last executing test programs: 1m59.740463086s ago: executing program 2 (id=4752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000005e80)={0xa, 0x4e24, 0x80, @remote, 0x7ed}, 0x1c) bind$inet6(r4, &(0x7f0000005f00)={0xa, 0x4e22, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a1f0400000000000000000a0000030900010073797a3100000000300004802c0001800900010068617368000000001c0002800800044000000009080002400000000f08000740000000010991e408679922116badb4c5e300020073797a32a80856b9000000001400000011000100"], 0x84}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f0000000000)=0x8) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0xf4, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0xd6, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b00594a3f"}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x5c, "5d923d4bdfcfb83c930cb6d06883434ba28ab214a944c18318696c59ee51bb88bb8c94c85941d6ac44e4d2aea91603213691b557b0f42b812c5c040fbe823eecc1805a2b2c120fcfa7c3ec7b8fc97e2d5fa198fd5ad998f508929575"}, {0xdd, 0x36, "0dfa2e3db3c49b9f566515002008786d3385bed8bf49548682b7de0d8467da47e898990b0c8230abace6a632d61c950527089fb646df"}, {0xdd, 0x12, "d9f13d600131aef135f44b9b9d8c4ba78065"}, {0xdd, 0x6, "0ddf05ac5e3e"}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x3aeb359a15da3ab0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r10, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb64, 0x61}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x811b}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0x51) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r7, 0x400454cd, 0x301) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ffffffffffffaaaab7aaaa44"]) 1m55.600516671s ago: executing program 2 (id=4764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x2, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x5, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d00000000000100000000e8030001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1m54.08933267s ago: executing program 2 (id=4776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x4, 0xbe22, 0x0, r3, 0x80000000, '\x00', r5, r6, 0x0, 0x1, 0x4, 0x2}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) 1m53.852473122s ago: executing program 2 (id=4780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0xcc0, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m53.147460666s ago: executing program 2 (id=4786): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a8010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aa"], 0x54}}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1m49.586439249s ago: executing program 2 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c50000000000000000000070000000900020073797a3100000000050001000040fe800039d700000000e5ed1ea50000000000000000bb060024400e1f00cd0500070088000200060005409ffe5e282a415e3d71c1559e849d9e00df2d7a31ea6e1cca7e55d68e107c65ed7dc48fbd27784e3da04d8cade548416dfeeaa8f57e34e6a0358ea2c76760f0b9fe68ce081be664cfbaaaaf8304c18cdee4817cc3eb4cdfd7da9bcce2dcc354ae0c875d695ba355f38c10274126"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x4d) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket(0x15, 0x80000, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="220128bd7000fddbdf250b00000006000a00a0aa000008000300", @ANYRES32=0x0, @ANYBLOB="d456fc5af3c38fee878dfac1a7a8925429b13c6c4a755702190f7e8099d17abf4af65f8b88b97bc6d2d5fbaf2a48b27d8d5f9e18dc35584080b5b0466a0605eb1fdc8318f52c4374d6803797373999b08f9b700984"], 0x24}}, 0x8000480) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x1e, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000b125378fd1769934bfd4337ac61b3857d6ffc5c42d8dc56fe32c86d5514b709cc8550125cce2f2961d46ca5fc94601205059741bfbac0be8433e82a17fd8ce336e48f1f709125e5a3d6023bab05fdf6d0640057ac4adbc0181ba965f716df4a1ded5aa9d232927cb2e769197c2e7d0818daa860ff872a3bf4c8045e607ee4bf37c319771cab007590578dd252c5b13c3a8a7e5c8f7e460d18d588414ea0bba14c3d98fbceffa46f792bb1eb78496c5807097b2f826dc7ab25ce9106f964b3d4d0d"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1m34.496766832s ago: executing program 32 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c50000000000000000000070000000900020073797a3100000000050001000040fe800039d700000000e5ed1ea50000000000000000bb060024400e1f00cd0500070088000200060005409ffe5e282a415e3d71c1559e849d9e00df2d7a31ea6e1cca7e55d68e107c65ed7dc48fbd27784e3da04d8cade548416dfeeaa8f57e34e6a0358ea2c76760f0b9fe68ce081be664cfbaaaaf8304c18cdee4817cc3eb4cdfd7da9bcce2dcc354ae0c875d695ba355f38c10274126"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x4d) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket(0x15, 0x80000, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="220128bd7000fddbdf250b00000006000a00a0aa000008000300", @ANYRES32=0x0, @ANYBLOB="d456fc5af3c38fee878dfac1a7a8925429b13c6c4a755702190f7e8099d17abf4af65f8b88b97bc6d2d5fbaf2a48b27d8d5f9e18dc35584080b5b0466a0605eb1fdc8318f52c4374d6803797373999b08f9b700984"], 0x24}}, 0x8000480) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x1e, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000b125378fd1769934bfd4337ac61b3857d6ffc5c42d8dc56fe32c86d5514b709cc8550125cce2f2961d46ca5fc94601205059741bfbac0be8433e82a17fd8ce336e48f1f709125e5a3d6023bab05fdf6d0640057ac4adbc0181ba965f716df4a1ded5aa9d232927cb2e769197c2e7d0818daa860ff872a3bf4c8045e607ee4bf37c319771cab007590578dd252c5b13c3a8a7e5c8f7e460d18d588414ea0bba14c3d98fbceffa46f792bb1eb78496c5807097b2f826dc7ab25ce9106f964b3d4d0d"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 6.894988535s ago: executing program 4 (id=5770): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x73}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x44}}, 0x8000) 6.802834078s ago: executing program 3 (id=5771): r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f00000005c0)=""/241, 0xf1}], 0x6}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@multicast, @random="0e10840dc342", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x60, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf0, 0x6, 0x1, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af391b8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 6.648258948s ago: executing program 4 (id=5772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0xb, 0x6}]}]}, {0x0, [0x30, 0x0]}}, 0x0, 0x30, 0x0, 0x1, 0x1002}, 0x28) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r4, 0x1) poll(&(0x7f0000000200)=[{r4, 0x1210}], 0x1, 0x1ff8) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r5, 0x0, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0xd, 0x0, &(0x7f0000001bc0)) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000040)='[^!,%\x00', 0x0, &(0x7f0000000080)={@_ha_fsid={[0x1, 0xe0ed]}, {0x401, 0x7, 0x3, 0x8}}, 0xfff, &(0x7f0000000100), &(0x7f0000000140)=0x3771}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x44}}, 0x0) 5.850052071s ago: executing program 3 (id=5787): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r0, 0x14, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x124, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x61}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9de29b777d6717ec3a1c82928f3ac067"}, @NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8e6e}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3379f3e}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "31e2663583f8e375d4d7aebbc7469f3d085391e3f4f3e0cbc6d7aab29e84f5f1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a3caf3a5893eefd4df1f7c4fd7e177a517a16a16aa1b0b426adf8b0a2949d2cb"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5b}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6d148954a12944b3f09d38c125be53323a8cca72ea4053b8f3e6dc31f29644e8"}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x81}, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r2, 0x200) 5.744845951s ago: executing program 3 (id=5789): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xe}, 0x8) listen(r0, 0xfffffff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc={0x4, {@llc={0xff, 0x7e, "79ec", "aa3291c9b1b4758e3697683274ce876628fd95743cbc877df4d534a973dba1734c596161c037863c2dddf447d2f81db802772bd01d7e8fa0ec940691ef077a2a1d51f0a4849329af14d97677cde8f7a7171748681899"}}}}}, &(0x7f0000000140)={0x1, 0x3, [0x748, 0xc04, 0xd80, 0x204]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000180)=@caif=@dgm={0x25, 0x5, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="1aab90b99f5f31bd2e7478921b5676e9fef0cef6b96ff8220c4301dee9e3d72f805a9c7c7fefa1f7c92a6744e337741eb4a9b8c7c5d5296c148988cdf948b937ff3f94850e4a04925619371e2f49e05850d2a212a8fb2870bec9e949a43ca811ff202e7d5713c53ba95a20edd087d387b54492644b6bc0eec9b9b577cf8753ba47ee828dfc5029f4f363c36bb3fc91f769e1e9d47744236e025f82c1c208a5b057109aee1e8a7374b25e26331d8243625e5cbbaa9b786252d5e0c0a0d2f615a719aa7c01113dfb68bbe979cf1d87f029e6beb20429491f637bb8853b760fe68abdc9053844fc2bd3a42359f06f71a16771d347e2", 0xf4}, {&(0x7f0000000300)="6a089ffca2921ce616e56c2f84f954da3d7fa064090fa987194b9f7ab6c98279449d550493afc512e068dacb763513c6a9", 0x31}], 0x2, &(0x7f0000000380)=[{0x80, 0x1, 0x10, "4d3b504dc4e49eb1c0fbcd924831a28ad573210146568b24fd435295fd66b7c0c6ce526c156d65c88632ec4f07729ac2f895fdc4384465b0f6571eeb9525f105a4482d4f18e5ff78904ac18edab96759b1d6e4f84d878ed72e1ed2955aee54cb4e58959125f00de022"}, {0x60, 0x108, 0x0, "ede623ffbf66e810a19e90c571c2d4dc252bc1358efbdb4bce1254ce0a2c038a554fd66a5e471ce732e32a0fd26fa47871f7c3f2bb9a9dc160265082aa8024b33ec26953042d5cb6e7"}, {0x68, 0x111, 0x7, "2ed6ef9bc8acb66c935de4cd63d69b119c435619f47b3f72c938cd7314e90c048563090b68553912ca36812b10b43784c38e4fcf579032ef969787fa306749e6ff650952a8c53fd4026cb87b64c4e7d6130027224895"}], 0x148}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x8, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x440c0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1000}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfffffb54}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x40) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = accept4(r1, &(0x7f0000000800)=@alg, &(0x7f0000000880)=0x80, 0x80000) bind$xdp(r7, &(0x7f00000008c0)={0x2c, 0xc, 0x0, 0x26, r8}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000900)={@multicast1, @empty, 0xffffffffffffffff, "56d0011a19facc4bb9f639b7488f3ba6087cba3d092802b0bd5b64b9b473d5a4", 0x80000000, 0x4, 0x8, 0x9}, 0x3c) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x9, '\x00', 0x0, r10, 0x2, 0x2, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x124, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xd}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x28}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000d40)={&(0x7f0000000c80)=""/148, 0x2000, 0x800, 0x1}, 0x20) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000d80)=0x3, 0x4) ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000dc0)) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x1208, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008841) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24060891) recvmsg$qrtr(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/138, 0x8a}, {&(0x7f00000010c0)=""/230, 0xe6}, {&(0x7f00000011c0)=""/36, 0x24}, {&(0x7f0000001200)=""/171, 0xab}], 0x4, &(0x7f0000001300)=[{0x98, 0x0, 0x0, ""/131}, {0x40, 0x0, 0x0, ""/48}, {0x70, 0x0, 0x0, ""/95}], 0x148, 0x40000000}, 0x38, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x15, 0x2, &(0x7f00000014c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000001500)='GPL\x00', 0x9, 0xbc, &(0x7f0000001540)=""/188, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0xb, 0x9, 0x7f}, 0x10, 0xffffffffffffffff, r8, 0x2, &(0x7f0000001680)=[r11, r9, r11, r11, r11, r9, r9], &(0x7f00000016c0)=[{0x3, 0x1, 0xb, 0xc}, {0x5, 0x3, 0xc, 0x9}], 0x10, 0x7f}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000017c0)={@fallback=r7, r12, 0x1b, 0x3, r10}, 0x20) 5.720876701s ago: executing program 4 (id=5790): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x80000042, 0xffffffff}, 0x10) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x80400) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) r2 = epoll_create1(0x0) epoll_pwait(r2, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) select(0x0, 0x0, &(0x7f0000000400)={0x8, 0x3, 0xd, 0x6, 0xffff, 0x101, 0x2f0a0ca4, 0x6}, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000006740), 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x0, 0x0, 0x200, 0x200, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x368}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="8dffffff0600"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000200000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000820000007bdff8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES8=r8, @ANYRES8=r6, @ANYRES32=r5, @ANYRESHEX=r7], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000740), &(0x7f0000000700)=0x4) socket(0x2d, 0x2, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000480)) bind$tipc(r0, 0x0, 0x0) close(r0) 5.627296683s ago: executing program 3 (id=5792): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x2}, 0x8) (async) sendmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000580)="06161c0c29a694d1f7836f8b1cd98ecd362aec193dea62815727caf3964ba418561ddd3bddf5821494b2d43cf1a484a7d591f6503dd288d8e7f8e29c475b4cc56357044a476876d021e82edf86e81514b91e3c1c1dfc70bf", 0x58}, {&(0x7f0000000600)="e0d225f7b40cb94a5b3af8c7140b8f07a9c1c7a76f2290e6ba854f6c32324d6781c93a74b86b9b1fc817433582b82ed428fcf6460ce7ab61d22cc320537763c46172b7f77d23aaf59bd016c7b9fbe8e40570f1b146633c5469e5532693a855f3d12a6709e19131ff54fe76edfab1e0c349b98a7f62a7cb5f365fbf8468a48503729f7ee2c49949d973d80c0f672ba6b7bfbdbde72762034dcbc26bc4858760f98eaf3d0df52c", 0xa6}, {&(0x7f00000006c0)="9761d693c53330aa72ee8a968704a80c9fe07c8b5419842ff073f2fcae72d3d8cf6c5a65994ad505fa2e37480aa99e0986cd05835fadcfdf9048b81b010d0253a261921ff4518d48d101869257eecff2ba4b085650e6a8b318f5e53d81765a6ac871eba82f407ff1f5617de6d0d332ca3c93d05fb63d5b6c98e806d0b54b08da0fff73eaa9a03e4d291c95f828828b43e3b0017c84973f149e7687f9edb5150fb03ebe1a0fa4573e24ad283b428d90d1666e739a85344d5f1412a173520b5b046c5c2a0620e795b3c2ef92a9", 0xcc}, {&(0x7f0000000800)="1401e864d00adbda580e3849d3b098a95dc7f14fe00247148774a4c72037319deb3d20fb9a6eb8225a95fe3b209cc148939a9a6cd0667f8f62c6a4a88f239bc161a4645f8d6b7892e2763e5ff5d2897993eaace8f56c601104bdad686480fa49209df9cc37d229dedc4254de49547c6921b764ecd8a79cfda8ccd68a4542ef0f679c9ac659103b8eb6313a5a8da974faf9984e1c00d9c072c48da6c31b676e9098552bf342d0f933153d9a79d303ae0e0fbfbfa764128b7a4d101d8fdc61ac9b46ac98d85be38c3d86a876e2f8502dcdd2ac59802364b276c5fcb48b411829d2320c21fe4a86b6842a641c6235f48ce8cbca2d837f2a", 0xf6}, {&(0x7f0000000900)="26bc81c30338c5e054d88f5c538869", 0xf}, {&(0x7f0000000940)="a7fe45876c0e58366b1dffdf04d74e5444317e116ad621e845c643c6a9873f6c22eaca2dcc6e0205daf78352bd924c47449f5cf02b2de6", 0x37}, {&(0x7f0000000980)="265950bac9cf863ac123f0c0d7925f116d2ec24b6c", 0x15}], 0x7, &(0x7f0000000b00)=[{0x98, 0x107, 0x72a, "a07202ae5a6e212cac61f8dd8ae99b9a297c404da2482c8d7be97338a12aade6daccb6b343bca7c9722e8c8c40e600a5bcd1e191518099d914d9701a5eef62377fa3718d3b465f04af918d8da5ff2e4474e2847da1b794ddc5420612e16a0a95c93890ea64ff3ea83eb8ccad70d40f872f083ae71f1f871db4afd10a0c668fbbe1f10c"}, {0x90, 0x1, 0x10, "8be20233082757245f9a8d39bc85fa77f72c8c370e0c13d5e0c8c338fd92d5927b832fd081d0ca4fbe59b3efb43ef3a34dd54e32e793211b15df03556a9b05cd3568a764785aff32dc759f602bd1b1d2a4edba96aab8f5978a11c74ffdbb0c12aa5b79eedeb838f1a83c6369ed4886d083b6c9519f6a8e88caa1"}, {0xe0, 0xb, 0xaf, "b0ffe57f99d54a18029535e3c7fa4c4ff2c703f1518e6af05275a5600b280099041e225d3f04b1a36b0be46b46c20946d12c63ad10a0e4246bd75be459d1e663b66b81418222bd3701e7c36ff9c99de9a3108937e11f0e7b80f9cb9cd86e98c9073b270549e2bcb1aee218b7d539b589917cd1f3367efd597b480be9c597399a28be1be41405b605e1173617e306ff9fc436d20a948608eee3aa53c06eb823a6c43b187e095e7c7ffd4ea376a83f7d17a22b04f057d817675bb9c62d3d1429890befc66aea979d9cf16126c95f5ff5"}], 0x208}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) 5.625839459s ago: executing program 5 (id=5793): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x2e8, 0xc0, 0xc0, 0x228, 0x2e8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @empty, 0x5607d1016e8ee1dd, 0xffffff00, 'wlan0\x00', 'syz_tun\x00', {}, {}, 0xff, 0x0, 0x1a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x7, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x1, [0x3, 0x4, 0x3, 0x4, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@addrtype={{0x30}, {0x0, 0xe48, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffaa, 0x0, 0xffffffffffffffff, 0x48}, 0x48) (rerun: 64) 5.479360605s ago: executing program 1 (id=5794): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x4, 0x1, 0x3, 0x8}], 0x10, 0x7}, 0x94) unshare(0x26000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b88481aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc0000001900010031bd700000000000ac1e00010000000000000000000000006401010200000000000000000000000000000000000000000a00000000000e99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ffffffff000000000000000000000000000000013c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r6, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86fa608a35f200140600fe5000000000000000000000000000bbfe8000000000000020000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) 5.423103702s ago: executing program 3 (id=5795): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffef81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) accept4(r1, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000180)=0x80, 0x9d96af14242311b0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) socket$alg(0x26, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffef81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) accept4(r1, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000180)=0x80, 0x9d96af14242311b0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) (async) 5.220179069s ago: executing program 1 (id=5796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000200081dcf4e29fff0026bd70000300000002000000060000071f0000001400110067656e65766531000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400cdeeab903cd3d42ba30000000000000000000a14004a6f73aae06e4a3f07d46a000100000a"], 0x28}}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8e8c92b", @ANYRES16=r3, @ANYBLOB="080025bd7000fedbdf251300000005001a000100000008000300", @ANYRES32=r4, @ANYBLOB="0c000600000000000000000005001a0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4881}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000880)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e24, 0x31c, @mcast1}, @in6={0xa, 0x4e23, 0x81, @private2, 0xfff}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x2}, @in={0x2, 0x4e21, @broadcast}], 0x74) write$tun(r1, &(0x7f0000002840)={@val={0x8, 0x800}, @val={0x6, 0x80, 0xff, 0xffff, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf1}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f686"}}, 0xfce) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000127bd7000fedbdf25370000000800577931e7008000050000b1570002000000ffe69c9909331a3cafb33b6e2a1f332fdcdf64fe7998a92ce83e1d5240"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x8810) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251100000008000100", @ANYRES32=r9, @ANYBLOB="080001fd", @ANYRES32, @ANYBLOB="0800150000000000080015000000000008000100", @ANYRES32=r10, @ANYBLOB="08001500c00000000800150000000000"], 0x4c}}, 0x4) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000040600000000000000170000000000010900020073797a310000000005000100070000000900020073797a31000000000900020073797a30eeb700004080ff260dc0e2fbc4e8d41eb158a1eda0886a49dde258be051f794e78a84e8caf82c4a76efe83e0f515f66befea9a72368ae2dc2298b318ea79915c8787364277601d57da9ad4e153f799481932b6c81e741a446e0b567e4606426f03f1a881b256ffe9ac79994404e4ff729bc6b967bb37262c3909d4e7d1e4c13bf04d562dd23e43557b9f575aec3ca175100e0c7fd36246"], 0x40}, 0x1, 0x0, 0x0, 0x40081}, 0x814) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="80000000120000032cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="440000000040000005001100b300000004001400350070696d726567310000000000000000001400350076657468315f766972745f776966690014003500776732000000000000000000000035007465616d3000"/98], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 5.174250078s ago: executing program 3 (id=5797): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20008800}, 0x60004801) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000000c0)={'wlan0\x00', 0xf41b, 0x7fff}) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x3000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x11a, 0x4, &(0x7f0000000040), 0x44) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.961525409s ago: executing program 0 (id=5798): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) 4.800476263s ago: executing program 1 (id=5799): ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={0x2, 0x2, 0xffffffff, 0xb, 0x7ff, 0x1}) (async) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)={'syz_tun\x00', 0x400}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x1000) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x10}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000180)={{r0}, {@void, @actul_num={@val=0x2b, 0x7fffffff, 0x6d}}}) (async) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000001c0)) (async) pselect6(0x40, &(0x7f0000000200)={0x8, 0x80000000, 0x200, 0xc, 0x8, 0x3ff, 0x0, 0x6}, &(0x7f0000000240)={0x4, 0x7, 0x80000001, 0x4, 0x9000000000000, 0x870, 0x4, 0x81}, &(0x7f0000000280)={0xc8c, 0x400, 0x8c0, 0x58de, 0x8, 0x400, 