last executing test programs: 8m15.263023306s ago: executing program 0 (id=4411): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000002e40)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002e80)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000002f00)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000002f40)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000003000)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$inet(0x2, 0x3, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3}, 0x10000) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c0000000706010800000000007ae0a4728323e1e800010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4004085) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x4, 0x4, &(0x7f00000019c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073012200000000009500000000000000"], &(0x7f0000001a00)='GPL\x00', 0x5, 0xfd90, &(0x7f0000004740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000004840), 0xb5, 0x10, &(0x7f0000004880), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000018c0)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000004003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004280)={'vxcan1\x00', 0x0}) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004300)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000004380)={0x10000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000004400)={0x14, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="18270000", @ANYRES32, @ANYBLOB="000000000400fb100060aae34a000000"], &(0x7f0000003240)='GPL\x00', 0x101, 0x1000, &(0x7f0000003280)=""/4096, 0x41000, 0x20, '\x00', r7, @lirc_mode2=0x10, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004340)={0x2, 0x5, 0x401, 0x8185}, 0x10, r9, r0, 0x2, 0x0, &(0x7f00000043c0)=[{0x2, 0x5, 0x1, 0x6}, {0x0, 0x1, 0xe, 0x8}], 0x10, 0x80000001}, 0x94) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000016c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r12, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/144, 0x90}, 0x8000}], 0x6, 0x40000002, 0x0) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r14, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200600000e1401002cbd7000fbdbdf25080001000000000008003c000100000077c9b77840"], 0x20}, 0x1, 0x0, 0x0, 0x2800}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003140)=ANY=[@ANYBLOB="09b588d17d5b579a5deadc5c0000000300000004fdffe4d1def86164cd7e041460e4d9346485a783a0f5a51cdd3b729f414372d439e49c136600cb877cb3d2bc98ad3878631c64c4d90000010000000000d76738e8fb27e602ee59c6175d5dda33b9c43933a5c9e00c76aac65e40823e8d157e978844393b7670014a20a2a48cfe", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x1200, &(0x7f0000000040)={&(0x7f00000044c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="a652a611153cbd4ee27bed933009b4f4fd23c0c0651810b098ecf61ff6ff481c6716048631e71e75c17f9a93e5e51c9dce269582e8dad0560df0c0a3c7fa0d601fcb2bd27e55a38765bf3371206e3dad0072d80666f0db78fa716ee1d0f5ba9189a25fe4f606463210a0ba837ea4"], 0x58}}, 0x8000) 8m14.359584838s ago: executing program 0 (id=4416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07090000000008000000014767f5d8fbfe830000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x4, {0xa, 0x4e20, 0x0, @loopback, 0x8375}}}, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) clock_gettime(0x0, &(0x7f00000003c0)) ppoll(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000440)={{0x2, 0x4e21, @private=0xa010101}, {0x6}, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 'bond0\x00'}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000008c0)="66f7", 0x4}, {&(0x7f0000000900)='l3', 0x7fffef80}, {&(0x7f0000000940)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20000600000000009b714ffe00000c00000072000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0x20004095}, 0x400c0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0, 0x0) r6 = accept(r3, &(0x7f0000000500)=@can, &(0x7f0000000580)=0x80) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="21022a67c64ed97822f597d00367bd7000fd", @ANYRES32=r9, @ANYBLOB="11000700c6339544d24b5d21a7fa3ab30300000004000a000800090001ac0f000a000600080211000001000004000b000800370000000000"], 0x54}}, 0x24008050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 8m13.228293881s ago: executing program 0 (id=4422): socket$can_j1939(0x1d, 0x2, 0x7) (async) socket(0x10, 0x803, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3cf4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4852}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m11.720602205s ago: executing program 0 (id=4429): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x28, r1, 0x1, 0xfffffffd, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x0) 8m11.080585959s ago: executing program 0 (id=4435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000600)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) listen(r1, 0xb) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x84000001, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4, 0x5}}}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={0x0, 0x1, 0x869}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000700)={r4, 0x2, 0x7, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7ff}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000600)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) (async) listen(r1, 0xb) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x84000001, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4, 0x5}}}]}, 0x34}}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={0x0, 0x1, 0x869}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000700)={r4, 0x2, 0x7, 0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7ff}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) 8m10.253355571s ago: executing program 0 (id=4440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1e, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x69a, 0x0, 0x0, 0x0, 0x6715}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0xd, 0xd, 0xa, 0x80, 0xfffffffffffffff0}, @map_fd, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xffff, 0x75, &(0x7f0000000140)=""/117, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x6, 0x5, 0x3ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r0, 0x0, 0x63, 0x1000, &(0x7f00000002c0)="0bfd6103f996e7db8855260887ac811d61ff6aaa497b0985e4c7f4237624ba20ce03e3112e1211dce262a14f0394f14261a5d4e6523682411e98683cc276f045c280821e5a79cd68daf996a74c5b1e915a4c6936a928c11c5501dcaa84f5c742fda9c6", &(0x7f0000000340)=""/4096, 0x2472, 0x0, 0x30, 0xee, &(0x7f0000001340)="60968dce83a8ec18ed4b7d732ea7af78be997a8298a526179bbf231f66632cd318fe434822eb55aeffe589dfcd6ef46f", &(0x7f0000001380)="e1c1d9068927740e2090e20464e93971436ed1e3a83f812fab5cb8a5999b6a1062cc5486f589a8690c2735dabfc5c7ce5a59ef2344d5910624acd5c3d015e1808656fc779eac98b21221e45d6d3d00dc45b8aefb29d2a6086b3377398daa79fdf3c3f67a86f56b3e99fcb42cf5b89c94bd45c8f45b7e9e0ea3b8009f72382b97fa0408ffa18cc390122359299387a4e0bb9433b4e805109e3b7aa66fd4edb24c9e3dbc26d1b6658bceac1c09208f763a5d6c691c4249c4e75db9844db6647ef44b23cdd7ae79e904f1807102ddd9d4751e2c573da3498b16870adaa977ef3e058acfb0cdbb7c01af339083afe537", 0x0, 0x0, 0x5}, 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r1, &(0x7f0000001500)={0x2, 0x0, @broadcast}, &(0x7f0000001540)=0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdf, 0xdf, 0x7, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x3}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @volatile={0x5}, @union={0x4, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x7, 0x0, 0x861}, {0x0, 0x4, 0x8}, {0x3, 0x2, 0x90}, {0x10}]}, @datasec={0x4, 0x8, 0x0, 0xf, 0x3, [{0x1, 0x10001, 0x101}, {0x5, 0x6, 0x8}, {0x3, 0x8001, 0xb}, {0x2, 0x1, 0x10}, {0x3, 0x2b3, 0x585}, {0x2, 0x800, 0x3}, {0x2, 0x8, 0x3}, {0x2, 0xfcf, 0x994d}], "8880b4"}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x7}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x61]}}, &(0x7f0000001700)=""/48, 0xff, 0x30, 0x1, 0x6, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@arena={0x21, 0x0, 0x0, 0x8, 0x20400, 0xffffffffffffffff, 0xb, '\x00', r2, r3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r2, r3, 0x4, 0x1, 0x1}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x8000) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000019c0)={r4, r2, 0x25, 0xa, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001a00)={r7, r0, 0x4, r0}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000001a40)={0x1, 0xe56, 0x6, @empty, 'veth1\x00'}) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r8 = accept4(r1, &(0x7f0000001a80)=@isdn, &(0x7f0000001b00)=0x80, 0x800) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b40)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001b80)=r9, 0x4) r10 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r10, &(0x7f0000001d80)={&(0x7f0000001bc0)=@nl=@proc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/188, 0xbc}], 0x1, &(0x7f0000001d40)=""/30, 0x1e}, 0x10040) sendmsg$nl_route_sched(r3, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0x9}, {0x6, 0xf}, {0x3, 0xd}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) r11 = accept(r1, &(0x7f0000001ec0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000001f40)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f0000001fc0)={'sit0\x00', &(0x7f0000001f80)={@empty, 0x0, 0x0, 0x20, 0x0, [{@empty}, {@local}]}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x4c, r13, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0xef5d1e34a411b026) getsockopt$sock_buf(r10, 0x1, 0x37, &(0x7f0000002180)=""/29, &(0x7f00000021c0)=0x1d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f00000022c0)={'syztnl0\x00', &(0x7f0000002200)={'tunl0\x00', r2, 0x1, 0x700, 0x3ff, 0x7, {{0x1b, 0x4, 0x3, 0x9, 0x6c, 0x68, 0x0, 0xa4, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x9f, [@local, @empty, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0x10, "7cc12ce7d336c538998913900adb"}, {0x0, 0x5, "752315"}]}, @timestamp_prespec={0x44, 0x1c, 0x59, 0x3, 0x6, [{@local, 0x101}, {@rand_addr=0x64010100, 0x9}, {@local, 0x1}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r11, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc, 0x6}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xe}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x9}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x65d8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m54.988791011s ago: executing program 32 (id=4440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1e, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x69a, 0x0, 0x0, 0x0, 0x6715}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0xd, 0xd, 0xa, 0x80, 0xfffffffffffffff0}, @map_fd, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xffff, 0x75, &(0x7f0000000140)=""/117, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x6, 0x5, 0x3ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r0, 0x0, 0x63, 0x1000, &(0x7f00000002c0)="0bfd6103f996e7db8855260887ac811d61ff6aaa497b0985e4c7f4237624ba20ce03e3112e1211dce262a14f0394f14261a5d4e6523682411e98683cc276f045c280821e5a79cd68daf996a74c5b1e915a4c6936a928c11c5501dcaa84f5c742fda9c6", &(0x7f0000000340)=""/4096, 0x2472, 0x0, 0x30, 0xee, &(0x7f0000001340)="60968dce83a8ec18ed4b7d732ea7af78be997a8298a526179bbf231f66632cd318fe434822eb55aeffe589dfcd6ef46f", &(0x7f0000001380)="e1c1d9068927740e2090e20464e93971436ed1e3a83f812fab5cb8a5999b6a1062cc5486f589a8690c2735dabfc5c7ce5a59ef2344d5910624acd5c3d015e1808656fc779eac98b21221e45d6d3d00dc45b8aefb29d2a6086b3377398daa79fdf3c3f67a86f56b3e99fcb42cf5b89c94bd45c8f45b7e9e0ea3b8009f72382b97fa0408ffa18cc390122359299387a4e0bb9433b4e805109e3b7aa66fd4edb24c9e3dbc26d1b6658bceac1c09208f763a5d6c691c4249c4e75db9844db6647ef44b23cdd7ae79e904f1807102ddd9d4751e2c573da3498b16870adaa977ef3e058acfb0cdbb7c01af339083afe537", 0x0, 0x0, 0x5}, 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r1, &(0x7f0000001500)={0x2, 0x0, @broadcast}, &(0x7f0000001540)=0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdf, 0xdf, 0x7, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x3}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @volatile={0x5}, @union={0x4, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x7, 0x0, 0x861}, {0x0, 0x4, 0x8}, {0x3, 0x2, 0x90}, {0x10}]}, @datasec={0x4, 0x8, 0x0, 0xf, 0x3, [{0x1, 0x10001, 0x101}, {0x5, 0x6, 0x8}, {0x3, 0x8001, 0xb}, {0x2, 0x1, 0x10}, {0x3, 0x2b3, 0x585}, {0x2, 0x800, 0x3}, {0x2, 0x8, 0x3}, {0x2, 0xfcf, 0x994d}], "8880b4"}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x7}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x61]}}, &(0x7f0000001700)=""/48, 0xff, 0x30, 0x1, 0x6, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@arena={0x21, 0x0, 0x0, 0x8, 0x20400, 0xffffffffffffffff, 0xb, '\x00', r2, r3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r2, r3, 0x4, 0x1, 0x1}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x8000) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000019c0)={r4, r2, 0x25, 0xa, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001a00)={r7, r0, 0x4, r0}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000001a40)={0x1, 0xe56, 0x6, @empty, 'veth1\x00'}) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r8 = accept4(r1, &(0x7f0000001a80)=@isdn, &(0x7f0000001b00)=0x80, 0x800) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b40)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001b80)=r9, 0x4) r10 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r10, &(0x7f0000001d80)={&(0x7f0000001bc0)=@nl=@proc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/188, 0xbc}], 0x1, &(0x7f0000001d40)=""/30, 0x1e}, 0x10040) sendmsg$nl_route_sched(r3, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0x9}, {0x6, 0xf}, {0x3, 0xd}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) r11 = accept(r1, &(0x7f0000001ec0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000001f40)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f0000001fc0)={'sit0\x00', &(0x7f0000001f80)={@empty, 0x0, 0x0, 0x20, 0x0, [{@empty}, {@local}]}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x4c, r13, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0xef5d1e34a411b026) getsockopt$sock_buf(r10, 0x1, 0x37, &(0x7f0000002180)=""/29, &(0x7f00000021c0)=0x1d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f00000022c0)={'syztnl0\x00', &(0x7f0000002200)={'tunl0\x00', r2, 0x1, 0x700, 0x3ff, 0x7, {{0x1b, 0x4, 0x3, 0x9, 0x6c, 0x68, 0x0, 0xa4, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x9f, [@local, @empty, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0x10, "7cc12ce7d336c538998913900adb"}, {0x0, 0x5, "752315"}]}, @timestamp_prespec={0x44, 0x1c, 0x59, 0x3, 0x6, [{@local, 0x101}, {@rand_addr=0x64010100, 0x9}, {@local, 0x1}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r11, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc, 0x6}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xe}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x9}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x65d8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m1.01662026s ago: executing program 2 (id=4830): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001a80060000000200000028000580240001800800010001000000080002965a"], 0x54}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000380), 0x4000000000001f2, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_buf(r4, 0x1, 0x9, &(0x7f0000000000)=""/177, &(0x7f00000000c0)=0xb1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$NILFS_IOCTL_GET_BDESCS(r5, 0xc0186e87, &(0x7f0000000740)={&(0x7f00000005c0)=[{0x3, 0x100000001, 0xffffffff, 0x6, 0x1}, {0x3, 0x7, 0x6, 0xe62d, 0x84e0}, {0xff, 0x7, 0x9, 0x7, 0x6}, {0x400, 0x7, 0x5, 0xbdb, 0x7f}, {0x5, 0x7, 0x20, 0x8000000000000001, 0x2}, {0x9, 0x2, 0x7ff, 0x81, 0x10001}, {0x3, 0x1, 0x81, 0x0, 0x5f}, {0x200, 0x3, 0x3, 0xfffffffffffffffb, 0x7a53}, {0xffffffff80000001, 0x2c6, 0x2da9, 0x3, 0x2a}], 0x9, 0x28, 0x1, 0x7}) 7m0.950213538s ago: executing program 2 (id=4831): r0 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x20}, {r0, 0x6478}, {r0, 0x1}], 0x3, 0x0, 0x0, 0x0) shutdown(r0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a00ff"], 0x5c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0xa05, 0xd03, 0x8, 0x4, 0x10001, 0x40, 0x4, 0xfffffff8, 0x1}, &(0x7f0000000400)=0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x2, 0x2, 0x4, 0x9, 0x20, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_key={0xe, 0x8, 0x330, 0x0, "46a88a08a5339d67179358387a987dba55d6d7d54ffe65fcc6b1567fb35ab6bc44ff0da09154ce69b489aca4a8d3a8679d31f67dd25b42f33ff834f4e691d9e98f77934d9052eeb4eef3ddbafb09ac3918b0992e56a2376027980dc4c3f46cde4824a9fd8186"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x7, 0x2, 0x2e, 0x0, 0xc0000000}, @sadb_x_sa2={0x2, 0x13, 0x29, 0x0, 0x0, 0x70bd2b, 0x3500}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28, 0x3503}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x8, @empty, 0x1}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, @sadb_x_nat_t_type={0x0, 0x14, 0x38}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0x100}}, 0x24008050) r3 = socket(0x10, 0x5, 0x2000000) sendmmsg$alg(r3, &(0x7f00000003c0), 0x4924b68, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0xf, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x0, 0x7, 0x7, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7c69b61c}}], &(0x7f0000000300)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 7m0.694436849s ago: executing program 2 (id=4833): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[], 0x0, 0x8e, 0x0, 0x0, 0x0, 0x10000}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @local}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000000000000000000001000"/28], 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff000000000c00000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095008000000000002b7af8ffffffffff185700000a000000b7020000020000008500000085000000b7000000000000009500"/120], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xc, &(0x7f00000003c0)=""/12, 0x41000, 0xc, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x7, 0x617, 0x8}, 0x10, 0xf227, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[r2, r2, r2, r2, r2], &(0x7f0000000700)=[{0x5, 0x4, 0x8, 0xa}, {0x5, 0x2, 0xc, 0x6}, {0x0, 0x3, 0xf, 0x1}, {0x5, 0x4, 0xc, 0x3}, {0x2, 0x2}], 0x10, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="bfa200000000000007020000d7feffff720200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xd, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xfff7, 0xc}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000006c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000900)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940), 0x1a9380, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2d, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) pselect6(0x40, &(0x7f0000000a40)={0x1, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000a80)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x1000000080000001}, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000004c0)={0x802}, 0x10) 6m59.185963041s ago: executing program 2 (id=4843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x81, 0x12) 6m59.08299756s ago: executing program 2 (id=4845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) listen(0xffffffffffffffff, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x840, 0x16}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x80}}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r7, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f00000004c0)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf, 0x1c}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x2, 0x7, 0x0, {0x0, 0x8, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x5, 0x8}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x2, 0xa, 0x7be, 0xffff}}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x800, {0x4e, 0x8000, 0xff00, 0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r10, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}}, 0x20008005) r11 = accept$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @dev}, &(0x7f0000000880)=0x10) bind$inet(r11, &(0x7f00000008c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) ioctl$FIONCLEX(r0, 0x5450) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000900)='scalable', 0x8) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000a40)={'pim6reg1\x00', {0x2, 0x4e23, @empty}}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x1, 0x8000, 0x339, 0x172d0a63, {{0x19, 0x4, 0x0, 0x12, 0x64, 0x67, 0x0, 0x81, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x2c, 0x9d, 0x0, 0x4, [0x3, 0x4, 0xfffffffe, 0x4, 0x1000, 0xfff, 0xc, 0x8, 0x6aca, 0x200]}, @timestamp={0x44, 0x20, 0x30, 0x0, 0x3, [0x41, 0x7, 0x3, 0x3, 0x5, 0x2, 0x2]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(r12, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x9c18f2991a84cd07}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newtfilter={0x2c, 0x2c, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x4, 0xf}, {0x8, 0xfff2}, {0xe, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) nanosleep(&(0x7f0000000c80), &(0x7f0000000cc0)) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000d40)) 6m56.765396744s ago: executing program 2 (id=4862): sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "5dec9089c89520ad", "22c41d3913aac3afde7222ad7bb954a9", "e9f89a86", "11fea92452845e56"}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f00000001c0)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000200)='X', 0x1, 0x400e1, &(0x7f0000000240)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000040000000018c90000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0xbc}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='vxcan1\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_GET_MPATH(r4, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 6m41.302164193s ago: executing program 33 (id=4862): sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "5dec9089c89520ad", "22c41d3913aac3afde7222ad7bb954a9", "e9f89a86", "11fea92452845e56"}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f00000001c0)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000200)='X', 0x1, 0x400e1, &(0x7f0000000240)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000040000000018c90000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0xbc}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='vxcan1\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_GET_MPATH(r4, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 5m20.923378075s ago: executing program 6 (id=5367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000080, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x3c}}, 0x2400c804) 5m20.755521563s ago: executing program 6 (id=5369): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000640)=0x9c) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'ipvlan1\x00', {'erspan0\x00'}, 0x66b}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000480)=0x20, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000680)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000004c0)=r5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a6a9070000000000140035006c6f000000000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="6247f06478c4"], 0x3c}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r9) getsockname$packet(r9, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendmsg$inet(r8, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 