last executing test programs: 3m48.941085719s ago: executing program 2 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@tail_call, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @alu={0x7, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffff, 0x8}, @call={0x85, 0x0, 0x0, 0x60}, @printk, @generic={0x3, 0xa, 0xe, 0x3, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xfc, &(0x7f0000000240)=""/252, 0x40f00, 0x5237de7a56a25ce9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0xec, 0x7d27}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000400)=[{0x3, 0x1, 0x2, 0x2}], 0x10, 0x3}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000005300001802c0001801400030000000000000000000000ffff0000000014000400fe8000000000000000000000000000aa3c0003800c00028005000100000000002c0001800e000300fe80000000000000000000000000001c14000400fe8800000000000000000000000000013c0002800c00028005000100000000002c00018014000300ff010000000000000000000000000001140004"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x7, 0x4, 0x900, 0x2, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x28}}, 0x4008030) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000040), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000b80)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r12}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r13, r2, 0x26, 0x0, @val=@netfilter={0x7, 0xc4557f1ec8696d82, 0x9}}, 0x20) close(0x4) close(r14) 3m48.077809207s ago: executing program 2 (id=1268): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000240)={0x7fffffffffffffff, 0xffffffff, 0xfff, 0xb, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1337739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d13bc5ee2dd191d24b47eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719fb8e476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db3b925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eed00"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x120, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xf4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x85, '\x00', 0x0, 0x2, 0x40, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf9, '\x00', 0x2, 0x8000, 0x7, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x10, 0x3, 0x0, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x2, 0x8000, 0xd9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x0, 0x2, 0x3, 0x10001}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x40, 0x41d3, 0x7, 0xfffffc01}}, @TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0x9, 0x2d, 0x10, 0x9000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0xe32b, 0xe, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x7fffffff, 0x4, 0xf, 0x80000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8c, '\x00', 0xa63c, 0x4, 0x724, 0x5bdc}}]}}]}, 0x120}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="001b0000", @ANYRES16=r11, @ANYBLOB="010000000000000000000d000000060008005c55000006000a00ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000140081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe800000ff00000000000000f40000bbfe9000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 3m46.835610537s ago: executing program 2 (id=1278): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000020000"], 0x50) (async) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000000c00000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0xd, 0x1, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x2, 0x73) (async) shutdown(0xffffffffffffffff, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000040050001000600000005000500020000fb908679dae23265020073797a31000f00001100"/76], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) (async) socket$kcm(0x10, 0x2, 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 3m46.565724948s ago: executing program 2 (id=1281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'bond_slave_0\x00', @broadcast}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) writev(r5, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x20000000000002fd, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m46.267649508s ago: executing program 2 (id=1286): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000100000079104800000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000700)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c855f58eb192cbc5dedcff5f1a19734e253a03079b9396842906e486990365cb705a0e4e3f648a91bad33e1d9c1be8bc5992ede58365b3dc858c38794da48c34d24a1557e0fc43150a62c1d1225f9a51d19f1b2606972739f9e027d15be12ee570e683d0151a8698884d6c8d05afe5d5afb700e594ef8d3aa17492786b85f441597ea9f6479bd047ef6e61c8280e8a6710700b0e196bf2e6fd399c3a817b5605e594a27fc07ea2aba5430ace211fd5f561d653e54e85ddcca7620d6be2657e5fce169d4f170232d0fd3f1a3d9b599bcbe765000e5091f27dde78d0feb78d5de3b0397635d81e229ea00e5efa7052db8cffcb0290ef2b165497615dc7eafbdf5e4adfd536f2fc257fb164683216fa1ea51d22c59a2fcd654dd5475be8c62b5f15e3cc99e18fb1f646299a456d795902ba6ce70efa432ca9f50149f2fa37002c3f74506c774a25e2a0ac978bf405722480c7bf4c8b9bfbea016752c915105d5f1debfd33b2d7766c44116ad0f0952950304c5dac00ca3aa9c518b5e00daa6bbbffe7b6a4052c4f659f4144768d082048a0f92cac2b01ebabefa55058051056a172c9a9ae1823dc0abcb3748302a7ed130bd563f991304fd7955c1023b7915df60b50b6f749d38f42a65dc0789d66158826dc9c3f8762dffd884638b0a7e15edc33f70d71e6ba28ce5569ae2c23b7c71ef118e33350ee3ade0cd145124324dd051c8ba214861724a5dbdf4ebfe7cb5b5880ffe571d511fb2a4378cd7f97cf1facec9be6d8e3a26c863501eb6956c86f56de557bfcc677fa2c8c4ae3ace046b563ea1d2c10cdaf433b88b8533043ec382a41f91ecd3889d332d733560503ba0fa6edd5bd4efe1d67c1c9dd66b2e32f84ab8558ee05cf466efa964bf6f069f4fbf5c18b5aacec6555cb639957d27c2993271491d49c286bdf2beb2b7abdc43294541aeb0e838c274501b65166217b65", 0x346}], 0x1) readv(r6, &(0x7f0000000500)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000003a00)=""/4115, 0x1013}], 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000180)=0x421, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r8}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 3m45.939869569s ago: executing program 2 (id=1288): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x4008001, 0x4, 0xffffffff, 0x4, 0xfffffffe}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000280)={0x3, 0x1, 0x3}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r1, 0x0, 0x6c}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='wlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000027000100fdff07000010000006000000040001801d855023756e2e26e4eedd6ab06d23012a84a6000a1c611fc12b71f2a00b8ec852148ea68f1a0a6933057116cd5412ad091d9f8be620a4d8cf34c38df557a7e1a1fd02f3a55e2768d6ec2ad2cb2bbf10c8867c65446538329ca360a6d58a1802cab9a0ed94f7313059e0d0a1118577ae337cc62049270564be4603c34d5b5664cb94267c03cac11f105d3c198f7159b60b64a8940a5c4e93019eff2d795094931a6be99c3c6fe60d9bd93075bb5586849cdcdd1f3796ac3abf02701d72c0372498592cffa7e3"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendfile(r6, r3, &(0x7f0000000100)=0x5d, 0x8000) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0xc, 0x2, 0x9, 0x9, 0x4, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0x0, 0x0, 0xfffffeff}}) 3m30.874947495s ago: executing program 32 (id=1288): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x4008001, 0x4, 0xffffffff, 0x4, 0xfffffffe}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000280)={0x3, 0x1, 0x3}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r1, 0x0, 0x6c}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='wlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000027000100fdff07000010000006000000040001801d855023756e2e26e4eedd6ab06d23012a84a6000a1c611fc12b71f2a00b8ec852148ea68f1a0a6933057116cd5412ad091d9f8be620a4d8cf34c38df557a7e1a1fd02f3a55e2768d6ec2ad2cb2bbf10c8867c65446538329ca360a6d58a1802cab9a0ed94f7313059e0d0a1118577ae337cc62049270564be4603c34d5b5664cb94267c03cac11f105d3c198f7159b60b64a8940a5c4e93019eff2d795094931a6be99c3c6fe60d9bd93075bb5586849cdcdd1f3796ac3abf02701d72c0372498592cffa7e3"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendfile(r6, r3, &(0x7f0000000100)=0x5d, 0x8000) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0xc, 0x2, 0x9, 0x9, 0x4, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0x0, 0x0, 0xfffffeff}}) 2m31.720217108s ago: executing program 4 (id=1846): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x40800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x170}}, 0x24008800) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x170}}, 0x24008800) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) (async) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000800000000003f14000200fe80000000000000000000000000000f08000100", @ANYBLOB='#'], 0x64}}, 0x24000000) r7 = socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r7], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r7], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300d00000534d5d8da1aef7b7ecc2f34e0c6f3b67a115409ab018000003c7f840310e68527d56484e8487faec7a1911a07f8be62fc55670347bf81520af8ecad4b417d8d52fd01cd9aa222a30263cfd5bb55745298ce28afbca24b6a261f5ad69091940c3b0daec141adc699b9e9fe0eb261537a1b96339132fb5b977bf3d6023d582b3404fafde6bb4cc0", @ANYRES16=r9, @ANYBLOB="10002abd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x85) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300d00000534d5d8da1aef7b7ecc2f34e0c6f3b67a115409ab018000003c7f840310e68527d56484e8487faec7a1911a07f8be62fc55670347bf81520af8ecad4b417d8d52fd01cd9aa222a30263cfd5bb55745298ce28afbca24b6a261f5ad69091940c3b0daec141adc699b9e9fe0eb261537a1b96339132fb5b977bf3d6023d582b3404fafde6bb4cc0", @ANYRES16=r9, @ANYBLOB="10002abd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x85) 2m30.834920001s ago: executing program 4 (id=1854): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="832887dd13d0677893f5ff28f28c24d6343c2c18f949cf1447af1c6eabfcaea5daa9b559ae4b76f792b47aca3588b222", @ANYRES16=r0, @ANYBLOB="000425bd7000fedbdf25820000000c009900c300000080000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20048005) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) socket$kcm(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80025}, 0x18) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8005) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000000108010400000000000000000500000805000302110000000900010073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) socket$xdp(0x2c, 0x3, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) sendto$l2tp6(r2, &(0x7f0000000700), 0x0, 0x40, &(0x7f0000000800)={0xa, 0x0, 0x4, @local, 0x9, 0x3}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) 2m29.615610057s ago: executing program 4 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x20000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000002b00ebf3ccd0a9e09506015cb54e82aad50a10bdc0195ab249bcc388ba0406301987c9dde09b2981c246e31d19ea44919111c8f72690670ac2b9481b39257794b6480cbc8e267e8b8fe78bc3a7a9b8e86a285dbd1c92af6701cc0327f25d209389aea35ac4dec667775267633a02f073e374aa0101000000000000924aa2c1963cf18f876d9412f0cec45cd9fb16ce92ded10b4b533bb450142405ea6dcc038267174953ea", @ANYRES32=r5, @ANYBLOB="985e0600c16a01003c001280110001006272696467655f736c6176650000000024000580050001000400000005001d000100000005000900000000000600020007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r6 = socket$netlink(0x10, 0x3, 0x14) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000140)=@buf={0x90, &(0x7f0000000080)="31f7245dcd77bbe4830abb4d033cfb87f64d47803b45102e950e08f60226f335ec41537484c8842515ac40ebc04ce643b932a139fccb546baac7a1e94bb13a864d9883e541a2008f4e333b419ab3acff82296c845ef948502b8445a0aa0de9728408cc1fea07b035b2e4b544e2bc2356794c5bdb55ce9e5c3f7cfa02d7322d7cfb60c975aeeded86b2e807f1457bd4ad"}) 2m28.500769038s ago: executing program 4 (id=1868): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1, 0x10}, 0x28) (rerun: 64) 2m28.185861757s ago: executing program 4 (id=1871): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x1, 0x10, 0xa}, &(0x7f00000004c0)=0x18) 2m27.900812965s ago: executing program 4 (id=1875): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x2}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x30, 0x0, 0x4, 0xfffff000}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_emit_ethernet(0x1e, &(0x7f00000000c0)=ANY=[@ANYBLOB="9909188e4a9d2135c6df6d3aec0b0800000000000000ec05217355d1dadd"], 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xed}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xdb7f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x5b16, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x7, 0x0, 0x3, 0x4, 0x0, 0x10, 0x4}, @ldst={0x2, 0x1, 0x6, 0x8, 0x2, 0x8, 0x1}, @call={0x85, 0x0, 0x0, 0xc5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0xc9, &(0x7f00000004c0)=""/201, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) write$cgroup_devices(r1, 0x0, 0x9) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m12.748575447s ago: executing program 33 (id=1875): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x2}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x30, 0x0, 0x4, 0xfffff000}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_emit_ethernet(0x1e, &(0x7f00000000c0)=ANY=[@ANYBLOB="9909188e4a9d2135c6df6d3aec0b0800000000000000ec05217355d1dadd"], 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xed}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xdb7f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x5b16, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x7, 0x0, 0x3, 0x4, 0x0, 0x10, 0x4}, @ldst={0x2, 0x1, 0x6, 0x8, 0x2, 0x8, 0x1}, @call={0x85, 0x0, 0x0, 0xc5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0xc9, &(0x7f00000004c0)=""/201, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) write$cgroup_devices(r1, 0x0, 0x9) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m0.77329228s ago: executing program 6 (id=1994): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0}) r1 = socket$phonet(0x23, 0x2, 0x1) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000580)="00160011365b07ca62309907eb333bf34154ca0e1fd2887b2ae338b5d1f5080901", 0xb}], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000001b0001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d0b633236ae0000000000000000000000000000000000000000000000000000000c001500000000000000000008001f0000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r3 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006680)={0x2f94, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x2f67, 0x142, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @pid=r3}, @nested={0x103c, 0xfc, 0x0, 0x1, [@generic="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", @typed={0x7, 0x90, 0x0, 0x0, @str='lo\x00'}, @generic="828bc39661368c6c2c1f383b5246624c3c5d9acdf4f3d48b00fa5b3853ff2b70d53ad0bfa36d73e12ec4302f0c245913"]}, @nested={0x1e88, 0xb5, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @fd=r2}, @nested={0x1e7c, 0x5d, 0x0, 0x1, [@nested={0x4, 0x36}, @nested={0x551, 0xcc, 0x0, 0x1, [@nested={0x2f5, 0x9e, 0x0, 0x1, [@generic="3bdc7a8081e3ac5fae7eb0781234681a1891ace89cb713e6a188eaafbce7de965107f4e3a974dd2882522ce484974ff701cf5141d77c90343b4a54e5941db074200f1bcdbd9b84e77c27bb07afd94e278f0b9be19dfd38f1f2d7726a2d730835ba9ca47205b63e54ac3f562a50984b0e618df173d04d4eefacb1c9b8ac17f7ff8852fe769cc042a1159eff7d53c444e6045b3636e9e9e6c4dda48424a181c6a44d5ae7697e2171f529b62422b16b7989769cd5f769aba8814a5d49c0150114eda63710f382fb8da1da1ea289481e50155a293a431b5fef5f99e5c2f7cbbb8a3b3f09a74d91256a950a23975460f09880e0311863c4", @typed={0xa8, 0x111, 0x0, 0x0, @binary="bfe12ec3d5dba33c31d23a79871746b5ef9f6fd89b70c3676c91dedec6c1936595b5c26cc83bffdd5b66edbba90fdff1e6fd70360acc88b2aac1f9d4dc714d25b9a9f72899dc365d9ce18bd701f24365b5688d9aa176cb221463875cfa421b8014e175f78a9b9ab5d7551d9a758990387a581241abf85e38062211ea85cbeebfc6cea35fe2dd33cd516892edd9881e412385615b7e0c36fb0ca01519759e4bd083614a79"}, @generic="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"]}, @generic="923273265c925ad6", @nested={0x110, 0x13a, 0x0, 0x1, [@nested={0x4, 0x57}, @nested={0x108, 0x50, 0x0, 0x1, [@nested={0xdd, 0x6b, 0x0, 0x1, [@typed={0x8, 0x15d, 0x0, 0x0, @str=':]+\x00'}, @generic="efdb50cfe85c840682442fdc08b3814435807346fb14dd108ce644613a96a005a9a776bd89f9c943e29e7ab7164ef0ad1be59a87a0e01aee2d54fd89b4dafaadecd3295828859026e8d3794275c8327918e4b66d26c107b54e2aacfedad0a4eb8b1822e99b7d21880a4a4b14adfd82e94f4e2cdf48ddf883b656b7f3b67b9f7b284153da62bd8e2b62ff1364924409a7df7b16df0819c4454934194008342279d2e5e61f3820c586d9341b143c17a87c5762ba64ac3915aa77401c18e40f820953", @typed={0x6, 0x13f, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x144, 0x0, 0x0, @u32=0x3}]}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@private1}, @nested={0x10, 0x58, 0x0, 0x1, [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x8}]}]}]}, @typed={0xf8, 0x3f, 0x0, 0x0, @binary="a5ed6eab2ebd284bf815d636c9d3f0c94668fb32fff9e1a49ea76bc4b57df79fc85ea7ab3cd8cb0f32a35079d97fd850c24fbb1a92f9735a80b367d0b285f28b314f2ec3d2bfa45485b91a51ed963b5a414c2a9e669969facca8dd093d1e80e3c0c8c0731170feb8df17a3746d4df20e70e4cf9db0c585bf640744b9d92c6b0684584e9d7a1cc1d3053ce40d5233adcbeb37b1e89d5f7b20eb6f7c2b0898eef5571cd04c9952501a7eb553b8d209e6b59c493390b6dc3e14f7d247c45b1fa12d152d1a3a9fc53470eecbc5fc08bb243e32c213e5c0f24b5929e9254f2f065ea58e776f268f117e39371bc7a7e567931a5e5a22b7"}, @generic="2639a062f6b1dc9b54cb483111ac043a2b0f07144e5ca4ab17200636b8adbc88c87f9b6eb17832a7bb997e9a8f0791efffeae73afe9d689cdadb3b2a75cd5ca1d7be01b333"]}, @nested={0x18f8, 