last executing test programs: 4m50.26765299s ago: executing program 2 (id=62): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x9}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 4m49.960469144s ago: executing program 2 (id=67): unshare(0x22020600) syz_open_procfs$namespace(0x0, &(0x7f0000002180)='ns/ipc\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) unshare(0x22020600) (async) syz_open_procfs$namespace(0x0, &(0x7f0000002180)='ns/ipc\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) 4m49.756609014s ago: executing program 2 (id=70): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000"], 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x1c, 0x5e, 0x1, 0x0, 0xfffffffe, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}]}, 0x1c}], 0x1}, 0x20000080) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x3fb, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}}, 0x91) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x4000040) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@random="25831379601c3d3d91e9393498f955f9afa71b535a2113fd12c2e67e", 0x1c, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) r5 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 4m49.167562283s ago: executing program 2 (id=74): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x408d4}, 0x24000044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x13c, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xe8, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6db}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xc4, 0x6, [@m_csum={0xc0, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x7, 0x4, 0x8000}, 0x4}}]}, {0x75, 0x6, "19381787a244e0c371b7435ddb940e959db279edf692ad52828ad9b613c52af941e9fa7b0f3562267385c1eb87fc4d956dd1e0e83cff90d71de305ddb26fe8cd565f56d2956f7e63a7fcddec8850d0510a4cddf0797e5ce72a997de17b8bed1c4c44e7fce9c987e079475470a7f0fbba8c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x81}, 0x4c0c2) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x81, 0xf65c, 0x10205, 0x6, 0x5, 0x10001, 0x0, 0x7, r3}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x3}, &(0x7f0000000180)=0xc) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000040000000800"/20, @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m48.55201395s ago: executing program 2 (id=81): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffff7, 0x1, 0x2) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x7, 0x6}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x64, 0x6, "e8bdee5948ffd3d9ac4139c00eaa227d4e8a753e577007df7c903161423d5413167ed7cea26288f1fb3fd4eefe11905a6230e7a3381769fcc5372c973038fd3ed2cdb351d91ed5724d508b5147a146abe6b6c1349d5bdde7a33895466a8b7a6b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x31, 0x6, "be1bf7d55eea949f737249d5e677e65ab79046a825052bf868a0f9c44830103c512801ba034f3246ffe8d5a8ab"}]}, @NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xee, 0x6, "5286c80c113cad542990cb11523ff0fd311a0c6dfb877aefbd7f5ec5ad535f2211ce3b8b147dba4d29a8a24af19a690e05d847daf8ba598f4c04478d387f8eddc60a4e6ce4329c2aa202413f4301d765134d360ab362a7da5bbe2ac08267e4f2fd3e410efb2f0bf84672a12dca19c484313f4cab90d0d7564395e4c24e74289bc2831b257669deea70e4a969b7c3fc18c22d6a876ecb94f285a162ce476ba1b6e9d3609f6070fde2e3a399006a7f8cb9c7190b0e93ba239cc805b973884392b27a94591e613ef746e774dbaad00feee6325a0d98ea9a72ad6802e0e30f7096def83d09a315ce0e5cb9c2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x218, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x36, 0xd, 0x1, 0x0, "e9fbbd354f4df60f79bedc520d117ff5d41caa00bf9939d62a791a3236c5f217c9e69fbba101a3c605bdf24df7cd0e1f61cc"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d0f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}]}]}, @NFTA_SET_USERDATA={0x11, 0xd, 0x1, 0x0, "53827beac244de9e7f9e37c077"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x460}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x4000, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008044}, 0xd0) 4m40.92447544s ago: executing program 0 (id=124): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0xd, 0x1c80, 0xfffa, 0xff4e, 0xced, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x2, 0x7, 0x9, 0xffffffff, 0x5}}, &(0x7f0000000040)=0xb0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 4m40.819327512s ago: executing program 1 (id=125): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(0xffffffffffffffff) 4m40.728552006s ago: executing program 0 (id=126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x1, 0x5, 0x9, 0x7}, {0x3, 0x2, 0xc}], 0x10, 0x4f, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x8}, {0x3, 0xd}, {0x4, 0x2}}}, 0x24}}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket(0x2c, 0x3, 0x0) (async) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000200)=ANY=[@ANYBLOB="fffffffffffff680c2000d000800450000610000000000889078ac1e0001ac1414aa00004e23004d9078f2eee374dc40c8c74aded76eadb89719eacfb300c9b9d418299ffff94a2067a1d75f0e1d15ad2153ffdcf3466cee8804eb61cd8281d69defcfef895446eb60f86db32de1c92c01d33a732592bb1f970000a80a818973052ec8455d622d150e21934f3cc6a3c67ec8eb03206ed567c5e8f0e26b41fe8f0667c6f93542ddfed5f98aaa3cd122d123abfce6492d88055368ee1ccd0834c7"], 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 4m40.504521987s ago: executing program 1 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="40a65482145964e5cdc6cd203a46d62787d19f7ec3d6ee47a47257b965e05b86225863f99d7098b937304564c07da4e85b8d275182d6bb7a1bdea691b3f8acaa1161a6a372cd99cc1daaa708c91eab289d71f90a3f088a14357af5f4f86d8f1cf19d2bbfbb79eb72ee97ed89ca", 0x6d}], 0x1, &(0x7f0000000200)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x48, 0x0, 0x5, [0x2]}, @ssrr={0x89, 0x7, 0x88, [@remote]}, @timestamp={0x44, 0xc, 0x69, 0x0, 0xc, [0x2, 0xfffffff4]}, @end, @end, @end]}}}], 0x30}, 0x4008054) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) 4m40.289398814s ago: executing program 0 (id=130): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000300f5fffedbdf25010000000c00060001000000000000000400078008000100000000000c0002080300000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x7}, {0x0, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$HCIINQUIRY(r12, 0x400448ca, 0x0) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r12, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES8=r5], 0x8c}, 0x1, 0xba01}, 0x0) 4m40.172399068s ago: executing program 1 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_to_bond\x00', 0x20}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r6, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000026002307"], 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 4m39.921788179s ago: executing program 4 (id=132): syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x2c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}, @generic={0x4, 0x3, "a8"}, @mptcp=@generic={0x1, 0x10, "eea2fe5701b9d5f0b8b225196ae6"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x2c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}, @generic={0x4, 0x3, "a8"}, @mptcp=@generic={0x1, 0x10, "eea2fe5701b9d5f0b8b225196ae6"}]}}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl(r0, 0x8b29, &(0x7f0000000040)) (async) 4m39.588435833s ago: executing program 4 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002140)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 4m39.358347771s ago: executing program 0 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x3c}, 0x1, 0x6c00, 0x0, 0xc040}, 0x0) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x8b, 0x29, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "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"}}, 0xfce) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x3c}, 0x1, 0x6c00, 0x0, 0xc040}, 0x0) (async) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x8b, 0x29, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "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"}}, 0xfce) (async) 4m39.248310247s ago: executing program 4 (id=137): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x8c73, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xa45326df8cb43fdd, 0xffffffffffffffff, 0xb5e1000) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r7 = socket(0x200000000000011, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa0028000}) ppoll(&(0x7f0000000700)=[{r4, 0xa160}, {r7, 0x4060}], 0x2, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r8, 0x11a, 0x2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000000e0000ab5a554200", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m39.012254662s ago: executing program 1 (id=139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900070000000055090100000000009500000000000000b708000000000000739af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m39.010716703s ago: executing program 4 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)=0xfff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000980)="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", 0x1c0}], 0x1}}], 0x1, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000a00)=ANY=[], 0x18c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000a, 0x392815d3dd1a7557, r2, 0xd56a6000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 4m38.752590858s ago: executing program 1 (id=142): socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060000030000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 4m38.648543365s ago: executing program 4 (id=143): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x8a, &(0x7f00000000c0)=0x57fd, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x3, 0x12) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000500)) getsockopt$inet_tcp_buf(r6, 0x6, 0xe, 0x0, &(0x7f0000010300)) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updsa={0x2c8, 0x1a, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in6=@loopback, 0x4e21, 0x9, 0x4e20, 0x0, 0xa, 0x40, 0x80, 0x88}, {@in6=@remote, 0x4d2, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x2, 0x1, 0x2, 0x5, 0x5, 0x1, 0x4, 0xffff}, {0x400, 0x9, 0xfffffffffffffc05, 0x1}, {0x0, 0x7, 0xf}, 0x70bd28, 0x3500, 0xa, 0x2, 0x2, 0x46}, [@user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in=@multicast1, 0x0, 0xa}}, @encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e24, @in6=@mcast1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xa}, @user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in=@multicast2}, @tfcpad={0x8, 0x16, 0x3}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @tmpl={0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_crypt={0x12c, 0x2, {{'cts-cbc-aes-neon\x00'}, 0x720, "2c93d048b94091aebde65b345036712441c40747b21fe160f3d3154d761d5233339008371d6c5fbeb621c5d402953d048f1ed04f09af0d500dbbf154697934d3679d9e60f946b2ceb80b3fad88d206346c022f6f050139ccc30a42e924968d590ae81f0e6d8829dd8a2347db3646890d7ff3565058769af0d3d6124f9e7fa0e410b45fd80efe702f4f31e273ff7bc322e8c4593e3b3e70331715953e3c92c016ec95b8b85f870b77ee4cd683c8ef0a38cfb52a6d03eb79de2db594d5b961dcf0a24ddf01bc58e4c99779d2203bfa5a8aef534f9fa005144fe416fc5b1cececd84308f484"}}]}, 0x2c8}}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r8, 0x607, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044051}, 0x4040000) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000000c0)={0x65, {{0x2, 0x4e23, @multicast2}}}, 0x88) 4m38.411944948s ago: executing program 0 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_EVENT={0x8, 0x2c, 0x1000}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 4m38.349930986s ago: executing program 2 (id=81): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffff7, 0x1, 0x2) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x7, 0x6}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x64, 0x6, "e8bdee5948ffd3d9ac4139c00eaa227d4e8a753e577007df7c903161423d5413167ed7cea26288f1fb3fd4eefe11905a6230e7a3381769fcc5372c973038fd3ed2cdb351d91ed5724d508b5147a146abe6b6c1349d5bdde7a33895466a8b7a6b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x31, 0x6, "be1bf7d55eea949f737249d5e677e65ab79046a825052bf868a0f9c44830103c512801ba034f3246ffe8d5a8ab"}]}, @NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xee, 0x6, "5286c80c113cad542990cb11523ff0fd311a0c6dfb877aefbd7f5ec5ad535f2211ce3b8b147dba4d29a8a24af19a690e05d847daf8ba598f4c04478d387f8eddc60a4e6ce4329c2aa202413f4301d765134d360ab362a7da5bbe2ac08267e4f2fd3e410efb2f0bf84672a12dca19c484313f4cab90d0d7564395e4c24e74289bc2831b257669deea70e4a969b7c3fc18c22d6a876ecb94f285a162ce476ba1b6e9d3609f6070fde2e3a399006a7f8cb9c7190b0e93ba239cc805b973884392b27a94591e613ef746e774dbaad00feee6325a0d98ea9a72ad6802e0e30f7096def83d09a315ce0e5cb9c2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x218, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x36, 0xd, 0x1, 0x0, "e9fbbd354f4df60f79bedc520d117ff5d41caa00bf9939d62a791a3236c5f217c9e69fbba101a3c605bdf24df7cd0e1f61cc"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d0f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}]}]}, @NFTA_SET_USERDATA={0x11, 0xd, 0x1, 0x0, "53827beac244de9e7f9e37c077"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x460}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x4000, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008044}, 0xd0) 4m37.904546136s ago: executing program 32 (id=81): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffff7, 0x1, 0x2) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x7, 0x6}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x64, 0x6, "e8bdee5948ffd3d9ac4139c00eaa227d4e8a753e577007df7c903161423d5413167ed7cea26288f1fb3fd4eefe11905a6230e7a3381769fcc5372c973038fd3ed2cdb351d91ed5724d508b5147a146abe6b6c1349d5bdde7a33895466a8b7a6b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x31, 0x6, "be1bf7d55eea949f737249d5e677e65ab79046a825052bf868a0f9c44830103c512801ba034f3246ffe8d5a8ab"}]}, @NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xee, 0x6, "5286c80c113cad542990cb11523ff0fd311a0c6dfb877aefbd7f5ec5ad535f2211ce3b8b147dba4d29a8a24af19a690e05d847daf8ba598f4c04478d387f8eddc60a4e6ce4329c2aa202413f4301d765134d360ab362a7da5bbe2ac08267e4f2fd3e410efb2f0bf84672a12dca19c484313f4cab90d0d7564395e4c24e74289bc2831b257669deea70e4a969b7c3fc18c22d6a876ecb94f285a162ce476ba1b6e9d3609f6070fde2e3a399006a7f8cb9c7190b0e93ba239cc805b973884392b27a94591e613ef746e774dbaad00feee6325a0d98ea9a72ad6802e0e30f7096def83d09a315ce0e5cb9c2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x218, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x36, 0xd, 0x1, 0x0, "e9fbbd354f4df60f79bedc520d117ff5d41caa00bf9939d62a791a3236c5f217c9e69fbba101a3c605bdf24df7cd0e1f61cc"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d0f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}]}]}, @NFTA_SET_USERDATA={0x11, 0xd, 0x1, 0x0, "53827beac244de9e7f9e37c077"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x460}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x4000, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008044}, 0xd0) 4m37.881594359s ago: executing program 0 (id=146): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000300f5fffedbdf25010000000c00060001000000000000000400078008000100000000000c0002080300000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x7}, {0x0, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$HCIINQUIRY(r12, 0x400448ca, 0x0) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r12, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES8=r5], 0x8c}, 0x1, 0xba01}, 0x0) 4m37.452191052s ago: executing program 33 (id=146): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000300f5fffedbdf25010000000c00060001000000000000000400078008000100000000000c0002080300000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x7}, {0x0, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$HCIINQUIRY(r12, 0x400448ca, 0x0) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r12, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES8=r5], 0x8c}, 0x1, 0xba01}, 0x0) 4m37.43513674s ago: executing program 1 (id=147): socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x12, 0x2000000000000349, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) pipe(&(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000050000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000009e00009500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) unshare(0x6a040000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r4}, 0x0, &(0x7f0000001040)}, 0x20) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x150, 0x150, 0x250, 0xf8010000, 0x320, 0x238, 0x238, 0x320, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0xc}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0x6}, {0x3, 0x2, 0x2}, 0x4, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 4m37.432980516s ago: executing program 34 (id=147): socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x12, 0x2000000000000349, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) pipe(&(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000050000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000009e00009500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) unshare(0x6a040000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r4}, 0x0, &(0x7f0000001040)}, 0x20) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x150, 0x150, 0x250, 0xf8010000, 0x320, 0x238, 0x238, 0x320, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0xc}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0x6}, {0x3, 0x2, 0x2}, 0x4, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 4m37.392269903s ago: executing program 4 (id=148): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffff9c6404800000000045040400010000001704000001000a00b7040000140100006a0af2fe00000000850000004a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03440eafe1c8660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 4m37.392078752s ago: executing program 35 (id=148): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 1m38.649682536s ago: executing program 6 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffec4, 0x2, {0x5}}}]}, 0x48}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @empty, 0xffffffff}, 0x2) (async) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) bind$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) shutdown(r1, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) 1m25.348189354s ago: executing program 6 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffec4, 0x2, {0x5}}}]}, 0x48}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @empty, 0xffffffff}, 0x2) (async) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) bind$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) shutdown(r1, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) 1m8.056705406s ago: executing program 6 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffec4, 0x2, {0x5}}}]}, 0x48}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @empty, 0xffffffff}, 0x2) (async) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) bind$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) shutdown(r1, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) 59.133858695s ago: executing program 5 (id=1780): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001940)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="7cb92aec8c73ebdcf13af3e211a2e70f2ae98a4a5cd66201f4fef3c556764932787ecb3b0e0becc59d5d8d1c603a157e38b495e201e5e402684a64c45e4b540c26f2ccf6ae6eae6766d0fe89fb50d36fca0a8470398316c7e0f32c0c6a817d43b92127fdcd8f684b9345afade5d404957c1e2b664d4a2498d9d480cf39995cf7a8959524229eeacd9adaace1a62cc282c796308b87afe0f68c35ceccbde36afda382e6bc2009b030438b4772ed03bb4d8d2aa7d87c4f5a5ab44cc9ef2a386b85bcaca4145d4338d6c64f8e55fab7a7e0fd584ea4fe0d3bda24144c05bbca72ff424a7c505bb207fbed58", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair(0x2, 0x3, 0x2, &(0x7f0000000380)) 59.002082702s ago: executing program 5 (id=1781): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x3502, 0x2, 0x0, 0x0, 0x400000}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}]}]}, 0x1fc}}, 0x7000000) 58.78020949s ago: executing program 5 (id=1783): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f000000bb00)=[{{&(0x7f0000009fc0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x5}}], 0x10}}], 0x1, 0x4840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000009300530a16205600000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a90f912f6174b3edd0d09fe333fec328506303e2c766911", @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0030800500020006000000"], 0x28}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r4, 0xe9c) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000040)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001500000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 49.323979313s ago: executing program 6 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffec4, 0x2, {0x5}}}]}, 0x48}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @empty, 0xffffffff}, 0x2) (async) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) bind$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) shutdown(r1, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) 44.268336419s ago: executing program 5 (id=1783): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f000000bb00)=[{{&(0x7f0000009fc0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x5}}], 0x10}}], 0x1, 0x4840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000009300530a16205600000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a90f912f6174b3edd0d09fe333fec328506303e2c766911", @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0030800500020006000000"], 0x28}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r4, 0xe9c) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000040)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001500000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 33.408521005s ago: executing program 6 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffec4, 0x2, {0x5}}}]}, 0x48}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @empty, 0xffffffff}, 0x2) (async) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) bind$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) shutdown(r1, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) 32.000131595s ago: executing program 5 (id=1783): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f000000bb00)=[{{&(0x7f0000009fc0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x5}}], 0x10}}], 0x1, 0x4840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000009300530a16205600000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a90f912f6174b3edd0d09fe333fec328506303e2c766911", @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0030800500020006000000"], 0x28}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r4, 0xe9c) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000040)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001500000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14.760457291s ago: executing program 6 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffec4, 0x2, {0x5}}}]}, 0x48}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @empty, 0xffffffff}, 0x2) (async) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) bind$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) shutdown(r1, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) 13.605830277s ago: executing program 5 (id=1783): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f000000bb00)=[{{&(0x7f0000009fc0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x5}}], 0x10}}], 0x1, 0x4840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000009300530a16205600000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a90f912f6174b3edd0d09fe333fec328506303e2c766911", @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0030800500020006000000"], 0x28}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r4, 0xe9c) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000040)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001500000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.143840287s ago: executing program 3 (id=2080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000580)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0xf0b7, 0xb1}, 0x90) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800010000000000fedbdf250a0000000003ff0000000000080006000000000008001f"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x4, 0x0, 0x5c, @loopback, @loopback, 0x7800, 0x40, 0x8, 0x8}}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x400, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r8, 0x400, 0x70bd2d, 0x4, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltclass={0x6c, 0x29, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0xb}, {0xb, 0x1}, {0xf, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4d99}, @TCA_QFQ_LMAX={0x8, 0x2, 0x101}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4055}, 0x20000040) 2.042083494s ago: executing program 3 (id=2082): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x15c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}]}, 0x15c}}, 0x0) sendfile(r2, r1, 0x0, 0x10000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0), 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 1.98212921s ago: executing program 7 (id=2083): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.584069338s ago: executing program 8 (id=2086): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000000c7b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.440279324s ago: executing program 8 (id=2087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500004000000000b708000000000000739af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.363628128s ago: executing program 8 (id=2088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0xc0c0, &(0x7f000005ffe4)={0xa, 0x4, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) 1.20327826s ago: executing program 8 (id=2089): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.004240426s ago: executing program 8 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) (async) r3 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000940)) recvfrom$phonet(r3, &(0x7f0000000980)=""/59, 0x3b, 0x2, &(0x7f00000009c0)={0x23, 0x1, 0x7, 0x3}, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000900)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000180)={0x214, 0x14, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x115, 0x0, 0x0, @fd=r0}, @generic="5ba08f5031f5af9bfc908f9a1b31faf9f068ef2d044f4840ef565c7e645bb5a8703a19f15021c886f6cec86d4ae802e56fa13326daa1713fef2f274dbbcb39349aeddd7695d04cd4d18e65352f40666230e5d6039ac491fabb0e6a87b6bb5b120a668775c559112234184a51b13a70d16caa7767cef9c39c1d14d9f32ff0c2b9efa501ef0e4d072a2ab6b2c2f777b6c6c284ac14a638404ade7b3f152686f09f33a43618bbe5f22ca963b4459ec31ba4eef862abf850a1d5672391c64abc62679848ff95d949a585c260ce00f5668f3b10c50a4a091b1f9b92cfd7a492ae5d75d70197c71dc5fc51610af4d9df32d500171dee", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x5}, @nested={0xfe, 0x11f, 0x0, 0x1, [@generic="31016d424b86e1b23d639268ba8ee4dfdcb40105ad5bbafd9ca6d9085707b78d5cc88c3baf3bf5d99f01b18e256c4ac55247e2c87549d1600463aa56c946c4a9f548ee8f09b4768223ff557f217c43efb3893dd97f41831651ed38eadcea5384f6e4df616d57376778b13060c64a961c039b69437f3299fded0b37e22a4e042aa2953000b75c092a9e771e8441190dae08708b4bf4e353c6cb10deb6864ba90c30025602f0443fb37bef54b646b9e1d30ea7a8cf9be32b8574b59287d95199b7171851be2ab88d2101c18be95f82ef9ad820ae4c3fa305f2607042b86f74fba27285273bae24cf4ce71e", @nested={0x4, 0xbf}, @nested={0x4, 0x124}, @typed={0x8, 0x9c, 0x0, 0x0, @u32}]}]}, 0x214}, {&(0x7f0000000100)={0x18, 0x20, 0x20, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x115, 0x0, 0x0, @uid=r1}]}, 0x18}, {&(0x7f0000000540)={0x220, 0x1c, 0x200, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0xb1, 0x0, 0x0, @u32=0x80000000}, @nested={0x70, 0x84, 0x0, 0x1, [@generic="f2ad63829f187f0cc6d10331dbb804ad4ec4a77c3e93de74261085dd0fd536979571e15db373b8771b5c026674cbc54105f1b68b4e7e860e77c95f7f48994ea8c2779c0b895c18075f0c32e2b8d8b48383601549b21e8435", @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0x7}]}, @generic="f057b7eeecdcf1a2c5f67eb7794a42e44ee3246ac86cf23821d4f1863a4d452d30f004be9ee4a66eaaa8309d077c05fb837f72b5a74918e3f7b7be64754d946266758e2899477076cbfbabdcbf2be98119ead59809a09717660c716a21b6c7e5a6666b8dd6a51b53ff96fb52e858a8639de3c51e1a46b6c3a4fc1fef8c4b4c866b780f7d2fe7d044e7928e824da0ff378cb65176ebd66b2239", @generic="e7060f157a478555da0e84cfca07972fc7d0b8f367949c2ffd0e207480c46654985219e5729369df25fc26085087d38fe9e7ca8ea9625c6d54d030d2107cc6ad1e8d18bebc165c8130f638c49d6ec45122aad02938d846b9f34c560bb4e76d44319dac8e276054cc690452aafa59688a597b60667c1cdc", @generic="63cbf35ead95cfca086c9cdc04262b545551bb106fcaa6e99984d136e3652ee19c16e2a54ba3232fb7b41f53cb5ad349fd91babc92ec8316ed4a43ed3ed954f150048cea2cf689c9302720c151738b4c5bddcddc82b46546cb994ed236788fb2a2670ec59ce190c6162a85f1801a5d1e0c9781f1547e8117c500c22fb243", @typed={0x8, 0x5b, 0x0, 0x0, @pid=r2}]}, 0x220}, {&(0x7f0000000780)={0x138, 0x3f, 0x900, 0x70bd27, 0x25dfdbfd, "", [@nested={0x128, 0xee, 0x0, 0x1, [@generic="91c6ab2aaf801beb8982adc3de36921bde2d2a53eac2edf11585de45fd6c19ac573097d1e1af16e81bef8be2c7ed129be0fca8b908918ed42091aa0a436085a7e61068f229c6fc64757a4c41db67ffe80aadd72a149e7e95dddaafd7b66704c28d4edb3f1e05be1a5105b449da77f6d4924dc112d8566fcd7bf537897426366f657d4eafdea1fbdb2ab64693", @generic="a2a640cbad7e0a442b1a", @nested={0x4, 0x117}, @nested={0x4, 0x13f}, @nested={0x4, 0x18}, @nested={0x4, 0xf6}, @generic="50584b8ab8c451c0fdf30bd5136f59505ef0ac2df679bbef1addb40dc365cbfb3a57903f24c77fcce69224487ae1b0c680082250932c506225031571b0f5ee142acdf087f0895e016002d932c6e2b765d291d660edcffc50430903e43c40ce314843cc2309ad100503497428e98a39764b45e52a0fff", @nested={0x4, 0xe8}, @nested={0x4, 0xe8}]}]}, 0x138}], 0x4, 0x0, 0x0, 0x4040}, 0x84) 1.000939527s ago: executing program 7 (id=2091): socket(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100fffffffffcdbdf251c00000099e609f8d4e4514e258ebb92e05bf759b0cda60fdd"], 0x14}}, 0x4000000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006000000f4b781543017deb975a4ef0500e098ae5d54a8367d968cfe942110982e78ddb3227b79d44a7f000000000040d3de5cc160aa003c8a5ff21c1113922d23aedcdfd96dd202b987bdc7dda7c444047787e8a262a02d7874ea3af94fdc01e7e0b63914015598754d6da9562c67384548d16c4c190e96b1e503d73b212ff3e2ba87cf3e8bdd31c5244c783235eb4634b95d5413daad9b6de315c5"], 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000009060102000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001000000000004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) unshare(0x24060400) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x3, &(0x7f00000000c0)=0x63bd41f9, 0x4) 879.58542ms ago: executing program 3 (id=2092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000aca200000000000007020000f8ffffffb703000008000000b704400000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9a}]}}]}, 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) close(r2) 834.769815ms ago: executing program 8 (id=2093): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) socket$inet6(0xa, 0x80002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f35bbd2134563cbabb9510f5bf8aa0d628000000b34aa08546ebc4268ed25af60eeac8c6c0d6fb1bd057f7e3f10372b411eb10246fc3ef64a2c7cf58387343cff7bfc91f2b9a8bb4c2879aaa6fca72edee62a20b14d35c951bab26044e251f0842396537a068df84e50b6277537b171d70f0e5a434524b09e2d561ecca11b76d11372efbbb62887a29b7dd6a15b4ad1c5db6c4e3889973b7b4476f67ebcdbc61c65bdad540f6cedec7c61a2e53fcde74c21e3108c9e5f0608628bf5ede2df5c2e6ffbcd823c7115116361ed68dbd34453f3d7ef1f7c2d10620833fb71cc09d9e89b668309b9eb5034def", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000b0000000003001473797a3000000000"], 0x28}}, 0x0) r7 = openat$cgroup(r4, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xf4, "a75ad6f7d0427c24671bb883f61b362618c9569822373d1a1f9d2f0803255d5acee9d336bd25d545fbc746185a0d60ec50221ada4f1589b2da52216d12c6ba1fcd0cfd9806fa24c778839e67c5019c87bb4c1524652fe1030649977fc8085df5239646c165fa893ec382a5862f7045b619db70360f0a74165c9e27d21fef0714cdf70316e304ad19cda5f00ccac1b1ec87d85c0b434c694ea632ac541ed75981a27c0a4d4bd2701f105573b426535c6630ba864b011ecae625e687737bbee0bbf4195c1cce138c594cd9d5c4d9096c94bc0583bdefe27356137ed1c17d982134ffe98ba7c9e6d76c16c442f3d8c12c26105995f2"}, &(0x7f0000000240)=0xfc) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r11, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="04", 0x1}], 0x1}, 0x40001) recvmsg(r11, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}]}]}}]}, 0x70}}, 0x20008050) 716.258619ms ago: executing program 7 (id=2094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1005301}, 0xc, 0x0}, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e3000000000000002400128009000100626f6e6400000000140002800500010001000000080002"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x19, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x4, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000140)={{r0}, 0x1, 0x100000000000000, 0x8001}) 567.684251ms ago: executing program 3 (id=2095): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000030000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d632"], 0x23c}}, 0x4004000) 451.678263ms ago: executing program 7 (id=2096): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newlink={0x4c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x3}]}}}]}, 0x4c}}, 0x28000000) 388.345777ms ago: executing program 3 (id=2097): syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="000001cfcf7451da"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xe83, 0x4e83, 0x200, 0x3, 0x10001}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xb6b, 0x5}, &(0x7f0000000240)=0x90) 267.21291ms ago: executing program 7 (id=2098): socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f0000000600010000fe0f0008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 249.32504ms ago: executing program 3 (id=2099): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, &(0x7f00000003c0)=""/203, &(0x7f0000000000)=0xcb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xfe18}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1ff, 0x100, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 7 (id=2100): r0 = socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000008000000957ced9c060000000100000009065fa11cb2323cb619d1e1dd0230946b67a84e999bee93f230e76c8f8047824dbbdbd25d02cb70e9b09982a96afacf90b0a5d4a37a8b850d9f3e00e840662c3a504fefe815980cdf2e8b97728cad36cdd274744ced8ea07328ef61d9569eb4f4170437fb598109a075f72ad5727014a4371c12e14d5b35b01786a8216374f5c4a06c89b3046595d0aa44a30c1367fa20a01b7d14d8264eeb2d248e0273ff67d1e03f897545c2eb21c7d5b2ef13ac4839f9e5531753761993b5ee660893", @ANYRES32, @ANYBLOB="c843a46d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x7a44, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e22, 0xc, @private0, 0x366}], 0x3c) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000680)='dummy0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f00000002c0)="14", 0x1}, {&(0x7f00000003c0)="758e5fbf8bde27ded74a3dd337fd481bde17331dbaeb1b763b70f2dc066a4772cc40a670d9ecd9bdc8085516f9cdfa5d06bf9855124b6112f7c7343a71804224700bc30f34212dd60d2f040fedc37192ca4dfc282e797cc9b5001a6cf6375c1e69b0c9cb3fd9e5a2c3b8d97c3f24b3c985e715cf1213adce36cd77a72fa2eced0de62dbc2a7c406976fc5963fa303274999df240a1b5da940cffb2bea652aa816acb539978499ff2d7d27dca49b08c36dd400e6ef768033786667c60a711ccbdce", 0xc1}, {0xffffffffffffffff}, {&(0x7f00000004c0)="b6087f276a122e6ace7dad8b1082f9dcf06bc84d078243bd3e1038363d41bdf045b9185611be1d4d8174abb9eaf3ae3e5e6656d7148950c117fa512564d6df14ca0b7bc7014adf93345b9e878000db8bad0e1dfcebec0a2c68e0bec06995e695b41215eff39fbd99caf531e0938ad5d0ffd0efefdce14e0a885c34983759068af5e52d8a51bf4e272342fe6062812df48c90a2", 0x93}], 0x4}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf7}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000580)="fff9eff8482d553df38dbd1ceda71faad8fec802cb79210d86f70a70e14ce218cfbaf17c081ac2a233557b42b326ea9a24a6", 0x32}, {&(0x7f00000005c0)="9f99d7d84fa8fc12e06ab26cabf50eccd22158c7cd780b2eb2c8e223ebed1705c14bf1cb5f268fd0d00e1e371aa2189917fd43ecc59830b318d060377d9b2362c0af8ecfb08d1b88166cf00a0094260f38c4ecac2e1b32955e1f9c860d61a5bb186204c995f5bb286b78da2b39ed13c8abef42a28afdd5717209dd46e44656ef9f21e12f02ce209f6e294cc48a3f1e06360114ba4818754e6abd5faa3b", 0x9d}, {&(0x7f00000006c0)="64e0a79332911ad5f67ff4e70192ae258eb054f9258b651df2e999d05e1fed6054d364dae0162a93de04bb5337406b01a38ba830948112d030238473a669c9e522eb1e4648a4b6e9e80425697053db4e2d8c18d5ba317bf02371532492c9259d35f1cfd13764680525b9b4e720cfb76c19684fd7f3bc9e336efed463357634e7b174e511a14ab730e17b4dc939baff2bb29081be42075632bdbe1b0464d6cc94da807440", 0xa4}, {&(0x7f0000000780)="60e58d6afe29bd3cd83c55bc8e826e336d3297d7bb5d990c6fae2a9cbf2af865e22295fcc7dc947b580ebf50e86a45f69cccf4284643b2a3ada67eb36e6a0c9d2c3f3fefb66957674033df0aea2f378412dede7f618201cbfc0f4bef1a6bcb0636c2cfde6819942ef9dc02ca377ea7bbe1dcedf0d0194cd871c2ef9a2b1cfb6f6bf9524e8720515efa790d63f061c6cd2057fb", 0x93}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x25}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}}], 0x2, 0x3cd202f1b83c2f0d) bind$inet6(r4, &(0x7f0000000ac0)={0xa, 0x4e23, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2000003}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000940)={0x0, 0x3, 0x0, 0x5, 0x5}, &(0x7f0000000980)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000009c0)={r5, 0x9, 0x7ff, 0x5023, 0xff, 0x1, 0x2, 0x40000006, {r5, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x47, 0x7, 0x3ff, 0x3, 0x2}}, &(0x7f0000000a80)=0xb0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) kernel console output (not intermixed with test programs): 3104][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.748907][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.787944][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.829598][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1502'. [ 304.839398][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1502'. [ 304.890121][ T55] Bluetooth: hci2: command tx timeout [ 304.910705][ T3457] veth1_macvtap: left promiscuous mode [ 304.916882][ T3457] veth0_macvtap: left promiscuous mode [ 304.926917][ T3457] veth1_vlan: left promiscuous mode [ 304.932464][ T3457] veth0_vlan: left promiscuous mode [ 305.205579][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.621975][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 305.677098][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 306.219730][T11509] vlan0: entered promiscuous mode [ 