink(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) kernel console output (not intermixed with test programs): tes in process `syz.3.3078'. [ 552.635380][T19337] SET target dimension over the limit! [ 552.698015][T12329] bridge0: left promiscuous mode [ 552.715879][T19054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 552.742748][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.745392][T19054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 552.775352][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.778025][T19054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 552.809798][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.845368][T19054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 552.917702][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.998720][T19348] FAULT_INJECTION: forcing a failure. [ 552.998720][T19348] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 552.998759][T19348] CPU: 1 UID: 0 PID: 19348 Comm: syz.2.3081 Not tainted syzkaller #0 PREEMPT(full) [ 552.998785][T19348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 552.998799][T19348] Call Trace: [ 552.998808][T19348] [ 552.998819][T19348] dump_stack_lvl+0xe8/0x150 [ 552.998863][T19348] should_fail_ex+0x410/0x560 [ 552.999022][T19348] _copy_from_iter+0x1d3/0x1660 [ 552.999080][T19348] ? __alloc_skb+0x27a/0x7a0 [ 552.999157][T19348] ? __alloc_skb+0x27a/0x7a0 [ 552.999192][T19348] ? __alloc_skb+0x27a/0x7a0 [ 552.999224][T19348] ? __pfx__copy_from_iter+0x10/0x10 [ 552.999253][T19348] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 552.999281][T19348] ? __alloc_skb+0x27a/0x7a0 [ 552.999309][T19348] ? __alloc_skb+0x27a/0x7a0 [ 552.999348][T19348] ? netlink_sendmsg+0x64f/0xb20 [ 552.999466][T19348] ? skb_put+0x112/0x210 [ 552.999502][T19348] netlink_sendmsg+0x6bb/0xb20 [ 552.999543][T19348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.999594][T19348] ? aa_sock_msg_perm+0x144/0x210 [ 552.999678][T19348] ? apparmor_socket_sendmsg+0x98/0x360 [ 552.999708][T19348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.999737][T19348] sock_sendmsg_nosec+0x14e/0x190 [ 552.999770][T19348] ____sys_sendmsg+0x54e/0x850 [ 552.999813][T19348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.999865][T19348] ? import_iovec+0x73/0xa0 [ 552.999928][T19348] ___sys_sendmsg+0x2a5/0x360 [ 552.999963][T19348] ? __lock_acquire+0x747/0x2de0 [ 553.000003][T19348] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.000082][T19348] ? __fget_files+0x3a2/0x420 [ 553.000125][T19348] ? __fget_files+0x2a/0x420 [ 553.000161][T19348] __x64_sys_sendmsg+0x1b1/0x290 [ 553.000188][T19348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.000249][T19348] do_syscall_64+0x166/0x520 [ 553.000273][T19348] ? trace_irq_disable+0x3b/0x140 [ 553.000298][T19348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.000322][T19348] ? clear_bhb_loop+0x70/0xc0 [ 553.000350][T19348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.000372][T19348] RIP: 0033:0x7f5bd859f559 [ 553.000393][T19348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.000411][T19348] RSP: 002b:00007f5bd9498028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.000435][T19348] RAX: ffffffffffffffda RBX: 00007f5bd8825fa0 RCX: 00007f5bd859f559 [ 553.000451][T19348] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 553.000465][T19348] RBP: 00007f5bd9498090 R08: 0000000000000000 R09: 0000000000000000 [ 553.000478][T19348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.000491][T19348] R13: 00007f5bd8826038 R14: 00007f5bd8825fa0 R15: 00007ffe935a1428 [ 553.000527][T19348] [ 553.533879][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'. [ 553.729944][T19054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.852525][T19054] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.924399][T17314] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.924507][T17314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.934067][T19358] syzkaller1: entered promiscuous mode [ 553.934559][T19358] syzkaller1: entered allmulticast mode [ 554.030847][T16498] Bluetooth: hci4: command 0x0419 tx timeout [ 554.036252][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.036359][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.246287][T19372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3088'. [ 555.204808][T19390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3093'. [ 555.262449][T19390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3093'. [ 555.262477][T19390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3093'. [ 555.262494][T19390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3093'. [ 555.644019][T19404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 556.034482][T19412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3098'. [ 556.845220][T19396] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.966101][T19437] tipc: Enabled bearer , priority 0 [ 556.966685][T19436] syzkaller0: entered promiscuous mode [ 556.966705][T19436] syzkaller0: entered allmulticast mode [ 557.007201][ T30] audit: type=1804 audit(1792922226.399:20): pid=19447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3103" name="/newroot/616/cgroup.controllers" dev="tmpfs" ino=3173 res=1 errno=0 [ 557.009503][ T30] audit: type=1800 audit(1792922226.399:21): pid=19447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3103" name="cgroup.controllers" dev="tmpfs" ino=3173 res=0 errno=-22 [ 557.103734][T19054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.341051][T19396] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.530160][T19396] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.572163][T19429] tipc: Resetting bearer [ 557.672415][T19467] x_tables: unsorted entry at hook 2 [ 557.675233][T19465] __nla_validate_parse: 1 callbacks suppressed [ 557.675289][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3106'. [ 557.675350][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3106'. [ 557.746292][T19429] tipc: Disabling bearer [ 557.914107][T19396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.341477][ T2959] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.443008][T19492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3113'. [ 558.497194][T19487] gretap0: left promiscuous mode [ 558.546007][T19487] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.610706][T19487] xfrm0: left allmulticast mode [ 558.617735][T19487] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 558.618414][ T6166] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.618623][ T6166] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.731419][ T6166] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.148783][T19054] veth0_vlan: entered promiscuous mode [ 559.197119][T19054] veth1_vlan: entered promiscuous mode [ 559.390378][T19054] veth0_macvtap: entered promiscuous mode [ 559.493567][T19503] 8021q: adding VLAN 0 to HW filter on device bond13 [ 559.494593][T19503] bond13: entered allmulticast mode [ 559.494642][T19503] team0: Device bond13 is of different type [ 559.549507][T19503] bond13 (unregistering): Released all slaves [ 559.625583][T19502] tipc: Enabling of bearer rejected, already enabled [ 559.823180][T19511] tipc: Enabling of bearer rejected, already enabled [ 559.827640][T19054] veth1_macvtap: entered promiscuous mode [ 559.887805][T19502] tipc: Resetting bearer [ 560.065466][T19054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.133514][T19054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.333236][ T6171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.450451][ T6171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.542644][ T6177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.542689][ T6177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.862611][T17314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.862634][T17314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.869637][T19548] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 561.097875][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 561.348969][T17314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.348992][T17314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.729624][T19576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 561.787915][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 561.845576][T19582] xt_hashlimit: size too large, truncated to 1048576 [ 561.888032][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3133'. [ 562.375112][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 562.375140][T19592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3135'. [ 562.665477][T19596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.666216][T19595] bond1: option mode: unable to set because the bond device is up [ 562.747561][T19595] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3139'. [ 562.831043][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.969568][T19596] bond1 (unregistering): Released all slaves [ 563.205217][ T4947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.222059][ T4947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.226127][ T4947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.230207][ T4947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.242980][ T4947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 563.427298][T19614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3141'. [ 563.586279][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'. [ 563.635318][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 564.303468][T19643] tipc: Enabled bearer , priority 0 [ 565.312634][T16498] Bluetooth: hci3: command tx timeout [ 565.561173][T19655] syzkaller1: entered promiscuous mode [ 565.561198][T19655] syzkaller1: entered allmulticast mode [ 565.923972][T19607] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.942314][T19607] wg2 speed is unknown, defaulting to 1000 [ 565.949275][T19607] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.965878][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 567.031468][T19708] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3154'. [ 567.091689][T19712] netlink: 'syz.4.3156': attribute type 83 has an invalid length. [ 567.096088][T19712] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 567.187210][T19719] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 567.391485][T16498] Bluetooth: hci3: command tx timeout [ 567.442586][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'. [ 567.549941][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3158'. [ 567.662914][T19736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.800768][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 568.067258][T19738] team0: Port device team_slave_0 removed [ 568.242769][T19607] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.242941][T19607] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.243117][T19607] bridge_slave_0: entered allmulticast mode [ 568.267327][T19607] bridge_slave_0: entered promiscuous mode [ 568.310640][T19607] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.312949][T19607] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.313150][T19607] bridge_slave_1: entered allmulticast mode [ 568.328914][T19607] bridge_slave_1: entered promiscuous mode [ 568.626868][T19607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.674406][T19607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.954577][T19607] team0: Port device team_slave_0 added [ 569.342640][T19607] team0: Port device team_slave_1 added [ 569.472885][T16498] Bluetooth: hci3: command tx timeout [ 569.544785][T19607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.544814][T19607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.544845][T19607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.570466][T19607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.570513][T19607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.570622][T19607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.083240][T19607] hsr_slave_0: entered promiscuous mode [ 570.087039][T19607] hsr_slave_1: entered promiscuous mode [ 570.089602][T19607] debugfs: 'hsr0' already exists in 'hsr' [ 570.089627][T19607] Cannot create hsr debugfs directory [ 570.382719][T19788] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 570.727584][T19607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.794107][T19806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3174'. [ 570.822109][T19806] vlan2: entered promiscuous mode [ 570.822134][T19806] hsr0: entered promiscuous mode [ 570.822611][T19806] vlan2: entered allmulticast mode [ 570.822628][T19806] hsr0: entered allmulticast mode [ 570.822642][T19806] hsr_slave_0: entered allmulticast mode [ 570.822659][T19806] hsr_slave_1: entered allmulticast mode [ 570.882941][T19806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'. [ 571.551137][T16498] Bluetooth: hci3: command tx timeout [ 571.615096][T19607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.711151][T19828] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3180'. [ 571.772381][T19607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.863713][T19607] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.001708][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'. [ 572.009919][ T30] audit: type=1800 audit(1792922241.399:22): pid=19844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3186" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3186 res=0 errno=-22 [ 572.479287][T19607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 572.524738][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.545087][T19607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 572.588708][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.603517][T19607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 572.669052][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.691298][T19607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 572.724279][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.759807][T19841] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 573.070820][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 573.317181][T19607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.415320][T19607] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.460114][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.460232][T17308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.488381][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3193'. [ 573.626197][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3194'. [ 573.661186][T19875] bond1: entered allmulticast mode [ 573.661718][T19875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.251311][T19897] netlink: 'syz.4.3196': attribute type 4 has an invalid length. [ 574.251338][T19897] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3196'. [ 574.556142][T17867] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.556290][T17867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.774904][T19880] geneve2: left promiscuous mode [ 574.778790][T19880] erspan1: left promiscuous mode [ 574.805077][T19880] vlan2: left promiscuous mode [ 574.805101][T19880] hsr0: left promiscuous mode [ 574.886561][T19895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.907273][T19897] .