last executing test programs: 2.77891651s ago: executing program 4 (id=176): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (rerun: 64) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) (async, rerun: 64) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030b000000000000f90000000001000900000000000300060000000000020000000000000000000000000002000100000000000000000d00000000030005000000000002000000ac141400"/88], 0x58}, 0x1, 0x7}, 0x0) (rerun: 64) 2.291998429s ago: executing program 4 (id=183): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 2.066362337s ago: executing program 2 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503003700650000002f90780000000000000000248088a804000000000000000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558fffffffd00000000000000000000000100000000584ae5ab6983faf6b507817d9b8b0f01751166a76fbd972c0c38"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f0000000240), &(0x7f0000000400)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000500)={{0x0, 0x9, 0xf5, 0x7, 0x6b, 0x5, 0x12, 0xd33c, 0x0, 0xfffffff6, 0x7fff, 0x8, 0xfff, 0x9, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000b00)={r9, r10, "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", "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"}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) close(r5) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b00)=@deltaction={0x2c8, 0x31, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf81}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58c0}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x848}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x76}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x115}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9d3}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa68}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x182e}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8d4) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0xa, 0xb}, {0x4, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x4fc262a6, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x0, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 1.610578135s ago: executing program 4 (id=195): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x3}}) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x2}, 0xe) 1.472427663s ago: executing program 3 (id=197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x1a4, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0xa8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe9}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xd4c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0xd24, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x34, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf2a43bed35520cfa}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0xbe8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xbd8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_BITWISE_XOR={0xbcc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc5, 0x1, "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"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfe0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000003c0)={@val={0x1c}, @val={0x0, 0x5, 0x0, 0x300}, @ipv6=@udp={0x0, 0x6, '\'\vB', 0x18, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}, 0x4e) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6011, r5, 0x25c36000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 1.221326384s ago: executing program 2 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0900050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}}, 0x0) 1.177929932s ago: executing program 0 (id=201): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 1.120809884s ago: executing program 3 (id=202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="6a2b0ae124b59c95a57644bb100d081e72485eea745b47155e42e479ca61bfa02fd7bd682b8204f947076cf704a5415f63a4a333e7c1460597e1ee712f9319daec5dc0fc05a8ffcbae86aa7bfc877ca1d9f1db267e0738802472053938746f0f8872b1d28651435b4d1cdbc00eb0409f9d9ffabceb3d176552d0dff42e4f8dcae7f13ca03a31a0b0be38428a57094f7b4645c9157d803e25d9b5ce6fc6c3b4e0ffdb15a8078f2c", 0xa7}, {&(0x7f0000000080)="766e1c2e396f79caa466", 0xa}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}], 0x30, 0x81}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="090ef39c934650296e87b8978b2f1a89460b245969f24d8f4c3dd8fc7446", 0x1e}, {&(0x7f0000000400)="d2d0afdc2cd435dfe12258836b0ca728e612a986299d30df44367bcc00405332cb4d7cf131db969625d71a174b9957a95ad66b38676182b10c0ff3d984e7dc8611ed42f014836662380a62f1903714eef74b808b6b35c915b0cdbef7bb5fafa656e93412c49c6006e9bed6a5b5cb090d57bbe0ac8ef42712bde03189145d780c7fce58c6ac614dc48fe016047e5fa6ff2a", 0x91}, {&(0x7f0000000600)="e281c1e44727b0f97580ab34aea0678e304bb24a57f9fae651ede47a11c623c9b574969df18896b8b21c4904509392399bcddabf2f82491307a590dd185dabcb2634ca872a84ac942fac4c24484da160504bfde5882994f35b5dbb323b55cb0deaec4b1c70f4bb6f04e9b308f9244b4f2131c47a72a2b8a47f61dde239", 0x7d}, {&(0x7f0000000680)="d6fd73d5f39ee97a6b2ad20ca2deba53793654f92e1c08a8736a6c5e13f0031886d651db5135e52335bde1b693cf31b24ec6a3662ad671b27ab3be99ef3c6f47e95b8bd25a3db0a4", 0x48}, {&(0x7f0000000700)="b822df0cc7900217b787df61d8d2a7bd70a35b9233de73230a82e64652478ebce434d6c2192db2672c4bf555a1999cd029df06209b22f97e28849d9057a41cfea0bb15ff87e33551a1d875763ec35c71e7d4e8d2083fee83f5d5af0349629733ad8f8e4661ef8e2a650cb74b4b98b1f85fad5723be6ad0d8512d4cb1828380703444f98d740a0e2cf1605648eaefc9698e6010dd393c22e51797394cde9d8935747c463c3037979ee4747ded4461f280b4e1d98592e37d0f6b4f3ddd147e6702343979d14923eb60f4a559f5ae382b9f086e84cb5ed4414aea368ea2", 0xdc}], 0x5, &(0x7f0000000ac0)=[@assoc={0x18, 0x117, 0x4, 0xc}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xee, "728a7951ed245b8450e8550fe51caad227d214ca81fea165c4b0d01dbd6e36b4ccb5ce4f58c5fef1c7fd11263c5b56c5588583f8cbcb19a3e37f42d3e7f0998ff42e0bdd2d2c468305bea1851fdf6bb9bb1177f6ac20cd8484ed79c138d39a60515a7ec7c0324fcc55cbe7ec525ef11e168f4aadf1498d460f111e8569e090aa5ab6f3e38ce1146b702dd6f803316dd464d2e1d06f3fd95ae3a623633cd90ac7aa7753fafe9b47d250d9612b8a6887bc43ecdd9cdfdafc793a9d7e4ea140c99ee01a05c19bf54ce1c93ab0f63a5aa5476ccbe9904f131adc82d30001cfdefc08e442ec14db8334ff3094d68001ff"}], 0x180, 0x4004040}], 0x2, 0x24000090) (async, rerun: 64) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x1, 0x62, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r5, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) (async) setsockopt(r4, 