306.245508][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.398747][T11525] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1508'. [ 306.409607][T11525] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1508'. [ 306.732936][T11464] chnl_net:caif_netlink_parms(): no params data found [ 306.771423][T11545] veth1_to_bond: entered promiscuous mode [ 306.787576][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1516'. [ 306.965783][ T55] Bluetooth: hci2: command tx timeout [ 307.165899][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 307.262734][T11464] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.271799][T11464] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.279293][T11464] bridge_slave_0: entered allmulticast mode [ 307.286879][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.297732][T11464] bridge_slave_0: entered promiscuous mode [ 307.326981][T11464] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.334225][T11464] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.352171][T11464] bridge_slave_1: entered allmulticast mode [ 307.419343][T11464] bridge_slave_1: entered promiscuous mode [ 307.810091][T11464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.907654][T11464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.150642][T11464] team0: Port device team_slave_0 added [ 308.217378][T11464] team0: Port device team_slave_1 added [ 308.239309][T11585] xt_CT: No such helper "netbios-ns" [ 308.307708][T11593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.325432][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.433894][T11464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.483972][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.525426][T11464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.571126][T11464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.581547][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.618852][T11464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.843000][ T6988] IPVS: starting estimator thread 0... [ 308.939271][T11464] hsr_slave_0: entered promiscuous mode [ 308.945956][T11617] IPVS: using max 28 ests per chain, 67200 per kthread [ 308.976835][T11464] hsr_slave_1: entered promiscuous mode [ 308.983436][T11464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.048600][T11464] Cannot create hsr debugfs directory [ 309.055384][ T5151] Bluetooth: hci2: command tx timeout [ 309.365423][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.599879][T11636] xt_CT: No such helper "netbios-ns" [ 309.631387][T11645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.405426][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.481379][T11464] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 310.518682][T11464] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 310.575448][T11464] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.591291][T11464] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.798709][T11464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.828591][T11464] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.849443][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.856934][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.947664][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.955102][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.995072][T11647] wg1 speed is unknown, defaulting to 1000 [ 311.017616][T11647] lo speed is unknown, defaulting to 1000 [ 311.125715][ T5151] Bluetooth: hci2: command 0x0419 tx timeout [ 311.350254][T11685] xt_CT: No such helper "netbios-ns" [ 311.360711][T11689] __nla_validate_parse: 2 callbacks suppressed [ 311.360733][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1556'. [ 311.445517][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.477674][T11692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.729384][T11699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.737228][T11699] IPv6: NLM_F_CREATE should be set when creating new route [ 311.744680][T11699] IPv6: NLM_F_CREATE should be set when creating new route [ 311.752033][T11699] IPv6: NLM_F_CREATE should be set when creating new route [ 311.856708][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1559'. [ 311.953567][T11464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.485405][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.633083][T11464] veth0_vlan: entered promiscuous mode [ 312.670893][T11464] veth1_vlan: entered promiscuous mode [ 312.767020][T11464] veth0_macvtap: entered promiscuous mode [ 312.791813][T11464] veth1_macvtap: entered promiscuous mode [ 312.867926][T11464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.929288][T11689] wg1 speed is unknown, defaulting to 1000 [ 312.932602][T11464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.966059][T11464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.975050][T11464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.985143][T11464] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.994459][T11464] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.037227][T11689] lo speed is unknown, defaulting to 1000 [ 313.206038][ T5151] Bluetooth: hci2: command 0x0419 tx timeout [ 313.525467][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.534808][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.543124][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.683079][T11733] xt_CT: No such helper "netbios-ns" [ 313.797232][T11727] netlink: 'syz.7.1566': attribute type 1 has an invalid length. [ 313.808015][T11727] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1566'. [ 314.001392][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.045436][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.565356][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.617033][T11762] netlink: 'syz.7.1575': attribute type 2 has an invalid length. [ 314.717594][ T2914] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.904266][ T2914] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.019694][ T2914] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.129388][ T2914] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.240754][ T2914] bridge_slave_1: left allmulticast mode [ 315.246741][ T2914] bridge_slave_1: left promiscuous mode [ 315.252554][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.262221][ T2914] bridge_slave_0: left allmulticast mode [ 315.268606][ T2914] bridge_slave_0: left promiscuous mode [ 315.274365][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.605436][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.745225][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.762837][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.775105][ T2914] bond0 (unregistering): Released all slaves [ 315.936183][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.952166][T11771] xt_CT: No such helper "netbios-ns" [ 316.252580][T11786] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 316.645424][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.166476][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.176854][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.190555][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.206309][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.236159][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.257593][T11808] netlink: 'syz.5.1586': attribute type 10 has an invalid length. [ 317.377553][T11808] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.393883][T11808] bond0: (slave team0): Enslaving as an active interface with an up link [ 317.600952][T11818] netlink: 'syz.7.1589': attribute type 1 has an invalid length. [ 317.616137][T11820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.692053][T11823] bond2: (slave gretap1): making interface the new active one [ 317.700028][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.709849][T11823] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 317.744440][T11786] wg1 speed is unknown, defaulting to 1000 [ 317.754321][T11786] lo speed is unknown, defaulting to 1000 [ 318.188605][T11829] netlink: 'syz.7.1601': attribute type 4 has an invalid length. [ 318.257286][ T2914] hsr_slave_0: left promiscuous mode [ 318.295459][ T2914] hsr_slave_1: left promiscuous mode [ 318.305468][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.322709][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.339569][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.354912][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.385530][ T2914] veth1_macvtap: left promiscuous mode [ 318.391286][ T2914] veth0_macvtap: left promiscuous mode [ 318.397443][ T2914] veth1_vlan: left promiscuous mode [ 318.402999][ T2914] veth0_vlan: left promiscuous mode [ 318.533221][T11835] xt_CT: No such helper "netbios-ns" [ 318.725462][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.884123][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1595'. [ 319.330586][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 319.380663][ T5151] Bluetooth: hci2: command tx timeout [ 319.390972][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 319.765363][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.902004][T11831] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.918048][T11802] wg1 speed is unknown, defaulting to 1000 [ 319.950406][T11802] lo speed is unknown, defaulting to 1000 [ 320.034534][T11831] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.196431][T11831] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.342409][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1598'. [ 320.391292][T11858] smc: net device bond0 applied user defined pnetid SYZ [ 320.440197][T11831] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.728171][T11844] wg1 speed is unknown, defaulting to 1000 [ 320.773754][T11844] lo speed is unknown, defaulting to 1000 [ 320.805348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.837063][T11831] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.900749][T11831] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.941681][T11879] xt_CT: No such helper "netbios-ns" [ 321.019517][T11831] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.030316][T11802] chnl_net:caif_netlink_parms(): no params data found [ 321.100312][T11831] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.347294][T11899] xt_ecn: cannot match TCP bits for non-tcp packets [ 321.372611][T11899] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.457060][ T5151] Bluetooth: hci2: command tx timeout [ 321.590734][T11802] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.608123][T11802] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.616237][T11802] bridge_slave_0: entered allmulticast mode [ 321.636413][T11802] bridge_slave_0: entered promiscuous mode [ 321.658818][T11905] tipc: Enabling of bearer rejected, failed to enable media [ 321.670608][T11802] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.685159][T11802] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.707993][T11802] bridge_slave_1: entered allmulticast mode [ 321.729064][T11802] bridge_slave_1: entered promiscuous mode [ 321.845356][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.854769][T11802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.874617][T11802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.017031][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 322.056720][T11802] team0: Port device team_slave_0 added [ 322.099608][T11802] team0: Port device team_slave_1 added [ 322.234630][T11802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.247978][T11921] xt_CT: No such helper "netbios-ns" [ 322.253826][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.291663][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1620'. [ 322.340444][T11802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.403713][T11802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.420619][T11908] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 322.428930][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.494102][T11802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.517783][T11934] macvlan0: entered allmulticast mode [ 322.523392][T11934] team0: Device macvlan0 is already an upper device of the team interface [ 322.633865][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1627'. [ 322.648514][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1627'. [ 322.660511][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1627'. [ 322.671049][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1627'. [ 322.722733][T11946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.812261][T11802] hsr_slave_0: entered promiscuous mode [ 322.821446][T11802] hsr_slave_1: entered promiscuous mode [ 322.834265][T11802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.844523][T11802] Cannot create hsr debugfs directory [ 322.882285][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1629'. [ 322.885382][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.083026][T11960] xt_CT: No such helper "netbios-ns" [ 323.148867][T11968] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1633'. [ 323.525848][ T5151] Bluetooth: hci2: command tx timeout [ 323.605801][ T5151] Bluetooth: hci4: command 0x0405 tx timeout [ 323.619651][T11987] sctp: [Deprecated]: syz.3.1638 (pid 11987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.619651][T11987] Use struct sctp_sack_info instead [ 323.925471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.936713][T11987] __nla_validate_parse: 2 callbacks suppressed [ 323.936739][T11987] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.1638'. [ 323.994419][T11996] xt_CT: No such helper "netbios-ns" [ 324.067697][T11993] IPVS: stopping backup sync thread 11361 ... [ 324.201992][T12005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.211189][T12005] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.236529][T12005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.411117][ T7352] lo speed is unknown, defaulting to 1000 [ 324.421613][ T7352] s›z0: Port: 1 Link ACTIVE [ 324.458515][T12019] netlink: 'syz.7.1653': attribute type 1 has an invalid length. [ 324.694967][T11802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.708080][T11802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.718514][T12012] wg1 speed is unknown, defaulting to 1000 [ 324.726349][T12012] lo speed is unknown, defaulting to 1000 [ 324.795424][T11802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.807884][T11802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.965468][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.005156][T12034] xt_CT: No such helper "netbios-ns" [ 325.282728][T11802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.311238][T12050] netlink: 'syz.3.1663': attribute type 15 has an invalid length. [ 325.336408][T11802] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.360237][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.367661][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.409029][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.416362][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.609530][ T5151] Bluetooth: hci2: command tx timeout [ 325.791109][T11802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.888776][T12068] x_tables: duplicate underflow at hook 1 [ 326.005406][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.068830][T12073] xt_CT: No such helper "netbios-ns" [ 326.571743][T12085] syzkaller0: entered promiscuous mode [ 326.577761][T12085] syzkaller0: entered allmulticast mode [ 326.599229][T12053] wg1 speed is unknown, defaulting to 1000 [ 326.664809][T11802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.684145][T12053] lo speed is unknown, defaulting to 1000 [ 327.045819][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.088535][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.125351][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.245127][T12118] xt_CT: No such helper "netbios-ns" [ 329.460387][T12134] netlink: 'syz.5.1687': attribute type 32 has an invalid length. [ 329.510023][T12137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.727683][T12137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.810696][T11802] veth0_vlan: entered promiscuous mode [ 329.842304][T11802] veth1_vlan: entered promiscuous mode [ 329.857875][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1694'. [ 329.948547][T11802] veth0_macvtap: entered promiscuous mode [ 329.998471][T11802] veth1_macvtap: entered promiscuous mode [ 330.066636][T11802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.126406][T12162] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 330.134251][T11802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.150994][T11802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.160621][T11802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.169655][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.184138][T11802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.193112][T11802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.331607][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 330.384166][T12167] xt_CT: No such helper "netbios-ns" [ 330.501420][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.531527][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.632365][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.662423][T12177] nbd: device at index 7 is going down [ 330.670421][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.753857][T12181] netlink: 'syz.7.1701': attribute type 10 has an invalid length. [ 330.799188][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1701'. [ 330.806909][T12181] team0: Device ipvlan1 failed to register rx_handler [ 330.809707][T12177] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1701'. [ 330.871904][T12186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1703'. [ 330.983091][T12177] vlan2: entered allmulticast mode [ 331.051483][T12177] syz_tun: entered allmulticast mode [ 331.148014][T12165] wg1 speed is unknown, defaulting to 1000 [ 331.157685][T12165] lo speed is unknown, defaulting to 1000 [ 331.205374][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.683213][T12193] wg1 speed is unknown, defaulting to 1000 [ 331.809392][T12193] lo speed is unknown, defaulting to 1000 [ 331.902985][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1706'. [ 332.197343][ T2914] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.245344][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.332081][ T2914] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.589138][ T2914] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.665791][ T2914] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.783417][ T2914] bridge_slave_1: left allmulticast mode [ 332.789530][ T2914] bridge_slave_1: left promiscuous mode [ 332.795497][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.805107][ T2914] bridge_slave_0: left allmulticast mode [ 332.812309][ T2914] bridge_slave_0: left promiscuous mode [ 332.819219][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.285331][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.455873][T12209] xt_CT: No such helper "netbios-ns" [ 333.680607][T12226] netlink: 'syz.8.1713': attribute type 1 has an invalid length. [ 