`: renamed from bond0 (while UP) [ 574.970179][T17866] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.971583][T17866] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.971633][T17866] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.988777][T17866] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.774605][T19921] bond2: entered allmulticast mode [ 575.775168][T19921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.893223][T19931] syzkaller0: entered promiscuous mode [ 575.893249][T19931] syzkaller0: entered allmulticast mode [ 576.586425][T19939] netlink: 'syz.0.3205': attribute type 11 has an invalid length. [ 577.244647][T19977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3211'. [ 577.323170][T19607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.783443][T19607] veth0_vlan: entered promiscuous mode [ 577.802230][ T30] audit: type=1800 audit(1792922247.199:23): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3215" name="blkio.bfq.time_recursive" dev="tmpfs" ino=250 res=0 errno=-22 [ 577.909669][T19607] veth1_vlan: entered promiscuous mode [ 578.101592][T19607] veth0_macvtap: entered promiscuous mode [ 578.156549][T19607] veth1_macvtap: entered promiscuous mode [ 578.272431][T19607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.355437][T19607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.441233][T17869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.441285][T17869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.441324][T17869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.452228][T17869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.536385][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3218'. [ 578.932733][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.932756][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.023809][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.023832][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.266944][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3222'. [ 579.284607][T20010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3222'. [ 579.409482][T16498] Bluetooth: hci2: link tx timeout [ 579.409503][T16498] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.564603][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 579.683371][T20024] bridge1: entered allmulticast mode [ 579.713643][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3224'. [ 580.367588][T20037] ip_tables: iptables: counters copy to user failed while replacing table [ 580.457946][T20036] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3232'. [ 580.643352][T20043] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3231'. [ 581.105021][T20067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3238'. [ 581.105047][T20067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3238'. [ 581.471901][T16498] Bluetooth: hci2: command 0x040f tx timeout [ 581.520226][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.531957][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.549427][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.562090][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.564060][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.842308][ T5629] tipc: Resetting bearer [ 581.923301][ T5629] bridge0: port 2(syz_tun) entered disabled state [ 581.989491][ T5629] syz_tun (unregistering): left allmulticast mode [ 581.989556][ T5629] syz_tun (unregistering): left promiscuous mode [ 581.989744][ T5629] bridge0: port 2(syz_tun) entered disabled state [ 582.018939][ T5629] tipc: Disabling bearer [ 582.228466][T20085] syzkaller0: entered promiscuous mode [ 582.228502][T20085] syzkaller0: entered allmulticast mode [ 582.582960][T20098] netlink: zone id is out of range [ 582.582977][T20098] netlink: zone id is out of range [ 582.582986][T20098] netlink: zone id is out of range [ 582.582995][T20098] netlink: zone id is out of range [ 582.583003][T20098] netlink: zone id is out of range [ 582.583011][T20098] netlink: zone id is out of range [ 582.583020][T20098] netlink: zone id is out of range [ 582.583028][T20098] netlink: zone id is out of range [ 582.583036][T20098] netlink: zone id is out of range [ 583.681733][T20075] virt_wifi0 speed is unknown, defaulting to 1000 [ 583.686947][T20075] wg2 speed is unknown, defaulting to 1000 [ 583.705673][T20075] rxe_eth0 speed is unknown, defaulting to 1000 [ 583.882281][ T4947] Bluetooth: hci1: command tx timeout [ 584.156732][T20136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3254'. [ 584.266643][T20133] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.329590][T20133] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.395244][T20141] sctp: [Deprecated]: syz.4.3257 (pid 20141) Use of int in max_burst socket option. [ 584.395244][T20141] Use struct sctp_assoc_value instead [ 584.667546][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3258'. [ 584.723065][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3258'. [ 585.206047][T20162] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3261'. [ 585.483302][T20075] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.485113][T20075] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.485558][T20075] bridge_slave_0: entered allmulticast mode [ 585.488955][T20075] bridge_slave_0: entered promiscuous mode [ 585.536324][T20075] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.536498][T20075] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.536975][T20075] bridge_slave_1: entered allmulticast mode [ 585.562293][T20075] bridge_slave_1: entered promiscuous mode [ 585.586463][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3264'. [ 585.604680][T20174] xfrm1: entered promiscuous mode [ 585.604703][T20174] xfrm1: entered allmulticast mode [ 585.606720][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3264'. [ 585.644980][T20075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.648541][T20075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.898647][T20075] team0: Port device team_slave_0 added [ 585.939406][T20075] team0: Port device team_slave_1 added [ 585.950719][ T4947] Bluetooth: hci1: command tx timeout [ 585.996153][T20178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3265'. [ 586.117561][T20185] netlink: 'syz.2.3265': attribute type 1 has an invalid length. [ 586.197509][T20075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.197530][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.197560][T20075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.268299][T20075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.268318][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.268348][T20075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.325405][T20178] netlink: 'syz.2.3265': attribute type 2 has an invalid length. [ 586.655751][T20075] hsr_slave_0: entered promiscuous mode [ 586.659080][T20075] hsr_slave_1: entered promiscuous mode [ 586.673420][T20075] debugfs: 'hsr0' already exists in 'hsr' [ 586.673443][T20075] Cannot create hsr debugfs directory [ 586.867276][T20195] netlink: 'syz.2.3270': attribute type 12 has an invalid length. [ 588.041370][ T4947] Bluetooth: hci1: command tx timeout [ 588.075317][T20212] netlink: 'syz.3.3277': attribute type 1 has an invalid length. [ 588.715034][T20075] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.715073][T20075] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.095426][T20075] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.095485][T20075] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.246922][T20254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3284'. [ 589.246963][T20254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3284'. [ 589.459985][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 590.111946][ T4947] Bluetooth: hci1: command tx timeout [ 590.194406][T20075] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.194448][T20075] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.254641][T20254] syz_tun: entered promiscuous mode [ 590.264480][T20254] syz_tun: left promiscuous mode [ 590.486034][T20075] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.486081][T20075] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.952919][T20298] @: renamed from dummy0 [ 591.794863][T20317] netlink: 'syz.2.3298': attribute type 1 has an invalid length. [ 592.694688][T20302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.765983][T20302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.550568][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 593.651074][T17866] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.651150][T17866] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.651191][T17866] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.651233][T17866] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.768616][T20314] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 593.815834][T20315] net_ratelimit: 6 callbacks suppressed [ 593.815859][T20315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.417757][T20319] bond3: (slave veth3): Enslaving as an active interface with a down link [ 594.438072][T20320] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 594.476344][T20075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 594.499176][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 594.517177][T20328] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 594.536849][T20075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 594.553491][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 594.555039][T20075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 594.581150][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 594.615781][T20075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 594.686838][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 594.963502][T20355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3302'. [ 594.963566][T20355] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 595.008121][T20355] geneve2: entered promiscuous mode [ 595.103761][T20357] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 595.103784][T20357] nbd: error processing sock list [ 595.104260][T20357] block nbd1: shutting down sockets [ 595.178140][T20363] netlink: 'syz.3.3305': attribute type 19 has an invalid length. [ 595.224929][T20356] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3303'. [ 595.243512][T20357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 595.284639][T20075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.381185][T20357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3304'. [ 595.381958][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'. [ 595.382461][T20359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'. [ 595.603192][T20075] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.686034][T20377] netlink: 'syz.3.3305': attribute type 19 has an invalid length. [ 595.783202][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.783322][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.850636][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.850753][T17866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.157591][T20075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 596.157619][T20075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 596.395861][T20385] 8021q: adding VLAN 0 to HW filter on device .` [ 596.957014][T20403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3309'. [ 597.069298][T20410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3309'. [ 598.027408][T20430] netlink: 'syz.4.3315': attribute type 8 has an invalid length. [ 598.086952][T20410] 8021q: adding VLAN 0 to HW filter on device eth0 [ 598.128307][T20410] 8021q: adding VLAN 0 to HW filter on device eth1 [ 598.192656][T20410] 8021q: adding VLAN 0 to HW filter on device eth2 [ 598.237830][T20410] 8021q: adding VLAN 0 to HW filter on device eth3 [ 598.329925][T20410] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 598.537027][T20410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.575712][T20410] geneve2: left promiscuous mode [ 598.575740][T20410] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 598.662296][ T6177] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 598.662583][ T6177] bond3: (slave veth3): making interface the new active one [ 598.895589][ T6177] bond3: active interface up! [ 599.636054][T20465] netlink: 'syz.3.3322': attribute type 178 has an invalid length. [ 600.283325][T20481] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3324'. [ 600.304809][T20075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.473554][T20481] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 600.713267][T20075] veth0_vlan: entered promiscuous mode [ 600.970798][T20075] veth1_vlan: entered promiscuous mode [ 601.495497][T20075] veth0_macvtap: entered promiscuous mode [ 601.608893][T20075] veth1_macvtap: entered promiscuous mode [ 602.019624][T20075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.306196][T20075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.481680][ T6178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.502007][T17863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.503246][T17863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.542122][T17863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.615359][T20508] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3330'. [ 602.813699][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 603.597092][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.597115][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.692581][T20522] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 604.057460][T20522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.149186][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3332'. [ 604.291435][T20524] netlink: 'syz.0.3334': attribute type 1 has an invalid length. [ 604.291464][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 604.508950][T20537] macvlan2: entered promiscuous mode [ 604.509155][T20537] macvlan2: entered allmulticast mode [ 604.510319][T20537] bond1: entered allmulticast mode [ 604.522745][T20537] bond1: entered promiscuous mode [ 604.541197][T20537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 604.635284][T20537] team0: Port device macvlan2 added [ 604.678817][T20542] ipvlan2: entered allmulticast mode [ 604.678842][T20542] syz_tun: entered allmulticast mode [ 605.041268][T17868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.041292][T17868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.308889][T20573] tipc: Enabling of bearer rejected, failed to enable media [ 606.436910][T20575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3341'. [ 606.705478][T20575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 606.856536][T20578] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 606.902696][T20580] virt_wifi0 speed is unknown, defaulting to 1000 [ 606.909244][T20580] wg2 speed is unknown, defaulting to 1000 [ 606.949975][T20580] rxe_eth0 speed is unknown, defaulting to 1000 [ 607.125694][T20598] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 607.847690][T17866] IPVS: starting estimator thread 0... [ 607.953147][T20607] IPVS: using max 25 ests per chain, 60000 per kthread [ 608.004806][T20605] ip6erspan0: entered promiscuous mode [ 608.007156][T20602] lo: entered promiscuous mode [ 608.062067][T20602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.129297][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 608.253256][T20608] syzkaller0: entered promiscuous mode [ 608.253281][T20608] syzkaller0: entered allmulticast mode [ 608.363546][T20608] tipc: Started in network mode [ 608.363581][T20608] tipc: Node identity 963f1a985cae, cluster identity 4711 [ 608.363739][T20608] tipc: Enabled bearer , priority 0 [ 608.510975][T20608] tipc: Resetting bearer [ 608.730842][T20606] tipc: Resetting bearer [ 