0x2}, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000380)="a14836a61b299b0b24e5d1df19cc3eaddd94d02bb9b74c9fd6f2fa461d40d9c393bfbb55ecb2b9f1f4ca4df70ec50342388292eba4d601b6b13312ebf3e1393d47af96e9965125966d9771bc91af0016d70de0be8336ef5ae38a53fe270081b7198545558970aaef6c3ad425bb0db2dd72c100d809b92a151113f14e407cdc1473f457204709ec7b850d6f47eade9a23e20877c6270e37") (async) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000500)={0x0, @nfc={0x27, r3, 0x0, 0x3}, @hci={0x1f, 0x2, 0x4}, @can={0x1d, r4}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)='vxcan1\x00', 0x6, 0x1, 0x10}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f00000006c0)) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d4, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x90000000}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x14}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}]}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffff4e7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40000}, 0x811) (async) socket$can_bcm(0x1d, 0x2, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r5) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000000) 4.799193711s ago: executing program 0 (id=5800): r0 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x60, @mcast2, 0x2, 0x3}, 0x20) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30}}], 0x1, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bind$rds(r0, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x0) 4.726044233s ago: executing program 4 (id=5801): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x20008800) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000080)={0x0, 0x5c, &(0x7f0000001680)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x20000, 0x40000000}, 0x1c}}, 0x404c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 4.652771675s ago: executing program 5 (id=5802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="1643554b93027352bdd23f695b7df26fdc01c510f3271e3beebd11deb6d3cdd7eec6da1b35f54ef695094937e2b054b94c8daa7622775164c1002705eba6fdb947e2c006d2995214ae80a5a388", 0x4d}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x3c, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0x8, [0x5, 0xc, 0x2]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x58}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000580)="a97b4c8c46b6c619b28430803ce5002aa571404e5bbd20ea0d3428275ecff7ecfce32b0350b75058d2085128e6ac7f1baed7a69a56b2a4016633588819f211eaa9bbde88e1361faa9537ef1234b0adbe4aa80335fb4129b8a987812b4208d217099950cfbb364d1d245f7effcad18a09b873d1986266bbd26ca8dc16bc25e5e4b95a2014a1a458b6d0cdfb1d8d6ee403e983a3e29f63721d69ea4b84bafa1585547b4132577af5aa48b37604a23bccd37c0edf79e14a63236609503a3859f44e15b7768b165fcf0676253cb8ecb575f9a59b3f35d4e43c06e8bf325be1", 0xdd}, {&(0x7f0000000780)="7e5c15194243e745c3937cd56605cf6c5482887c34dbfe6e822b8dff110adb9c5c1b9a429c646f28d355eef6981f645ec10e97e9617e483c", 0x38}], 0x2}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x9, @private0, 0x10000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="a723c36e0465a0", 0x7}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="19b35d3ba5401ba78c2e8212458bcffc7580bf0063ef16e30c75dbf79209e80b340af6dc823ee251f4", 0x29}, {&(0x7f0000000900)="eb73ffc1a96d5d8c3a9af437d98fbcde67a5c89ad3cee8a649c2bf1afd8cfbeb25125bebff2256218f2dba0cff7dacfc77eb57924a92683762c70f46a888c7cdff0596e351273a235206674bc0fb9b49ce36f2281af634e13f011375294363ae0c946096b1b6cbde8946962b9770f7ff0036fcea28ade5787a3da1afe9d2d070c399e7e670fb6d6adba18e446ff758577fb28ad1932dc9cbca7d228c76d1a034204b956b6f6a98ee8bba59595fcabda144e471c9ec38f98f50d82ff0a02d73f83b37474839438b2a8ab9fb209f23f16b276fd9a519682a8b75093e308c58d9a34f4e70cfd88327671e3a26f950077b0f58fc52e9aef9b03f3c49ef4089", 0xfd}, {&(0x7f0000000a00)="525029d31969331d3b5235ce4dd7a5bb4ea3c35894b1be8672e6190fe5b13657341a49ca01062771c0", 0x29}, {&(0x7f0000000b80)="c3b96b84cd5c3206803711695540db7856a780e2f8b814103bd113947a6a9a265042d996893552b408b1a63aee2390710434cc34ac35f2c494c3d34b9d64e7f72e8363784fb0ed16677eb1e96cf82a99151b14da9f64a8195312f86a3275522703651302c73d8f912e2371710d166e62c17ed7d139c916ae389c7d0403237170a22d472b4b7f1a9be294a651da403053fefb09f375292178b1ab6a5570f8ef686efc438c3a7e1e8c0c", 0xa9}, {&(0x7f0000000c40)="908f88677522ac6da0026d472745f52a9c7fe5da8ca7f21b3fb3be98a32d711dff3e9f84ba5f9f6471d6458e5c03a530a0a3472f6cc456930aa60b84ca3ace71bbb380d62940baaa130d6434859b59e149e0eb7fb0cf55a7c33b44627d5f41cdb1", 0x61}], 0x2a0, &(0x7f0000000d40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xd83}]}}}, @tclass={{0x14, 0x29, 0x43, 0x63}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x32, 0x5, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0xa, [0x2]}}, @jumbo={0xc2, 0x4, 0xfffffff8}, @ra={0x5, 0x2, 0x64}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0xd0}, @pad1]}}}, @rthdrdstopts={{0x160, 0x29, 0x37, {0x33, 0x28, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x8001, [0x1, 0x1, 0xaad, 0xe, 0xc000000000, 0xdcb5, 0x3, 0xffffffffffffffff, 0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0xb, 0xdc, "1366d41f2d023c1bfcd85997ff4f7801e349e39f31c65693f508d094e75cdfbd91ca51ef44c75664592ab6d320fa1bace219edb37e9daf27ceeb881077d78972a5f6340a1ce5a4c66007d8d53568525624ad628607a1378074bf48acad66a45bf26315b4ddb14e4fe9e8082a0a6646c38d67cce18baddfebafc8edf2411b3618474f233ed1ccbaee2a59e106429defae3de5bdb11b244a27f581f29e5bd198a31043da0632c3bf51c4c5cc680c3d8960bd485a1229915fa335e808e66762299074dbfbef86f478b81c21ec0ec71f177d2c04adc17e4a0397e028c20a"}, @pad1, @ra]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x230}}], 0x5, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r5}, 0x38) pwritev(r5, &(0x7f0000001300)=[{&(0x7f0000000140)="b2da1ec5106958b7d746", 0xa}, {&(0x7f00000006c0)="ee50161e8e2884d510712fe19b829e01642735776d8aa0dc5909fc0583c1aeca9a907ce0f6b7b9b5da0a90f310d20b375a4478ebb676c9936df6e3da8603533625a8ad50530333f4b42a1c1d0da8d643", 0x50}, {&(0x7f0000000a40)="4d29eb84bba0ea558aa6833d439b9c9774e88d26d8e2bac0ee9e4d574b0c4dd39ba58777a2f18e9ee46e30cc9131c1e4ac5e3ebe9f020d3bfa5845df00b2c0e4a11fe3f37f3dd5f87181e40b9969b62a2108dec38fa81bb4ae0255ddc6122457c7f44f682b8b77cb9e31ce1ddd0f5ea9c255674a4a0a87c1d6d60ae244685eeac423a5689a5518b698db7e2cf79c27a540cb6ed137561b0991b06a14ced9df15418c85ec5761c69290e346cb6eb7", 0xae}, {&(0x7f0000001200)="0d611a38e1735d468fd39b0983352ea52bbfb13c805e323046b14ca9352d175edb1ccaadb1cc4d36bef1eb7ef3901e17d4cd7d0e92a0df77d9cd167a7c92faf926a442977294c427a2376249e9917c5b6fdf0fda1b34d5b486d6e55e78086cc7e3980c193e92c3693c04f2fe3303f082e65753c92fef5bfe42a168f0e6c8a7cfc36b4414ab9495b5ccc13bd6805949d7cecaca8c1faa45dd35cfa9757cb75207daae48e0e42da7ea2dea0ccd72577e26de43f86da97a41fa95bf47a7c9b81c36eb55fe19bfe732d91936495babb0c3b45295a92897b28c0031df81fc8160b733625b10fb327f458b45df", 0xea}], 0x4, 0x5, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000500)="ce03be", 0x3}, {&(0x7f0000000100)="f244f837c3c9df25a38f615b9aaede7359e971aaa4cee6e01091d5fe5f9323619cca", 0x22}], 0x4) 4.488065651s ago: executing program 4 (id=5803): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000280)=""/79, 0x4f}, {0x0}], 0x2}, 0x3}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000cb58b967475a39bab6b000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) recvfrom(r2, &(0x7f0000000440)=""/87, 0x57, 0x0, &(0x7f00000004c0)=@ieee802154={0x24, @none={0x0, 0x7fff}}, 0x80) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 4.368422142s ago: executing program 1 (id=5804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="e19523f12a00c3b2e9b0bf0f69d60a186d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001081c400170db00000000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="6306ea8e46dc3f0adf33b9c60000", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(0xffffffffffffffff, 0x1) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) recvmmsg(r8, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2140, 0x0) sendmmsg$inet6(r7, &(0x7f00000025c0)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @local, 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000000)='b', 0x1}], 0x1}}], 0x2, 0x40090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) 3.85619757s ago: executing program 0 (id=5805): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='veth1_to_batadv\x00') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20004885) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) sendmsg$alg(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="458ad27b580a906fceb79e7beff5b67d9e59ac1f8d2f2ed86e63181e68f08a53abd2d076d76cb25161196c2c6173e1e13564e4dabfdade68267905caae48a086e3325a31904c5e80a2649ef497c17b5d6b623671477ef98d36224f1d6745a7bfe111a1690126e9869e6223f62e3d43827257b862becfe40407dbf0518f2dceac410fd16bacef375001f65f757c2093316bd83b02a071f23f388911ec932428536d087ef7dc59361611937ad1c27f055ec92829248562e1a669509fb8ccef0d3975ba908c4e16c084f36f39dff71553bbc0bce827d28030c9", 0xd8}, {&(0x7f0000000340)="ba5e2aac6ef303c4cf66cbc7d9c6a0ac2842fb0cd9b4cca9a1f52f7054f4f30b73", 0x21}, {&(0x7f0000000380)="4fd0ef8ac026aed6ba8dfadf45ec5017b6aa84e8b49ae00032172b30270c10c1d0e629883c65329105ec0b5df27914ab4c119f71b65be8c73dbf0d13017fa3308c4c13fab1aa0cd8c68c23aab45778d8422cde7a86bf3b8ed3b64e040bce0a20ebfa90ff6d1dc8433ad043d000b4b21a9b82b3dada8be7fc412a94177182e57a4f4e39bc03edc326cb8cc7456266b5fd910310604ba6f304a4a98d7b434567fe5da14f164ea1a00ba52b53c971d1d1926e63484cb5ac0be7b25d0ea2c5af0ae035962d95c9b5adc20e120b28e28ea73d9b729919f3895a349fdd61ea682d3470c704071b9201ea373b05a22baf67fd3ffb7fd757442e49f423f38b33764f49033ab5a681f66766ca9cc3e0bcde9493a18823a06945915ddd7bab475a24e4cc7092899153f0209192a2437f2cd44b0c17c2a71f11743d6a1d2a10ca22ae96a661c8b10a3113aba5336369e7e18a39c84638b1eb44fa6dacdd6bc6807ad254e6501dcdfe59d3904fab5d8b55caf4018488bf45a6af8c9c4ca0b19ee86138f13f06c66d532ab2473e395e5b96c178e464c7afb432147cdecb2c4c449291f4aa063ce1c45d42f1980474a70848821204c0c46ac0d7c15dcd9a2e41c77b7131b77991738005b14edc959286158004d002f38d528c4f8f549999b1c9e9025db8105c547eab4304c5e3c0aa36963dd76688c066dc9f4009bb03f42970c4178fbed48f50ac03fdce339d655f06b66e5df6f554a7cd62dfcb0659480d33ec639988cda2cd1742b32db85b51e1d0ebe42751393887314e72b82571515bc99c653a8bfef87b0ac56cee78400444e3cabcf364a9a38015955bab26421cfa2757755ba7da001717283cac6ba844676a66a5c666226c9dfba2b5b3f4b49182c289bc7dd604c3556ee9cee314bf2d528dbcfcdbda4c9d8b1765df09869a0f7bf86b6e97401c15f113c3aee3be88b692b870ef47e96c834869bf3fe3012c27d82bf50d54501d25acbffabf44df2511d5fe84987c25e3d21414275ae03d36d8d7bc1a2df287b67d43db8c49527d18bf643e912f64c36e0eee578e0b8eaab9e86553c411801cce871e082cb68faa5c0f9a54c38e89609066feb4f450b37a3f8518bd1559340c00d5893efaf8a880b31b571f3f1546282f0b3d3fb15ca7b71290f1bf32d54c5486aaff8c386a04ba0fa98c616cc714a1883df3fae11cb01dc13527386efe3342adacde36bc1751138d0cb8be081354ef3b7c883bb791813ec886bf12b2c0caab3393fe268cf5a6d4854633c641b590c9e31b85fd8efb42207fdc586258dfaa7181ad663d2196f2b52bcd73e5e04df9d109634ea2ff08a8506b65225939eac19cd0bda1156819127451d7846380bf0155d5a5e4f265a94be12bc6c374e6e6d16d65e9988167520d287b6f363353dba6d6ec7d2df70ea0c53049440ca9d122230fc9abefb3b5d0fc27af2d8f6d9c462485dd92f1dedfed135d458a5162d035bf40d922da7eb9a69f8f10d10c2e3d192a36ff8e27168d894d411a65e540219cce56848489e982b6228a77bdc687fc093cd514ed869fcc422608af39195179fb86e931d9eaf7f7b0504e82213bdea6ccf4289755794115881daa5c9a40a521a19c22920893cbeee549dd8fa957abf6d91104e3bbc44d99451b1725e110cf2b7b408ec15e264a697c738324c3bf221f4b43541402c3fb98cdbd34d126f5ca5b3bf5d3d2207a76deac735195d3d088feff51e4086db843cb1b0dc605d49a0e1ffe9606192b14cec048be0b0f7e537f71c2c11e0af101fd6170d8a837f767a2a1ea1cc2ecdd91f0a5f15f4ee7dcfd7c98180c90921215aef299d2294e8758847bf09741aa8a52eb9e24cc396e1a88d6fb4c5ba312ed3602d999e3d567e88d265b2fa1e0b44269b45fe00765017fa3767086603d6473dc17f51161db72dd118b997d260a5c33f5b2555bed8217498edddf025c17502f8dde48ab2b8fd49bde5038dad8f5fe21937439be09d1c6b3b980ba68c9cc2dd0474428969c5c6d81688980432d98afe247fdb79dff2ac0b2437c96401dc9ccb45808671a9934b84cfb2e21528ef101f3388012eae04a4089e4fddeaf2b304f5b5c320860ea3bd755e68249c9aa84770794453871ef920c399adcc3afc779229e29a2c903693de767e1ac5f1b3443cc702e229453250475abdd48f09bbc25263a8090f84e42cbb30a3536675ab4dc4e33287dc7040d2301d3ead9447c456de78f7cb794ea06f8ff318f6fbcccbac08daa6f9d54e6c15f449e1be00101068e5ee13a7754251150a90e29749994952ae8532691e8f1381009014aadd1be02039d4d11d4a069b9320d68ac5e129f4235392aae4784e73a3b60e0c91b6a6211d883263721fd87ff2336abf3da1d88be4e50b6b9c9fa4a20141934096492bc1842853681143fdda6ae63da03bc781d294ea2b6ac50b8b7691c55f42ba2fa167b26467a344e0830943ce4812e069e7ad2bd38e3264a17513d79e52f00dd5b5bce8d3f3c542d8a538815741d08c558043e89d848e9921e3c868e00a78a00f8a27049458f6cc7f05288f72a6b763983e66e8e46a1b15e3c6c9fd79f84933435b83ebc490676f399d4cb13f79ce10ad8da825f98fb5d3d0053f5157653b100327eeac4b18ea8d00e2d8ef957ac41bccb1ec4f36befd2df69b473f82ca78ac18da524273cfd02192aba1b87976286c59d69ffad8eef39aff96da2274d953fa7aa6d4255236f2d88e168bda123ee07244b0c43c51bedda970105ec01a3da2264607dc523c22cceaedb5c2693f12ac0a3e2b8c775757ae9d7702d60bef8f2b8e3bed434797e3095f4fbe4463db73345637cd30b7947daef6d0c11015af09e01e96e6846ff8d80274ee1b3aeabfb4db8802189f37d7087390ccb8a7e49c7b8999f0675cd0b3e315150adb8713edafcd6ac538794713c7e0f7fb1d09cc8800e6854e8ae16bee9a2d3b9bf26a8772c8507dcfee03db6c3dd4baf658867d74c9278a5b99f54a4fdc29d26406990dd7d58ff101c66c1b635e0b13d24343104a434f532578743ea2deb80ca2eac7f270362ddf21c4182725b657bca1d38de1d5a823cca42e3d6e63c0aa6ce9aff65a259dc05fb73642ed000930c826fa3c702403ece0826529aa1a755642fbc1255960fcc4fbbf8f6a7ae76e9beb7a0136c2f953cd79261e4bc64c2874f894029606d26a450cb82010a6da42d771adc361fa71e814fb0c58eac8ea07ffbedf40c353706e3781e712db797b6464a229901c8c7e004b24a3d39cb79b4f19b79ea7139e224cb7411bc2fc470c1ea810a0816d5c632059ed0c2cfaddbec70cc18af460d814aaf1407cebb6b4fa10fedea0bfca08da62d636237cc6d7cf2180bd603ee9ddcf55457d1a9f8292cede655bc63c7f790840758f8b38cb00746a2a7a18fac2b5b6f1a6d7818c6158a8bde4abc37cd841fab969713ab5afecb79d259149fe94bd5b93c8c14a5c4426fe29a48a6218f14dcf50add37795e29df5ea8641aaffe9c1faf82fb9a27ea4506907935cee32f0b823d9a8edc611d1de4ac7902e971bb9b04921b0275fb60914a53fc3749f6e250ad03664cfb38c5562edcd1b559829ad8439525a69bbc0953c77b7a16fdf2e10dd8112848d99b375079c385f5257ebf95b9f2a0a7940304ae41f39dc90ba64a2f31d4dcae33e6f1a843a057df7dee4f548dfa77691aa4cd49f5b5dbded92ab0a1fd1f4b99836f15baf9d0c95ece9eb9a89cda5fad84ec2a4ade032b24d660813765948ef45d467703675d3e370274d406d28c5ab4ac7f47fdec85562159722c75ac6ad86f56262f84ff2d5f9809e3df45b0a4b27295f3e811c2a9c581be9d07c1976832e146b4f9693f317fc08910b16c9234f51bf99e3b145fc010e6894ee0034153a4b453216bd573f21144637a63570ee51a8caa1ee390794a2743202150d9f586cee64458d247ce55f9cad1485c85aa8a0861bf5f679556c1e85424fc4a9c1882632ecced57aafb1de0a9d30f47771da561e441cf43e5c762823c9539ebef2af6c9320979bf6871c84327093407b856d624a73134f05e4d701871bbb30df6720e4a272fa9505ce974b1c8d3e55fe8a7e198690ab026ac713f1aecf8d0678088a08daaebbeb8a3fecf9fa50f4899645b3009a0b18d0be7c552df484018499b38d82a2b767b2c22e95d526ed19f80aebf5b7fdf3e11927f260f1a4aa306846cecde0815aa61606503dab49c84ac3ae3b6ecc0038b3edd255726863b24500842f19a8dedce854e425b0167b175367a3c735cc11ccd1a37f561513ccd7b31fe8202a57c2d38051daf0a4ba33ce3096d26923112e38b099b4129689da0ec615d387bb5683fdb1e8947f4ff2603032299694c9b7efd55b7325d3b7452ae8d031bcab5b7333d455eed289240656bae51d4ef8245f83f2d6a0b0abb6eff8c1eec85b5bbbc2220e0f68b1f3a1e2671f4558b518b97b4e5e438fc18d8638bafbab4f338fad02a71054200a070f734406bb7652172284822adf06df9979c99aa4c5a77cb3838de3c87a2364e881c315d368f6cd696b04145cf44c422d8c43b2b9982407ecd0bf4024e53cc8b50ef6de9e85cae20474b8b8c01d4ab3f692fff8bfc06e39f7845e01e4a02414583965e89b0f956dacf4c4e396d16833ac7b123c023a2ab26a64bcc1843fd9e3622c0e946b15a77af27b51711212016df59cfcd61d9eaca058ec41358978473db73a92926b19dcdef6d70d061de1633e80704e5af52e325dabdf050d11fc08ca54f4cb8b629f05a2aafd044dd5c29ef6772b984858dff2aca76512b3d98ffb1d95fb538d1d57b712f40c41ee27f478ce1e023734a6e3ff2a4d3efc680d23be3f835b90d5fbf022c10dd5bb46b414928c703f233ca7a56a78f173c5b529c6d59dec1dbc4a2df5312cea25ddf0f70780083bfa18eed114485dfe4e0d870ee20a0ad968a8c0e11f86ae7606674ffb375003ecb6adb66b94fdd36c1d5f6774ab978aa0e08d40fd3966a3fd081e592ab55ea069763de9ea1f9958fb2f977c4b59a396c981a20f460a4506b81252a0a2ad67cc5453d0a8d4c35c7648d2fcac272828619ba0d6b510d14cd80f14ec79e9774aaca02f9e54d77b9dfbf89fa5e9fe72c598eea6fb65be5cc2098377f0d1deb56b5eef78c1a33e827735dcf2bfe7ce279d8f9b216f6678efa25bcfc8934b7463341db42fc56243232b3ece4a804f900098e80e10727766d07a83e3f52ed1b3705991e6c88689b62dacce2c71099f9c92f71ba08685ee21b4f4629d40f7b89bca777154cc167e28e6508ce8ac47dc006fc973ba2e51382429d96117699c5bca9eb387911223947c3043064b78ad87a42b316703500ab471e1e704f5f0af7a468b7b31046a8b321694b62a378afbd6d34e1a47223c8c0152e0ed02b40f43f47087abc1231d345b976a0221e777628795ef662ccb4b326f3e9fa560fb019bbcc961ec1ef49ba996858f1b446c6d26c11a0d8b92e6060839547cd93ae0bd734ccb66a6720400d30dafd91f2c6e40397511a8a8cd8afe1d2cc8e5fd69a12e73c1f9df95831c97f77cf515900b3810fe2cb3cb90fb4856b2307c20022215db509e21033f29685c6b7795a93e2662e90230cdbc4aae96b243f918bbd047bb20beef522b996e4748ceeebe14619bc7a004d14896e81d7cb85923d5d00954892a9a7fd0792de785e153081c135416a013d1997f88ce36e321f81f849ef150ec06cf519c36a7b1a6369ca269ec5ae888cba5c9311c19674eb0a4a93747b19040057bf2ee534646314b1b5d1", 0x1000}, {&(0x7f0000001380)="b50b18652e67a928539cbee257b2e1888284eb76dbee5e352d379019df43c63117e4a69106860fc9d0f71ec96cffc33184c7ac6417678bdf51913fff248edc5d46a8829ce966efd7ff3a6102907e4efd74ec0e0dc128974fd215ba6e1e0155c364cadda9afa12313133f35d185e41fdaf10148ae7940e78311ae6ab99ac1a2bfac1bbc54f10e69c2dc063b229c467a2c19e53cad0f6391b2a275865827b8ff1ad4a7b188d16efbb249fa6af37ce607031645afb79347ca4ac3d421aac57011ec7af096a3a7069613bf7f868b9d886a7381bcee58519c92ab50f69abae3d315d1dd1e5a65bf4934248382c14ce6", 0xed}, {&(0x7f0000001480)="83980843183b89d6e33653edd9f87d49a4c97d18c52b7c7006482733f86ef1c5644ed0d50e199f223a75d505a55ce346400c5c66b88f05cf6a2ee3d737feb4169021dc4af9bd391f0f78ab3f32b76166a933851999f90bfd021951552d335f089d3ae8c9a464220108d2801b7931a06c74eb15876bb88a6404853cae58195764737d86a940ce62125ccdd89e2a779865a0c46e5a4f51fa15e47231ff00685551ca8450880b5b768a02ea3615202e3940101d7d8dc89af06a62834852e6878f9a2dbce3d025cac72c7bc8713a45d6e6ba8426277af34c577fcf2ef7296cc592324a2ffa78b4dbf82d98863600e5316b", 0xef}], 0x5, &(0x7f0000001600)=[@iv={0x48, 0x117, 0x2, 0x34, "16477b1774352b46a1d89184e90d4f8878df19980f70ad2e2c8fa06a83e51ccc86bc60a168c9904ad98ec5db4d707b205809f4cf"}, @iv={0xc0, 0x117, 0x2, 0xa9, "f52db05bc6a16868ce9bfd0d5459f6ce4f9571f107ac027629230a1f32d3f90975fdac3ca24a7e6f5cba53ad0b1ac23eb3aed1666601f2b4fece5d6f12b4cf23afe1201413b6a016314d8c759dc6b5d8cd5ab922f16062f076caedb89b949e1bf11f4a6f491a0e8c2f4f97320a7a96459deda81d2d4c2986c2da314ba72371568eddc59bfa4d2039eefa3275c563ecc7936e2bad2d1e2b3eb55feac2801cf266533c4af3640a659372"}, @assoc={0x18, 0x117, 0x4, 0x9da}], 0x120, 0x4040000}, 0x20000001) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000017c0), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb7}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4000081) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000019c0)={'gre0\x00', &(0x7f0000001940)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x7, 0x4, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x7, [{@private=0xa010100, 0x2}, {@broadcast, 0x4}, {@rand_addr=0x64010101, 0x2}]}]}}}}}) getsockname$packet(r3, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001a40)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl2\x00', 0x0, 0x0, 0x6, 0x9, 0x1, 0x5f, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8, 0x40, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001cc0)={'erspan0\x00', &(0x7f0000001b80)={'gretap0\x00', 0x0, 0x8008, 0x8000, 0x7, 0x68, {{0x3d, 0x4, 0x0, 0x6, 0xf4, 0x67, 0x0, 0x4, 0x2f, 0x0, @empty, @private=0xa010100, {[@timestamp={0x44, 0x28, 0x52, 0x0, 0xb, [0x2, 0x4, 0x0, 0x9, 0xdca, 0x9, 0x1, 0x0, 0xa]}, @timestamp_addr={0x44, 0x4c, 0x7c, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa87}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x7fff}, {@local, 0x6c94a2f0}, {@empty, 0x1}, {@loopback, 0x1}, {@loopback, 0x1035}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xe8}, {@remote, 0x393}]}, @timestamp={0x44, 0x10, 0xf4, 0x0, 0x9, [0x800, 0x10000, 0x43e03126]}, @ra={0x94, 0x4}, @noop, @end, @timestamp={0x44, 0x1c, 0xc2, 0x0, 0x4, [0x5, 0x0, 0x4, 0x617e, 0x4, 0x8]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xa6, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0x7}, {@remote, 0xea0000}, {@multicast1, 0x3}, {@empty, 0x100}, {@multicast1, 0x7fff}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001e40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xd4, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001f80)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000002180)={{r11, 0x8000000000000001, 0x2b9d, 0xff, 0x7, 0x1f, 0x5, 0x1, 0x5, 0xcf4f, 0x58, 0x10000, 0x77b, 0x96, 0x8}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002240)=0x14) r12 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002280), r1) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000002400)={&(0x7f00000022c0), 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x90, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}]}, 0x90}, 0x1, 0x0, 0x0, 0x44010}, 0x5) getsockopt$IP_SET_OP_GET_BYINDEX(r12, 0x1, 0x53, &(0x7f0000002440)={0x7, 0x7, 0x3}, &(0x7f0000002480)=0x28) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002500), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x64, r13, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x64}}, 0x80) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x54, r14, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10090}, 0x8000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x3c, r14, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.72047508s ago: executing program 0 (id=5806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 756.045528ms ago: executing program 5 (id=5807): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xb}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 689.292754ms ago: executing program 5 (id=5808): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)='T', 0x1}], 0x1}}], 0x1, 0x810) listen(r0, 0xc6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) accept4(r0, &(0x7f0000000040)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @netrom, @null, @null]}, &(0x7f00000001c0)=0x80, 0x80000) 508.666188ms ago: executing program 5 (id=5809): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[], 0x2e8}}], 0x2, 0x20048001) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(r6, 0x0, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r8}, 0x20) close(r9) recvmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000011c0)="d1", 0x1}], 0x1}, 0x404c0c4) recvmsg$can_bcm(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r5) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x0, 0x80000000, 0x0, @remote, @rand_addr=' \x01\x00', 0x1, 0x40, 0x0, 0xff}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r11) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x448, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_HDR={0x6, 0x3, "b27c"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x5690bb00, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x40, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000000, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x800000, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0x5, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x7ff, 0x2, 0xfff, 0x9371, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xf, 0x2, 0x0, 0x4, 0x7, 0x7, 0xc0, 0xd1b7, 0x2, 0x8, 0xddf3, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x81, 0xff, 0x5, 0x9, 0x9, 0x8, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x0, 0x3, 0x7, 0xe755, 0x3, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x81, 0x100, 0x401, 0xc6]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r3, r0, 0x4, r0}, 0x7) 365.561115ms ago: executing program 1 (id=5810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)={r1, 0x1, 0x4}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a12000300686173683a6e65742c706f72740000000900020073797a30000000000500010007000000050004000000000005000500020000001400078008000840000000df08001200"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 257.095894ms ago: executing program 0 (id=5811): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141505000000000000200000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1], 0xfc}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000100000000000000a13c2b07cb942c74"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000800000000080005000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) 201.730589ms ago: executing program 5 (id=5812): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 141.584824ms ago: executing program 1 (id=5813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, r5}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214600600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb91f, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x6, 0x5, 0x9, 0xfff7, 0xfffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc}, 0x94) 106.534445ms ago: executing program 4 (id=5814): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000340), 0x0}, 0x20) ioctl(r2, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1014, &(0x7f0000002500)=""/4116, 0x0, 0xc}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x1000}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x20040600) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r11) sendmsg$NFC_CMD_ENABLE_SE(r11, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400c010) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$EXT4_IOC_GROUP_ADD(r13, 0x40286608, &(0x7f0000000100)={0x72, 0x8, 0x1000, 0x2, 0x7ff, 0x2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0xa, 0x0, 0x8001, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x3, 0xb, 0x1e, 0x6, 0xfffffffffffffffc}, @exit], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x18, r10, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x10, 0x5, 0x9}, 0x10, 0x2570c, r7, 0xa, 0x0, &(0x7f0000000840)=[{0x2, 0x2, 0xe}, {0x2, 0x1, 0x0, 0xb24f85c376a7d89d}, {0x2, 0x1, 0x7, 0x4}, {0x1, 0x3, 0xe, 0x4}, {0x1, 0x2, 0xa, 0x1dd66341371291dc}, {0x4, 0x3, 0x10, 0x9}, {0x0, 0x3, 0xf, 0xa}, {0x5, 0x3, 0x7, 0x4}, {0x3, 0x2, 0x1, 0xb}, {0x5, 0x2, 0xa, 0x2}]}, 0x94) 0s ago: executing program 0 (id=5815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000e7ffffff0079123000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 0002000000001c0 RSI: 0000200000000100 RDI: 0000000000000008 [ 548.545306][T23232] RBP: 00007fac33a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 548.545316][T23232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.545325][T23232] R13: 00007fac32e16038 R14: 00007fac32e15fa0 R15: 00007ffc0d0242a8 [ 548.545352][T23232] [ 548.546757][T23221] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 548.797134][T23221] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 548.808491][T23239] netlink: 'syz.1.4451': attribute type 10 has an invalid length. [ 548.829713][T23239] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.838993][T23239] bond0: (slave team0): Enslaving as an active interface with an up link [ 548.921199][T23221] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 548.945788][T23221] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 549.196001][T10231] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 549.214607][T10231] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 549.221202][T23262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4460'. [ 549.267601][T10234] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 549.276310][T10234] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 549.339170][T10234] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 549.348933][T10234] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 549.415907][T23268] FAULT_INJECTION: forcing a failure. [ 549.415907][T23268] name failslab, interval 1, probability 0, space 0, times 0 [ 549.429460][T23268] CPU: 0 UID: 0 PID: 23268 Comm: syz.2.4462 Not tainted syzkaller #0 PREEMPT(full) [ 549.429484][T23268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.429494][T23268] Call Trace: [ 549.429501][T23268] [ 549.429508][T23268] dump_stack_lvl+0xe8/0x150 [ 549.429533][T23268] should_fail_ex+0x412/0x560 [ 549.429555][T23268] should_failslab+0xa8/0x100 [ 549.429570][T23268] ? alloc_empty_file+0x5b/0x1d0 [ 549.429588][T23268] kmem_cache_alloc_noprof+0x87/0x650 [ 549.429619][T23268] alloc_empty_file+0x5b/0x1d0 [ 549.429640][T23268] alloc_file_pseudo+0x155/0x240 [ 549.429656][T23268] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 549.429677][T23268] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 549.429694][T23268] ? evm_inode_alloc_security+0x40/0xb0 [ 549.429712][T23268] ? security_inode_alloc+0xd5/0x310 [ 549.429744][T23268] sock_alloc_file+0xb8/0x2e0 [ 549.429769][T23268] do_accept+0x3a0/0x760 [ 549.429789][T23268] ? __pfx_do_accept+0x10/0x10 [ 549.429826][T23268] __sys_accept4+0x139/0x230 [ 549.429845][T23268] ? __pfx___sys_accept4+0x10/0x10 [ 549.429861][T23268] ? __pfx_ksys_write+0x10/0x10 [ 549.429888][T23268] __x64_sys_accept4+0x9a/0xb0 [ 549.429904][T23268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.429935][T23268] do_syscall_64+0x174/0x580 [ 549.429953][T23268] ? trace_irq_disable+0x3b/0x140 [ 549.429977][T23268] ? clear_bhb_loop+0x40/0x90 [ 549.429996][T23268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.430011][T23268] RIP: 0033:0x7f1b8ab9ce59 [ 549.430027][T23268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.430040][T23268] RSP: 002b:00007f1b8bb19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 549.430057][T23268] RAX: ffffffffffffffda RBX: 00007f1b8ae15fa0 RCX: 00007f1b8ab9ce59 [ 549.430069][T23268] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000008 [ 549.430080][T23268] RBP: 00007f1b8bb19090 R08: 0000000000000000 R09: 0000000000000000 [ 549.430089][T23268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.430098][T23268] R13: 00007f1b8ae16038 R14: 00007f1b8ae15fa0 R15: 00007ffc0d0aa688 [ 549.430122][T23268] [ 549.434299][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 549.518739][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 549.564433][T10234] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 549.676620][T23272] netlink: 'syz.2.4463': attribute type 1 has an invalid length. [ 549.696078][T10234] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 549.765046][T23270] netlink: 'syz.3.4461': attribute type 1 has an invalid length. [ 549.806588][T23272] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 550.058730][T23288] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 550.474198][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 550.646975][T23320] nbd: must specify a size in bytes for the device [ 551.413459][T23343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4482'. [ 551.486366][T23350] syzkaller0: entered promiscuous mode [ 551.503415][T23352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4485'. [ 551.506733][T23350] syzkaller0: entered allmulticast mode [ 551.524199][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 551.621024][T23350] tipc: Enabled bearer , priority 10 [ 551.648935][T23349] tipc: Resetting bearer [ 551.762654][T23349] tipc: Disabling bearer [ 551.866522][T23367] xfrm0 speed is unknown, defaulting to 1000 [ 551.892115][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4490'. [ 551.927159][T23370] netlink: 'syz.3.4490': attribute type 1 has an invalid length. [ 551.948458][T23370] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4490'. [ 551.968453][T23370] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4490'. [ 552.043616][T23370] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 552.095313][T23370] bond10 (unregistering): Released all slaves [ 552.242577][T23383] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 552.276975][T23383] bond3 (unregistering): Released all slaves [ 552.287124][T23378] block nbd0: not configured, cannot reconfigure [ 552.554513][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 552.557924][T23385] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 552.622714][T23392] __nla_validate_parse: 1 callbacks suppressed [ 552.622730][T23392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4496'. [ 552.660966][T23385] bond3 (unregistering): Released all slaves [ 553.251312][T23414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4500'. [ 553.279384][T23414] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 553.453017][T23423] xt_hashlimit: size too large, truncated to 1048576 [ 553.462651][T23424] syzkaller0: entered promiscuous mode [ 553.477072][T23424] syzkaller0: entered allmulticast mode [ 553.539541][T23424] tipc: Enabled bearer , priority 10 [ 553.560682][T23422] tipc: Resetting bearer [ 553.604235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.613546][T23427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4502'. [ 553.625340][T23422] tipc: Disabling bearer [ 553.636060][T23426] xt_hashlimit: size too large, truncated to 1048576 [ 553.656817][T23426] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 553.850734][T23435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4504'. [ 554.001429][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4506'. [ 554.316838][T23453] set match dimension is over the limit! [ 554.520757][T23468] syzkaller0: entered promiscuous mode [ 554.527057][T23468] syzkaller0: entered allmulticast mode [ 554.605871][T23468] tipc: Enabled bearer , priority 10 [ 554.634285][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.642454][T23467] tipc: Resetting bearer [ 554.643046][T23474] xt_nat: multiple ranges no longer supported [ 554.729208][T23467] tipc: Disabling bearer [ 554.985049][T23484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4517'. [ 555.082455][T23488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4519'. [ 555.339141][T23499] FAULT_INJECTION: forcing a failure. [ 555.339141][T23499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.400608][T23499] CPU: 0 UID: 0 PID: 23499 Comm: syz.2.4521 Not tainted syzkaller #0 PREEMPT(full) [ 555.400632][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.400643][T23499] Call Trace: [ 555.400650][T23499] [ 555.400657][T23499] dump_stack_lvl+0xe8/0x150 [ 555.400681][T23499] should_fail_ex+0x412/0x560 [ 555.400703][T23499] _copy_from_user+0x2d/0xb0 [ 555.400724][T23499] bpf_test_init+0xd8/0x150 [ 555.400832][T23499] bpf_prog_test_run_xdp+0x529/0x1160 [ 555.400864][T23499] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 555.400887][T23499] ? __fget_files+0x2a/0x420 [ 555.400911][T23499] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 555.400940][T23499] bpf_prog_test_run+0x2c7/0x340 [ 555.400959][T23499] __sys_bpf+0x643/0x950 [ 555.400982][T23499] ? __pfx___sys_bpf+0x10/0x10 [ 555.401017][T23499] ? ksys_write+0x242/0x270 [ 555.401041][T23499] ? __pfx_ksys_write+0x10/0x10 [ 555.401066][T23499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.401084][T23499] __x64_sys_bpf+0x7c/0x90 [ 555.401107][T23499] do_syscall_64+0x174/0x580 [ 555.401125][T23499] ? trace_irq_disable+0x3b/0x140 [ 555.401149][T23499] ? clear_bhb_loop+0x40/0x90 [ 555.401170][T23499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.401187][T23499] RIP: 0033:0x7f1b8ab9ce59 [ 555.401204][T23499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.401219][T23499] RSP: 002b:00007f1b8baf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.401236][T23499] RAX: ffffffffffffffda RBX: 00007f1b8ae16090 RCX: 00007f1b8ab9ce59 [ 555.401248][T23499] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 555.401259][T23499] RBP: 00007f1b8baf8090 R08: 0000000000000000 R09: 0000000000000000 [ 555.401269][T23499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.401278][T23499] R13: 00007f1b8ae16128 R14: 00007f1b8ae16090 R15: 00007ffc0d0aa688 [ 555.401304][T23499] [ 555.636496][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4524'. [ 555.668585][T23508] netlink: 'syz.3.4526': attribute type 4 has an invalid length. [ 555.676597][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 555.699884][T23508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4526'. [ 555.780524][T23517] syzkaller0: entered promiscuous mode [ 555.786162][T23517] syzkaller0: entered allmulticast mode [ 555.929281][T23521] netlink: 'syz.3.4527': attribute type 10 has an invalid length. [ 555.937417][T23521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4527'. [ 556.714646][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 557.754258][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.611931][T23506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.747066][T23552] __nla_validate_parse: 1 callbacks suppressed [ 558.747094][T23552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4533'. [ 558.794343][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.863815][ T5640] block nbd1: Receive control failed (result -1) [ 558.909709][T23555] netlink: 'syz.4.4536': attribute type 2 has an invalid length. [ 559.323704][T23578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4539'. [ 559.398830][T23580] netlink: 'syz.3.4540': attribute type 4 has an invalid length. [ 559.430627][T23580] netlink: 'syz.3.4540': attribute type 4 has an invalid length. [ 559.430865][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4543'. [ 559.458905][T23585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4541'. [ 559.487809][T23584] openvswitch: netlink: Missing key (keys=40, expected=80) [ 559.805652][T23606] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4546'. [ 559.834290][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.860376][T23606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4546'. [ 559.890742][T23610] netlink: 'syz.0.4547': attribute type 10 has an invalid length. [ 559.898812][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 559.920734][T23610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4547'. [ 559.936761][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4546'. [ 559.944522][T23613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4548'. [ 560.355685][T23631] syzkaller0: entered promiscuous mode [ 560.361483][T23631] syzkaller0: entered allmulticast mode [ 560.874299][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 561.918308][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 562.797418][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 562.961106][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.282239][T23666] tipc: Enabling of bearer rejected, already enabled [ 563.298688][T23676] tipc: Resetting bearer [ 563.752447][T23711] nftables ruleset with unbound set [ 563.994289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 564.128258][T23729] sch_tbf: burst 0 is lower than device geneve1 mtu (1514) ! [ 564.176873][T23735] __nla_validate_parse: 4 callbacks suppressed [ 564.176891][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4585'. [ 564.381565][T23744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4588'. [ 564.600840][T23762] syzkaller1: left allmulticast mode [ 564.609070][T23760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4593'. [ 564.805326][T23775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'. [ 564.820734][T23771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4598'. [ 564.821836][T23773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4596'. [ 565.034285][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 565.058791][T23785] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4600'. [ 565.109884][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4601'. [ 565.221771][T23789] netlink: 'syz.2.4602': attribute type 2 has an invalid length. [ 565.262483][T23788] netlink: 'syz.0.4601': attribute type 1 has an invalid length. [ 565.317334][T23795] netlink: 'syz.2.4602': attribute type 8 has an invalid length. [ 565.353612][T23789] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4602'. [ 565.365970][T23789] netlink: 'syz.2.4602': attribute type 1 has an invalid length. [ 565.374021][T23789] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4602'. [ 565.529285][T23811] netlink: 'syz.0.4608': attribute type 27 has an invalid length. [ 565.772807][T23826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.889500][T23837] netlink: 'syz.0.4616': attribute type 1 has an invalid length. [ 566.074482][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 566.090195][T10230] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.099034][T23847] xfrm0 speed is unknown, defaulting to 1000 [ 566.115361][T10230] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.147602][T10230] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.168372][T10230] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.455492][T23871] nbd: must specify an index to disconnect [ 566.634788][T23883] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 566.957077][T23895] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 567.010227][T23895] netlink: 'syz.4.4632': attribute type 6 has an invalid length. [ 567.114480][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 567.298580][T23919] netlink: zone id is out of range [ 567.307500][T23919] netlink: zone id is out of range [ 568.154429][ C1] net_ratelimit: 4 callbacks suppressed [ 568.154448][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 568.170765][T23950] veth0_macvtap: left promiscuous mode [ 568.178410][T23951] FAULT_INJECTION: forcing a failure. [ 568.178410][T23951] name failslab, interval 1, probability 0, space 0, times 0 [ 568.222769][T23951] CPU: 0 UID: 0 PID: 23951 Comm: syz.4.4648 Not tainted syzkaller #0 PREEMPT(full) [ 568.222797][T23951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.222808][T23951] Call Trace: [ 568.222816][T23951] [ 568.222824][T23951] dump_stack_lvl+0xe8/0x150 [ 568.222852][T23951] should_fail_ex+0x412/0x560 [ 568.222877][T23951] should_failslab+0xa8/0x100 [ 568.222897][T23951] __kmalloc_cache_noprof+0x88/0x660 [ 568.222922][T23951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 568.222944][T23951] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 568.223061][T23951] __xdp_reg_mem_model+0x1e3/0x5d0 [ 568.223088][T23951] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 568.223108][T23951] ? page_pool_list+0x20f/0x250 [ 568.223176][T23951] ? page_pool_create_percpu+0x87b/0xc80 [ 568.223204][T23951] xdp_reg_mem_model+0x22/0x40 [ 568.223226][T23951] bpf_test_run_xdp_live+0x295/0x1cf0 [ 568.223254][T23951] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 568.223292][T23951] ? __pfx_autoremove_wake_function+0x10/0x10 [ 568.223320][T23951] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 568.223361][T23951] ? 0xffffffffa0201a5c [ 568.223377][T23951] ? 0xffffffffa02030e0 [ 568.223392][T23951] ? 0xffffffffa0203160 [ 568.223406][T23951] ? 