333.783430][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 333.956903][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.973271][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.995189][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.012341][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.025137][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.025520][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.054461][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.069214][ T2914] bond0 (unregistering): Released all slaves [ 334.092153][T12225] netlink: 'syz.5.1716': attribute type 2 has an invalid length. [ 334.115132][T12232] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 334.325359][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.398776][T12255] netlink: 'syz.8.1721': attribute type 5 has an invalid length. [ 334.706367][T12259] xt_CT: No such helper "netbios-ns" [ 334.848910][T12240] wg1 speed is unknown, defaulting to 1000 [ 334.858011][T12240] lo speed is unknown, defaulting to 1000 [ 335.051402][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 335.109498][T12278] pimreg: entered allmulticast mode [ 335.177889][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1731'. [ 335.201370][T12282] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1730'. [ 335.365480][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.503163][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1734'. [ 335.515920][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1734'. [ 335.533192][T12300] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 335.623840][T12298] pimreg: left allmulticast mode [ 335.677066][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 335.726308][ T2914] hsr_slave_0: left promiscuous mode [ 335.733428][ T2914] hsr_slave_1: left promiscuous mode [ 335.743957][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.753418][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.762054][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.770024][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.820429][ T2914] veth1_macvtap: left promiscuous mode [ 335.826451][ T2914] veth0_macvtap: left promiscuous mode [ 335.832528][ T2914] veth1_vlan: left promiscuous mode [ 335.838740][ T2914] veth0_vlan: left promiscuous mode [ 336.085962][ T5847] Bluetooth: hci2: command tx timeout [ 336.405530][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.462807][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 336.518675][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 336.640109][T12318] xt_CT: No such helper "netbios-ns" [ 336.882412][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1741'. [ 337.381498][T12337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 337.445361][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.518523][T12346] sock: sock_timestamping_bind_phc: sock not bind to device [ 337.924478][T12240] chnl_net:caif_netlink_parms(): no params data found [ 337.947713][T12356] xt_CT: No such helper "netbios-ns" [ 338.049835][T12358] syzkaller1: entered promiscuous mode [ 338.065592][T12358] syzkaller1: entered allmulticast mode [ 338.099992][T12366] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 338.108344][T12366] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1751'. [ 338.166090][ T5847] Bluetooth: hci2: command 0x041b tx timeout [ 338.341224][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.349034][T12240] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.356768][T12240] bridge_slave_0: entered allmulticast mode [ 338.364965][T12240] bridge_slave_0: entered promiscuous mode [ 338.384996][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.396123][T12240] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.403727][T12240] bridge_slave_1: entered allmulticast mode [ 338.412050][T12240] bridge_slave_1: entered promiscuous mode [ 338.485358][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.516783][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.561527][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.637163][T12382] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1755'. [ 338.689171][T12384] netlink: 'syz.5.1758': attribute type 1 has an invalid length. [ 338.697370][T12384] netlink: 'syz.5.1758': attribute type 2 has an invalid length. [ 338.995783][T12391] wireguard0: entered promiscuous mode [ 339.016084][T12391] wireguard0: entered allmulticast mode [ 339.187967][T12401] xt_CT: No such helper "netbios-ns" [ 339.253207][T12405] netlink: 'syz.5.1762': attribute type 1 has an invalid length. [ 339.254401][T12240] team0: Port device team_slave_0 added [ 339.264338][T12405] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1762'. [ 339.293388][T12240] team0: Port device team_slave_1 added [ 339.317165][T12370] wg1 speed is unknown, defaulting to 1000 [ 339.525363][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.555644][T12370] lo speed is unknown, defaulting to 1000 [ 339.568818][T12240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.585537][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.700739][T12240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.926630][T12240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.953457][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.074542][T12240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.215414][T12439] vlan0: entered promiscuous mode [ 340.220775][T12439] bond0: entered promiscuous mode [ 340.226605][T12439] bond_slave_0: entered promiscuous mode [ 340.232922][T12439] bond_slave_1: entered promiscuous mode [ 340.239142][T12439] bridge0: entered promiscuous mode [ 340.244887][T12439] team0: entered promiscuous mode [ 340.250382][ T5847] Bluetooth: hci2: command 0x041b tx timeout [ 340.257180][T12439] team_slave_0: entered promiscuous mode [ 340.263188][T12439] team_slave_1: entered promiscuous mode [ 340.270144][T12439] vxlan0: entered promiscuous mode [ 340.276982][T12439] bond0: (slave vlan0): Opening slave failed [ 340.300499][T12441] xt_CT: No such helper "netbios-ns" [ 340.389182][T12445] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1773'. [ 340.461315][T12240] hsr_slave_0: entered promiscuous mode [ 340.483056][T12240] hsr_slave_1: entered promiscuous mode [ 340.499041][T12240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.511886][T12240] Cannot create hsr debugfs directory [ 340.550820][T12454] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1774'. [ 340.565465][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.605335][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.931300][T12489] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1786'. [ 341.976705][T12485] xt_CT: No such helper "netbios-ns" [ 342.250933][ T2914] bond2: left allmulticast mode [ 342.260165][ T2914] bond2: left promiscuous mode [ 342.265300][ T2914] bridge0: port 3(bond2) entered disabled state [ 342.287352][ T2914] bridge_slave_1: left allmulticast mode [ 342.304525][ T2914] bridge_slave_1: left promiscuous mode [ 342.316437][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.326667][ T5847] Bluetooth: hci2: command 0x041b tx timeout [ 342.426548][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.447247][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.459399][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.467841][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.479536][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.519304][ T2914] bridge_slave_0: left allmulticast mode [ 342.525021][ T2914] bridge_slave_0: left promiscuous mode [ 342.568915][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.639263][T12509] netlink: 'syz.7.1791': attribute type 1 has an invalid length. [ 342.647768][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.953025][ T2914] dvmrp0 (unregistering): left allmulticast mode [ 343.044087][ T2914] vxlan0 (unregistering): left promiscuous mode [ 343.061840][ T2914] team0: Port device vxlan0 removed [ 343.103064][ T2914] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 343.113380][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 343.130073][ T2914] bridge0 (unregistering): left promiscuous mode [ 343.242668][T12529] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1797'. [ 343.400221][T12532] xt_CT: No such helper "netbios-ns" [ 343.691155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.792935][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.803064][ T2914] bond_slave_0: left promiscuous mode [ 343.810438][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.820336][ T2914] bond_slave_1: left promiscuous mode [ 343.827927][ T2914] bond0 (unregistering): (slave team0): Releasing backup interface [ 343.838732][ T2914] team0: left promiscuous mode [ 343.843562][ T2914] team_slave_0: left promiscuous mode [ 343.850331][ T2914] team_slave_1: left promiscuous mode [ 343.859258][ T2914] bond0 (unregistering): Released all slaves [ 343.874475][ T2914] bond1 (unregistering): Released all slaves [ 344.070111][ T2914] bond2 (unregistering): Released all slaves [ 344.088219][ T2914] bond3 (unregistering): Released all slaves [ 344.242134][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'. [ 344.280578][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'. [ 344.301898][ T2914] bond4 (unregistering): Released all slaves [ 344.317770][ T2914] bond5 (unregistering): Released all slaves [ 344.336008][ T2914] bond6 (unregistering): Released all slaves [ 344.368509][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1799'. [ 344.416604][ T5847] Bluetooth: hci2: command 0x041b tx timeout [ 344.484558][T12240] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.565495][ T5847] Bluetooth: hci1: command tx timeout [ 344.619068][ T2914] : left promiscuous mode [ 344.696001][T12240] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.718684][ T2914] tipc: Left network mode [ 344.722286][T12240] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.732991][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.789390][T12240] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.851134][T12504] wg1 speed is unknown, defaulting to 1000 [ 344.925605][T12504] lo speed is unknown, defaulting to 1000 [ 345.426953][T12550] wg1 speed is unknown, defaulting to 1000 [ 345.539624][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.572509][T12550] lo speed is unknown, defaulting to 1000 [ 345.745027][ T2914] hsr_slave_0: left promiscuous mode [ 345.759962][ T2914] hsr_slave_1: left promiscuous mode [ 345.760602][T12576] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1808'. [ 345.775376][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.785779][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.795166][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.891228][T12579] xt_CT: No such helper "netbios-ns" [ 346.486967][ T5151] Bluetooth: hci2: command 0x041b tx timeout [ 346.619981][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 346.646865][ T5151] Bluetooth: hci1: command tx timeout [ 346.707426][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 346.809641][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.170417][T12240] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.191554][T12596] netlink: 'syz.7.1814': attribute type 4 has an invalid length. [ 347.207363][T12504] chnl_net:caif_netlink_parms(): no params data found [ 347.268661][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.275938][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.297238][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.304481][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.322118][T12598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1815'. [ 347.331723][T12598] netlink: 'syz.3.1815': attribute type 1 has an invalid length. [ 347.376518][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1815'. [ 347.404301][T12598] netlink: 'syz.3.1815': attribute type 16 has an invalid length. [ 347.415467][T12598] netlink: 'syz.3.1815': attribute type 17 has an invalid length. [ 347.533071][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 347.553770][T12598] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.563094][T12598] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.571873][T12598] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.580680][T12598] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.599618][T12598] batman_adv: batadv0: Interface deactivated: macvlan0 [ 347.730462][ T2914] IPVS: stop unused estimator thread 0... [ 347.855319][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.906158][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.915512][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.923035][T12504] bridge_slave_0: entered allmulticast mode [ 347.942073][T12504] bridge_slave_0: entered promiscuous mode [ 347.974942][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.991560][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.026573][T12504] bridge_slave_1: entered allmulticast mode [ 348.033994][T12504] bridge_slave_1: entered promiscuous mode [ 348.053916][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 348.154700][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.179839][T12618] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1820'. [ 348.191903][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.349930][T12504] team0: Port device team_slave_0 added [ 348.384847][T12621] xt_CT: No such helper "netbios-ns" [ 348.391913][T12504] team0: Port device team_slave_1 added [ 348.481761][T12240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.537492][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.547989][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.575873][ T5151] Bluetooth: hci2: command 0x041b tx timeout [ 348.582120][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.649241][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.657065][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.688104][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.741051][ T5151] Bluetooth: hci1: command 0x040f tx timeout [ 348.883637][T12504] hsr_slave_0: entered promiscuous mode [ 348.889427][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.920752][T12504] hsr_slave_1: entered promiscuous mode [ 348.934453][T12504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.948415][T12504] Cannot create hsr debugfs directory [ 349.199687][T12651] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1828'. [ 349.230761][T12655] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1827'. [ 349.401177][T12240] veth0_vlan: entered promiscuous mode [ 349.461831][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 349.471379][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1829'. [ 349.472306][T12240] veth1_vlan: entered promiscuous mode [ 349.598914][T12240] veth0_macvtap: entered promiscuous mode [ 349.645762][T12240] veth1_macvtap: entered promiscuous mode [ 349.673460][T12240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.707136][T12240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.721563][T12240] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.731807][T12240] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.743105][T12240] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.753625][T12240] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.782286][T12667] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.791374][T12667] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.800358][T12667] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.808790][T12667] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.863957][T12667] batadv_slave_0: entered promiscuous mode [ 349.925506][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.024330][T12504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.045792][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.064658][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.074597][T12504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.104727][T12504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.127783][T12504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.161883][T12671] xt_CT: No such helper "netbios-ns" [ 350.165074][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.191625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.374904][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.474406][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.488196][T12664] batadv_slave_0: left promiscuous mode [ 350.520538][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.528143][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.568937][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.576212][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.732886][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.810078][ T5151] Bluetooth: hci1: command 0x040f tx timeout [ 350.965344][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.979969][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.031180][T12683] __nla_validate_parse: 3 callbacks suppressed [ 351.031202][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1836'. [ 351.153491][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.347536][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.377097][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.542604][ T36] bridge_slave_1: left allmulticast mode [ 351.554475][ T36] bridge_slave_1: left promiscuous mode [ 351.560954][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.581591][ T36] bridge_slave_0: left allmulticast mode [ 351.592856][ T36] bridge_slave_0: left promiscuous mode [ 351.599153][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.001819][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.014248][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.022910][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.033169][ T36] bond0 (unregistering): Released all slaves [ 352.114702][T12504] veth0_vlan: entered promiscuous mode [ 352.142789][T12504] veth1_vlan: entered promiscuous mode [ 352.327826][T12704] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1838'. [ 352.339032][T12704] geneve1: entered promiscuous mode [ 352.344616][T12704] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1838'. [ 352.383841][T12504] veth0_macvtap: entered promiscuous mode [ 352.493349][T12504] veth1_macvtap: entered promiscuous mode [ 352.577475][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.611570][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.626773][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.657845][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.689128][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.727844][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.748248][T12504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.771779][T12504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.796018][T12504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.812785][T12504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.864480][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.875918][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.884809][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.903970][ T55] Bluetooth: hci1: command 0x040f tx timeout [ 