0x12b, 0x0, 0x1, [@nested={0x157c, 0x5, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @generic, @generic="7644b1d1422500aa79c4dd6074fb6674680e5bcf6b3f7d074438cf4c2ff0c066f207dc19abd93f21cc07be01f6288ec737a4098329b1aa5fd732b11b08979e1b1ad63011bf2ec63d95153b4a157366cbeba2bb49f05ef6f585e2470601a9ffeabf9daba16ff3b72e864c0083d0eebbaf86fdd95e502c4e5c4a17705f5a6a2d4d74e546d419ccef87a9fd5926e7a546c37373e274f5afbe56896d8e9b858abdf226c0a9490d0a0b7eeafd48d315a13d8199b5f423badc0d06e74465bbeaa7ed89dbfcff5bb301207ef55bbfe53596650e85e8d9ca0c0d9e5605b795d185bde09c9bc8ca7236a92b08bb8fad6aa6034002ae21dfd055328ceb75e72bc4372eed35879b7d52cf342b377c2dce8a1193b4e63d66b0ca675d7c9f5f8bff264e91a348875196edef2f071a02232e497cb93f1cbdce9a275cacbd37190eae2523854b152fcbf8aff77ee46b84284b2afd6bf9ab1e77430c5c283f0c3ed5c55aeba9acf29cf876988f6b3602a598d5e680054fc9693e7b90edbc34bef22c09d5126bb58b7d3967e69b3c22524935f0fbd91b72f2609f8644a9a1371a7440b19401e6b8cf2b7e6f19405114f2c90f845567da1cbf5ec1957f4d05af99c1165a266334cf09e9db6acf4667bd129c4a0853ecd0c710974958f458baf265ec004b1b5417d861a9eb5de9305333ad582f86c52500e52fb583652485c4aa7cb8494d8df10941e506c154e2ae78171cc21f4a99a54ab4910d8a6a162e6969a67bcec29b6b53f5d98c38715cd579e3cb6ecd1d3825d57e30eeccafb896c4347d38989745dbb3111b4b1bddadce36cc6daee9b984056057b1b663cb2615df497cbc6c52e3fe324370efcf4886315dd3b9d01c363a56521e1501f7c7e2d80d727a3a75e505d6416c42d14657266a2ddd01c5b02d00fda132ec2f87bd9097469cfa84fb50f99278368cc890b1457370decc30b08bc70868b2a472e6c75f78374699d4111585ff66c4db5d09620573043436e5c19a2a141ee35507c33abafb94c4072a0caa62be1a1d3cf6de1d72c048429b62462633c09adb4cd48c5f5399efaabd1ae7cb0c50e2f20bf05fcd722e91429579001d622e2e8adb9afae50fbfbc7efe6028db354093d38f8e0ce61d174ee85e023bb3f732d0617ac265037d6974cfe883049ea2f6067119f8b83fe662c2ccef0de5023d491bb6c03c2beb33df5a214155d9aef0b3f296df4c33b59a5a4116c5aa8af66377b31881d6a099afe3aefc3245d04284cbfa9aa66697e4b711df28759e69be61be155e2a116c6db3d32864f70f73d6508548b662b82836b50e7cb12022d0254d658b2354030c9d0d6eb37c1da2f50b7671b45b4e9ce97f57cbae39eb32aaf7968b4f302e19d99a50c1a8c22662ef97ac96c9a9608f6ea9d5f61ee70d3d1b07847d310c7ddb7c22c713f862b7dc14da281a786a06ca44a6a0a4ade173cc9e3c33e66ca251cd85de1a78de2a04abd4268097fe3874b604c92b777ccf1b49697cc70508a36bd9e6013fd80ab3d45f4e56070f0a320b65204f34d19c2128180ac9c3a3db35279d5edcc4aa0d3f84395a73f3468a01bc81910e9aacf777e4609f72543a6783a469b749e403c3e891946c2662b66c8da5b947fc6e28c67a6bff6208675a492a887316507b7b465d600d36ae9a15d031aa45ef193bea9f9613e1c8f7dbb1ddfa6dc5834f4c9457f96d8d75b3247fa9fb12234c93cf6a416d4d39d82f61c88fc95d4663cb57643d29746117afcdd8f79201757000057d9fa987d78fef944dc9b6d9e84dff411c93186c088d159afcb4bed50e8cc29638f2c5926767dbe291cc1cdcec91a31ed7ea47b685e2243c99ab48005b308b521fac150fc645ff3b9f7a543f37f1bfc5c03b84fa27f4cc3ae222459949f759c1871ba5161b868117a2ea560698c573e9237b593b0fe41619a595e725866ad10b56eca2b88557bda222d0659cb666a1cd562bf5d80c3bd4b3e70ef711b050d46132eb22ebcd4763583318e6500abdc566e3f8affd6f9d05fe6dcb632341b2fcb23d47366b451073f7b6cb906dd53122f9960be1ebec8fb9aacd47bc47a07b1eaa8eab1da3f884d82ad7972ad2b2bdfc767d6774b21d7b5dfb5b633630f42b1add378db3c8dd1f796ee33722a36de224d32de296b9fbade075dd042b6e021f020ebeceb33b3c2eda7a251f08c2e2ab9a3049b50f678872dd4c96ed1bb9c56ce96ecd11d67a607c79af8bcada61d9f6804cfae1d377fe5df2950449dbe4ade0c7b5e4a749c2162f784a6ceea020166cbe6dbaead2822af5ae9b8f0cf1204a3e66179704ef26da4c17fc8648e7b4ab658549ea80f14e8dabd754a05a441ca08091184a26463f428803dabb8a7ad0f8b28fad6be6c08139234f736365244c705af196030420c7083960a8d9a3f200811d77a7c07ccc70c6b903ba82b78811ffe4cbcff10ef0418b5fe3f31151eb26feea5f216d763db1101fe68f97643ce41aaf2c253df8d3741526e3b74585eba94745a6962394edc0fe8bba8f3e14e16893871e0e73c4f57781f2899152d771f0f2516b9765b73c41b0f0525a2321312c0e757a0572b602483fb8d4a6dc604a611d90c34eacf7853791104a52a71dcb4fd2dafbfeeba369aa07eef1405ebb23c331ad22e348fc13524f2bc974fe2ac4aeadd903f65f7f7c39e906d84068ace8deb2ee5d3e02debb7509ff88b0a8ce4842e536b7a4f6ff8fb7948ce677cef5997c0d5f455254cf206d330ec3e6fd0024c4c7527317c811fddb07bb3af15db96bbc12e44315125d4030ab1e52063ec1c8796b5229cd93623551c7835b258be8533e77a0b122fae7e7fd7d5f12ca0208639c76d34c920d90620af9747819a77db547a1e0150f1eecf643111a245182a9a92c5c43f7e4dd5a0033d07283705bce82b799b681b41a54afe1063a9c57d90f1e126c10fbf942835b34c5891a29f24ef4e4e90becf86de76920c49cb42f0912903f8c386dfadb5fbf62570b7e2e89c9c13832f6ae29e0825c6458e763cf44892925e233bbe0b1fc3850802aa5ef9307eca65a48094cac6ee605acc7536f2d8466ae4a9b5d2b4fd9581bf182ae137a822f22386683b186ca768e158621ebc0a9d9475cd51529f99d91369dab582fd49d213b3186bf2e019a9427d1b656cafe4fdab6fb78fbdb1a02831a7cc31bd94f267573def09c134e85b0c3fd9fd8fc80d004f4bf09b9fc4840262985813ace557cd95c4e0680b878ce119b2e49e7db7fccc925a2937719133fb4fe7c72c3fef475a92a4ad3eab761aacac6ecd42c0528e3e0819b648572c30a963b41e92eaea9c5351dfdcb3169707f356c54ac18b18e2f320f9415302af0405b7e47a754f9b5f5bcd78433ce918fc820beee119abd436b3154c0500521edd6f9de57e279b6a6b67a1b764ecb2098ed3ee940d284c911c533fa1cd44d7c03aeb726bd806e30cf78e5833f0dea0922d410ea2c3cd5553146d102fc34646e55f0757d7d07c680a6e36d0af47eb85e260defe062661f5759994ccf14347d1ead7ed47d2ea9f7be77e62d8da459b6feb9d5778d190573c3a797685aaa95959312dd3d454fe416a7f11a4c1254055b0dcb69ae5937496737cf7941a0aec21d49ca76a91956693b4595ea89db09e6a88976536f601ccf7902bfbdee147d73a17e1a97fc914a47f9b7ee7b2257224d867f59aa07149b53b431b70c61acf04a5d3ff9d28a2fe0ccc6c02f4377d4efaa244e17e6836d996cf9d6a35f22181b7b18abeb90fbf0307282f58cc522cb0a41051f769db8ff19f33952c5c5c9e62b71480da4f42204725bfc771705aa1d0508ccba636ccf7bc372b0784260b772bbac08c569e23768f5ab6a5e1ff27f03f8aa5e45f0b255ce65e1d60b09d0084f3eaf5f6a5b5f5d700b0856b35e453fa6171e81298d9483804582182442dd957729018405d712f06910c818ee46d7baa1c12d471c5e896c52cb71d0d651ca61a8e76a2f55ab5ca04b0590793cd4f0b572276df01fe35e9d7bcfad34399470a1845405c1c28cfa6eec2338a8c8283531cc051a87ef04cb5af93123447a88f370e161db49cfbf7fd38d95d52109ae9069b0b37002d60d0b6eb978c7a7458cf969196766c3388dcbe4ffe05d6aed4c4c896deb06337956b657e8c55d78aad96c47be3090b3c82a0cd8f9e948a2e218fbe2c7b25ddbb88dd96076b08b0d8ba64a153e323632bdfabfeb1623176b666dfe383ba6893e988e89a0267a9068adc951473f54fecc4c1bea91acb0df977cc184ec7f9d09d0f75799489d4390d1677891405b7a649b84d844ba4101b3b2e89c2860d485130ba7dae8fc1da5e51e4a3518d9b6d6259c9d0cd307ea5992f176babed55627a0c956629b3d02b225e7d3d521c0c9a7a48c9e9db8dbcc24c66cac20c2fd45de0a037a97038788f197fc4f609190db629bae99cd4110a9de47ca3594d405c4e6bce914386ed90bd7fd0cf183ef311773d1b9cd4cb724c522b40d3d3015d573ff10f0398cfd2c01cf595f2aaa3b6107e18d854d105248a130bf156626fbc36a0bb70f0c733121744c9e7959ef7aa7d311109dd48b18094043764b3ccf1d1e04e8578549a37e2c84831dee0ec5901654b7be3529298a7ad198fc86f473ec1c5280591d42ead3eaaa9fe9325d428b6a18f1e61675ec7a9dbbf83f07e96d22ae4664471ffef1a8c07eb3b12bf448549b1c808ed975891150f2c810433d3db41cd161346b8c4f61a16ccb309dfb47c30e1306870a24b5bf0b490a08d8461915c7d7e728ce1a322039204e3cebaf89b53926476310db8d886d97510a8642261a325108aab70c223a94db1bae1e1c00f67ded2e16119471d8b9de9c5039e1e13861588564f09d2bea32f47257eda2add19a2978c1d27c33fae9503977228760db086721687c89186a4b79c474399d5996dd25455486cf8c47bfb6496ea727e9582a5a4413e6aae0fad18208ebbcd7363937866aab901215887d0ce2ed0a3a5b4ffd025aea388be080723f2f11a65f60bbaa4de23422474fc2ccd3f342cb4a5825521c75cc9fa44e4cf14e4606cbae348260e17c970419bedcbfe4951f1798f3808f41a5bf2767ff2a38ca8331be0d8f84f370cf2e808676e10e514b63ad5f7f3342ac1cd77f62befe5d4ed9dc6f50d75971423c82ada65fed613ad4002588d8ea89bf3a530aeac38aa6137c6f54bb5bffd10977a447c3df2924ee6e0d25d8dad54da58ef86c742fafdb6b0384230f02a20209fd12028d5607b756bbdf030d64ab1678347c3c6a80bb82dae836c68318f0b76a02cf0249ca281429c08faace725f5bc4e22e68bf3d655396b4565f2b161b709d2bfee1336204bff4361628eced0cac37965be51c0f42894c664118b576bd56de8fdf3848dd2821a3fe4577cd5b2425b504f2419579703719726c9bbbc400f8632c13a12abc588d34c591429bcc5287493901e1a897ea614201842edd290ad44600dbe950f279fcd1c60a2631faacd674c9ed706a5a608bae3a7dc1efeaea4b3392334c6bdc5cb9568ee1c6dd7386a0d5895b819e4e1f6c15ecfff56ddc73070a4d13c893fc137c6e23c0ad917077d1333de23197258196ef1e0b096c9be9e8532c981c21343af8e674dcca3c24ca79ea31cb2c35ad90280593a78e8dc29dd15edb4557c9f3ed52d3e46f79ed9d4b42c015b9dc25835f0430d8deabaac4ef4d8adaf4c3da97f744efe7ed3741647873f6011b9b0c1e94f9324b23b8d6be873525f869d71916f993c3c488c879917e2478470c6850b329a1e61738e2d163384a6b", @nested={0x44e, 0x24, 0x0, 0x1, [@generic="f06eab11b0c257849888aa0c2ce1a5b0dd19e67d49d9880bc6c8ba53878dc88bc106e42bd3889f2bd8b37c37bd4e7f8ba71ce6a2e0ae25926c97ee6a86b66c6703eb87797d73825350ae1409918bdb5d4119dcf263737165b701f8e61d8bf1cd09257e6331baa55b945713bfc2b2269f4614589514b9066de0835780482c4d64a2f5a0c1d06d83142a83d5fd0f01f38975c71863ce5a644008576d25ced635eb2eaad2e082c9c76fed4775e3fd5e", @typed={0x8, 