5m19.571566094s ago: executing program 6 (id=5374): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000040000901feffffff00000000027c0000040042800c000180060006008848"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000380)={r3, 0xffff}, &(0x7f00000003c0)=0x8) read(r0, &(0x7f0000001680)=""/129, 0x81) getsockname$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x2, 0x25, 0x4, 0x1}, &(0x7f0000000180)=0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r9}, 0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000001c0)={r7, 0x0, 0x2009}, 0x8) 5m19.081225419s ago: executing program 6 (id=5379): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="4c00000011000f140003000200001e0002000000200000", 0x17) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) (async) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/mnt\x00') (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r6}, 0xc) (async) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r3, r4}, 0xc) 5m18.767467515s ago: executing program 6 (id=5381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x60) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000001540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x400d1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x78, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000440), &(0x7f0000000480)=@tcp=r5}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x200, 0x30bd26, 0x25dfdc00, {{}, {@void, @void, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x24004814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f00000003c0)='GPL\x00', 0x1, 0xfe7, &(0x7f0000000540)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 5m18.334166983s ago: executing program 6 (id=5383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0xfffffff8, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1, 0x1}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000000c0), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x7}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 5m3.120594965s ago: executing program 34 (id=5383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0xfffffff8, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1, 0x1}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000000c0), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x7}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 1m17.881494469s ago: executing program 1 (id=6480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x700, 0x40, 0x80000000, 0x7fffffff, {{0x16, 0x4, 0x2, 0x2f, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote, {[@end, @lsrr={0x83, 0x1f, 0xb3, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @loopback, @private=0xa010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x2, [{@private=0xa010102, 0x3}, {@broadcast, 0xf}, {@multicast1, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xe57}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000440)={0x8, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x108) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x53}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x8000000) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x40040c4) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x67e6ebdd}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffffbe}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xe}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0xac}}, 0x40001) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r10, 0x0, 0xcd, &(0x7f0000000a00)={@multicast2, @broadcast, 0xffffffffffffffff, "2e797af3a40f283e02b2a171ff44132b66f2600c2a4b80e16bdd20da76e85817", 0x0, 0x5, 0xb, 0x1000}, 0x3c) (async) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000a80)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x7, 0x6, 0x400, 0x67, 0x1], 0x3, &(0x7f0000000a40)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x28, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000c80)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000000d00), 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000d40)={0x1, 0x5}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', 0x0, 0x4010, r11}, 0x18) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x8, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000e40)=""/64, 0x28, 0x40, 0x0, 0x5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0xffff, '\x00', r3, r13, 0x1, 0x4, 0x1}, 0x50) 1m17.413122966s ago: executing program 1 (id=6483): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000580)=""/18, 0x12, 0x0, &(0x7f0000000680)=""/145, 0x91}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0xffffff20, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000380)="06ff03076844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x48844) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0x7) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000400), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x5, 0xe02, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0xff, 0x0, 0x0, 0x0, "595b6028a0e4fa1133f6d9919fd4855789682d01874f3c107bbfc1c8831026f40798a2b35d0600e02216198977dc3d41ed0880c64c39e5ff0f00000000000012"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$nci(r0, &(0x7f00000005c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0xa, {{0x1, 0x10, 0x6, "9a84f2bb38d1"}, {0x4, 0xaff9, 0xa, 0xc, 0xd, 0x6}}}, 0x1a) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) 1m17.017938579s ago: executing program 1 (id=6486): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$can_raw(r0, &(0x7f00000004c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000500)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@can={{0x3}, 0x8, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56) read(r0, &(0x7f0000000600)=""/118, 0x76) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000101000000000000030000008500000017000000180100002060702500000000002020207b1af8ff000000000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095000000000000007f0849769c0d67b44a8d42d476"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="e066fa07a10b5f8f601c7e9596d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) clock_gettime(0x4, &(0x7f0000000280)) syz_emit_ethernet(0xb5, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}, @broadcast, @void, {@llc_tr={0x11, {@llc={0xbc, 0xe, "12", "cc3eb680aafa135919f571c0d33612592c15fd6f2129f56d953095d2137d8e7b5d154366d84ad3bfdb23a266428acbcfccba7ff38ffee11a09974025e82b1882b9d31211b46410e9a2d350bd1d8a8393976edc0a3b3cb9a746114d24d3d246815b8a7850c9244616bbdc7b66ff74212782cb0c9fe3c0bc9efd1074142e7998676f082419dfc3399b90a62594d531c9f5a82a4c6d28817b4eafe854773765545e97392712"}}}}}, &(0x7f0000000240)={0x1, 0x3, [0x5ba, 0xa89, 0x1fe, 0x26f]}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000030425bd70000000200000000300", @ANYRES32=0x0, @ANYBLOB="032e0000030000004c0012800e0001006970366772657461700000003800028014000700feffffc7b9000000000000000000000108000c0000000000060011004e24000008000c0007000000080015000e1f030008000d000008000008000a00", @ANYRES32], 0x7c}}, 0x90) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x1000) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000100)={0x1, 0x4}) 1m16.126016287s ago: executing program 1 (id=6491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x140, 0x10, 0x1, 0x70bd27, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x20000, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x4d, 0x2, {{'cbc(serpent)\x00'}, 0x28, "70f4946ac2"}}]}, 0x140}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000001240)=0x2762, 0x4) sendmmsg(r2, &(0x7f0000001280)=[{{&(0x7f00000012c0)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001380)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x2002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x2020, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @empty}}}}}}, 0x0) 1m15.845757608s ago: executing program 1 (id=6493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x58, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, {0x8, 0x2, @multicast1}}}]}]}, 0x58}}, 0x0) 1m15.548644284s ago: executing program 1 (id=6495): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc) (async) bind$netlink(r1, &(0x7f0000000800)={0x10, 0x0, 0x25dfdbff}, 0xc) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002000010000070000000000000a0000000000000000000000080017004e224e240500160000000000628c623ae441419bce76281c5e56113a4c196310fe9fd3b5f284b0dc49ee6334"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r5, &(0x7f0000000680)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000140)=0x20000007, 0x4) (async, rerun: 32) r6 = socket$inet6(0xa, 0x1, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, 0x0, 0x8) (async, rerun: 32) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x20800001, 0x4) (async, rerun: 32) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000000e000000000000000000002ea4"], 0x0, 0x2d}, 0x28) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000400)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001500010000000000000000000f000000080001009cc616d8080003"], 0x24}}, 0x0) (async, rerun: 32) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0xc) (async, rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000240)=0x1, 0x4) (async) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r7], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) listen(r4, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (rerun: 32) 1m0.150439547s ago: executing program 35 (id=6495): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc) (async) bind$netlink(r1, &(0x7f0000000800)={0x10, 0x0, 0x25dfdbff}, 0xc) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002000010000070000000000000a0000000000000000000000080017004e224e240500160000000000628c623ae441419bce76281c5e56113a4c196310fe9fd3b5f284b0dc49ee6334"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r5, &(0x7f0000000680)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000140)=0x20000007, 0x4) (async, rerun: 32) r6 = socket$inet6(0xa, 0x1, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, 0x0, 0x8) (async, rerun: 32) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x20800001, 0x4) (async, rerun: 32) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000000e000000000000000000002ea4"], 0x0, 0x2d}, 0x28) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000400)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001500010000000000000000000f000000080001009cc616d8080003"], 0x24}}, 0x0) (async, rerun: 32) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0xc) (async, rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000240)=0x1, 0x4) (async) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r7], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) listen(r4, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (rerun: 32) 46.806287588s ago: executing program 7 (id=6597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x2, 0xb019, &(0x7f0000000540)=""/234}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000024001a0006000000020000001800048014000980"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 45.411075311s ago: executing program 7 (id=6599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000400)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="0222aabc62e4"}, 0x78, {0x2, 0x4e22, @multicast2}, 'tunl0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x3, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001440)={&(0x7f0000001480)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001540)='k', 0x1}], 0x1}, 0x20000885) 43.752362473s ago: executing program 7 (id=6606): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'macvlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000008000000000000000010400000010000000c600feff0000000a8f39f0fff0ffffff850000006b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008500000067000000181b0000", @ANYRES32=r2, @ANYBLOB="00000050c11743222f3b5c1f00000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 43.550435844s ago: executing program 7 (id=6607): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 42.915293609s ago: executing program 7 (id=6611): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x4c}}, 0x24) 41.665566756s ago: executing program 7 (id=6614): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r1 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000880)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r3, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pK \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000a00)='cgroup.clone_children\x00', 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x2, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000a40)={0x1a0000010}) epoll_wait(r8, &(0x7f0000000a80), 0x0, 0xc9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r4}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r9, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000d40)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES16=r10, @ANYRESOCT=r11, @ANYRESHEX=r11, @ANYBLOB="0000000000f20000b7050000080000e78c315bcd2ab0719d8f710200320000560900"/50], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r12, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg(r12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0) 26.616648083s ago: executing program 36 (id=6614): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r1 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000880)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r3, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pK \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000a00)='cgroup.clone_children\x00', 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x2, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000a40)={0x1a0000010}) epoll_wait(r8, &(0x7f0000000a80), 0x0, 0xc9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r4}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r9, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000d40)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES16=r10, @ANYRESOCT=r11, @ANYRESHEX=r11, @ANYBLOB="0000000000f20000b7050000080000e78c315bcd2ab0719d8f710200320000560900"/50], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r12, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg(r12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0) 10.013616779s ago: executing program 5 (id=6717): socket$netlink(0x10, 0x3, 0xe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x593b, 0x4) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="d471183df9ffd181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24040090) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x749}], 0x1, 0x2002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f00000002c0)={'wlan1\x00', @random="000500000020"}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44) r2 = socket(0x8, 0x4, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd46) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0x40106183, &(0x7f0000000240)={r0, 0x0, 0x84000, 0x0, 0x3, 0x0, 0x0}) 7.897233989s ago: executing program 5 (id=6722): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6b9f, 0x4) sendmsg$sock(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x51, 0x7fffffff}}], 0x18}, 0x24008800) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x9d4, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000280), 0x800001d, 0x300) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000300), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.375311875s ago: executing program 3 (id=6724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='htcp', 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYBLOB="7f135de63e633f8f289b2f253fadc91716b2cd1c7acdee02772844ab64bb898c1944eb15ad520748cd1c4f0ef86139513f6edacce8629ce10c8de4035783c9078bddc464238ba5b23fa0bf0253a81211a16c9e862a597ea1d3266c65c3de9991f210ff49b0b9f3f05601279d74d618394bbeb6768b7b8acf319eed15cd", @ANYRES8=r1], 0x0, 0x34}, 0x28) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e0c6310002000000000000e8e3cbd2000000000000"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=r0, @ANYBLOB="1d029c17fd5ded4f5edb0817569d4953b2d2c1ec7969c9db78a4f9e11b6ca5671aef751c0779eea5950320699a07dedd8221137b080512c6b99f289c386c547a1d9c6249c69597ffff8275eb432c2ac66f017f67df5247e1aeb0e5c8e78c2b41ec618efd65195a746e95ab4ba4ff6363744b6930c7ff0a17d9d534042a6fb3863a42ab675cf81a6563363404281124c0a24ad71d16e32c3da1c62024f80fdae7e906090694d1ae283ca1100ecef0ae8e0d9973badac32b36d6b1741e1105c9f98caa3597aa5a6121b5988a78f98078ac98229a90c7ccf4000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000580)={r6, &(0x7f00000005c0), &(0x7f0000000600)=""/73}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200010000000c00030008"], 0xcd0}}, 0x0) 7.129951251s ago: executing program 8 (id=6725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000060000007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000200)=0x18, &(0x7f0000000640)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x2, r2}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00'}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000c80)=r5, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000d40)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) (async) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0x85}], 0x9}, 0x10122) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)='X', 0x1}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0xc, &(0x7f0000000f00)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r11, 0x0, 0xe, 0x0, &(0x7f0000001040)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x63, &(0x7f0000000780)="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", 0x0, 0xcf21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80}, 0xffd4) 6.401267293s ago: executing program 3 (id=6726): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x350}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000002030101000000000000000002000000080001000100000209000200"], 0x30}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4d2, @remote}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="02000000093801d3448cedcd73c9cabe43d813bb9398ffe444f064156337f16311b14d6e593add31c6254e94c70781db0797ee5ca25d87f512d8e9b12fa032d9181b3ae954a0fa2e4f6563b63f9b27d01da59543774e58dc0c022885824ed8bcfc0ff8686e1d7425e5e0d3bd1b5107a6874a9fe6048b38d6cebdb0ea69584cb89d0318eb09c2", @ANYRES16=r3, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fddbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth0_to_bond\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x9}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r8 = socket$kcm(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000540)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) (async) sendmsg$sock(r8, &(0x7f00000005c0)={&(0x7f0000000600)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$sock(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000900), &(0x7f0000000940)=0x4) (async) socket$inet_smc(0x2b, 0x1, 0x0) 6.391218635s ago: executing program 4 (id=6727): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000100)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async, rerun: 32) recvfrom(r0, &(0x7f0000000cc0)=""/4038, 0xfc6, 0x40020100, 0x0, 0x0) (async, rerun: 32) writev(r0, &(0x7f0000001cc0)=[{&(0x7f0000001d00)='x', 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2106, 0x3060}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.938541446s ago: executing program 5 (id=6728): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCGETVIFCNT(r4, 0x89e0, 0x0) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000010c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001000000000000000000140000001100010000"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0xf0}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000080)={&(0x7f00000000c0)=@hci, 0x19, &(0x7f0000000140)=[{&(0x7f0000000580)=""/248, 0xfffffd14}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000680)={0x0, 0xfffffff5, &(0x7f00000006c0)=[{&(0x7f0000000700)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2}, 0x8, 0x10, &(0x7f0000000f00), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r8, 0x702, 0xe80, 0x0, &(0x7f0000000fc0)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x402, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="bd49a73231274086"], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) 5.822854433s ago: executing program 8 (id=6729): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa60d, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000380)=""/53}, 0x20) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x8, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000a40)=0x3) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000a80)=0x8000) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000bc0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000cc0)={0x0, 0xfd01}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e22431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f5010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123fad5267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d409baeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d50000000000000001af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d5d40b88d2a810c489fc40e26af417fbd7754961841974230b98fe4c02cbc41eb1a61a4e9c19ab2362b2f0098b60cc1e4b25d5b3fe540a08e6153dd229c935846240ab79451fb359792b4c7103cd3307744477fa78dbb78512cf497dfef5d97245f4c3b34c6b89f072e381a35d1d7d3e0db5629985889ad49c5c9268d269d1e3c14c0ed4f390cd88353fd387fa"], &(0x7f00000013c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r9, 0x0, 0x13, 0x0, &(0x7f0000001480)="07ec0c191cd2749bf8ffc2c4257f078b3909d0", 0xfffffffffffffffd, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a1c010200000000000000e4adb933222c38334eebe696650007000000020002400000000214000000100001"], 0x44}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$inet(r6, 0x0, 0x40008) 4.768861758s ago: executing program 3 (id=6730): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000200), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000240), 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r3, &(0x7f0000000540)="f4", 0x1, 0x14, &(0x7f0000000580)={0xa, 0x4e20, 0x1, @private0, 0x10000}, 0x1c) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000700)={0x0, 0x1128000, 0x1000, 0x4}, 0x20) setsockopt(r3, 0x84, 0x7f, &(0x7f00000005c0)="0200000009800089", 0x8) close(r1) connect(r0, &(0x7f0000000480)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000080)={'wlan1\x00', @random="000500000020"}) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x200, 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000600), &(0x7f0000000680)=r5}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffffffffffdbf) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b0000007f000000010001004900000001000000", @ANYRES32, @ANYBLOB="00240100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000800)={r7, &(0x7f0000000840), &(0x7f0000000880)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000900)={r7, &(0x7f0000000940), &(0x7f0000000980)=""/14, 0x2}, 0x20) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@local, 0x3, 0x8, 0x4e24, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0x800, 0x2000000, 0x1, 0x400}, {0x1ff, 0xfffffffffffffff9, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0xffffffff, 