0xffffffffa0203228 [ 568.223445][T23951] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 568.223476][T23951] ? _copy_from_user+0x94/0xb0 [ 568.223498][T23951] ? bpf_test_init+0x113/0x150 [ 568.223515][T23951] ? xdp_convert_md_to_buff+0x5b/0x330 [ 568.223538][T23951] bpf_prog_test_run_xdp+0x81c/0x1160 [ 568.223574][T23951] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 568.223600][T23951] ? __fget_files+0x2a/0x420 [ 568.223627][T23951] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 568.223649][T23951] bpf_prog_test_run+0x2c7/0x340 [ 568.223671][T23951] __sys_bpf+0x643/0x950 [ 568.223699][T23951] ? __pfx___sys_bpf+0x10/0x10 [ 568.223738][T23951] ? ksys_write+0x242/0x270 [ 568.223764][T23951] ? __pfx_ksys_write+0x10/0x10 [ 568.223793][T23951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.223813][T23951] __x64_sys_bpf+0x7c/0x90 [ 568.223837][T23951] do_syscall_64+0x174/0x580 [ 568.223856][T23951] ? trace_irq_disable+0x3b/0x140 [ 568.223880][T23951] ? clear_bhb_loop+0x40/0x90 [ 568.223903][T23951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.223920][T23951] RIP: 0033:0x7f779cf9ce59 [ 568.223937][T23951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.223952][T23951] RSP: 002b:00007f779dee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.223973][T23951] RAX: ffffffffffffffda RBX: 00007f779d216090 RCX: 00007f779cf9ce59 [ 568.223986][T23951] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 568.223998][T23951] RBP: 00007f779dee1090 R08: 0000000000000000 R09: 0000000000000000 [ 568.224009][T23951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.224027][T23951] R13: 00007f779d216128 R14: 00007f779d216090 R15: 00007ffe8a350618 [ 568.224057][T23951] [ 569.029397][T23969] netlink: 'syz.3.4653': attribute type 1 has an invalid length. [ 569.183817][T23987] netlink: 'syz.0.4658': attribute type 5 has an invalid length. [ 569.194265][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.331584][T23995] __nla_validate_parse: 12 callbacks suppressed [ 569.331604][T23995] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4662'. [ 569.457232][T23994] bond10: option all_slaves_active: invalid value (127) [ 569.466944][T24006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4663'. [ 569.485965][T23994] bond10 (unregistering): Released all slaves [ 570.159980][ T5292] veth0_macvtap: entered promiscuous mode [ 570.234328][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 570.239167][T24049] netlink: 'syz.0.4671': attribute type 2 has an invalid length. [ 570.307435][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'. [ 570.329138][T24050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4672'. [ 570.433858][T24049] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.619290][T24049] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.968170][T24049] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.070869][T24088] syzkaller0: entered promiscuous mode [ 571.101001][T24088] syzkaller0: entered allmulticast mode [ 571.241196][T24049] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.274369][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 571.404978][T24095] tipc: Enabled bearer , priority 0 [ 571.451929][T24085] tipc: Resetting bearer [ 571.516461][T24085] tipc: Disabling bearer [ 571.613368][T10231] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.675461][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4689'. [ 571.688566][T24126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.722330][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.757507][T24121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4689'. [ 571.797651][T10231] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.841587][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.906287][T24135] xfrm0 speed is unknown, defaulting to 1000 [ 572.016532][T24145] bond8: option min_links: invalid value (18446744073709551612) [ 572.025597][T24145] bond8: option min_links: allowed values 0 - 2147483647 [ 572.039219][T24145] bond8 (unregistering): Released all slaves [ 572.314567][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 572.551225][T24170] tipc: Enabled bearer , priority 0 [ 572.577096][T24170] syzkaller0: entered promiscuous mode [ 572.598033][T24170] syzkaller0: entered allmulticast mode [ 572.712246][T24170] tipc: Resetting bearer [ 572.759416][T24169] tipc: Resetting bearer [ 572.817169][T24169] tipc: Disabling bearer [ 572.817180][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'. [ 572.843199][T24182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4703'. [ 572.891452][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4703'. [ 573.103795][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4707'. [ 573.354399][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 573.457310][T24208] netlink: 'syz.1.4710': attribute type 5 has an invalid length. [ 573.951650][T24234] xfrm0 speed is unknown, defaulting to 1000 [ 574.394258][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 575.299122][T24298] __nla_validate_parse: 5 callbacks suppressed [ 575.299140][T24298] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4733'. [ 575.434328][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 575.469154][T24302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4736'. [ 576.045487][T24334] syzkaller0: entered promiscuous mode [ 576.066539][T24334] syzkaller0: entered allmulticast mode [ 576.125367][T24344] syzkaller0: entered promiscuous mode [ 576.139051][T24344] syzkaller0: entered allmulticast mode [ 576.229872][T24344] tipc: Enabled bearer , priority 0 [ 576.256371][T24343] tipc: Resetting bearer [ 576.310777][T24343] tipc: Disabling bearer [ 576.388559][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'. [ 576.423192][T24362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4752'. [ 576.474323][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 577.514401][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 578.554428][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 579.605241][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.218089][T24362] team0: Port device team_slave_0 removed [ 580.231078][T24383] tap0: tun_chr_ioctl cmd 1074812118 [ 580.443272][T24405] syzkaller0: entered promiscuous mode [ 580.466814][T24405] syzkaller0: entered allmulticast mode [ 580.506337][T24411] syzkaller0: entered promiscuous mode [ 580.519181][T24411] syzkaller0: entered allmulticast mode [ 580.634355][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.647726][T24421] bond3: option fail_over_mac: invalid value (127) [ 580.656315][T24421] bond3 (unregistering): Released all slaves [ 580.700308][T24411] tipc: Enabled bearer , priority 0 [ 580.797034][T24408] tipc: Resetting bearer [ 581.675153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 581.717011][T24408] tipc: Disabling bearer [ 581.860706][T24420] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 581.876527][T24420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 581.900579][T24420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 582.137694][T24488] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4778'. [ 582.179206][T24489] netlink: 'syz.1.4775': attribute type 1 has an invalid length. [ 582.313855][T24489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.477592][T24502] syzkaller0: entered promiscuous mode [ 582.498969][T24502] syzkaller0: entered allmulticast mode [ 582.731297][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 582.923730][T24509] syzkaller0: entered promiscuous mode [ 582.947004][T24509] syzkaller0: entered allmulticast mode [ 583.048896][T24533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 583.754348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 584.100573][T24565] netlink: 'syz.4.4791': attribute type 7 has an invalid length. [ 584.108507][T24565] netlink: 'syz.4.4791': attribute type 8 has an invalid length. [ 584.116777][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'. [ 584.794522][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 585.834403][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 586.443308][T24540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4788'. [ 586.452528][T24540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4788'. [ 586.566963][T24549] tipc: Enabling of bearer rejected, already enabled [ 586.860981][T24586] syzkaller0: entered promiscuous mode [ 586.874682][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 586.886758][T24586] syzkaller0: entered allmulticast mode [ 586.904850][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4797'. [ 586.958394][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4797'. [ 587.247799][T24616] netlink: 'syz.4.4803': attribute type 13 has an invalid length. [ 587.437302][T24630] netlink: 'syz.1.4802': attribute type 4 has an invalid length. [ 587.506717][T24632] netlink: 'syz.1.4802': attribute type 4 has an invalid length. [ 588.251620][T24662] nbd: must specify a device to reconfigure [ 588.328188][T24648] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 588.329064][ T10] hid-generic 0005:0007:0007.0001: item fetching failed at offset 0/1 [ 588.338253][T24665] veth1_to_bond: entered allmulticast mode [ 588.365140][ T10] hid-generic 0005:0007:0007.0001: probe with driver hid-generic failed with error -22 [ 588.416185][T24665] bond0: entered promiscuous mode [ 588.435385][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 588.455128][T24665] batadv0: entered promiscuous mode [ 588.465428][T24665] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 588.487279][T24665] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 588.509800][T24665] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 588.563331][T24667] netlink: 'syz.0.4815': attribute type 21 has an invalid length. [ 588.563604][T24661] veth1_to_bond (unregistering): left allmulticast mode [ 588.571836][T24667] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4815'. [ 588.601658][T24667] netlink: 'syz.0.4815': attribute type 5 has an invalid length. [ 588.609854][T24667] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4815'. [ 588.752115][T24669] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.815138][T24669] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.870397][T24669] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.932504][T24683] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 588.966378][T24669] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.024059][T24690] SET target dimension over the limit! [ 589.117332][T10231] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.132119][T24698] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4823'. [ 589.147631][T10231] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.167193][T24698] gretap0: entered promiscuous mode [ 589.198142][T24698] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4823'. [ 589.231042][T10231] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.254581][T24698] 0ªî{X¹¦: renamed from gretap0 [ 589.259798][T24705] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4827'. [ 589.270554][T24698] 0ªî{X¹¦: left promiscuous mode [ 589.279444][T24698] 0ªî{X¹¦: entered allmulticast mode [ 589.289103][T24698] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 589.322385][T10231] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.548209][T24714] xfrm0 speed is unknown, defaulting to 1000 [ 589.791223][T24739] syzkaller0: entered promiscuous mode [ 589.796976][T24739] syzkaller0: entered allmulticast mode [ 590.579557][T24744] netlink: 'syz.4.4838': attribute type 2 has an invalid length. [ 590.702644][T24753] netlink: 'syz.4.4838': attribute type 8 has an invalid length. [ 590.722409][T24753] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4838'. [ 590.768109][T24753] netlink: 'syz.4.4838': attribute type 1 has an invalid length. [ 590.795274][T24753] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4838'. [ 591.018377][T24767] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4844'. [ 591.039240][T24767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4844'. [ 591.377539][T24781] netlink: 'syz.4.4847': attribute type 1 has an invalid length. [ 591.446441][T24781] 8021q: adding VLAN 0 to HW filter on device bond8 [ 591.476932][T24790] syzkaller0: entered promiscuous mode [ 591.493875][T24790] syzkaller0: entered allmulticast mode [ 591.937587][T24818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.014310][T24822] netlink: 'syz.1.4861': attribute type 49 has an invalid length. [ 592.496279][T24835] bond0: Caught tx_queue_len zero misconfig [ 592.676453][T24839] netlink: 'syz.1.4866': attribute type 2 has an invalid length. [ 592.692386][T24839] netlink: 'syz.1.4866': attribute type 1 has an invalid length. [ 592.838565][T24849] lo: Caught tx_queue_len zero misconfig [ 593.984756][T24894] syzkaller0: entered promiscuous mode [ 593.990291][T24894] syzkaller0: entered allmulticast mode [ 594.154388][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 594.285705][T24904] __nla_validate_parse: 11 callbacks suppressed [ 594.285724][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4886'. [ 594.302320][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4886'. [ 594.312877][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4886'. [ 594.326344][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4886'. [ 595.103541][T24963] syzkaller0: entered promiscuous mode [ 595.114988][T24963] syzkaller0: entered allmulticast mode [ 595.194625][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 595.296286][T24971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.309383][T24973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4908'. [ 595.429039][T24979] syzkaller0: entered promiscuous mode [ 595.436258][T24979] syzkaller0: entered allmulticast mode [ 595.457375][T24978] netlink: 'syz.0.4910': attribute type 2 has an invalid length. [ 595.576678][T24984] netlink: 'syz.3.4912': attribute type 3 has an invalid length. [ 595.587885][T24982] netlink: 'syz.0.4910': attribute type 8 has an invalid length. [ 595.612269][T24978] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4910'. [ 595.621659][T24978] netlink: 'syz.0.4910': attribute type 1 has an invalid length. [ 595.629863][T24978] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4910'. [ 595.922801][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4921'. [ 595.973270][T25011] syzkaller0: entered promiscuous mode [ 595.980210][T25011] syzkaller0: entered allmulticast mode [ 596.112949][T25016] bridge0: port 2(erspan0) entered blocking state [ 596.124906][T25016] bridge0: port 2(erspan0) entered disabled state [ 596.141727][T25016] erspan0: entered allmulticast mode [ 596.152863][T25016] erspan0: entered promiscuous mode [ 596.164582][T25016] bridge0: port 2(erspan0) entered blocking state [ 596.173060][T25016] bridge0: port 2(erspan0) entered forwarding state [ 596.196872][T25013] erspan0: left allmulticast mode [ 596.211747][T25013] erspan0: left promiscuous mode [ 596.222476][T25016] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4922'. [ 596.231898][T25013] bridge0: port 2(erspan0) entered disabled state [ 596.240380][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 596.252277][T25016] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4922'. [ 596.269685][T25024] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 596.534063][T25036] netlink: 'syz.0.4930': attribute type 2 has an invalid length. [ 596.582962][T25036] netlink: 'syz.0.4930': attribute type 8 has an invalid length. [ 596.591399][T25036] netlink: 'syz.0.4930': attribute type 1 has an invalid length. [ 596.903294][T25051] syzkaller0: entered promiscuous mode [ 596.909004][T25051] syzkaller0: entered allmulticast mode [ 597.274570][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 597.476028][T25071] netlink: 'syz.1.4943': attribute type 2 has an invalid length. [ 597.589398][T25078] bond9: option lp_interval: invalid value (0) [ 597.599082][T25078] bond9: option lp_interval: allowed values 1 - 2147483647 [ 597.607947][T25078] bond9 (unregistering): Released all slaves [ 597.747707][T25084] syzkaller0: entered promiscuous mode [ 597.753415][T25084] syzkaller0: entered allmulticast mode [ 597.992969][T25096] bridge4: entered promiscuous mode [ 598.019961][T25096] bridge4: entered allmulticast mode [ 598.042137][T25096] team0: Port device bridge4 added [ 598.071700][T25102] validate_nla: 2 callbacks suppressed [ 598.071719][T25102] netlink: 'syz.4.4951': attribute type 12 has an invalid length. [ 598.095427][T25102] netlink: 'syz.4.4951': attribute type 7 has an invalid length. [ 598.105097][T25102] netlink: 'syz.4.4951': attribute type 1 has an invalid length. [ 598.113270][T25102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.158290][T25090] bridge5: entered promiscuous mode [ 598.175955][T25090] bridge5: entered allmulticast mode [ 598.197010][T25090] team0: Port device bridge5 added [ 598.209446][T25109] ipip0: entered promiscuous mode [ 598.314295][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 598.412627][T25117] netlink: 'syz.4.4957': attribute type 2 has an invalid length. [ 598.426274][T25126] syzkaller0: entered promiscuous mode [ 598.431924][T25126] syzkaller0: entered allmulticast mode [ 598.474825][T25117] netlink: 'syz.4.4957': attribute type 8 has an invalid length. [ 598.483320][T25117] netlink: 'syz.4.4957': attribute type 1 has an invalid length. [ 598.591714][T25128] netlink: 'syz.1.4960': attribute type 1 has an invalid length. [ 598.659236][T25128] bond4: (slave dummy0): making interface the new active one [ 598.671192][T25128] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 598.680574][T25128] bond4: entered promiscuous mode [ 598.686242][T25128] dummy0: entered promiscuous mode [ 598.912997][T25129] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.920536][T25129] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.973559][T25129] bond0: (slave team0): Releasing backup interface [ 598.992899][T25129] bond4: (slave dummy0): Releasing active interface [ 598.999912][T25129] dummy0: left promiscuous mode [ 599.097517][T25129] bridge_slave_0: left allmulticast mode [ 599.111458][T25129] bridge_slave_0: left promiscuous mode [ 599.118667][T25129] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.159673][T25129] bridge_slave_1: left allmulticast mode [ 599.183111][T25129] bridge_slave_1: left promiscuous mode [ 599.190650][T25129] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.216624][T25129] bond0: (slave bond_slave_0): Releasing backup interface [ 599.231955][T25129] bond0: (slave bond_slave_1): Releasing backup interface [ 599.262834][T25129] team0: Port device team_slave_0 removed [ 599.287939][T25129] team0: Port device team_slave_1 removed [ 599.303161][T25129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.324045][T25129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.347430][T25129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.355306][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 599.379626][T25129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.431993][T25129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.449255][T25128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.489256][T25145] tipc: Enabling of bearer rejected, already enabled [ 599.505832][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 599.512616][ T10] syz0: Port: 1 Link DOWN [ 599.518235][T25128] bond4: left promiscuous mode [ 599.528076][ T995] xfrm0 speed is unknown, defaulting to 1000 [ 599.863868][T25174] syzkaller0: entered promiscuous mode [ 599.874484][T25174] syzkaller0: entered allmulticast mode [ 600.306163][T25203] __nla_validate_parse: 9 callbacks suppressed [ 600.306183][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4977'. [ 600.361569][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4977'. [ 600.374901][T25213] netlink: 'syz.4.4982': attribute type 1 has an invalid length. [ 600.375679][T25203] bond3: entered promiscuous mode [ 600.383758][T25213] netlink: 'syz.4.4982': attribute type 3 has an invalid length. [ 600.388984][T25203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.397430][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 600.414190][T25213] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4982'. [ 600.533345][T25213] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4982'. [ 600.746111][T25222] syzkaller0: entered promiscuous mode [ 600.842603][T25227] sctp: [Deprecated]: syz.3.4986 (pid 25227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 600.842603][T25227] Use struct sctp_sack_info instead [ 601.434504][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 601.742535][ T4946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 601.763720][ T4946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 601.777478][ T4946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 601.791630][ T4946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 601.801565][ T4946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 601.951081][T25283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5004'. [ 601.991258][T25283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5004'. [ 602.316245][T25275] xfrm0 speed is unknown, defaulting to 1000 [ 602.474270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 603.080300][T25325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5013'. [ 603.514416][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 603.561013][T25326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5013'. [ 603.694554][T25334] bridge0: port 1(vlan2) entered blocking state [ 603.729324][T25334] bridge0: port 1(vlan2) entered disabled state [ 603.757652][T25334] vlan2: entered allmulticast mode [ 603.775941][T25334] geneve0: entered allmulticast mode [ 603.846933][ T4946] Bluetooth: hci2: command tx timeout [ 604.101584][T25275] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.157962][T25275] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.206956][T25275] bridge_slave_0: entered allmulticast mode [ 604.247871][T25275] bridge_slave_0: entered promiscuous mode [ 604.277898][T25275] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.305723][T25275] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.337655][T25275] bridge_slave_1: entered allmulticast mode [ 604.367682][T25275] bridge_slave_1: entered promiscuous mode [ 604.554242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 604.580766][T25355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5020'. [ 604.613559][T25275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.713267][T25355] vlan2: entered promiscuous mode [ 604.746110][T25355] geneve1: entered promiscuous mode [ 604.757921][T25358] netlink: 'syz.3.5021': attribute type 1 has an invalid length. [ 604.775476][T25355] vlan2: entered allmulticast mode [ 604.798379][T25355] geneve1: entered allmulticast mode [ 604.827180][T25275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.850862][T25361] netlink: 'syz.3.5021': attribute type 30 has an invalid length. [ 604.952458][T25358] bond10: entered promiscuous mode [ 604.973041][T25358] bond10: entered allmulticast mode [ 604.985904][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5023'. [ 605.002375][T25358] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.232240][T25275] team0: Port device team_slave_0 added [ 605.265279][T25275] team0: Port device team_slave_1 added [ 605.440525][T25275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.481418][T25275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.570300][T25275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.596432][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 605.603904][ T30] audit: type=1800 audit(1780680798.677:22): pid=25385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5027" name="memory.events" dev="tmpfs" ino=1889 res=0 errno=0 [ 605.671749][T25275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.692400][T25275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.742612][ T30] audit: type=1804 audit(1780680798.857:23): pid=25389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5027" name="/newroot/365/memory.events" dev="tmpfs" ino=1889 res=1 errno=0 [ 605.810438][T25275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.914235][ T4946] Bluetooth: hci2: command tx timeout [ 605.986416][T25275] hsr_slave_0: entered promiscuous mode [ 606.001498][T25275] hsr_slave_1: entered promiscuous mode [ 606.016440][T25275] debugfs: 'hsr0' already exists in 'hsr' [ 606.029276][T25275] Cannot create hsr debugfs directory [ 606.608884][T25399] openvswitch: netlink: IP tunnel dst address not specified [ 606.634187][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 607.074923][T25405] netlink: 89 bytes leftover after parsing attributes in process `syz.3.5033'. [ 607.519737][T25275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 607.569322][T25275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.590887][T25275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 607.618092][T25275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.653546][T25275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 607.675061][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 607.726672][T25275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 607.740344][T25275] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.777301][T25275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 607.792357][T25433] sctp: [Deprecated]: syz.1.5040 (pid 25433) Use of int in max_burst socket option. [ 607.792357][T25433] Use struct sctp_assoc_value instead [ 607.807993][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5041'. [ 607.830377][T25438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5041'. [ 607.851690][T25433] netlink: 'syz.1.5040': attribute type 1 has an invalid length. [ 607.894255][T25433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5040'. [ 607.994896][ T4946] Bluetooth: hci2: command tx timeout [ 608.112079][T25275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.152603][T25275] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.170744][T15743] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.177993][T15743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.210838][T15743] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.218029][T15743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.714255][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 608.721008][T25475] ip6erspan0: entered allmulticast mode [ 608.758388][T25478] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 609.001527][T25485] syzkaller1: entered promiscuous mode [ 609.026233][T25485] syzkaller1: entered allmulticast mode [ 609.193075][T25493] bond11: entered promiscuous mode [ 609.207634][T25493] 8021q: adding VLAN 0 to HW filter on device bond11 [ 609.321526][T25275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.754587][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 610.074366][ T4946] Bluetooth: hci2: command tx timeout [ 610.130220][T25275] veth0_vlan: entered promiscuous mode [ 610.145680][T25275] veth1_vlan: entered promiscuous mode [ 610.224134][T25275] veth0_macvtap: entered promiscuous mode [ 610.253343][T25531] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5062'. [ 610.280632][T25275] veth1_macvtap: entered promiscuous mode [ 610.338272][T25275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.380139][T25275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.425509][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.445937][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.461400][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.471885][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.794446][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 611.033621][ T6187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.059772][ T6187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.127850][T25553] can: request_module (can-proto-5) failed. [ 611.148765][T25553] netlink: 'syz.1.5068': attribute type 1 has an invalid length. [ 611.156711][T10234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.166801][T10234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.707781][T25573] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5072'. [ 611.775526][T25575] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5073'. [ 611.834399][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 611.862598][T25577] tipc: Enabling of bearer rejected, already enabled [ 612.155894][T25598] netlink: 'syz.1.5079': attribute type 1 has an invalid length. [ 612.202122][T25598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 612.297440][T25600] bond5: (slave veth9): Enslaving as an active interface with a down link [ 612.357681][T25600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5079'. [ 612.438277][T25598] bond5: (slave veth11): Enslaving as an active interface with a down link [ 612.486078][T25600] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 612.698126][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5083'. [ 612.703938][T25612] hmó3)ó: entered promiscuous mode [ 612.742086][T25613] syzkaller0: entered promiscuous mode [ 612.752716][T25613] syzkaller0: entered allmulticast mode [ 612.874205][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 612.923317][T25622] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5086'. [ 613.237233][T25637] netlink: 'syz.3.5091': attribute type 1 has an invalid length. [ 613.383099][T25637] 8021q: adding VLAN 0 to HW filter on device bond12 [ 613.528063][T25645] bond12: (slave gretap1): making interface the new active one [ 613.569285][T25645] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 613.798136][T25666] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5099'. [ 613.914361][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 613.988434][T25668] netlink: 'syz.3.5100': attribute type 4 has an invalid length. [ 613.990665][T25674] netlink: 'syz.4.5101': attribute type 10 has an invalid length. [ 614.035885][T25674] team0: Port device veth1_to_hsr added [ 614.119496][T25682] xfrm0 speed is unknown, defaulting to 1000 [ 614.212478][T25687] tipc: Enabled bearer , priority 10 [ 614.352529][T25695] netlink: 'syz.3.5104': attribute type 1 has an invalid length. [ 614.951765][T25706] dvmrp1: entered allmulticast mode [ 614.957346][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 615.176913][T25710] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5110'. [ 615.251675][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5109'. [ 615.353403][T12581] tipc: Node number set to 2578920212 [ 615.994563][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 616.291952][T25755] FAULT_INJECTION: forcing a failure. [ 616.291952][T25755] name failslab, interval 1, probability 0, space 0, times 0 [ 616.309075][T25755] CPU: 0 UID: 0 PID: 25755 Comm: syz.0.5122 Not tainted syzkaller #0 PREEMPT(full) [ 616.309103][T25755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.309115][T25755] Call Trace: [ 616.309123][T25755] [ 616.309132][T25755] dump_stack_lvl+0xe8/0x150 [ 616.309159][T25755] should_fail_ex+0x412/0x560 [ 616.309188][T25755] should_failslab+0xa8/0x100 [ 616.309206][T25755] ? security_inode_alloc+0x39/0x310 [ 616.309233][T25755] kmem_cache_alloc_noprof+0x87/0x650 [ 616.309265][T25755] security_inode_alloc+0x39/0x310 [ 616.309293][T25755] inode_init_always_gfp+0x995/0xd50 [ 616.309320][T25755] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 616.309441][T25755] alloc_inode+0x82/0x1b0 [ 616.309464][T25755] new_inode+0x22/0x170 [ 616.309489][T25755] __debugfs_create_file+0xb8/0x400 [ 616.309514][T25755] debugfs_create_file_full+0x3f/0x60 [ 616.309538][T25755] ref_tracker_dir_debugfs+0x197/0x360 [ 616.309590][T25755] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 616.309638][T25755] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 616.309663][T25755] ? alloc_netdev_mqs+0xa8/0x1210 [ 616.309721][T25755] ? __raw_spin_lock_init+0x45/0x100 [ 616.309749][T25755] alloc_netdev_mqs+0x274/0x1210 [ 616.309770][T25755] ? __pfx_macsec_setup+0x10/0x10 [ 616.309877][T25755] rtnl_create_link+0x31f/0xd70 [ 616.309953][T25755] rtnl_newlink_create+0x277/0xb70 [ 616.309974][T25755] ? __pfx___nla_validate_parse+0x10/0x10 [ 616.310006][T25755] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 616.310031][T25755] ? __pfx___mutex_lock+0x10/0x10 [ 616.310063][T25755] ? ns_capable+0x89/0xe0 [ 616.310087][T25755] rtnl_newlink+0x166a/0x1bb0 [ 616.310122][T25755] ? __pfx_rtnl_newlink+0x10/0x10 [ 616.310147][T25755] ? __lock_acquire+0x6b5/0x2cf0 [ 616.310169][T25755] ? __lock_acquire+0x6b5/0x2cf0 [ 616.310198][T25755] ? unwind_next_frame+0xa6/0x2550 [ 616.310227][T25755] ? unwind_next_frame+0xa6/0x2550 [ 616.310251][T25755] ? is_bpf_text_address+0x26/0x2b0 [ 616.310281][T25755] ? is_bpf_text_address+0x26/0x2b0 [ 616.310305][T25755] ? __lock_acquire+0x6b5/0x2cf0 [ 616.310328][T25755] ? kernel_text_address+0xa5/0xe0 [ 616.310360][T25755] ? __kernel_text_address+0xd/0x30 [ 616.310383][T25755] ? unwind_get_return_address+0x4d/0x90 [ 616.310404][T25755] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 616.310436][T25755] ? arch_stack_walk+0xfb/0x150 [ 616.310481][T25755] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 616.310516][T25755] ? __pfx_rtnl_newlink+0x10/0x10 [ 616.310534][T25755] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 616.310550][T25755] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 616.310573][T25755] ? netlink_sendmsg+0x5d4/0xb40 [ 616.310596][T25755] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 616.310614][T25755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.310634][T25755] ? __lock_acquire+0x6b5/0x2cf0 [ 616.310665][T25755] netlink_rcv_skb+0x232/0x4b0 [ 616.310688][T25755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.310708][T25755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.310742][T25755] ? netlink_deliver_tap+0x2e/0x1b0 [ 616.310763][T25755] ? netlink_deliver_tap+0x2e/0x1b0 [ 616.310789][T25755] netlink_unicast+0x75c/0x8e0 [ 616.310820][T25755] netlink_sendmsg+0x813/0xb40 [ 616.310857][T25755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.310882][T25755] ? aa_sock_msg_perm+0xf1/0x1b0 [ 616.310910][T25755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 616.310938][T25755] ____sys_sendmsg+0x972/0x9f0 [ 616.310960][T25755] ? __might_fault+0xaf/0x130 [ 616.310986][T25755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.311017][T25755] ? import_iovec+0x73/0xa0 [ 616.311043][T25755] ___sys_sendmsg+0x2a5/0x360 [ 616.311063][T25755] ? __lock_acquire+0x6b5/0x2cf0 [ 616.311085][T25755] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.311143][T25755] ? __fget_files+0x2a/0x420 [ 616.311164][T25755] ? __fget_files+0x3a0/0x420 [ 616.311195][T25755] __x64_sys_sendmsg+0x1bd/0x2a0 [ 616.311218][T25755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.311249][T25755] ? __pfx_ksys_write+0x10/0x10 [ 616.311282][T25755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.311303][T25755] do_syscall_64+0x174/0x580 [ 616.311322][T25755] ? trace_irq_disable+0x3b/0x140 [ 616.311346][T25755] ? clear_bhb_loop+0x40/0x90 [ 616.311368][T25755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.311387][T25755] RIP: 0033:0x7efe7219ce59 [ 616.311405][T25755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.311420][T25755] RSP: 002b:00007efe72f75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.311440][T25755] RAX: ffffffffffffffda RBX: 00007efe72415fa0 RCX: 00007efe7219ce59 [ 616.311453][T25755] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000004 [ 616.311465][T25755] RBP: 00007efe72f75090 R08: 0000000000000000 R09: 0000000000000000 [ 616.311477][T25755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.311487][T25755] R13: 00007efe72416038 R14: 00007efe72415fa0 R15: 00007fffc80f2f98 [ 616.311518][T25755] [ 616.311648][T25755] debugfs: out of free dentries, can not create file 'netdev@ffff888075b36658' [ 616.372405][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5121'. [ 616.505591][T25761] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5123'. [ 616.979522][T25770] netlink: 'syz.0.5127': attribute type 10 has an invalid length. [ 617.007060][T25772] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5128'. [ 617.034280][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 617.078030][T25778] netlink: 'syz.3.5129': attribute type 1 has an invalid length. [ 617.142252][T25778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5129'. [ 617.663999][T25809] FAULT_INJECTION: forcing a failure. [ 617.663999][T25809] name failslab, interval 1, probability 0, space 0, times 0 [ 617.692401][T25809] CPU: 0 UID: 0 PID: 25809 Comm: syz.0.5139 Not tainted syzkaller #0 PREEMPT(full) [ 617.692425][T25809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.692437][T25809] Call Trace: [ 617.692445][T25809] [ 617.692454][T25809] dump_stack_lvl+0xe8/0x150 [ 617.692481][T25809] should_fail_ex+0x412/0x560 [ 617.692507][T25809] should_failslab+0xa8/0x100 [ 617.692526][T25809] ? security_inode_alloc+0x39/0x310 [ 617.692557][T25809] kmem_cache_alloc_noprof+0x87/0x650 [ 617.692589][T25809] security_inode_alloc+0x39/0x310 [ 617.692616][T25809] inode_init_always_gfp+0x995/0xd50 [ 617.692642][T25809] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 617.692663][T25809] alloc_inode+0x82/0x1b0 [ 617.692684][T25809] new_inode+0x22/0x170 [ 617.692709][T25809] __debugfs_create_file+0xb8/0x400 [ 617.692734][T25809] debugfs_create_file_full+0x3f/0x60 [ 617.692757][T25809] ref_tracker_dir_debugfs+0x197/0x360 [ 617.692778][T25809] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 617.692825][T25809] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 617.692850][T25809] ? alloc_netdev_mqs+0xa8/0x1210 [ 617.692877][T25809] ? __raw_spin_lock_init+0x45/0x100 [ 617.692904][T25809] alloc_netdev_mqs+0x274/0x1210 [ 617.692925][T25809] ? __pfx_macsec_setup+0x10/0x10 [ 617.692954][T25809] rtnl_create_link+0x31f/0xd70 [ 617.692985][T25809] rtnl_newlink_create+0x277/0xb70 [ 617.693005][T25809] ? __pfx___nla_validate_parse+0x10/0x10 [ 617.693037][T25809] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 617.693061][T25809] ? __pfx___mutex_lock+0x10/0x10 [ 617.693093][T25809] ? ns_capable+0x89/0xe0 [ 617.693115][T25809] rtnl_newlink+0x166a/0x1bb0 [ 617.693150][T25809] ? __pfx_rtnl_newlink+0x10/0x10 [ 617.693173][T25809] ? __lock_acquire+0x6b5/0x2cf0 [ 617.693195][T25809] ? __lock_acquire+0x6b5/0x2cf0 [ 617.693220][T25809] ? unwind_next_frame+0xa6/0x2550 [ 617.693246][T25809] ? unwind_next_frame+0xa6/0x2550 [ 617.693266][T25809] ? is_bpf_text_address+0x26/0x2b0 [ 617.693291][T25809] ? is_bpf_text_address+0x26/0x2b0 [ 617.693319][T25809] ? __lock_acquire+0x6b5/0x2cf0 [ 617.693339][T25809] ? kernel_text_address+0xa5/0xe0 [ 617.693362][T25809] ? __kernel_text_address+0xd/0x30 [ 617.693383][T25809] ? unwind_get_return_address+0x4d/0x90 [ 617.693404][T25809] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.693428][T25809] ? arch_stack_walk+0xfb/0x150 [ 617.693460][T25809] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 617.693492][T25809] ? __pfx_rtnl_newlink+0x10/0x10 [ 617.693510][T25809] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 617.693526][T25809] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 617.693548][T25809] ? netlink_sendmsg+0x5d4/0xb40 [ 617.693568][T25809] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 617.693584][T25809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 617.693606][T25809] ? __lock_acquire+0x6b5/0x2cf0 [ 617.693635][T25809] netlink_rcv_skb+0x232/0x4b0 [ 617.693656][T25809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 617.693674][T25809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.693709][T25809] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.693728][T25809] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.693754][T25809] netlink_unicast+0x75c/0x8e0 [ 617.693785][T25809] netlink_sendmsg+0x813/0xb40 [ 617.693816][T25809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.693840][T25809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 617.693868][T25809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 617.693896][T25809] ____sys_sendmsg+0x972/0x9f0 [ 617.693917][T25809] ? __might_fault+0xaf/0x130 [ 617.693947][T25809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.693978][T25809] ? import_iovec+0x73/0xa0 [ 617.694004][T25809] ___sys_sendmsg+0x2a5/0x360 [ 617.694023][T25809] ? __lock_acquire+0x6b5/0x2cf0 [ 617.694047][T25809] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.694099][T25809] ? __fget_files+0x2a/0x420 [ 617.694118][T25809] ? __fget_files+0x3a0/0x420 [ 617.694150][T25809] __x64_sys_sendmsg+0x1bd/0x2a0 [ 617.694174][T25809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 617.694203][T25809] ? rcu_is_watching+0x15/0xb0 [ 617.694235][T25809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.694253][T25809] do_syscall_64+0x174/0x580 [ 617.694269][T25809] ? trace_irq_disable+0x3b/0x140 [ 617.694292][T25809] ? clear_bhb_loop+0x40/0x90 [ 617.694322][T25809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.694340][T25809] RIP: 0033:0x7efe7219ce59 [ 617.694357][T25809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.694372][T25809] RSP: 002b:00007efe72f75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.694391][T25809] RAX: ffffffffffffffda RBX: 00007efe72415fa0 RCX: 00007efe7219ce59 [ 617.694405][T25809] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000004 [ 617.694416][T25809] RBP: 00007efe72f75090 R08: 0000000000000000 R09: 0000000000000000 [ 617.694427][T25809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.694438][T25809] R13: 00007efe72416038 R14: 00007efe72415fa0 R15: 00007fffc80f2f98 [ 617.694470][T25809] [ 617.785070][T25815] __nla_validate_parse: 1 callbacks suppressed [ 617.785089][T25815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5135'. [ 617.997526][T25809] debugfs: out of free dentries, can not create file 'netdev@ffff8880365be658' [ 618.074443][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 618.436295][T25815] macsec1: entered promiscuous mode [ 619.110555][T25851] FAULT_INJECTION: forcing a failure. [ 619.110555][T25851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.125837][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 619.177371][T25851] CPU: 1 UID: 0 PID: 25851 Comm: syz.4.5148 Not tainted syzkaller #0 PREEMPT(full) [ 619.177396][T25851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.177406][T25851] Call Trace: [ 619.177415][T25851] [ 619.177422][T25851] dump_stack_lvl+0xe8/0x150 [ 619.177448][T25851] should_fail_ex+0x412/0x560 [ 619.177471][T25851] _copy_from_user+0x2d/0xb0 [ 619.177494][T25851] ___sys_sendmsg+0x1c6/0x360 [ 619.177522][T25851] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.177540][T25851] ? __lock_acquire+0x6b5/0x2cf0 [ 619.177617][T25851] __sys_sendmmsg+0x27c/0x4e0 [ 619.177641][T25851] ? __pfx___sys_sendmmsg+0x10/0x10 [ 619.177659][T25851] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 619.177702][T25851] ? ksys_write+0x242/0x270 [ 619.177735][T25851] ? __pfx_ksys_write+0x10/0x10 [ 619.177770][T25851] __x64_sys_sendmmsg+0xa0/0xc0 [ 619.177791][T25851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.177810][T25851] do_syscall_64+0x174/0x580 [ 619.177828][T25851] ? trace_irq_disable+0x3b/0x140 [ 619.177853][T25851] ? clear_bhb_loop+0x40/0x90 [ 619.177875][T25851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.177893][T25851] RIP: 0033:0x7f779cf9ce59 [ 619.177910][T25851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.177924][T25851] RSP: 002b:00007f779df02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 619.177943][T25851] RAX: ffffffffffffffda RBX: 00007f779d215fa0 RCX: 00007f779cf9ce59 [ 619.177956][T25851] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 619.177968][T25851] RBP: 00007f779df02090 R08: 0000000000000000 