352.918632][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.935642][ T36] hsr_slave_0: left promiscuous mode [ 352.935920][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.949872][ T36] hsr_slave_1: left promiscuous mode [ 352.986964][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.994468][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.029988][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.045641][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.053086][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.098251][ T36] veth1_macvtap: left promiscuous mode [ 353.114914][ T36] veth0_macvtap: left promiscuous mode [ 353.131720][ T36] veth1_vlan: left promiscuous mode [ 353.148110][ T36] veth0_vlan: left promiscuous mode [ 353.232087][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1844'. [ 353.255048][T12726] netlink: 248 bytes leftover after parsing attributes in process `syz.7.1843'. [ 353.565199][T12733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1848'. [ 353.574978][T12733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1848'. [ 353.999164][ T36] team0 (unregistering): Port device team_slave_1 removed [ 354.053916][ T36] team0 (unregistering): Port device team_slave_0 removed [ 354.097915][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.633551][T12724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.732522][T12741] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1850'. [ 354.775719][T12741] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1850'. [ 354.816952][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1850'. [ 354.989333][ T5847] Bluetooth: hci1: command 0x040f tx timeout [ 355.023650][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.042993][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.051380][ T5847] Bluetooth: hci2: command tx timeout [ 355.125502][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.196138][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.202218][T12714] lo speed is unknown, defaulting to 1000 [ 355.222619][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.239917][T12752] xt_CT: No such helper "pptp" [ 355.609733][T12761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.693890][T12714] chnl_net:caif_netlink_parms(): no params data found [ 355.934245][ T5962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.141450][ T5962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.165357][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.214798][T12778] __nla_validate_parse: 5 callbacks suppressed [ 356.214819][T12778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1859'. [ 356.228539][T12779] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1858'. [ 356.413264][ T5962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.482741][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.505512][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.512801][T12714] bridge_slave_0: entered allmulticast mode [ 356.526213][T12714] bridge_slave_0: entered promiscuous mode [ 356.537286][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.546534][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.555537][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.564544][T12714] bridge_slave_1: entered allmulticast mode [ 356.565795][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.576488][T12714] bridge_slave_1: entered promiscuous mode [ 356.585099][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.595717][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.608011][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.664316][ T5962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.723419][T12714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.743114][T12714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.800692][T12714] team0: Port device team_slave_0 added [ 356.823740][T12714] team0: Port device team_slave_1 added [ 356.917858][T12714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.929016][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.967394][T12714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.020714][T12714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.034610][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.102060][T12714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.138791][ T5847] Bluetooth: hci2: command tx timeout [ 357.205355][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.221915][T12798] netlink: 'syz.7.1863': attribute type 4 has an invalid length. [ 357.232997][T12799] netlink: 'syz.7.1863': attribute type 4 has an invalid length. [ 357.302520][T12803] xt_HMARK: proto mask must be zero with L3 mode [ 357.318690][T12789] lo speed is unknown, defaulting to 1000 [ 357.371586][T12714] hsr_slave_0: entered promiscuous mode [ 357.392608][T12714] hsr_slave_1: entered promiscuous mode [ 357.417536][T12714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.442886][T12714] Cannot create hsr debugfs directory [ 357.451313][ T5962] bridge_slave_1: left allmulticast mode [ 357.478562][ T5962] bridge_slave_1: left promiscuous mode [ 357.484516][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.514975][ T5962] bridge_slave_0: left allmulticast mode [ 357.526431][ T5962] bridge_slave_0: left promiscuous mode [ 357.534444][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.245717][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.310184][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.323975][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.337937][ T5962] bond0 (unregistering): Released all slaves [ 358.375095][T12806] batman_adv: batadv0: Removing interface: ipvlan2 [ 358.391830][T12806] bond2: (slave gretap1): Releasing active interface [ 358.616598][T12826] netlink: 248 bytes leftover after parsing attributes in process `syz.8.1868'. [ 358.646905][ T5847] Bluetooth: hci1: command tx timeout [ 358.998400][T12838] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1873'. [ 359.206698][ T5847] Bluetooth: hci2: command tx timeout [ 359.295453][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.453622][T12817] lo speed is unknown, defaulting to 1000 [ 359.572176][T12814] lo speed is unknown, defaulting to 1000 [ 359.634043][T12789] chnl_net:caif_netlink_parms(): no params data found [ 359.794508][ T5962] hsr_slave_0: left promiscuous mode [ 359.845921][ T5962] hsr_slave_1: left promiscuous mode [ 359.852627][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.860853][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.878592][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.886993][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.927873][ T5962] veth1_macvtap: left promiscuous mode [ 359.933683][ T5962] veth0_macvtap: left promiscuous mode [ 359.939627][ T5962] veth1_vlan: left promiscuous mode [ 359.945006][ T5962] veth0_vlan: left promiscuous mode [ 360.337348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.559784][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 360.567748][T12857] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1876'. [ 360.624881][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 360.725795][ T5847] Bluetooth: hci1: command tx timeout [ 361.285964][ T5847] Bluetooth: hci2: command tx timeout [ 361.365622][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.396791][T12860] tipc: Enabling of bearer rejected, failed to enable media [ 361.469912][T12866] netlink: 'syz.8.1877': attribute type 3 has an invalid length. [ 361.478998][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'. [ 361.587306][T12870] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1878'. [ 361.736717][T12714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.777865][T12714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.908277][T12789] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.926067][T12789] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.933401][T12789] bridge_slave_0: entered allmulticast mode [ 361.971896][T12789] bridge_slave_0: entered promiscuous mode [ 361.987336][T12714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.006008][T12714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.034159][T12789] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.046378][T12789] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.064617][T12789] bridge_slave_1: entered allmulticast mode [ 362.073680][T12789] bridge_slave_1: entered promiscuous mode [ 362.212184][T12857] lo speed is unknown, defaulting to 1000 [ 362.405934][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.437795][T12789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.533327][T12789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.574826][T12888] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1881'. [ 362.662820][T12789] team0: Port device team_slave_0 added [ 362.710793][T12789] team0: Port device team_slave_1 added [ 362.805492][ T5847] Bluetooth: hci1: command tx timeout [ 362.822236][T12789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.838299][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.879333][T12789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.903965][T12895] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1884'. [ 362.921981][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1884'. [ 362.933049][T12789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.951803][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.986168][T12789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.121766][T12789] hsr_slave_0: entered promiscuous mode [ 363.131034][T12789] hsr_slave_1: entered promiscuous mode [ 363.140515][T12789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.150861][T12789] Cannot create hsr debugfs directory [ 363.199714][T12899] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1885'. [ 363.455426][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.555794][T12714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.603816][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 363.692124][T12714] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.714289][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.721919][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.762667][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.770106][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.990855][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1890'. [ 364.011012][T12917] openvswitch: netlink: nsh attr 12 is out of range max 3 [ 364.051056][T12917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.179701][T12789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.203094][T12924] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1892'. [ 364.219172][T12789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.261237][T12789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.298591][T12789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.427221][T12714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.485376][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.518327][T12935] vlan0: entered promiscuous mode [ 364.671204][T12789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.756796][T12945] netpci0: tun_chr_ioctl cmd 1074025672 [ 364.762540][T12945] netpci0: ignored: set checksum disabled [ 364.793235][T12940] netpci0: tun_chr_ioctl cmd 35108 [ 364.810674][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1897'. [ 364.838850][T12789] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.863526][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.870803][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.885642][ T5847] Bluetooth: hci1: command tx timeout [ 364.914968][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.922282][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.153940][T12714] veth0_vlan: entered promiscuous mode [ 365.211717][T12714] veth1_vlan: entered promiscuous mode [ 365.272941][T12958] netpci0: tun_chr_ioctl cmd 1074025672 [ 365.280798][T12958] netpci0: ignored: set checksum disabled [ 365.300628][T12958] netpci0: tun_chr_ioctl cmd 35108 [ 365.416084][T12714] veth0_macvtap: entered promiscuous mode [ 365.443680][T12714] veth1_macvtap: entered promiscuous mode [ 365.505878][T12714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.525485][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.543479][T12714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.582647][T12714] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.593168][T12714] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.602823][T12714] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.613896][T12714] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.669429][T12789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.814190][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.835184][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.883160][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.894532][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.273049][T12789] veth0_vlan: entered promiscuous mode [ 366.300053][T12789] veth1_vlan: entered promiscuous mode [ 366.383963][T12789] veth0_macvtap: entered promiscuous mode [ 366.423036][T12789] veth1_macvtap: entered promiscuous mode [ 366.470514][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.495304][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.507858][T12789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.532955][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.545183][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.565475][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.579940][T12789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.633482][T13006] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 366.720332][ T5962] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.803428][T12789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.826574][T12789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.845881][T12789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.855072][T12789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.971432][ T5962] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.068611][ T5962] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.156049][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.164005][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.194862][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.203732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.251508][ T5962] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.485001][ T5962] bridge_slave_1: left allmulticast mode [ 367.491807][ T5962] bridge_slave_1: left promiscuous mode [ 367.498274][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.509027][ T5962] bridge_slave_0: left allmulticast mode [ 367.514886][ T5962] bridge_slave_0: left promiscuous mode [ 367.521648][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.622501][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.243376][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.274361][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.297168][ T5962] bond0 (unregistering): Released all slaves [ 368.369495][T13013] vlan0: entered promiscuous mode [ 368.438890][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.457969][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.468257][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.500921][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.509195][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.645334][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.753745][T13028] netpci0: tun_chr_ioctl cmd 1074025672 [ 368.769750][T13028] netpci0: ignored: set checksum disabled [ 368.779641][T13022] netpci0: tun_chr_ioctl cmd 35108 [ 368.787819][T13018] __nla_validate_parse: 2 callbacks suppressed [ 368.787842][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1912'. [ 368.805184][T13033] netlink: 'syz.7.1914': attribute type 1 has an invalid length. [ 368.999472][T13033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.086425][T13036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.097542][T13036] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 369.129566][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.140246][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.153928][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.163198][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.172194][T13036] bond3: (slave vcan1): Error -95 calling set_mac_address [ 369.180658][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.423242][T13049] FAULT_INJECTION: forcing a failure. [ 369.423242][T13049] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 369.487587][T13049] CPU: 0 UID: 0 PID: 13049 Comm: syz.3.1915 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 369.487619][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.487641][T13049] Call Trace: [ 369.487650][T13049] [ 369.487660][T13049] dump_stack_lvl+0x189/0x250 [ 369.487697][T13049] ? __lock_acquire+0xaac/0xd20 [ 369.487731][T13049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.487759][T13049] ? __pfx__printk+0x10/0x10 [ 369.487780][T13049] ? __might_fault+0xb0/0x130 [ 369.487821][T13049] should_fail_ex+0x414/0x560 [ 369.487861][T13049] _copy_from_user+0x2d/0xb0 [ 369.487889][T13049] __sys_bpf+0x1ed/0x860 [ 369.487919][T13049] ? __pfx___sys_bpf+0x10/0x10 [ 369.487960][T13049] ? ksys_write+0x1f0/0x250 [ 369.487997][T13049] __x64_sys_bpf+0x7c/0x90 [ 369.488021][T13049] do_syscall_64+0xf6/0x210 [ 369.488049][T13049] ? clear_bhb_loop+0x45/0xa0 [ 369.488074][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.488094][T13049] RIP: 0033:0x7fcec678e969 [ 369.488113][T13049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.488130][T13049] RSP: 002b:00007fcec754b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.488151][T13049] RAX: ffffffffffffffda RBX: 00007fcec69b5fa0 RCX: 00007fcec678e969 [ 369.488167][T13049] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 369.488180][T13049] RBP: 00007fcec754b090 R08: 0000000000000000 R09: 0000000000000000 [ 369.488193][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.488206][T13049] R13: 0000000000000001 R14: 00007fcec69b5fa0 R15: 00007ffe8d888308 [ 369.488238][T13049] [ 369.499889][T13051] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1916'. [ 369.685414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.814503][T13057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1917'. [ 369.987971][T13064] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.133562][T13019] lo speed is unknown, defaulting to 1000 [ 370.160575][T13031] lo speed is unknown, defaulting to 1000 [ 370.223075][T13046] lo speed is unknown, defaulting to 1000 [ 370.408095][ T5962] hsr_slave_0: left promiscuous mode [ 370.414359][ T5962] hsr_slave_1: left promiscuous mode [ 370.426595][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.434344][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.448948][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.457160][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.482136][ T5962] veth1_macvtap: left promiscuous mode [ 370.488887][ T5962] veth0_macvtap: left promiscuous mode [ 370.494616][ T5962] veth1_vlan: left promiscuous mode [ 370.500098][ T5962] veth0_vlan: left promiscuous mode [ 370.565796][ T5847] Bluetooth: hci1: command tx timeout [ 370.731523][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.077532][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'. [ 371.264248][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 371.290485][ T5847] Bluetooth: hci2: command tx timeout [ 371.335930][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 371.775333][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.984056][T13084] vlan2: entered promiscuous mode [ 372.427767][T13093] geneve4: entered promiscuous mode [ 372.433042][T13093] geneve4: entered allmulticast mode [ 372.440199][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 372.452040][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1926'. [ 372.645516][ T5847] Bluetooth: hci1: command tx timeout [ 372.681264][T13102] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1928'. [ 372.721346][T13019] chnl_net:caif_netlink_parms(): no params data found [ 372.730198][T13104] FAULT_INJECTION: forcing a failure. [ 372.730198][T13104] name failslab, interval 1, probability 0, space 0, times 0 [ 372.754433][T13106] netlink: 'syz.8.1929': attribute type 10 has an invalid length. [ 372.785728][T13104] CPU: 1 UID: 0 PID: 13104 Comm: syz.3.1927 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 372.785763][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 372.785776][T13104] Call Trace: [ 372.785785][T13104] [ 372.785794][T13104] dump_stack_lvl+0x189/0x250 [ 372.785836][T13104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.785865][T13104] ? __pfx__printk+0x10/0x10 [ 372.785893][T13104] ? __pfx___might_resched+0x10/0x10 [ 372.785910][T13104] ? fs_reclaim_acquire+0x7d/0x100 [ 372.785946][T13104] should_fail_ex+0x414/0x560 [ 372.785984][T13104] should_failslab+0xa8/0x100 [ 372.786013][T13104] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 372.786041][T13104] ? __get_vm_area_node+0x131/0x2d0 [ 372.786073][T13104] __get_vm_area_node+0x131/0x2d0 [ 372.786104][T13104] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 372.786134][T13104] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 372.786284][T13104] ? aa_get_newest_label+0xf7/0x5d0 [ 372.786319][T13104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.786351][T13104] ? _parse_integer_limit+0x1ae/0x1f0 [ 372.786374][T13104] ? rcu_is_watching+0x15/0xb0 [ 372.786406][T13104] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 372.786430][T13104] __vmalloc_noprof+0x7a/0x90 [ 372.786458][T13104] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 372.786483][T13104] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 372.786514][T13104] bpf_prog_alloc+0x3c/0x1a0 [ 372.786543][T13104] bpf_prog_load+0x735/0x1930 [ 372.786577][T13104] ? __lock_acquire+0xaac/0xd20 [ 372.786608][T13104] ? __pfx_bpf_prog_load+0x10/0x10 [ 372.786658][T13104] ? bpf_lsm_bpf+0x9/0x20 [ 372.786683][T13104] ? security_bpf+0x7e/0x300 [ 372.786706][T13104] __sys_bpf+0x5f1/0x860 [ 372.786731][T13104] ? __pfx___sys_bpf+0x10/0x10 [ 372.786779][T13104] ? ksys_write+0x1f0/0x250 [ 372.786813][T13104] __x64_sys_bpf+0x7c/0x90 [ 372.786836][T13104] do_syscall_64+0xf6/0x210 [ 372.786865][T13104] ? clear_bhb_loop+0x45/0xa0 [ 372.786888][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.786907][T13104] RIP: 0033:0x7fcec678e969 [ 372.786925][T13104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.786940][T13104] RSP: 002b:00007fcec754b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.786960][T13104] RAX: ffffffffffffffda RBX: 00007fcec69b5fa0 RCX: 00007fcec678e969 [ 372.786972][T13104] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 372.786983][T13104] RBP: 00007fcec754b090 R08: 0000000000000000 R09: 0000000000000000 [ 372.786993][T13104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.787003][T13104] R13: 0000000000000001 R14: 00007fcec69b5fa0 R15: 00007ffe8d888308 [ 372.787029][T13104] [ 372.787048][T13104] warn_alloc: 1 callbacks suppressed [ 372.787060][T13104] syz.3.1927: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 372.810781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.115718][T13104] ,cpuset=/,mems_allowed=0-1 [ 373.121367][T13104] CPU: 0 UID: 0 PID: 13104 Comm: syz.3.1927 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 373.121398][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.121410][T13104] Call Trace: [ 373.121419][T13104] [ 373.121428][T13104] dump_stack_lvl+0x189/0x250 [ 373.121470][T13104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.121499][T13104] ? __pfx__printk+0x10/0x10 [ 373.121520][T13104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.121540][T13104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.121563][T13104] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 373.121585][T13104] warn_alloc+0x214/0x310 [ 373.121622][T13104] ? __pfx_warn_alloc+0x10/0x10 [ 373.121661][T13104] ? __get_vm_area_node+0x27f/0x2d0 [ 373.121695][T13104] __vmalloc_node_range_noprof+0x316/0x12c0 [ 373.121750][T13104] ? aa_get_newest_label+0xf7/0x5d0 [ 373.121774][T13104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 373.121802][T13104] ? _parse_integer_limit+0x1ae/0x1f0 [ 373.121827][T13104] ? rcu_is_watching+0x15/0xb0 [ 373.121861][T13104] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 373.121887][T13104] __vmalloc_noprof+0x7a/0x90 [ 373.121915][T13104] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 373.121941][T13104] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 373.121972][T13104] bpf_prog_alloc+0x3c/0x1a0 [ 373.122000][T13104] bpf_prog_load+0x735/0x1930 [ 373.122034][T13104] ? __lock_acquire+0xaac/0xd20 [ 373.122065][T13104] ? __pfx_bpf_prog_load+0x10/0x10 [ 373.122115][T13104] ? bpf_lsm_bpf+0x9/0x20 [ 373.122148][T13104] ? security_bpf+0x7e/0x300 [ 373.122168][T13104] __sys_bpf+0x5f1/0x860 [ 373.122195][T13104] ? __pfx___sys_bpf+0x10/0x10 [ 373.122233][T13104] ? ksys_write+0x1f0/0x250 [ 373.122268][T13104] __x64_sys_bpf+0x7c/0x90 [ 373.122291][T13104] do_syscall_64+0xf6/0x210 [ 373.122319][T13104] ? clear_bhb_loop+0x45/0xa0 [ 373.122345][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.122365][T13104] RIP: 0033:0x7fcec678e969 [ 373.122386][T13104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.122404][T13104] RSP: 002b:00007fcec754b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.122425][T13104] RAX: ffffffffffffffda RBX: 00007fcec69b5fa0 RCX: 00007fcec678e969 [ 373.122439][T13104] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 373.122452][T13104] RBP: 00007fcec754b090 R08: 0000000000000000 R09: 0000000000000000 [ 373.122464][T13104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.122476][T13104] R13: 0000000000000001 R14: 00007fcec69b5fa0 R15: 00007ffe8d888308 [ 373.122508][T13104] [ 373.122527][T13104] Mem-Info: [ 373.371130][ T5847] Bluetooth: hci2: command tx timeout [ 373.386878][T13104] active_anon:3940 inactive_anon:0 isolated_anon:0 [ 373.386878][T13104] active_file:1869 inactive_file:38459 isolated_file:0 [ 373.386878][T13104] unevictable:768 dirty:40 writeback:0 [ 373.386878][T13104] slab_reclaimable:11407 slab_unreclaimable:116269 [ 373.386878][T13104] mapped:29760 shmem:1419 pagetables:694 [ 373.386878][T13104] sec_pagetables:0 bounce:0 [ 373.386878][T13104] kernel_misc_reclaimable:0 [ 373.386878][T13104] free:1333457 free_pcp:689 free_cma:0 [ 373.455618][T13104] Node 0 active_anon:15760kB inactive_anon:0kB active_file:7476kB inactive_file:153764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119040kB dirty:156kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11056kB pagetables:2676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.489503][T13104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.561614][T13046] chnl_net:caif_netlink_parms(): no params data found [ 373.582405][T13104] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.621748][T13123] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1932'. [ 373.673521][T13104] lowmem_reserve[]: 0 2503 2503 2503 2503 [ 373.691657][T13104] Node 0 DMA32 free:1407072kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:15852kB inactive_anon:0kB active_file:7476kB inactive_file:153672kB unevictable:1536kB writepending:152kB present:3129332kB managed:2563928kB mlocked:0kB bounce:0kB free_pcp:2220kB local_pcp:848kB free_cma:0kB [ 373.726259][T13104] lowmem_reserve[]: 0 0 0 0 0 [ 373.731669][T13104] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 373.761312][T13104] lowmem_reserve[]: 0 0 0 0 0 [ 373.766846][T13104] Node 1 Normal free:3911040kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 373.800357][T13104] lowmem_reserve[]: 0 0 0 0 0 [ 373.815354][T13104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.830179][T13104] Node 0 DMA32: 130*4kB (UME) 151*8kB (ME) 276*16kB (UME) 128*32kB (UME) 401*64kB (UME) 508*128kB (UME) 444*256kB (UME) 319*512kB (UM) 205*1024kB (UM) 14*2048kB (UME) 193*4096kB (UM) = 1407040kB [ 373.850340][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.859603][T13104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 373.873074][T13104] Node 1 Normal: 202*4kB (UME) 57*8kB (UME) 41*16kB (UME) 186*32kB (UME) 85*64kB (UME) 31*128kB (UME) 18*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 946*4096kB (UM) = 3911040kB [ 373.893938][T13104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.905068][T13104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.916195][T13104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.927038][T13104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.937651][ T5962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.949294][T13104] 41747 total pagecache pages [ 373.954169][T13104] 0 pages in swap cache [ 373.958771][T13104] Free swap = 124996kB [ 373.963193][T13104] Total swap = 124996kB [ 373.967791][T13104] 2097051 pages RAM [ 373.972202][T13104] 0 pages HighMem/MovableOnly [ 373.975850][T13019] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.978132][T13104] 424411 pages reserved [ 373.989886][T13104] 0 pages cma reserved [ 373.996702][T13019] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.004024][T13019] bridge_slave_0: entered allmulticast mode [ 374.055161][T13019] bridge_slave_0: entered promiscuous mode [ 374.141730][ T5962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.164307][T13130] xt_CT: No such helper "netbios-ns" [ 374.207883][T13019] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.215207][T13019] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.222894][T13019] bridge_slave_1: entered allmulticast mode [ 374.234271][T13019] bridge_slave_1: entered promiscuous mode [ 374.293101][T13143] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1939'. [ 374.306535][ T5962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.393106][T13019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.489894][T13019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.501263][T13154] netlink: 'syz.8.1941': attribute type 10 has an invalid length. [ 374.537222][T13154] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1941'. [ 374.573120][T13046] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.583474][T13046] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.596944][T13046] bridge_slave_0: entered allmulticast mode [ 374.605063][T13046] bridge_slave_0: entered promiscuous mode [ 374.634862][ T5962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.686954][T13149] netpci0: tun_chr_ioctl cmd 1074025672 [ 374.693052][T13149] netpci0: ignored: set checksum disabled [ 374.707671][T13046] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.711488][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1940'. [ 374.720314][T13046] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.735008][ T5847] Bluetooth: hci1: command tx timeout [ 374.744794][T13046] bridge_slave_1: entered allmulticast mode [ 374.758909][T13046] bridge_slave_1: entered promiscuous mode [ 374.768651][T13155] netpci0: tun_chr_ioctl cmd 35108 [ 374.806688][T13019] team0: Port device team_slave_0 added [ 374.885438][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.095881][T13162] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.112169][T13162] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.122885][T13162] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.137704][T13162] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.163656][T13019] team0: Port device team_slave_1 added [ 375.200186][ T7364] lo speed is unknown, defaulting to 1000 [ 375.213382][ T7364] s›z0: Port: 1 Link DOWN [ 375.219091][T13167] geneve1: left promiscuous mode [ 375.246763][T13167] geneve2: left promiscuous mode [ 375.251875][T13167] geneve2: left allmulticast mode [ 375.275925][T13167] gretap1: left promiscuous mode [ 375.360975][T13046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.445912][ T5847] Bluetooth: hci2: command tx timeout [ 375.486264][T13019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.505901][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.535330][T13019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.571877][T13046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.648840][T13186] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1948'. [ 375.695854][T13019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.715837][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.743573][T13019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.770845][T13184] netlink: 'syz.3.1947': attribute type 10 has an invalid length. [ 375.800963][T13184] bridge_slave_1: entered promiscuous mode [ 375.812200][T13184] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 375.865839][T13191] xt_CT: No such helper "netbios-ns" [ 375.884913][T13046] team0: Port device team_slave_0 added [ 375.917058][T13046] team0: Port device team_slave_1 added [ 375.925572][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.982945][T13196] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1953'. [ 376.050440][T13046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.059242][T13046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.092165][T13046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.146078][ T5962] bridge_slave_1: left allmulticast mode [ 376.155676][ T5962] bridge_slave_1: left promiscuous mode [ 376.161618][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.177878][ T5962] bridge_slave_0: left allmulticast mode [ 376.183587][ T5962] bridge_slave_0: left promiscuous mode [ 376.193370][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.711070][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.722602][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.734422][ T5962] bond0 (unregistering): Released all slaves [ 376.756216][T13046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.763351][T13046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.805619][ T5847] Bluetooth: hci1: command tx timeout [ 376.847959][T13046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.932913][T13019] hsr_slave_0: entered promiscuous mode [ 376.975359][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.983956][T13019] hsr_slave_1: entered promiscuous mode [ 376.990575][T13019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.998731][T13019] Cannot create hsr debugfs directory [ 377.327304][T13194] lo speed is unknown, defaulting to 1000 [ 377.500596][T13046] hsr_slave_0: entered promiscuous mode [ 377.509908][T13046] hsr_slave_1: entered promiscuous mode [ 377.525759][ T5847] Bluetooth: hci2: command tx timeout [ 377.527139][T13046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.549731][T13046] Cannot create hsr debugfs directory [ 377.645531][T13229] IPVS: Error connecting to the multicast addr [ 377.724214][T13235] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1962'. [ 377.819369][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 377.876935][T13222] netpci0: tun_chr_ioctl cmd 1074025672 [ 377.883815][T13222] netpci0: ignored: set checksum disabled [ 377.904186][T13226] netpci0: tun_chr_ioctl cmd 35108 [ 378.005314][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.022637][ T5962] hsr_slave_0: left promiscuous mode [ 378.029791][ T5962] hsr_slave_1: left promiscuous mode [ 378.036416][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.043891][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.052952][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.060600][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.089407][ T5962] veth1_macvtap: left promiscuous mode [ 378.095015][ T5962] veth0_macvtap: left promiscuous mode [ 378.104523][ T5962] veth1_vlan: left promiscuous mode [ 378.112206][ T5962] veth0_vlan: left promiscuous mode [ 378.160423][T13240] xt_CT: No such helper "netbios-ns" [ 378.808093][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 378.866355][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 379.049952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.095344][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.109683][T13270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1971'. [ 380.431842][T13257] lo speed is unknown, defaulting to 1000 [ 380.520808][T13278] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1973'. [ 380.543741][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1972'. [ 380.643384][T13019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.663546][T13019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.709707][T13019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.884358][T13019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.884474][T13286] xt_CT: No such helper "netbios-ns" [ 381.026287][T13290] ipvlan0: entered promiscuous mode [ 381.125329][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.356745][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1979'. [ 381.527374][T13312] netpci0: tun_chr_ioctl cmd 1074025672 [ 381.538941][T13312] netpci0: ignored: set checksum disabled [ 381.569952][T13308] netpci0: tun_chr_ioctl cmd 35108 [ 381.581528][T13316] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1979'. [ 381.594915][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1978'. [ 381.754865][T13046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 381.813261][T13019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.823986][T13046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 381.843152][T13046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.872967][T13046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 381.917645][T13019] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.969364][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.977888][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.011491][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.018877][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.165464][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.173602][T13019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.184426][T13019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.373769][T13046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.424751][T13046] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.495693][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.503091][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.543890][T13348] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1984'. [ 