0x32}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) connect$inet6(r8, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0xfffffffffffffce8) 4.368176028s ago: executing program 4 (id=6731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x8010) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'pim6reg1\x00', &(0x7f0000000140)=@ethtool_dump={0x3f, 0x8, 0x8cc, 0xad, "03fcbc71c5fd35460094493a4c33d4aca00c4f86ab1ead5badd3072671866e234b9910eafc1dff8468fbd2f89d6ace390969ba3515d38f6aa8e0753ef3a36375f6fb743bbb106ea66546ca208bb6d28fae89140d8730e3f62c5ce29b4f9bd4f2d5979fd3e412432e97b1bf48e91fe959d35802a544c491140598e9887fd374a1915deff660a0a7cf267042060455d02e1cd9c52cd5c8adde8f5e6d3dbe280c91bac6896b32b7ba366ecbe58b8c"}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x24c, r2, 0x224, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "2c4a8485c1af6d0bd028e729209087c42febc7eb5a983d38"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff6}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "9ce31c1a3000d82d57658918f974445fc2003839a7dfe54f6ee43c9617cec1"}}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "3ada0830d439ab2e7ecc0cf8cc1798a40fd5bf44ab8706319927e57be3fee51565391bbeb4cf297c3ab94557aacf2b11733e2bc98010c7e74d52cb1c3f21447175aea2b9141273b3c8d49cde520d71dd98e8b3ca4f5a9f1534e326d29218a5358b6da1438991f87f642cbf719712439ff034689f23a4fd7463f7ef1cd6ce2dbbd3cac5a2e50a88e3eb59f67dfd80e64fa33f36229708e1c75b6f54dec04badbcf76ed1"}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x45cc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x11}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x6, 0x2, 0x38, @private1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x20, 0x10, 0xa, 0x9}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@float={0x8, 0x0, 0x0, 0x10, 0x2}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0xd, 0x42}]}, @enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0xa, 0xa}, {0x5, 0x6}, {0xa, 0x3}]}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x3}, {0x8, 0xf0f}, {0x10, 0x7ff}, {0x8, 0x9}, {0x2, 0x6}]}, @float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x30, 0x5f]}}, &(0x7f0000000a80)=""/36, 0xa1, 0x24, 0x1, 0xb, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x9, 0x11, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dd4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x4, 0x53, &(0x7f0000000880)=""/83, 0x41000, 0x6, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000b00)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[{0x5, 0x3, 0xf, 0x5}], 0x10, 0x8001}, 0x94) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), r5) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r9, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e40)={@ipv4, 0x0}, &(0x7f0000000e80)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000001100)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x1e0, r10, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x240c4800}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=@bridge_getvlan={0x38, 0x72, 0x100, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r12}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0xc000) ioctl$OCFS2_IOC_UNRESVSP(r6, 0x40305829, &(0x7f0000001280)={0x0, 0x2, 0xa, 0x8, 0x9f, 0x7}) r14 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x38, 0x27, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x1, 0x0, 0x6, 0xffffffffffffffe0, 0x8}, @ldst={0x3, 0x2, 0x2, 0x0, 0x1, 0x2, 0xfffffffffffffff0}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001400)='syzkaller\x00', 0x7, 0xb0, &(0x7f0000001440)=""/176, 0xbef1417980f8991b, 0x1a, '\x00', r12, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xf, 0x2, 0x7cc}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001580)=[{0x4, 0x4, 0x1}, {0x5, 0x5, 0x1}, {0x3, 0x5, 0x4, 0x2}, {0x3, 0x3, 0xf, 0x4}, {0x3, 0x3, 0x2, 0x5}, {0x0, 0x3, 0xc, 0x2}, {0x3, 0x3, 0x6, 0x7}], 0x10, 0x1}, 0x94) r15 = openat$cgroup(0xffffffffffffffff, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) r16 = openat$cgroup_devices(r15, &(0x7f0000001700)='devices.allow\x00', 0x2, 0x0) sendmmsg$inet(r14, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)="abb43545cfe1f12946102a6423af37bcbe1698a5a8cf6ddb5a5fbb793f7d49b08a61d8c298c174e5f8ee287361a501e8e86ae010f0be770d8bdef3bb66551c8817c6402344fbedf44a3d2dcc38a9f869e5b64f0a41e4a51c0a7a35cb5e51be9d60e9cfa81fa8db371f81492916ab154048996008d6d52c71f8f0395da1be55762bb64d7557f6a028ba0fbd1314b0b58d7ce2a2f4f14ca82fab611dc30cec4cb00282dcb5af2e31c585f637379b29", 0xae}, {&(0x7f0000001800)="3a226e01513b371bbee38e3e13ec2e86454afaa7abb3b4733a445d847b610f53be9318e37585f4a800de7ff3a3c93e88313cbb08fcd8c148678a335217f185a1025db45439e4160c696460594198ee5f6905f6", 0x53}], 0x2, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}], 0x68}}], 0x1, 0x40000) ioctl$FITRIM(r16, 0xc0185879, &(0x7f0000001980)={0xfffffffffffffff8, 0x5, 0x7}) ioctl$NILFS_IOCTL_SET_SUINFO(r6, 0x40186e8d, &(0x7f0000001a40)={&(0x7f00000019c0)=[{0x1, 0x1, 0x0, {0x8000000000000001, 0x9}}, {0x401, 0x2, 0x0, {0x6, 0x6, 0x1}}, {0x7, 0x2, 0x0, {0x5, 0x2}}], 0x3, 0x20, 0x7, 0x2}) 3.668005993s ago: executing program 4 (id=6732): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x3d}, 0x1c) recvfrom$inet(r0, &(0x7f00000000c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x2c, 0x6, 0x0, @mcast1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6c3, {[@exp_fastopen={0xfe, 0x5, 0xf989, '{'}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) socket(0x6, 0x3, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x1ff) shutdown(r0, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100037040000000000000000000000ff51b18adf8746f92437e02864a11d45b85e3cd2dd5dc16a02efc66548f34dd12ed363ccafb876eb06fc76d6756d993995ccd57258faf43e48a4f81fc3523b76e93dfccf405172d4749892b8c7659f557e6a487cb84eff8d0be788ff74644944cc2bf857daae2d3bc05a6266ec16a7a0545cf17f67adeff249b7fe5a783c113c8651d8a0da3d1f532e01b62e64495c8231", @ANYRES32=0x0, @ANYBLOB="83040500000000002c0012800b000100697036746e6c00001c00028014000300ff01000000000000000000000000000104001300"], 0x4c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100037040000000000000000000000ff51b18adf8746f92437e02864a11d45b85e3cd2dd5dc16a02efc66548f34dd12ed363ccafb876eb06fc76d6756d993995ccd57258faf43e48a4f81fc3523b76e93dfccf405172d4749892b8c7659f557e6a487cb84eff8d0be788ff74644944cc2bf857daae2d3bc05a6266ec16a7a0545cf17f67adeff249b7fe5a783c113c8651d8a0da3d1f532e01b62e64495c8231", @ANYRES32=0x0, @ANYBLOB="83040500000000002c0012800b000100697036746e6c00001c00028014000300ff01000000000000000000000000000104001300"], 0x4c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) 3.279882262s ago: executing program 3 (id=6733): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000280)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000070000009500008000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x2c}], {0x95, 0x0, 0x9}}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), 0x85}, 0x52) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.965295143s ago: executing program 8 (id=6734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x200000, 0x0, 0xff, 0x3, 0x4}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000300)="114353012008ba050000375186ddc9cc767e239d7bfbd8eb64e25dd2f9111e3f0f0d3564659ddc8512a57db49669789281bcfc6c0a42", 0x36, 0x4008015, &(0x7f00000002c0)={0x11, 0xf7, r2, 0x1, 0x7, 0x6, @remote}, 0x14) 2.917470638s ago: executing program 3 (id=6735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r0}, 0xc) 2.822187666s ago: executing program 5 (id=6736): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e", @ANYRESOCT=0x0], 0x44}, 0x1, 0x2000000000000000}, 0x0) 2.63601237s ago: executing program 4 (id=6737): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000b39200000000004f1a40c80006000000852000008a4f03009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000540)="ab", 0x1, 0x1, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000002fc0)=[{0x0}, {0x0}, {&(0x7f0000000a40)=""/4089, 0xff9}, {0x0}, {&(0x7f0000001b40)=""/4097, 0x1001}], 0x5) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e40)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x101, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'veth0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000640)=0x19ca, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000680)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000006c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000740)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x4, 0xe, 0x5, 0x8, 0x8, @empty, @remote, 0x80, 0x10, 0x2, 0x3}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000032c0)={&(0x7f00000000c0), 0xc, &(0x7f0000003280)={&(0x7f0000003100)={0x150, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x281}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x28}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc3b0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000880)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000002e80)=@newqdisc={0xa8, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x40, 0xfff9, 0x101, 0x0, 0x1, 0x7, 0x2}}, {0x8, 0x2, [0x1, 0x400]}}, {{0x1c, 0x1, {0x94, 0x4, 0x7fff, 0x7fffffff, 0x1, 0x10001, 0x7ff, 0x6}}, {0x10, 0x2, [0x5, 0x5, 0x4, 0x59, 0x8, 0x2]}}, {{0x1c, 0x1, {0xff, 0x5, 0x9, 0x5, 0x0, 0x0, 0x8, 0x8}}, {0x14, 0x2, [0x4, 0xff, 0x7, 0x270, 0x9, 0x7fff, 0x4, 0x0]}}]}]}, 0xa8}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001ac0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000002d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b80)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="84432bbd7000fedbdf25190000000c00018008000100", @ANYRES32=r6, @ANYBLOB="300001801400020070696d7265673000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000300010000000800030001000000200001801400020076657468305f746f5f62726964676500080003000200002550dc1a800800030002000000140002007369743000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000300020000000800030002000000140002006970766c616e300000000000000000001400020069703667726574617030000000000000240001800800030000000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="40000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000300010000001400020067656e65766531000000000000000000080003000300000008000100", @ANYRES32=r13, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 2.440527138s ago: executing program 3 (id=6738): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.277593826s ago: executing program 8 (id=6739): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r2, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}, [{0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x0, 0x9, 0x5}, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xaf}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) 1.925441496s ago: executing program 5 (id=6740): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="d14390ccdec53f3a8e9a83b400ffffffff0000791048ff000000006104480000000000950000004d4fd540978d0d248dbb36e63887b5c2a26cbaed3252ba4994368c2ac0aa6b3543bf6fb7fba03ce4e91466"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x3, 0x3, 0x997e, 0x3, 0x1ff]}, &(0x7f0000000180)=0x54) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000000)="e1", 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket(0x400000000010, 0x3, 0x2) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) 1.4407423s ago: executing program 4 (id=6741): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYRES16=r0, @ANYRES8=r1, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000000040), &(0x7f0000000280)=0x8) 1.100885158s ago: executing program 8 (id=6742): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000100)=0xa4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01002000000010000000184c030000000000000000000000000001"], 0x0, 0x4c, 0x0, 0x1, 0x327}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0x301, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r1, 0x10, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040184}, 0x0) 1.060285044s ago: executing program 4 (id=6743): r0 = socket$nl_route(0x10, 0x3, 0x0) tee(r0, r0, 0x2, 0x4) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000c00)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000c40)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1a, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18008c013ea28990380b65d31c0396470600000200090000000000fcffffff814f4cfc8ffefed5904bd3db75923c8c208ed380d822a1e3b570aba981ed1742fd7292a3cf1f5e1d3fefee83c59edaa89f8fa172a9e2e6e2f346fcab2ee8cbb00bfe582c483fb7841bdba277f5946f90d4c345cd288be19714d5213844b72063d33becead8e360bb9c8c3fa6203f4633fb84b2135befcfb2a362183eff8a03c39c73dcaa2f49ce54f993fd2ff7873899643d0068e8a47d846054cf71a0d13363b592f2c30d1669d7945ccc911731c6b4e6a5df44594bbeae8b4579f2"], &(0x7f0000000d80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bind$vsock_stream(r3, &(0x7f0000000a80)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000880)=0x33, 0x8) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='freezer.state\x00', 0x275a, 0x0) accept4$vsock_stream(r7, 0x0, 0x0, 0x80800) connect$vsock_stream(r6, &(0x7f00000008c0)={0x28, 0x0, 0x2710}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000dc0)=0x4, 0x4) sendmsg$netlink(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="1c0000005e00019eb177385406000000", @ANYRES32=0x0, @ANYRESDEC], 0x1c}], 0x1}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000900), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f0000000940)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}]}}]}, 0x3c}}, 0x0) 388.57138ms ago: executing program 5 (id=6744): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) pipe(&(0x7f0000000a00)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000a80)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x2, 0x8}, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000300"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1b00000000100000000000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x20, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000885800000a50000002579b8fffcffffff1812000004179d1480db81b6cdcd5d4595dffd7982e47ddc55aba188afc0c54e2de212f000022741fdccf2e3ec336845ec41696b97fafc9db47efe9b7b9377344ffd4f99df9039a5ee89a834663d0b3a90ec4abdb2f6ffa3b93b71ac512a40584908a82988e4a36fbba74bf5bfdd1e4ddefd750575ffe076ff7cab6937e0233e39cf2b4bb060b281a232548dd00900000000000000100000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018190000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000640)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xf, 0xffff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000ec0)=[r1, r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000f00)=[{0x5, 0x1, 0x10, 0x8}, {0x0, 0x2}, {0x3, 0x3, 0xf, 0x4}, {0x1, 0x1, 0xa}, {0x2, 0x3, 0xc, 0x6}, {0x4, 0x2, 0xd, 0xa}, {0x4, 0x5}, {0x2, 0x2, 0x3, 0x4}, {0x2, 0x5, 0xa, 0x9}]}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000380)=0xfffffffd, 0x4) connect$inet6(r13, &(0x7f00000003c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r13, &(0x7f0000000440)="f5", 0x1, 0x2f482def338668fc, 0x0, 0x0) close(r10) ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000000480)) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x1a8, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x10, 0xa}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_ACT={0x80, 0x3, [@m_nat={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1, 0x6}, @empty, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x3, 0xffffffffeffffffc, 0x5, 0x200}, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xec, 0x2, [@TCA_BPF_ACT={0x9c, 0x1, [@m_ctinfo={0x98, 0xb, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x9, 0x10000000, 0x80000001, 0xbb}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x34, 0x6, "712f6087d1dd0834be79cd3f0b9c62f4b19feab359eabfd58dbbce6460dc59158b82679f6b6400563b90e29e0a92d249"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x1002, 0x80, 0x8, 0x1}, {0x100, 0xff, 0x0, 0x1}, {0x4, 0x2, 0x12, 0x8000}, {0xd, 0x8, 0xf, 0x2}, {0x9, 0x5, 0x72, 0x9}, {0x1400, 0x1, 0x9, 0x3}, {0x2, 0x81, 0x10, 0x4}, {0x7, 0xf8, 0x0, 0x200}]}}]}}]}, 0x1a8}}, 0x0) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="000060034503003000640000ac019078ffffffff0a0101020c"], 0x34) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty}, 0x1a) 0s ago: executing program 8 (id=6745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.state\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000002c0), 0xffffff6a) (async) write$cgroup_int(r4, &(0x7f00000002c0), 0xffffff6a) sendfile(r3, r4, 0x0, 0x20000000002) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/ipc\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x44, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x44, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000480)={&(0x7f00000004c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)="af", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000008400000000000000ff5b"], 0x18, 0x20000001}, 0x20048054) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000740)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000780)={r8, 0x9, 0x30}, &(0x7f00000007c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000780)={r8, 0x9, 0x30}, &(0x7f00000007c0)=0xc) setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f0000000800)={r8, 0xff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000880)={0x0, 0x40, 0x20}, &(0x7f00000008c0)=0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000880)={0x0, 0x40, 0x20}, &(0x7f00000008c0)=0xc) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, r9, 0x7, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x7f, 0x0, &(0x7f0000001240)) kernel console output (not intermixed with test programs): 31693] ? mark_fastcall_patterns+0x10e1/0x1140 [ 1118.423914][T31693] do_check_main+0x95/0x1f0 [ 1118.423941][T31693] bpf_check+0x302b/0x34e0 [ 1118.423973][T31693] ? ktime_get_with_offset+0x93/0x2d0 [ 1118.423999][T31693] ? ktime_get_with_offset+0x93/0x2d0 [ 1118.424026][T31693] ? __pfx_bpf_check+0x10/0x10 [ 1118.424050][T31693] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1118.424080][T31693] bpf_prog_load+0x14da/0x1c60 [ 1118.424114][T31693] ? __pfx_bpf_prog_load+0x10/0x10 [ 1118.424151][T31693] ? __might_fault+0xaf/0x130 [ 1118.424180][T31693] __sys_bpf+0xd86/0xe00 [ 1118.424210][T31693] ? __pfx___sys_bpf+0x10/0x10 [ 1118.424241][T31693] ? __fget_files+0x2a/0x420 [ 1118.424286][T31693] ? ksys_write+0x242/0x270 [ 1118.424315][T31693] ? __pfx_ksys_write+0x10/0x10 [ 1118.424347][T31693] __x64_sys_bpf+0xba/0xd0 [ 1118.424378][T31693] do_syscall_64+0x166/0x520 [ 1118.424402][T31693] ? trace_irq_disable+0x3b/0x140 [ 1118.424428][T31693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.424448][T31693] ? clear_bhb_loop+0x70/0xc0 [ 1118.424480][T31693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.424500][T31693] RIP: 0033:0x7f94f6d9fb19 [ 1118.424521][T31693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.424537][T31693] RSP: 002b:00007f94f7c9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1118.424560][T31693] RAX: ffffffffffffffda RBX: 00007f94f7025fa0 RCX: 00007f94f6d9fb19 [ 1118.424575][T31693] RDX: 0000000000000090 RSI: 0000200000005100 RDI: 0000000000000005 [ 1118.424587][T31693] RBP: 00007f94f7c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.424600][T31693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.424611][T31693] R13: 00007f94f7026038 R14: 00007f94f7025fa0 R15: 00007ffede773fa8 [ 1118.424645][T31693] [ 1118.742403][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1118.746050][ T5650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1118.754636][ T5650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1118.761385][ T5650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1118.767422][ T5650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1119.015269][T31705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1119.109968][T31697] bond5: Unable to set up delay as MII monitoring is disabled [ 1119.132487][T31697] bond5 (unregistering): Released all slaves [ 1119.379239][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1119.556539][T31718] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5783'. [ 1120.861890][ T5650] Bluetooth: hci3: command tx timeout [ 1121.199637][T31766] openvswitch: netlink: IP tunnel dst address not specified [ 1121.378661][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5789'. [ 1121.397688][T31777] FAULT_INJECTION: forcing a failure. [ 1121.397688][T31777] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.397725][T31777] CPU: 1 UID: 0 PID: 31777 Comm: syz.4.5790 Not tainted syzkaller #0 PREEMPT(full) [ 1121.397748][T31777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1121.397761][T31777] Call Trace: [ 1121.397769][T31777] [ 1121.397779][T31777] dump_stack_lvl+0xe8/0x150 [ 1121.397818][T31777] should_fail_ex+0x3eb/0x540 [ 1121.397848][T31777] should_failslab+0xa8/0x100 [ 1121.397871][T31777] __kmalloc_cache_noprof+0x9e/0x600 [ 1121.397899][T31777] ? bpf_split_cur_state+0xa8/0x1680 [ 1121.397928][T31777] ? bpf_split_cur_state+0xa8/0x1680 [ 1121.397961][T31777] ? kasan_quarantine_put+0xbb/0x1f0 [ 1121.398001][T31777] bpf_split_cur_state+0xa8/0x1680 [ 1121.398030][T31777] ? kfree+0x1c5/0x650 [ 1121.398049][T31777] ? bpf_free_verifier_state+0x25d/0x290 [ 1121.398080][T31777] do_check_common+0x4070/0x7590 [ 1121.398106][T31777] ? stack_depot_save_flags+0x33/0x810 [ 1121.398182][T31777] ? __pfx_do_check_common+0x10/0x10 [ 1121.398222][T31777] ? mark_fastcall_patterns+0x10e1/0x1140 [ 1121.398266][T31777] do_check_main+0x95/0x1f0 [ 1121.398293][T31777] bpf_check+0x302b/0x34e0 [ 1121.398327][T31777] ? ktime_get_with_offset+0x93/0x2d0 [ 1121.398355][T31777] ? ktime_get_with_offset+0x93/0x2d0 [ 1121.398383][T31777] ? __pfx_bpf_check+0x10/0x10 [ 1121.398406][T31777] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1121.398437][T31777] bpf_prog_load+0x14da/0x1c60 [ 1121.398473][T31777] ? __pfx_bpf_prog_load+0x10/0x10 [ 1121.398510][T31777] ? __might_fault+0xaf/0x130 [ 1121.398540][T31777] __sys_bpf+0xd86/0xe00 [ 1121.398571][T31777] ? __pfx___sys_bpf+0x10/0x10 [ 1121.398604][T31777] ? __fget_files+0x2a/0x420 [ 1121.398648][T31777] ? ksys_write+0x242/0x270 [ 1121.398679][T31777] ? __pfx_ksys_write+0x10/0x10 [ 1121.398712][T31777] __x64_sys_bpf+0xba/0xd0 [ 1121.398741][T31777] do_syscall_64+0x166/0x520 [ 1121.398763][T31777] ? trace_irq_disable+0x3b/0x140 [ 1121.398787][T31777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.398808][T31777] ? clear_bhb_loop+0x70/0xc0 [ 1121.398831][T31777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.398850][T31777] RIP: 0033:0x7f076899fb19 [ 1121.398870][T31777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.398887][T31777] RSP: 002b:00007f07697c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1121.398909][T31777] RAX: ffffffffffffffda RBX: 00007f0768c25fa0 RCX: 00007f076899fb19 [ 1121.398924][T31777] RDX: 0000000000000090 RSI: 0000200000005100 RDI: 0000000000000005 [ 1121.398937][T31777] RBP: 00007f07697c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.398950][T31777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.398963][T31777] R13: 00007f0768c26038 R14: 00007f0768c25fa0 R15: 00007fffa2d43d18 [ 1121.399006][T31777] [ 1121.495900][T31696] rxe_eth0 speed