last executing test programs: 4.00835483s ago: executing program 3 (id=457): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70400000000000085000000c400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6f4a75c703db114355c1c7fc97a7df899732605e0be69fda0450d1f487f40bdd962541a9b1e2feec7cfb655c5648170680367877fe0762ef369827730052c37d940c96aca81da9c68f5c5d8bbee8abee2cf3e1fc17a406d0b63", 0xad}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r7, 0x29, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x44, 0x0, 0x1}, 0x28) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) 3.426562529s ago: executing program 0 (id=462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0000000001000000100007800c000180e6ff0000", @ANYRES32, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="1004b3ad1f1a9db4f76a301dc5bb1200f5c579b5185b9844af2b3a9842f6fcd3b519bcb487c0a075579189e5c22e165fcc9da89d35d283c48a7cd2b816763ce1d1a6fffde0a2db00119f952225a059f5c90b941c468f403216b3620272cb4981de379155f76f13558347945c0cc92eae85a37fe6546e2fef09e06aa587f7810f29fcd3fa2a8f0a410ebc662d151bdeca6a57a133d5270d2180e749a1e9cde085ffe000100000000000006a3eb2bfe140c2151416499ca1723a98f165a4ed321feb9f710513ee93d39c61ac58d8d0b75afbaf91eb6377be3d8988163f4ef240612ce5", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800001741ffffff0bf0dc3174bc62f1bcafddc04d00000000080000009111d900000004d3cca8000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00'/20, @ANYRESHEX=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r13, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000) 2.787280007s ago: executing program 3 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000aa000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.654636153s ago: executing program 1 (id=471): r0 = socket$igmp6(0xa, 0x3, 0x2) close(r0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="74505fb34932da9fe930948e3e580c975d99e604f423eaab6594c748a756a6afaa92b41438ec35716eb4d2d55721e721d3b4031fc2787fef592233374adbb4f30ffcd87a34f67e0c23d7393cf5d5ce5b33e1fd75ca67720e662ef1ed48ef83ecfa179380e4a2e3351bc46639f223f1398d506ec3c5924a0006ed7e7600ee8bfd6270c68b737194b6e0496f28a464ee85f1422f98545477529053e3a027fd0b8e1283cfccba1006832b365f8b8efc53a2409643c41d38fffd3bb5292219bd1a8d98cee6b679f74849da04eddff3b2a7595a7edbd05fb0cf75e31be8719269e736cbd93e125a96285f043a99c416db", 0xee}, {&(0x7f0000000100)="a13660dda4ccfdec5164c76120d087cbae2f1c7552dfc7232c8bc426f592c17ea7b4639c2b85ffe9efaee3a3f4eed60e6f752af756754c1233cacef623e15936103005492fb918242f6acad68a2156b36c4a149956e5324d9e621bf686b38f77ec008d44fc10eb562dc33986f7b963ed195287a97c5b2e05c8278279790b64e05c9eede1cb6c5bbf6b5743bf621074dc4b0eaacadfea4ba398c46772ebd97dde4d410996025c42767993e8710b8c2d337fe021a724", 0xb5}, {&(0x7f00000001c0)="8a0dfe4d33a5a66a114c1a6d870d41d1a12860dbbc5416bedca8cf116068b8da69288b7a7c7a84893c67d2105a9e56d0938ac619eb0d9adb8290a2f98445040d8028678e9f89e192f3ec5c4d4c172f9bf96b0b1eab748bc53f17e7cbd23ff72b9bd1272a6429be34ca82eec2009e56cc5a7fd8763d8453fc1d3b8ce59aaeddb767efe61bc5754ba91ea56fc8a89f24d568d2383055660250c0d319f0dc4e932e3be8", 0xa2}], 0x3, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x80, 0x1, 0x1, 0x2, {{0x1e, 0x4, 0x2, 0x17, 0x78, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0x18, 0x74, 0x0, 0x0, [0x80, 0x9, 0x9, 0x1, 0x8]}, @timestamp={0x44, 0x10, 0xeb, 0x0, 0x7, [0x2, 0x7fff, 0xfffffe00]}, @timestamp_addr={0x44, 0x3c, 0xb6, 0x1, 0x0, [{@loopback, 0x3}, {@empty, 0xffffff07}, {@private=0xa010100, 0x4}, {@multicast2, 0xa}, {@local}, {@multicast2, 0x6}, {@loopback, 0xfd}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x3, 0x45f6, {{0x19, 0x4, 0x3, 0x5, 0x64, 0x68, 0x0, 0x1, 0x4e4bf4b3c96eb250, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @noop, @lsrr={0x83, 0xf, 0xee, [@remote, @multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x34, 0x3, [{0x7, 0x6, "1f99418a"}, {0x2, 0xc, "21b835a63295eec1577a"}, {0x2, 0xd, "060a1e972d74c4042c0e0a"}, {0x1, 0xf, "8da028f7a863324fa50c043bfc"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1e, &(0x7f0000000640)={@mcast1, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0x2, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7800, 0x5, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x80000001, 0x57fd, {{0x18, 0x4, 0x2, 0x3d, 0x60, 0x65, 0x0, 0x8, 0x2d, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x39, 0x3, [{0x5, 0x12, "b7e13deb1b03cdcc96ef5f808cdc26f5"}, {0x0, 0xd, "70a471c8c1d2b889c1e2e4"}, {0x2, 0x2}, {0x6, 0x12, "b7ab26284cc60947f32acda1cb90c10b"}]}, @ssrr={0x89, 0xf, 0x38, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback]}, @end]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000900)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xda, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000b40)={@private1, 0x0}, &(0x7f0000000b80)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)={0x40c, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x87}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.{(-!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')-!#\x06)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x56, 0x4, "cede21eb3d5e11f551a68f13909926737f7b23ca89d576a3a55a83b3df612b6638f8555827726d7c6b63129b858719fafe94c61811adbf3967f52523add01ff1fc3684f54d6190761554a83e5064a16eb876"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "e202406a7705d8687f6e9d1b4461dc06cf1bbf2ccffbfa7465c0accfea61093e8fc5ea4c16a034c25556d937d4c864030ff94c87885d6c217fcd9709f042c54d6a40f6eec983c9c92d5f606ba0496956750d97b8bc8c7c193900838ba57c0c71cfb49ffc156ddd7ab4768c15a31a19c877853a582b2c748da339bd9cbb4decb21d484ff345e03f3377bb7813dc7f83a438128c483f1865e6740e05359a2ae9d82d02a80d4ea2172ed6d50eca9304e9"}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "99f02129abf46b63eed9d54c89bd5e1b8cb8ef7b9131d8e49820408063dfa3a1cfce029602bed8b0241b332afd72d4e67b0d630621319408ea3bfbe7a4a397dc0dc0acd28beef04020ee060b0eb4bf3fba38a013fcaee82dcb4f1b9ed6baf13c92665f06a3321ed8279e4cc72e0b4de224725acef9614b438b42e9b7a313239473572887e74698eef1f96fd80e9eaa5d7112889644"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x40c}}, 0x4000) write$nbd(r2, &(0x7f0000001080)={0x67446698, 0x1, 0x0, 0x1, 0x1, "9ecc56867b8fc561b524c5a2eabda7f1be0cb7dd658b9a91e6351dc28d8ad774fc9d70c1e360a9737bfd754adffe870ea8f07c3a23bebbf1b4c54c04546f7ba803eeb16a367eac5a17be40f9f418a85293788ac31486369feac430e4982e8360a2c307c6128cbdac9bdaae7eaf0f9547687c8d6ff366015d281f216da31fc8b067ac28402a53111c586780eda419e1c5a2fbc150e680a4b5e298fbaac60852fc517d477bb8ee46c862473b980f428ef14d71a20f29f8dc11ebeb518cdccf8810"}, 0xd0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000001180), 0xffffffffffffffff) (async) r13 = socket$kcm(0x29, 0xd, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000011c0)=""/73, &(0x7f0000001240)=0x49) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000012c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e24, @multicast1}, 0x82, 0x0, 0x0, 0x0, 0x1b, &(0x7f0000001280)='vlan0\x00', 0x3, 0x7fffffffffffffff, 0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001340)={'vxcan0\x00'}) (async) recvmsg(r13, &(0x7f00000015c0)={&(0x7f0000001380)=@hci, 0x80, &(0x7f0000001540)=[{&(0x7f0000001400)=""/177, 0xb1}, {&(0x7f00000014c0)=""/94, 0x5e}], 0x2, &(0x7f0000001580)=""/19, 0x13}, 0x0) (async) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_tracing={0x1a, 0x33, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x659}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @generic={0x3, 0x9, 0x0, 0x0, 0x180}, @jmp={0x5, 0x0, 0xd, 0x3, 0x4, 0x8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000017c0)='GPL\x00', 0x4, 0x3c, &(0x7f0000001800)=""/60, 0x40f00, 0x1, '\x00', 0x0, 0x1a, r2, 0x8, &(0x7f0000001840)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001880)={0x4, 0x6, 0x7, 0x6}, 0x10, 0x26f23, r2, 0x8, &(0x7f00000018c0)=[r2, r13, r2, r2, r2, r2, 0xffffffffffffffff, r2, r2], &(0x7f0000001900)=[{0x3, 0x4, 0xc}, {0x4, 0x5, 0x10, 0x6}, {0x3, 0x1, 0x1, 0x8}, {0x2, 0x1, 0xc, 0x1}, {0x4, 0x1, 0x5}, {0x4, 0x4, 0x0, 0x5}, {0x0, 0x2, 0xf, 0x1a}, {0x3, 0x5, 0x5}], 0x10, 0x6}, 0x94) (async) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000001a40)=0x1, 0x4) (async) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001a80)) (async) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) (async) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001b80), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x88, r15, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9427}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x11) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r14, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000001dc0), 0x0, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0x57, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) 2.543865763s ago: executing program 3 (id=474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000030000009f54ffff0000000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430040, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x2, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r5, 0x8ec6, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r5, 0x40}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8121}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x5, 0x10}, &(0x7f0000000100)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000030000009f54ffff0000000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430040, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x2, 0x5, 0x0) (async) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r5, 0x8ec6, 0x10}, 0xc) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r5, 0x40}, 0x8) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8121}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x5, 0x10}, &(0x7f0000000100)=0xc) (async) 2.40439607s ago: executing program 1 (id=475): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5a53}, 0x1c) write$tun(0xffffffffffffffff, 0x0, 0xfb5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000040)=0x61f, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20008040) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendto$packet(r0, &(0x7f00000004c0)="b90c4460031dfa20f799c7fff505f5e0019cde66839ad42d00d5a3d517b0f25dca51fb4557ae1213a4d7d1e37d811a6f99298658656fdab514deef46def7f89a5a941fc3564d478b460c74028231147f05676e051e5536e131c97ac898218c316b682882afb9c2541ec9024161df5fb34098a72580a1694f64cc83d25959dead8545d49bb4ae84f11a022b985759abba2db4f82b1e161f3d1bcba5b2d06f0b74a849e26004c40e637da8a8fc819095df8291286e3b4b00ae55cbab242c9ab7b835ce4f770174c221dd2351fe54e69364da0c100b05b7362e42154aa3f78a9f7292c018", 