382.574362][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.581735][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.755031][T13019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.946623][T13355] xt_CT: No such helper "netbios-ns" [ 383.215535][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.272498][T13046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.389636][T13387] netpci0: tun_chr_ioctl cmd 1074025672 [ 383.407761][T13387] netpci0: ignored: set checksum disabled [ 383.416268][T13380] netpci0: tun_chr_ioctl cmd 35108 [ 383.422065][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 383.586402][T13019] veth0_vlan: entered promiscuous mode [ 383.608166][T13019] veth1_vlan: entered promiscuous mode [ 383.704303][T13019] veth0_macvtap: entered promiscuous mode [ 383.734847][T13019] veth1_macvtap: entered promiscuous mode [ 383.849560][T13019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.893492][T13019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.927126][T13405] vlan0: entered promiscuous mode [ 383.960436][T13019] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.975901][T13019] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.989349][T13019] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.999906][T13019] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.088526][T13416] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1999'. [ 384.245461][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.318248][T13046] veth0_vlan: entered promiscuous mode [ 384.334219][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.368080][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.382608][T13046] veth1_vlan: entered promiscuous mode [ 384.448229][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.465145][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.478605][T13428] FAULT_INJECTION: forcing a failure. [ 384.478605][T13428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.511111][T13046] veth0_macvtap: entered promiscuous mode [ 384.517505][T13428] CPU: 1 UID: 0 PID: 13428 Comm: syz.3.2004 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 384.517538][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 384.517552][T13428] Call Trace: [ 384.517561][T13428] [ 384.517570][T13428] dump_stack_lvl+0x189/0x250 [ 384.517606][T13428] ? __lock_acquire+0xaac/0xd20 [ 384.517639][T13428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.517668][T13428] ? __pfx__printk+0x10/0x10 [ 384.517690][T13428] ? __might_fault+0xb0/0x130 [ 384.517728][T13428] should_fail_ex+0x414/0x560 [ 384.517764][T13428] _copy_from_iter+0x1db/0x15a0 [ 384.517795][T13428] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 384.517817][T13428] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 384.517842][T13428] ? __pfx__copy_from_iter+0x10/0x10 [ 384.517867][T13428] ? __build_skb_around+0x257/0x3e0 [ 384.517899][T13428] ? netlink_sendmsg+0x642/0xb30 [ 384.517927][T13428] ? skb_put+0x11b/0x210 [ 384.517949][T13428] netlink_sendmsg+0x6b2/0xb30 [ 384.517987][T13428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.518018][T13428] ? aa_sock_msg_perm+0x94/0x160 [ 384.518041][T13428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.518063][T13428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.518094][T13428] __sock_sendmsg+0x219/0x270 [ 384.518125][T13428] ____sys_sendmsg+0x505/0x830 [ 384.518150][T13428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.518187][T13428] ? import_iovec+0x74/0xa0 [ 384.518214][T13428] ___sys_sendmsg+0x21f/0x2a0 [ 384.518236][T13428] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.518294][T13428] ? __fget_files+0x2a/0x420 [ 384.518318][T13428] ? __fget_files+0x3a0/0x420 [ 384.518353][T13428] __x64_sys_sendmsg+0x19b/0x260 [ 384.518377][T13428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.518415][T13428] ? do_syscall_64+0xba/0x210 [ 384.518446][T13428] do_syscall_64+0xf6/0x210 [ 384.518476][T13428] ? clear_bhb_loop+0x45/0xa0 [ 384.518501][T13428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.518519][T13428] RIP: 0033:0x7fcec678e969 [ 384.518537][T13428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.518554][T13428] RSP: 002b:00007fcec754b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.518575][T13428] RAX: ffffffffffffffda RBX: 00007fcec69b5fa0 RCX: 00007fcec678e969 [ 384.518590][T13428] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 384.518602][T13428] RBP: 00007fcec754b090 R08: 0000000000000000 R09: 0000000000000000 [ 384.518615][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.518627][T13428] R13: 0000000000000000 R14: 00007fcec69b5fa0 R15: 00007ffe8d888308 [ 384.518658][T13428] [ 384.544512][T13046] veth1_macvtap: entered promiscuous mode [ 385.031104][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.043292][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.080871][T13046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.115763][T13046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.119915][T13446] netlink: 'syz.7.2010': attribute type 1 has an invalid length. [ 385.144392][T13046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.170165][T13046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.264130][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2009'. [ 385.279649][T13449] bond4: entered promiscuous mode [ 385.284769][T13449] bond4: entered allmulticast mode [ 385.295307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.295960][T13449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.373021][ T2914] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.431010][T13046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.452238][T13046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.475585][T13046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.484489][T13046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.511642][T13441] batadv_slave_0: entered promiscuous mode [ 385.524893][T13441] batadv_slave_0: entered allmulticast mode [ 385.608111][ T2914] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.721948][ T2914] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.767745][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.779296][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.814713][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.829154][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.961555][ T2914] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.322608][ T2914] bridge_slave_1: left allmulticast mode [ 386.328589][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.336479][ T2914] bridge_slave_1: left promiscuous mode [ 386.342274][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.356212][ T2914] bridge_slave_0: left allmulticast mode [ 386.362478][ T2914] bridge_slave_0: left promiscuous mode [ 386.385626][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.728302][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.757799][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.768199][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.787693][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.806033][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.927567][T13471] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2013'. [ 387.134615][T13475] ipt_REJECT: TCP_RESET invalid for non-tcp [ 387.241621][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.266413][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.277135][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.288827][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.299073][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.311051][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.311165][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.332294][ T2914] bond0 (unregistering): Released all slaves [ 387.365760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.371107][T13466] vlan0: entered promiscuous mode [ 387.658150][T13483] FAULT_INJECTION: forcing a failure. [ 387.658150][T13483] name failslab, interval 1, probability 0, space 0, times 0 [ 387.679779][T13483] CPU: 1 UID: 0 PID: 13483 Comm: syz.3.2016 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 387.679817][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.679830][T13483] Call Trace: [ 387.679839][T13483] [ 387.679849][T13483] dump_stack_lvl+0x189/0x250 [ 387.679891][T13483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.679920][T13483] ? __pfx__printk+0x10/0x10 [ 387.680017][T13483] ? __pfx___might_resched+0x10/0x10 [ 387.680048][T13483] ? fs_reclaim_acquire+0x7d/0x100 [ 387.680083][T13483] should_fail_ex+0x414/0x560 [ 387.680133][T13483] should_failslab+0xa8/0x100 [ 387.680163][T13483] __kmalloc_noprof+0xcb/0x4f0 [ 387.680189][T13483] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 387.680223][T13483] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 387.680255][T13483] genl_family_rcv_msg_doit+0xb8/0x300 [ 387.680284][T13483] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 387.680308][T13483] ? rcu_is_watching+0x15/0xb0 [ 387.680343][T13483] ? apparmor_capable+0x137/0x1b0 [ 387.680372][T13483] ? bpf_lsm_capable+0x9/0x20 [ 387.680400][T13483] ? security_capable+0x7e/0x2e0 [ 387.680427][T13483] genl_rcv_msg+0x60e/0x790 [ 387.680457][T13483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.680480][T13483] ? __pfx_hwsim_new_edge_nl+0x10/0x10 [ 387.680530][T13483] netlink_rcv_skb+0x219/0x490 [ 387.680562][T13483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.680588][T13483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.680645][T13483] ? down_read+0x1ad/0x2e0 [ 387.680675][T13483] genl_rcv+0x28/0x40 [ 387.680694][T13483] netlink_unicast+0x758/0x8d0 [ 387.680735][T13483] netlink_sendmsg+0x805/0xb30 [ 387.680780][T13483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.680815][T13483] ? aa_sock_msg_perm+0x94/0x160 [ 387.680839][T13483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.680861][T13483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.680893][T13483] __sock_sendmsg+0x219/0x270 [ 387.680925][T13483] ____sys_sendmsg+0x505/0x830 [ 387.680952][T13483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.680982][T13483] ? import_iovec+0x74/0xa0 [ 387.681014][T13483] ___sys_sendmsg+0x21f/0x2a0 [ 387.681038][T13483] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.681111][T13483] ? __fget_files+0x2a/0x420 [ 387.681138][T13483] ? __fget_files+0x3a0/0x420 [ 387.681176][T13483] __x64_sys_sendmsg+0x19b/0x260 [ 387.681202][T13483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.681243][T13483] ? do_syscall_64+0xba/0x210 [ 387.681276][T13483] do_syscall_64+0xf6/0x210 [ 387.681302][T13483] ? clear_bhb_loop+0x45/0xa0 [ 387.681329][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.681349][T13483] RIP: 0033:0x7fcec678e969 [ 387.681368][T13483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.681386][T13483] RSP: 002b:00007fcec754b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.681409][T13483] RAX: ffffffffffffffda RBX: 00007fcec69b5fa0 RCX: 00007fcec678e969 [ 387.681424][T13483] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 387.681437][T13483] RBP: 00007fcec754b090 R08: 0000000000000000 R09: 0000000000000000 [ 387.681450][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.681462][T13483] R13: 0000000000000000 R14: 00007fcec69b5fa0 R15: 00007ffe8d888308 [ 387.681496][T13483] [ 388.086063][T13460] lo speed is unknown, defaulting to 1000 [ 388.142283][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2018'. [ 388.418821][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.514914][T13486] team0 (unregistering): Port device geneve0 removed [ 388.533243][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2020'. [ 388.581207][T13477] lo speed is unknown, defaulting to 1000 [ 388.887789][ T5847] Bluetooth: hci1: command tx timeout [ 389.010648][ T2914] hsr_slave_0: left promiscuous mode [ 389.023428][ T2914] hsr_slave_1: left promiscuous mode [ 389.031032][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.039433][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.054022][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.061782][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.093141][ T2914] veth1_macvtap: left promiscuous mode [ 389.100122][ T2914] veth0_macvtap: left promiscuous mode [ 389.106295][ T2914] veth1_vlan: left promiscuous mode [ 389.111680][ T2914] veth0_vlan: left promiscuous mode [ 389.365726][ T5847] Bluetooth: hci2: command tx timeout [ 389.399520][T13525] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2025'. [ 389.445359][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.468227][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 389.911997][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 389.983013][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 390.058241][T13536] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2028'. [ 390.074018][T13536] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2028'. [ 390.164725][T13538] netlink: 'syz.7.2029': attribute type 1 has an invalid length. [ 390.175325][T13538] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2029'. [ 390.184455][T13538] FAULT_INJECTION: forcing a failure. [ 390.184455][T13538] name failslab, interval 1, probability 0, space 0, times 0 [ 390.208630][T13538] CPU: 1 UID: 0 PID: 13538 Comm: syz.7.2029 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 390.208663][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.208676][T13538] Call Trace: [ 390.208685][T13538] [ 390.208695][T13538] dump_stack_lvl+0x189/0x250 [ 390.208737][T13538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.208766][T13538] ? __pfx__printk+0x10/0x10 [ 390.208794][T13538] ? __pfx___might_resched+0x10/0x10 [ 390.208812][T13538] ? fs_reclaim_acquire+0x7d/0x100 [ 390.208952][T13538] should_fail_ex+0x414/0x560 [ 390.209001][T13538] should_failslab+0xa8/0x100 [ 390.209042][T13538] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 390.209070][T13538] ? __alloc_skb+0x112/0x2d0 [ 390.209108][T13538] __alloc_skb+0x112/0x2d0 [ 390.209143][T13538] netlink_ack+0x146/0xa50 [ 390.209171][T13538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.209212][T13538] netlink_rcv_skb+0x2a0/0x490 [ 390.209243][T13538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.209269][T13538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.209324][T13538] ? down_read+0x1ad/0x2e0 [ 390.209372][T13538] genl_rcv+0x28/0x40 [ 390.209392][T13538] netlink_unicast+0x758/0x8d0 [ 390.209433][T13538] netlink_sendmsg+0x805/0xb30 [ 390.209472][T13538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.209510][T13538] ? aa_sock_msg_perm+0x94/0x160 [ 390.209546][T13538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.209566][T13538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.209595][T13538] __sock_sendmsg+0x219/0x270 [ 390.209632][T13538] ____sys_sendmsg+0x505/0x830 [ 390.209659][T13538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.209688][T13538] ? import_iovec+0x74/0xa0 [ 390.209716][T13538] ___sys_sendmsg+0x21f/0x2a0 [ 390.209740][T13538] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.209797][T13538] ? __fget_files+0x2a/0x420 [ 390.209830][T13538] ? __fget_files+0x3a0/0x420 [ 390.209858][T13538] __x64_sys_sendmsg+0x19b/0x260 [ 390.209876][T13538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.209904][T13538] ? do_syscall_64+0xba/0x210 [ 390.209927][T13538] do_syscall_64+0xf6/0x210 [ 390.209947][T13538] ? clear_bhb_loop+0x45/0xa0 [ 390.209967][T13538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.209984][T13538] RIP: 0033:0x7f694e98e969 [ 390.210001][T13538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.210014][T13538] RSP: 002b:00007f694c7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.210031][T13538] RAX: ffffffffffffffda RBX: 00007f694ebb5fa0 RCX: 00007f694e98e969 [ 390.210042][T13538] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 390.210051][T13538] RBP: 00007f694c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.210060][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.210068][T13538] R13: 0000000000000000 R14: 00007f694ebb5fa0 R15: 00007fff19c31848 [ 390.210091][T13538] [ 390.521344][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.962627][T13516] netpci0: tun_chr_ioctl cmd 1074025672 [ 390.973644][T13516] netpci0: ignored: set checksum disabled [ 390.975634][ T5847] Bluetooth: hci1: command tx timeout [ 390.983007][T13526] netpci0: tun_chr_ioctl cmd 35108 [ 391.446556][ T5847] Bluetooth: hci2: command tx timeout [ 391.476372][T13460] chnl_net:caif_netlink_parms(): no params data found [ 391.525301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.589873][T13477] chnl_net:caif_netlink_parms(): no params data found [ 391.628126][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 391.958844][ T3457] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.976162][T13585] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2041'. [ 392.055723][T13460] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.064167][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.081400][T13460] bridge_slave_0: entered allmulticast mode [ 392.090638][T13460] bridge_slave_0: entered promiscuous mode [ 392.174946][T13477] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.182339][T13477] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.191027][T13477] bridge_slave_0: entered allmulticast mode [ 392.199067][T13477] bridge_slave_0: entered promiscuous mode [ 392.213758][T13460] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.222138][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.229656][T13460] bridge_slave_1: entered allmulticast mode [ 392.238225][T13460] bridge_slave_1: entered promiscuous mode [ 392.311313][ T3457] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.384102][T13477] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.401580][T13477] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.409567][T13477] bridge_slave_1: entered allmulticast mode [ 392.432733][T13477] bridge_slave_1: entered promiscuous mode [ 392.504125][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2043'. [ 392.527879][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2043'. [ 392.539865][T13599] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2044'. [ 392.540949][ T3457] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.563153][T13600] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2044'. [ 392.575309][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.603830][T13460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.626359][T13460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.724336][ T3457] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.871129][T13477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.884945][T13477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.901409][T13460] team0: Port device team_slave_0 added [ 392.913716][T13460] team0: Port device team_slave_1 added [ 393.046295][ T5847] Bluetooth: hci1: command tx timeout [ 393.164736][T13460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.188002][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.256339][T13460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.281332][T13477] team0: Port device team_slave_0 