0x133, 0x0, 0x0, @pid=r4}, @nested={0x173, 0xd8, 0x0, 0x1, [@generic="e9dd374e4d25fab858c273d28148b32e2b67bb42d48fb8bebac16dbc", @generic="73bd6bc55beefbf0cd42a5e33ca681ff90555fe4d00054d48687c7b19389bc62a3753881a7266ac204037cf6c0b12e3ecc2b7ccbd9ad4bed386ae8fa960cbb1a7aa114df4707b034e31e380eaf89d7d367f42af2ed69032a27060be1ea1ff7cb79670adfe1ad2c8e0653c0082eb65817185df8af002889fc69ecd11bdcd4e5f0a1e0ba356fb405e6f698952afec23ed0067e4001", @nested={0x4, 0xbc}, @generic="257725b95bba3f11b73eeba9b54992a1ecddb5effe3ba9ba906c2b9bcedccb5955a4365575e9dc22f40b2e0a67135ceaa27662af3601d58ee69e8e331b2985abf14892f81db2f470c10198fd671c58f369c0257799023e73d60f1c2e5ec5b8fe59885cded729cb61f37398df855c73d427e6fefc80defee9c7c90e0c3996ffff840a1a6aa6e3321ac97632eaeafc30fbd2a0a831a8b8b8f023537c7b0b7d343a4897b199436cd26fc956629fa77893fc974e72aa3a5063", @nested={0x4, 0x14b}]}, @nested={0x211, 0xa6, 0x0, 0x1, [@generic="f1927084139edc6a145a98fec8f676de2c4a0111082fb48b6e6361ad7c62e69e60433da412cf4c1261bc10bd5cae9a26a3cf5aaa03a74c63f0b31fd4f392a3acf1a22ddd0e8fbfcb487c3490a6d3bac9d0196270a060bb88534927c0aad57fd407670f1b45717a07caf1bd8db2a3fffb0b76693d6fb6123d1ed760688d28a091096266a1c71ef496ffa7ff5aa6cebb8223f3d2fe4347cb4335ea0593b1e6a82c68dfa89f98b9a86957963e7af6697d4650d60ceb5c", @generic="59cabcaa71c100184b05c6b939ccade9811a2f07e50d3221eecd2c61107b64f6d5c42e39a89bf68b6c4052022693dc855fab341a36ffc1f33c6e9a089209e0746fae274f8850151418ba227f881cf078470591cb6db2eb7ddb5c", @typed={0xc, 0xf0, 0x0, 0x0, @u64=0x3}, @generic="a4eea790e7a4f2e43c3ea78662ee20b29fc54b651ca5b27e5de03fb4f191fc93ac7071222e7bb8d3b4f6df03c6d0ed078bdf81dec985c18cc4d773bea99a6599dfdff686d8e27a421b57e874f342556209931069b8bb2afbcd45e7e83788fb4fcd579887cf6bd5e68a8024338ae7370223536a446a1e6319077565e407a7ef5ee5c0f0bd4c99f25ad3ee81a844264e0c5a2f7fbf9d5499519223633102c2c6405393ae83150d65abe3111827c1cd9f72dc73ead0e50aa945478cea3fa210d8e7dfb5d9e161db1dfb140a23596c7fa7f69d06d589a84ec195cdd166abe0f90211b26317c9a244d20e39ac481a9f5b43657db0"]}, @nested={0xc, 0xc4, 0x0, 0x1, [@nested={0x4, 0x28}, @nested={0x4, 0x135}]}]}, @typed={0x10f, 0x102, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x13b, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xb8, 0x0, 0x0, @fd}]}, @nested={0x375, 0x51, 0x0, 0x1, [@typed={0x8, 0x153, 0x0, 0x0, @ipv4=@multicast2}, @generic="f92b40226ccb447e48d6205d4de1f6781eb7c80e28a923147b8ea2d66565b48017cd34651d2cdebba633d824f3fc1dcc7e26e64dc153b46bfa4da878b9346d93d920f0532b9efdf67e64886db75de858e5c8c07f11d57b744a184892238122cddb21f2fc18ca5f26d8126b334568222221801245ec0de700f2e3edef7c", @nested={0x1e6, 0xab, 0x0, 0x1, [@generic="e56b88a97494decf8c29", @generic="0677989294bd4869db8884976f6803b6716729bafdbe079ecffadfea1a929d23d1b6b5b11e3113cd7bbac195da39736d5659fac6b572f0401a45d46368756c10aba877328de25f01da74f04255b7ec090f3ca8624e224b0c13f78b70054525ef6e86d0aa18c4cd54799d8e8a97e912c60789f77e8f6a69a635d81d65eb964e2d232b5d41a6ed02532229ee8e73b3844b277e5b", @generic="cd5609937d2fa918e0c366ba35edf27069fe52703e753589e76591f4c40a7bc664bc47634478bf62add7db02fbc0a3c2874384eb1883452cd20f4e57b33233ca52683ddd6f29f2555e310f39dcecf6889d6a848cedf0b6d7fc9cf746085a70174de856dc3cf7a73f25c01c38a39ddfdfe22928fcae81121c1d7ae3353a6a513911cd22f5d9712eabc244029c058f5367b9d447ac031c089a755dec922ac7211de9f3e51e2f2ee2cc48e35225f7aa8c3a3254475fffae90d47cf069f946f24f4fb5643ebf8142760282d740c02545c2ca43367c90239409f33b7d0c", @generic="fd68df4c09cd5660937d9eae0f3a1aae5bce7f60797c9c78858dc4635a3e65fd06da5ef11fe825f74a97f1b70d3a631c573134f6402ee2ad3608be6e3ad5e0c4ff71a9a01a1a1823ddc8a445c0b4ab89d7ad9536016d9de4dbb6148a732fcd43f2b46e8b7db0fb209894"]}, @generic="9cc49256ea3d83d214272ed0937bae11581112cea5e3d94472438421749054d824852ff9ceb09258bb94e414788f2b201e9a4237610bd0a7055d2de0ff32600350043f6bd70fc7eb37e9d00a30046d906c6f7a882db6541cbb51e0deb61112be92aec25e664d38e0388b065340175ee5c2df13515f46f7b1f21547651981666e5b5e", @generic="e0f03628f7a8ebddd859ca1d884fd65459c092c2c5490c10a58584934bc9793a9f34281c65819f01df254768ac7cc796f14878b2f32f2b9c9d934297feac33fdc0f54fe2f7a85c5cfa2219d7d26ceb8cb833bbb00629b15a07fb85708fb2a965a4de886961539d4b9a9626ec51587e238580a6c9d47b3390ed9d014d6e336d88dab3"]}]}, @nested={0x4, 0x4f}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r1}, @generic="645e8c71b55a6977ff728f60", @nested={0x4, 0x91}, @typed={0x8, 0x60, 0x0, 0x0, @uid=r5}, @nested={0x4, 0xe9}]}]}, @typed={0x8, 0xfd, 0x0, 0x0, @uid=r5}, @generic="461fe6115536b4f48c580df7b534dc1dce06c54fb1957da2e7fce0b165f06c19951a579fb4113a49ed1ca7e113e887921fc4c79dfbdff57a308a4f5b56db934a4301e3f7f841a667218f2287689354a5735433c024511978e163620c035c6ddb4a6910450140b01fa093388cd00cd4dd467bd7", @typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x4, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @uid}]}]}, 0x2f94}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a80)=ANY=[@ANYBLOB="cc020000230004002cbd7000fbdbdf250019e44d60e29e7f32070000000c001c00", @ANYRES32=r0, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0xc0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c1001000000000000700000085000000500000001801000007000000000000000020200080000000000701fd61f8ffffffb702000008000000b70300000700000085000000170000009500"/96], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0x7, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c0006006f9567a74ef0edb155f10f26931fbd9b43298e94e8e0a9e7a0c861a73d152811effd7e851a9c1a1de3cfe6c465b73999be4f5e0f5566bc5134438e613c490e1183276479334956e168ef5c8b8befd813a5a428c6c397df2565b4ff91ab418923d62b5af4a2bc91c8d0a0df00b75b3b1f6ff6c2bf6aa5b0f46d15aeee414d80932a83b5692e30159075eda4bf156c9df3e6bf70ad3b6755e8150f17321799a2353546ec71fd34c85c953a3fc26c8888549fe4dd", @ANYRES16=r10, @ANYBLOB="01002cbd7000fe0f0000010000000c0002000200000000000000400007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="2400018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c0005002801000000000000"], 0x6c}}, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000003640)={'wpan0\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r13, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000056) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r16) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r17, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r17, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "2c81617484140d616bc6ae4804cd5a748ebf0713cc35e474b043ce7a08071819"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "d30b01e542f184e5efdf1ab9497d3f78b6a7aabfe619aa952bff770051000ef5"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r18}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "c1a5aca5d0fcd70071f2b94e62ff7505f8f7a82efc2399b396ce63b95a8c66d9"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x20080000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe}, 0x94) 2m0.516395918s ago: executing program 6 (id=2097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000200000000000000000000000000000000000000000000000200000000000000960700002dbd70000735000000000002be0000000000000000000000b1a0010008001f00040000000c0015005b073500040000000c"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000200000000000000000000000000000000000000000000000200000000000000960700002dbd70000735000000000002be0000000000000000000000b1a0010008001f00040000000c0015005b073500040000000c"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000000)=""/211, &(0x7f0000000100)=0xd3) 2m0.501327905s ago: executing program 6 (id=2098): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa1"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x1a, &(0x7f0000000180)={@local, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@llc={0x8864, {@snap={0x1, 0x0, '~', "bfab95", 0x892f}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) socket(0x2000000000000021, 0x2, 0x10000000000002) close(0x3) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x1, r7, 0x20000002}, 0x10) 2m0.340165954s ago: executing program 6 (id=2101): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x201, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5d8c9978}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 1m59.744964382s ago: executing program 6 (id=2109): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800001da5fa7500"/17, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b000000000c001462726f6164636173742d6c696e6b0000"], 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa292}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) vmsplice(r6, &(0x7f0000000800)=[{0x0}, {0x0, 