0x65, 0x0, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x3, 0x3ff, 0x807, 0x7da}, 0x10) (async, rerun: 64) r7 = socket(0x11, 0x800000003, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001201fbf3026c03d879010a00000100a7de9798f9d09f9f"], 0x26}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x9, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000c40)={r6, @in={{0x2, 0x4e24, @multicast1}}, 0x4, 0x0, 0x8, 0x7, 0x4}, &(0x7f0000000300)=0x98) 1.055219292s ago: executing program 1 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0001f40000ef000000000081040000000000000000000014000100"], 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012abd7000030000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a00340002020202020200000a0006"], 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) 1.034554568s ago: executing program 4 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 772.315291ms ago: executing program 2 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x437, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x20000}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x9005}, 0x4048000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0x2}, 0x18) sendmmsg(r7, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150a0579000000000000"], 0x14}}, 0x4004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) close(r10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022abd7000fbdcdf251200000005002a0001000000050029000000000005003300020069b8140bb7a80d7687b65c0014050037000100000005002d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000841}, 0x28000) shutdown(r6, 0x0) 771.93412ms ago: executing program 1 (id=206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x3000) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfffc, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0xc}, {0x0}, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x44}}], 0x78, 0x20040040}, 0x0) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) 770.860001ms ago: executing program 0 (id=207): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@canfd={0xd, {{0x0, 0x1, 0x0, 0x1}, 0x3b, 0x2, 0x0, 0x0, "282d6626fae404262217f72e28ae07433676b0930ff18840c94d590b8334b25e7b1c4520e911ee08005d41f811dfda592c55a2848bcd1ae282d6890283ae05ed"}}}}, 0x0) 770.34669ms ago: executing program 3 (id=208): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) sendmsg$802154_dgram(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7}, 0x4040815) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) (async) sendfile(r2, r1, 0x0, 0xe25) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max.burst\x00', 0x2, 0x0) 750.247399ms ago: executing program 2 (id=209): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) write$cgroup_int(r2, &(0x7f0000000040)=0x80000000, 0x12) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) listen(r0, 0xbabc) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x80000000, 0x12) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) 695.83841ms ago: executing program 1 (id=210): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r3) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r6, r8, 0x25, 0x4, @val=@iter={0x0}}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'tunl0\x00', {0x6ec4}, 0xc43}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r9, r6, 0x4}, 0x6) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x11) 694.932958ms ago: executing program 4 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r0, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2010}, 0x20044001) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000000)=@null) 694.458084ms ago: executing program 0 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400001f6800090300000000000000000a0000002000000004000426be36930f993a56264697ec8263e60008000100020000002e525c6d370feaec135edc"], 0x24}}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400001f6800090300000000000000000a0000002000000004000426be36930f993a56264697ec8263e60008000100020000002e525c6d370feaec135edc"], 0x24}}, 0x20000000) socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000200"], 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000200"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000c30000001800000018000000fbd395ed2d53394c6b489f9e45e5bc219514e69a8209000000000000000100001302000000"], 0x0, 0x39}, 0x20) 520.156105ms ago: executing program 1 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 519.273181ms ago: executing program 3 (id=214): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x49) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x5e}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6, 0x0, "1616"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6, 0x0, "1616"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) 518.47659ms ago: executing program 4 (id=215): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160006003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (rerun: 64) 510.664663ms ago: executing program 0 (id=216): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x400c0) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) (async) getsockname$packet(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) (async) r2 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async, rerun: 32) r6 = socket$kcm(0x2, 0x1, 0x84) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async, rerun: 64) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) (async, rerun: 64) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001940)='{'}], 0x1}, 0x0) (rerun: 64) 367.947203ms ago: executing program 2 (id=217): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r2, 0x0, 0x1a, 0x0, &(0x7f0000002540)) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r5, 0x80000, r3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 367.284194ms ago: executing program 3 (id=218): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x80, 0xfffffff8, 0x6, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x65, 0x0, 0xfa, 0x4, 0x0, @local, @remote, {[@lsrr={0x83, 0xf, 0xd7, [@broadcast, @broadcast, @remote]}, @timestamp_prespec={0x44, 0xc, 0x9a, 0x3, 0x7, [{@empty, 0x7}]}]}}}}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000480)={r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, &(0x7f0000000000)=0x380000, r3, &(0x7f0000000040)=0xfbde, 0x2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x2ce3, 0x1, 0x7}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r1, @ANYBLOB='?