R09: 0000000000000000 [ 619.177980][T25851] R10: 0000000000003ec0 R11: 0000000000000246 R12: 0000000000000001 [ 619.177991][T25851] R13: 00007f779d216038 R14: 00007f779d215fa0 R15: 00007ffe8a350618 [ 619.178020][T25851] [ 619.831969][T25888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5158'. [ 619.836606][T25887] netlink: 'syz.0.5160': attribute type 11 has an invalid length. [ 619.913274][T25887] openvswitch: netlink: IP tunnel dst address not specified [ 619.963392][T25893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5161'. [ 620.007152][T25887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5160'. [ 620.154447][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 620.464562][T25912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5169'. [ 620.547315][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5169'. [ 620.563188][T25909] veth1_vlan: left promiscuous mode [ 620.588743][T25909] veth0_vlan: left promiscuous mode [ 620.618147][T25909] veth0_vlan: entered promiscuous mode [ 620.645453][T25909] veth1_vlan: entered promiscuous mode [ 620.701109][T25909] veth0_macvtap: left promiscuous mode [ 620.739036][T25909] veth0_macvtap: entered promiscuous mode [ 620.797990][T25909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.851454][T25909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.866162][T25909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.883836][T25909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.908372][T25909] 8021q: adding VLAN 0 to HW filter on device bond5 [ 620.917700][T25909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.963253][T25909] gtp0: left promiscuous mode [ 620.970994][T25909] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 620.980913][T25909] bond7: left promiscuous mode [ 620.994648][T25909] vlan3: left promiscuous mode [ 621.009612][T25909] bond8: left promiscuous mode [ 621.024708][T25909] batadv1: left promiscuous mode [ 621.033675][T25909] 8021q: adding VLAN 0 to HW filter on device bond9 [ 621.177810][T25909] bond10: left promiscuous mode [ 621.185284][T25909] bond11: left promiscuous mode [ 621.192179][T25909] 8021q: adding VLAN 0 to HW filter on device eth0 [ 621.198927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 621.211232][T25909] 8021q: adding VLAN 0 to HW filter on device eth1 [ 621.220433][T25909] 8021q: adding VLAN 0 to HW filter on device eth2 [ 621.229624][T25909] 8021q: adding VLAN 0 to HW filter on device eth3 [ 621.242427][T25909] macsec1: left promiscuous mode [ 621.257855][T25914] syzkaller0: entered promiscuous mode [ 621.264263][T25914] syzkaller0: entered allmulticast mode [ 621.443912][T25943] FAULT_INJECTION: forcing a failure. [ 621.443912][T25943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.470724][T15743] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.476877][T25943] CPU: 1 UID: 0 PID: 25943 Comm: syz.0.5173 Not tainted syzkaller #0 PREEMPT(full) [ 621.476904][T25943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 621.476915][T25943] Call Trace: [ 621.476923][T25943] [ 621.476930][T25943] dump_stack_lvl+0xe8/0x150 [ 621.476961][T25943] should_fail_ex+0x412/0x560 [ 621.476994][T25943] _copy_from_user+0x2d/0xb0 [ 621.477017][T25943] ___sys_sendmsg+0x1c6/0x360 [ 621.477046][T25943] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.477065][T25943] ? __lock_acquire+0x6b5/0x2cf0 [ 621.477130][T25943] __sys_sendmmsg+0x27c/0x4e0 [ 621.477158][T25943] ? __pfx___sys_sendmmsg+0x10/0x10 [ 621.477176][T25943] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 621.477221][T25943] ? ksys_write+0x242/0x270 [ 621.477249][T25943] ? __pfx_ksys_write+0x10/0x10 [ 621.477279][T25943] __x64_sys_sendmmsg+0xa0/0xc0 [ 621.477298][T25943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.477318][T25943] do_syscall_64+0x174/0x580 [ 621.477336][T25943] ? trace_irq_disable+0x3b/0x140 [ 621.477361][T25943] ? clear_bhb_loop+0x40/0x90 [ 621.477382][T25943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.477399][T25943] RIP: 0033:0x7efe7219ce59 [ 621.477416][T25943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.477431][T25943] RSP: 002b:00007efe72f75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 621.477451][T25943] RAX: ffffffffffffffda RBX: 00007efe72415fa0 RCX: 00007efe7219ce59 [ 621.477464][T25943] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 621.477475][T25943] RBP: 00007efe72f75090 R08: 0000000000000000 R09: 0000000000000000 [ 621.477486][T25943] R10: 0000000000003ec0 R11: 0000000000000246 R12: 0000000000000001 [ 621.477496][T25943] R13: 00007efe72416038 R14: 00007efe72415fa0 R15: 00007fffc80f2f98 [ 621.477524][T25943] [ 621.678362][T15743] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.862808][T25967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5177'. [ 621.971514][T15743] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.980017][T15743] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.234540][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 623.274213][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 624.240497][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.318656][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 625.354170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 625.462602][ T6187] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 625.486304][ T6187] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 625.498049][ T6187] bond4: (slave veth3): making interface the new active one [ 625.542132][ T6187] bond4: active interface up! [ 625.649253][T25963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5177'. [ 625.821499][T15743] bond6: (slave macvlan0): link status definitely up, 10000 Mbps full duplex [ 625.853426][T26009] netlink: 'syz.1.5187': attribute type 2 has an invalid length. [ 625.869130][T15743] bond6: (slave macvlan0): making interface the new active one [ 625.894355][T26009] netlink: 'syz.1.5187': attribute type 2 has an invalid length. [ 625.911997][T26011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5188'. [ 625.928973][T15743] bond6: active interface up! [ 626.219397][T26029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5192'. [ 626.303657][T26031] netlink: 'syz.4.5193': attribute type 1 has an invalid length. [ 626.387647][T26034] netlink: 'syz.5.5194': attribute type 1 has an invalid length. [ 626.394637][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 626.421817][T26031] 8021q: adding VLAN 0 to HW filter on device bond9 [ 626.490569][T26034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.657047][T26045] Cannot find add_set index 1 as target [ 626.789388][T26053] netlink: 'syz.3.5198': attribute type 1 has an invalid length. [ 626.840875][T26053] bond13: entered promiscuous mode [ 626.866079][T26053] 8021q: adding VLAN 0 to HW filter on device bond13 [ 626.878423][T26053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5198'. [ 626.958934][T26066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5202'. [ 626.984572][T26053] bond13: (slave bridge5): making interface the new active one [ 627.005932][T26053] bridge5: entered promiscuous mode [ 627.028148][T26053] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 627.066649][T26069] netlink: 'syz.0.5203': attribute type 3 has an invalid length. [ 627.091579][T26069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5203'. [ 627.434649][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 627.577688][T26098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.591181][T26104] netlink: 'syz.4.5214': attribute type 2 has an invalid length. [ 627.722453][T26110] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 627.782196][T26111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.239918][T26139] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5225'. [ 628.257990][T26146] netlink: 'syz.5.5228': attribute type 1 has an invalid length. [ 628.382411][T26155] gretap1: entered allmulticast mode [ 628.410658][T26155] bond2: (slave gretap1): making interface the new active one [ 628.428204][T26155] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 628.474557][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 628.509899][T26161] netlink: 'syz.3.5229': attribute type 32 has an invalid length. [ 628.563197][T26163] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5230'. [ 628.693533][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5232'. [ 628.735132][T26169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 628.760865][ T6178] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.771220][ T6178] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.784302][ T6178] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.793967][ T6178] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.042331][T26181] xfrm0 speed is unknown, defaulting to 1000 [ 629.140342][T26185] tipc: Enabling of bearer rejected, already enabled [ 629.161378][T26186] tipc: Enabling of bearer rejected, already enabled [ 629.201282][T26196] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 629.222449][T26186] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 629.297283][T26196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.308332][T26198] block nbd2: Unsupported socket: should be TCP or UNIX. [ 629.317105][T26196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.336402][T26196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.374256][T26196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.514301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 630.540088][T26240] syzkaller0: entered promiscuous mode [ 630.546264][T26240] syzkaller0: entered allmulticast mode [ 630.554481][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 631.600231][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 632.637536][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 633.681722][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 634.533993][T26285] __nla_validate_parse: 5 callbacks suppressed [ 634.534012][T26285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5255'. [ 634.602977][T26302] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5257'. [ 634.688160][T26305] syzkaller0: entered promiscuous mode [ 634.714618][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 634.718431][T26305] syzkaller0: entered allmulticast mode [ 634.919768][T26304] xfrm0 speed is unknown, defaulting to 1000 [ 634.932590][T26316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.462400][T26316] xfrm0 speed is unknown, defaulting to 1000 [ 635.754777][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 636.086368][T26334] xfrm0 speed is unknown, defaulting to 1000 [ 636.794400][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 636.810567][T26367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.407801][T26368] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.834175][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 638.130342][T26380] tipc: Resetting bearer [ 638.501030][T10235] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.633264][T26368] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.711084][T10235] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.735299][T10235] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.790666][T26407] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5278'. [ 638.822101][T10235] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.874341][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 638.878135][T26368] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.980814][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5279'. [ 638.989998][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5279'. [ 638.999332][T26413] netlink: 'syz.0.5279': attribute type 18 has an invalid length. [ 639.043934][T26368] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.152223][T26413] syzkaller0: entered promiscuous mode [ 639.168356][T26413] syzkaller0: entered allmulticast mode [ 639.326774][T26422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5283'. [ 639.357708][T26422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5283'. [ 639.502328][T10235] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.547162][T26435] syzkaller1: entered promiscuous mode [ 639.558147][T26435] syzkaller1: entered allmulticast mode [ 639.598527][T10235] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.621908][ T6166] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.696581][T10235] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.839346][T26453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5291'. [ 639.840835][T26447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5289'. [ 639.914284][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 640.147431][T26472] syzkaller0: entered promiscuous mode [ 640.163335][T26472] syzkaller0: entered allmulticast mode [ 640.903164][T26513] netlink: 'syz.0.5306': attribute type 2 has an invalid length. [ 640.913657][T26519] netlink: 'syz.0.5306': attribute type 2 has an invalid length. [ 640.915457][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5308'. [ 640.931530][T26506] tipc: Enabled bearer , priority 0 [ 640.954469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 641.224671][T26535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5310'. [ 641.283978][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5310'. [ 641.456518][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5310'. [ 641.960521][T26505] tipc: Disabling bearer [ 641.989414][T26541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5313'. [ 641.998810][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 642.276680][T26561] netlink: 'syz.0.5319': attribute type 2 has an invalid length. [ 642.301779][T26561] netlink: 'syz.0.5319': attribute type 1 has an invalid length. [ 642.328899][T26561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5319'. [ 642.359642][T26569] netlink: 'syz.1.5320': attribute type 83 has an invalid length. [ 642.397619][T26567] netlink: 'syz.1.5320': attribute type 2 has an invalid length. [ 642.414762][T26569] netlink: 'syz.1.5320': attribute type 2 has an invalid length. [ 642.484433][T26567] syzkaller0: entered promiscuous mode [ 642.505469][T26567] syzkaller0: entered allmulticast mode [ 642.580327][T26573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5322'. [ 642.723279][T26578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5324'. [ 642.807821][T26580] tipc: New replicast peer: 0.0.0.0 [ 642.823757][T26580] tipc: Enabled bearer , priority 5 [ 642.830970][T26580] tipc: New replicast peer: 224.0.0.1 [ 643.034448][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 643.309333][T26602] netlink: 'syz.0.5335': attribute type 1 has an invalid length. [ 643.376085][T26602] bond5: entered promiscuous mode [ 643.381732][T26602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.411931][T26602] syzkaller0: entered promiscuous mode [ 643.421255][T26602] syzkaller0: entered allmulticast mode [ 643.624680][T26614] netlink: 'syz.3.5333': attribute type 1 has an invalid length. [ 643.653163][T26614] nbd: error processing sock list [ 643.862283][T26618] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 643.951129][T26626] bond6: (slave dummy0): making interface the new active one [ 643.963742][T26626] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 643.989845][T26622] bond6: entered promiscuous mode [ 644.026700][T26622] dummy0: entered promiscuous mode [ 644.074223][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 644.090732][T26628] bond6: (slave dummy0): Releasing active interface [ 644.108897][T26628] dummy0: left promiscuous mode [ 644.138012][T26628] team0: Port device geneve1 removed [ 644.288177][T10233] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.309418][T10233] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.380320][T26637] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 644.392815][T26637] bond7 (unregistering): Released all slaves [ 644.415754][T10233] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.424802][T26621] bond6: left promiscuous mode [ 644.523243][T10233] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.731350][T26658] validate_nla: 1 callbacks suppressed [ 644.731372][T26658] netlink: 'syz.3.5348': attribute type 1 has an invalid length. [ 644.888876][T26668] __nla_validate_parse: 6 callbacks suppressed [ 644.888892][T26668] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5352'. [ 644.906824][T26658] 8021q: adding VLAN 0 to HW filter on device bond14 [ 645.038940][T26667] bond14: (slave dummy0): making interface the new active one [ 645.049360][T26667] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 645.053304][T26668] nbd2: detected capacity change from 0 to 1 [ 645.089173][T26278] buffer_io_error: 138 callbacks suppressed [ 645.089191][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.114454][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 645.146617][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.159324][T26686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5354'. [ 645.189353][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.234529][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.242773][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.256517][T26278] ldm_validate_partition_table(): Disk read failed. [ 645.263290][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.271395][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.279473][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.287805][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.295887][T26278] Dev nbd2: unable to read RDB block 0 [ 645.301653][T26278] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.309943][T26278] nbd2: unable to read partition table [ 645.316506][T26278] nbd2: partition table beyond EOD, truncated [ 645.566602][T26705] netlink: 'syz.4.5357': attribute type 1 has an invalid length. [ 645.698637][T26705] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 646.154159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 646.799168][T26733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5363'. [ 646.801384][T26734] netlink: 'syz.1.5363': attribute type 10 has an invalid length. [ 647.194302][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 647.850616][T26680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.912884][ T4946] block nbd2: Receive control failed (result -32) [ 648.234155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 648.261735][T26760] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5369'. [ 648.291215][T26760] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5369'. [ 648.848360][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5375'. [ 648.892375][T26749] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 648.900704][T26749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.905354][T26782] syzkaller1: left promiscuous mode [ 648.911759][T26749] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 648.922829][T26782] syzkaller1: left allmulticast mode [ 648.946822][T26785] netlink: 'syz.4.5378': attribute type 1 has an invalid length. [ 648.991528][T26785] bond10: entered promiscuous mode [ 648.997346][T26785] 8021q: adding VLAN 0 to HW filter on device bond10 [ 649.062082][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5378'. [ 649.073718][T26785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5378'. [ 649.099433][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5378'. [ 649.147967][T26785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5378'. [ 649.208828][T26785] bond10: (slave bridge3): making interface the new active one [ 649.216739][T26785] bridge3: entered promiscuous mode [ 649.223397][T26785] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 649.284355][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 649.314703][T26802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.556791][T26815] Bluetooth: MGMT ver 1.23 [ 649.949700][T26828] A link change request failed with some changes committed already. Interface bond6 may have been left with an inconsistent configuration, please check. [ 650.109094][T26833] __nla_validate_parse: 5 callbacks suppressed [ 650.109112][T26833] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5393'. [ 650.140429][T26833] netlink: 'syz.4.5393': attribute type 9 has an invalid length. [ 650.151601][T26833] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5393'. [ 650.167582][T26833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5393'. [ 650.273403][T26841] tipc: Failed to remove unknown binding: 66,0,0/2578920212:3261174078/3261174080 [ 650.293137][T26841] tipc: Failed to remove unknown binding: 66,0,0/2578920212:3261174078/3261174079 [ 650.314242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 650.651656][T26860] netlink: 'syz.1.5402': attribute type 6 has an invalid length. [ 650.660753][T26863] ip6t_rpfilter: unknown options [ 650.669347][T26864] netlink: 'syz.5.5403': attribute type 2 has an invalid length. [ 650.903157][T26874] syzkaller0: entered promiscuous mode [ 650.928605][T26874] syzkaller0: entered allmulticast mode [ 651.354403][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 651.610538][T26919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5414'. [ 651.758221][T26929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 652.080711][T26929] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 652.176487][T26929] bond15 (unregistering): Released all slaves [ 652.302165][T26943] tipc: Enabled bearer , priority 0 [ 652.359805][T26943] x_tables: duplicate underflow at hook 2 [ 652.394505][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 652.416511][T26943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5419'. [ 652.527963][T26942] tipc: Disabling bearer [ 652.645534][T26964] xt_ecn: cannot match TCP bits for non-tcp packets [ 652.663630][T26967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5427'. [ 652.723426][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5426'. [ 652.793879][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5424'. [ 652.811569][T26960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5424'. [ 653.069716][T26990] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 653.122190][T26994] xt_TCPMSS: Only works on TCP SYN packets [ 653.434512][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 654.396674][T27067] xfrm0 speed is unknown, defaulting to 1000 [ 654.474165][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 654.831448][T27093] netlink: 'syz.5.5465': attribute type 13 has an invalid length. [ 654.844985][T27093] netlink: 'syz.5.5465': attribute type 17 has an invalid length. [ 654.904742][T27090] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.912642][T27090] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.164447][T27092] __nla_validate_parse: 6 callbacks suppressed [ 655.164467][T27092] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5466'. [ 655.364741][T27093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.383909][T27093] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.514339][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 655.530720][T27093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 655.541485][T27093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.564915][T27093] veth1_vlan: left promiscuous mode [ 655.572776][T27093] veth0_vlan: left promiscuous mode [ 655.579232][T27093] veth0_vlan: entered promiscuous mode [ 655.587942][T27093] veth1_vlan: entered promiscuous mode [ 655.598081][T27093] veth1_macvtap: left promiscuous mode [ 655.614783][T27093] veth0_macvtap: left promiscuous mode [ 655.627732][T27093] veth0_macvtap: entered promiscuous mode [ 655.643635][T27093] veth1_macvtap: entered promiscuous mode [ 655.669106][T27122] netlink: 'syz.3.5473': attribute type 1 has an invalid length. [ 655.682293][T27093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.699445][T27093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.718233][T27093] gretap1: left allmulticast mode [ 655.739862][T27093] 8021q: adding VLAN 0 to HW filter on device eth0 [ 655.759587][T27093] 8021q: adding VLAN 0 to HW filter on device eth1 [ 655.773670][T27093] 8021q: adding VLAN 0 to HW filter on device eth2 [ 655.792999][T27093] 8021q: adding VLAN 0 to HW filter on device eth3 [ 655.839990][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.847136][T10233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.875568][T10233] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.882695][T10233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.211065][T27130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5474'. [ 656.223229][T27134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5476'. [ 656.541819][T15743] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 656.555220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 656.603821][T15743] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 656.703076][T27155] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 656.820076][T27144] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.827462][T27144] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.028737][ T6166] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.055481][ T6166] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.123889][T15743] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 657.138901][T27163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.147640][T15743] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 657.173529][ T6166] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.201097][ T6166] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.250449][T27167] vlan4: entered promiscuous mode [ 657.255183][T27170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5486'. [ 657.310983][T15743] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 657.332343][T15743] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 657.507925][T15743] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 657.544230][T15743] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 657.594374][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 657.787356][T27192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5494'. [ 658.233093][T15743] bridge_slave_1: left allmulticast mode [ 658.242296][T15743] bridge_slave_1: left promiscuous mode [ 658.253297][T15743] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.289691][T15743] bridge_slave_0: left allmulticast mode [ 658.299954][T15743] bridge_slave_0: left promiscuous mode [ 658.310758][T15743] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.347085][T15743] dvmrp0: left allmulticast mode [ 658.634148][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 658.767377][T15743] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 658.833910][T27257] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5506'. [ 658.922450][T27257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 659.089915][T15743] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 659.108379][T15743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.120452][T15743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.130946][T15743] bond0 (unregistering): Released all slaves [ 659.145290][T15743] bond1 (unregistering): Released all slaves [ 659.159358][T15743] bond2 (unregistering): (slave macvlan0): Releasing active interface [ 659.169467][T15743] bond2 (unregistering): Released all slaves [ 659.190500][T15743] bond3 (unregistering): (slave veth7): Releasing backup interface [ 659.198709][T15743] veth7: left promiscuous mode [ 659.209502][T15743] bond3 (unregistering): Released all slaves [ 659.223236][T15743] bond4 (unregistering): Released all slaves [ 659.237423][T15743] bond5 (unregistering): Released all slaves [ 659.251038][T15743] bond6 (unregistering): Released all slaves [ 659.265869][T15743] bond7 (unregistering): Released all slaves [ 659.304580][T27210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5500'. [ 659.313658][T27210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5500'. [ 659.325826][T27210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5500'. [ 659.335084][T27210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5500'. [ 659.344043][T27210] netlink: 'syz.4.5500': attribute type 6 has an invalid length. [ 659.357910][T27228] team0: Mode changed to "activebackup" [ 659.419053][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 659.453305][T27265] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 659.481872][T15743] tipc: Left network mode [ 659.492759][T27213] xfrm0 speed is unknown, defaulting to 1000 [ 659.674427][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 660.714244][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 661.059614][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 661.413593][T27342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5526'. [ 661.447931][T15743] hsr_slave_0: left promiscuous mode [ 661.481595][T15743] hsr_slave_1: left promiscuous mode [ 661.496222][T15743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.512704][T15743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.557009][T15743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.585059][T15743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.612371][T15743] batman_adv: batadv0: Interface deactivated: dummy0 [ 661.636704][T15743] batman_adv: batadv0: Removing interface: dummy0 [ 661.697057][T15743] veth1_vlan: left promiscuous mode [ 661.716846][T15743] veth0_vlan: left promiscuous mode [ 661.718654][T27356] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5528'. [ 661.754316][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 661.773214][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5528'. [ 662.229705][T15743] team0 (unregistering): Port device veth1_to_hsr removed [ 662.283859][T15743] team0 (unregistering): Port device team_slave_1 removed [ 662.398733][T27339] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 662.520365][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 662.587591][T27381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5533'. [ 662.794215][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 662.818789][T27379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.857521][T27379] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.903620][T27379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.023185][T27379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 663.039239][T27379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.055040][T27379] veth1_macvtap: left promiscuous mode [ 663.062310][T27379] veth0_macvtap: left promiscuous mode [ 663.074481][T27379] veth0_macvtap: entered promiscuous mode [ 663.094857][T27379] veth1_macvtap: entered promiscuous mode [ 663.126891][T27379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.155877][T27379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.185153][T27379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 663.208318][T27379] bridge0: port 1(batadv1) entered blocking state [ 663.214957][T27379] bridge0: port 1(batadv1) entered forwarding state [ 663.227182][T27379] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 663.241315][T27379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 663.252111][T27379] 8021q: adding VLAN 0 to HW filter on device bond5 [ 663.262155][T27379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 663.285301][T27379] bond7: left promiscuous mode [ 663.290369][T27379] vti1: left promiscuous mode [ 663.296514][T27379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 663.347774][T27379] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 663.482237][T10235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.516243][T10235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.561304][T10235] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.580303][T10235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.669141][T27415] sock: sock_timestamping_bind_phc: sock not bind to device [ 663.771294][T27417] syzkaller0: entered promiscuous mode [ 663.798298][T27417] syzkaller0: entered allmulticast mode [ 663.854400][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 663.981455][T15743] IPVS: stop unused estimator thread 0... [ 664.069448][T27421] tipc: Started in network mode [ 664.075747][T27421] tipc: Node identity 66dd8870b6d8, cluster identity 4711 [ 664.100894][T27421] tipc: Enabled bearer , priority 0 [ 664.135160][T27427] syzkaller0: entered promiscuous mode [ 664.156920][T27427] syzkaller0: entered allmulticast mode [ 664.226010][T27420] tipc: Resetting bearer [ 664.466956][T27420] tipc: Disabling bearer [ 664.719084][T27441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5549'. [ 664.874245][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 665.049044][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 665.238846][T27501] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5558'. [ 665.417247][T27508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5558'. [ 665.914544][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 665.978625][T27528] syzkaller0: entered promiscuous mode [ 666.012119][T27528] syzkaller0: entered allmulticast mode [ 666.072535][T27533] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5563'. [ 666.260535][T27528] tipc: Enabled bearer , priority 0 [ 666.407444][T27522] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 666.438288][T27522] bond11 (unregistering): Released all slaves [ 666.616672][T27526] tipc: Resetting bearer [ 666.685688][T27526] tipc: Disabling bearer [ 666.948970][T27582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.964248][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 666.989821][T27584] syzkaller1: entered promiscuous mode [ 667.006006][T27584] syzkaller1: entered allmulticast mode [ 667.157535][T27593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5577'. [ 667.399148][T27609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5578'. [ 667.757716][T27625] syzkaller0: entered promiscuous mode [ 667.763322][T27625] syzkaller0: entered allmulticast mode [ 667.800208][T27626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5582'. [ 667.851145][T27636] netlink: 'syz.5.5585': attribute type 1 has an invalid length. [ 667.875376][T27625] tipc: Enabled bearer , priority 0 [ 667.901313][T27636] netlink: 'syz.5.5585': attribute type 2 has an invalid length. [ 667.912049][T27636] netlink: 'syz.5.5585': attribute type 1 has an invalid length. [ 667.982640][T27624] tipc: Resetting bearer [ 667.994437][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 668.079869][T27624] tipc: Disabling bearer [ 668.118093][T27640] tipc: Enabling of bearer rejected, already enabled [ 668.406341][T27667] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.406405][T27672] netlink: 'syz.5.5592': attribute type 21 has an invalid length. [ 668.436696][T27667] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.468503][T27672] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5592'. [ 668.520044][T27672] netlink: 'syz.5.5592': attribute type 4 has an invalid length. [ 668.532828][T27672] netlink: 'syz.5.5592': attribute type 5 has an invalid length. [ 668.545161][T27672] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5592'. [ 668.574332][T27675] syzkaller0: entered promiscuous mode [ 668.583477][T27675] syzkaller0: entered allmulticast mode [ 668.597987][T27667] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.610965][T27667] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.716557][T27682] sock: sock_set_timeout: `syz.1.5596' (pid 27682) tries to set negative timeout [ 668.738743][T27667] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.769058][T27667] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.854774][T27667] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.887525][T27667] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.034391][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 669.075732][ T6166] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.096319][ T6166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.156085][T10239] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.175502][T10239] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.264738][T10239] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.278249][T10239] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.329897][T10239] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.348239][T10239] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.643923][T27732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5607'. [ 669.655838][T27726] syzkaller0: entered promiscuous mode [ 669.688128][T27726] syzkaller0: entered allmulticast mode [ 669.813560][T27737] netlink: 'syz.4.5608': attribute type 1 has an invalid length. [ 669.930283][T27750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5610'. [ 669.939556][T27737] 8021q: adding VLAN 0 to HW filter on device bond11 [ 670.094445][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 670.119889][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5613'. [ 670.360302][T27774] pimreg: entered allmulticast mode [ 670.381844][T27773] pimreg: left allmulticast mode [ 670.649871][T27781] FAULT_INJECTION: forcing a failure. [ 670.649871][T27781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.705921][T27781] CPU: 0 UID: 0 PID: 27781 Comm: syz.4.5617 Not tainted syzkaller #0 PREEMPT(full) [ 670.705948][T27781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.705960][T27781] Call Trace: [ 670.705968][T27781] [ 670.705976][T27781] dump_stack_lvl+0xe8/0x150 [ 670.706003][T27781] should_fail_ex+0x412/0x560 [ 670.706027][T27781] _copy_from_user+0x2d/0xb0 [ 670.706050][T27781] ___sys_sendmsg+0x1c6/0x360 [ 670.706077][T27781] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.706095][T27781] ? __lock_acquire+0x6b5/0x2cf0 [ 670.706163][T27781] __sys_sendmmsg+0x27c/0x4e0 [ 670.706188][T27781] ? __pfx___sys_sendmmsg+0x10/0x10 [ 670.706206][T27781] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 670.706252][T27781] ? ksys_write+0x242/0x270 [ 670.706279][T27781] ? __pfx_ksys_write+0x10/0x10 [ 670.706310][T27781] __x64_sys_sendmmsg+0xa0/0xc0 [ 670.706330][T27781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.706348][T27781] do_syscall_64+0x174/0x580 [ 670.706366][T27781] ? trace_irq_disable+0x3b/0x140 [ 670.706390][T27781] ? clear_bhb_loop+0x40/0x90 [ 670.706411][T27781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.706428][T27781] RIP: 0033:0x7f779cf9ce59 [ 670.706452][T27781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.706467][T27781] RSP: 002b:00007f779df02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.706487][T27781] RAX: ffffffffffffffda RBX: 00007f779d215fa0 RCX: 00007f779cf9ce59 [ 670.706500][T27781] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 670.706512][T27781] RBP: 00007f779df02090 R08: 0000000000000000 R09: 0000000000000000 [ 670.706523][T27781] R10: 0000000000003ec0 R11: 0000000000000246 R12: 0000000000000002 [ 670.706534][T27781] R13: 00007f779d216038 R14: 00007f779d215fa0 R15: 00007ffe8a350618 [ 670.706562][T27781] [ 671.059248][ T24] IPVS: starting estimator thread 0... [ 671.114426][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 671.188037][T27787] IPVS: using max 29 ests per chain, 69600 per kthread [ 671.331190][T27802] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5621'. [ 671.359654][T27803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5621'. [ 671.829229][T27821] syzkaller1: entered promiscuous mode [ 671.839126][T27821] syzkaller1: entered allmulticast mode [ 672.154431][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 672.305513][T27833] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 672.810894][T27742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.902438][T27837] __nla_validate_parse: 4 callbacks suppressed [ 672.902460][T27837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5631'. [ 673.194129][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 673.291886][T27849] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5636'. [ 673.315434][T27849] netlink: Unknown conntrack attr (0) [ 673.465855][T27857] xfrm0 speed is unknown, defaulting to 1000 [ 673.561090][T27861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5638'. [ 673.727879][T27871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5641'. [ 674.120425][T27884] 8021q: VLANs not supported on lo [ 674.158968][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5643'. [ 674.234350][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 674.482721][T27896] tipc: Enabling of bearer rejected, media not registered [ 675.063532][T27914] netlink: 'syz.4.5648': attribute type 30 has an invalid length. [ 675.076756][T27918] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5649'. [ 675.085199][T27899] syzkaller0: entered promiscuous mode [ 675.112539][T27899] syzkaller0: entered allmulticast mode [ 675.274939][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 675.374626][T27927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 675.428113][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 675.683028][T27941] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 676.324300][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 677.376238][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 678.407289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 679.142122][T27930] vlan0: entered allmulticast mode [ 679.147334][T27930] macvtap0: entered allmulticast mode [ 679.152701][T27930] veth0_macvtap: entered allmulticast mode [ 679.327150][T27953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'. [ 679.331224][T27961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5662'. [ 679.365477][T27961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5662'. [ 679.432993][T27953] 8021q: adding VLAN 0 to HW filter on device bond12 [ 679.439936][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 679.463869][T27968] ip6erspan0: entered allmulticast mode [ 679.655781][T27973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5664'. [ 679.745812][T27979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5666'. [ 679.781971][T27973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5664'. [ 679.797257][T27979] ip6gre2: entered promiscuous mode [ 679.802515][T27979] ip6gre2: entered allmulticast mode [ 679.809406][T27982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5667'. [ 679.820913][T27982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5667'. [ 679.865213][T27973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5664'. [ 679.884521][T27973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5664'. [ 679.916350][T27979] netlink: 'syz.3.5666': attribute type 6 has an invalid length. [ 680.305621][T28000] netlink: 'syz.1.5673': attribute type 10 has an invalid length. [ 680.410298][T28000] team0: Port device veth1_to_hsr added [ 680.474505][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 680.947201][T28043] syzkaller0: entered promiscuous mode [ 680.961189][T28043] syzkaller0: entered allmulticast mode [ 681.110624][T28043] tipc: Enabled bearer , priority 0 [ 681.131656][T28042] tipc: Resetting bearer [ 681.199580][T28042] tipc: Disabling bearer [ 681.232933][T28050] netlink: 'syz.5.5686': attribute type 4 has an invalid length. [ 681.267417][T28050] netlink: 'syz.5.5686': attribute type 4 has an invalid length. [ 681.289572][T28050] netlink: 'syz.5.5686': attribute