0x9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x100000000000027d, 0xd) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x2, 0x5}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 1m44.704262756s ago: executing program 34 (id=2109): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800001da5fa7500"/17, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b000000000c001462726f6164636173742d6c696e6b0000"], 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa292}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) vmsplice(r6, &(0x7f0000000800)=[{0x0}, {0x0, 0x9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x100000000000027d, 0xd) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x2, 0x5}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 13.677877214s ago: executing program 1 (id=2659): r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1}, 0x6e) (async) r2 = socket$kcm(0x11, 0x2, 0x300) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x82, 0x0, &(0x7f0000000100)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0xc}, {r0}, {r0, 0x440}, {r1, 0xc018}, {r0}, {r0, 0x300}, {r6, 0x46a5}], 0x7, &(0x7f0000000180)={r7, r8+10000000}, &(0x7f00000001c0)={[0x973]}, 0x8) (async) close(0x3) 13.485736153s ago: executing program 1 (id=2662): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB="0000000000000000001eb98a61bd6718c6f1a69f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000"/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="df4800000000fddbdf250c000000180001801400020064756d6d793000000000000000000000dc000380"], 0x108}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) recvmsg(r2, &(0x7f0000000a40)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/43, 0x2b}], 0x2}, 0x160) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000e00)=""/104, &(0x7f00000025c0), &(0x7f0000000c80)="1100b56a0393535623262d90cc84c02a575f5b46aecf8db7e86287b8f262caf214383da4f5012c5c10c78bbc00009e683796e2986cd6fd3dd6c0f6758cbdda0c9a4b7e236439c4a97a801e04fd0ad0c387e698e234326d59f42b5d4c2941c1fe40a5bc15295268ac82e9901349220040d29ad74fc0532fc8eac4c0e7a29f245f7fc5c5c8fda52ff9638ceea1fa8efdd384465db9d3d772a9e154659f4c87da16c71c56926b7033d6f8fb09a23480033ab39955d1d0dd0f92c851467e89d63ff922e527814e0b6a166f7492e1081d7576474bbcfa6513d35b4ef5c0e8c64ffe9760016badd688e43ebc2c949fa053a6ea3eb81bebb36de7bd6505d42e4b12b0159856e35589b337b36e68ef6ee049c4c56219967cde56161cc577db952a4ecdf4facb122f3f2de7383cca39e4030d2fc4a1b460c39eaf9a5f35aaf42be41c25fd1cc6c092b0dfaea48426bf07618c13f2defef002d6d347ba1fd69b981dece46da605bfa190bf1fa796cd7f362ed948bc51399d6499", 0x80, r1, 0x0, 0x7}, 0x38) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="af9bc23c5e"], 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) r7 = socket(0x8, 0x800, 0xdf5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001400000000008000140000000040c000680080002000000000010000d80080001006401010004000380140018"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000c40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="94000000", @ANYRES16=r10, @ANYBLOB="010029bd7000fcdbdf253f00000008000300b89a4ef91bfa59e78dac83b8de63e4a89c65b13fedfe25fdd9e4d8e13daf2bf24e6f607dc509f36e4baacb6e78182e3c118dbe0b4170f898fed9edff062e22dec0e8da520a66ba8b6d15739d21263bc6da18ee4a38032baab5661718a73fec6af350cfc8ff9130122a7d72ba9476f43af23e41f734b61804cecb4e9fc097fdc0a26291c71b6237cec17906232c9c85d50b8c38c29ed826762bc13b35bb2b55d7939ce4bca413377967577bb62f2e31255bf397324eab26aedbf946", @ANYRES32=r11, @ANYBLOB="24005e800800030090f60000080007000600000010000100040000006e9200000500000054005e80080006000900000008000100070000000800030050fc00000800010000100000080002000800000008000900ffffff7f080006009200000018000100fffffffffeeb0000810000000006000001ffffff"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', r13, 0x20, 0x20, 0x3, 0x0, {{0xb, 0x4, 0x0, 0x17, 0x2c, 0x64, 0x0, 0x85, 0x4, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x27, [@remote, @multicast2, @rand_addr=0x64010102, @broadcast]}]}}}}}) 12.86398167s ago: executing program 1 (id=2669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x16110000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_QUOTA={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x8081) ioctl$TUNSETGROUP(r0, 0x541b, 0x0) 12.332149102s ago: executing program 1 (id=2673): bpf$MAP_CREATE(0x40000000, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000700)="3b1db7d911626748011fbcf57c4f748aba1be0b532efd0e967afeb84ebef35257ebbeb5ffa06b84c962c28943ba52b828a2e188b011ef73f26295b2c8d413573552289d4755f2cccbb19835c3ac682df4a13643aa7f86181faf7d09ebc32e7477a1fa909e871ffa92af267d3d9b9b0ecee9744051e3b00b4e25d65a585fe3922d700377279ab7dacc7bee99c31f301a8f386a9b7ddaa8c2509afe4967f21ec745d3be4186013f513d86e5b090f6a27c1b0bd5b8d5b969895129f3dacedc8138f4c74302a0e52a1b669985f381c231864", 0xd0}, {&(0x7f0000000800)="90a1963ed43636866e0533eb5868438f834f26c12d38fc192b58ea25c1b09ebd3ce384c0e05edab9a053735d1831169e5928668b8cbaf9c8bd153fae8c519fd749256b6ef5564e6cd16f64f0a5bb160c78e2c3a9fac58fdcb83b7d5105a5e78e2cb3025a0f376ecee5045a9d9897daa4f133493728774952df039d20ed0e5e830273747829230f9afb7b75bc2503a4ff20b5575c76e8", 0x96}, {&(0x7f00000008c0)="adbdafcb7a35e613f03c5fdd8437ecc8a8011b8222740d4da71432c6bccf9829be6df1618e9ca5008e2c337129416d63b9bdfd41f4353e3b156f6ff1f546567e2b57616209798946fd264dbca18df983b247bbfc2924f01891606193b8cf684437be6761647b43f22efb8ec62bdea07c17bdde7e169c1b37d0a15fbcfaac983c84cfd042e1d8d7efec327c915e6e75bf2c07d4ee03c7aedfde3b62c23016d0f5874d5936738a28d161cc81c5b5fa274744e07aa20b3eec5dbc0b3d327b15ac193797bb8ebce65f1d378e7ee11c499e", 0xcf}, {&(0x7f00000009c0)="de1628875646f6e0dd5f050261b331c160e8db2de28da10d8454e0505bb4464b9f40aa04dad277fe2f940ad94189cc64dc6b118890ee56dad618614884b887f953dbf30e70", 0x45}, {&(0x7f0000000a40)="568b280ae5ead66b836e7746d563e966c53bb7f41292f270225de98f9aff2ec77ed58254cadd5242f7e915e501a7ab3583672a1861cfa9ef51b33762cb2b4814c1e385254b00ad37f4d7ef1570e3bb4a093cc78e63ad1b3c2444fe9ba0130cac3297a73e9deae84117ade339edecca0c57c21a732bb0b477f36e87d6f25a2422963eb6f196aca74beac5dd0d36c43e4ef61f9c9e7da2ce8ef4fadf73680284b14d22f024d24c6aaf44f8bbb6dd3575f664451d8eb4e6c33acab7c03c3abfa2b4268eda92fe79860af42c993f4ea80d71f4f4d8f0df824d003de5f385e276aab1eebc0a98821d0072b2ffd59ba73e01c035d8fff9c3823b24", 0xf8}, {&(0x7f0000000b40)="fefdc3f53d665d80bf20833f3698ba43e19fa26f48967679366968ed4adffb979b566f5f65db8160bb9912b3a7c87fd3d2194ccedb842da0fc8ab0f0437f57c79a1ded7054369fea4c8d6f1c5003847af43164540781b24513c2f0013b6427481856de477508067ebbc4a1e831ac9336f4e1f792370393fab1b82631e568646a85c7", 0x82}, {&(0x7f0000000c00)="5413be44971bc845d7540240a55b9f5ce0fda01a6dda9fd647788c08ebd641560bd59eb33a99da9e2f54b7da1f003e08811d65d1fda93c56e2c0891a2553f4a2fe3833215663c6a2752c7af1520ab42a0280c54d1d274be8d675f24f3975f052526f97e42fcce0090c7a176f9b8e8fe249aa4bc77fe13b370030e0f1", 0x7c}], 0x7, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c69"], 0x124}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) r2 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="a40000003a00010027bd7000fcdbdf25fff65cfcc909cbeebdc84beff8013ee59321a31956a8495454bbcf8491652eb5dd05eca9b96a35e06f4b4a1ea28369a9f2b8366f3fdc011b5c87fa1624139e9409f0701fe6cb581e0214933d3d65b636a141570c3cb6f66e17c497a307eb674bf2a3f9dd8a040016000f002ba88ad261c900f91f1f658880003a8cd83a000000000000000000000000000000000000212ea2d2135b08dc49127597a0cec24d3b28fee5c5606f55752d917e96ef691fa2150ed5c8486377c8696f904e075b507f125e4ba1c3a359dd4f634477e1910a0561be0d7ca030fa8339953c3ff16c841aa31a670dda0e6f721cbf49b9cc10b7151dcf7be98b56987c52ea918901ec9bbaeceb8b0d640a278f4bf7f798bfe4c376a081d7c93033667d95b96e6a0d0516bd7d9308af7101551c6256fbe39e4637e48c09076cd09c6021b54093"], 0xa4}], 0x1, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}, @rights={{0x10}}], 0x98, 0x4000000}, 0x20000085) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185e"]}]}, 0x28}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002c00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004200)={{{@in, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000004300)=0xe8) socketpair(0x0, 0x7, 0xb4f, &(0x7f0000004440)) socket$inet6(0xa, 0x4, 0x7) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = getpid() ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000200)=r8) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x1c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004480), &(0x7f00000044c0)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004540), &(0x7f0000004580)=0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x10) 11.583834928s ago: executing program 1 (id=2679): unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000060a010400000000000000000a0000040900010073797a310000000028000480240001800b0001007470726f787900000400000000000000d96ae5d1080001400000000a0900020073797a3200000000140000001100010000000000000000000a00000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0xac, r5, 0x808, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x24048001}, 0x20000011) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10) unshare(0x6c040700) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25077c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r7 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000ebbc83d7223fed1bbbbbbbbbb080045000078000000020011907800000002000000000000ff000000e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc0c17d7b032591c2a7eb609eb444defda8af8d2f63bc8849d1e6124e7e591328300802000000004000000000000000000"], 0x0) 11.030614606s ago: executing program 1 (id=2685): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xc421, 0x2, 0x7c, 0x2, 0x2, 0x8001}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x11700}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r12}, 0x4) 10.77949224s ago: executing program 7 (id=2688): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x7f, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}}]}, 0x58}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000000) write$cgroup_int(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 10.562167096s ago: executing program 7 (id=2691): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500ffffffff440012800b000100697036677265004d000000000000000072", @ANYRES32=r1, @ANYRESOCT=r1], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 10.385560492s ago: executing program 7 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x3, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/223}, {&(0x7f0000000800)=""/89}, {&(0x7f0000000880)=""/154}, {&(0x7f0000000940)=""/14}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/108}, {&(0x7f0000001d40)=""/101}], 0x0, &(0x7f0000001e40)=""/133}, 0x1000}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/17}, {&(0x7f0000001f40)=""/48}, {&(0x7f0000001f80)=""/133}]}, 0xff}, {{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/71}, 0x1}], 0x400023e, 0x300, 0x0) (async) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000400)={0x2, 0x0, 0xc, 0xffffffff}, 0x10) (async) sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r9 = socket$inet6(0x10, 0x2, 0x0) (rerun: 32) sendmsg(r9, 0x0, 0x0) (async) write(r9, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) listen(r6, 0x2) 7.907017954s ago: executing program 0 (id=2708): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4024890}, 0x4000880) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 7.374198119s ago: executing program 0 (id=2713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@fallback, 0xffffffffffffffff, 0x8, 0x2000}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2841, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073007a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x20, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x2, 0x9, 0x0, 0xaba}, 0x4, 0x0, 0x3ff, 0x1, 0x9, 0x5, 0x6, 0x1f, 0x5, 0x9, {0x8000008, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x2c, 0x2c, 0x10, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x5dc}], 0x1}, 0x4011) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc) 3.018147246s ago: executing program 5 (id=2718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000440)={r2, &(0x7f00000001c0)='GPL\x00', 0x40000, &(0x7f0000000240)={@_ha_fsid={[0x7f, 0x101]}, {0xa, 0x8, 0x3, 0xfff}}, 0x7ff, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x100}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x59) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x1, 0x70bd29, 0x80000004, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.799883958s ago: executing program 0 (id=2719): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x47) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb0}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20008084) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0002007}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8901, &(0x7f0000000040)={r4}) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="92", 0x1}], 0x1}, 0x4815) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4620, 0x7, @private1, 0x9}}, 0x0, 0x0, 0x0, 0x0, "9e3619ea5dad28c61339fe3860c334983aad0f8bb294f2c98d28abd36e5e3738791efca84096bdc61579dc502b0efd595a0a4267f683c3cade7b9bc76e0eb553aa02885b72adea9d8697155f9b5000"}, 0xd8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x7, 0x5}, 0x8) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) unshare(0x68040200) 2.733567199s ago: executing program 7 (id=2721): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d000000a50000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20402, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001040500"/20, @ANYRES32=0x0, @ANYBLOB="c3670400000000001400128009000100766c616e00000000040002800a000100bbbbbbbbbbbb0000"], 0x40}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) syz_emit_ethernet(0x3ae, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x63, &(0x7f0000002180)=ANY=[], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040005) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fe01300007800c0001800800014003b70f82140017006261746164765f736c6176655f3000000c00028008000140ac1414bb0900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40c0080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000000) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x14, r11, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc884) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000780)={@mcast2, 0x0}, &(0x7f0000000800)=0x14) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x74, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}]}, 0x74}}, 0x40000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.559773242s ago: executing program 7 (id=2723): syz_emit_ethernet(0x26, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x4c}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x6, 0x2, 0x61, 0x28, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x1, 0xff}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private2, 0x4, 0x100, 0x5, 0x700, 0x9, 0xa00020, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.514010949s ago: executing program 3 (id=2724): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x5, 0x9, 0x7, 0x5}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, 0x0, 0x20000000}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000001100)=0x8, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='memory.events\x00', 0x275a, 0x0) r7 = socket(0x2b, 0x1, 0x1) r8 = socket$inet6(0xa, 0x805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x2}, 0x1c) 2.480445769s ago: executing program 0 (id=2725): r0 = socket$kcm(0x11, 0xd, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005500e501fcfff7fffdefffff07000000", @ANYRES32=r6, @ANYBLOB="20000110", @ANYRES32=r8, @ANYBLOB="01010000ac1414bb00000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4052) ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) write$cgroup_type(r9, &(0x7f0000000280), 0x9) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x11c, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe8, 0x2, [@TCA_MATCHALL_ACT={0xe4, 0x2, [@m_gact={0xe0, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x9a, 0x6, "b50892c0db1c62879822f23d5b6a6515389602ff8d60d0dda5929c261617cba3295b21e6b7187d00265edf1141743e41f652c11c45edbf731dba7262debb562edf935af2e1a9b2669016fa26d2d1b544c5a598559b74b20064c4c7c5e12f6c5e283594b7fad0d20fc6661d49106d940516615dd6f7c987e38471dca342450dcf9c266d2f7e2f0d246d1e30df4650bc8320d5ea74e497"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'erspan0\x00', @multicast}) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.359360705s ago: executing program 7 (id=2726): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8040480) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000400)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff4d, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}, '\x00 \x00\x00'}}}}}}}, 0x36) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 2.09974124s ago: executing program 5 (id=2727): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000000c0)="9f1bdd", 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000062000002000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff2, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) 1.987018743s ago: executing program 5 (id=2728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x1be, 