608.856455][T20606] tipc: Disabling bearer [ 613.142315][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 613.572868][T20688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3362'. [ 618.926084][T20682] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 618.971135][T20684] veth3: entered allmulticast mode [ 619.277584][T20727] erspan0: entered promiscuous mode [ 619.379762][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3371'. [ 619.498138][T20731] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3372'. [ 619.564706][T20738] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3374'. [ 622.275077][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3387'. [ 623.214603][T20814] can: request_module (can-proto-3) failed. [ 623.483085][T20827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3392'. [ 623.483117][T20827] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 623.483134][T20827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3392'. [ 624.289546][T20849] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3397'. [ 624.400572][T20847] ip6gre1: entered allmulticast mode [ 624.511275][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 624.511309][T20848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3397'. [ 624.513537][T20861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3401'. [ 624.626846][T20848] bridge3: entered promiscuous mode [ 624.626870][T20848] bridge3: entered allmulticast mode [ 626.048605][T20874] ip6erspan0: left promiscuous mode [ 626.237530][T20892] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3404'. [ 626.237554][T20892] tc_dump_action: action bad kind [ 626.337339][T20891] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3404'. [ 626.337401][T20891] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3404'. [ 627.178388][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3409'. [ 627.701770][T20916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3412'. [ 627.821970][T20922] xt_TCPMSS: Only works on TCP SYN packets [ 627.889586][T17314] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 628.694904][T20940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3419'. [ 629.003843][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3420'. [ 629.591319][T20959] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3423'. [ 630.566927][T20981] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 630.886706][T20990] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 630.946628][T20996] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.3432'. [ 631.226590][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3434'. [ 631.334862][T21008] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 631.468288][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3431'. [ 631.689475][T21003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3433'. [ 631.996049][T21020] netlink: 'syz.1.3435': attribute type 10 has an invalid length. [ 632.190471][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 632.365275][T20998] veth3: entered promiscuous mode [ 632.408898][T21025] netlink: 'syz.1.3435': attribute type 10 has an invalid length. [ 632.640369][T21020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.752276][T21020] team0: Port device netdevsim1 added [ 632.958335][T21031] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3437'. [ 632.968353][T21025] team0: Port device netdevsim1 removed [ 632.996935][T21025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 633.014738][T21025] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 633.176658][T21040] tipc: Cannot configure node identity twice [ 633.227669][T21040] tipc: New replicast peer: 127.0.0.1 [ 633.228221][T21040] tipc: Enabled bearer , priority 10 [ 634.221544][T12329] tipc: Node number set to 3398507160 [ 634.446737][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 634.780480][T21073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3446'. [ 634.944172][T21055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 635.601495][T21093] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 635.819207][T21082] x_tables: unsorted underflow at hook 4 [ 636.265780][T21107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.265801][T21107] IPv6: NLM_F_CREATE should be set when creating new route [ 637.054833][T21107] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.055587][T21107] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.344708][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 637.379670][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 637.603812][T21107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.642813][T21107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.641262][T21111] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 638.669161][T17858] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.669201][T17858] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.799811][T17866] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.799864][T17866] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.822076][T17314] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.822117][T17314] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.997958][T17318] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.998004][T17318] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.742918][T21148] netlink: 'syz.0.3461': attribute type 4 has an invalid length. [ 639.802573][T21159] netlink: 'syz.0.3461': attribute type 4 has an invalid length. [ 639.891656][T21147] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3458'. [ 639.891681][T21147] tc_dump_action: action bad kind [ 641.028298][T21182] ip_tables: iptables: counters copy to user failed while replacing table [ 641.462961][T21193] syzkaller0: entered promiscuous mode [ 641.462986][T21193] syzkaller0: entered allmulticast mode [ 641.550775][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 642.299071][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3469'. [ 642.734551][T21176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3463'. [ 642.866076][T21208] netlink: 'syz.0.3470': attribute type 16 has an invalid length. [ 642.866103][T21208] netlink: 'syz.0.3470': attribute type 17 has an invalid length. [ 643.281947][T21208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.476042][T21208] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.579240][T21208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.723668][T21208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.729886][T21208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.774388][T21208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 643.774421][T21208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.799867][T21208] veth1_vlan: left promiscuous mode [ 643.814346][T21208] veth0_vlan: left promiscuous mode [ 643.827278][T21208] veth0_vlan: entered promiscuous mode [ 643.864888][T21208] veth1_vlan: entered promiscuous mode [ 643.887706][T21208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.889098][T21208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.909282][T21208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.924094][T21208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.946698][T21208] erspan1: left allmulticast mode [ 643.950061][T21208] vlan2: left allmulticast mode [ 643.950081][T21208] hsr0: left allmulticast mode [ 643.950095][T21208] hsr_slave_0: left allmulticast mode [ 643.950112][T21208] hsr_slave_1: left allmulticast mode [ 643.983201][T21208] xfrm1: left promiscuous mode [ 643.983223][T21208] xfrm1: left allmulticast mode [ 643.984903][T21208] batadv_slave_0: entered promiscuous mode [ 643.988472][T21208] veth3: left allmulticast mode [ 643.989086][T21208] ip6gre1: left allmulticast mode [ 644.043209][T21214] vcan1: entered promiscuous mode [ 644.043231][T21214] vcan1: entered allmulticast mode [ 644.280269][T17318] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.280392][T17318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.295240][T17318] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.295412][T17318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.660557][ T6177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.663958][ T6178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.664186][ T6178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.664758][ T6178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.840127][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 645.205784][T21227] can: request_module (can-proto-0) failed. [ 645.450741][T21246] syz_tun: entered allmulticast mode [ 645.686247][T21252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3481'. [ 646.042486][T21243] syz_tun: left allmulticast mode [ 646.132242][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 646.247093][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 646.640844][T21267] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3485'. [ 647.895345][T21302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3490'. [ 648.526155][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3493'. [ 648.862916][ T927] hid-generic 0005:07C0:8001.0001: item fetching failed at offset 0/1 [ 648.896940][ T927] hid-generic 0005:07C0:8001.0001: probe with driver hid-generic failed with error -22 [ 648.934964][T21309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3491'. [ 649.656772][T21329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.736661][T21332] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3496'. [ 650.434068][T21353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3497'. [ 650.460096][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 651.238594][T21357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3501'. [ 651.400812][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 651.949651][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 656.392737][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'. [ 656.873282][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 656.873310][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'. [ 656.873340][T21437] netlink: 'syz.4.3520': attribute type 18 has an invalid length. [ 659.372759][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 659.372789][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 659.496198][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 660.110795][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 660.189982][T21507] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 660.328970][T21507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.665106][T21507] bond1: (slave gretap2): making interface the new active one [ 660.687075][T21507] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 660.921951][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 662.181606][T21553] netlink: 'syz.3.3548': attribute type 1 has an invalid length. [ 662.317178][T21553] bond3: entered promiscuous mode [ 662.319958][T21553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.372913][T21555] vlan2: entered allmulticast mode [ 662.372938][T21555] bond3: entered allmulticast mode [ 662.505399][T21553] bond3: (slave bridge3): making interface the new active one [ 662.507139][T21553] bridge3: entered promiscuous mode [ 662.507360][T21553] bridge3: entered allmulticast mode [ 662.564839][T21553] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 664.147105][ T4947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 664.161344][ T4947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 664.174435][ T4947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 664.187527][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 664.196367][ T4947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 664.916551][T21590] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3556'. [ 665.691725][T21642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3566'. [ 665.692574][T21645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3566'. [ 666.270513][ T5637] Bluetooth: hci0: command tx timeout [ 667.107146][T21612] virt_wifi0 speed is unknown, defaulting to 1000 [ 667.128232][T21612] wg2 speed is unknown, defaulting to 1000 [ 667.147064][T21612] rxe_eth0 speed is unknown, defaulting to 1000 [ 667.923578][T21685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3573'. [ 668.351080][ T5637] Bluetooth: hci0: command tx timeout [ 669.046757][T21703] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3578'. [ 670.440807][ T5637] Bluetooth: hci0: command tx timeout [ 671.894160][T21731] virt_wifi0 speed is unknown, defaulting to 1000 [ 671.937700][T21731] wg2 speed is unknown, defaulting to 1000 [ 671.940652][T21732] virt_wifi0 speed is unknown, defaulting to 1000 [ 671.973115][T21732] wg2 speed is unknown, defaulting to 1000 [ 671.991239][T21731] rxe_eth0 speed is unknown, defaulting to 1000 [ 672.511999][ T5637] Bluetooth: hci0: command tx timeout [ 673.129539][T21612] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.131685][T21612] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.131875][T21612] bridge_slave_0: entered allmulticast mode [ 673.176165][T21612] bridge_slave_0: entered promiscuous mode [ 673.228098][T21612] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.228433][T21612] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.228652][T21612] bridge_slave_1: entered allmulticast mode [ 673.281659][T21612] bridge_slave_1: entered promiscuous mode [ 673.570979][T21766] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 673.603872][T21612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.627232][T21612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.996784][T21766] bond0: entered promiscuous mode [ 674.006134][T21766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.106971][T21732] rxe_eth0 speed is unknown, defaulting to 1000 [ 674.394714][T21612] team0: Port device team_slave_0 added [ 674.498982][T21612] team0: Port device team_slave_1 added [ 675.902507][T21612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.902527][T21612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.902558][T21612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.959398][T21612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.959416][T21612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.959446][T21612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.255799][T21612] hsr_slave_0: entered promiscuous mode [ 676.257015][T21612] hsr_slave_1: entered promiscuous mode [ 676.286962][T21612] debugfs: 'hsr0' already exists in 'hsr' [ 676.286988][T21612] Cannot create hsr debugfs directory [ 676.424680][T21810] sctp: [Deprecated]: syz.0.3595 (pid 21810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 676.424680][T21810] Use struct sctp_sack_info instead [ 677.299468][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 677.299550][T21834] netlink: 'syz.0.3598': attribute type 11 has an invalid length. [ 677.734701][T21832] ip6gretap1: entered allmulticast mode [ 677.803025][T21832] batman_adv: batadv0: Adding interface: ip6gretap1 [ 677.803047][T21832] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.803082][T21832] batman_adv: batadv0: Interface activated: ip6gretap1 [ 677.966108][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 677.966152][T21834] netlink: 'syz.0.3598': attribute type 11 has an invalid length. [ 677.998553][T21561] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.743935][T21557] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.743993][T21557] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.744041][T21557] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.814372][ T5843] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 681.117345][T21612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 681.217317][T21612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.245029][T21612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 681.330856][T21612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 681.571318][T21612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 681.625819][T21612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 681.626946][T21612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 681.665556][T21885] fido_id[21885]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 681.719704][T21612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 681.742411][T21880] virt_wifi0 speed is unknown, defaulting to 1000 [ 681.796630][T21880] wg2 speed is unknown, defaulting to 1000 [ 681.855582][T21880] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.517373][T21612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.573507][T21612] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.629130][T21560] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.629249][T21560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.670044][T21560] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.670152][T21560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.072029][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3614'. [ 684.598399][T21928] wlan1 speed is unknown, defaulting to 1000 [ 684.598527][T21928] wlan1 speed is unknown, defaulting to 1000 [ 684.792954][T21928] wlan1 speed is unknown, defaulting to 1000 [ 684.794083][T21928] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 684.794118][T21928] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 684.794162][T21928] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 685.244675][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.289357][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.336564][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.348370][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.360438][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.362450][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.364368][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.366240][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.368151][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.370195][T21928] wlan1 speed is unknown, defaulting to 1000 [ 685.412806][T21928] wlan1 speed is unknown, defaulting to 1000 [ 686.067008][T21945] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3617'. [ 686.373334][T21952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3618'. [ 686.469417][ T5637] Bluetooth: hci4: connection err: -111 [ 686.519733][T21953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3619'. [ 686.590770][T21952] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 686.591456][T21952] team0: Device ipvlan2 is already an upper device of the team interface [ 686.710092][ T5637] Bluetooth: hci2: link tx timeout [ 686.710115][ T5637] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 687.569161][T21612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.806798][T20076] Bluetooth: hci3: command 0x0406 tx timeout [ 687.806841][T20076] Bluetooth: hci4: command 0x0419 tx timeout [ 688.194018][T21982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3625'. [ 688.759862][T16498] Bluetooth: hci2: command 0x040f tx timeout [ 688.916020][T22000] netlink: 'syz.3.3628': attribute type 21 has an invalid length. [ 689.246782][T21978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.463577][T22001] netlink: 'syz.4.3627': attribute type 5 has an invalid length. [ 689.901599][T22004] bond1: entered allmulticast mode [ 689.977938][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 690.005356][T22005] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 690.023658][T22005] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 690.145367][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 690.146132][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 690.181224][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 690.181899][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 690.233628][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 690.256775][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 690.742905][T21978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.832187][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 691.425846][T21978] bond0: (slave netdevsim1): Releasing backup interface [ 691.462621][T21978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.669225][T22040] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 691.903292][T21978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.105707][T22048] Bluetooth: MGMT ver 1.23 [ 692.209103][T21612] veth0_vlan: entered promiscuous mode [ 692.310813][T21612] veth1_vlan: entered promiscuous mode [ 692.918255][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3639'. [ 692.931769][T17865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.100415][T21562] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.220433][T17865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.221553][T22064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3641'. [ 693.291792][T21612] veth0_macvtap: entered promiscuous mode [ 693.334800][T21612] veth1_macvtap: entered promiscuous mode [ 693.360877][T17307] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.556677][T21612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.688138][T21612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.794399][T22069] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 693.817521][T20504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.831883][T17858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.832337][T21560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.832400][T21560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.884389][T22069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3644'. [ 694.606954][T20504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.606979][T20504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.028769][T21558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.028799][T21558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.315455][T22096] netlink: 'syz.0.3648': attribute type 1 has an invalid length. [ 696.274007][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.303450][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.303878][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.304249][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.304608][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.388056][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.389347][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.390357][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 696.392455][T22111] ip_tables: iptables: counters copy to user failed while replacing table [ 697.045561][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'. [ 697.100852][T22129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3654'. [ 697.230419][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 697.993839][T22139] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 697.993895][T22139] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 697.994142][T22139] bond2: entered allmulticast mode [ 698.816436][T22158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3661'. [ 699.108720][T22156] tipc: Enabled bearer , priority 0 [ 699.396949][T22168] netlink: 'syz.4.3662': attribute type 10 has an invalid length. [ 699.872570][ T5637] Bluetooth: hci0: command 0x0401 tx timeout [ 699.874536][T22141] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 700.143632][T22168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.166491][T22168] .`: (slave batadv0): Enslaving as an active interface with an up link [ 700.382684][T22169] .`: (slave batadv0): Releasing backup interface [ 700.495727][T22169] bridge_slave_0: left allmulticast mode [ 700.495758][T22169] bridge_slave_0: left promiscuous mode [ 700.495988][T22169] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.556589][T22169] bridge_slave_1: left allmulticast mode [ 700.556617][T22169] bridge_slave_1: left promiscuous mode [ 700.556835][T22169] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.646201][T22169] .`: (slave bond_slave_0): Releasing backup interface [ 700.683734][T22169] .`: (slave bond_slave_1): Releasing backup interface [ 700.713326][T22169] team0: Port device team_slave_1 removed [ 700.716281][T22169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.716308][T22169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.719908][T22169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.719932][T22169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.875893][T22169] net_ratelimit: 24 callbacks suppressed [ 700.875919][T22169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 701.176515][T22170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 701.238050][ T24] tipc: Node number set to 2561989280 [ 701.878685][T22199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3669'. [ 702.054081][T22200] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 702.215616][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3670'. [ 702.451444][T17308] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.452604][T21562] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.452643][T21562] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.452678][T21562] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.723523][T22223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3672'. [ 702.933748][T22223] veth1_to_bond: entered promiscuous mode [ 702.933774][T22223] veth1_to_bond: entered allmulticast mode [ 703.884926][T22251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3679'. [ 704.129430][T22254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3679'. [ 704.588754][T22253] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.104979][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 705.105024][T22270] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3682'. [ 705.275436][T22270] xt_connbytes: Forcing CT accounting to be enabled [ 705.518589][T22284] syzkaller0: entered promiscuous mode [ 705.518631][T22284] syzkaller0: entered allmulticast mode [ 706.047338][T22291] bond4: entered promiscuous mode [ 706.047914][T22291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 706.192394][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 707.694086][T22329] syzkaller1: entered promiscuous mode [ 707.694111][T22329] syzkaller1: entered allmulticast mode [ 707.907658][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 707.907936][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 707.908205][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 707.908445][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 707.908717][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 707.908962][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 707.933146][T22343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 707.985309][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 708.030029][T22343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 708.040909][T22343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 709.524297][T22363] netlink: zone id is out of range [ 709.524314][T22363] netlink: zone id is out of range [ 711.492503][T22428] batman_adv: batadv0: Adding interface: veth0 [ 711.492523][T22428] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.492556][T22428] batman_adv: batadv0: Interface activated: veth0 [ 712.334134][T22436] xt_hashlimit: size too large, truncated to 1048576 [ 714.223539][T22483] batman_adv: batadv0: adding TT local entry 00:00:00:dd:ee:ff to non-existent VLAN 3893 [ 715.267635][T22500] __nla_validate_parse: 59 callbacks suppressed [ 715.267657][T22500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3724'. [ 715.778264][ T2959] IPVS: starting estimator thread 0... [ 715.893589][T22519] IPVS: using max 25 ests per chain, 60000 per kthread [ 716.589505][T22504] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 721.966341][T22500] ipvlan1: entered promiscuous mode [ 721.967973][T22500] ipvlan1: left promiscuous mode [ 722.687347][T22557] xt_hashlimit: size too large, truncated to 1048576 [ 725.078242][T22606] vlan4: entered allmulticast mode [ 725.078266][T22606] veth0_to_bond: entered allmulticast mode [ 725.559828][T22616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3741'. [ 725.695690][T22621] netlink: 'syz.0.3743': attribute type 4 has an invalid length. [ 725.695715][T22621] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3743'. [ 725.783469][T22621] .`: renamed from bond0 (while UP) [ 725.867946][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3743'. [ 725.926287][T22623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3744'. [ 725.945611][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'. [ 726.059477][T22625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'. [ 726.101497][T22625] hsr_slave_0: left promiscuous mode [ 726.103334][T22625] hsr_slave_1: left promiscuous mode [ 726.233044][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3746'. [ 726.762947][T22652] FAULT_INJECTION: forcing a failure. [ 726.762947][T22652] name failslab, interval 1, probability 0, space 0, times 0 [ 726.762986][T22652] CPU: 1 UID: 0 PID: 22652 Comm: syz.4.3749 Not tainted syzkaller #0 PREEMPT(full) [ 726.763013][T22652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 726.763028][T22652] Call Trace: [ 726.763038][T22652] [ 726.763049][T22652] dump_stack_lvl+0xe8/0x150 [ 726.763093][T22652] should_fail_ex+0x410/0x560 [ 726.763140][T22652] should_failslab+0xa8/0x100 [ 726.763179][T22652] __kmalloc_cache_noprof+0x9e/0x600 [ 726.763211][T22652] ? nf_tables_newtable+0x43e/0x1990 [ 726.763314][T22652] ? nf_tables_newtable+0x43e/0x1990 [ 726.763349][T22652] nf_tables_newtable+0x43e/0x1990 [ 726.763401][T22652] nfnetlink_rcv+0x1288/0x28c0 [ 726.763499][T22652] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 726.763579][T22652] ? skb_clone+0x246/0x3a0 [ 726.763646][T22652] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.763676][T22652] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.763712][T22652] netlink_unicast+0x8ef/0xa80 [ 726.763760][T22652] netlink_sendmsg+0x7f0/0xb20 [ 726.763797][T22652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.763831][T22652] ? aa_sock_msg_perm+0x144/0x210 [ 726.763875][T22652] ? apparmor_socket_sendmsg+0x98/0x360 [ 726.763904][T22652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.763933][T22652] sock_sendmsg_nosec+0x14e/0x190 [ 726.763965][T22652] ____sys_sendmsg+0x54e/0x850 [ 726.764008][T22652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.764056][T22652] ? import_iovec+0x73/0xa0 [ 726.764095][T22652] ___sys_sendmsg+0x2a5/0x360 [ 726.764129][T22652] ? __lock_acquire+0x747/0x2de0 [ 726.764162][T22652] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.764242][T22652] ? __fget_files+0x3a2/0x420 [ 726.764267][T22652] ? __fget_files+0x2a/0x420 [ 726.764304][T22652] __x64_sys_sendmsg+0x1b1/0x290 [ 726.764330][T22652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.764393][T22652] do_syscall_64+0x166/0x520 [ 726.764417][T22652] ? trace_irq_disable+0x3b/0x140 [ 726.764445][T22652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.764470][T22652] ? clear_bhb_loop+0x70/0xc0 [ 