is unknown, defaulting to 1000 [ 1122.093795][T31787] netlink: 'syz.4.5791': attribute type 10 has an invalid length. [ 1122.253948][T31787] team0 (unregistering): Port device team_slave_0 removed [ 1122.293645][T31787] team0 (unregistering): Port device team_slave_1 removed [ 1122.408743][T31797] ip_tables: iptables: counters copy to user failed while replacing table [ 1122.489426][T14205] IPVS: starting estimator thread 0... [ 1122.489656][T31800] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20265 [ 1122.490197][T31800] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1122.495207][T31800] netlink: 'syz.7.5795': attribute type 1 has an invalid length. [ 1122.586543][T31802] IPVS: using max 28 ests per chain, 67200 per kthread [ 1122.879118][T31805] bond1: (slave geneve2): making interface the new active one [ 1122.880265][T31805] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1122.942937][ T4952] Bluetooth: hci3: command tx timeout [ 1123.049776][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1123.075474][T14206] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1123.078894][ T13] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1123.078946][ T13] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1123.218865][T31811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1123.422473][ T5650] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1123.422835][ T5650] Bluetooth: hci0: command 0x0405 tx timeout [ 1123.479155][T31818] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5799'. [ 1123.588809][T31823] FAULT_INJECTION: forcing a failure. [ 1123.588809][T31823] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.588843][T31823] CPU: 1 UID: 0 PID: 31823 Comm: syz.4.5800 Not tainted syzkaller #0 PREEMPT(full) [ 1123.588866][T31823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1123.588878][T31823] Call Trace: [ 1123.588886][T31823] [ 1123.588895][T31823] dump_stack_lvl+0xe8/0x150 [ 1123.588933][T31823] should_fail_ex+0x3eb/0x540 [ 1123.588962][T31823] should_failslab+0xa8/0x100 [ 1123.588985][T31823] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 1123.589040][T31823] ? copy_array+0x63/0xf0 [ 1123.589065][T31823] ? copy_array+0x63/0xf0 [ 1123.589092][T31823] ? copy_array+0x63/0xf0 [ 1123.589122][T31823] krealloc_node_align_noprof+0x19a/0x390 [ 1123.589149][T31823] ? rcu_is_watching+0x16/0xb0 [ 1123.589180][T31823] copy_array+0x63/0xf0 [ 1123.589207][T31823] bpf_copy_verifier_state+0xad/0x1300 [ 1123.589234][T31823] ? bpf_split_cur_state+0xa8/0x1680 [ 1123.589269][T31823] bpf_split_cur_state+0xadd/0x1680 [ 1123.589307][T31823] do_check_common+0x4070/0x7590 [ 1123.589334][T31823] ? stack_depot_save_flags+0x33/0x810 [ 1123.589407][T31823] ? __pfx_do_check_common+0x10/0x10 [ 1123.589446][T31823] ? mark_fastcall_patterns+0x10e1/0x1140 [ 1123.589489][T31823] do_check_main+0x95/0x1f0 [ 1123.589514][T31823] bpf_check+0x302b/0x34e0 [ 1123.589568][T31823] ? ktime_get_with_offset+0x93/0x2d0 [ 1123.589595][T31823] ? ktime_get_with_offset+0x93/0x2d0 [ 1123.589621][T31823] ? __pfx_bpf_check+0x10/0x10 [ 1123.589645][T31823] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1123.589674][T31823] bpf_prog_load+0x14da/0x1c60 [ 1123.589708][T31823] ? __pfx_bpf_prog_load+0x10/0x10 [ 1123.589745][T31823] ? __might_fault+0xaf/0x130 [ 1123.589774][T31823] __sys_bpf+0xd86/0xe00 [ 1123.589803][T31823] ? __pfx___sys_bpf+0x10/0x10 [ 1123.589836][T31823] ? __fget_files+0x2a/0x420 [ 1123.589879][T31823] ? ksys_write+0x242/0x270 [ 1123.589908][T31823] ? __pfx_ksys_write+0x10/0x10 [ 1123.589940][T31823] __x64_sys_bpf+0xba/0xd0 [ 1123.589971][T31823] do_syscall_64+0x166/0x520 [ 1123.590005][T31823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.590025][T31823] ? clear_bhb_loop+0x70/0xc0 [ 1123.590049][T31823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.590068][T31823] RIP: 0033:0x7f076899fb19 [ 1123.590088][T31823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.590105][T31823] RSP: 002b:00007f07697c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1123.590128][T31823] RAX: ffffffffffffffda RBX: 00007f0768c25fa0 RCX: 00007f076899fb19 [ 1123.590142][T31823] RDX: 0000000000000090 RSI: 0000200000005100 RDI: 0000000000000005 [ 1123.590155][T31823] RBP: 00007f07697c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.590167][T31823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.590179][T31823] R13: 00007f0768c26038 R14: 00007f0768c25fa0 R15: 00007fffa2d43d18 [ 1123.590211][T31823] [ 1124.025535][T31835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5802'. [ 1124.025859][T31835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5802'. [ 1124.191793][T31840] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5801'. [ 1124.191966][T31838] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5801'. [ 1124.555535][T31851] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5804'. [ 1124.555563][T31851] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5804'. [ 1124.717814][T31851] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5804'. [ 1125.024379][ T4952] Bluetooth: hci3: command tx timeout [ 1125.182146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.253907][T31868] FAULT_INJECTION: forcing a failure. [ 1125.253907][T31868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.253938][T31868] CPU: 1 UID: 0 PID: 31868 Comm: syz.1.5807 Not tainted syzkaller #0 PREEMPT(full) [ 1125.253960][T31868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1125.253972][T31868] Call Trace: [ 1125.253981][T31868] [ 1125.253990][T31868] dump_stack_lvl+0xe8/0x150 [ 1125.254028][T31868] should_fail_ex+0x3eb/0x540 [ 1125.254058][T31868] _copy_from_user+0x2d/0xb0 [ 1125.254084][T31868] ___sys_sendmsg+0x1c6/0x360 [ 1125.254107][T31868] ? __lock_acquire+0x747/0x2de0 [ 1125.254137][T31868] ? __pfx____sys_sendmsg+0x10/0x10 [ 1125.254197][T31868] ? __fget_files+0x3a2/0x420 [ 1125.254221][T31868] ? __fget_files+0x2a/0x420 [ 1125.254255][T31868] __x64_sys_sendmsg+0x1b1/0x290 [ 1125.254281][T31868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1125.254336][T31868] do_syscall_64+0x166/0x520 [ 1125.254361][T31868] ? trace_irq_disable+0x3b/0x140 [ 1125.254384][T31868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.254403][T31868] ? clear_bhb_loop+0x70/0xc0 [ 1125.254427][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.254446][T31868] RIP: 0033:0x7f0de739fb19 [ 1125.254466][T31868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.254484][T31868] RSP: 002b:00007f0de82fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.254506][T31868] RAX: ffffffffffffffda RBX: 00007f0de7626090 RCX: 00007f0de739fb19 [ 1125.254521][T31868] RDX: 0000000000040080 RSI: 0000200000000680 RDI: 0000000000000005 [ 1125.254533][T31868] RBP: 00007f0de82fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.254545][T31868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.254557][T31868] R13: 00007f0de7626128 R14: 00007f0de7626090 R15: 00007ffc2bda2458 [ 1125.254589][T31868] [ 1125.636080][T31879] netlink: 'syz.5.5808': attribute type 4 has an invalid length. [ 1125.707064][T31880] netlink: 'syz.5.5808': attribute type 4 has an invalid length. [ 1125.727993][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1127.093871][T31916] __nla_validate_parse: 1 callbacks suppressed [ 1127.093895][T31916] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5813'. [ 1127.094452][T31914] sctp: [Deprecated]: syz.7.5813 (pid 31914) Use of int in maxseg socket option. [ 1127.094452][T31914] Use struct sctp_assoc_value instead [ 1127.101818][ T4952] Bluetooth: hci3: command tx timeout [ 1127.445497][T31696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.445830][T31696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.446283][T31696] bridge_slave_0: entered allmulticast mode [ 1127.476961][T31696] bridge_slave_0: entered promiscuous mode [ 1127.617168][T31696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.617299][T31696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.617469][T31696] bridge_slave_1: entered allmulticast mode [ 1127.654801][T31696] bridge_slave_1: entered promiscuous mode [ 1127.824055][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.824662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.971873][T31696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.024913][T31696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.229748][T31696] team0: Port device team_slave_0 added [ 1128.263143][T31696] team0: Port device team_slave_1 added [ 1128.476707][T31696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.476728][T31696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.476763][T31696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.514877][T31696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.514916][T31696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.514977][T31696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.747702][T31958] FAULT_INJECTION: forcing a failure. [ 1128.747702][T31958] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.747735][T31958] CPU: 1 UID: 0 PID: 31958 Comm: syz.5.5819 Not tainted syzkaller #0 PREEMPT(full) [ 1128.747757][T31958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1128.747770][T31958] Call Trace: [ 1128.747778][T31958] [ 1128.747788][T31958] dump_stack_lvl+0xe8/0x150 [ 1128.747826][T31958] should_fail_ex+0x3eb/0x540 [ 1128.747858][T31958] ? __alloc_skb+0x1db/0x7a0 [ 1128.747879][T31958] should_failslab+0xa8/0x100 [ 1128.747902][T31958] ? __alloc_skb+0x1db/0x7a0 [ 1128.747919][T31958] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1128.747948][T31958] ? __alloc_skb+0x18d/0x7a0 [ 1128.747969][T31958] ? __alloc_skb+0x1db/0x7a0 [ 1128.747995][T31958] __alloc_skb+0x1db/0x7a0 [ 1128.748021][T31958] netlink_sendmsg+0x5cd/0xb20 [ 1128.748051][T31958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.748075][T31958] ? aa_sock_msg_perm+0x144/0x210 [ 1128.748101][T31958] ? apparmor_socket_sendmsg+0x98/0x360 [ 1128.748132][T31958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.748151][T31958] sock_sendmsg_nosec+0x14e/0x190 [ 1128.748181][T31958] ____sys_sendmsg+0x54e/0x850 [ 1128.748210][T31958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1128.748250][T31958] ? import_iovec+0x73/0xa0 [ 1128.748279][T31958] ___sys_sendmsg+0x2a5/0x360 [ 1128.748299][T31958] ? __lock_acquire+0x747/0x2de0 [ 1128.748329][T31958] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.748389][T31958] ? __fget_files+0x3a2/0x420 [ 1128.748414][T31958] ? __fget_files+0x2a/0x420 [ 1128.748448][T31958] __x64_sys_sendmsg+0x1b1/0x290 [ 1128.748474][T31958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1128.748519][T31958] do_syscall_64+0x166/0x520 [ 1128.748544][T31958] ? trace_irq_disable+0x3b/0x140 [ 1128.748570][T31958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.748590][T31958] ? clear_bhb_loop+0x70/0xc0 [ 1128.748615][T31958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.748634][T31958] RIP: 0033:0x7fc6b3f9fb19 [ 1128.748655][T31958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.748672][T31958] RSP: 002b:00007fc6b4e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.748696][T31958] RAX: ffffffffffffffda RBX: 00007fc6b4226090 RCX: 00007fc6b3f9fb19 [ 1128.748710][T31958] RDX: 0000000000040080 RSI: 0000200000000680 RDI: 0000000000000005 [ 1128.748724][T31958] RBP: 00007fc6b4e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.748735][T31958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.748747][T31958] R13: 00007fc6b4226128 R14: 00007fc6b4226090 R15: 00007ffc3cefad68 [ 1128.748779][T31958] [ 1129.603246][T31962] rxe_eth0 speed is unknown, defaulting to 1000 [ 1129.721302][T31696] hsr_slave_0: entered promiscuous mode [ 1129.765679][T31696] hsr_slave_1: entered promiscuous mode [ 1129.768361][T31696] debugfs: 'hsr0' already exists in 'hsr' [ 1129.768424][T31696] Cannot create hsr debugfs directory [ 1129.987907][T31973] netlink: 'syz.1.5823': attribute type 1 has an invalid length. [ 1131.456489][T31990] ipvlan2: entered promiscuous mode [ 1131.889678][T32014] rds_bind: 23 callbacks suppressed [ 1131.889701][T32014] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1132.159680][T32017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1132.719499][T32022] rxe_eth0 speed is unknown, defaulting to 1000 [ 1132.757519][T32040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5832'. [ 1133.250150][T32044] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1133.250604][T32044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.287083][T32044] netlink: 'syz.4.5833': attribute type 1 has an invalid length. [ 1133.575547][T32050] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1133.575868][T32047] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1133.678452][T32047] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5834'. [ 1133.927658][T32054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1134.066499][T31696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1134.084221][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1134.088500][T31696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1134.114655][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1134.116468][T31696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1134.146564][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1134.188475][T31696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1134.230354][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1134.481375][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482150][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482229][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482302][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482374][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482444][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482514][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482586][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482658][T32065] x_tables: duplicate underflow at hook 3 [ 1134.482740][T32065] x_tables: duplicate underflow at hook 3 [ 1134.617635][T31696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.640876][T31696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.709108][T32065] netlink: 'syz.5.5836': attribute type 219 has an invalid length. [ 1134.785330][T27756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.785621][T27756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.839524][T27756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.839793][T27756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.097930][T32133] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1137.580299][T32141] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1137.610343][T32142] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1137.647636][T32144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.648288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.651399][T32144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.652902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.867311][T32146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1137.895336][T32146] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1138.167351][T31696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.493616][T31696] veth0_vlan: entered promiscuous mode [ 1138.551123][T31696] veth1_vlan: entered promiscuous mode [ 1138.574860][T32154] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5853'. [ 1138.768532][T32166] rxe_eth0 speed is unknown, defaulting to 1000 [ 1138.967699][T31696] veth0_macvtap: entered promiscuous mode [ 1139.029728][T31696] veth1_macvtap: entered promiscuous mode [ 1139.094232][T32180] netlink: 'syz.7.5857': attribute type 1 has an invalid length. [ 1139.113442][T31696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.149728][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5857'. [ 1139.173544][T32182] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5857'. [ 1139.204480][T32180] bond2: entered promiscuous mode [ 1139.206653][T32180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1139.206971][T32183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5859'. [ 1139.207207][T32183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5859'. [ 1139.408373][T31696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.419072][ T1955] block nbd8: Possible stuck request ffff8880288fe000: control (read@0,1024B). Runtime 120 seconds [ 1139.419120][ T1955] block nbd8: Possible stuck request ffff8880288fe1c0: control (read@1024,1024B). Runtime 120 seconds [ 1139.419156][ T1955] block nbd8: Possible stuck request ffff8880288fe380: control (read@2048,1024B). Runtime 120 seconds [ 1139.419182][ T1955] block nbd8: Possible stuck request ffff8880288fe540: control (read@3072,1024B). Runtime 120 seconds [ 1139.703235][T27759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.704232][T27759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.744978][ T1297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.806357][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.297983][T25843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.298049][T25843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.454490][T14205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.454518][T14205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.257758][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5857'. [ 1141.257797][T32180] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5857'. [ 1141.321244][T32180] bridge1: entered promiscuous mode [ 1141.321269][T32180] bridge1: entered allmulticast mode [ 1141.829054][T32233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5868'. [ 1141.867209][T32233] netlink: 'syz.5.5868': attribute type 1 has an invalid length. [ 1142.167688][T32243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1142.185581][T32243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1142.192815][T32243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1142.215567][T32243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1142.216904][T32243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1143.470694][T18121] syz_tun (unregistering): left allmulticast mode [ 1143.654446][T32267] __nla_validate_parse: 3 callbacks suppressed [ 1143.654512][T32267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5874'. [ 1143.744337][T32275] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5874'. [ 1144.304160][T32243] Bluetooth: hci5: command tx timeout [ 1144.306903][T32269] syzkaller1: entered promiscuous mode [ 1144.306926][T32269] syzkaller1: entered allmulticast mode [ 1144.379923][T32242] rxe_eth0 speed is unknown, defaulting to 1000 [ 1144.581334][T32292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1144.852413][T32301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1146.163867][T32339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1146.245219][T32344] batman_adv: batadv0: Interface activated: syzkaller0 [ 1146.245510][T32344] tipc: Resetting bearer [ 1146.396029][T32243] Bluetooth: hci5: command tx timeout [ 1146.466441][T32350] xt_IDLETIMER: label is empty or not nul-terminated [ 1146.567721][T32348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5886'. [ 1146.887628][T32353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5889'. [ 1147.029429][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.030041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.158399][T32361] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5891'. [ 1147.355356][T32368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5892'. [ 1147.607249][T32374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5892'. [ 1147.741637][T32382] tipc: Started in network mode [ 1147.741670][T32382] tipc: Node identity ac14140f, cluster identity 4711 [ 1147.741983][T32382] tipc: New replicast peer: 255.255.255.255 [ 1147.748836][T32382] tipc: Enabled bearer , priority 5 [ 1148.141209][ T30] audit: type=1800 audit(1794238625.951:21): pid=32389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5898" name="blkio.bfq.time_recursive" dev="tmpfs" ino=428 res=0 errno=-22 [ 1148.461772][T32243] Bluetooth: hci5: command tx timeout [ 1148.909382][ T10] tipc: Node number set to 2886997007 [ 1148.931115][T32426] __nla_validate_parse: 2 callbacks suppressed [ 1148.931138][T32426] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5901'. [ 1149.344015][T32242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.344151][T32242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.344315][T32242] bridge_slave_0: entered allmulticast mode [ 1149.396408][T32242] bridge_slave_0: entered promiscuous mode [ 1149.410031][T32242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.413413][T32242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.413580][T32242] bridge_slave_1: entered allmulticast mode [ 1149.419673][T32242] bridge_slave_1: entered promiscuous mode [ 1149.495625][T32242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.514437][T32242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.563848][T32242] team0: Port device team_slave_0 added [ 1149.569197][T32242] team0: Port device team_slave_1 added [ 1149.616823][T32242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.616846][T32242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.616871][T32242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.619549][T32242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.619564][T32242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.619588][T32242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.766553][T32242] hsr_slave_0: entered promiscuous mode [ 1149.767652][T32242] hsr_slave_1: entered promiscuous mode [ 1149.768931][T32242] debugfs: 'hsr0' already exists in 'hsr' [ 1149.768949][T32242] Cannot create hsr debugfs directory [ 1150.290040][T32446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5908'. [ 1150.501215][T32242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.541915][T32243] Bluetooth: hci5: command tx timeout [ 1150.709127][T32242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.205991][T32242] bond0: (slave netdevsim1): Releasing backup interface [ 1151.208325][T32242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.304629][T32471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5914'. [ 1151.420201][T32242] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.567858][T32480] netlink: 'syz.5.5916': attribute type 26 has an invalid length. [ 1152.188966][T32498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1155.009658][T32242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1155.115568][T32242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.128313][T32242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1155.234711][T32242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.517470][T32242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1155.560110][T32242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.577697][T32582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1155.577739][T32582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1155.579212][T32242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1155.656579][T32242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1155.745810][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5933'. [ 1156.033223][T32599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1156.393008][T32608] veth0_to_bridge: entered promiscuous mode [ 1156.393319][T32608] macvtap1: entered allmulticast mode [ 1156.393336][T32608] veth0_to_bridge: entered allmulticast mode [ 1156.398665][T32608] veth0_to_bridge: left allmulticast mode [ 1156.398699][T32608] veth0_to_bridge: left promiscuous mode [ 1158.076933][T32583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.451147][T32640] netlink: 'syz.5.5942': attribute type 11 has an invalid length. [ 1158.595058][T32649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5945'. [ 1158.759705][T32651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5943'. [ 1158.936249][T32648] syzkaller0: entered promiscuous mode [ 1158.936275][T32648] syzkaller0: entered allmulticast mode [ 1159.076280][T32242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.348250][T32242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.436024][T32330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.436291][T32330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.567654][T27761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.567815][T27761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.430287][T32694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1160.557917][T32701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1160.596212][T32698] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1160.618232][T32698] bond1 (unregistering): Released all slaves [ 1160.710820][T32703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5954'. [ 1161.201233][T32722] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20001 [ 1161.579747][T32729] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5959'. [ 1161.579876][T32729] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1161.875703][T32740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5961'. [ 1162.106875][T32746] netlink: 'syz.7.5963': attribute type 1 has an invalid length. [ 1162.106902][T32746] netlink: 'syz.7.5963': attribute type 2 has an invalid length. [ 1162.116898][T32746] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5963'. [ 1162.268017][T32740] ip6tnl1: entered allmulticast mode [ 1162.387090][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1162.970185][ T310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5966'. [ 1162.971035][ T310] openvswitch: netlink: Flow actions attr not present in new flow. [ 1163.140797][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.146620][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.146919][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.147208][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.147507][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.187815][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.188233][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.222064][T32242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.338182][T14205] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1163.339035][T14205] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1163.339732][ T308] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 1163.353459][T10602] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1163.463535][T10606] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1163.991178][ T324] TC_ACT_REPEAT abuse ? [ 1164.228033][T10602] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1164.462327][T32754] Bluetooth: hci0: command 0x0405 tx timeout [ 1165.131164][T32242] veth0_vlan: entered promiscuous mode [ 1165.169785][T32242] veth1_vlan: entered promiscuous mode [ 1165.501301][T32242] veth0_macvtap: entered promiscuous mode [ 1165.545869][T32242] veth1_macvtap: entered promiscuous mode [ 1165.787181][ T379] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1165.889992][T32242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.959661][T32242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.993515][T32325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.062176][T27754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.062950][T27754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.062993][T27754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.231755][T10602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.233623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.306466][ T387] IPv6: NLM_F_CREATE should be specified when creating new route [ 1166.779760][T32326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.779786][T32326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.888115][ T398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'. [ 1166.995925][ T395] syzkaller1: entered promiscuous mode [ 1166.995995][ T395] syzkaller1: entered allmulticast mode [ 1167.099712][ T388] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5980'. [ 1167.400221][T32325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.400246][T32325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.669144][T26183] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1167.742042][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1167.882207][T26181] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1168.183220][ T428] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1168.183286][ T428] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1168.187342][ T428] tipc: Resetting bearer [ 1168.293378][T27754] IPVS: starting estimator thread 0... [ 1168.409013][ T432] validate_nla: 25 callbacks suppressed [ 1168.409037][ T432] netlink: 'syz.5.5985': attribute type 1 has an invalid length. [ 1168.409740][ T444] IPVS: using max 27 ests per chain, 64800 per kthread [ 1168.624243][T26182] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1169.426002][ T1955] block nbd8: Possible stuck request ffff8880288fe000: control (read@0,1024B). Runtime 150 seconds [ 1169.426048][ T1955] block nbd8: Possible stuck request ffff8880288fe1c0: control (read@1024,1024B). Runtime 150 seconds [ 1169.426076][ T1955] block nbd8: Possible stuck request ffff8880288fe380: control (read@2048,1024B). Runtime 150 seconds [ 1169.426101][ T1955] block nbd8: Possible stuck request ffff8880288fe540: control (read@3072,1024B). Runtime 150 seconds [ 1169.529068][ T472] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1169.566736][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.569258][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.009875][ T478] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5990'. [ 1170.031385][ T480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5990'. [ 1170.033318][ T480] bridge_slave_1: left allmulticast mode [ 1170.033345][ T480] bridge_slave_1: left promiscuous mode [ 1170.033611][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.091199][ T480] bridge_slave_0: left allmulticast mode [ 1170.091230][ T480] bridge_slave_0: left promiscuous mode [ 1170.091554][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.952945][ T500] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1171.147419][T32754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1171.166795][T32754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1171.167993][T32754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1171.187865][T32754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1171.201200][T32754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1171.946421][ T522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1172.065558][ T522] block nbd10: server does not support multiple connections per device. [ 1172.066633][ T522] block nbd10: shutting down sockets [ 1172.088565][ T502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.119217][ T502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.721259][ T506] netlink: 2328 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1172.733287][ T7284] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.733417][ T7284] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.733517][ T7284] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.733613][ T7284] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.833492][ T522] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5998'. [ 1173.263250][T32754] Bluetooth: hci4: command tx timeout [ 1173.302172][ T543] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6003'. [ 1173.319114][ T543] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6003'. [ 1173.461204][ T549] syzkaller1: entered promiscuous mode [ 1173.461230][ T549] syzkaller1: entered allmulticast mode [ 1174.192323][ T568] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6009'. [ 1174.349432][ T572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1174.518082][ T501] rxe_eth0 speed is unknown, defaulting to 1000 [ 1175.284124][ T590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6013'. [ 1175.342174][T32754] Bluetooth: hci4: command tx timeout [ 1175.499036][ T597] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6016'. [ 1175.917310][ T605] netlink: 'syz.3.6019': attribute type 5 has an invalid length. [ 1176.007303][ T609] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6020'. [ 1176.238707][ T612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1176.462045][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.513279][ T621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1176.665231][ T627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.421834][T32754] Bluetooth: hci4: command tx timeout [ 1177.454783][ T645] netlink: 'syz.7.6024': attribute type 49 has an invalid length. [ 1178.286787][ T667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6029'. [ 1178.718833][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.718956][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.720490][ T501] bridge_slave_0: entered allmulticast mode [ 1178.736130][ T501] bridge_slave_0: entered promiscuous mode [ 1178.778792][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.778918][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.779074][ T501] bridge_slave_1: entered allmulticast mode [ 1178.796319][ T501] bridge_slave_1: entered promiscuous mode [ 1178.989514][ T501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.013612][ T501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.177612][ T501] team0: Port device team_slave_0 added [ 1179.196924][ T501] team0: Port device team_slave_1 added [ 1179.502199][T32754] Bluetooth: hci4: command tx timeout [ 1179.616295][ T501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.616317][ T501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.616344][ T501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.766709][ T501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.766730][ T501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.766758][ T501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.796034][ T699] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1180.030311][ T501] hsr_slave_0: entered promiscuous mode [ 1180.035060][ T501] hsr_slave_1: entered promiscuous mode [ 1180.037916][ T501] debugfs: 'hsr0' already exists in 'hsr' [ 1180.037934][ T501] Cannot create hsr debugfs directory [ 1180.530331][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888027461000: rx timeout, send abort [ 1180.782587][ T724] netlink: 'syz.7.6039': attribute type 15 has an invalid length. [ 1180.782617][ T724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6039'. [ 1180.827234][ T724] netlink: 'syz.7.6039': attribute type 15 has an invalid length. [ 1180.827259][ T724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6039'. [ 1181.030391][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888027461000: abort rx timeout. Force session deactivation [ 1181.033278][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888027460c00: rx timeout, send abort [ 1181.332674][ T501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.529245][ T737] netlink: 'syz.7.6041': attribute type 219 has an invalid length. [ 1181.540365][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888027460c00: abort rx timeout. Force session deactivation [ 1181.797591][ T501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.149170][ T501] bond0: (slave netdevsim1): Releasing backup interface [ 1182.172644][ T501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.789921][ T768] netlink: 'syz.5.6048': attribute type 1 has an invalid length. [ 1182.789947][ T768] netlink: 248 bytes leftover after parsing attributes in process `syz.5.6048'. [ 1183.015682][ T772] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6050'. [ 1184.129415][ T501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1184.188272][ T501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1184.194644][ T501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1184.299688][ T501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1184.310076][ T805] tipc: Started in network mode [ 1184.310204][ T805] tipc: Node identity f645605667dd, cluster identity 4711 [ 1184.310536][ T805] tipc: Enabled bearer , priority 10 [ 1184.319421][ T501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1184.400518][ T501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1184.476148][ T501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1184.546738][ T501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1184.574857][ T803] tipc: Resetting bearer [ 1184.734385][ T803] tipc: Disabling bearer [ 1184.986073][ T824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.427083][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.427691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.506701][T32754] Bluetooth: hci5: ISO packet for unknown connection handle 3684 [ 1186.097189][ T501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.191019][ T501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.230688][T14206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.230811][T14206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.324743][T14206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.325042][T14206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.501423][ T871] netlink: 'syz.4.6066': attribute type 1 has an invalid length. [ 1186.646801][ T865] bond1: entered promiscuous mode [ 1186.649435][ T865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1187.063195][T26192] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1187.276323][T26182] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1187.442471][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6069'. [ 1187.442509][ T885] bond0: Unable to set down delay as MII monitoring is disabled [ 1187.593705][ T889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6069'. [ 1187.593757][ T889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6069'. [ 1187.632069][ T889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6069'. [ 1187.917504][ T903] ip6gre1: entered allmulticast mode [ 1188.031177][T32327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1188.470168][ T915] netlink: 'syz.5.6075': attribute type 39 has an invalid length. [ 1189.287901][ T957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1189.537376][ T971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6085'. [ 1190.350367][ T999] xt_check_table_hooks: 23 callbacks suppressed [ 1190.350391][ T999] x_tables: duplicate underflow at hook 1 [ 1190.447818][ T997] syzkaller0: entered promiscuous mode [ 1190.449448][ T997] syzkaller0: entered allmulticast mode [ 1190.594267][ T501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.728937][ T1005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1190.915146][ T501] veth0_vlan: entered promiscuous mode [ 1191.006544][ T501] veth1_vlan: entered promiscuous mode [ 1191.153782][ T501] veth0_macvtap: entered promiscuous mode [ 1191.156673][ T1016] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6096'. [ 1191.196939][ T501] veth1_macvtap: entered promiscuous mode [ 1191.431396][ T501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.539403][ T501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.672585][ T1033] netlink: 124 bytes leftover after parsing attributes in process `syz.7.6102'. [ 1191.864238][T27761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.866288][T14205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.866335][T14205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.866372][T14205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.045468][ T1041] xt_hashlimit: size too large, truncated to 1048576 [ 1192.114008][ T1048] netlink: 'syz.3.6104': attribute type 1 has an invalid length. [ 1192.137363][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6106'. [ 1192.251816][ T1049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.327087][ T1064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6106'. [ 1192.383312][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1192.439760][ T1053] ip6tnl3: entered allmulticast mode [ 1192.558114][ T1040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1192.588974][ T1040] bond1: (slave bond2): making interface the new active one [ 1192.589785][ T1040] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1192.691126][ T1052] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1192.691706][ T1067] bridge_slave_0: left allmulticast mode [ 1192.691730][ T1067] bridge_slave_0: left promiscuous mode [ 1192.691971][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.762341][ T1067] bridge_slave_1: left allmulticast mode [ 1192.762372][ T1067] bridge_slave_1: left promiscuous mode [ 1192.762606][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.815052][ T1067] bond0: (slave bond_slave_0): Releasing backup interface [ 1192.833554][ T1067] bond0: (slave bond_slave_1): Releasing backup interface [ 1192.869348][ T1067] team0: Port device team_slave_0 removed [ 1192.983406][ T1067] team0: Port device team_slave_1 removed [ 1192.983846][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.013685][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.019341][ T1067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1193.051751][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.094892][ T1048] bridge_slave_0 (unregistering): left allmulticast mode [ 1193.094923][ T1048] bridge_slave_0 (unregistering): left promiscuous mode [ 1193.095030][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.448485][T27761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.448512][T27761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.735588][T32327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.735649][T32327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.742263][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1194.439464][ T1115] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1194.465179][ T1114] netlink: 'syz.7.6115': attribute type 1 has an invalid length. [ 1194.465203][ T1114] __nla_validate_parse: 1 callbacks suppressed [ 1194.465216][ T1114] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6115'. [ 1195.561412][ T1131] netlink: 384 bytes leftover after parsing attributes in process `syz.1.6117'. [ 1196.570944][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6122'. [ 1196.654055][ T1151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6122'. [ 1196.839949][ T1157] ipip0: entered allmulticast mode [ 1197.258409][ T1170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6128'. [ 1197.672994][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.698491][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.068441][T27761] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1198.068481][T27761] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.068505][T27761] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.109017][T27761] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1198.109057][T27761] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.109082][T27761] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.109116][T27761] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1198.109140][T27761] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.163994][T27761] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.346388][ T1187] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6131'. [ 1198.349339][ T1187] Cannot find set identified by id 65533 to match [ 1198.832663][ T1200] wg2: entered allmulticast mode [ 1198.833095][ T1200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1199.019484][ T1209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1199.037980][ T1213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6134'. [ 1199.517644][ T1955] block nbd8: Possible stuck request ffff8880288fe000: control (read@0,1024B). Runtime 180 seconds [ 1199.517691][ T1955] block nbd8: Possible stuck request ffff8880288fe1c0: control (read@1024,1024B). Runtime 180 seconds [ 1199.517718][ T1955] block nbd8: Possible stuck request ffff8880288fe380: control (read@2048,1024B). Runtime 180 seconds [ 1199.517744][ T1955] block nbd8: Possible stuck request ffff8880288fe540: control (read@3072,1024B). Runtime 180 seconds [ 1199.631820][ T5001] udevd[5001]: worker [29500] /devices/virtual/block/nbd8 timeout; kill it [ 1199.631966][ T5001] udevd[5001]: seq 28405 '/devices/virtual/block/nbd8' killed [ 1199.797256][ T1223] netlink: 'syz.1.6137': attribute type 1 has an invalid length. [ 1200.335490][ T1242] ip6tnl2: entered allmulticast mode [ 1201.229401][ T1260] bond3: entered allmulticast mode [ 1201.230207][ T1260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1201.256517][ T1256] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1201.328633][ T1256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.377509][ T1256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.522801][ T1256] bond0 (unregistering): Released all slaves [ 1202.689080][ T1311] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001 [ 1203.127199][ T1333] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6164'. [ 1203.128164][ T1334] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6164'. [ 1204.545380][ T1373] tcf_pedit_act: 7 callbacks suppressed [ 1204.545479][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545499][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545513][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545527][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545542][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545555][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545570][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545583][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545607][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545622][ T1373] tc action pedit unable to extract header offset for header type (0x5) [ 1204.545655][ T1373] 0: reclassify loop, rule prio 0, protocol 800 [ 1204.624055][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.624584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.799485][ T1371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6171'. [ 1205.040064][ T1371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.088631][ T1371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.049053][ T1405] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 1206.173176][ T1399] syzkaller1: entered promiscuous mode [ 1206.173202][ T1399] syzkaller1: entered allmulticast mode [ 1206.239019][ T1410] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6180'. [ 1206.371818][ T1416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6180'. [ 