0xff, 0x0, 0x0, 0x4000, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}}, 0xe4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000200000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) 1.719851229s ago: executing program 3 (id=2729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008002600f4150000"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="a757bd307d16c87500e1ffffffed000095"], &(0x7f00000002c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.33340944s ago: executing program 5 (id=2730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000190001002cbd7000000000001c140000fe0300010000ebff130012000a00498eb9b77af76d8db5fdf87c372d133eaae5"], 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.279379498s ago: executing program 3 (id=2731): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x6, 0x9, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40100}, 0x94) 1.168099224s ago: executing program 3 (id=2732): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x7, 0x804, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000cc0)={&(0x7f0000000200)="ac72999b9eec7d7ab1a71b3cf4adf63ebb7fc809be5e3a2194c08ba7c8dcafc668f19ffd0aa17e0cc7b69acb24e4ba6557ae0890cc5ad8e2daf0d41877ed7b20f172d5a0cf933705597f67396d25212e4e73", &(0x7f0000000a80)=""/133, &(0x7f0000000b40)="d557b5b90d66d1d7be6af38783e28f99326ee6e94be3db0d02ccb0cd1c9f4959894e373dbe8c556b5499cb752244eb66f3144dd6ae0e4df1d0388de9706f88205ad9810d4d166e559ca6132b59a1d4a6ff607afe537f63caef1caba3957a0d2af04696bdacfe4caaac782bd13beab255aae9ff558d2605601ed951e707284e4ef0bff0d1a73e721c2639cfaf1496dd6936a7fed175395982378ea1f6b04b43e9a3a01f5008a9d2ba8759dfb32ae49bd75df0bcdfbe1d417830f8f10d4c79c868addbcb9ab25c775e8ff0b279656d6e9c384f5800a875baf727d096a75e6d5689b8311e7709f1bcd0df65f149", &(0x7f0000000c40)="0a7166e9d898ffd57e2b343d7d5c596d211e13cabe92005d91c95d45d199906170811fa30b4e0a0b4c46af60421192c51b3a728fac87b2dce80cdc35c2f6afc5d5b12eab22a7dc72f8c3e17d864ec110a098e0052d4e01164fd7930ecc07a48990b8c36af9d96ee5e46fab1cd9902dbcbcd30e6d184f6563e0c3e821f8c6", 0x8, 0x1}, 0x38) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xb2, "5c3ea1ce5e56f545ce0fbee42200486aff887fa9353e08cdb6d6e6436021b7f9ee507392ab02ec9e4c9cf6fb6b5bb16e32cf88c259823a01d3d327f668e64908cb5b043f5515cd45ba0e762539fc5bac9a3b5da973c8999b779938423fd3031be0f4b4861c4339f2bfd25b831fe41d7fa3a77bfe9a6fbb91b48ec8cc4b192f52268c27239cfc268c7d8bb9d62e7cdb14319e9d8b57e525c2b6f52309ffcb6abc39a4c17f0c4651a9f0d951da8d206084c1d5"}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000940)={0x2, [0x0, 0x0]}, &(0x7f0000000980)=0xc) (rerun: 64) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f000000aa00)={0x0, 0x0, &(0x7f000000a9c0)={&(0x7f000000a600)=ANY=[@ANYBLOB="5c0000001e00010028bd7000fedbdf2500000000000000000000ffff7f000001000004d20a006c00ffffffff00000000000000000000000004000000000000001c0017000000000029bd70000500700028bd700028bd700001040000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x48000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) (async, rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000e40)={{r4, &(0x7f0000000280)='syzkaller\x00', 0x40000, &(0x7f0000000480)={@align=0x7, {0x400, 0xaca, 0x7019, 0x10cc000000000}}, 0x8, &(0x7f0000000d00), &(0x7f0000000d40)=0x8}, {[0xb737, 0x4, 0x546d8f61, 0x1]}, 0x400, 0xa6, &(0x7f0000000d80)=""/166}) (rerun: 32) setsockopt$inet_tcp_buf(r8, 0x6, 0xe, &(0x7f0000000ec0)="a99b826679f330d5b327ac2a190c97e0e8025282f0c5d0db69", 0x19) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r12 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$int_in(r12, 0x5421, &(0x7f0000000000)=0x10000) sendmsg$kcm(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="a47f06dc9781e1a7bbe9ff56943cd1f4c8f57a5c1802d3962a1b9ceaed7ea2e952877adb8444c6cf47f7c2d49423aaf2d85b85e7d79ea06b947a162e7dde8e74f0e10f30615d47310206e90cd19dbd50b0e1246b932b38c0f1c9e6e8c2dbd99df4e3f6a977ea586f870b588409983736cf07b3bec23a3f5d855e690ddd109d46a5e6ae916b75767b9a289e01703fb41930669bc9de46325ccea6663859c9789d1b4dd432dca106a260092040bccf39e8252625138610e5570797284352667bf2bf72caa5b12384", 0xc7}, {&(0x7f0000000500)="f80112737ea32f572c96a42ed8554e6315ae853de3b2cab9f87bafa137727edb813fd792870c6ce6f10936fb2aa89e028bb22b80200c16f2c4bec861cbcb5cb8e8dc8efc384381b675b802017510ffc562dc299c0cc228b48203bb1a59547cd365c1311a5f20afb56baed6fd54e579410fdc18e37a0232df380a7800ca47a0b8d8c230b44986b0115c58976762", 0x8d}, {&(0x7f00000005c0)="f07c08497c9481c136b50080280afa88530ca584deb02edb62222d5542ad92007841ca2d4f6d5662fed53628ceb4be0a5f4fb6fccd37b245ac05dedd58f1c7f9f283fe3f70651d8df1f9e0069cf0b86609a193f6cd6d4baa308c410e96834f1257ffdf89545c8f1df204652f923e9903027a7f9b3a06fb96027974b26481374213ae0250383ff2e0e90931766cca1184c8a51580935453c4d29499bda028471d87dd0ba4ff0be9cac46e8e59d344c2f0d7bd0383a8579dab830f2dfaeb826915", 0xc0}, {&(0x7f0000000740)="5d7d861bc9c376300c1452f5fde42af98b021e1dfe5ea109b56248af4fb4657c731b0211020ccf7d13ebd75e668dcb354c7d45aadc46711005ae35b4b8ba4f1d507bee05b6eef4d9790e1d29c51785b8da3e458afb1e4fb8d41652269773418b486e3037a9b6e667f3258aa455d50d65752027c8db49d574d693622fd538dd2d4570bd19c1760d63250e5af8b106c321bc90214642f8842418c68eb99f4fcc7d6d93c2504153a776997e1e8ea796609717bf236443dcb43ea48c179c0311e08b1de1e0ecaa276deeea2dfeaad64384edb76a69a58eaac85064d23a7177bc226e8e1daea128f6ae35a05f0031685e44ad448d25310edd", 0xf6}, {&(0x7f0000000840)="b0dbdcea3329237e7568c967503533b15caf0f6217ba977500acdd486067a4086163b50aac6967dd3dcdd7157a0d434127e123318f8cf8038088e8030b42caa8bb89d9ea18b94b565993376f9b0fd2dbd10bed9d95494b5694fda57b6ff1f64f890ee38ca14021c59d67f90dfeda6911289326", 0x73}], 0x5, &(0x7f0000000f00)=ANY=[@ANYBLOB="d0000000000000000100000005000000d99eccb431edf0df77520701e5c2d63f1d341a0797689177cb21cf75190e75c565d41be82d0f0d9d5011e37df8f9054c23c1160dabf5505b1dc29db36481fdb946111e07e8618ee6841586621812dc0c594b21fc53c7dc5855942699b0054a46dbf4f89c5942c35e1c88f697878aceec548ba17a1950183cfc6858d1b437bdcc23ae1389673ece02a11d422413437a11b14adfdf65b3c55e8571fecbe1c4e7973393f223101a0bcfb4f38dc65192dd10d272e77eb0c2eafa3191910000000000191091660430d3b1f6300dc66be8fed1743ee6"], 0xd0}, 0x40000) (async) connect$inet(r12, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) splice(r12, 0x0, r11, 0x0, 0x5, 0xa) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r14, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000000)=ANY=[], 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) (rerun: 32) 1.167665693s ago: executing program 5 (id=2733): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x3, 0x8, 0x4e24, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x400}, {0x1ff, 0x7ffffffffffd, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private2, 0xffffffff, 0x32}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x8, 0x1, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0xa, 0x5, 0x6, [0xe, 0xfd]}}) 1.063810475s ago: executing program 0 (id=2734): socket$vsock_stream(0x28, 0x1, 0x0) (async) unshare(0x2a060400) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004060}, 0x40488d0) 881.963557ms ago: executing program 0 (id=2735): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000740)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84020000100001000100000000000000ffffffff000000000000000000000000fc01000000000000000000000000000000000000000000000000ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000a0001"], 0x284}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x190, 0xffffffff, 0x190, 0x190, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x72}, @local, @icmp_id=0x65, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @private=0xa010102, @rand_addr=0x64010101, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast1, @loopback, @gre_key=0x40, @port=0x4e22}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff, 'vxcan1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x21, 0x5, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @gre_key=0x8, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8010) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) socket$unix(0x1, 0x1, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3, 0x4) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000740)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84020000100001000100000000000000ffffffff000000000000000000000000fc01000000000000000000000000000000000000000000000000ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000a0001"], 0x284}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x190, 0xffffffff, 0x190, 