added [ 393.308173][T13477] team0: Port device team_slave_1 added [ 393.314764][T13628] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2052'. [ 393.401724][T13460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.413076][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.440469][T13460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.525651][ T5847] Bluetooth: hci2: command tx timeout [ 393.571210][T13477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.581602][T13477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.608674][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.619876][T13477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.640093][T13460] hsr_slave_0: entered promiscuous mode [ 393.647894][T13460] hsr_slave_1: entered promiscuous mode [ 393.654770][T13460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.663152][T13460] Cannot create hsr debugfs directory [ 393.684231][T13477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.694201][T13477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.724670][T13477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.863247][T13477] hsr_slave_0: entered promiscuous mode [ 393.872348][T13477] hsr_slave_1: entered promiscuous mode [ 393.880295][T13477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.889572][T13477] Cannot create hsr debugfs directory [ 393.895946][ T3457] bridge_slave_1: left allmulticast mode [ 393.901664][ T3457] bridge_slave_1: left promiscuous mode [ 393.909959][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.923895][ T3457] bridge_slave_0: left allmulticast mode [ 393.931233][ T3457] bridge_slave_0: left promiscuous mode [ 393.937376][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.041097][T13645] netlink: 'syz.7.2057': attribute type 1 has an invalid length. [ 394.053283][T13645] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2057'. [ 394.063082][T13645] FAULT_INJECTION: forcing a failure. [ 394.063082][T13645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.087761][T13645] CPU: 1 UID: 0 PID: 13645 Comm: syz.7.2057 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 394.087793][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.087807][T13645] Call Trace: [ 394.087815][T13645] [ 394.087826][T13645] dump_stack_lvl+0x189/0x250 [ 394.087865][T13645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.087895][T13645] ? __pfx__printk+0x10/0x10 [ 394.087929][T13645] should_fail_ex+0x414/0x560 [ 394.087970][T13645] _copy_to_user+0x31/0xb0 [ 394.088005][T13645] simple_read_from_buffer+0xe1/0x170 [ 394.088037][T13645] proc_fail_nth_read+0x1df/0x250 [ 394.088071][T13645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.088116][T13645] ? rw_verify_area+0x258/0x650 [ 394.088145][T13645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.088176][T13645] vfs_read+0x1fd/0x980 [ 394.088210][T13645] ? __pfx___mutex_lock+0x10/0x10 [ 394.088238][T13645] ? __pfx_vfs_read+0x10/0x10 [ 394.088263][T13645] ? __fget_files+0x2a/0x420 [ 394.088296][T13645] ? __fget_files+0x3a0/0x420 [ 394.088321][T13645] ? __fget_files+0x2a/0x420 [ 394.088354][T13645] ksys_read+0x145/0x250 [ 394.088376][T13645] ? rcu_is_watching+0x15/0xb0 [ 394.088409][T13645] ? __pfx_ksys_read+0x10/0x10 [ 394.088437][T13645] ? do_syscall_64+0xba/0x210 [ 394.088468][T13645] do_syscall_64+0xf6/0x210 [ 394.088496][T13645] ? clear_bhb_loop+0x45/0xa0 [ 394.088523][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.088543][T13645] RIP: 0033:0x7f694e98d37c [ 394.088562][T13645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 394.088580][T13645] RSP: 002b:00007f694c7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.088602][T13645] RAX: ffffffffffffffda RBX: 00007f694ebb5fa0 RCX: 00007f694e98d37c [ 394.088617][T13645] RDX: 000000000000000f RSI: 00007f694c7f60a0 RDI: 0000000000000003 [ 394.088631][T13645] RBP: 00007f694c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.088644][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.088657][T13645] R13: 0000000000000000 R14: 00007f694ebb5fa0 R15: 00007fff19c31848 [ 394.088691][T13645] [ 394.362221][T13647] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2058'. [ 394.639870][T13653] Cannot find add_set index 3 as target [ 394.662514][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.001656][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.013212][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.024051][ T3457] bond0 (unregistering): Released all slaves [ 395.084451][T13650] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2059'. [ 395.117446][T13656] ip6tnl1: entered promiscuous mode [ 395.122829][T13656] ip6tnl1: entered allmulticast mode [ 395.128348][ T5151] Bluetooth: hci1: command tx timeout [ 395.607262][ T5151] Bluetooth: hci2: command tx timeout [ 395.695394][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.990094][ T3457] hsr_slave_0: left promiscuous mode [ 395.997579][ T3457] hsr_slave_1: left promiscuous mode [ 396.003653][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.012038][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.020659][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.028651][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.051814][ T3457] veth1_macvtap: left promiscuous mode [ 396.057515][ T3457] veth0_macvtap: left promiscuous mode [ 396.063353][ T3457] veth1_vlan: left promiscuous mode [ 396.068969][ T3457] veth0_vlan: left promiscuous mode [ 396.728506][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.900470][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 396.999958][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 397.197652][T13720] __nla_validate_parse: 2 callbacks suppressed [ 397.197677][T13720] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2078'. [ 397.685829][ T5151] Bluetooth: hci2: command 0x0405 tx timeout [ 397.765370][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.864586][T13722] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 397.884218][T13726] sctp: [Deprecated]: syz.3.2080 (pid 13726) Use of int in max_burst socket option. [ 397.884218][T13726] Use struct sctp_assoc_value instead [ 398.201391][T13738] xt_CT: No such helper "netbios-ns" [ 398.323295][T13743] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2085'. [ 398.722784][T13460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 398.766393][T13460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 398.805840][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.824574][T13460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.868287][T13460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 399.012633][T13755] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2090'. [ 399.012713][T13477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.056236][T13477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.079520][T13759] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2091'. [ 399.121549][T13477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.158823][T13477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.304099][T13766] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 399.314085][T13766] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 399.370065][T13766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.377514][T13766] IPv6: NLM_F_CREATE should be set when creating new route [ 399.396964][T13460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.427370][T13766] netlink: 'syz.7.2094': attribute type 1 has an invalid length. [ 399.435887][T13766] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2094'. [ 399.474684][T13460] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.501629][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.508923][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.576715][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.584442][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.610648][T13477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.741156][T13477] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.782562][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.791331][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.830196][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.837954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.845466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.923187][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 400.036367][T13783] ------------[ cut here ]------------ [ 400.042517][T13783] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 [ 400.050828][T13783] index 255 is out of range for type 'const int[12]' [ 400.057640][T13783] CPU: 1 UID: 0 PID: 13783 Comm: syz.7.2100 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 400.057675][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.057690][T13783] Call Trace: [ 400.057702][T13783] [ 400.057713][T13783] dump_stack_lvl+0x189/0x250 [ 400.057758][T13783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.057790][T13783] ? __pfx__printk+0x10/0x10 [ 400.057809][T13783] ? ip6_dst_lookup_tail+0x1ae/0x1510 [ 400.057832][T13783] ? sctp_assoc_add_peer+0x657/0x13b0 [ 400.057853][T13783] ? sctp_sendmsg+0x155c/0x2810 [ 400.057882][T13783] ? __sock_sendmsg+0x19c/0x270 [ 400.057909][T13783] ? ____sys_sendmsg+0x52d/0x830 [ 400.057937][T13783] ubsan_epilogue+0xa/0x40 [ 400.057959][T13783] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 400.057995][T13783] ip6_rt_copy_init+0x8e7/0x970 [ 400.058028][T13783] ip6_pol_route+0xbac/0x1180 [ 400.058059][T13783] ? ip6_pol_route+0x162/0x1180 [ 400.058094][T13783] ? __pfx_ip6_pol_route+0x10/0x10 [ 400.058131][T13783] ? fib6_get_table+0x39/0x270 [ 400.058160][T13783] ? fib6_get_table+0x39/0x270 [ 400.058191][T13783] ? fib6_get_table+0x251/0x270 [ 400.058220][T13783] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 400.058249][T13783] fib6_rule_action+0x206/0x7d0 [ 400.058281][T13783] ? __pfx_fib6_rule_action+0x10/0x10 [ 400.058312][T13783] fib_rules_lookup+0x767/0xe90 [ 400.058356][T13783] ? fib_rules_lookup+0x96/0xe90 [ 400.058388][T13783] ? __pfx_fib_rules_lookup+0x10/0x10 [ 400.058420][T13783] ? l3mdev_update_flow+0x29/0x640 [ 400.058461][T13783] ? l3mdev_update_flow+0x4d1/0x640 [ 400.058499][T13783] fib6_rule_lookup+0x18e/0x6f0 [ 400.058530][T13783] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 400.058561][T13783] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 400.058597][T13783] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 400.058646][T13783] ip6_route_output_flags+0x364/0x5d0 [ 400.058676][T13783] ? ip6_route_output_flags+0x2e/0x5d0 [ 400.058711][T13783] ip6_dst_lookup_tail+0x1ae/0x1510 [ 400.058748][T13783] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 400.058766][T13783] ? __lock_acquire+0xaac/0xd20 [ 400.058829][T13783] ip6_dst_lookup_flow+0x47/0xe0 [ 400.058851][T13783] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 400.058887][T13783] sctp_v6_get_dst+0x7cc/0x1bc0 [ 400.059002][T13783] ? crng_make_state+0x13a/0x700 [ 400.059052][T13783] ? __pfx_crng_make_state+0x10/0x10 [ 400.059095][T13783] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 400.059128][T13783] ? __asan_memset+0x22/0x50 [ 400.059181][T13783] ? dst_release+0x72/0x1b0 [ 400.059212][T13783] sctp_transport_route+0x115/0x2f0 [ 400.059250][T13783] sctp_assoc_add_peer+0x657/0x13b0 [ 400.059288][T13783] sctp_connect_new_asoc+0x30a/0x690 [ 400.059317][T13783] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 400.059345][T13783] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 400.059392][T13783] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 400.059424][T13783] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 400.059464][T13783] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 400.059492][T13783] ? security_sctp_bind_connect+0x7e/0x2e0 [ 400.059532][T13783] sctp_sendmsg+0x155c/0x2810 [ 400.059585][T13783] ? __pfx_sctp_sendmsg+0x10/0x10 [ 400.059660][T13783] ? aa_sk_perm+0x81e/0x950 [ 400.059704][T13783] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.059744][T13783] ? sock_rps_record_flow+0x19/0x410 [ 400.059777][T13783] ? inet_sendmsg+0x2f4/0x370 [ 400.059804][T13783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.059836][T13783] __sock_sendmsg+0x19c/0x270 [ 400.059872][T13783] ____sys_sendmsg+0x52d/0x830 [ 400.059905][T13783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.059941][T13783] ? import_iovec+0x74/0xa0 [ 400.059977][T13783] ___sys_sendmsg+0x21f/0x2a0 [ 400.060003][T13783] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.060022][T13783] ? preempt_schedule+0xae/0xc0 [ 400.060093][T13783] ? __fget_files+0x2a/0x420 [ 400.060121][T13783] ? __fget_files+0x3a0/0x420 [ 400.060157][T13783] __sys_sendmmsg+0x227/0x430 [ 400.060183][T13783] ? __pfx___sys_sendmmsg+0x10/0x10 [ 400.060214][T13783] ? __pfx_do_futex+0x10/0x10 [ 400.060261][T13783] ? rcu_is_watching+0x15/0xb0 [ 400.060305][T13783] __x64_sys_sendmmsg+0xa0/0xc0 [ 400.060329][T13783] do_syscall_64+0xf6/0x210 [ 400.060358][T13783] ? clear_bhb_loop+0x45/0xa0 [ 400.060386][T13783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.060407][T13783] RIP: 0033:0x7f694e98e969 [ 400.060429][T13783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.060448][T13783] RSP: 002b:00007f694c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.060473][T13783] RAX: ffffffffffffffda RBX: 00007f694ebb5fa0 RCX: 00007f694e98e969 [ 400.060491][T13783] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000f [ 400.060504][T13783] RBP: 00007f694ea10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 400.060517][T13783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.060529][T13783] R13: 0000000000000000 R14: 00007f694ebb5fa0 R15: 00007fff19c31848 [ 400.060562][T13783] [ 400.060571][T13783] ---[ end trace ]--- [ 400.178407][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2100'. [ 400.181299][T13783] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 400.181323][T13783] CPU: 1 UID: 0 PID: 13783 Comm: syz.7.2100 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 400.181352][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.181373][T13783] Call Trace: [ 400.181383][T13783] [ 400.181398][T13783] dump_stack_lvl+0x99/0x250 [ 400.181447][T13783] ? __asan_memcpy+0x40/0x70 [ 400.181476][T13783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.181512][T13783] ? __pfx__printk+0x10/0x10 [ 400.181556][T13783] panic+0x2db/0x790 [ 400.181598][T13783] ? __pfx_panic+0x10/0x10 [ 400.181626][T13783] ? _printk+0xcf/0x120 [ 400.181656][T13783] ? __pfx__printk+0x10/0x10 [ 400.181675][T13783] ? ip6_dst_lookup_tail+0x1ae/0x1510 [ 400.181702][T13783] ? sctp_assoc_add_peer+0x657/0x13b0 [ 400.181727][T13783] ? sctp_sendmsg+0x155c/0x2810 [ 400.181761][T13783] ? __sock_sendmsg+0x19c/0x270 [ 400.181789][T13783] ? ____sys_sendmsg+0x52d/0x830 [ 400.181817][T13783] check_panic_on_warn+0x89/0xb0 [ 400.181852][T13783] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 400.181890][T13783] ip6_rt_copy_init+0x8e7/0x970 [ 400.181929][T13783] ip6_pol_route+0xbac/0x1180 [ 400.181961][T13783] ? ip6_pol_route+0x162/0x1180 [ 400.181999][T13783] ? __pfx_ip6_pol_route+0x10/0x10 [ 400.182038][T13783] ? fib6_get_table+0x39/0x270 [ 400.182070][T13783] ? fib6_get_table+0x39/0x270 [ 400.182102][T13783] ? fib6_get_table+0x251/0x270 [ 400.182135][T13783] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 400.182168][T13783] fib6_rule_action+0x206/0x7d0 [ 400.182203][T13783] ? __pfx_fib6_rule_action+0x10/0x10 [ 400.182239][T13783] fib_rules_lookup+0x767/0xe90 [ 400.182287][T13783] ? fib_rules_lookup+0x96/0xe90 [ 400.182323][T13783] ? __pfx_fib_rules_lookup+0x10/0x10 [ 400.182359][T13783] ? l3mdev_update_flow+0x29/0x640 [ 400.182405][T13783] ? l3mdev_update_flow+0x4d1/0x640 [ 400.182448][T13783] fib6_rule_lookup+0x18e/0x6f0 [ 400.182483][T13783] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 400.182519][T13783] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 400.182562][T13783] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 400.182617][T13783] ip6_route_output_flags+0x364/0x5d0 [ 400.182650][T13783] ? ip6_route_output_flags+0x2e/0x5d0 [ 400.182688][T13783] ip6_dst_lookup_tail+0x1ae/0x1510 [ 400.182729][T13783] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 400.182748][T13783] ? __lock_acquire+0xaac/0xd20 [ 400.182808][T13783] ip6_dst_lookup_flow+0x47/0xe0 [ 400.182832][T13783] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 400.182868][T13783] sctp_v6_get_dst+0x7cc/0x1bc0 [ 400.182900][T13783] ? crng_make_state+0x13a/0x700 [ 400.182931][T13783] ? __pfx_crng_make_state+0x10/0x10 [ 400.182973][T13783] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 400.183003][T13783] ? __asan_memset+0x22/0x50 [ 400.183059][T13783] ? dst_release+0x72/0x1b0 [ 400.183090][T13783] sctp_transport_route+0x115/0x2f0 [ 400.183127][T13783] sctp_assoc_add_peer+0x657/0x13b0 [ 400.183165][T13783] sctp_connect_new_asoc+0x30a/0x690 [ 400.183194][T13783] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 400.183219][T13783] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 400.183256][T13783] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 400.183290][T13783] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 400.183328][T13783] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 400.183357][T13783] ? security_sctp_bind_connect+0x7e/0x2e0 [ 400.183407][T13783] sctp_sendmsg+0x155c/0x2810 [ 400.183462][T13783] ? __pfx_sctp_sendmsg+0x10/0x10 [ 400.183504][T13783] ? aa_sk_perm+0x81e/0x950 [ 400.183549][T13783] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.183589][T13783] ? sock_rps_record_flow+0x19/0x410 [ 400.183622][T13783] ? inet_sendmsg+0x2f4/0x370 [ 400.183648][T13783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.183678][T13783] __sock_sendmsg+0x19c/0x270 [ 400.183714][T13783] ____sys_sendmsg+0x52d/0x830 [ 400.183747][T13783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.183784][T13783] ? import_iovec+0x74/0xa0 [ 400.183821][T13783] ___sys_sendmsg+0x21f/0x2a0 [ 400.183849][T13783] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.183870][T13783] ? preempt_schedule+0xae/0xc0 [ 400.183941][T13783] ? __fget_files+0x2a/0x420 [ 400.183972][T13783] ? __fget_files+0x3a0/0x420 [ 400.184016][T13783] __sys_sendmmsg+0x227/0x430 [ 400.184050][T13783] ? __pfx___sys_sendmmsg+0x10/0x10 [ 400.184087][T13783] ? __pfx_do_futex+0x10/0x10 [ 400.184138][T13783] ? rcu_is_watching+0x15/0xb0 [ 400.184187][T13783] __x64_sys_sendmmsg+0xa0/0xc0 [ 400.184215][T13783] do_syscall_64+0xf6/0x210 [ 400.184247][T13783] ? clear_bhb_loop+0x45/0xa0 [ 400.184278][T13783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.184301][T13783] RIP: 0033:0x7f694e98e969 [ 400.184327][T13783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.184349][T13783] RSP: 002b:00007f694c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.184386][T13783] RAX: ffffffffffffffda RBX: 00007f694ebb5fa0 RCX: 00007f694e98e969 [ 400.184407][T13783] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000f [ 400.184423][T13783] RBP: 00007f694ea10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 400.184440][T13783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.184456][T13783] R13: 0000000000000000 R14: 00007f694ebb5fa0 R15: 00007fff19c31848 [ 400.184498][T13783] [ 400.186745][T13783] Kernel Offset: disabled