0xe3, 0x4008890, &(0x7f0000000640)={0x11, 0x17, r6, 0x1, 0x2}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380), &(0x7f0000000480)=0x8) syz_genetlink_get_family_id$ethtool(0x0, r5) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) 2.403824738s ago: executing program 4 (id=476): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x3f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.400832494s ago: executing program 0 (id=477): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0) unshare(0x10040000) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) sendfile(r2, r2, 0x0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x80108906, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) 2.295748968s ago: executing program 2 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20007f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400), 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.210304742s ago: executing program 0 (id=479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x3a, 0x5, 0x4}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004811}, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200f5ffffff"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x6c}}, 0xc4890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000166000200f3ffffff180000000000000000000000000000009500040000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x78) 2.183519545s ago: executing program 4 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x100}}, 0x0) 2.007222748s ago: executing program 2 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e6400980800002fbdcff1bb32182b621a6d688119dd00028005001d0000002ba7701ababc7724f461bc97be850000"], 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.962901928s ago: executing program 4 (id=482): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c0000000201"], 0x20}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x4e22, 0xc000, 0x4e20, 0x34, 0xa, 0x20, 0xa0, 0x0, r1, 0xee00}, {0xffffffffffffff81, 0xffffffffffffffff, 0x3, 0x0, 0xa51, 0x5, 0x2, 0x6}, {0xfff, 0x37, 0x5, 0x6}, 0x1, 0x6e6bb6, 0x1, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@empty, 0x3507, 0x4, 0x2, 0x4a, 0x6, 0x3, 0x19}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x20}}, 0x40014) 1.583590683s ago: executing program 0 (id=483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20007f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.583017215s ago: executing program 2 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.581124668s ago: executing program 4 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e1406", 0x1b}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000080)=""/4, &(0x7f00000000c0)=0x4) 1.531396098s ago: executing program 3 (id=486): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x17c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xee, 0xa9, @random="7511641301f976bebea47f3a492abc510c9b558e3ece787f33c1749f0d0e49fa4428e667549cd65983d0dcf726e87870735451cb71c88b7869643c4f6cabcc562c08863bda224b272bc643eb22a6429ee32de21e2e0e7aa007936622d252bbba9c8da73a85695008ba861f5a7b60b48c583052af5ee71eb37f77b328722ffd3c661d917a2956e09f9107986815dadb76a1f3955acbe21e37797a1362a083927773df68de1b476c492cc2156b05b66e50b2d95a9f1e3d06562d559df8403afff82f21296228cc57fe1ce5b260b534a0cc74ff3121c8be8c71d74b2ad2b52929f2ae0d50f73c56e4aa41ba"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x100}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4c811}, 0x200000c0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008802) sendmsg$xdp(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x2c, 0x8, 0x0, 0x23}, 0x10, &(0x7f0000000580)=[{&(0x7f00000004c0)="5caa68bf021b2b1541ed1aa55a7e59e4a1646ce829bf29814de14bf77a27cff366ffd7d3cb8756f5fada579367ba00dc6f5b24bc6663e69c116fa8aba4351c3843a1f1be71a49efe08ca455240560d4d067d52327cbc5e6fbb325bb7319099d33c1a6e9509e50fadfb292ba2136b8d6d6b31eb36a77cbdf1cf153d6dd555cfa995b54d25c906e41164917072068ead4536f60861ecf9a46c521897ff6b4dc182cf139bb01a06e99b118d76cc1c6fcbcbec10690c7802", 0xb6}], 0x1, 0x0, 0x0, 0x5}, 0x8010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400d4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x80, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r3) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x2000c040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4040050) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5a}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x10}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000f80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000001180)=r9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000001200)=""/52, 0x27, 0x34, 0x1, 0x8, 0x10000, @value=r0}, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002340)={'team0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002400)=@bpf_ext={0x1c, 0xb, &(0x7f0000001280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r0}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @jmp={0x5, 0x1, 0xa, 0xa, 0x7, 0x6, 0x4}], &(0x7f0000001300)='GPL\x00', 0x8, 0x1000, &(0x7f0000001340)=""/4096, 0x41000, 0x10, '\x00', r10, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002380)={0x3, 0xa, 0x5}, 0x10, 0x2638b, 0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[r0, r0], 0x0, 0x10, 0xa7}, 0x94) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x8c, 0x3, 0x7, 0x201, 0x0, 0x0, {0xaf64303f2490fa3e, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x95b}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x914e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8850}, 0x44800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x3edcf28fdf58ad4b}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000027c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x70}, 0x1, 0x0, 0x0, 0x40810}, 0x4015) 1.426854065s ago: executing program 2 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newqdisc={0x178, 0x24, 0x405, 0x40000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfb, 0x41, 0x0, 0x0, 0x0, 0x9}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 1.425963516s ago: executing program 4 (id=488): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7], 0x1c}}, 0x2000040) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x278, 0x13, 0x400, 0x70bd2d, 0x25dfdbff, {0x1f, 0x3, 0x6, 0x4, {0x4e23, 0x4e21, [0x4, 0x9, 0x4, 0x2], [0xffff7fff, 0x7baf9f6a, 0xc5, 0xc5a7a6ce], r7, [0x4, 0x10001]}}, [@INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "5702fe9240ec1c809af51733059cc17ac512cb4784550325650a35b875a745cfe040f50c33e0588701575d6b478e52b87b6ef659c3354d7e81fde22392ddbc5da9f890447eb33833c762dcd008b2d0077c7ae9bc4fe40f1c65"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "1df41f0461acaf7a1230c5380570712eed97fe2e2501c3de7af3c1ad006f9f835bfdbd36ce769e4d5f5a3749d45649dc181501ef17417fa696228ec18aa32ecf9a50a1d451ef5cc6ae660b5611a077ce8d645d645594f407cb0a623f38559895f4a102716cd5a5906c043ff5c3c6e9d1a28024e2a63ac806b381e32439b0659d072856eba15c3b60d4dcbf6d7dedd23a2c98a3af3a50c8a06bafa07e3b337665e886a2f25baac8c5fad5e9f765eabb4d0573a197fb7c270320b9cc2d9f91577c93ce81a6fa5512d4db9d5a16cae365e340de761597002def3f6faf208b26d8ec9fad0412ceb2ea09896c852781d5b7f4f058069fac700b18"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "ddd24b6ee72e152747d35eeeed09c5ff45e3aa13600e25ccfb8c0c31bf6e6bfe8aa427cf6320cac4690d28463d9ca2c0cba1346da5176920377fb4a154e7eed1b4a4238efca0231dae51b57e538873dfff1481ecd7e1c2d008afe9263ba551bfd9d1210486d99ed9e54e7c96ab9d740992d2aee77b17e7c15608a9855f0d1193c166cecd73d196733846f6f42b044105e7c2b750c06e567cff3989d1031b519208b28e2ff34a2c3ef3b26bd300f84cb3385bbe1ca0ec1c843d9cd4eb24638e414dff21225fa9a2a5bf73b825"}]}, 0x278}, 0x1, 0x0, 0x0, 0x4040850}, 0x20008000) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r4, 0x6, 0xffffffff, 0xffffffff}) sendmsg$802154_raw(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)="62a194481dd5d08aefad4cec2f077dd365a326257314728698dc00", 0x1b}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.377260514s ago: executing program 1 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000050085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.373943543s ago: executing program 0 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) close(r0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.179901661s ago: executing program 2 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20007f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400), 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.179140405s ago: executing program 1 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x100}}, 0x0) 1.105907531s ago: executing program 3 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000200)=0x6000, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f", 0x26}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000080)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x0, 0xaa, 'V', "e4c4e1", 0x11}}}}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r3, 0x200, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x2ff3e5fbb50a2c3e) 332.487288ms ago: executing program 1 (id=494): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff000000000000000085100000020000007d0000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x3c, 0x0, 0x727c45cd4283345, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r4, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000000000074000031e000000110001d500000000000000000000000a"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff000000000000000085100000020000007d0000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x3c, 0x0, 0x727c45cd4283345, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r4, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000000000074000031e000000110001d500000000000000000000000a"], 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 259.905594ms ago: executing program 4 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000100)={0x0, 0x2, 0xefff, 0x4}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="010028bd7000060000000c000000180001801400020076657468315f766972745f7769666900e8000380d10005"], 0x114}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x88}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x4000) 259.162923ms