726.764499][T22652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.764522][T22652] RIP: 0033:0x7fc92c99f559 [ 726.764545][T22652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.764564][T22652] RSP: 002b:00007fc92abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.764590][T22652] RAX: ffffffffffffffda RBX: 00007fc92cc25fa0 RCX: 00007fc92c99f559 [ 726.764607][T22652] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 726.764622][T22652] RBP: 00007fc92abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 726.764636][T22652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.764650][T22652] R13: 00007fc92cc26038 R14: 00007fc92cc25fa0 R15: 00007ffc04b11008 [ 726.764688][T22652] [ 727.749144][T22656] netlink: 976 bytes leftover after parsing attributes in process `syz.0.3750'. [ 727.768613][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'. [ 728.323554][T22682] tipc: Failed to remove unknown binding: 66,0,0/0:3262822/3262824 [ 728.323592][T22682] tipc: Failed to remove unknown binding: 66,0,0/0:3262822/3262823 [ 728.440050][T22682] tipc: Failed to remove unknown binding: 66,0,0/0:3262822/3262823 [ 728.440102][T22682] tipc: Failed to remove unknown binding: 66,0,0/0:3262822/3262824 [ 728.440127][T22682] tipc: Failed to remove unknown binding: 66,0,0/0:3262822/3262823 [ 729.860877][T22660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3751'. [ 729.945829][T22699] IPv6: NLM_F_REPLACE set, but no existing node found! [ 730.877687][T22718] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 731.035066][T22721] syzkaller0: entered promiscuous mode [ 731.035091][T22721] syzkaller0: entered allmulticast mode [ 731.968410][T22742] netlink: 'syz.1.3769': attribute type 1 has an invalid length. [ 732.979664][T22759] netlink: 'syz.4.3771': attribute type 4 has an invalid length. [ 733.974187][T22787] __nla_validate_parse: 1 callbacks suppressed [ 733.974214][T22787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3775'. [ 734.396190][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 734.484711][T22798] netlink: 'syz.0.3778': attribute type 2 has an invalid length. [ 734.484741][T22798] netlink: 'syz.0.3778': attribute type 2 has an invalid length. [ 734.605407][T22801] xt_hashlimit: overflow, try lower: 0/0 [ 736.111259][T22840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3788'. [ 736.209069][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 736.442656][T22854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3790'. [ 736.565191][T22856] netlink: 'syz.3.3790': attribute type 1 has an invalid length. [ 736.986424][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 736.986829][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 737.021010][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 737.024271][T22856] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 737.523005][T22869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3792'. [ 738.361789][T22890] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.362874][T22890] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.567769][T22896] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3799'. [ 739.066252][T22908] netlink: 'syz.3.3802': attribute type 5 has an invalid length. [ 739.726412][T22930] sctp: [Deprecated]: syz.1.3805 (pid 22930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.726412][T22930] Use struct sctp_sack_info instead [ 739.727412][T22932] sctp: [Deprecated]: syz.1.3805 (pid 22932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.727412][T22932] Use struct sctp_sack_info instead [ 741.299571][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'. [ 743.074554][T22995] Bluetooth: MGMT ver 1.23 [ 744.030152][T23006] : entered promiscuous mode [ 744.366134][T23031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3820'. [ 744.868727][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3822'. [ 744.950850][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3822'. [ 744.998951][T23027] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 745.155013][T17865] IPVS: starting estimator thread 0... [ 745.252093][T23050] IPVS: using max 26 ests per chain, 62400 per kthread [ 745.944059][T23062] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.075897][T23069] af_packet: tpacket_rcv: packet too big, clamped from 136 to 4294967286. macoff=82 [ 746.233712][T17307] IPVS: starting estimator thread 0... [ 746.358877][T23081] IPVS: using max 26 ests per chain, 62400 per kthread [ 746.559745][T23078] netlink: 'syz.3.3828': attribute type 3 has an invalid length. [ 746.649476][T23078] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 746.649501][T23078] netlink: 'syz.3.3828': attribute type 268 has an invalid length. [ 746.649519][T23078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3828'. [ 747.933366][T23089] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 748.317710][T16498] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 748.337130][T16498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 748.339754][T16498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 748.369953][T16498] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 748.384160][T16498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 748.485047][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3834'. [ 748.662061][T23101] syzkaller0: entered promiscuous mode [ 748.662087][T23101] syzkaller0: entered allmulticast mode [ 749.366106][T23124] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 749.885108][T23137] sctp: [Deprecated]: syz.1.3839 (pid 23137) Use of int in max_burst socket option. [ 749.885108][T23137] Use struct sctp_assoc_value instead [ 750.505685][T23157] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3843'. [ 750.505716][T23157] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3843'. [ 750.518541][T23157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3843'. [ 750.519937][T16498] Bluetooth: hci6: command tx timeout [ 750.644329][T23169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3842'. [ 751.793761][T23108] virt_wifi0 speed is unknown, defaulting to 1000 [ 751.818573][T23108] wg2 speed is unknown, defaulting to 1000 [ 751.839172][T23108] rxe_eth0 speed is unknown, defaulting to 1000 [ 752.336351][T23185] netlink: 'syz.3.3847': attribute type 4 has an invalid length. [ 752.430161][T23193] netlink: 'syz.3.3847': attribute type 4 has an invalid length. [ 752.539558][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3848'. [ 752.601078][T16498] Bluetooth: hci6: command tx timeout [ 752.801186][T23192] pimreg0: tun_chr_ioctl cmd 1074025673 [ 752.966619][T23203] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 753.156601][T23190] pimreg0: tun_chr_ioctl cmd 1074025677 [ 753.156732][T23190] pimreg0: linktype set to 774 [ 753.737566][T23108] wlan1 speed is unknown, defaulting to 1000 [ 753.788806][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3852'. [ 753.788838][T23218] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 754.014814][T23226] netlink: 'syz.0.3854': attribute type 1 has an invalid length. [ 754.301089][T23228] bridge_slave_1: left allmulticast mode [ 754.301116][T23228] bridge_slave_1: left promiscuous mode [ 754.301351][T23228] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.358692][T23228] bridge_slave_0: left allmulticast mode [ 754.358722][T23228] bridge_slave_0: left promiscuous mode [ 754.358963][T23228] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.720660][T16498] Bluetooth: hci6: command tx timeout [ 755.338834][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3856'. [ 755.485994][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3856'. [ 756.751553][T16498] Bluetooth: hci6: command tx timeout [ 757.881640][T23284] netlink: 'syz.3.3860': attribute type 21 has an invalid length. [ 757.881663][T23284] netlink: 'syz.3.3860': attribute type 22 has an invalid length. [ 757.881676][T23284] netlink: 'syz.3.3860': attribute type 23 has an invalid length. [ 757.881689][T23284] netlink: 'syz.3.3860': attribute type 25 has an invalid length. [ 757.881703][T23284] netlink: 'syz.3.3860': attribute type 26 has an invalid length. [ 757.881717][T23284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3860'. [ 758.922088][T23302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3865'. [ 759.338377][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3867'. [ 759.363254][T23310] hsr_slave_0: left promiscuous mode [ 759.379074][T23310] hsr_slave_1: left promiscuous mode [ 760.663103][T23108] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.663669][T23108] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.664010][T23108] bridge_slave_0: entered allmulticast mode [ 760.672759][T23108] bridge_slave_0: entered promiscuous mode [ 760.715887][T23108] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.716371][T23108] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.716724][T23108] bridge_slave_1: entered allmulticast mode [ 760.753163][T23108] bridge_slave_1: entered promiscuous mode [ 761.099564][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3871'. [ 761.272718][T23108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.333834][T23108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.671656][T23108] team0: Port device team_slave_0 added [ 761.718393][T23108] team0: Port device team_slave_1 added [ 762.035584][T23108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.035603][T23108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.035634][T23108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.207812][T23108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.207833][T23108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.207863][T23108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.632547][T23108] hsr_slave_0: entered promiscuous mode [ 762.649010][T23108] hsr_slave_1: entered promiscuous mode [ 762.662127][T23108] debugfs: 'hsr0' already exists in 'hsr' [ 762.662153][T23108] Cannot create hsr debugfs directory [ 762.773803][T23370] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 762.806304][T23373] netlink: 'syz.0.3880': attribute type 1 has an invalid length. [ 762.828316][T23374] netlink: 'syz.0.3880': attribute type 1 has an invalid length. [ 763.158186][T23375] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 763.158257][T23379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3881'. [ 763.198930][T23377] macvlan3: entered promiscuous mode [ 763.198954][T23377] macvlan3: entered allmulticast mode [ 763.201551][T23377] bond2: entered promiscuous mode [ 763.201572][T23377] bridge3: entered promiscuous mode [ 763.202424][T23377] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 763.393528][T23377] bond2: left promiscuous mode [ 763.393556][T23377] bridge3: left promiscuous mode [ 763.799503][T23387] netlink: 'syz.0.3882': attribute type 1 has an invalid length. [ 763.821685][T23381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.104988][T23392] netlink: 'syz.4.3883': attribute type 61 has an invalid length. [ 764.415434][T23395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3884'. [ 764.430660][T23398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3884'. [ 764.893417][T23407] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 764.893447][T23407] bridge5: entered allmulticast mode [ 764.909893][T23396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3886'. [ 765.967372][T23108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 766.176422][T23108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.202797][T23108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 766.457813][T23108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.484293][T23108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 766.988750][T23108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.003334][T23108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 767.090062][T23108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.300731][T23446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3894'. [ 767.315514][T23436] virt_wifi0 speed is unknown, defaulting to 1000 [ 767.370413][T23436] wg2 speed is unknown, defaulting to 1000 [ 767.395696][T23436] rxe_eth0 speed is unknown, defaulting to 1000 [ 768.495805][T23108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.687112][T23108] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.765388][T21561] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.765537][T21561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.887946][T21562] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.888060][T21562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.190822][T23466] netlink: 976 bytes leftover after parsing attributes in process `syz.4.3896'. [ 769.190851][T23466] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 770.055784][T23436] wlan1 speed is unknown, defaulting to 1000 [ 771.607462][T23487] tipc: Resetting bearer [ 771.642196][T23487] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.642322][T23487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.642668][T23487] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.642801][T23487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.806306][T23487] 8021q: adding VLAN 0 to HW filter on device .` [ 772.032850][T23498] pim6reg: entered allmulticast mode [ 772.046761][T23498] pim6reg: left allmulticast mode [ 772.750347][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 772.989085][T23492] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3902'. [ 772.989116][T23492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3902'. [ 772.989134][T23492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3902'. [ 773.385109][T23108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.190593][T23540] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 774.319137][T23540] bond3: (slave lo): Enslaving as an active interface with an up link [ 774.346005][T23540] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 774.834863][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 774.943949][T23544] Bluetooth: MGMT ver 1.23 [ 775.460997][T23556] bond3: (slave lo): Releasing backup interface [ 775.489922][T23556] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 775.763138][T23556] bridge_slave_0: left allmulticast mode [ 775.763168][T23556] bridge_slave_0: left promiscuous mode [ 775.763398][T23556] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.927163][T23556] bridge_slave_1: left allmulticast mode [ 775.927192][T23556] bridge_slave_1: left promiscuous mode [ 775.927536][T23556] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.013568][T23556] bond0: (slave bond_slave_0): Releasing backup interface [ 776.095388][T23556] bond0: (slave bond_slave_1): Releasing backup interface [ 776.170460][T23556] team0: Port device team_slave_0 removed [ 776.225138][T23556] team0: Port device team_slave_1 removed [ 776.229735][T23556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.229762][T23556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.269338][T23556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.269364][T23556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.321237][T23556] bond1: (slave gretap2): Releasing active interface [ 776.372800][T23559] tipc: Started in network mode [ 776.372837][T23559] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 776.373022][T23559] tipc: Enabled bearer , priority 0 [ 776.868531][T23108] veth0_vlan: entered promiscuous mode [ 777.016351][T23108] veth1_vlan: entered promiscuous mode [ 777.617354][ T24] tipc: Node number set to 11578026 [ 777.707731][T23108] veth0_macvtap: entered promiscuous mode [ 777.764548][T23108] veth1_macvtap: entered promiscuous mode [ 777.767428][T23587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3915'. [ 777.942301][T23108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.989476][T23108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.282607][ T6155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.377896][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.393710][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.394663][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.432159][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.432183][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.864777][T21562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.864800][T21562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.980891][T23620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3921'. [ 780.069173][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3922'. [ 781.326618][T23671] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 781.729689][T23680] 8021q: adding VLAN 0 to HW filter on device bond5 [ 781.758388][T23662] nci: nci_rx_work: unknown MT 0x1 [ 781.816297][T21560] nci: nci_rx_work: unknown MT 0x1 [ 783.704609][T23680] 8021q: adding VLAN 0 to HW filter on device bond6 [ 783.914286][T23711] bridge0: port 3(.