1206.399220][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6181'. [ 1206.485646][ T1426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6180'. [ 1206.564202][ T1424] Bluetooth: MGMT ver 1.23 [ 1207.080710][ T1449] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6187'. [ 1207.092258][ T1449] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1207.294341][ T1454] FAULT_INJECTION: forcing a failure. [ 1207.294341][ T1454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.294376][ T1454] CPU: 1 UID: 0 PID: 1454 Comm: syz.4.6189 Not tainted syzkaller #0 PREEMPT(full) [ 1207.294406][ T1454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1207.294417][ T1454] Call Trace: [ 1207.294426][ T1454] [ 1207.294436][ T1454] dump_stack_lvl+0xe8/0x150 [ 1207.294477][ T1454] should_fail_ex+0x3eb/0x540 [ 1207.294511][ T1454] _copy_from_user+0x2d/0xb0 [ 1207.294540][ T1454] __copy_msghdr+0x390/0x590 [ 1207.294574][ T1454] ___sys_sendmsg+0x213/0x360 [ 1207.294596][ T1454] ? __lock_acquire+0x747/0x2de0 [ 1207.294630][ T1454] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.294692][ T1454] ? __fget_files+0x3a2/0x420 [ 1207.294720][ T1454] ? __fget_files+0x2a/0x420 [ 1207.294755][ T1454] __x64_sys_sendmsg+0x1b1/0x290 [ 1207.294786][ T1454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1207.294833][ T1454] do_syscall_64+0x166/0x520 [ 1207.294861][ T1454] ? trace_irq_disable+0x3b/0x140 [ 1207.294897][ T1454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.294920][ T1454] ? clear_bhb_loop+0x70/0xc0 [ 1207.294952][ T1454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.294973][ T1454] RIP: 0033:0x7fe23819fb19 [ 1207.294994][ T1454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.295011][ T1454] RSP: 002b:00007fe239068028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.295036][ T1454] RAX: ffffffffffffffda RBX: 00007fe238425fa0 RCX: 00007fe23819fb19 [ 1207.295051][ T1454] RDX: 0000000020000885 RSI: 0000200000001440 RDI: 0000000000000007 [ 1207.295065][ T1454] RBP: 00007fe239068090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.295079][ T1454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.295091][ T1454] R13: 00007fe238426038 R14: 00007fe238425fa0 R15: 00007fffd1ebe1f8 [ 1207.295126][ T1454] [ 1207.529752][ T1452] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1207.529774][ T1452] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.529803][ T1452] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1208.228214][ T1469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 1208.293829][ T1474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 1208.482206][ T1476] team_slave_1: entered allmulticast mode [ 1208.896745][ T1488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6195'. [ 1208.964710][ T1491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6195'. [ 1209.271394][ T1488] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1210.074865][ T1505] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6198'. [ 1210.074919][ T1505] tc_dump_action: action bad kind [ 1210.733388][ T1512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6199'. [ 1210.777815][ T1512] bridge0: port 1(veth0) entered blocking state [ 1210.778242][ T1512] bridge0: port 1(veth0) entered disabled state [ 1210.778795][ T1512] veth0: entered allmulticast mode [ 1210.805345][ T1512] veth0: entered promiscuous mode [ 1210.845097][ T1512] bridge0: port 1(veth0) entered blocking state [ 1210.845244][ T1512] bridge0: port 1(veth0) entered forwarding state [ 1211.109705][ T1515] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1211.303654][ T1532] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1211.479087][ T1540] __nla_validate_parse: 2 callbacks suppressed [ 1211.479110][ T1540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6205'. [ 1212.417908][ T1564] netlink: 'syz.5.6207': attribute type 10 has an invalid length. [ 1212.483840][ T1568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6210'. [ 1212.764440][ T1573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1213.017333][ T1564] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1213.400585][ T1589] bond0: entered promiscuous mode [ 1213.400612][ T1589] bond_slave_0: entered promiscuous mode [ 1213.418596][ T1589] bond_slave_1: entered promiscuous mode [ 1213.437325][ T1589] batadv0: entered promiscuous mode [ 1213.459629][ T1589] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1213.459697][ T1589] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1213.586450][ T1589] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1213.847859][ T1597] bond1 (unregistering): Released all slaves [ 1214.190736][ T1615] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6219'. [ 1214.367336][ T1612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.401285][ T1612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.455153][ T1623] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1214.521188][ T1612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.653756][ T1612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.675668][ T1612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.741058][ T1612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1214.741088][ T1612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1214.808097][ T1612] veth1_vlan: left promiscuous mode [ 1214.818760][ T1612] veth0_vlan: left promiscuous mode [ 1214.821115][ T1612] veth0_vlan: entered promiscuous mode [ 1214.830511][ T1612] veth1_vlan: entered promiscuous mode [ 1214.846159][ T1612] veth1_macvtap: left promiscuous mode [ 1214.847486][ T1612] veth0_macvtap: left promiscuous mode [ 1214.849233][ T1612] veth0_macvtap: entered promiscuous mode [ 1214.850491][ T1612] veth1_macvtap: entered promiscuous mode [ 1214.888395][ T1612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.889601][ T1612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.890823][ T1612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.926066][ T1612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1214.943412][ T1612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1214.963300][ T1612] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1215.424192][ T7284] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1215.424231][ T7284] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.424256][ T7284] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.424312][ T7284] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1215.424337][ T7284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.424360][ T7284] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.424396][ T7284] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1215.424420][ T7284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.424443][ T7284] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.672268][ T1643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1216.040849][ T7284] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.331113][ T1685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6231'. [ 1216.331204][ T1685] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6231'. [ 1216.337894][ T1685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6231'. [ 1218.135131][ T1735] netlink: 'syz.3.6240': attribute type 4 has an invalid length. [ 1218.141152][ T1736] netlink: 'syz.3.6240': attribute type 4 has an invalid length. [ 1218.530890][ T1741] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1218.812794][ T1730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.919861][ T1758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6242'. [ 1219.065159][ T1762] tipc: New replicast peer: 255.255.255.255 [ 1219.090030][ T1762] tipc: Enabled bearer , priority 5 [ 1219.118638][ T1762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6243'. [ 1219.142295][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6247'. [ 1219.174215][ T1762] netlink: 'syz.4.6243': attribute type 1 has an invalid length. [ 1219.363230][ T1762] bond2: entered promiscuous mode [ 1219.367087][ T1762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1219.536680][ T1762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6243'. [ 1219.536795][ T1762] bond2: entered allmulticast mode [ 1219.597666][ T1781] syzkaller0: entered promiscuous mode [ 1219.597692][ T1781] syzkaller0: entered allmulticast mode [ 1219.909796][ T1762] bond2: (slave bridge2): making interface the new active one [ 1219.909828][ T1762] bridge2: entered promiscuous mode [ 1219.910042][ T1762] bridge2: entered allmulticast mode [ 1219.936253][ T1762] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1220.062509][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1220.277674][ T1804] netlink: 'syz.4.6253': attribute type 11 has an invalid length. [ 1220.508540][T10608] tipc: Node number set to 2442682454 [ 1220.868074][ T1816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6257'. [ 1221.008384][ T1824] netlink: 'syz.1.6257': attribute type 13 has an invalid length. [ 1221.640064][ T1837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1221.857420][ T1847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1221.864484][ T1846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6264'. [ 1222.259163][ T1852] Bluetooth: hci0: unsupported parameter 5135 [ 1222.259191][ T1852] Bluetooth: hci0: unsupported parameter 8192 [ 1222.259204][ T1852] Bluetooth: hci0: unsupported parameter 5135 [ 1222.259216][ T1852] Bluetooth: hci0: unsupported parameter 8192 [ 1223.161194][ T1876] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1223.301345][ T1874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6272'. [ 1223.336101][ T1874] netlink: 'syz.4.6272': attribute type 4 has an invalid length. [ 1223.336129][ T1874] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6272'. [ 1223.827059][T32327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.827313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.885445][ T1892] syzkaller0: entered promiscuous mode [ 1223.885511][ T1892] syzkaller0: entered allmulticast mode [ 1225.200946][ T1926] netlink: 'syz.1.6282': attribute type 6 has an invalid length. [ 1225.269412][ T1926] batadv1: entered promiscuous mode [ 1225.283036][ T1926] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1225.337791][ T1931] __nla_validate_parse: 1 callbacks suppressed [ 1225.337817][ T1931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 1225.368822][ T1934] netlink: 'syz.1.6282': attribute type 6 has an invalid length. [ 1225.388622][ T1934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 1225.491289][ T1931] batadv2: entered promiscuous mode [ 1225.502223][ T1931] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1225.697221][ T1928] xt_HMARK: spi-set and port-set can't be combined [ 1226.320119][ T1956] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6286'. [ 1226.320246][ T1956] 0: renamed from hsr0 (while UP) [ 1226.721403][ T1965] netlink: 344 bytes leftover after parsing attributes in process `syz.4.6287'. [ 1226.810878][ T1956] 0: entered allmulticast mode [ 1226.810909][ T1956] hsr_slave_0: entered allmulticast mode [ 1226.826238][ T1956] hsr_slave_1: entered allmulticast mode [ 1226.845486][ T1956] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1227.039861][ T1972] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6289'. [ 1227.384237][ T1976] syzkaller0: entered promiscuous mode [ 1227.384262][ T1976] syzkaller0: entered allmulticast mode [ 1227.414107][ T1982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6292'. [ 1227.643946][ T1990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1227.644435][ T1990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1228.058483][ T2009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6292'. [ 1228.303560][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1228.836470][ T2023] netlink: 'syz.3.6298': attribute type 21 has an invalid length. [ 1228.865170][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.865423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.606713][ T1955] block nbd8: Possible stuck request ffff8880288fe000: control (read@0,1024B). Runtime 210 seconds [ 1229.606798][ T1955] block nbd8: Possible stuck request ffff8880288fe1c0: control (read@1024,1024B). Runtime 210 seconds [ 1229.606827][ T1955] block nbd8: Possible stuck request ffff8880288fe380: control (read@2048,1024B). Runtime 210 seconds [ 1229.606853][ T1955] block nbd8: Possible stuck request ffff8880288fe540: control (read@3072,1024B). Runtime 210 seconds [ 1230.087454][ T2054] netlink: 'syz.1.6304': attribute type 1 has an invalid length. [ 1230.087480][ T2054] netlink: 'syz.1.6304': attribute type 2 has an invalid length. [ 1230.087494][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6304'. [ 1230.223392][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1230.309341][ T2054] netlink: 'syz.1.6304': attribute type 1 has an invalid length. [ 1230.309404][ T2054] netlink: 'syz.1.6304': attribute type 2 has an invalid length. [ 1230.423509][ T2058] __nla_validate_parse: 2 callbacks suppressed [ 1230.423533][ T2058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6304'. [ 1230.677525][ T2057] 8021q: VLANs not supported on ip6gre0 [ 1230.677603][ T2062] tap0: tun_chr_ioctl cmd 1074025681 [ 1231.209591][ T2083] netlink: 'syz.5.6309': attribute type 11 has an invalid length. [ 1233.092289][ T2121] netlink: 'syz.7.6320': attribute type 62 has an invalid length. [ 1233.144563][ T2121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6320'. [ 1233.488939][ T2127] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 1234.066558][T27757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.066819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.108718][ T2136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6324'. [ 1234.561264][ T2147] netlink: 'syz.7.6327': attribute type 1 has an invalid length. [ 1235.749749][ T2166] ip6gre1: entered allmulticast mode [ 1237.145795][ T2191] ip6tnl1: entered allmulticast mode [ 1237.512861][ T2195] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6336'. [ 1237.619745][ T2195] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1237.694775][ T2195] bond3 (unregistering): Released all slaves [ 1238.946835][ T2219] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1239.078165][ T2223] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1239.124208][ T2224] bridge5: entered allmulticast mode [ 1239.189799][T27759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.190050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.460189][ T2234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6342'. [ 1240.239106][ T2247] netlink: 'syz.1.6346': attribute type 11 has an invalid length. [ 1241.949958][ T2295] netlink: 'syz.5.6351': attribute type 309 has an invalid length. [ 1242.860232][ T2309] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6359'. [ 1242.982121][ T2309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6359'. [ 1243.141130][ T2316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6360'. [ 1243.257615][ T2316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6360'. [ 1243.347960][ T2321] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6360'. [ 1243.366112][ T2321] gretap0: entered promiscuous mode [ 1243.387861][ T2321] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6360'. [ 1243.387980][ T2321] 0{X: renamed from gretap0 [ 1243.580502][ T2321] 0{X: left promiscuous mode [ 1243.580530][ T2321] 0{X: entered allmulticast mode [ 1243.595821][ T2321] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1243.608207][ T2328] : renamed from virt_wifi0 [ 1243.808543][ T2326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1244.325719][T27757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.325990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.365941][ T2345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1244.412401][ T2345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1244.443618][ T2345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1245.582612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1245.672900][ T2382] x_tables: duplicate underflow at hook 4 [ 1246.060788][ T2382] syzkaller0: entered promiscuous mode [ 1246.060815][ T2382] syzkaller0: entered allmulticast mode [ 1246.388297][T32754] Bluetooth: hci3: command 0x0406 tx timeout [ 1248.025423][ T2432] bond4: entered promiscuous mode [ 1248.025449][ T2432] bond4: entered allmulticast mode [ 1248.469009][ T2477] __nla_validate_parse: 5 callbacks suppressed [ 1248.469033][ T2477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1248.498828][ T2477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1248.521163][ T2479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1248.527323][ T2484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1249.386709][ T2506] netlink: 'syz.3.6395': attribute type 3 has an invalid length. [ 1249.387593][ T2506] openvswitch: netlink: Message has 37 unknown bytes. [ 1250.064471][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.064714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.075316][ T2458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1251.672856][ T2527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6399'. [ 1252.150198][ T2551] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1252.179928][ T2535] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1252.195278][ T2535] bridge0: port 2(bond7) entered blocking state [ 1252.195409][ T2535] bridge0: port 2(bond7) entered disabled state [ 1252.195562][ T2535] bond7: entered allmulticast mode [ 1252.226891][ T2535] bond7: entered promiscuous mode [ 1252.229781][ T2535] bridge0: port 2(bond7) entered blocking state [ 1252.230174][ T2535] bridge0: port 2(bond7) entered forwarding state [ 1252.322506][ T2551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6403'. [ 1252.860197][T27757] bridge0: port 2(bond7) entered disabled state [ 1253.090464][ T2572] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 1253.106947][ T2572] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6407'. [ 1253.299773][ T7293] IPVS: starting estimator thread 0... [ 1253.383724][ T2576] IPVS: using max 25 ests per chain, 60000 per kthread [ 1253.533406][ T2585] netlink: get zone limit has 8 unknown bytes [ 1254.159778][ T2603] openvswitch: netlink: Multiple metadata blocks provided [ 1254.187945][ T2605] openvswitch: netlink: Multiple metadata blocks provided [ 1254.248806][ T2609] netlink: 'syz.5.6415': attribute type 11 has an invalid length. [ 1254.756148][ T2634] netlink: 'syz.3.6420': attribute type 4 has an invalid length. [ 1254.756365][ T2630] netlink: 'syz.3.6420': attribute type 4 has an invalid length. [ 1255.195607][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.195925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.359486][ T2651] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6422'. [ 1255.359534][ T2651] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6422'. [ 1255.600568][ T2653] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6423'. [ 1255.600702][ T2653] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1255.623993][ T2653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6423'. [ 1255.624020][ T2653] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1256.009769][ T2668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6425'. [ 1256.226802][ T2673] netlink: 'syz.7.6428': attribute type 15 has an invalid length. [ 1256.226832][ T2673] netlink: 'syz.7.6428': attribute type 21 has an invalid length. [ 1257.520801][ T2740] x_tables: duplicate underflow at hook 1 [ 1257.581936][ T4952] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 1257.582315][ T4952] Bluetooth: hci0: command 0x0405 tx timeout [ 1257.787123][ T2747] ip6t_hbh: unknown flags AD [ 1257.892234][ T2755] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1258.499351][ T2770] bond0: entered promiscuous mode [ 1258.499376][ T2770] bond_slave_0: entered promiscuous mode [ 1258.514394][ T2770] bond_slave_1: entered promiscuous mode [ 1258.537893][ T2770] bond0: left promiscuous mode [ 1258.537959][ T2770] bond_slave_0: left promiscuous mode [ 1258.540156][ T2770] bond_slave_1: left promiscuous mode [ 1258.998724][ T2785] NFSD: Failed to start, no listeners configured. [ 1259.580373][ T2813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6450'. [ 1259.672909][ T1955] block nbd8: Possible stuck request ffff8880288fe000: control (read@0,1024B). Runtime 240 seconds [ 1259.672955][ T1955] block nbd8: Possible stuck request ffff8880288fe1c0: control (read@1024,1024B). Runtime 240 seconds [ 1259.672982][ T1955] block nbd8: Possible stuck request ffff8880288fe380: control (read@2048,1024B). Runtime 240 seconds [ 1259.673006][ T1955] block nbd8: Possible stuck request ffff8880288fe540: control (read@3072,1024B). Runtime 240 seconds [ 1259.967409][ T2813] netlink: 'syz.1.6450': attribute type 1 has an invalid length. [ 1260.197255][ T2823] netlink: 'syz.4.6452': attribute type 1 has an invalid length. [ 1260.601288][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.601362][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.855845][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.855937][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.964277][T27759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.964891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.525411][ T2833] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1261.525479][ T2833] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1261.688967][ T2833] batadv0 (unregistering): left promiscuous mode [ 1262.314444][ T2873] syzkaller0: entered promiscuous mode [ 1262.314472][ T2873] syzkaller0: entered allmulticast mode [ 1263.064663][ T2911] netlink: 'syz.7.6465': attribute type 11 has an invalid length. [ 1263.124670][ T2912] xt_l2tp: invalid flags combination: 8 [ 1263.185585][T32754] Bluetooth: hci0: command 0x0405 tx timeout [ 1263.716510][ T2934] netlink: 'syz.5.6471': attribute type 2 has an invalid length. [ 1263.745356][ T2935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1263.952898][ T2934] macsec1: entered promiscuous mode [ 1263.997731][ T2932] syzkaller1: entered promiscuous mode [ 1263.997829][ T2932] syzkaller1: entered allmulticast mode [ 1264.734444][T32754] Bluetooth: hci4: unexpected cc 0x1005 length: 10 > 8 [ 1264.767089][ T2957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1265.153660][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6479'. [ 1265.188001][ T2977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6482'. [ 1265.208716][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6479'. [ 1265.340962][T27757] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1265.341064][T27757] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1265.341161][T27757] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1265.611075][ T2991] netlink: 'syz.3.6485': attribute type 1 has an invalid length. [ 1266.220202][ T2997] bond2: left promiscuous mode [ 1266.237243][ T2997] bridge1: left promiscuous mode [ 1266.691195][ T3022] ip6gretap0: entered promiscuous mode [ 1266.710845][ T3022] batadv0: entered promiscuous mode [ 1266.719427][T27759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.720074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.743869][ T3022] debugfs: 'hsr1' already exists in 'hsr' [ 1266.743895][ T3022] Cannot create hsr debugfs