ago: executing program 0 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0xfdfffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) 229.596207ms ago: executing program 2 (id=497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1a9ed426}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000000)=0x5ff) 157.81125ms ago: executing program 3 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 0s ago: executing program 1 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x10, 0x41101, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0xfffffffd}, 0x50) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x7c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x4004089) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) (async, rerun: 32) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r13) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (rerun: 32) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000880)="a81d1c50fa8b965c82d2d38a1f1ac5200d555203a6840611715bd967a3974ae7e145704ae47742f8e974aff23f53be43ad84e4fec5ac48dcd994262e245a4b5803e411dce09a2bde83783dddfd0c16372f8f27ec853bff99e0448673c039b280098427322857369831a1cb00d1411840a0e4b32d5998632d67f24d884879642323d799e971a09749ce7c5c3601af4d504a59cca549755ccd181374d3f6596f594aaa85f4c94c06b1fde90df100b9a69e5a7445c2583124628c06e5dc787ac95baf0ed35d50e978f5be9f8b789b", 0xcd}, {&(0x7f0000000980)="cb23790b708dc67def709cd7394e5150046188c429798d0c37b743acb08118db08208a08cde17d61d51f2f05c2fed1da5a8ce49d921b6c8603bd3031df73e87b7d1ba23f", 0x44}, {&(0x7f0000000a00)="a63865fc43ac8bfeb3ce06", 0xb}, {&(0x7f0000000a40)="b8ee23a0fcfdbb0286ef37c659cdefd3ab0b983ce87aac1c278357186ca746249837216603bcc91bf172b86e2daf240c95b4911d97d91507fdd5bc0d026f91edee26", 0x42}], 0x4, &(0x7f0000000b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xd6, [@multicast2, @private=0xa010100, @rand_addr=0x64010100]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x77, 0x0, 0x5, [0x8, 0x1, 0x1, 0x6]}, @rr={0x7, 0x17, 0xa1, [@local, @empty, @rand_addr=0x64010102, @empty, @rand_addr=0x64010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0xc0}}], 0x1, 0x50) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@loopback, 0x0}, &(0x7f0000000600)=0x14) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) (async) openat$cgroup_ro(r9, &(0x7f0000000840)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x355c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x1000, 0x1f, &(0x7f0000000580)=""/31, 0x40f00, 0x66, '\x00', r14, @sk_reuseport=0x27}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 76.287305][ T5604] cgroup: Unknown subsys name 'net' [ 76.399044][ T5604] cgroup: Unknown subsys name 'cpuset' [ 76.407734][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.014995][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.076496][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.078501][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.080902][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.101458][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.105209][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.106135][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.107671][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.109426][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.109881][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.110246][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.111246][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.113927][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.121177][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.134802][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.152699][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.153582][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.153993][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.165129][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.165374][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.166707][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.173536][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.180839][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.189123][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.190872][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.191592][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.943804][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.943990][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.956789][ T5616] bridge_slave_0: entered allmulticast mode [ 83.963234][ T5616] bridge_slave_0: entered promiscuous mode [ 84.003059][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.003319][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.008809][ T5616] bridge_slave_1: entered allmulticast mode [ 84.019701][ T5616] bridge_slave_1: entered promiscuous mode [ 84.182057][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.193344][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.202821][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.202931][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.203066][ T5615] bridge_slave_0: entered allmulticast mode [ 84.208743][ T5615] bridge_slave_0: entered promiscuous mode [ 84.245172][ T5624] Bluetooth: hci0: command tx timeout [ 84.245458][ T5624] Bluetooth: hci3: command tx timeout [ 84.245684][ T5624] Bluetooth: hci1: command tx timeout [ 84.245879][ T5624] Bluetooth: hci4: command tx timeout [ 84.247409][ T5633] Bluetooth: hci2: command tx timeout [ 84.288292][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.288645][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.289681][ T5615] bridge_slave_1: entered allmulticast mode [ 84.296930][ T5615] bridge_slave_1: entered promiscuous mode [ 84.360480][ T5616] team0: Port device team_slave_0 added [ 84.365602][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.365878][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.366174][ T5626] bridge_slave_0: entered allmulticast mode [ 84.370745][ T5626] bridge_slave_0: entered promiscuous mode [ 84.423684][ T5616] team0: Port device team_slave_1 added [ 84.424914][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.425598][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.427562][ T5626] bridge_slave_1: entered allmulticast mode [ 84.431269][ T5626] bridge_slave_1: entered promiscuous mode [ 84.461878][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.462254][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.463235][ T5617] bridge_slave_0: entered allmulticast mode [ 84.469792][ T5617] bridge_slave_0: entered promiscuous mode [ 84.494008][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.503125][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.551540][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.551819][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.552161][ T5617] bridge_slave_1: entered allmulticast mode [ 84.558770][ T5617] bridge_slave_1: entered promiscuous mode [ 84.588890][ T5615] team0: Port device team_slave_0 added [ 84.620470][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.635981][ T5615] team0: Port device team_slave_1 added [ 84.640839][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.640889][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.640960][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.688517][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.716349][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.716399][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.716425][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.730093][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.790731][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.822614][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.822863][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.824084][ T5614] bridge_slave_0: entered allmulticast mode [ 84.829230][ T5614] bridge_slave_0: entered promiscuous mode [ 84.860527][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.860564][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.860592][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.872653][ T5626] team0: Port device team_slave_0 added [ 84.873184][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.875221][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.875572][ T5614] bridge_slave_1: entered allmulticast mode [ 84.882251][ T5614] bridge_slave_1: entered promiscuous mode [ 84.946271][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.946309][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.946357][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.955549][ T5626] team0: Port device team_slave_1 added [ 85.041050][ T5617] team0: Port device team_slave_0 added [ 85.048388][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.073150][ T5616] hsr_slave_0: entered promiscuous mode [ 85.079085][ T5616] hsr_slave_1: entered promiscuous mode [ 85.086757][ T5617] team0: Port device team_slave_1 added [ 85.095015][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.113686][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.113816][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.113904][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.198516][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.198559][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.198586][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.263143][ T5615] hsr_slave_0: entered promiscuous mode [ 85.269018][ T5615] hsr_slave_1: entered promiscuous mode [ 85.272480][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 85.272713][ T5615] Cannot create hsr debugfs directory [ 85.292151][ T5614] team0: Port device team_slave_0 added [ 85.304534][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.304811][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.304882][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.325209][ T5614] team0: Port device team_slave_1 added [ 85.358672][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.358820][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.358919][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.490637][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.490685][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.491865][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.519545][ T5626] hsr_slave_0: entered promiscuous mode [ 85.529770][ T5626] hsr_slave_1: entered promiscuous mode [ 85.532046][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 85.532099][ T5626] Cannot create hsr debugfs directory [ 85.565726][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.565764][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.565792][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.660229][ T5617] hsr_slave_0: entered promiscuous mode [ 85.663485][ T5617] hsr_slave_1: entered promiscuous mode [ 85.667219][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 85.667278][ T5617] Cannot create hsr debugfs directory [ 85.838091][ T5614] hsr_slave_0: entered promiscuous mode [ 85.840675][ T5614] hsr_slave_1: entered promiscuous mode [ 85.842537][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 85.842589][ T5614] Cannot create hsr debugfs directory [ 86.175059][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.187066][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.202388][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.212006][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.216344][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.230339][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.259065][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.270243][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.324848][ T5618] Bluetooth: hci4: command tx timeout [ 86.324895][ T5618] Bluetooth: hci1: command tx timeout [ 86.324934][ T5618] Bluetooth: hci3: command tx timeout [ 86.324960][ T5618] Bluetooth: hci0: command tx timeout [ 86.336217][ T5633] Bluetooth: hci2: command tx timeout [ 86.353896][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.372112][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.380464][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.393612][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.406661][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.418094][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.420227][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.432643][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.532138][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.541579][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.547955][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.559130][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.572416][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.582698][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.592360][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.603208][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.706216][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.717633][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.727294][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.737649][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.756915][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.767260][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.769428][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.780443][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.867514][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.995321][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.006980][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.018374][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.038118][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.050943][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.069463][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.080820][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.091105][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.092379][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.121715][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.122627][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.139695][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.173322][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.173451][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.271299][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.300727][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.300993][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.333620][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.333861][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.376585][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.417948][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.445383][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.500352][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.500476][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.529113][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.561382][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.561535][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.593885][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.594137][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.630945][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.631131][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.668111][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.781259][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.824009][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.824340][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.855255][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.855354][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.404905][ T5624] Bluetooth: hci0: command tx timeout [ 88.406486][ T5624] Bluetooth: hci3: command tx timeout [ 88.408736][ T5624] Bluetooth: hci1: command tx timeout [ 88.408769][ T5624] Bluetooth: hci4: command tx timeout [ 88.414520][ T5633] Bluetooth: hci2: command tx timeout [ 88.812456][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.930898][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.081806][ T5616] veth0_vlan: entered promiscuous mode [ 89.139692][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.157317][ T5616] veth1_vlan: entered promiscuous mode [ 89.176461][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.198790][ T5626] veth0_vlan: entered promiscuous mode [ 89.226395][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.247896][ T5626] veth1_vlan: entered promiscuous mode [ 89.295168][ T5616] veth0_macvtap: entered promiscuous mode [ 89.334703][ T5616] veth1_macvtap: entered promiscuous mode [ 89.372472][ T5617] veth0_vlan: entered promiscuous mode [ 89.413714][ T5615] veth0_vlan: entered promiscuous mode [ 89.422524][ T5617] veth1_vlan: entered promiscuous mode [ 89.449613][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.482626][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.490692][ T5626] veth0_macvtap: entered promiscuous mode [ 89.519020][ T5615] veth1_vlan: entered promiscuous mode [ 89.538119][ T5626] veth1_macvtap: entered promiscuous mode [ 89.600501][ T5617] veth0_macvtap: entered promiscuous mode [ 89.634176][ T5617] veth1_macvtap: entered promiscuous mode [ 89.647340][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.675737][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.716059][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.716526][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.716647][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.716747][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.716850][ T1151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.716951][ T1151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.717040][ T1151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.783733][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.814991][ T1139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.838493][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.849748][ T5615] veth0_macvtap: entered promiscuous mode [ 89.880750][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.880801][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.912958][ T5615] veth1_macvtap: entered promiscuous mode [ 89.919257][ T5614] veth0_vlan: entered promiscuous mode [ 89.960940][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.961000][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.037011][ T5614] veth1_vlan: entered promiscuous mode [ 90.079411][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.096245][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096360][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.106712][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.149379][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.149417][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.175435][ T1151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.189225][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.204603][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.294836][ T1151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.323236][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.323274][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.364431][ T27] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.366716][ T1151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.419932][ T5614] veth0_macvtap: entered promiscuous mode [ 90.442637][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.442676][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.485510][ T5618] Bluetooth: hci4: command tx timeout [ 90.486855][ T5618] Bluetooth: hci1: command tx timeout [ 90.486903][ T5618] Bluetooth: hci3: command tx timeout [ 90.486931][ T5618] Bluetooth: hci0: command tx timeout [ 90.492557][ T5633] Bluetooth: hci2: command tx timeout [ 90.534556][ T5614] veth1_macvtap: entered promiscuous mode [ 90.602869][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.602909][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.655736][ T27] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.696896][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.696974][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.749120][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.849327][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.863873][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.863933][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.979821][ T5827] Zero length message leads to an empty skb [ 91.034679][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.040515][ T1139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.104818][ T1139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.105256][ T1139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.136856][ T5832] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7'. [ 91.377333][ T27] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.379608][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.380732][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.428630][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.428670][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.525503][ T3012] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.525850][ T5836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.550934][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.550975][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.572314][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.711977][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 91.720200][ T5846] bond1 (unregistering): Released all slaves [ 91.883385][ T5848] bond0: Unable to set down delay as MII monitoring is disabled [ 92.268940][ T1151] IPVS: starting estimator thread 0... [ 92.331004][ T5861] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 92.364309][ T5859] IPVS: using max 23 ests per chain, 55200 per kthread [ 92.475392][ T5860] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.878787][ T9] cfg80211: failed to load regulatory.db [ 93.696067][ T5905] openvswitch: netlink: Missing valid actions attribute. [ 93.696140][ T5905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.850435][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 93.950744][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 94.398154][ T5931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27'. [ 94.583796][ T5939] warning: `syz.4.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.608946][ T5943] openvswitch: netlink: IP tunnel TTL not specified. [ 94.616892][ T5943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.812638][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 94.857783][ T5928] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 94.857836][ T5928] netlink: 248 bytes leftover after parsing attributes in process `syz.0.26'. [ 95.230068][ T5964] netlink: 'syz.3.37': attribute type 8 has an invalid length. [ 96.156936][ T5989] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 96.160033][ T5989] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 96.561889][ T6025] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 96.579894][ T6031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 96.598015][ T6022] syzkaller0: entered promiscuous mode [ 96.598061][ T6022] syzkaller0: entered allmulticast mode [ 96.613710][ T6023] tipc: Started in network mode [ 96.613757][ T6023] tipc: Node identity 524a5ebdaf71, cluster identity 4711 [ 96.631469][ T6031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 96.641944][ T6023] tipc: Enabled bearer , priority 0 [ 96.695870][ T6022] tipc: Resetting bearer [ 96.708002][ T6020] tipc: Resetting bearer [ 96.745825][ T6020] tipc: Disabling bearer [ 96.782586][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 97.148638][ T6058] ip_tables: iptables: counters copy to user failed while replacing table [ 97.239808][ T6056] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 98.106677][ T6091] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 98.141085][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 98.577931][ T6123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.78'. [ 98.773644][ T6127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'. [ 98.789962][ T6127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'. [ 99.435807][ T6150] syzkaller0: entered promiscuous mode [ 99.435856][ T6150] syzkaller0: entered allmulticast mode [ 99.479068][ T6127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.497370][ T6133] tipc: Enabling of bearer rejected, media not registered [ 99.583303][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85'. [ 100.811806][ T6172] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 100.811853][ T6172] netlink: 'syz.4.85': attribute type 2 has an invalid length. [ 100.812877][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 101.404018][ T6214] FAULT_INJECTION: forcing a failure. [ 101.404018][ T6214] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.404083][ T6214] CPU: 1 UID: 0 PID: 6214 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 101.404109][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.404134][ T6214] Call Trace: [ 101.404147][ T6214] [ 101.404156][ T6214] dump_stack_lvl+0xe8/0x150 [ 101.404201][ T6214] should_fail_ex+0x410/0x560 [ 101.404240][ T6214] _copy_from_user+0x2d/0xb0 [ 101.404265][ T6214] ___sys_sendmsg+0x1c6/0x360 [ 101.404289][ T6214] ? __lock_acquire+0x6df/0x2e50 [ 101.404316][ T6214] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.404386][ T6214] ? __fget_files+0x2a/0x420 [ 101.404413][ T6214] ? __fget_files+0x3a2/0x420 [ 101.404453][ T6214] __x64_sys_sendmsg+0x1b1/0x290 [ 101.404480][ T6214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.404526][ T6214] do_syscall_64+0x166/0x520 [ 101.404557][ T6214] ? trace_irq_disable+0x3b/0x140 [ 101.404578][ T6214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.404601][ T6214] ? clear_bhb_loop+0x70/0xc0 [ 101.404628][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.404651][ T6214] RIP: 0033:0x7f706339e159 [ 101.404677][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.404696][ T6214] RSP: 002b:00007f70641cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.404724][ T6214] RAX: ffffffffffffffda RBX: 00007f7063625fa0 RCX: 00007f706339e159 [ 101.404741][ T6214] RDX: 0000000008000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 101.404755][ T6214] RBP: 00007f70641cd090 R08: 0000000000000000 R09: 0000000000000000 [ 101.404769][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.404782][ T6214] R13: 00007f7063626038 R14: 00007f7063625fa0 R15: 00007ffc1e4cf448 [ 101.404817][ T6214] [ 101.898915][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.908107][ T6222] netlink: 'syz.2.97': attribute type 7 has an invalid length. [ 101.918987][ T6218] bridge0: port 3(wlan1) entered blocking state [ 101.920249][ T6218] bridge0: port 3(wlan1) entered disabled state [ 101.932156][ T6222] netlink: 'syz.2.97': attribute type 8 has an invalid length. [ 101.932206][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.964582][ T6226] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 101.972470][ T6226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.983215][ T6218] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 102.018568][ T6218] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 102.039833][ T6218] bridge0: port 3(wlan1) entered blocking state [ 102.042049][ T6218] bridge0: port 3(wlan1) entered forwarding state [ 102.073205][ T117] bridge0: port 3(wlan1) entered disabled state [ 102.141912][ T6233] netlink: 170676 bytes leftover after parsing attributes in process `syz.3.98'. [ 102.141975][ T6233] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 102.143712][ T6233] openvswitch: netlink: Message has 512 unknown bytes. [ 102.191103][ T6223] bridge0: port 3(wlan1) entered disabled state [ 102.208156][ T6223] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 102.217553][ T6223] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 102.217721][ T6223] bridge0: port 3(wlan1) entered disabled state [ 102.746568][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'. [ 102.892595][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 102.901823][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 102.921216][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 103.339397][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 103.341659][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 103.418223][ T6278] gretap0: entered promiscuous mode [ 103.438873][ T6280] netlink: 'syz.4.110': attribute type 3 has an invalid length. [ 103.438915][ T6280] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 103.438969][ T6280] NCSI netlink: No device for ifindex 117440522 [ 103.486052][ T6247] syz.2.101 (6247) used greatest stack depth: 18088 bytes left [ 103.493781][ T6278] siw: device registration error -23 [ 103.541124][ T6281] 0ªî{X¹¦: renamed from gretap0 [ 103.602230][ T6281] 0ªî{X¹¦: left promiscuous mode [ 103.602289][ T6281] 0ªî{X¹¦: entered allmulticast mode [ 103.641986][ T6280] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 103.662496][ T6281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 103.742008][ T6279] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 103.742070][ T6279] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 103.742136][ T6279] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 103.838659][ T6279] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.946091][ T6279] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.524349][ T6298] netlink: 'syz.2.112': attribute type 21 has an invalid length. [ 104.524532][ T6298] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 104.524567][ T6298] netlink: 'syz.2.112': attribute type 5 has an invalid length. [ 105.159358][ T6331] xt_LOG: prefix is not null-terminated [ 105.246368][ T6334] nbd: must specify at least one socket [ 105.376440][ T6337] macvlan2: entered promiscuous mode [ 105.382006][ T6337] macvlan2: entered allmulticast mode [ 105.390991][ T6337] bond1: entered promiscuous mode [ 105.398494][ T6337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.409233][ T6337] bond1: left promiscuous mode [ 106.274950][ T6376] openvswitch: netlink: Missing key (keys=40, expected=100) [ 106.442102][ T6376] syzkaller0: entered promiscuous mode [ 106.442149][ T6376] syzkaller0: entered allmulticast mode [ 106.902015][ T6395] validate_nla: 1 callbacks suppressed [ 106.915785][ T6395] netlink: 'syz.0.136': attribute type 3 has an invalid length. [ 107.086835][ T6408] openvswitch: netlink: Missing valid actions attribute. [ 107.086898][ T6408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.158313][ T6414] syzkaller0: entered promiscuous mode [ 107.158357][ T6414] syzkaller0: entered allmulticast mode [ 107.533584][ T6423] __nla_validate_parse: 11 callbacks suppressed [ 107.533631][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.141'. [ 107.620744][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 107.630534][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 