`) entered blocking state [ 783.914492][T23711] bridge0: port 3(.`) entered disabled state [ 783.914677][T23711] .`: entered allmulticast mode [ 783.914695][T23711] bond_slave_0: entered allmulticast mode [ 783.914733][T23711] bond_slave_1: entered allmulticast mode [ 783.961143][T23711] .`: entered promiscuous mode [ 783.961165][T23711] bond_slave_0: entered promiscuous mode [ 783.961475][T23711] bond_slave_1: entered promiscuous mode [ 783.996874][T23711] bridge0: port 3(.`) entered blocking state [ 783.997072][T23711] bridge0: port 3(.`) entered forwarding state [ 784.438585][T23718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 784.567575][T23685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 786.089981][T23767] netlink: 'syz.6.3938': attribute type 29 has an invalid length. [ 786.211166][T23768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3935'. [ 787.987942][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 788.242718][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 788.953039][T23816] ip6gre1: entered promiscuous mode [ 788.981696][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 789.704040][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3950'. [ 789.766934][T23836] netlink: 'syz.6.3950': attribute type 8 has an invalid length. [ 796.394092][T23831] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 797.401262][T23885] Bluetooth: hci0: unsupported parameter 5135 [ 797.401285][T23885] Bluetooth: hci0: unsupported parameter 8192 [ 797.401299][T23885] Bluetooth: hci0: unsupported parameter 5135 [ 797.401312][T23885] Bluetooth: hci0: unsupported parameter 8192 [ 797.548127][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.548560][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.548912][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.549231][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.549614][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.584421][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.586635][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.588407][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 797.791430][T23885] ip_tables: iptables: counters copy to user failed while replacing table [ 799.238082][T23920] Cannot find map_set index 2 as target [ 799.453503][T23933] netlink: 'syz.6.3962': attribute type 3 has an invalid length. [ 799.459910][T23880] digital: digital_start_poll: Unknown protocol [ 799.899884][T23934] Bluetooth: hci0: Invalid link key type 28 for 66:55:44:33:22:11 [ 800.030340][T16498] Bluetooth: hci3: command 0x0406 tx timeout [ 801.238565][T23968] block nbd1: server does not support multiple connections per device. [ 801.255299][T23968] block nbd1: shutting down sockets [ 802.055984][T23984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3974'. [ 802.398811][T23989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3976'. [ 802.600925][T23998] net_ratelimit: 37 callbacks suppressed [ 802.600948][T23998] ip_tables: iptables: counters copy to user failed while replacing table [ 802.696505][T23987] xt_CT: No such helper "snmp_trap" [ 802.899797][T23989] xt_hashlimit: size too large, truncated to 1048576 [ 804.841556][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 804.841616][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 805.256340][T24059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 805.286541][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3987'. [ 805.434598][T24059] syzkaller1: entered promiscuous mode [ 805.434623][T24059] syzkaller1: entered allmulticast mode [ 805.552228][ T5637] Bluetooth: hci0: command 0x0401 tx timeout [ 806.134646][T24076] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3990'. [ 806.301666][T24082] syzkaller1: entered promiscuous mode [ 806.301692][T24082] syzkaller1: entered allmulticast mode [ 806.400701][T24086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'. [ 806.400968][T24086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'. [ 806.401273][T24086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'. [ 806.401532][T24086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'. [ 807.609398][T24099] __nla_validate_parse: 64 callbacks suppressed [ 807.609449][T24099] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3993'. [ 807.719342][T24111] netlink: 'syz.3.3995': attribute type 1 has an invalid length. [ 807.754102][T24099] tipc: Resetting bearer [ 807.953159][T24119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3997'. [ 808.106458][T24099] 8021q: adding VLAN 0 to HW filter on device eth0 [ 808.125689][T24122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3996'. [ 808.173691][T24099] 8021q: adding VLAN 0 to HW filter on device eth1 [ 808.228539][T24099] 8021q: adding VLAN 0 to HW filter on device eth2 [ 808.278632][T24099] 8021q: adding VLAN 0 to HW filter on device eth3 [ 808.314012][T24099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.359892][T24099] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 808.421618][T24099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.594261][T24119] ip6gre2: entered promiscuous mode [ 808.594287][T24119] ip6gre2: entered allmulticast mode [ 810.172778][T24148] xt_hashlimit: size too large, truncated to 1048576 [ 811.758142][T24180] Cannot find add_set index 1 as target [ 812.308144][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312654][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312689][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312719][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312748][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312777][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312805][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312833][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312862][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.312896][ T5641] hid-generic 0005:0B57:0005.0003: unknown main item tag 0x0 [ 812.431027][ T5641] hid-generic 0005:0B57:0005.0003: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 813.120100][T24201] x_tables: duplicate underflow at hook 2 [ 813.149597][T24200] netlink: 'syz.0.4009': attribute type 3 has an invalid length. [ 813.173376][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4009'. [ 813.239278][T24201] x_tables: duplicate underflow at hook 2 [ 813.710563][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 814.620016][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4014'. [ 814.620046][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4014'. [ 815.039505][T24229] netlink: 'syz.4.4015': attribute type 1 has an invalid length. [ 815.431150][T24229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 815.775531][T24227] bond2: (slave geneve2): making interface the new active one [ 815.831462][T24227] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 817.370011][T24267] Bluetooth: hci0: unsupported parameter 5161 [ 817.370037][T24267] Bluetooth: hci0: unsupported parameter 8192 [ 817.370053][T24267] Bluetooth: hci0: unsupported parameter 5161 [ 817.370067][T24267] Bluetooth: hci0: unsupported parameter 8192 [ 817.443988][T24271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4025'. [ 817.656067][T24271] ipvlan2: entered allmulticast mode [ 817.656091][T24271] syz_tun: entered allmulticast mode [ 818.181316][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4027'. [ 818.455409][T24301] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 818.543154][T24302] pim6reg1: entered promiscuous mode [ 818.543179][T24302] pim6reg1: entered allmulticast mode [ 819.196283][T24312] netlink: 'syz.1.4031': attribute type 10 has an invalid length. [ 819.278100][T24314] netlink: 'syz.1.4031': attribute type 10 has an invalid length. [ 819.366186][T24312] team0: Port device dummy0 added [ 819.433244][T24314] team0: Port device dummy0 removed [ 819.780093][T23657] tipc: Resetting bearer [ 819.876725][T24327] netlink: 'syz.0.4034': attribute type 3 has an invalid length. [ 820.105502][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'. [ 821.225159][T24307] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4030'. [ 821.225186][T24307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4030'. [ 821.225206][T24307] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4030'. [ 823.258078][T24402] ip_tables: iptables: counters copy to user failed while replacing table [ 823.692651][T24409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4046'. [ 824.559848][T24425] ip_tables: iptables: counters copy to user failed while replacing table [ 824.716965][T21560] batadv0: left promiscuous mode [ 824.719412][T21560] bridge0: port 1(batadv0) entered disabled state [ 825.445548][T24447] syz.1.4054: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 825.445633][T24447] CPU: 1 UID: 0 PID: 24447 Comm: syz.1.4054 Not tainted syzkaller #0 PREEMPT(full) [ 825.445681][T24447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 825.445697][T24447] Call Trace: [ 825.445706][T24447] [ 825.445717][T24447] dump_stack_lvl+0xe8/0x150 [ 825.445762][T24447] warn_alloc+0x24d/0x270 [ 825.445796][T24447] ? kasan_save_track+0x4f/0x80 [ 825.445828][T24447] ? kasan_save_track+0x3e/0x80 [ 825.445863][T24447] ? __pfx_warn_alloc+0x10/0x10 [ 825.445891][T24447] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 825.445928][T24447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.445977][T24447] __vmalloc_node_range_noprof+0x127/0x1540 [ 825.446032][T24447] ? rcu_is_watching+0x16/0xb0 [ 825.446073][T24447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 825.446101][T24447] ? __kmalloc_cache_noprof+0x31c/0x600 [ 825.446135][T24447] ? __kmalloc_cache_noprof+0x148/0x600 [ 825.446167][T24447] ? xskq_create+0x56/0x220 [ 825.446213][T24447] xskq_create+0x148/0x220 [ 825.446251][T24447] ? xsk_init_queue+0x8a/0xe0 [ 825.446290][T24447] xsk_init_queue+0x8a/0xe0 [ 825.446331][T24447] xsk_setsockopt+0x52a/0x960 [ 825.446369][T24447] ? __pfx_xsk_setsockopt+0x10/0x10 [ 825.446409][T24447] ? __pfx_aa_sk_perm+0x10/0x10 [ 825.446454][T24447] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 825.446483][T24447] ? __pfx_xsk_setsockopt+0x10/0x10 [ 825.446520][T24447] do_sock_setsockopt+0x17c/0x1b0 [ 825.446563][T24447] __x64_sys_setsockopt+0x13d/0x1b0 [ 825.446607][T24447] do_syscall_64+0x166/0x520 [ 825.446630][T24447] ? trace_irq_disable+0x3b/0x140 [ 825.446666][T24447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.446691][T24447] ? clear_bhb_loop+0x70/0xc0 [ 825.446721][T24447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.446746][T24447] RIP: 0033:0x7fcc0cf9f559 [ 825.446768][T24447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.446789][T24447] RSP: 002b:00007fcc0de9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 825.446813][T24447] RAX: ffffffffffffffda RBX: 00007fcc0d225fa0 RCX: 00007fcc0cf9f559 [ 825.446832][T24447] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 825.446846][T24447] RBP: 00007fcc0d036b20 R08: 0000000000000004 R09: 0000000000000000 [ 825.446862][T24447] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 825.446877][T24447] R13: 00007fcc0d226038 R14: 00007fcc0d225fa0 R15: 00007ffe4a2cf828 [ 825.446917][T24447] [ 825.446950][T24447] Mem-Info: [ 825.446961][T24447] active_anon:9361 inactive_anon:0 isolated_anon:0 [ 825.446961][T24447] active_file:17 inactive_file:43616 isolated_file:0 [ 825.446961][T24447] unevictable:0 dirty:137 writeback:0 [ 825.446961][T24447] slab_reclaimable:12714 slab_unreclaimable:136327 [ 825.446961][T24447] mapped:45637 shmem:3382 pagetables:3679 [ 825.446961][T24447] sec_pagetables:0 bounce:0 [ 825.446961][T24447] kernel_misc_reclaimable:0 [ 825.446961][T24447] free:1228938 free_pcp:9198 free_cma:0 [ 825.447025][T24447] Node 0 active_anon:37444kB inactive_anon:0kB active_file:68kB inactive_file:174256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182548kB dirty:548kB writeback:0kB shmem:13528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19556kB pagetables:14572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 825.447092][T24447] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 825.527889][T24447] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.527968][T24447] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 825.528012][T24447] Node 0 DMA32 free:944696kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37244kB inactive_anon:0kB active_file:68kB inactive_file:174256kB unevictable:0kB writepending:548kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:35820kB local_pcp:16196kB free_cma:0kB [ 825.528086][T24447] lowmem_reserve[]: 0 0 0 0 0 [ 825.528127][T24447] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.528193][T24447] lowmem_reserve[]: 0 0 0 0 0 [ 825.528242][T24447] Node 1 Normal free:3955696kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1152kB local_pcp:240kB free_cma:0kB [ 825.528311][T24447] lowmem_reserve[]: 0 0 0 0 0 [ 825.528356][T24447] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 825.528520][T24447] Node 0 DMA32: 693*4kB (UE) 698*8kB (UM) 432*16kB (UME) 63*32kB (UME) 110*64kB (UME) 274*128kB (UM) 372*256kB (UM) 243*512kB (UM) 134*1024kB (UME) 8*2048kB (UM) 125*4096kB (UM) = 944644kB [ 825.528719][T24447] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 825.528836][T24447] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 4*128kB (UM) 7*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 963*4096kB (M) = 3955696kB [ 825.529030][T24447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.529050][T24447] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.529069][T24447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.529088][T24447] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.529113][T24447] 47011 total pagecache pages [ 825.529123][T24447] 0 pages in swap cache [ 825.529130][T24447] Free swap = 124996kB [ 825.529139][T24447] Total swap = 124996kB [ 825.529149][T24447] 2097051 pages RAM [ 825.529163][T24447] 0 pages HighMem/MovableOnly [ 825.529171][T24447] 433831 pages reserved [ 825.529179][T24447] 0 pages cma reserved [ 826.668222][T21560] dvmrp0: left allmulticast mode [ 828.222831][T21560] xfrm0 (unregistering): left allmulticast mode [ 831.027748][T21560] team0: Port device xfrm0 removed [ 