directory [ 1266.997908][ T3024] syzkaller1: entered promiscuous mode [ 1266.997934][ T3024] syzkaller1: entered allmulticast mode [ 1267.806903][ T3049] lo speed is unknown, defaulting to 1000 [ 1267.826194][ T3049] lo speed is unknown, defaulting to 1000 [ 1267.827215][ T3049] lo speed is unknown, defaulting to 1000 [ 1268.383697][ T3060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6497'. [ 1268.430068][ T3049] infiniband syz2: set active [ 1268.430137][T26182] lo speed is unknown, defaulting to 1000 [ 1268.430204][ T3049] infiniband syz2: added lo [ 1268.453072][ T3049] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1268.455582][ T3049] infiniband syz2: Couldn't open port 1 [ 1268.455884][ T3049] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1268.455914][ T3049] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1268.455950][ T3049] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1268.570103][ T3049] RDS/IB: syz2: added [ 1268.570162][ T3049] smc: adding ib device syz2 with port count 1 [ 1268.570183][ T3049] smc: ib device syz2 port 1 has no pnetid [ 1268.570668][T26182] lo speed is unknown, defaulting to 1000 [ 1268.596625][ T3049] lo speed is unknown, defaulting to 1000 [ 1268.923797][ T3070] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6499'. [ 1268.925804][ T3070] netlink: 'syz.3.6499': attribute type 2 has an invalid length. [ 1268.925826][ T3070] netlink: 'syz.3.6499': attribute type 8 has an invalid length. [ 1268.925838][ T3070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6499'. [ 1269.024315][ T3049] lo speed is unknown, defaulting to 1000 [ 1269.296766][ T3012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1269.298420][ T3007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6487'. [ 1270.070478][ T3049] lo speed is unknown, defaulting to 1000 [ 1270.409656][ T3104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6503'. [ 1271.177459][ T3049] lo speed is unknown, defaulting to 1000 [ 1272.107830][ T3049] lo speed is unknown, defaulting to 1000 [ 1272.473586][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.473879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.975579][T27759] IPVS: starting estimator thread 0... [ 1272.991089][ T3153] ip_tables: iptables: counters copy to user failed while replacing table [ 1273.063041][ T3157] IPVS: using max 25 ests per chain, 60000 per kthread [ 1273.397631][ T3049] lo speed is unknown, defaulting to 1000 [ 1273.844826][ T3173] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6517'. [ 1274.343297][ T3176] macsec1: entered promiscuous mode [ 1274.343362][ T3176] bridge0: entered promiscuous mode [ 1274.343951][ T3176] macsec1: entered allmulticast mode [ 1274.344010][ T3176] bridge0: entered allmulticast mode [ 1274.360134][ T3176] bridge0: port 1(macsec1) entered blocking state [ 1274.362880][ T3176] bridge0: port 1(macsec1) entered disabled state [ 1274.444926][ T3176] bridge0: left allmulticast mode [ 1274.478577][ T3049] lo speed is unknown, defaulting to 1000 [ 1274.490290][T10606] bridge0: left promiscuous mode [ 1275.596212][ T3235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6522'. [ 1275.670501][ T3231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6522'. [ 1275.687526][ T3224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1275.784696][ T3232] tc_dump_action: action bad kind [ 1275.880632][ T3049] lo speed is unknown, defaulting to 1000 [ 1276.732601][ T3253] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 1277.020532][ T3253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1277.289145][ T3261] syzkaller0: entered promiscuous mode [ 1277.289171][ T3261] syzkaller0: entered allmulticast mode [ 1277.317798][ T3049] lo speed is unknown, defaulting to 1000 [ 1277.331377][ T3261] block nbd10: server does not support multiple connections per device. [ 1277.332432][ T3261] block nbd10: shutting down sockets [ 1277.403864][ T3266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1277.504288][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.504610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.939087][ T3275] nft_compat: unsupported protocol 0 [ 1278.221958][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1279.230288][ T3049] lo speed is unknown, defaulting to 1000 [ 1279.678319][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1279.697605][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1280.009703][ T3316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6539'. [ 1280.069631][ T3316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6539'. [ 1280.225089][ T3315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6542'. [ 1280.429426][ T3326] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6544'. [ 1280.604072][ T3329] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6544'. [ 1280.618926][ T3049] lo speed is unknown, defaulting to 1000 [ 1280.663004][ T3335] gre1: entered promiscuous mode [ 1280.684255][ T3337] ip_tables: iptables: counters copy to user failed while replacing table [ 1281.704568][ T3357] nbd: socks must be embedded in a SOCK_ITEM attr [ 1281.863445][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.001163][ T7284] nci: nci_rx_work: unknown MT 0x6 [ 1282.015455][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.126579][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.227657][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.277001][ T3049] lo speed is unknown, defaulting to 1000 [ 1282.323562][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.414049][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.504789][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.634063][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1282.935209][ T3049] lo speed is unknown, defaulting to 1000 [ 1283.245955][ T4952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1283.260123][ T4952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1283.276514][ T4952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1283.289695][ T4952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1283.299235][ T4952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1283.389694][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.390279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.470473][ T3394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6559'. [ 1283.570443][ T3396] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1284.520509][ T3389] rxe_eth0 speed is unknown, defaulting to 1000 [ 1284.684861][ T3361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1285.343481][T32754] Bluetooth: hci2: command tx timeout [ 1285.357797][ T1279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.654499][ T3442] gtp1: entered promiscuous mode [ 1286.008815][ T3428] bond4: option arp_validate: invalid value (262147) [ 1286.087537][ T3428] bond4 (unregistering): Released all slaves [ 1286.658252][ T1279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.853919][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e250000: rx timeout, send abort [ 1287.347794][T32754] Bluetooth: hci5: command 0x0406 tx timeout [ 1287.359554][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e250000: abort rx timeout. Force session deactivation [ 1287.430528][ T4952] Bluetooth: hci2: command tx timeout [ 1287.445409][ T1279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.630698][ T1279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.701264][ T3389] lo speed is unknown, defaulting to 1000 [ 1287.982974][ T3458] Cannot find del_set index 0 as target [ 1288.045577][ T3417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1288.086150][ T3458] xt_TCPMSS: Only works on TCP SYN packets [ 1288.257584][ T3455] __nla_validate_parse: 6 callbacks suppressed [ 1288.257609][ T3455] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6566'. [ 1288.537296][ T1279] bridge_slave_1: left allmulticast mode [ 1288.537329][ T1279] bridge_slave_1: left promiscuous mode [ 1288.539861][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.647432][ T1279] bridge_slave_0: left allmulticast mode [ 1288.647464][ T1279] bridge_slave_0: left promiscuous mode [ 1288.669434][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.897451][ T3473] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6568'. [ 1289.109525][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.109799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.504194][T32754] Bluetooth: hci2: command tx timeout [ 1289.761187][ T1955] block nbd8: Possible stuck request ffff8880288fe000: control (read@0,1024B). Runtime 270 seconds [ 1289.761235][ T1955] block nbd8: Possible stuck request ffff8880288fe1c0: control (read@1024,1024B). Runtime 270 seconds [ 1289.761262][ T1955] block nbd8: Possible stuck request ffff8880288fe380: control (read@2048,1024B). Runtime 270 seconds [ 1289.761288][ T1955] block nbd8: Possible stuck request ffff8880288fe540: control (read@3072,1024B). Runtime 270 seconds [ 1290.175628][ T1279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.197651][ T1279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.224447][ T1279] bond0 (unregistering): Released all slaves [ 1290.904495][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6578'. [ 1291.584006][T32754] Bluetooth: hci2: command tx timeout [ 1291.849969][ T3534] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 1293.116417][ T3565] netlink: 'syz.4.6587': attribute type 1 has an invalid length. [ 1293.459648][ T3565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6587'. [ 1293.572963][ T3389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.573086][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.573255][ T3389] bridge_slave_0: entered allmulticast mode [ 1293.615689][ T3389] bridge_slave_0: entered promiscuous mode [ 1293.633106][ T3389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.633267][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.633424][ T3389] bridge_slave_1: entered allmulticast mode [ 1293.640414][ T3389] bridge_slave_1: entered promiscuous mode [ 1293.770399][ T3389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.965505][ T3389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.225301][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.225592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.499283][ T3582] batman_adv: batadv0: Adding interface: syzkaller0 [ 1294.499495][ T3582] batman_adv: batadv0: Interface activated: syzkaller0 [ 1294.617592][ T3389] team0: Port device team_slave_0 added [ 1294.686413][ T1279] hsr_slave_0: left promiscuous mode [ 1294.713851][ T1279] hsr_slave_1: left promiscuous mode [ 1294.714903][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.714974][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.753997][ T1279] veth1_macvtap: left promiscuous mode [ 1294.754040][ T1279] veth0_macvtap: left promiscuous mode [ 1294.754152][ T1279] veth1_vlan: left promiscuous mode [ 1294.754225][ T1279] veth0_vlan: left promiscuous mode [ 1294.770823][ T3592] netlink: 63 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1296.363381][ T1279] team0 (unregistering): Port device team_slave_1 removed [ 1296.457191][ T1279] team0 (unregistering): Port device team_slave_0 removed [ 1296.790891][ T30] audit: type=1800 audit(1794238774.601:22): pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6596" name="blkio.bfq.time_recursive" dev="tmpfs" ino=685 res=0 errno=-22 [ 1296.862518][ T7292] smc: removing ib device syz2 [ 1296.919696][ T7292] smbdirect: ib_dev[syz2] removed [ 1296.950324][ T3389] team0: Port device team_slave_1 added [ 1297.002711][T26183] infiniband syz2: ib_query_port failed (-19) [ 1297.010589][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1297.011448][ T3616] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6597'. [ 1297.528981][ T3389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.529002][ T3389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.529029][ T3389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.568040][ T3389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.568059][ T3389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.568084][ T3389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.575350][ T3389] hsr_slave_0: entered promiscuous mode [ 1298.599783][ T3650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6603'. [ 1298.606538][ T3389] hsr_slave_1: entered promiscuous mode [ 1298.607281][ T3389] debugfs: 'hsr0' already exists in 'hsr' [ 1298.607314][ T3389] Cannot create hsr debugfs directory [ 1299.136390][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6605'. [ 1299.286357][ T3655] bond6: entered promiscuous mode [ 1299.286386][ T3655] bond6: entered allmulticast mode [ 1300.007852][T32325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.008133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.123082][ T3689] netlink: 'syz.5.6609': attribute type 12 has an invalid length. [ 1300.123108][ T3689] netlink: 'syz.5.6609': attribute type 5 has an invalid length. [ 1300.123346][ T3691] netlink: 'syz.5.6609': attribute type 12 has an invalid length. [ 1300.123361][ T3691] netlink: 'syz.5.6609': attribute type 5 has an invalid length. [ 1301.417488][ T3719] smc: removing ib device rxe0 [ 1301.819367][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1302.099689][ T3719] smbdirect: ib_dev[rxe0] removed [ 1302.617505][ T3729] syzkaller0: left promiscuous mode [ 1302.617532][ T3729] syzkaller0: left allmulticast mode [ 1303.747647][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1303.747677][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1304.359155][ T3771] ip_tables: iptables: counters copy to user failed while replacing table [ 1304.612454][ T3389] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1304.668768][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1304.677688][ T3389] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1304.729564][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1304.738303][ T3389] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1304.801360][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1304.810762][ T3389] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1304.814541][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6625'. [ 1304.814688][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6625'. [ 1304.871136][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1305.022318][T32327] IPVS: starting estimator thread 0... [ 1305.112115][ T3794] IPVS: using max 27 ests per chain, 64800 per kthread [ 1305.215219][ T3785] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1305.741843][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1305.747411][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.747672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.118621][ T3813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1306.124522][ T5296] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1306.265372][ T3816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1306.310936][ T3389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.539673][ T3389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.589063][T27757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.589177][T27757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.686342][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.686474][ T7287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.253393][ T3851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6635'. [ 1308.426551][ T3846] FAULT_INJECTION: forcing a failure. [ 1308.426551][ T3846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.426587][ T3846] CPU: 1 UID: 0 PID: 3846 Comm: syz.4.6633 Not tainted syzkaller #0 PREEMPT(full) [ 1308.426612][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1308.426623][ T3846] Call Trace: [ 1308.426633][ T3846] [ 1308.426643][ T3846] dump_stack_lvl+0xe8/0x150 [ 1308.426686][ T3846] should_fail_ex+0x3eb/0x540 [ 1308.426725][ T3846] _copy_to_user+0x31/0xb0 [ 1308.426756][ T3846] bpf_prog_test_run_syscall+0x343/0x4c0 [ 1308.426788][ T3846] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1308.426809][ T3846] ? __fget_files+0x2a/0x420 [ 1308.426843][ T3846] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1308.426866][ T3846] bpf_prog_test_run+0x2c5/0x340 [ 1308.426894][ T3846] __sys_bpf+0xb1e/0xe00 [ 1308.426925][ T3846] ? __pfx___sys_bpf+0x10/0x10 [ 1308.426958][ T3846] ? __fget_files+0x2a/0x420 [ 1308.427011][ T3846] ? ksys_write+0x242/0x270 [ 1308.427043][ T3846] ? __pfx_ksys_write+0x10/0x10 [ 1308.427076][ T3846] __x64_sys_bpf+0xba/0xd0 [ 1308.427109][ T3846] do_syscall_64+0x166/0x520 [ 1308.427137][ T3846] ? trace_irq_disable+0x3b/0x140 [ 1308.427163][ T3846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.427185][ T3846] ? clear_bhb_loop+0x70/0xc0 [ 1308.427210][ T3846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.427231][ T3846] RIP: 0033:0x7fe23819fb19 [ 1308.427251][ T3846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.427267][ T3846] RSP: 002b:00007fe239026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1308.427290][ T3846] RAX: ffffffffffffffda RBX: 00007fe238426180 RCX: 00007fe23819fb19 [ 1308.427304][ T3846] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 1308.427317][ T3846] RBP: 00007fe239026090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.427330][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.427341][ T3846] R13: 00007fe238426218 R14: 00007fe238426180 R15: 00007fffd1ebe1f8 [ 1308.427372][ T3846] [ 1310.277991][ T5296] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1310.820802][ T3389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.183397][ T4952] Bluetooth: hci2: command 0x0405 tx timeout [ 1311.507966][T27767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.508217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.980223][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1311.980419][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1311.980848][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1311.981005][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1311.981157][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1311.981314][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1312.023946][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1312.024113][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1312.024254][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1312.024392][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1312.909712][ T3933] nbd10: detected capacity change from 0 to 63 [ 1312.917308][ T4952] block nbd10: Receive control failed (result -32) [ 1312.945749][ T1979] block nbd10: Dead connection, failed to find a fallback [ 1312.945844][ T1979] block nbd10: shutting down sockets [ 1312.945884][ T1979] blk_print_req_error: 27 callbacks suppressed [ 1312.945942][ T1979] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1312.946106][ T1979] buffer_io_error: 27 callbacks suppressed [ 1312.946143][ T1979] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1312.946208][ T1979] Buffer I/O error on dev nbd10, logical block 1, async page read [ 1312.946272][ T1979] Buffer I/O error on dev nbd10, logical block 2, async page read [ 1312.946334][ T1979] Buffer I/O error on dev nbd10, logical block 3, async page read [ 1312.946893][ T1979] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1312.946961][ T1979] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1312.947024][ T1979] Buffer I/O error on dev nbd10, logical block 1, async page read [ 1312.947063][ T1979] Buffer I/O error on dev nbd10, logical block 2, async page read [ 1312.947123][ T1979] Buffer I/O error on dev nbd10, logical block 3, async page read [ 1312.947551][ T1979] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1312.947617][ T1979] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1312.947909][ T1979] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1312.947977][ T1979] Buffer I/O error on dev nbd10, logical block 1, async page read [ 1312.948243][ T1979] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1312.948504][ T1979] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1312.948772][ T1979] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1312.949024][ T1979] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1312.949291][ T1979] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1312.949611][ T1979] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1313.017798][T29987] ldm_validate_partition_table(): Disk read failed. [ 1313.026382][T29987] Dev nbd10: unable to read RDB block 0 [ 1313.049578][ T3389] veth0_vlan: entered promiscuous mode [ 1313.069105][T29987] nbd10: unable to read partition table [ 1313.160071][ T3389] veth1_vlan: entered promiscuous mode [ 1313.209965][T29987] ldm_validate_partition_table(): Disk read failed. [ 1313.211994][T29987] Dev nbd10: unable to read RDB block 0 [ 1313.216632][T29987] nbd10: unable to read partition table [ 1313.477721][ T3389] veth0_macvtap: entered promiscuous mode [ 1313.536785][ T3389] veth1_macvtap: entered promiscuous mode [ 1313.695846][ T3389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.814801][ T3389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.894652][T27759] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.898037][T27759] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.898087][T27759] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.975236][T27757] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.122817][ T7287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.122841][ T7287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.800289][ T3983] netlink: 'syz.3.6658': attribute type 1 has an invalid length. [ 1315.808680][ T3986] netlink: 'syz.3.6658': attribute type 10 has an invalid length. [ 1315.950704][ T3986] dummy0: entered promiscuous mode [ 1316.017456][T32327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.017483][T32327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.477400][ T4002] ip_tables: iptables: counters copy to user failed while replacing table [ 1316.536263][ T4002] sctp: [Deprecated]: syz.5.6661 (pid 4002) Use of int in max_burst socket option. [ 1316.536263][ T4002] Use struct sctp_assoc_value instead [ 1316.625764][T27761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.626010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.234579][T32754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1317.248752][T32754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1317.255861][T32754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1317.288991][T32754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1317.305272][T32754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1317.391219][ T4011] __nla_validate_parse: 26 callbacks suppressed [ 1317.391280][ T4011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6665'. [ 1317.514799][ T4021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6666'. [ 1317.699997][ T4024] Cannot find set identified by id 0 to match [ 1319.187298][ T4055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1319.320898][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6672'. [ 1319.334060][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6672'. [ 1319.336079][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6673'. [ 1319.433288][T32754] Bluetooth: hci4: command tx timeout [ 