108.170414][ T6448] netlink: 'syz.2.150': attribute type 25 has an invalid length. [ 108.846917][ T6456] netlink: 'syz.1.151': attribute type 362 has an invalid length. [ 108.867954][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 109.040878][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 109.040933][ T6462] netlink: 'syz.3.154': attribute type 30 has an invalid length. [ 109.174718][ T6470] sctp: [Deprecated]: syz.0.156 (pid 6470) Use of int in maxseg socket option. [ 109.174718][ T6470] Use struct sctp_assoc_value instead [ 109.226179][ T6470] Bluetooth: MGMT ver 1.23 [ 109.232891][ T6470] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 109.275719][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.156'. [ 109.316373][ T6469] ip6gre1: entered promiscuous mode [ 109.321768][ T6469] ip6gre1: entered allmulticast mode [ 109.356141][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 109.372110][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 109.390678][ T6472] ipvlan2: entered allmulticast mode [ 109.396365][ T6472] syz_tun: entered allmulticast mode [ 109.474123][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 109.684391][ T6483] netlink: 566 bytes leftover after parsing attributes in process `syz.2.160'. [ 109.714619][ T6483] bridge_slave_0: left allmulticast mode [ 109.720423][ T6483] bridge_slave_0: left promiscuous mode [ 109.728171][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.752937][ T6483] bridge_slave_1: left allmulticast mode [ 109.759722][ T6483] bridge_slave_1: left promiscuous mode [ 109.765737][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.853050][ T6483] bond0: (slave bond_slave_0): Releasing backup interface [ 109.896667][ T6483] bond0: (slave bond_slave_1): Releasing backup interface [ 109.932001][ T6483] team0: Port device team_slave_0 removed [ 109.942449][ T6483] team0: Port device team_slave_1 removed [ 109.946569][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.946620][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.961447][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.961501][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.975159][ T6483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.876025][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.922003][ T6526] netlink: 'syz.0.170': attribute type 5 has an invalid length. [ 111.122606][ T6534] bridge1: entered promiscuous mode [ 111.604484][ T6550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.382477][ T6578] netlink: 'syz.2.188': attribute type 12 has an invalid length. [ 112.651071][ T6593] syz_tun: entered allmulticast mode [ 112.850117][ T6575] __nla_validate_parse: 6 callbacks suppressed [ 112.856594][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 112.905894][ T6592] syz_tun: left allmulticast mode [ 112.975257][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 113.255728][ T6617] netlink: 56 bytes leftover after parsing attributes in process `syz.3.198'. [ 113.392542][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880698fe400: rx timeout, send abort [ 113.611656][ T6638] syzkaller0: entered promiscuous mode [ 113.611718][ T6638] syzkaller0: entered allmulticast mode [ 113.696257][ T6636] syzkaller1: entered promiscuous mode [ 113.696307][ T6636] syzkaller1: entered allmulticast mode [ 113.739553][ T6643] openvswitch: netlink: Missing valid actions attribute. [ 113.747471][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.892689][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880698ffc00: rx timeout, send abort [ 113.901074][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880698fe400: abort rx timeout. Force session deactivation [ 114.173585][ T6655] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 114.203444][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 114.282687][ T6655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.318840][ T6660] bond2: (slave gretap1): making interface the new active one [ 114.331990][ T6660] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 114.342657][ T6661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.211'. [ 114.342708][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 114.342729][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 114.342764][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.211'. [ 114.392761][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880698ffc00: abort rx timeout. Force session deactivation [ 114.396351][ T6660] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 114.396401][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.209'. [ 114.500673][ T6679] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 114.500718][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.209'. [ 114.510507][ T6668] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 114.541152][ T6655] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 114.769086][ T6660] dummy0: entered promiscuous mode [ 114.813996][ T6660] bond2: (slave dummy0): Releasing active interface [ 114.817121][ T6660] gretap1: entered promiscuous mode [ 115.362134][ T6711] openvswitch: netlink: Missing valid actions attribute. [ 115.362201][ T6711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.453105][ T6719] FAULT_INJECTION: forcing a failure. [ 115.453105][ T6719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.472006][ T6719] CPU: 0 UID: 0 PID: 6719 Comm: syz.4.220 Not tainted syzkaller #0 PREEMPT(full) [ 115.472036][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.472050][ T6719] Call Trace: [ 115.472058][ T6719] [ 115.472067][ T6719] dump_stack_lvl+0xe8/0x150 [ 115.472115][ T6719] should_fail_ex+0x410/0x560 [ 115.472154][ T6719] _copy_to_user+0x31/0xb0 [ 115.472180][ T6719] simple_read_from_buffer+0xe1/0x170 [ 115.472215][ T6719] proc_fail_nth_read+0x1bb/0x230 [ 115.472246][ T6719] ? common_file_perm+0x20e/0x2b0 [ 115.472272][ T6719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.472307][ T6719] ? rw_verify_area+0x24a/0x4c0 [ 115.472340][ T6719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.472371][ T6719] vfs_read+0x213/0xa80 [ 115.472406][ T6719] ? __pfx___mutex_lock+0x10/0x10 [ 115.472440][ T6719] ? __pfx_vfs_read+0x10/0x10 [ 115.472471][ T6719] ? __fget_files+0x2a/0x420 [ 115.472503][ T6719] ? __fget_files+0x3a2/0x420 [ 115.472530][ T6719] ? __fget_files+0x2a/0x420 [ 115.472567][ T6719] ksys_read+0x150/0x270 [ 115.472619][ T6719] ? __pfx_ksys_read+0x10/0x10 [ 115.472662][ T6719] do_syscall_64+0x166/0x520 [ 115.472693][ T6719] ? trace_irq_disable+0x3b/0x140 [ 115.472714][ T6719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.472737][ T6719] ? clear_bhb_loop+0x70/0xc0 [ 115.472766][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.472788][ T6719] RIP: 0033:0x7efe3915e98e [ 115.472814][ T6719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.472838][ T6719] RSP: 002b:00007efe39fa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.472865][ T6719] RAX: ffffffffffffffda RBX: 00007efe39fa86c0 RCX: 00007efe3915e98e [ 115.472882][ T6719] RDX: 000000000000000f RSI: 00007efe39fa80a0 RDI: 0000000000000004 [ 115.472896][ T6719] RBP: 00007efe39fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 115.472910][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.472923][ T6719] R13: 00007efe39426038 R14: 00007efe39425fa0 R15: 00007ffda7d03538 [ 115.472957][ T6719] [ 115.922019][ T6729] netlink: 'syz.1.222': attribute type 29 has an invalid length. [ 116.223817][ T6738] netlink: 'syz.2.225': attribute type 9 has an invalid length. [ 116.262386][ T6738] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 116.283586][ T6738] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 116.577927][ T6755] tipc: Trying to set illegal importance in message [ 116.807838][ T6762] openvswitch: netlink: Multiple metadata blocks provided [ 116.837478][ T6763] openvswitch: netlink: Missing valid actions attribute. [ 116.837552][ T6763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.812054][ T6849] block nbd1: not configured, cannot reconfigure [ 119.071354][ T6861] __nla_validate_parse: 8 callbacks suppressed [ 119.073139][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.249'. [ 119.238504][ T6875] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 119.258917][ T6860] syzkaller0: entered promiscuous mode [ 119.264801][ T6860] syzkaller0: entered allmulticast mode [ 119.358507][ T6875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.251'. [ 119.496835][ T6860] bond4: option tlb_dynamic_lb: invalid value (128) [ 119.519469][ T6860] bond4 (unregistering): Released all slaves [ 119.652206][ T6869] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 120.898160][ T6927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.167393][ T6909] pim6reg: entered allmulticast mode [ 122.533595][ T6973] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.582519][ T6976] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.007665][ T7000] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 123.222627][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 123.327026][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 123.521844][ T7018] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 123.727114][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 123.766563][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 124.008539][ T7005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 124.019485][ T7050] syzkaller0: entered promiscuous mode [ 124.025172][ T7050] syzkaller0: entered allmulticast mode [ 124.051858][ T7050] netlink: 72 bytes leftover after parsing attributes in process `syz.3.274'. [ 124.065206][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 124.443414][ T7060] syzkaller0: entered promiscuous mode [ 124.443467][ T7060] syzkaller0: entered allmulticast mode [ 124.577842][ T7068] netlink: 'syz.3.278': attribute type 4 has an invalid length. [ 124.577883][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 124.905698][ T7075] netlink: 232 bytes leftover after parsing attributes in process `syz.2.281'. [ 124.975979][ T7078] netlink: 80 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.017526][ T7078] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 