831.085238][T21560] bond3 (unregistering): (slave erspan1): Releasing active interface [ 831.168224][T21560] bond10 (unregistering): (slave gretap0): Releasing active interface [ 831.659772][T21560] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 831.727859][T21560] bond0 (unregistering): Released all slaves [ 831.746103][T21560] bond1 (unregistering): Released all slaves [ 831.770780][T21560] bond2 (unregistering): Released all slaves [ 831.806174][T21560] bond3 (unregistering): Released all slaves [ 831.844650][T21560] bond4 (unregistering): (slave veth3): Releasing active interface [ 831.846916][T21560] bond4 (unregistering): Released all slaves [ 831.907139][T21560] bond5 (unregistering): (slave macvlan0): Releasing active interface [ 831.922920][T21560] bond5 (unregistering): Released all slaves [ 831.948685][T21560] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 831.948715][T21560] wireguard0: left promiscuous mode [ 831.969930][T21560] bond6 (unregistering): (slave wireguard1): Releasing backup interface [ 831.989014][T21560] bond6 (unregistering): (slave wireguard2): Releasing backup interface [ 832.006169][T21560] bond6 (unregistering): (slave wireguard3): Releasing backup interface [ 832.008812][T21560] bond6 (unregistering): Released all slaves [ 832.038815][T21560] bond7 (unregistering): Released all slaves [ 832.063382][T21560] bond8 (unregistering): Released all slaves [ 832.129468][T21560] bond9 (unregistering): Released all slaves [ 832.166362][T21560] bond10 (unregistering): Released all slaves [ 832.192733][T21560] bond11 (unregistering): Released all slaves [ 832.238365][T21560] bond12 (unregistering): Released all slaves [ 832.868753][T24468] syzkaller0: entered promiscuous mode [ 832.868783][T24468] syzkaller0: entered allmulticast mode [ 832.891505][ T24] wg2 speed is unknown, defaulting to 1000 [ 832.891551][ T24] syz7: Port: 1 Link DOWN [ 832.915738][T21560] tipc: Disabling bearer [ 832.942252][T21560] tipc: Left network mode [ 833.732747][T24483] netlink: 'syz.0.4060': attribute type 6 has an invalid length. [ 833.773498][T21560] IPVS: stopping backup sync thread 7056 ... [ 834.052871][T24500] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4062'. [ 834.135853][T24501] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20001 [ 834.822759][T24489] –: renamed from virt_wifi0 (while UP) [ 834.988620][T24494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4063'. [ 837.425931][T24555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4074'. [ 837.840367][T24557] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 838.137628][T21560] hsr_slave_0: left promiscuous mode [ 838.178014][T21560] hsr_slave_1: left promiscuous mode [ 838.261968][T21560] veth0_macvtap: left promiscuous mode [ 838.262293][T21560] veth1_vlan: left promiscuous mode [ 838.262391][T21560] @ÿ: left promiscuous mode [ 839.554854][T16498] Bluetooth: hci2: command 0x040f tx timeout [ 841.263134][T23650] smbdirect: ib_dev[syz7] removed [ 842.478682][T24632] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 842.557485][T24632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.644521][T24632] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 842.696501][T24641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'. [ 842.953920][T24646] nbd: couldn't find a device at index 0 [ 844.142247][T24664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4090'. [ 844.372020][T24665] netlink: 'syz.4.4091': attribute type 1 has an invalid length. [ 844.485976][T24674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4091'. [ 844.766977][T24665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 844.951177][T24675] gretap1: entered promiscuous mode [ 845.302181][T24665] bond5 (unregistering): Released all slaves [ 845.644221][T21560] IPVS: stop unused estimator thread 0... [ 846.926539][T24714] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4098'. [ 847.355051][T24731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4105'. [ 847.418037][T24731] ip6tnl3: entered promiscuous mode [ 848.197932][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4107'. [ 848.358263][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 848.359975][T24755] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 848.575263][T24746] 8021q: adding VLAN 0 to HW filter on device bond5 [ 848.576650][T24752] bond5: option ad_select: unable to set because the bond device is up [ 848.901809][T24753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 848.976083][T24780] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4112'. [ 849.000769][T24781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4112'. [ 849.121171][T24753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.156260][T24753] syzkaller0: left promiscuous mode [ 849.270468][T17318] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 849.274122][T24753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 849.344289][T24753] ip6gre2: left promiscuous mode [ 849.426258][T21568] bond2: (slave bridge3): link status up again after 0 ms [ 849.445871][T17318] bond2: (slave bridge3): link status up again after 0 ms [ 849.445918][T17318] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 849.474252][ T6153] bond2: (slave bridge3): link status up again after 0 ms [ 849.479721][T24753] ip6tnl3: left promiscuous mode [ 849.497043][T23636] bond2: (slave bridge3): link status up again after 0 ms [ 849.511292][T23653] bond2: (slave bridge3): link status up again after 0 ms [ 849.609616][ T6153] bond2: (slave bridge3): link status up again after 0 ms [ 849.620397][T23636] bond2: (slave bridge3): link status up again after 0 ms [ 849.642913][T17318] bond2: (slave bridge3): link status up again after 0 ms [ 849.875917][T24791] xt_cgroup: invalid path, errno=-2 [ 850.008597][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4113'. [ 850.030104][T23657] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 850.503166][ T24] hid-generic 0005:07C0:8001.0004: item fetching failed at offset 0/1 [ 850.503918][ T24] hid-generic 0005:07C0:8001.0004: probe with driver hid-generic failed with error -22 [ 850.693963][T23657] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 850.775169][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4116'. [ 851.029012][T24808] netlink: 'syz.0.4118': attribute type 1 has an invalid length. [ 853.155163][T24846] x_tables: duplicate underflow at hook 1 [ 853.474891][ T5637] Bluetooth: hci6: command 0x0405 tx timeout [ 853.763177][T24853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4125'. [ 853.763218][T24853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4125'. [ 853.838514][T24857] TCP: TCP_TX_DELAY enabled [ 854.011842][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4128'. [ 854.211928][T24862] 8021q: adding VLAN 0 to HW filter on device bond6 [ 854.270754][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 854.404733][T24867] bond0: left promiscuous mode [ 854.447531][T24867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.578515][T24867] bond6: (slave bond0): Enslaving as an active interface with an up link [ 854.591013][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 854.625813][T23647] net_ratelimit: 25 callbacks suppressed [ 854.625837][T23647] bond2: (slave bridge3): failed to get link speed/duplex [ 854.796140][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 854.915196][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 855.021369][T23635] bond2: (slave bridge3): failed to get link speed/duplex [ 855.133075][T23657] bond2: (slave bridge3): failed to get link speed/duplex [ 855.241314][T23635] bond2: (slave bridge3): failed to get link speed/duplex [ 855.358202][T23641] bond2: (slave bridge3): failed to get link speed/duplex [ 855.483017][T23635] bond2: (slave bridge3): failed to get link speed/duplex [ 856.462001][T23635] bond2: (slave bridge3): failed to get link speed/duplex [ 857.122268][ T6153] bond2: (slave bridge3): failed to get link speed/duplex [ 857.929918][T24944] netlink: 'syz.4.4144': attribute type 10 has an invalid length. [ 857.929944][T24944] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4144'. [ 859.649231][T24969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4148'. [ 859.701203][ T6153] net_ratelimit: 9 callbacks suppressed [ 859.701223][ T6153] bond2: (slave bridge3): failed to get link speed/duplex [ 859.811022][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 859.944438][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4152'. [ 860.036961][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4150'. [ 860.181506][T24989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4150'. [ 860.596438][T23635] bond2: (slave bridge3): failed to get link speed/duplex [ 860.618392][T24975] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 861.580279][T21560] bond2: (slave bridge3): link status up again after 0 ms [ 861.600279][T21560] bond2: (slave bridge3): link status up again after 0 ms [ 861.600309][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 861.600435][T24972] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 861.859430][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 862.152157][ T24] wlan1 speed is unknown, defaulting to 1000 [ 862.152202][ T24] syz2: Port: 1 Link DOWN [ 862.152335][ T6153] bond2: (slave bridge3): failed to get link speed/duplex [ 862.660421][T23651] bond2: (slave bridge3): failed to get link speed/duplex [ 862.990807][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 862.991060][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 863.030805][T25014] sock: sock_timestamping_bind_phc: sock not bind to device [ 863.260701][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 864.059919][T25036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4157'. [ 864.059957][T25036] macvlan0: entered promiscuous mode [ 864.060449][T25036] netlink: 'syz.1.4157': attribute type 1 has an invalid length. [ 864.060468][T25036] netlink: 'syz.1.4157': attribute type 2 has an invalid length. [ 864.668713][T25043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.863378][T25043] batadv_slave_0: entered promiscuous mode [ 864.902189][T25043] net_ratelimit: 5 callbacks suppressed [ 864.902212][T25043] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 864.904142][T23655] bond2: (slave bridge3): failed to get link speed/duplex [ 864.960915][T25049] netlink: 'syz.6.4160': attribute type 12 has an invalid length. [ 865.084189][T23635] bond2: (slave bridge3): failed to get link speed/duplex [ 865.204245][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 865.317318][T23657] bond2: (slave bridge3): failed to get link speed/duplex [ 865.421803][T23651] bond2: (slave bridge3): failed to get link speed/duplex [ 865.530641][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 865.605017][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4164'. [ 865.641078][T21570] bond2: (slave bridge3): failed to get link speed/duplex [ 865.751403][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 865.774204][T25073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4165'. [ 865.808992][T25073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4165'. [ 865.891814][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 867.333195][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 867.957681][T25116] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4171'. [ 868.721145][T25134] netlink: 'syz.0.4175': attribute type 4 has an invalid length. [ 869.983090][T23663] net_ratelimit: 21 callbacks suppressed [ 869.983113][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 870.094206][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 870.201909][T23655] bond2: (slave bridge3): failed to get link speed/duplex [ 870.331882][T23657] bond2: (slave bridge3): failed to get link speed/duplex [ 870.442667][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 870.553087][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 870.632769][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4182'. [ 870.662831][T23635] bond2: (slave bridge3): failed to get link speed/duplex [ 870.696248][T25176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4182'. [ 870.779088][T23657] bond2: (slave bridge3): failed to get link speed/duplex [ 870.883253][T23657] bond2: (slave bridge3): failed to get link speed/duplex [ 870.955963][T25176] geneve3: entered promiscuous mode [ 870.996832][T23657] bond2: (slave bridge3): failed to get link speed/duplex [ 871.672152][T25187] veth0_to_bridge: entered promiscuous mode [ 871.691764][T25187] macvtap0: entered allmulticast mode [ 871.691787][T25187] veth0_to_bridge: entered allmulticast mode [ 871.748128][T25187] veth0_to_bridge: left allmulticast mode [ 871.748168][T25187] veth0_to_bridge: left promiscuous mode [ 872.209702][T25193] vlan0: entered allmulticast mode [ 872.209726][T25193] bond0: entered allmulticast mode [ 873.078321][T25206] netlink: 'syz.6.4187': attribute type 10 has an invalid length. [ 873.932746][T25206] team0 (unregistering): Port device team_slave_0 removed [ 874.022276][T25206] team0 (unregistering): Port device team_slave_1 removed [ 874.101699][T25216] syzkaller1: entered promiscuous mode [ 874.101723][T25216] syzkaller1: entered allmulticast mode [ 874.941501][T25252] netlink: 'syz.1.4192': attribute type 2 has an invalid length. [ 874.941526][T25252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4192'. [ 875.031009][T21560] net_ratelimit: 18 callbacks suppressed [ 875.031033][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 875.084492][T25258] netlink: 'syz.1.4192': attribute type 2 has an invalid length. [ 875.084516][T25258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4192'. [ 875.156337][T23641] bond2: (slave bridge3): failed to get link speed/duplex [ 875.273121][T21560] bond2: (slave bridge3): failed to get link speed/duplex [ 875.357652][T25266] sctp: [Deprecated]: syz.6.4196 (pid 25266) Use of int in maxseg socket option. [ 875.357652][T25266] Use struct sctp_assoc_value instead [ 875.592726][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 875.665436][T25263] netlink: 'syz.0.4195': attribute type 10 has an invalid length. [ 875.745219][T25263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.784044][T25271] nbd: couldn't find a device at index 0 [ 875.813928][T25263] team0: Port device netdevsim1 added [ 875.822201][T25263] netlink: 'syz.0.4195': attribute type 10 has an invalid length. [ 875.909391][T25263] team0: Port device netdevsim1 removed [ 875.924364][T25279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4197'. [ 875.986747][T25281] netlink: 'syz.6.4200': attribute type 4 has an invalid length. [ 875.986771][T25281] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4200'. [ 876.129352][T25263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.157648][T25263] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 876.180466][T25263] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 876.207840][T25263] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 876.230713][T23659] bond2: (slave bridge3): failed to get link speed/duplex [ 876.343335][T23663] bond2: (slave bridge3): failed to get link speed/duplex [ 876.432278][ T33] INFO: task syz.5.3768:22739 blocked for more than 143 seconds. [ 876.432308][ T33] Not tainted syzkaller #0 [ 876.432321][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 876.432333][ T33] task:syz.5.3768 state:D stack:26040 pid:22739 tgid:22734 ppid:21612 task_flags:0x400140 flags:0x00080002 [ 876.433948][ T33] Call Trace: [ 876.433959][ T33] [ 