\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000010000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x8, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x1000, 0x13, &(0x7f0000000080)=""/19, 0x41100, 0x11, '\x00', r1, @fallback=0x32, r4, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x7, 0x6852, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000340)=[r0, r5, r6], &(0x7f0000000380)=[{0x5, 0x1, 0x8, 0xc}, {0x5, 0x1, 0xc, 0x7}, {0x0, 0x3, 0x3, 0x5}, {0x3, 0x4, 0x3, 0x7}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 340.505264ms ago: executing program 1 (id=219): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x8000000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x1, 'gre0\x00', {}, 0x5}) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/179, 0xb3, 0x7ff, 0x9}) 278.525254ms ago: executing program 0 (id=220): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x60, r8, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x8, 0x7fff, 0x72, 0xc02, 0x1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) 184.049922ms ago: executing program 3 (id=221): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) 112.880109ms ago: executing program 2 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7e9, 0x20, 0x7, 0x7, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x67, 0x0, 0xe, 0x29, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x10, 0xdb, 0x0, 0x9, [0x80000001, 0x200, 0x4]}]}}}}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x80000000, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r2, 0x29, 0x1, 0x81, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x0, 0x8, 0x7f, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xa4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) 96.0952ms ago: executing program 1 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x40, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x800}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) 0s ago: executing program 0 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000011000b052abd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x20004004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010001001000eea86e9a0900000020000380140002007663616e300000000000000000000000080001000000a0c9"], 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 80.798864][ T5852] cgroup: Unknown subsys name 'net' [ 80.950727][ T5852] cgroup: Unknown subsys name 'cpuset' [ 80.960497][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.670069][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.518343][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.527210][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.535695][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.544280][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.553213][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.659708][ T5185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.669241][ T5185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.678168][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.687455][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.696114][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.766334][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.776179][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.784376][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.793122][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.802233][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.860905][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.871904][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.881821][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.891486][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.905796][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.912972][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.922280][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.943510][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.989635][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.998419][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.264150][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 87.627392][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 87.714380][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.721824][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.730441][ T5862] bridge_slave_0: entered allmulticast mode [ 87.738182][ T5862] bridge_slave_0: entered promiscuous mode [ 87.748626][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.755921][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.763114][ T5862] bridge_slave_1: entered allmulticast mode [ 87.771059][ T5862] bridge_slave_1: entered promiscuous mode [ 87.783903][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 87.864676][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.912735][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.944642][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.952588][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.960190][ T5866] bridge_slave_0: entered allmulticast mode [ 87.967498][ T5866] bridge_slave_0: entered promiscuous mode [ 87.976318][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.983491][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.991376][ T5866] bridge_slave_1: entered allmulticast mode [ 87.999231][ T5866] bridge_slave_1: entered promiscuous mode [ 88.112302][ T5862] team0: Port device team_slave_0 added [ 88.165866][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.173179][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.181153][ T5868] bridge_slave_0: entered allmulticast mode [ 88.189689][ T5868] bridge_slave_0: entered promiscuous mode [ 88.199804][ T5862] team0: Port device team_slave_1 added [ 88.222000][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.246318][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.253609][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.261355][ T5868] bridge_slave_1: entered allmulticast mode [ 88.270348][ T5868] bridge_slave_1: entered promiscuous mode [ 88.300465][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.349917][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.357174][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.384207][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.427577][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.437341][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 