type 4 has an invalid length. [ 681.352504][T28057] netlink: 'syz.4.5688': attribute type 22 has an invalid length. [ 681.514235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 681.528294][T28057] team1: entered promiscuous mode [ 681.545958][T28057] team1: entered allmulticast mode [ 681.555548][T28057] 8021q: adding VLAN 0 to HW filter on device team1 [ 681.575419][T28077] sctp: [Deprecated]: syz.5.5691 (pid 28077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.575419][T28077] Use struct sctp_sack_info instead [ 681.575555][T10233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.602852][T10233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.643223][T28068] team2: entered promiscuous mode [ 681.664760][T28068] team2: entered allmulticast mode [ 681.670298][T28068] 8021q: adding VLAN 0 to HW filter on device team2 [ 681.689511][T10233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.698141][T10233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.713238][T28077] vlan2: entered promiscuous mode [ 681.721723][T28077] geneve1: entered promiscuous mode [ 681.730402][T28077] vlan2: entered allmulticast mode [ 681.736689][T28077] geneve1: entered allmulticast mode [ 681.958708][T28089] ip6gre1: entered promiscuous mode [ 681.979696][T28089] ip6gre1: entered allmulticast mode [ 682.406257][T28120] netlink: 'syz.5.5701': attribute type 7 has an invalid length. [ 682.521760][T28128] netlink: 'syz.0.5705': attribute type 1 has an invalid length. [ 682.554398][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 682.582250][T28128] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 682.609198][T28120] xfrm0 speed is unknown, defaulting to 1000 [ 683.114381][ C1] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 683.258904][T28154] netlink: 'syz.4.5708': attribute type 3 has an invalid length. [ 683.594134][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 683.811599][T28176] netlink: 'syz.0.5712': attribute type 1 has an invalid length. [ 684.476220][T28203] netlink: 'syz.1.5717': attribute type 1 has an invalid length. [ 684.509203][T28203] __nla_validate_parse: 46 callbacks suppressed [ 684.509224][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5717'. [ 684.559481][T28211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5719'. [ 684.634454][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 684.774350][T28222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5720'. [ 684.882964][T28228] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5723'. [ 684.944370][T28228] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.5723'. [ 684.975007][T28228] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.5723'. [ 685.509529][T28233] team0 (unregistering): Failed to send options change via netlink (err -105) [ 685.543920][T28233] team0 (unregistering): Failed to send port change of device veth1_to_hsr via netlink (err -105) [ 685.564731][T28233] team0 (unregistering): Port device veth1_to_hsr removed [ 685.675592][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 686.288890][T28275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5732'. [ 686.368268][T28278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5732'. [ 686.417833][T28282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5735'. [ 686.437202][T28282] validate_nla: 1 callbacks suppressed [ 686.437220][T28282] netlink: 'syz.5.5735': attribute type 1 has an invalid length. [ 686.566194][T28285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5736'. [ 686.714308][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 687.208443][T28317] tipc: Disabling bearer [ 687.388277][T28320] xfrm0 speed is unknown, defaulting to 1000 [ 687.754253][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 687.896282][T28348] IPv6: sit1: Disabled Multicast RS [ 687.902960][T28348] sit1: entered allmulticast mode [ 688.120280][T28354] batman_adv: batadv0: Adding interface: macvtap1 [ 688.127449][T28354] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.152052][T28355] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 688.156169][T28354] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 688.397600][T28369] batadv_slave_0: entered promiscuous mode [ 688.597019][T28369] batadv_slave_0: left promiscuous mode [ 688.665365][T28380] netlink: 'syz.1.5761': attribute type 142 has an invalid length. [ 688.804164][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 688.850775][T28384] xt_CT: No such helper "netbios-ns" [ 688.922114][T28395] netlink: 'syz.1.5766': attribute type 3 has an invalid length. [ 689.006472][T28400] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 689.199272][T28407] geneve0: entered promiscuous mode [ 689.222409][T28407] geneve0: left promiscuous mode [ 689.333903][T28414] netlink: 'syz.0.5768': attribute type 9 has an invalid length. [ 689.558542][T28427] __nla_validate_parse: 175 callbacks suppressed [ 689.558560][T28427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5775'. [ 689.615785][T28424] netlink: 'syz.4.5772': attribute type 2 has an invalid length. [ 689.637885][T28424] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5772'. [ 689.844240][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 689.938976][T28441] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5777'. [ 690.102097][T28454] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.160399][T28454] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.271678][T28454] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.438243][T28454] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.472343][T28478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5791'. [ 690.506301][T28481] tipc: Enabling of bearer rejected, already enabled [ 690.525992][T28485] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 690.593238][T10233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.627693][T10235] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.759301][T28491] erspan1: entered promiscuous mode [ 690.774207][T28491] erspan1: entered allmulticast mode [ 690.787495][T10233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.842591][T10233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.874147][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 691.170736][T28505] xfrm0 speed is unknown, defaulting to 1000 [ 691.421326][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5801'. [ 691.522264][T28525] tipc: Enabled bearer , priority 0 [ 691.604454][T28525] syzkaller0: entered promiscuous mode [ 691.615655][T28525] syzkaller0: entered allmulticast mode [ 691.622094][T28525] tipc: Resetting bearer [ 691.641927][T28523] tipc: Resetting bearer [ 691.914133][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 692.957372][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 694.019692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 695.041342][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 695.203030][T28523] tipc: Disabling bearer [ 695.236589][T28533] 0ªî{X¹¦: left allmulticast mode [ 695.268315][T28533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.288204][T28533] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.320227][T28533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.369144][T28533] tipc: Resetting bearer [ 695.380463][T28533] tipc: Resetting bearer [ 695.403471][T28533] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 695.413713][T28533] ip6gre1: left promiscuous mode [ 695.419036][T28533] ip6gre1: left allmulticast mode [ 695.429563][T28533] bond1: left promiscuous mode [ 695.434798][T28533] bond1: left allmulticast mode [ 695.440626][T28533] erspan1: left allmulticast mode [ 695.453936][T28533] 8021q: adding VLAN 0 to HW filter on device eth0 [ 695.463640][T28533] 8021q: adding VLAN 0 to HW filter on device eth1 [ 695.472911][T28533] 8021q: adding VLAN 0 to HW filter on device eth2 [ 695.489859][T28533] 8021q: adding VLAN 0 to HW filter on device eth3 [ 695.509339][T28533] ip6erspan0: left allmulticast mode [ 695.520510][T28533] bond2: left promiscuous mode [ 695.525432][T28533] bond2: left allmulticast mode [ 695.531353][T28533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 695.545895][T28533] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 695.553816][T28533] bridge4: left promiscuous mode [ 695.559139][T28533] bridge4: left allmulticast mode [ 695.566169][T28533] bridge5: left promiscuous mode [ 695.567394][T28562] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5809'. [ 695.572000][T28533] bridge5: left allmulticast mode [ 695.580720][T28562] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5809'. [ 695.588820][T28533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 695.607677][T28533] bridge0: port 1(vlan2) entered blocking state [ 695.614103][T28533] bridge0: port 1(vlan2) entered forwarding state [ 695.622870][T28533] geneve0: entered promiscuous mode [ 695.634746][T28533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 695.645196][T28533] 8021q: adding VLAN 0 to HW filter on device bond7 [ 695.709779][T26393] tipc: Node number set to 3490023536 [ 695.741135][ T5758] xfrm0 speed is unknown, defaulting to 1000 [ 695.751317][ T5758] syz0: Port: 1 Link ACTIVE [ 695.913421][T26393] xfrm0 speed is unknown, defaulting to 1000 [ 696.041873][ T24] [ 696.044217][ T24] ====================================================== [ 696.051256][ T24] WARNING: possible circular locking dependency detected [ 696.058414][ T24] syzkaller #0 Not tainted [ 696.062848][ T24] ------------------------------------------------------ [ 696.069941][ T24] kworker/1:0/24 is trying to acquire lock: [ 696.075834][ T24] ffff88803ebd4ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 696.085064][ T24] [ 696.085064][ T24] but task is already holding lock: [ 696.092415][ T24] ffff88803200d958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 696.102325][ T24] [ 696.102325][ T24] which lock already depends on the new lock. [ 696.102325][ T24] [ 696.112711][ T24] [ 696.112711][ T24] the existing dependency chain (in reverse order) is: [ 696.121703][ T24] [ 696.121703][ T24] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 696.130043][ T24] _raw_spin_lock+0x2e/0x40 [ 696.135074][ T24] sch_direct_xmit+0x15f/0x4c0 [ 696.140348][ T24] __dev_queue_xmit+0x180f/0x3950 [ 696.145959][ T24] hsr_forward_skb+0x166e/0x2a70 [ 696.151408][ T24] hsr_dev_xmit+0x242/0x360 [ 696.156418][ T24] dev_hard_start_xmit+0x2cd/0x830 [ 696.162036][ T24] __dev_queue_xmit+0x14d9/0x3950 [ 696.167566][ T24] ip6_output+0x340/0x550 [ 696.172490][ T24] NF_HOOK+0x177/0x4f0 [ 696.177117][ T24] mld_sendpack+0x8b4/0xe40 [ 696.182388][ T24] mld_ifc_work+0x835/0xe70 [ 696.187397][ T24] process_scheduled_works+0xb5d/0x1860 [ 696.193446][ T24] worker_thread+0xa53/0xfc0 [ 696.198539][ T24] kthread+0x389/0x470 [ 696.203114][ T24] ret_from_fork+0x514/0xb70 [ 696.208209][ T24] ret_from_fork_asm+0x1a/0x30 [ 696.213477][ T24] [ 696.213477][ T24] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 696.221204][ T24] __lock_acquire+0x15a5/0x2cf0 [ 696.226563][ T24] lock_acquire+0x106/0x350 [ 696.231575][ T24] _raw_spin_lock_bh+0x36/0x50 [ 696.236843][ T24] hsr_dev_xmit+0x237/0x360 [ 696.241856][ T24] dev_hard_start_xmit+0x2cd/0x830 [ 696.247483][ T24] __dev_queue_xmit+0x14d9/0x3950 [ 696.253016][ T24] NF_HOOK+0x33a/0x3c0 [ 696.257694][ T24] arp_xmit+0x16c/0x270 [ 696.262356][ T24] arp_solicit+0xbe0/0xe40 [ 696.267283][ T24] __neigh_event_send+0xf05/0x14d0 [ 696.272904][ T24] neigh_resolve_output+0x198/0x750 [ 696.278609][ T24] ip_finish_output2+0xca9/0x1070 [ 696.284138][ T24] ip_output+0x29f/0x450 [ 696.288940][ T24] iptunnel_xmit+0x621/0xd10 [ 696.294069][ T24] ip_tunnel_xmit+0x193a/0x1f20 [ 696.299462][ T24] __gre_xmit+0x19e/0x240 [ 696.304335][ T24] erspan_xmit+0xa41/0x14d0 [ 696.309358][ T24] dev_hard_start_xmit+0x2cd/0x830 [ 696.314989][ T24] sch_direct_xmit+0x251/0x4c0 [ 696.320256][ T24] __dev_queue_xmit+0x180f/0x3950 [ 696.325785][ T24] ip6_output+0x340/0x550 [ 696.330621][ T24] NF_HOOK+0x177/0x4f0 [ 696.335195][ T24] mld_sendpack+0x8b4/0xe40 [ 696.340204][ T24] mld_ifc_work+0x835/0xe70 [ 696.345216][ T24] process_scheduled_works+0xb5d/0x1860 [ 696.351266][ T24] worker_thread+0xa53/0xfc0 [ 696.356367][ T24] kthread+0x389/0x470 [ 696.360941][ T24] ret_from_fork+0x514/0xb70 [ 696.366037][ T24] ret_from_fork_asm+0x1a/0x30 [ 696.371308][ T24] [ 696.371308][ T24] other info that might help us debug this: [ 696.371308][ T24] [ 696.381514][ T24] Possible unsafe locking scenario: [ 696.381514][ T24] [ 696.389028][ T24] CPU0 CPU1 [ 696.394418][ T24] ---- ---- [ 696.399794][ T24] lock(&qdisc_xmit_lock_key#4); [ 696.404810][ T24] lock(&hsr->seqnr_lock); [ 696.411814][ T24] lock(&qdisc_xmit_lock_key#4); [ 696.419350][ T24] lock(&hsr->seqnr_lock); [ 696.423841][ T24] [ 696.423841][ T24] *** DEADLOCK *** [ 696.423841][ T24] [ 696.432011][ T24] 13 locks held by kworker/1:0/24: [ 696.437103][ T24] #0: ffff8880321f2940 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 696.447853][ T24] #1: ffffc900001e7c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 696.460970][ T24] #2: ffff88803260c530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 696.470182][ T24] #3: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 696.479398][ T24] #4: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 696.488436][ T24] #5: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 696.498341][ T24] #6: ffff88807aec1228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 696.510963][ T24] #7: ffff88803200d958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 696.521218][ T24] #8: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 696.530089][ T24] #9: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 696.539842][ T24] #10: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 696.548710][ T24] #11: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 696.558706][ T24] #12: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 696.567931][ T24] [ 696.567931][ T24] stack backtrace: [ 696.573810][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 696.573828][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 696.573838][ T24] Workqueue: mld mld_ifc_work [ 696.573860][ T24] Call Trace: [ 696.573869][ T24] [ 696.573877][ T24] dump_stack_lvl+0xe8/0x150 [ 696.573895][ T24] print_circular_bug+0x2e1/0x300 [ 696.573914][ T24] check_noncircular+0x12e/0x150 [ 696.573933][ T24] __lock_acquire+0x15a5/0x2cf0 [ 696.573949][ T24] ? __siphash_unaligned+0x25f/0x3b0 [ 696.573967][ T24] ? skb_network_protocol+0x23d/0x400 [ 696.573985][ T24] ? hsr_dev_xmit+0x237/0x360 [ 696.574002][ T24] lock_acquire+0x106/0x350 [ 696.574015][ T24] ? hsr_dev_xmit+0x237/0x360 [ 696.574033][ T24] ? __pfx_netif_skb_features+0x10/0x10 [ 696.574049][ T24] ? hsr_dev_xmit+0x237/0x360 [ 696.574065][ T24] _raw_spin_lock_bh+0x36/0x50 [ 696.574079][ T24] ? hsr_dev_xmit+0x237/0x360 [ 696.574095][ T24] hsr_dev_xmit+0x237/0x360 [ 696.574112][ T24] ? hsr_dev_xmit+0x2d/0x360 [ 696.574131][ T24] dev_hard_start_xmit+0x2cd/0x830 [ 696.574154][ T24] __dev_queue_xmit+0x14d9/0x3950 [ 696.574171][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 696.574186][ T24] ? __dev_queue_xmit+0x2b6/0x3950 [ 696.574201][ T24] ? arpt_do_table+0x256/0x1e30 [ 696.574221][ T24] ? arpt_do_table+0x256/0x1e30 [ 696.574237][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 696.574257][ T24] ? __pfx_arpt_do_table+0x10/0x10 [ 696.574272][ T24] ? trace_kmem_cache_alloc+0x29/0xe0 [ 696.574296][ T24] ? NF_HOOK+0xa2/0x3c0 [ 696.574315][ T24] NF_HOOK+0x33a/0x3c0 [ 696.574334][ T24] ? __pfx_arp_xmit_finish+0x10/0x10 [ 696.574352][ T24] ? NF_HOOK+0xa2/0x3c0 [ 696.574368][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 696.574385][ T24] ? lock_acquire+0x106/0x350 [ 696.574399][ T24] ? __pfx_arp_xmit_finish+0x10/0x10 [ 696.574417][ T24] ? inet_addr_type_dev_table+0x25/0x190 [ 696.574514][ T24] arp_xmit+0x16c/0x270 [ 696.574531][ T24] ? arp_xmit+0x23/0x270 [ 696.574549][ T24] arp_solicit+0xbe0/0xe40 [ 696.574569][ T24] ? arp_solicit+0x119/0xe40 [ 696.574588][ T24] ? __pfx_arp_solicit+0x10/0x10 [ 696.574609][ T24] ? __pfx_arp_solicit+0x10/0x10 [ 696.574627][ T24] __neigh_event_send+0xf05/0x14d0 [ 696.574653][ T24] neigh_resolve_output+0x198/0x750 [ 696.574673][ T24] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 696.574690][ T24] ? ip_finish_output2+0x3c2/0x1070 [ 696.574702][ T24] ip_finish_output2+0xca9/0x1070 [ 696.574714][ T24] ? ip_skb_dst_mtu+0x80b/0xa50 [ 696.574734][ T24] ? ip_finish_output+0x40e/0x530 [ 696.574754][ T24] ip_output+0x29f/0x450 [ 696.574772][ T24] ? ip_output+0x5b/0x450 [ 696.574790][ T24] iptunnel_xmit+0x621/0xd10 [ 696.574808][ T24] ip_tunnel_xmit+0x193a/0x1f20 [ 696.574834][ T24] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 696.574854][ T24] ? __pfx_gre_build_header+0x10/0x10 [ 696.574874][ T24] __gre_xmit+0x19e/0x240 [ 696.574891][ T24] ? __pfx___gre_xmit+0x10/0x10 [ 696.574906][ T24] ? look_up_lock_class+0x57/0x110 [ 696.574921][ T24] ? iptunnel_handle_offloads+0x2fd/0x630 [ 696.574938][ T24] erspan_xmit+0xa41/0x14d0 [ 696.574959][ T24] ? __pfx_erspan_xmit+0x10/0x10 [ 696.574980][ T24] dev_hard_start_xmit+0x2cd/0x830 [ 696.575002][ T24] sch_direct_xmit+0x251/0x4c0 [ 696.575017][ T24] ? __pfx_sch_direct_xmit+0x10/0x10 [ 696.575032][ T24] __dev_queue_xmit+0x180f/0x3950 [ 696.575051][ T24] ? __dev_queue_xmit+0x2b6/0x3950 [ 696.575071][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 696.575087][ T24] ? neigh_resolve_output+0x438/0x750 [ 696.575107][ T24] ? eth_header+0x11b/0x200 [ 696.575204][ T24] ? __asan_memcpy+0x40/0x70 [ 696.575229][ T24] ? ip6_output+0x126/0x550 [ 696.575244][ T24] ip6_output+0x340/0x550 [ 696.575260][ T24] ? __pfx_ip6_output+0x10/0x10 [ 696.575276][ T24] NF_HOOK+0x177/0x4f0 [ 696.575293][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 696.575309][ T24] ? __pfx_dst_output+0x10/0x10 [ 696.575324][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 696.575337][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 696.575350][ T24] ? icmp6_dst_alloc+0x3a6/0x440 [ 696.575392][ T24] mld_sendpack+0x8b4/0xe40 [ 696.575413][ T24] ? mld_sendpack+0x213/0xe40 [ 696.575429][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 696.575451][ T24] mld_ifc_work+0x835/0xe70 [ 696.575468][ T24] ? process_scheduled_works+0xa70/0x1860 [ 696.575482][ T24] process_scheduled_works+0xb5d/0x1860 [ 696.575511][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 696.575526][ T24] ? assign_work+0x3d5/0x5e0 [ 696.575540][ T24] worker_thread+0xa53/0xfc0 [ 696.575562][ T24] kthread+0x389/0x470 [ 696.575578][ T24] ? __pfx_worker_thread+0x10/0x10 [ 696.575591][ T24] ? __pfx_kthread+0x10/0x10 [ 696.575607][ T24] ret_from_fork+0x514/0xb70 [ 696.575623][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 696.575636][ T24] ? __switch_to+0xc79/0x1410 [ 696.575655][ T24] ? __pfx_kthread+0x10/0x10 [ 696.575671][ T24] ret_from_fork_asm+0x1a/0x30 [ 696.575692][ T24] [ 697.054384][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 697.059332][T10235] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 697.084496][T10235] bond5: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 697.100568][T10235] bond5: (slave veth9): making interface the new active one [ 697.115061][T10235] bond5: active interface up! [ 697.154223][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 697.263574][T10239] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 697.272032][T10239] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 697.285978][T26393] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 697.308131][T10239] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 697.316056][T10239] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 697.335645][T26393] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 697.444268][T26393] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 697.451957][ T4946] Bluetooth: hci2: link tx timeout [ 697.464166][ T4946] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.498573][T28603] Bluetooth: hci2: link tx timeout [ 697.503847][T28603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.527414][T28603] Bluetooth: hci2: link tx timeout [ 697.532598][T28603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.714276][T15743] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 697.764551][T26393] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 697.864468][T28603] Bluetooth: hci2: link tx timeout [ 697.869660][T28603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.944447][T28603] Bluetooth: hci2: link tx timeout [ 697.949622][T28603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.964836][T28603] Bluetooth: hci2: link tx timeout [ 697.970061][T28603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 698.074521][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 698.955316][T28603] Bluetooth: hci2: link tx timeout [ 698.960501][T28603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 699.114220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 699.514229][T28603] Bluetooth: hci2: command 0x0406 tx timeout [ 700.154347][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 700.310405][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 701.194153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 701.268796][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 702.234299][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 702.954459][ C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 702.954479][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 703.274149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 704.314390][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 705.354137][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available