1319.829524][ T1955] block nbd8: Possible stuck request ffff8880288fe000: control (read@0,1024B). Runtime 300 seconds [ 1319.829572][ T1955] block nbd8: Possible stuck request ffff8880288fe1c0: control (read@1024,1024B). Runtime 300 seconds [ 1319.829598][ T1955] block nbd8: Possible stuck request ffff8880288fe380: control (read@2048,1024B). Runtime 300 seconds [ 1319.829624][ T1955] block nbd8: Possible stuck request ffff8880288fe540: control (read@3072,1024B). Runtime 300 seconds [ 1319.870090][ T4056] syz_tun: entered promiscuous mode [ 1319.871126][ T4056] macvtap1: entered allmulticast mode [ 1319.871140][ T4056] syz_tun: entered allmulticast mode [ 1319.902514][ T4056] syz_tun: left allmulticast mode [ 1319.905253][ T4056] syz_tun: left promiscuous mode [ 1320.188310][ T4059] syz_tun: entered promiscuous mode [ 1320.188526][ T4059] macvtap1: entered allmulticast mode [ 1320.188543][ T4059] syz_tun: entered allmulticast mode [ 1320.223074][ T4059] syz_tun: left allmulticast mode [ 1320.223107][ T4059] syz_tun: left promiscuous mode [ 1320.476979][ T4057] netlink: 'syz.5.6670': attribute type 1 has an invalid length. [ 1320.716648][ T4073] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6676'. [ 1320.718818][ T4073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6676'. [ 1320.718875][ T4073] netlink: 'syz.4.6676': attribute type 1 has an invalid length. [ 1321.035309][ T4013] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 1321.179118][ T1279] IPVS: stop unused estimator thread 0... [ 1321.290886][ T4079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1321.505369][T32754] Bluetooth: hci4: command tx timeout [ 1322.009121][ T4101] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6680'. [ 1322.009148][ T4101] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6680'. [ 1322.406448][T27761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.406736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.537769][ T4110] netlink: 'syz.5.6681': attribute type 1 has an invalid length. [ 1322.685761][ T4110] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1322.731214][ T4110] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6681'. [ 1322.731313][ T4110] bond9: entered promiscuous mode [ 1322.731333][ T4110] bond9: entered allmulticast mode [ 1322.892532][ T4112] netlink: 'syz.5.6681': attribute type 10 has an invalid length. [ 1322.892557][ T4112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6681'. [ 1323.069771][ T4110] bond9: (slave dummy0): making interface the new active one [ 1323.069801][ T4110] dummy0: entered promiscuous mode [ 1323.070105][ T4110] dummy0: entered allmulticast mode [ 1323.105736][ T4110] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1323.426855][ T4134] netlink: 'syz.4.6684': attribute type 10 has an invalid length. [ 1323.582050][ T4112] bond9: (slave dummy0): Releasing active interface [ 1323.583511][T32754] Bluetooth: hci4: command tx timeout [ 1323.630863][ T4112] dummy0: left allmulticast mode [ 1323.844110][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6686'. [ 1323.844139][ T4145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6686'. [ 1324.057131][ T4149] netlink: 'syz.8.6687': attribute type 29 has an invalid length. [ 1324.416515][ T4145] veth7: entered allmulticast mode [ 1325.438030][ T4134] team0: Port device veth1_to_hsr added [ 1325.664050][T32754] Bluetooth: hci4: command tx timeout [ 1325.957457][ T4188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6689'. [ 1325.957559][ T4188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6689'. [ 1326.405883][ T4188] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1326.451268][ T4188] bond4 (unregistering): Released all slaves [ 1327.508675][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.508963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.810985][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6696'. [ 1327.983904][ T4952] Bluetooth: hci0: command 0x0405 tx timeout [ 1327.984024][T32754] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1330.018884][ T30] audit: type=1107 audit(1794238807.831:23): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ۣzc'61K`(0oL_/6u'|I^wJ4\Lˉ [ 1330.018884][ T30] 1 s,AʵQf [ 1330.018884][ T30] 螓OP@v*҆p5_Q{݋XTمdwYd|' [ 1330.154311][ T4257] Bluetooth: hci0: unsupported parameter 5135 [ 1330.154337][ T4257] Bluetooth: hci0: unsupported parameter 8192 [ 1330.154350][ T4257] Bluetooth: hci0: unsupported parameter 5135 [ 1330.154363][ T4257] Bluetooth: hci0: unsupported parameter 8192 [ 1330.265334][ T4259] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1330.345925][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.346119][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.346252][ T4013] bridge_slave_0: entered allmulticast mode [ 1330.348255][ T4013] bridge_slave_0: entered promiscuous mode [ 1330.407726][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.408105][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.408831][ T4013] bridge_slave_1: entered allmulticast mode [ 1330.414965][ T4013] bridge_slave_1: entered promiscuous mode [ 1330.797572][ T4013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.906004][ T4013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.176133][ T4279] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1331.259086][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1331.259159][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1331.347100][ T4280] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1331.347138][ T4280] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1331.457443][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.651135][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.668959][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.889990][ T4293] netlink: 'syz.5.6714': attribute type 3 has an invalid length. [ 1331.890058][ T4293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6714'. [ 1332.413070][ T1279] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.417604][ T1279] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.417658][ T1279] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.417696][ T1279] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.517357][ T4013] team0: Port device team_slave_0 added [ 1333.000858][ T7293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1333.000953][ T7293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1333.001025][ T7293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.001123][ T7293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1333.290382][ T4013] team0: Port device team_slave_1 added [ 1333.480998][ T4324] netlink: 'syz.3.6715': attribute type 4 has an invalid length. [ 1333.533585][ T4314] netlink: 'syz.3.6715': attribute type 4 has an invalid length. [ 1333.708171][ T4013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.708195][ T4013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.708221][ T4013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.766434][ T4013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.766451][ T4013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.766476][ T4013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.975941][ T4340] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1334.112090][ T7293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1334.112128][ T7293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1334.112152][ T7293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.112176][ T7293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1334.174784][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6719'. [ 1334.490293][ T7293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1334.490333][ T7293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1334.490358][ T7293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.490382][ T7293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1334.624396][ T4013] hsr_slave_0: entered promiscuous mode [ 1334.625642][ T4013] hsr_slave_1: entered promiscuous mode [ 1334.628930][ T4013] debugfs: 'hsr0' already exists in 'hsr' [ 1334.628951][ T4013] Cannot create hsr debugfs directory [ 1334.654643][ T4352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6721'. [ 1334.846143][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6720'. [ 1335.048625][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.201158][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.354361][ T4362] xt_hashlimit: size too large, truncated to 1048576 [ 1336.738936][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1337.159857][ T4396] netlink: 'syz.5.6728': attribute type 1 has an invalid length. [ 1338.099211][ T7293] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1338.216193][ T7293] bond0 (unregistering): left promiscuous mode [ 1338.216222][ T7293] bond_slave_0: left promiscuous mode [ 1338.216456][ T7293] bond_slave_1: left promiscuous mode [ 1338.274940][ T7293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.280796][ T7293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.300091][ T7293] bond0 (unregistering): Released all slaves [ 1338.316264][ T7293] bond1 (unregistering): Released all slaves [ 1338.337550][ T7293] bond2 (unregistering): Released all slaves [ 1338.369892][ T7293] bond3 (unregistering): Released all slaves [ 1338.418079][ T4396] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1339.357943][ T7293] tipc: Disabling bearer [ 1339.358152][ T7293] tipc: Left network mode [ 1339.749668][ T4438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1339.765176][ T4434] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1340.113955][ T4013] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1340.208367][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1340.317776][ T4013] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1340.414711][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1340.427135][ T4013] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1340.465736][ T4447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6737'. [ 1340.515677][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1340.527927][ T4013] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1340.675885][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1341.018478][ T4447] bond7: entered promiscuous mode [ 1341.018982][ T4447] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1341.279860][ T4481] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6740'. [ 1342.480505][ T4506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1342.988058][ T4514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1343.126165][ T7293] hsr_slave_0: left promiscuous mode [ 1343.128644][ T7293] hsr_slave_1: left promiscuous mode [ 1343.198940][ T7293] veth1_macvtap: left promiscuous mode [ 1343.199033][ T7293] veth0_macvtap: left promiscuous mode [ 1343.199335][ T7293] veth1_vlan: left promiscuous mode [ 1343.199407][ T7293] veth0_vlan: left promiscuous mode [ 1343.933764][ T7293] team0 (unregistering): Port device team_slave_1 removed [ 1343.959548][ T7293] team0 (unregistering): Port device team_slave_0 removed [ 1344.144591][ T32] INFO: task udevd:29500 blocked in I/O wait for more than 143 seconds. [ 1344.144625][ T32] Not tainted syzkaller #0 [ 1344.144636][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1344.144646][ T32] task:udevd state:D stack:26792 pid:29500 tgid:29500 ppid:5001 task_flags:0x400140 flags:0x00080002 [ 1344.144735][ T32] Call Trace: [ 1344.144744][ T32] [ 1344.144759][ T32] __schedule+0x17dd/0x5830 [ 1344.144811][ T32] ? __lock_acquire+0x747/0x2de0 [ 1344.144852][ T32] ? __pfx___schedule+0x10/0x10 [ 1344.144886][ T32] ? schedule+0x90/0x2b0 [ 1344.144914][ T32] schedule+0x164/0x2b0 [ 1344.144940][ T32] io_schedule+0x7f/0xd0 [ 1344.144966][ T32] folio_wait_bit_common+0x6d0/0xcf0 [ 1344.145046][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1344.145068][ T32] ? filemap_read_folio+0x234/0x3a0 [ 1344.145097][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 1344.145128][ T32] ? __filemap_get_folio_mpol+0x7c3/0xff0 [ 1344.145165][ T32] do_read_cache_folio+0x1ac/0x590 [ 1344.145196][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1344.145241][ T32] read_part_sector+0xb6/0x2b0 [ 1344.145355][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1344.145376][ T32] ? rcu_is_watching+0x16/0xb0 [ 1344.145409][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1344.145432][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1344.145453][ T32] ? __kmalloc_cache_noprof+0x148/0x600 [ 1344.145487][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 1344.145514][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 1344.145551][ T32] bdev_disk_changed+0x851/0x1680 [ 1344.145603][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1344.145646][ T32] blkdev_get_whole+0x372/0x510 [ 1344.145704][ T32] bdev_open+0x324/0xd70 [ 1344.145772][ T32] blkdev_open+0x461/0x600 [ 1344.14 ** replaying previous printk message ** [ 1344.145798][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 1344.145819][ T32] do_dentry_open+0x80e/0x1360 [ 1344.145855][ T32] vfs_open_consume+0x4a/0x350 [ 1344.145875][ T32] ? path_openat+0x16e1/0x20f0 [ 1344.145932][ T32] path_openat+0x16fc/0x20f0 [ 1344.146021][ T32] do_file_open+0x23e/0x4a0 [ 1344.146056][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1344.146110][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1344.146158][ T32] ? alloc_fd+0x6af/0x760 [ 1344.146196][ T32] do_sys_openat2+0x115/0x200 [ 1344.146222][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1344.146242][ T32] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1344.146304][ T32] __x64_sys_openat+0x138/0x170 [ 1344.146333][ T32] do_syscall_64+0x166/0x520 [ 1344.146357][ T32] ? trace_irq_disable+0x3b/0x140 [ 1344.146382][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.146403][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1344.146428][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.146448][ T32] RIP: 0033:0x7f7aefaa7407 [ 1344.146477][ T32] RSP: 002b:00007ffeef040fa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1344.146500][ T32] RAX: ffffffffffffffda RBX: 00007f7af01b8880 RCX: 00007f7aefaa7407 [ 1344.146515][ T32] RDX: 00000000000a0800 RSI: 00005572bae2a1b0 RDI: ffffffffffffff9c [ 1344.146531][ T32] RBP: 00005572bae06910 R08: 0000000000000000 R09: 0000000000000000 [ 1344.146544][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00005572bae23f10 [ 1344.146557][ T32] R13: 00005572bae14190 R14: 0000000000000000 R15: 00005572bae23f10 [ 1344.146593][ T32] [ 1344.146653][ T32] [ 1344.146653][ T32] Showing all locks held in the system: [ 1344.146698][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1344.146783][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1344.146899][ T32] locks held by dhcpcd/5296: 1, on CPU#1: [ 1344.146914][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1344.147021][ T32] locks held by getty/5390: 2, on CPU#0: [ 1344.147035][ T32] #0: ffff888036d3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1344.147124][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1344.147198][ T32] locks held by kworker/u8:11/7284: 3, on CPU#1: [ 1344.147212][ T32] #0: ffff88801db26948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.147269][ T32] #1: ffffc9001ae9fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.147323][ T32] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1344.147423][ T32] locks held by kworker/u8:18/7293: 7, last CPU#1: [ 1344.147437][ T32] #0: ffff88801d28e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.147497][ T32] #1: ffffc9001ada7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.147548][ T32] #2: ffffffff91684ac8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1344.147596][ T32] #3: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 1344.161823][ T32] #4: ffffffff9176cce8 ((inetaddr_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1344.161883][ T32] #5: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1344.161935][ T32] #6: ffff8880b833c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1344.161988][ T32] locks held by kworker/u8:27/14206: 3, last CPU#0: [ 1344.162004][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.162057][ T32] #1: ffffc9000535fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.162113][ T32] #2: ffff888032b75258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1344.162240][ T32] locks held by kworker/u8:21/27761: 3, on CPU#1: [ 1344.162255][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.162308][ T32] #1: ffffc90003777c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1344.162360][ T32] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1344.162436][ T32] locks held by udevd/29500: 1, on CPU#1: [ 1344.162449][ T32] #0: ffff88802878e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1344.162541][ T32] locks held by syz-executor/4013: 1, on CPU#0: [ 1344.162556][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1344.162603][ T32] locks held by syz.3.6738/4453: 4, on CPU#0: [ 1344.162617][ T32] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1344.162665][ T32] #1: ffff888032b71128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 1344.162802][ T32] #2: ffff88807c649258 (&devlink->lock_key#14){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 1344.336241][ T32] #3: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1344.336497][ T32] locks held by syz.4.6743/4506: 1, on CPU#0: [ 1344.336530][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1344.338442][ T32] locks held by syz.4.6743/4514: 1, on CPU#0: [ 1344.338495][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1344.338599][ T32] locks held by syz.5.6744/4518: 1, on CPU#1: [ 1344.338632][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1344.338758][ T32] locks held by syz.8.6745/4515: 1, on CPU#0: [ 1344.338790][ T32] #0: ffff8880329ca800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 1344.338897][ T32] locks held by syz.8.6745/4517: 4, on CPU#1: [ 1344.338929][ T32] #0: ffff888066a7c7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 1344.339053][ T32] #1: ffff888044132478 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1344.339182][ T32] #2: ffff888054057650 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1344.342094][ T32] #3: ffff8880329ca800 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 1344.342141][ T32] locks held by syz.8.6745/4520: 1, on CPU#0: [ 1344.342154][ T32] #0: ffff888066a7c7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 1344.342201][ T32] locks held by syz.8.6745/4524: 2, on CPU#1: [ 1344.342213][ T32] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1344.342255][ T32] #1: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x87b/0x10b0 [ 1344.342355][ T32] locks held by syz.8.6745/4526: 2, last CPU#0: [ 1344.342368][ T32] #0: ffff8880329ca800 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 1344.342414][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1344.346350][ T32] [ 1344.346361][ T32] ============================================= [ 1344.346361][ T32] [ 1344.346372][ T32] NMI backtrace for cpu 0 [ 1344.346387][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1344.346409][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1344.346421][ T32] Call Trace: [ 1344.346430][ T32] [ 1344.346440][ T32] dump_stack_lvl+0xe8/0x150 [ 1344.346475][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1344.346562][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1344.346587][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1344.346614][ T32] sys_info+0x135/0x170 [ 1344.346632][ T32] watchdog+0x1073/0x10f0 [ 1344.346668][ T32] ? watchdog+0x209/0x10f0 [ 1344.346701][ T32] kthread+0x38b/0x480 [ 1344.346724][ T32] ? __pfx_watchdog+0x10/0x10 [ 1344.346747][ T32] ? __pfx_kthread+0x10/0x10 [ 1344.346771][ T32] ret_from_fork+0x514/0xb70 [ 1344.346801][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1344.346827][ T32] ? __switch_to+0xc78/0x1410 [ 1344.346862][ T32] ? __pfx_kthread+0x10/0x10 [ 1344.346888][ T32] ret_from_fork_asm+0x1a/0x30 [ 1344.346929][ T32] [ 1344.346938][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1344.346967][ C1] NMI backtrace for cpu 1 [ 1344.346982][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 1344.347002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1344.347012][ C1] RIP: 0010:__asan_memset+0x15/0x50 [ 1344.347037][ C1] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 <48> 89 d6 ba 01 00 00 00 e8 1e e5 ff ff 84 c0 74 11 4c 89 f7 89 ee [ 1344.347052][ C1] RSP: 0018:ffffc900001d7ac8 EFLAGS: 00000246 [ 1344.347069][ C1] RAX: 8342ddcb5dbcaa00 RBX: 0000000000000010 RCX: ffffffff84fba31b [ 1344.347082][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900001d7af8 [ 1344.347094][ C1] RBP: 0000000000000000 R08: ffffffff91bdf9bf R09: 1ffffffff237bf37 [ 1344.347106][ C1] R10: dffffc0000000000 R11: fffffbfff237bf38 R12: ffff88806991e640 [ 1344.347118][ C1] R13: ffff88806991e640 R14: ffffc900001d7af8 R15: ffff88806991e738 [ 1344.347131][ C1] FS: 0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000 [ 1344.347145][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1344.347175][ C1] CR2: 00007f385e4316ae CR3: 00000000829c8000 CR4: 00000000003526f0 [ 1344.347192][ C1] Call Trace: [ 1344.347198][ C1] [ 1344.347207][ C1] debug_object_active_state+0x3b/0x260 [ 1344.347281][ C1] ? rcu_core+0x8b0/0x1230 [ 1344.347304][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 1344.347324][ C1] rcu_core+0x89a/0x1230 [ 1344.347358][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1344.347381][ C1] ? net_tx_action+0x5bb/0xc30 [ 1344.347405][ C1] handle_softirqs+0x265/0x8d0 [ 1344.347434][ C1] run_ksoftirqd+0x36/0x60 [ 1344.347457][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 1344.347476][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 1344.347503][ C1] kthread+0x38b/0x480 [ 1344.347522][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1344.347538][ C1] ? __pfx_kthread+0x10/0x10 [ 1344.347557][ C1] ret_from_fork+0x514/0xb70 [ 1344.347577][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1344.347595][ C1] ? __switch_to+0xc78/0x1410 [ 1344.347621][ C1] ? __pfx_kthread+0x10/0x10 [ 1344.347640][ C1] ret_from_fork_asm+0x1a/0x30 [ 1344.347665][ C1] [ 1344.347965][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1345.349575][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1345.358692][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1345.368772][ T32] Call Trace: [ 1345.372076][ T32] [ 1345.375013][ T32] vpanic+0x26f/0x710 [ 1345.379011][ T32] panic+0xc5/0xd0 [ 1345.382844][ T32] ? __pfx_panic+0x10/0x10 [ 1345.387312][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1345.392353][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1345.398527][ T32] watchdog+0x10e7/0x10f0 [ 1345.402869][ T32] ? watchdog+0x209/0x10f0 [ 1345.407295][ T32] kthread+0x38b/0x480 [ 1345.411405][ T32] ? __pfx_watchdog+0x10/0x10 [ 1345.416102][ T32] ? __pfx_kthread+0x10/0x10 [ 1345.420696][ T32] ret_from_fork+0x514/0xb70 [ 1345.425305][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.430418][ T32] ? __switch_to+0xc78/0x1410 [ 1345.435102][ T32] ? __pfx_kthread+0x10/0x10 [ 1345.439692][ T32] ret_from_fork_asm+0x1a/0x30 [ 1345.444484][ T32] [ 1345.448136][ T32] Kernel Offset: disabled [ 1345.452471][ T32] Rebooting in 86400 seconds..