88.450754][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.457976][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.484209][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.537226][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.583453][ T5876] Bluetooth: hci0: command tx timeout [ 88.608074][ T5866] team0: Port device team_slave_0 added [ 88.668719][ T5866] team0: Port device team_slave_1 added [ 88.686309][ T5868] team0: Port device team_slave_0 added [ 88.729533][ T5868] team0: Port device team_slave_1 added [ 88.735910][ T5876] Bluetooth: hci1: command tx timeout [ 88.758064][ T5862] hsr_slave_0: entered promiscuous mode [ 88.764433][ T5862] hsr_slave_1: entered promiscuous mode [ 88.797245][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 88.815094][ T5876] Bluetooth: hci2: command tx timeout [ 88.828774][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.835982][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.863815][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.891454][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.898871][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.926268][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.945552][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.952675][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.979736][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.997417][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.004610][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.012455][ T5870] bridge_slave_0: entered allmulticast mode [ 89.020105][ T5870] bridge_slave_0: entered promiscuous mode [ 89.029390][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.036575][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.064591][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.064628][ T5876] Bluetooth: hci3: command tx timeout [ 89.064637][ T5865] Bluetooth: hci4: command tx timeout [ 89.148164][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.155629][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.162898][ T5870] bridge_slave_1: entered allmulticast mode [ 89.171514][ T5870] bridge_slave_1: entered promiscuous mode [ 89.342169][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.372468][ T5868] hsr_slave_0: entered promiscuous mode [ 89.379181][ T5868] hsr_slave_1: entered promiscuous mode [ 89.387142][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 89.392985][ T5868] Cannot create hsr debugfs directory [ 89.411676][ T5866] hsr_slave_0: entered promiscuous mode [ 89.418454][ T5866] hsr_slave_1: entered promiscuous mode [ 89.426613][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 89.432554][ T5866] Cannot create hsr debugfs directory [ 89.441124][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.451162][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.458786][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.466668][ T5871] bridge_slave_0: entered allmulticast mode [ 89.473873][ T5871] bridge_slave_0: entered promiscuous mode [ 89.522051][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.529439][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.537602][ T5871] bridge_slave_1: entered allmulticast mode [ 89.545019][ T5871] bridge_slave_1: entered promiscuous mode [ 89.646537][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.668581][ T5870] team0: Port device team_slave_0 added [ 89.691974][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.711657][ T5870] team0: Port device team_slave_1 added [ 89.841475][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.848669][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.875811][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.905611][ T5871] team0: Port device team_slave_0 added [ 89.920737][ T5871] team0: Port device team_slave_1 added [ 89.928640][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.940467][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.971780][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.073520][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.080857][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.107736][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.160951][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.168308][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.195182][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.348091][ T5870] hsr_slave_0: entered promiscuous mode [ 90.354748][ T5870] hsr_slave_1: entered promiscuous mode [ 90.361503][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 90.367290][ T5870] Cannot create hsr debugfs directory [ 90.384678][ T5871] hsr_slave_0: entered promiscuous mode [ 90.391277][ T5871] hsr_slave_1: entered promiscuous mode [ 90.399407][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 90.405395][ T5871] Cannot create hsr debugfs directory [ 90.438521][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.452274][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.516395][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.569513][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.655141][ T5865] Bluetooth: hci0: command tx timeout [ 90.713569][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.726850][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.788215][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.814976][ T5865] Bluetooth: hci1: command tx timeout [ 90.838871][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.895358][ T5865] Bluetooth: hci2: command tx timeout [ 90.933904][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.972439][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.996408][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.008472][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.115122][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.131701][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.139117][ T5865] Bluetooth: hci4: command tx timeout [ 91.140422][ T5876] Bluetooth: hci3: command tx timeout [ 