125.127020][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.127679][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.138282][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.142794][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.145621][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.147956][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.150467][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 126.457174][ T12] gretap1: left promiscuous mode [ 126.673921][ T7113] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 126.775152][ T7127] dvmrp0: entered allmulticast mode [ 126.908334][ T7130] dvmrp1: entered allmulticast mode [ 127.624596][ T7166] openvswitch: netlink: Unknown key attributes 1 [ 127.707695][ T7171] openvswitch: netlink: Missing valid actions attribute. [ 127.715441][ T7171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.812357][ T7175] dvmrp0: left allmulticast mode [ 127.817708][ T7175] dvmrp1: left allmulticast mode [ 128.174369][ T7186] syzkaller0: entered promiscuous mode [ 128.180131][ T7186] syzkaller0: entered allmulticast mode [ 128.955871][ T7211] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.554019][ T7231] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.721177][ T7231] team0: Mode changed to "loadbalance" [ 129.746906][ T7231] __nla_validate_parse: 75 callbacks suppressed [ 129.753410][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 129.894382][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 130.105970][ T7254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.132502][ T7246] bond1: option lacp_active: invalid value (5) [ 130.145629][ T7246] bond1 (unregistering): Released all slaves [ 130.370282][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 130.387836][ T7274] netlink: 'syz.4.328': attribute type 7 has an invalid length. [ 130.699310][ T7274] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 130.709973][ T7279] tc_dump_action: action bad kind [ 130.872570][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 130.890372][ T7293] bridge0: port 3(erspan0) entered blocking state [ 130.890730][ T7293] bridge0: port 3(erspan0) entered disabled state [ 130.893126][ T7293] erspan0: entered allmulticast mode [ 130.914458][ T7293] erspan0: entered promiscuous mode [ 130.915179][ T7293] bridge0: port 3(erspan0) entered blocking state [ 130.915302][ T7293] bridge0: port 3(erspan0) entered forwarding state [ 131.563923][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 131.599714][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 131.671951][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.526334][ T7337] veth1_to_bond: entered allmulticast mode [ 132.544941][ T7337] veth1_to_bond: left allmulticast mode [ 132.888952][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.241276][ T7373] netlink: 5 bytes leftover after parsing attributes in process `syz.2.350'. [ 133.241450][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 133.248492][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 133.326933][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 133.792954][ T7393] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 133.802499][ T7395] ip_tables: iptables: counters copy to user failed while replacing table [ 133.836513][ T7395] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 133.878475][ T7393] syzkaller0: entered promiscuous mode [ 133.878522][ T7393] syzkaller0: entered allmulticast mode [ 134.043609][ T7406] syzkaller0: entered promiscuous mode [ 134.043659][ T7406] syzkaller0: entered allmulticast mode [ 134.145997][ T7410] Bluetooth: hci0: unsupported parameter 5135 [ 134.146044][ T7410] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 134.161827][ T7413] Bluetooth: hci0: unsupported parameter 5135 [ 134.168833][ T7413] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 134.291677][ T7409] hsr_slave_1 (unregistering): left promiscuous mode [ 134.337594][ T7417] ovs-s: entered promiscuous mode [ 134.352818][ T7420] openvswitch: ovs-s: Dropping previously announced user features [ 134.765532][ T7433] __nla_validate_parse: 47 callbacks suppressed [ 134.765589][ T7433] netlink: 100 bytes leftover after parsing attributes in process `syz.3.369'. [ 138.234612][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'. [ 138.325766][ T7470] Bluetooth: MGMT ver 1.23 [ 138.336319][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 140.930467][ T7452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.322541][ T7504] netlink: 84 bytes leftover after parsing attributes in process `syz.1.387'. [ 141.347000][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 141.502904][ T7517] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 141.915989][ T7525] erspan0: left allmulticast mode [ 141.916033][ T7525] erspan0: left promiscuous mode [ 141.916789][ T7525] bridge0: port 3(erspan0) entered disabled state [ 142.110072][ T7525] syzkaller1: entered promiscuous mode [ 142.110115][ T7525] syzkaller1: entered allmulticast mode [ 142.188036][ T7539] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 142.199469][ T7539] lo: entered promiscuous mode [ 142.217972][ T7539] tunl0: entered promiscuous mode [ 142.233914][ T7539] gre0: entered promiscuous mode [ 142.251014][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 142.473952][ T7539] gretap0: entered promiscuous mode [ 142.529911][ T7539] erspan0: entered promiscuous mode [ 142.550074][ T7539] ip_vti0: entered promiscuous mode [ 142.572284][ T7539] ip6_vti0: entered promiscuous mode [ 142.591619][ T7539] sit0: entered promiscuous mode [ 142.625125][ T7539] ip6tnl0: entered promiscuous mode [ 142.635913][ T7539] ip6gre0: entered promiscuous mode [ 142.650224][ T7539] syz_tun: entered promiscuous mode [ 142.676793][ T7539] ip6gretap0: entered promiscuous mode [ 142.716447][ T7539] bridge0: entered promiscuous mode [ 143.456094][ T7583] syzkaller0: refused to change device tx_queue_len [ 143.479841][ T7579] netlink: 564 bytes leftover after parsing attributes in process `syz.1.405'. [ 143.617162][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 143.658174][ T7579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 144.066139][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 144.127980][ T7597] ovs-system: entered promiscuous mode [ 144.139723][ T7598] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1504) ! [ 144.492688][ T7611] FAULT_INJECTION: forcing a failure. [ 144.492688][ T7611] name failslab, interval 1, probability 0, space 0, times 1 [ 144.509232][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(full) [ 144.509268][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.509282][ T7611] Call Trace: [ 144.509290][ T7611] [ 144.509298][ T7611] dump_stack_lvl+0xe8/0x150 [ 144.509333][ T7611] should_fail_ex+0x410/0x560 [ 144.509369][ T7611] ? __alloc_skb+0x1db/0x7a0 [ 144.509401][ T7611] should_failslab+0xa8/0x100 [ 144.509436][ T7611] ? __alloc_skb+0x1db/0x7a0 [ 144.509465][ T7611] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 144.509497][ T7611] ? __alloc_skb+0x18d/0x7a0 [ 144.509528][ T7611] ? __alloc_skb+0x1db/0x7a0 [ 144.509566][ T7611] __alloc_skb+0x1db/0x7a0 [ 144.509602][ T7611] alloc_skb_with_frags+0xc6/0x760 [ 144.509625][ T7611] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 144.509657][ T7611] sock_alloc_send_pskb+0x878/0x990 [ 144.509701][ T7611] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 144.509726][ T7611] ? aa_file_perm+0x18b/0x15f0 [ 144.509755][ T7611] ? aa_sk_perm+0x713/0x900 [ 144.509774][ T7611] ? aa_file_perm+0x18b/0x15f0 [ 144.509803][ T7611] hci_sock_sendmsg+0x208/0xf50 [ 144.509829][ T7611] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.509852][ T7611] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 144.509882][ T7611] ? apparmor_socket_sendmsg+0x98/0x360 [ 144.509912][ T7611] ? lock_acquire+0x115/0x350 [ 144.509934][ T7611] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 144.509957][ T7611] sock_sendmsg_nosec+0x13a/0x180 [ 144.509990][ T7611] sock_write_iter+0x2de/0x3e0 [ 144.510018][ T7611] ? __pfx_sock_write_iter+0x10/0x10 [ 144.510052][ T7611] ? bpf_lsm_file_permission+0x9/0x20 [ 144.510079][ T7611] ? security_file_permission+0x75/0x260 [ 144.510117][ T7611] vfs_write+0x612/0xba0 [ 144.510156][ T7611] ? __pfx_vfs_write+0x10/0x10 [ 144.510198][ T7611] ? __fget_files+0x2a/0x420 [ 144.510235][ T7611] ksys_write+0x150/0x270 [ 144.510282][ T7611] ? __pfx_ksys_write+0x10/0x10 [ 144.510324][ T7611] do_syscall_64+0x166/0x520 [ 144.510356][ T7611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.510378][ T7611] ? clear_bhb_loop+0x70/0xc0 [ 144.510409][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.510431][ T7611] RIP: 0033:0x7ff26939e159 [ 144.510468][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.510486][ T7611] RSP: 002b:00007ff26a29f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.510510][ T7611] RAX: ffffffffffffffda RBX: 00007ff269625fa0 RCX: 00007ff26939e159 [ 144.510526][ T7611] RDX: 0000000000000017 RSI: 0000200000000100 RDI: 0000000000000004 [ 144.510539][ T7611] RBP: 00007ff26a29f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.510553][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.510566][ T7611] R13: 00007ff269626038 R14: 00007ff269625fa0 R15: 00007ffd0fe31d68 [ 144.510600][ T7611] [ 145.268451][ T7634] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.268598][ T7634] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.886192][ T7669] veth0_macvtap: left promiscuous mode [ 146.087828][ T7674] syzkaller0: entered promiscuous mode [ 146.094605][ T7674] syzkaller0: entered allmulticast mode [ 146.521143][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 146.655211][ T7695] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 146.712603][ T7695] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 146.748205][ T7695] bond2 (unregistering): Released all slaves [ 146.855847][ T7714] openvswitch: netlink: Missing valid actions attribute. [ 146.855917][ T7714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.459789][ T7717] syzkaller0: entered promiscuous mode [ 147.466417][ T7717] syzkaller0: entered allmulticast mode [ 147.545484][ T7746] xt_CT: No such helper "netbios-ns" [ 148.068086][ T7775] netlink: 68 bytes leftover after parsing attributes in process `syz.4.442'. [ 150.435584][ T7794] openvswitch: netlink: Missing valid actions attribute. [ 150.435644][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.474980][ T1151] IPVS: starting estimator thread 0... [ 150.565191][ T7798] IPVS: using max 24 ests per chain, 57600 per kthread [ 150.665305][ T7806] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.665628][ T7806] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.665953][ T7806] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.666272][ T7806] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.703173][ T7806] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.703488][ T7806] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.263941][ T7826] tipc: Enabling of bearer rejected, failed to enable media [ 151.689626][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 151.868200][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 151.942359][ T7833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.457'. [ 151.942405][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.457'. [ 151.942423][ T7833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.457'. [ 152.008626][ T7860] netlink: 'syz.4.465': attribute type 8 has an invalid length. [ 152.112269][ T7862] netlink: 328 bytes leftover after parsing attributes in process `syz.0.462'. [ 152.112344][ T7862] netlink: 'syz.0.462': attribute type 9 has an invalid length. [ 152.112383][ T7862] netlink: 108 bytes leftover after parsing attributes in process `syz.0.462'. [ 152.112403][ T7862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.462'. [ 152.660237][ T7890] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.672388][ T7890] IPv6: Can't replace route, no match found [ 153.065905][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.069496][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.112946][ T27] IPVS: starting estimator thread 0... [ 153.194686][ T7919] IPVS: using max 24 ests per chain, 57600 per kthread [ 153.217682][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 153.258034][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.263584][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.424691][ T1151] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.424805][ T1151] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.424946][ T1151] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.425076][ T1151] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.482966][ T7922] bond1: entered promiscuous mode [ 154.221207][ T27] IPVS: starting estimator thread 0... [ 154.328249][ T7956] IPVS: using max 37 ests per chain, 88800 per kthread [ 154.932807][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.495'. [ 155.067957][ T7963] bond2 (unregistering): Released all slaves [ 155. ** replaying previous printk message ** [ 155.103275][ T7976] ------------[ cut here ]------------ [ 155.103320][ T7976] verifier bug: backtracking misuse [ 155.103351][ T7976] WARNING: kernel/bpf/backtrack.c:819 at bpf_mark_chain_precision+0x5c90/0x7c20, CPU#0: syz.3.498/7976 [ 155.131501][ T7976] Modules linked in: [ 155.136717][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.3.498 Not tainted syzkaller #0 PREEMPT(full) [ 155.146042][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.156474][ T7976] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 155.163305][ T7976] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 08 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 155.183114][ T7976] RSP: 0018:ffffc90006f47220 EFLAGS: 00010283 [ 155.189814][ T7976] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 155.197929][ T7976] RDX: ffffc900065d1000 RSI: 0000000000004600 RDI: ffffffff907e1190 [ 155.206004][ T7976] RBP: 0000000000000003 R08: ffff888028e8be80 R09: 0000000000000003 [ 155.214034][ T7976] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888055c8d850 [ 155.222600][ T7976] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 155.231111][ T7976] FS: 00007ff26a29f6c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 155.240618][ T7976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.247763][ T7976] CR2: 000000110c366d3d CR3: 0000000079fc4000 CR4: 00000000003526f0 [ 155.256105][ T7976] Call Trace: [ 155.259704][ T7976] [ 155.262694][ T7976] ? update_loop_inline_state+0x22a/0x610 [ 155.268837][ T7976] do_check_insn+0x12c6d/0x17d70 [ 155.273848][ T7976] ? __pfx_do_check_insn+0x10/0x10 [ 155.279403][ T7976] ? verbose+0x11d/0x1a0 [ 155.283723][ T7976] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 155.292094][ T7976] ? __pfx_verbose+0x10/0x10 [ 155.297427][ T7976] ? bpf_vlog_reset+0x2aa/0x340 [ 155.302342][ T7976] ? print_insn_state+0x106/0x170 [ 155.307528][ T7976] do_check_common+0x3c19/0x5d30 [ 155.312554][ T7976] ? __pfx_do_check_common+0x10/0x10 [ 155.317917][ T7976] ? __pfx_verbose+0x10/0x10 [ 155.322566][ T7976] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 155.328492][ T7976] bpf_check+0x2639/0x2e10 [ 155.332967][ T7976] ? ktime_get_with_offset+0x93/0x2d0 [ 155.338471][ T7976] ? __pfx_bpf_check+0x10/0x10 [ 155.343291][ T7976] ? bpf_obj_name_cpy+0x194/0x1e0 [ 155.348402][ T7976] bpf_prog_load+0x14d6/0x1c20 [ 155.353248][ T7976] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.358511][ T7976] __sys_bpf+0xd0d/0xd90 [ 155.362810][ T7976] ? __pfx___sys_bpf+0x10/0x10 [ 155.367740][ T7976] ? do_futex+0x3e7/0x4e0 [ 155.372153][ T7976] ? rcu_is_watching+0x16/0xb0 [ 155.377024][ T7976] __x64_sys_bpf+0xba/0xd0 [ 155.381484][ T7976] do_syscall_64+0x166/0x520 [ 155.386189][ T7976] ? trace_irq_disable+0x3b/0x140 [ 155.391256][ T7976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.397409][ T7976] ? clear_bhb_loop+0x70/0xc0 [ 155.402131][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.408109][ T7976] RIP: 0033:0x7ff26939e159 [ 155.412576][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.432317][ T7976] RSP: 002b:00007ff26a29f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.440831][ T7976] RAX: ffffffffffffffda RBX: 00007ff269625fa0 RCX: 00007ff26939e159 [ 155.448913][ T7976] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 155.456987][ T7976] RBP: 00007ff269435024 R08: 0000000000000000 R09: 0000000000000000 [ 155.465101][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.473309][ T7976] R13: 00007ff269626038 R14: 00007ff269625fa0 R15: 00007ffd0fe31d68 [ 155.481416][ T7976] [ 155.484524][ T7976] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.491845][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.3.498 Not tainted syzkaller #0 PREEMPT(full) [ 155.501079][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.511262][ T7976] Call Trace: [ 155.514570][ T7976] [ 155.517532][ T7976] vpanic+0x56d/0xa60 [ 155.521563][ T7976] ? __pfx__printk+0x10/0x10 [ 155.526201][ T7976] ? __pfx_vpanic+0x10/0x10 [ 155.530748][ T7976] ? is_bpf_text_address+0x292/0x2b0 [ 155.536078][ T7976] ? is_bpf_text_address+0x26/0x2b0 [ 155.541340][ T7976] panic+0xc5/0xd0 [ 155.545125][ T7976] ? __pfx_panic+0x10/0x10 [ 155.549619][ T7976] __warn+0x315/0x4c0 [ 155.553647][ T7976] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 155.559576][ T7976] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 155.565533][ T7976] __report_bug+0x276/0x570 [ 155.570089][ T7976] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 155.576057][ T7976] ? __pfx___report_bug+0x10/0x10 [ 155.581142][ T7976] ? number+0xc60/0xed0 [ 155.585350][ T7976] ? __pfx_number+0x10/0x10 [ 155.589907][ T7976] report_bug_entry+0x19b/0x290 [ 155.594812][ T7976] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 155.600742][ T7976] ? bpf_mark_chain_precision+0x5c95/0x7c20 [ 155.606677][ T7976] handle_bug+0xce/0x200 [ 155.610953][ T7976] exc_invalid_op+0x1a/0x50 [ 155.615486][ T7976] asm_exc_invalid_op+0x1a/0x20 [ 155.620373][ T7976] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 155.626915][ T7976] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 08 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 155.646556][ T7976] RSP: 0018:ffffc90006f47220 EFLAGS: 00010283 [ 155.652665][ T7976] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 155.660674][ T7976] RDX: ffffc900065d1000 RSI: 0000000000004600 RDI: ffffffff907e1190 [ 155.668671][ T7976] RBP: 0000000000000003 R08: ffff888028e8be80 R09: 0000000000000003 [ 155.676675][ T7976] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888055c8d850 [ 155.684679][ T7976] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 155.692691][ T7976] ? bpf_mark_chain_precision+0x5c89/0x7c20 [ 155.698661][ T7976] ? update_loop_inline_state+0x22a/0x610 [ 155.704427][ T7976] do_check_insn+0x12c6d/0x17d70 [ 155.709428][ T7976] ? __pfx_do_check_insn+0x10/0x10 [ 155.714624][ T7976] ? verbose+0x11d/0x1a0 [ 155.718915][ T7976] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 155.724859][ T7976] ? __pfx_verbose+0x10/0x10 [ 155.729502][ T7976] ? bpf_vlog_reset+0x2aa/0x340 [ 155.734408][ T7976] ? print_insn_state+0x106/0x170 [ 155.739468][ T7976] do_check_common+0x3c19/0x5d30 [ 155.744479][ T7976] ? __pfx_do_check_common+0x10/0x10 [ 155.749800][ T7976] ? __pfx_verbose+0x10/0x10 [ 155.754444][ T7976] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 155.760319][ T7976] bpf_check+0x2639/0x2e10 [ 155.764783][ T7976] ? ktime_get_with_offset+0x93/0x2d0 [ 155.770194][ T7976] ? __pfx_bpf_check+0x10/0x10 [ 155.775002][ T7976] ? bpf_obj_name_cpy+0x194/0x1e0 [ 155.780082][ T7976] bpf_prog_load+0x14d6/0x1c20 [ 155.784900][ T7976] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.790077][ T7976] __sys_bpf+0xd0d/0xd90 [ 155.794372][ T7976] ? __pfx___sys_bpf+0x10/0x10 [ 155.799166][ T7976] ? do_futex+0x3e7/0x4e0 [ 155.803552][ T7976] ? rcu_is_watching+0x16/0xb0 [ 155.808357][ T7976] __x64_sys_bpf+0xba/0xd0 [ 155.812814][ T7976] do_syscall_64+0x166/0x520 [ 155.817454][ T7976] ? trace_irq_disable+0x3b/0x140 [ 155.822510][ T7976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.828618][ T7976] ? clear_bhb_loop+0x70/0xc0 [ 155.833342][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.839277][ T7976] RIP: 0033:0x7ff26939e159 [ 155.843729][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.863398][ T7976] RSP: 002b:00007ff26a29f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.871890][ T7976] RAX: ffffffffffffffda RBX: 00007ff269625fa0 RCX: 00007ff26939e159 [ 155.879898][ T7976] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 155.887892][ T7976] RBP: 00007ff269435024 R08: 0000000000000000 R09: 0000000000000000 [ 155.895910][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.903915][ T7976] R13: 00007ff269626038 R14: 00007ff269625fa0 R15: 00007ffd0fe31d68 [ 155.911925][ T7976] [ 155.915562][ T7976] Kernel Offset: disabled [ 155.919903][ T7976] Rebooting in 86400 seconds..