876.433977][ T33] __schedule+0x17dd/0x5820 [ 876.434156][ T33] ? __pfx___schedule+0x10/0x10 [ 876.434204][ T33] ? schedule+0x90/0x2b0 [ 876.434245][ T33] schedule+0x164/0x2b0 [ 876.434283][ T33] schedule_preempt_disabled+0x13/0x30 [ 876.434318][ T33] __mutex_lock+0x7c4/0x15a0 [ 876.434349][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 876.434379][ T33] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 876.435630][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 876.435655][ T33] ? __kasan_kmalloc+0x93/0xb0 [ 876.435708][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 876.435736][ T33] ? do_syscall_64+0x166/0x520 [ 876.435759][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.435797][ T33] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 876.435833][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 876.435879][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 876.435908][ T33] ? trace_kmalloc+0x2a/0xf0 [ 876.435941][ T33] ? __kmalloc_noprof+0x387/0x710 [ 876.435975][ T33] ? __nla_parse+0x40/0x60 [ 876.436005][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 876.436034][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 876.436068][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 876.436116][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 876.436169][ T33] ? bpf_lsm_capable+0x9/0x20 [ 876.436209][ T33] ? security_capable+0x7e/0x2c0 [ 876.436298][ T33] genl_rcv_msg+0x614/0x7a0 [ 876.436343][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 876.436379][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 876.437709][ T33] netlink_rcv_skb+0x226/0x4a0 [ 876.437745][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 876.437785][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 876.437833][ T33] ? down_read+0x2b9/0x320 [ 876.437866][ T33] genl_rcv+0x28/0x40 [ 876.437900][ T33] netlink_unicast+0x8ef/0xa80 [ 876.437948][ T33] netlink_sendmsg+0x7f0/0xb20 [ 876.437988][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.438023][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 876.438062][ T33] ? apparmor_socket_sendmsg+0x18b/0x360 [ 876.438092][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.438122][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 876.438158][ T33] ____sys_sendmsg+0x54e/0x850 [ 876.438203][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.438251][ T33] ? import_iovec+0x73/0xa0 [ 876.438291][ T33] ___sys_sendmsg+0x2a5/0x360 [ 876.438326][ T33] ? __lock_acquire+0x747/0x2de0 [ 876.438360][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.438426][ T33] ? futex_wait+0x2a2/0x390 [ 876.438499][ T33] ? __fget_files+0x3a2/0x420 [ 876.438526][ T33] ? __fget_files+0x2a/0x420 [ 876.438565][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 876.438593][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.438657][ T33] do_syscall_64+0x166/0x520 [ 876.438687][ T33] ? trace_irq_disable+0x3b/0x140 [ 876.438717][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.438742][ T33] ? clear_bhb_loop+0x70/0xc0 [ 876.438773][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.438798][ T33] RIP: 0033:0x7fcdb179f559 [ 876.438821][ T33] RSP: 002b:00007fcdb271b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.438848][ T33] RAX: ffffffffffffffda RBX: 00007fcdb1a25fa0 RCX: 00007fcdb179f559 [ 876.438867][ T33] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 000000000000000a [ 876.438884][ T33] RBP: 00007fcdb1836b20 R08: 0000000000000000 R09: 0000000000000000 [ 876.438900][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.438915][ T33] R13: 00007fcdb1a26038 R14: 00007fcdb1a25fa0 R15: 00007fffb7cc8ba8 [ 876.438955][ T33] [ 876.439005][ T33] [ 876.439005][ T33] Showing all locks held in the system: [ 876.439017][ T33] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 876.439103][ T33] #0: ffff8880b8428618 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 876.483162][ T33] locks held by pr/ttyS0/32: 2, last CPU#1: [ 876.483248][ T33] #0: ffffffff8fc33858 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 876.483879][ T33] #1: ffffffff9bda1af8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 876.484675][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 876.484728][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 876.484965][ T33] locks held by getty/5387: 2, on CPU#1: [ 876.485015][ T33] #0: ffff88803871f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 876.485253][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 876.485474][ T33] locks held by syz.2.3491/21308: 2, on CPU#1: [ 876.485490][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 876.485646][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 876.485805][ T33] locks held by kworker/u8:23/21560: 4, last CPU#1: [ 876.485847][ T33] #0: ffff88808ed0d948 ((wq_completion)krds_cp_wq#22/6#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.486035][ T33] #1: ffffc90004f17c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.486204][ T33] #2: ffff888054563380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 876.486454][ T33] #3: ffff88803bff9de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 876.486672][ T33] locks held by kworker/u8:30/21570: 4, last CPU#1: [ 876.486708][ T33] #0: ffff88808ed0f948 ((wq_completion)krds_cp_wq#22/2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.486875][ T33] #1: ffffc90005017c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.487041][ T33] #2: ffff88805454d880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 876.487223][ T33] #3: ffff88803bffaba0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 876.487387][ T33] locks held by syz.5.3768/22739: 2, on CPU#1: [ 876.487429][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 876.827021][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 876.827089][ T33] locks held by kworker/u8:48/23636: 4, last CPU#1: [ 876.827108][ T33] #0: ffff888034c12948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.827171][ T33] #1: ffffc90005dcfc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.827236][ T33] #2: ffff888066a759c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 876.827382][ T33] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 876.827486][ T33] locks held by kworker/u8:53/23641: 3, last CPU#1: [ 876.827504][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.827584][ T33] #1: ffffc90005e1fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.827659][ T33] #2: ffff888048c1e258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 876.827795][ T33] locks held by kworker/u8:56/23647: 4, last CPU#1: [ 876.827813][ T33] #0: ffff88808ed0f148 ((wq_completion)krds_cp_wq#22/3#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.827883][ T33] #1: ffffc900038bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.827948][ T33] #2: ffff88805454d580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 876.828015][ T33] #3: ffff88804ab99020 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 876.828083][ T33] locks held by kworker/u8:58/23649: 3, on CPU#1: [ 876.828101][ T33] #0: ffff88801d3b7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.828165][ T33] #1: ffffc90006057c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.828231][ T33] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 876.828316][ T33] locks held by kworker/u8:59/23650: 3, last CPU#1: [ 876.828334][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.964208][ T33] #1: ffffc90006067c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.964295][ T33] #2: ffff888078d91258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 876.964376][ T33] locks held by kworker/u8:61/23652: 2, last CPU#1: [ 876.964394][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.964483][ T33] #1: ffffc90006087c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.964551][ T33] locks held by kworker/u8:65/23657: 4, last CPU#1: [ 876.964568][ T33] #0: ffff8880236ec148 ((wq_completion)krds_cp_wq#22/7#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.964639][ T33] #1: ffffc90005befc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.964715][ T33] #2: ffff888054563080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 876.964790][ T33] #3: ffff88804ab9f060 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 876.964859][ T33] locks held by kworker/u8:67/23659: 3, last CPU#1: [ 876.964877][ T33] #0: ffff88808ed0e948 ((wq_completion)krds_cp_wq#22/4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.964947][ T33] #1: ffffc900020bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 876.965012][ T33] #2: ffff888054563980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 876.965082][ T33] locks held by syz.0.4195/25262: 2, on CPU#0: [ 876.965100][ T33] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 876.965306][ T33] #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 876.965376][ T33] locks held by syz.4.4198/25278: 2, last CPU#1: [ 876.965418][ T33] #0: ffff8880216c3440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 876.965477][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 876.965536][ T33] locks held by syz.3.4199/25290: 1, on CPU#0: [ 876.965554][ T33] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 877.180120][ T33] locks held by dhcpcd-run-hook/25294: 3, last CPU#0: [ 877.180744][ T33] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 877.180848][ T33] #1: ffff88807c640f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 877.180908][ T33] #2: ffff888079f6c080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 877.181002][ T33] [ 877.181010][ T33] ============================================= [ 877.181010][ T33] [ 877.181032][ T33] NMI backtrace for cpu 1 [ 877.181048][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 877.181074][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 877.181089][ T33] Call Trace: [ 877.181098][ T33] [ 877.181109][ T33] dump_stack_lvl+0xe8/0x150 [ 877.181147][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 877.181233][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 877.181281][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 877.181318][ T33] sys_info+0x135/0x170 [ 877.181376][ T33] watchdog+0xfd2/0x1030 [ 877.181423][ T33] ? watchdog+0x1c7/0x1030 [ 877.181459][ T33] kthread+0x38b/0x480 [ 877.181482][ T33] ? __pfx_watchdog+0x10/0x10 [ 877.181507][ T33] ? __pfx_kthread+0x10/0x10 [ 877.181532][ T33] ret_from_fork+0x514/0xb70 [ 877.181571][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 877.181595][ T33] ? __switch_to+0xc78/0x1410 [ 877.181631][ T33] ? __pfx_kthread+0x10/0x10 [ 877.181663][ T33] ret_from_fork_asm+0x1a/0x30 [ 877.181704][ T33] [ 877.181739][ T33] Sending NMI from CPU 1 to CPUs 0: [ 877.181775][ C0] NMI backtrace for cpu 0 [ 877.181789][ C0] CPU: 0 UID: 0 PID: 23635 Comm: kworker/u8:47 Not tainted syzkaller #0 PREEMPT(full) [ 877.181810][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 877.181823][ C0] Workqueue: krds_cp_wq#22/5 rds_connect_worker [ 877.181884][ C0] RIP: 0010:tick_program_event+0x40/0x120 [ 877.181909][ C0] Code: 00 00 00 00 fc ff df 49 bc ff ff ff ff ff ff ff 7f e8 84 83 0f 00 48 c7 c7 e0 0c 10 8c e8 78 82 3b 0a 65 4c 8b 3d 18 fd e2 12 <4d> 89 fe 4c 89 e7 48 89 de e8 22 89 0f 00 4c 39 e3 74 58 49 83 c7 [ 877.181925][ C0] RSP: 0018:ffffc90000007dc8 EFLAGS: 00000006 [ 877.181940][ C0] RAX: 0000000000000000 RBX: 000000cc3a004ee0 RCX: 8000000000000103 [ 877.181954][ C0] RDX: 8000000000000100 RSI: ffffffff8c100ce0 RDI: ffffffff8c6e1780 [ 877.181968][ C0] RBP: 0000000000000001 R08: 0000000000000100 R09: 1ffffffff22f8257 [ 877.181980][ C0] R10: dffffc0000000000 R11: fffffbfff22f8258 R12: 7fffffffffffffff [ 877.181995][ C0] R13: dffffc0000000000 R14: ffff8880b842864f R15: ffff8880b8423f40 [ 877.182009][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 877.182024][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 877.182037][ C0] CR2: 00007fe11121b7e8 CR3: 00000000745a8000 CR4: 00000000003526f0 [ 877.182053][ C0] Call Trace: [ 877.182061][ C0] [ 877.182071][ C0] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 877.182105][ C0] irqentry_exit+0x961/0x9b0 [ 877.182127][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.182155][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 877.182207][ C0] Code: f7 e8 fd 1f ad f5 f7 c3 00 02 00 00 74 05 e8 d0 b2 d9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 19 9e f5 65 48 8b 05 1c 4d a4 08 48 85 c0 74 18 5b 41 5e c3 [ 877.182222][ C0] RSP: 0018:ffffc90000007f48 EFLAGS: 00000206 [ 877.182237][ C0] RAX: 0000000000000002 RBX: 0000000000000287 RCX: 8000000000000102 [ 877.182250][ C0] RDX: 0000000000000002 RSI: ffffffff8e486f08 RDI: 0000000000000001 [ 877.182262][ C0] RBP: 8000000000000101 R08: ffffffff917c12bf R09: 1ffffffff22f8257 [ 877.182276][ C0] R10: dffffc0000000000 R11: fffffbfff22f8258 R12: 0000000000000008 [ 877.182289][ C0] R13: 0000000000000009 R14: ffff8880b8428600 R15: 0000000000000000 [ 877.182312][ C0] handle_softirqs+0x265/0x8d0 [ 877.182341][ C0] ? __inet6_bind+0x301/0xf30 [ 877.182370][ C0] do_softirq+0x77/0xd0 [ 877.182391][ C0] [ 877.182397][ C0] [ 877.182406][ C0] __local_bh_enable_ip+0x100/0x140 [ 877.182431][ C0] __inet6_bind+0x301/0xf30 [ 877.182465][ C0] kernel_bind+0x13e/0x1c0 [ 877.182486][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 877.182514][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 877.182546][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 877.182581][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 877.182614][ C0] ? lock_acquire+0x115/0x350 [ 877.182641][ C0] rds_connect_worker+0x1d8/0x290 [ 877.182663][ C0] ? process_scheduled_works+0x97a/0x1630 [ 877.182689][ C0] process_scheduled_works+0xc3d/0x1630 [ 877.182732][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 877.182760][ C0] ? assign_work+0x3cf/0x5d0 [ 877.182787][ C0] worker_thread+0xa47/0xfb0 [ 877.182829][ C0] kthread+0x38b/0x480 [ 877.182847][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.182871][ C0] ? __pfx_kthread+0x10/0x10 [ 877.182890][ C0] ret_from_fork+0x514/0xb70 [ 877.182911][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 877.182930][ C0] ? __switch_to+0xc78/0x1410 [ 877.182959][ C0] ? __pfx_kthread+0x10/0x10 [ 877.182978][ C0] ret_from_fork_asm+0x1a/0x30 [ 877.183005][ C0] [ 877.603404][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 878.206354][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 878.215491][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 878.225596][ T33] Call Trace: [ 878.228895][ T33] [ 878.231857][ T33] vpanic+0x56d/0xa60 [ 878.235884][ T33] ? __pfx___schedule+0x10/0x10 [ 878.240783][ T33] ? __pfx_vpanic+0x10/0x10 [ 878.245430][ T33] panic+0xc5/0xd0 [ 878.249194][ T33] ? __pfx_panic+0x10/0x10 [ 878.253651][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 878.259145][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 878.264549][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 878.270750][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 878.276963][ T33] watchdog+0x102b/0x1030 [ 878.281344][ T33] ? watchdog+0x1c7/0x1030 [ 878.285809][ T33] kthread+0x38b/0x480 [ 878.289922][ T33] ? __pfx_watchdog+0x10/0x10 [ 878.294641][ T33] ? __pfx_kthread+0x10/0x10 [ 878.299264][ T33] ret_from_fork+0x514/0xb70 [ 878.303889][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 878.309047][ T33] ? __switch_to+0xc78/0x1410 [ 878.313774][ T33] ? __pfx_kthread+0x10/0x10 [ 878.318396][ T33] ret_from_fork_asm+0x1a/0x30 [ 878.323240][ T33] [ 878.326912][ T33] Kernel Offset: disabled [ 878.331254][ T33] Rebooting in 86400 seconds..