91.184093][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.198358][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.290395][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.329778][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.341138][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.371302][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.470041][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.484173][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.556926][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.599659][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.607130][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.624729][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.646966][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.665347][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.672594][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.721915][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.729343][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.779864][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.791687][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.798874][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.832054][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.839626][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.867870][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.922347][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.929552][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.987867][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.009968][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.097932][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.105271][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.117244][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.124500][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.148210][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.184375][ T887] cfg80211: failed to load regulatory.db [ 92.194144][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.274917][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.282389][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.384555][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.391900][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.581867][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.741683][ T5876] Bluetooth: hci0: command tx timeout [ 92.822696][ T5866] veth0_vlan: entered promiscuous mode [ 92.849449][ T5866] veth1_vlan: entered promiscuous mode [ 92.901096][ T5876] Bluetooth: hci1: command tx timeout [ 92.980738][ T5876] Bluetooth: hci2: command tx timeout [ 93.021663][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.039901][ T5866] veth0_macvtap: entered promiscuous mode [ 93.124272][ T5866] veth1_macvtap: entered promiscuous mode [ 93.169016][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.183388][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.215363][ T5876] Bluetooth: hci3: command tx timeout [ 93.215623][ T5865] Bluetooth: hci4: command tx timeout [ 93.274610][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.302884][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.320236][ T5862] veth0_vlan: entered promiscuous mode [ 93.343002][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.382204][ T5862] veth1_vlan: entered promiscuous mode [ 93.428576][ T3580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.443423][ T3580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.473239][ T5871] veth0_vlan: entered promiscuous mode [ 93.492061][ T3580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.525794][ T3580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.584059][ T5871] veth1_vlan: entered promiscuous mode [ 93.724947][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.743396][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.750861][ T5862] veth0_macvtap: entered promiscuous mode [ 93.772321][ T5870] veth0_vlan: entered promiscuous mode [ 93.817908][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.827440][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.831229][ T5862] veth1_macvtap: entered promiscuous mode [ 93.863745][ T5871] veth0_macvtap: entered promiscuous mode [ 93.891555][ T5870] veth1_vlan: entered promiscuous mode [ 93.929484][ T5868] veth0_vlan: entered promiscuous mode [ 93.938974][ T5871] veth1_macvtap: entered promiscuous mode [ 93.961319][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.967754][ T5868] veth1_vlan: entered promiscuous mode [ 94.002196][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.041310][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.105928][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.132838][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.141202][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.151078][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.186338][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.200309][ T5870] veth0_macvtap: entered promiscuous mode [ 94.239600][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.330003][ T5870] veth1_macvtap: entered promiscuous mode [ 94.349355][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364168][ T5983] sctp: failed to load transform for md5: -2 [ 94.365713][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.393008][ T5868] veth0_macvtap: entered promiscuous mode [ 94.492557][ T3580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.550782][ T3580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566509][ T5868] veth1_macvtap: entered promiscuous mode [ 94.599213][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.612028][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.624165][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.690443][ T5996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 94.699499][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.718774][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.744372][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.815693][ T5865] Bluetooth: hci0: command tx timeout [ 94.837780][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.849985][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.862516][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.898384][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.908433][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.926065][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.959724][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.975660][ T5865] Bluetooth: hci1: command tx timeout [ 94.980232][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.055322][ T5865] Bluetooth: hci2: command tx timeout [ 95.068947][ T3517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120412][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.146952][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.189595][ T3517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.210276][ T3517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.223884][ T3517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.295714][ T5865] Bluetooth: hci3: command tx timeout [ 95.295871][ T5876] Bluetooth: hci4: command tx timeout [ 95.343690][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.358517][ T6014] netlink: 'syz.1.12': attribute type 8 has an invalid length. [ 95.359482][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.417830][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.500884][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.513656][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.682938][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.740362][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.805469][ T6019] syzkaller0: entered promiscuous mode [ 95.811097][ T6019] syzkaller0: entered allmulticast mode [ 95.955534][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.975905][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.113894][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.543447][ T6058] Zero length message leads to an empty skb [ 96.807055][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 96.889368][ T6064] tipc: Enabling of bearer rejected, failed to enable media [ 97.260326][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.306438][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.315854][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.336852][ T6086] netlink: 144 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.351606][ T6087] netlink: 144 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.369195][ T6079] netlink: 'syz.1.25': attribute type 4 has an invalid length. [ 97.424406][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'. [ 97.491110][ T6094] warning: `syz.0.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.800204][ T6102] raw_sendmsg: syz.1.32 forgot to set AF_INET. Fix it! [ 97.945671][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 97.979376][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.188088][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.571429][ T6138] erspan0: entered promiscuous mode [ 99.082662][ T6161] netlink: 'syz.1.45': attribute type 16 has an invalid length. [ 99.109910][ T6161] netlink: 'syz.1.45': attribute type 3 has an invalid length. [ 99.171500][ T6161] geneve2: entered promiscuous mode [ 99.246926][ T6161] geneve2: entered allmulticast mode [ 100.081764][ T6204] __nla_validate_parse: 12 callbacks suppressed [ 100.081787][ T6204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.57'. [ 100.100304][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 100.134678][ T6204] nbd: device at index 0 is going down [ 100.436780][ T6216] vlan2: entered allmulticast mode [ 100.455374][ T6216] veth0_to_bond: entered allmulticast mode [ 100.662208][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 100.875641][ T6240] netlink: 'syz.1.67': attribute type 21 has an invalid length. [ 100.884443][ T6240] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.910109][ T6240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.917802][ T6240] IPv6: NLM_F_CREATE should be set when creating new route [ 100.925793][ T6240] IPv6: NLM_F_CREATE should be set when creating new route [ 100.933046][ T6240] IPv6: NLM_F_CREATE should be set when creating new route [ 101.504457][ T6273] sit1: entered allmulticast mode [ 101.517196][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.77'. [ 101.627265][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'. [ 101.763262][ T6295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.82'. [ 101.821927][ T6298] netlink: 108 bytes leftover after parsing attributes in process `syz.1.84'. [ 101.881212][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.82'. [ 101.930368][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.82'. [ 102.053528][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 102.143322][ T6312] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 102.305749][ T6326] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 102.421546][ T6331] syz.4.91 uses obsolete (PF_INET,SOCK_PACKET) [ 102.470346][ T6328] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 102.502290][ T6328] 0ªî{X¹¦: entered allmulticast mode [ 102.514273][ T6328] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 102.720311][ T6342] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20001 [ 102.810497][ T6349] gretap0: entered promiscuous mode [ 103.977032][ T6395] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 104.511096][ T6438] netlink: 'syz.3.122': attribute type 6 has an invalid length. [ 104.753951][ T6451] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 104.784376][ T6453] xfrm1: entered promiscuous mode [ 104.790268][ T6453] xfrm1: entered allmulticast mode [ 105.032037][ T6464] netlink: 'syz.3.131': attribute type 10 has an invalid length. [ 105.046033][ T6464] bridge_slave_1: left allmulticast mode [ 105.051952][ T6464] bridge_slave_1: left promiscuous mode [ 105.065038][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.116507][ T6464] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 105.316329][ T6481] bridge: RTM_NEWNEIGH with invalid ether address [ 105.530205][ T6491] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.644364][ T6498] trusted_key: syz.1.143 sent an empty control message without MSG_MORE. [ 105.693833][ T6503] tipc: Started in network mode [ 105.712178][ T6503] tipc: Node identity ce0ef58589d7, cluster identity 4711 [ 105.728397][ T6503] tipc: Enabled bearer , priority 0 [ 105.740789][ T6504] netlink: 'syz.3.144': attribute type 29 has an invalid length. [ 105.753264][ T6503] syzkaller0: entered promiscuous mode [ 105.760021][ T6503] syzkaller0: entered allmulticast mode [ 105.802325][ T6499] netlink: 'syz.3.144': attribute type 29 has an invalid length. [ 105.811379][ T6502] __nla_validate_parse: 13 callbacks suppressed [ 105.811400][ T6502] netlink: 596 bytes leftover after parsing attributes in process `syz.3.144'. [ 105.813935][ T6503] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 105.978426][ T6501] tipc: Resetting bearer [ 106.004669][ T6501] tipc: Disabling bearer [ 106.044527][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.082629][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.336004][ T6532] bond1 (unregistering): Released all slaves [ 106.513429][ T6542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.158'. [ 106.724284][ T6548] syzkaller0: entered promiscuous mode [ 106.731269][ T6548] syzkaller0: entered allmulticast mode [ 108.695287][ T6601] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 108.704652][ T6602] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 108.839817][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.848719][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.863556][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.887018][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.912994][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 108.923232][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.954461][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 108.980330][ T6615] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 109.009984][ T6615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.039834][ T6607] openvswitch: netlink: Missing key (keys=40, expected=100) [ 109.173081][ T6623] tipc: Started in network mode [ 109.181417][ T6623] tipc: Node identity 6adc7a750f8d, cluster identity 4711 [ 109.191239][ T6623] tipc: Enabled bearer , priority 0 [ 109.201555][ T6623] syzkaller0: entered promiscuous mode [ 109.210225][ T6623] syzkaller0: entered allmulticast mode [ 109.323509][ T6631] tipc: Resetting bearer [ 109.397440][ T6623] macvtap1: entered allmulticast mode [ 109.417330][ T6623] veth0_macvtap: entered allmulticast mode [ 109.427360][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.502471][ T6638] vlan2: entered promiscuous mode [ 109.511576][ T6638] gretap0: entered promiscuous mode [ 109.536526][ T6622] tipc: Resetting bearer [ 109.610550][ T6622] tipc: Disabling bearer [ 109.627752][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 109.643266][ T6646] tipc: Started in network mode [ 109.650465][ T6646] tipc: Node identity 9ee0004ad68c, cluster identity 4711 [ 109.658726][ T6646] tipc: Enabled bearer , priority 0 [ 109.673302][ T6647] syzkaller0: entered promiscuous mode [ 109.697264][ T6647] syzkaller0: entered allmulticast mode [ 109.857595][ T6633] tipc: Resetting bearer [ 109.951516][ T6633] tipc: Disabling bearer [ 110.233368][ T6684] netlink: 'syz.1.199': attribute type 3 has an invalid length. [ 110.262795][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 110.381609][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 110.700387][ T6716] sch_fq: defrate 0 ignored. [ 110.772459][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 110.772459][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 110.924054][ T6725] sctp: failed to load transform for md5: -2 [ 111.404447][ T6764] netlink: 'syz.1.223': attribute type 8 has an invalid length. [ 111.453989][ T6768] ------------[ cut here ]------------ [ 111.459956][ T6768] WARNING: CPU: 0 PID: 6768 at net/ipv4/route.c:1269 ip_rt_bug+0x2c/0x110 [ 111.469191][ T6768] Modules linked in: [ 111.473407][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) [ 111.482854][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.493651][ T6768] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 111.498869][ T6768] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 111.519103][ T6768] RSP: 0018:ffffc9001a07f180 EFLAGS: 00010286 [ 111.525951][ T6768] RAX: 3a975a65567e8900 RBX: ffff88805a35e640 RCX: 3a975a65567e8900 [ 111.534151][ T6768] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 111.542509][ T6768] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 111.551111][ T6768] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 111.559750][ T6768] R13: dffffc0000000000 R14: ffff88805a35e640 R15: ffff888144eb9c00 [ 111.568199][ T6768] FS: 00007ff1ace816c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 111.578023][ T6768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.584665][ T6768] CR2: 000000110c2917f8 CR3: 000000007e088000 CR4: 00000000003526f0 [ 111.592860][ T6768] Call Trace: [ 111.596212][ T6768] [ 111.599270][ T6768] ip_push_pending_frames+0xbe/0x150 [ 111.604607][ T6768] __icmp_send+0xf87/0x12d0 [ 111.609346][ T6768] ? __icmp_send+0x1b9/0x12d0 [ 111.614438][ T6768] ? __pfx___icmp_send+0x10/0x10 [ 111.619684][ T6768] ? ip_route_input_noref+0x98/0x250 [ 111.625239][ T6768] ? __pfx_ip_route_input_noref+0x10/0x10 [ 111.631213][ T6768] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 111.633043][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 111.636597][ T6768] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 111.636659][ T6768] ip_options_compile+0x80/0xb0 [ 111.636686][ T6768] ip_rcv_finish_core+0xaa2/0x1c00 [ 111.636721][ T6768] ip_rcv_finish+0x14c/0x2f0 [ 111.636745][ T6768] NF_HOOK+0x309/0x3a0 [ 111.671764][ T6768] ? __pfx_ip_rcv_finish+0x10/0x10 [ 111.677064][ T6768] ? NF_HOOK+0x9a/0x3a0 [ 111.681393][ T6768] ? __pfx_NF_HOOK+0x10/0x10 [ 111.686088][ T6768] ? ip_rcv_core+0x7f7/0xd00 [ 111.690822][ T6768] ? __pfx_ip_rcv_finish+0x10/0x10 [ 111.696198][ T6768] ? __pfx_ip_rcv+0x10/0x10 [ 111.700928][ T6768] __netif_receive_skb+0x143/0x380 [ 111.706480][ T6768] ? netif_receive_skb+0x115/0x790 [ 111.711716][ T6768] netif_receive_skb+0x1cb/0x790 [ 111.716925][ T6768] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 111.722784][ T6768] ? __pfx_netif_receive_skb+0x10/0x10 [ 111.728873][ T6768] ? tun_rx_batched+0x160/0x730 [ 111.733856][ T6768] tun_rx_batched+0x1b9/0x730 [ 111.738710][ T6768] ? __lock_acquire+0xab9/0xd20 [ 111.743706][ T6768] ? __pfx_tun_rx_batched+0x10/0x10 [ 111.749534][ T6768] ? tun_get_user+0x266c/0x3e20 [ 111.754567][ T6768] tun_get_user+0x2aa2/0x3e20 [ 111.760054][ T6768] ? tun_get_user+0x6f6/0x3e20 [ 111.765004][ T6768] ? tun_get_user+0x266c/0x3e20 [ 111.770160][ T6768] ? aa_file_perm+0x44d/0x1550 [ 111.775571][ T6768] ? __pfx_tun_get_user+0x10/0x10 [ 111.780821][ T6768] ? __futex_wait+0x34f/0x3e0 [ 111.793454][ T6768] ? __pfx___futex_wait+0x10/0x10 [ 111.798929][ T6768] ? ref_tracker_alloc+0x318/0x460 [ 111.804791][ T6768] ? __lock_acquire+0xab9/0xd20 [ 111.809931][ T6768] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.815598][ T6768] ? tun_get+0x1c/0x2f0 [ 111.820075][ T6768] ? tun_get+0x1c/0x2f0 [ 111.824443][ T6768] ? tun_get+0x1c/0x2f0 [ 111.828828][ T6768] tun_chr_write_iter+0x113/0x200 [ 111.834266][ T6768] vfs_write+0x5c6/0xb30 [ 111.838711][ T6768] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 111.844301][ T6768] ? __pfx_vfs_write+0x10/0x10 [ 111.849366][ T6768] ? __fget_files+0x2a/0x420 [ 111.854158][ T6768] ksys_write+0x145/0x250 [ 111.858971][ T6768] ? __pfx_ksys_write+0x10/0x10 [ 111.863970][ T6768] ? rcu_is_watching+0x15/0xb0 [ 111.868932][ T6768] ? do_syscall_64+0xbe/0x3b0 [ 111.873667][ T6768] do_syscall_64+0xfa/0x3b0 [ 111.878383][ T6768] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.883843][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.890238][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 111.895002][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.901209][ T6768] RIP: 0033:0x7ff1abf8d69f [ 111.905978][ T6768] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 111.925940][ T6768] RSP: 002b:00007ff1ace81000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 111.935002][ T6768] RAX: ffffffffffffffda RBX: 00007ff1ac1c5fa0 RCX: 00007ff1abf8d69f [ 111.943548][ T6768] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 111.951920][ T6768] RBP: 00007ff1ac011e19 R08: 0000000000000000 R09: 0000000000000000 [ 111.961057][ T6768] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 111.969932][ T6768] R13: 00007ff1ac1c6038 R14: 00007ff1ac1c5fa0 R15: 00007fff6f042048 [ 111.978130][ T6768] [ 111.981373][ T6768] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.989195][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) [ 111.998722][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.008896][ T6768] Call Trace: [ 112.012391][ T6768] [ 112.015356][ T6768] dump_stack_lvl+0x99/0x250 [ 112.019997][ T6768] ? __asan_memcpy+0x40/0x70 [ 112.024629][ T6768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.030194][ T6768] ? __pfx__printk+0x10/0x10 [ 112.034860][ T6768] vpanic+0x281/0x750 [ 112.038971][ T6768] ? __pfx__printk+0x10/0x10 [ 112.043843][ T6768] ? __pfx_vpanic+0x10/0x10 [ 112.048355][ T6768] ? is_bpf_text_address+0x26/0x2b0 [ 112.053670][ T6768] panic+0xb9/0xc0 [ 112.057691][ T6768] ? __pfx_panic+0x10/0x10 [ 112.062482][ T6768] __warn+0x31b/0x4b0 [ 112.066996][ T6768] ? ip_rt_bug+0x2c/0x110 [ 112.071449][ T6768] ? ip_rt_bug+0x2c/0x110 [ 112.075980][ T6768] report_bug+0x2be/0x4f0 [ 112.080447][ T6768] ? ip_rt_bug+0x2c/0x110 [ 112.084975][ T6768] ? ip_rt_bug+0x2c/0x110 [ 112.089502][ T6768] ? ip_rt_bug+0x2e/0x110 [ 112.093842][ T6768] handle_bug+0x84/0x160 [ 112.098348][ T6768] exc_invalid_op+0x1a/0x50 [ 112.102862][ T6768] asm_exc_invalid_op+0x1a/0x20 [ 112.107721][ T6768] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 112.112848][ T6768] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 112.133800][ T6768] RSP: 0018:ffffc9001a07f180 EFLAGS: 00010286 [ 112.139918][ T6768] RAX: 3a975a65567e8900 RBX: ffff88805a35e640 RCX: 3a975a65567e8900 [ 112.148254][ T6768] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 112.156497][ T6768] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 112.165013][ T6768] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 112.173215][ T6768] R13: dffffc0000000000 R14: ffff88805a35e640 R15: ffff888144eb9c00 [ 112.181659][ T6768] ip_push_pending_frames+0xbe/0x150 [ 112.186975][ T6768] __icmp_send+0xf87/0x12d0 [ 112.191498][ T6768] ? __icmp_send+0x1b9/0x12d0 [ 112.196626][ T6768] ? __pfx___icmp_send+0x10/0x10 [ 112.201598][ T6768] ? ip_route_input_noref+0x98/0x250 [ 112.207177][ T6768] ? __pfx_ip_route_input_noref+0x10/0x10 [ 112.213307][ T6768] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 112.218604][ T6768] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 112.223807][ T6768] ip_options_compile+0x80/0xb0 [ 112.228802][ T6768] ip_rcv_finish_core+0xaa2/0x1c00 [ 112.234406][ T6768] ip_rcv_finish+0x14c/0x2f0 [ 112.239303][ T6768] NF_HOOK+0x309/0x3a0 [ 112.243512][ T6768] ? __pfx_ip_rcv_finish+0x10/0x10 [ 112.248699][ T6768] ? NF_HOOK+0x9a/0x3a0 [ 112.253016][ T6768] ? __pfx_NF_HOOK+0x10/0x10 [ 112.257853][ T6768] ? ip_rcv_core+0x7f7/0xd00 [ 112.262749][ T6768] ? __pfx_ip_rcv_finish+0x10/0x10 [ 112.268243][ T6768] ? __pfx_ip_rcv+0x10/0x10 [ 112.273036][ T6768] __netif_receive_skb+0x143/0x380 [ 112.278613][ T6768] ? netif_receive_skb+0x115/0x790 [ 112.284940][ T6768] netif_receive_skb+0x1cb/0x790 [ 112.290334][ T6768] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 112.296440][ T6768] ? __pfx_netif_receive_skb+0x10/0x10 [ 112.302259][ T6768] ? tun_rx_batched+0x160/0x730 [ 112.307298][ T6768] tun_rx_batched+0x1b9/0x730 [ 112.311999][ T6768] ? __lock_acquire+0xab9/0xd20 [ 112.316883][ T6768] ? __pfx_tun_rx_batched+0x10/0x10 [ 112.323158][ T6768] ? tun_get_user+0x266c/0x3e20 [ 112.328227][ T6768] tun_get_user+0x2aa2/0x3e20 [ 112.333464][ T6768] ? tun_get_user+0x6f6/0x3e20 [ 112.338418][ T6768] ? tun_get_user+0x266c/0x3e20 [ 112.343738][ T6768] ? aa_file_perm+0x44d/0x1550 [ 112.348809][ T6768] ? __pfx_tun_get_user+0x10/0x10 [ 112.353860][ T6768] ? __futex_wait+0x34f/0x3e0 [ 112.358647][ T6768] ? __pfx___futex_wait+0x10/0x10 [ 112.363953][ T6768] ? ref_tracker_alloc+0x318/0x460 [ 112.369255][ T6768] ? __lock_acquire+0xab9/0xd20 [ 112.374121][ T6768] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 112.379947][ T6768] ? tun_get+0x1c/0x2f0 [ 112.384469][ T6768] ? tun_get+0x1c/0x2f0 [ 112.388875][ T6768] ? tun_get+0x1c/0x2f0 [ 112.393153][ T6768] tun_chr_write_iter+0x113/0x200 [ 112.398387][ T6768] vfs_write+0x5c6/0xb30 [ 112.402659][ T6768] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.408315][ T6768] ? __pfx_vfs_write+0x10/0x10 [ 112.413180][ T6768] ? __fget_files+0x2a/0x420 [ 112.417781][ T6768] ksys_write+0x145/0x250 [ 112.422123][ T6768] ? __pfx_ksys_write+0x10/0x10 [ 112.427006][ T6768] ? rcu_is_watching+0x15/0xb0 [ 112.431950][ T6768] ? do_syscall_64+0xbe/0x3b0 [ 112.437073][ T6768] do_syscall_64+0xfa/0x3b0 [ 112.441592][ T6768] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.447001][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.453857][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 112.458552][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.464802][ T6768] RIP: 0033:0x7ff1abf8d69f [ 112.469854][ T6768] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.490375][ T6768] RSP: 002b:00007ff1ace81000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.499438][ T6768] RAX: ffffffffffffffda RBX: 00007ff1ac1c5fa0 RCX: 00007ff1abf8d69f [ 112.507430][ T6768] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 112.515524][ T6768] RBP: 00007ff1ac011e19 R08: 0000000000000000 R09: 0000000000000000 [ 112.523771][ T6768] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 112.532242][ T6768] R13: 00007ff1ac1c6038 R14: 00007ff1ac1c5fa0 R15: 00007fff6f042048 [ 112.540444][ T6768] [ 112.544499][ T6768] Kernel Offset: disabled [ 112.549219][ T6768] Rebooting in 86400 seconds..