0x190, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x72}, @local, @icmp_id=0x65, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @private=0xa010102, @rand_addr=0x64010101, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast1, @loopback, @gre_key=0x40, @port=0x4e22}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff, 'vxcan1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x21, 0x5, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @gre_key=0x8, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8010) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) 824.242933ms ago: executing program 3 (id=2736): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x6, 0x3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x39, 0xa, @mcast2, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20, 0x7800, 0x3, 0x8001}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x20, 0x80, 0x3, 0x9, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x65, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x8c, 0x1, 0xa, [{@multicast1, 0xacd}, {@remote, 0x5}, {@broadcast, 0x5}, {@multicast1}, {@local, 0x5717}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x7}]}, @ssrr={0x89, 0x7, 0xd2, [@local]}, @end]}}}}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff58}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4010) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000340)=0x9, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x6, 0x4) r3 = socket$packet(0x11, 0x7, 0x300) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f00000003c0)={0x1, 0x3, 0xb, 0x1, 0x3648}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xed}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000740)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x8}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @local}], 0x5c) bind$rds(r10, &(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r11, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x25}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "721c758acb"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044004) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f00000009c0)) r13 = accept4$tipc(r0, 0x0, &(0x7f0000000a00), 0x180000) bind$tipc(r13, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000a40)={0x1, 0x8}) 722.572556ms ago: executing program 3 (id=2737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x298, 0x298, 0xd0, 0x1c8, 0x388, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x0, 0xff6b], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000600)="2691792dc1358527028a3db2ff2c15") r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x9, 0x9, {{0x11, 0x4, 0x3, 0x7, 0x44, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xb6, [@empty, @rand_addr=0x64010102, @broadcast, @remote, @loopback]}, @rr={0x7, 0x17, 0xd8, [@remote, @multicast1, @private=0xa010100, @multicast2, @multicast1]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf253f00000008000300", @ANYRES32=r10, @ANYBLOB="20005e8008000600c7f20000040001000800050022000020080007"], 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2200, 0x1fee8c198aab2423}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 0s ago: executing program 5 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d00010073796e70726f787900000000140002800500020001000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r5, @ANYRES8=r5, @ANYRES16=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2d, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) sendmmsg(r6, &(0x7f0000001880)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="055e8a3c031d6fb633774845652812ee9816c44d1d8fcfd85cb7b5a48906e1bfa2974808923e76ea600ee8f607e59934523eafcb2fd187eb587b0fcb3f5e2f68f8be2f9aec001507119edcbe409e121446b6f694299ea690f1596893804243df2dbadcd3395f026c3dcfc440513b226b5383ad3e57c2093dbe93940dba857eee27ea6bcfd999231ab903954c2e70635db1d95b7b", 0x94}, {&(0x7f0000000300)="c9bbc9b091bc1203f79603a95cfa0132fa13355ce04aef1f5acfac989f09b3e5859ded451a0efae1d4a1c633d1d62b0e3be8103dd4742d8e55d660763d7068ca09e196f9c299fb0348151a12fe9705b16b4eec573aded2e18b0fbcb3e636141a55c602051468d4533ad9480a9494660b1822382b073e7199442a32460d6f2938c4dc7f07e05067ad0626a8789003f6ce0dc86b5dca5ba1e116a03e8100", 0x9d}, {&(0x7f00000003c0)="ab1f84e8d73fd5daa2236aef20747d8fd583b128c39c0bec37855dc2b1af02d335204e4633e18161a4f76d84e4c4a3bab32d5fb5ec50bc54de9344d7d90944c7fcf177b78bf8569a26f14b6901d4ec8ee48a2af2f9", 0x55}], 0x3, &(0x7f00000006c0)=[{0x58, 0x117, 0xc8, "c053533c734047aafe80025bd99a56cecf1f867d6db0d97a66700ee77a4ecfb6be871a83afa44126fc6f9f50e7b4785e17f3dcfb5067c6e2c44301e7167db826a1e04b"}, {0x1010, 0x1, 0xffff683f, "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"}, {0x60, 0x6, 0x2, "cdbfe4bd0fb6f37123d6871e5562e613e4588aedcbfa874968c355a7caf1a14b828b595c04af343d7451ef382e793ad2c79182fb8e977fa0139914a313742f6ea63b2b5413e949257dea12026c5ed5"}, {0xf8, 0xff, 0x48, "f9b6a12dc909d594962067722413a33baa7f29281a1b88d36497bc0dc7b71aa5954ca63b7dfa517b8c6241d5a3df267fb1c98ebe5a8896d8ab020c26ca39ac99f193340b002050e2705622e6258a03fd7fa284162af297062d22aa4c53b99667703f8b757c640eb77b6a3a2b04bddf3529f92df58151cfecb2ab301945d210e4c0f98974181fee3bf23cd350c418342bf76c464a08e79d875fbbb4b3d7da51efe429c2694fdb00658f5c41b678d4d221733106d88fb8baa1161e6d00b6362cf71241c9eca8e01fe1929e72e7bd432971a5247f878b157aeb5ca339f2bf35e826340f348fd8f6"}], 0x11c0}}], 0x1, 0xfff0) kernel console output (not intermixed with test programs): 1][T12250] vlan2: entered promiscuous mode [ 329.427191][T12250] geneve0: entered promiscuous mode [ 329.687445][T12269] netlink: 'syz.3.1608': attribute type 9 has an invalid length. [ 329.965764][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 330.066626][T12278] veth5: entered promiscuous mode [ 330.331507][T12281] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.1617'. [ 331.053267][T12302] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 331.227290][T12302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.439672][T12302] bond4: (slave gretap1): making interface the new active one [ 331.443233][T12321] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 331.455144][T12302] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 331.619696][T12321] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.734671][T12334] netlink: 'syz.5.1629': attribute type 4 has an invalid length. [ 331.775646][T12329] netlink: 'syz.5.1629': attribute type 4 has an invalid length. [ 331.876477][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 331.886671][T12329] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1629'. [ 332.131582][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 332.141259][T12347] tipc: Resetting bearer [ 332.170907][T12347] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.185690][T12347] tipc: Resetting bearer [ 332.191352][T12347] tipc: Resetting bearer [ 332.203276][T12347] nicvf0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.219308][T12347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.229275][ T570] net_ratelimit: 23 callbacks suppressed [ 332.229298][ T570] bond2: (slave bridge0): link status up again after 0 ms [ 332.230926][T12347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.248091][ T570] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 332.268311][ T570] bond2: (slave bridge0): link status up again after 0 ms [ 332.297525][T12347] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 332.333530][ T57] bond2: (slave bridge0): link status up again after 0 ms [ 332.364348][ T6802] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.377694][ T35] bond2: (slave bridge0): link status up again after 0 ms [ 332.390547][ T6802] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.407363][ T35] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 332.446540][ T57] bond2: (slave bridge0): link status up again after 0 ms [ 332.501329][ T12] bond2: (slave bridge0): link status up again after 0 ms [ 332.508008][T12359] veth7: entered promiscuous mode [ 332.523448][ T6802] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.554790][ T6802] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.569696][T12363] pimreg: entered allmulticast mode [ 332.583759][T12357] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1635'. [ 332.626287][ T570] bond2: (slave bridge0): link status up again after 0 ms [ 332.627819][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1639'. [ 332.642347][T12366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1639'. [ 332.889266][T12375] gretap2: entered promiscuous mode [ 332.898459][T12380] x_tables: unsorted entry at hook 2 [ 333.571988][T12408] netlink: 'syz.1.1651': attribute type 16 has an invalid length. [ 333.583938][T12408] netlink: 'syz.1.1651': attribute type 17 has an invalid length. [ 333.591548][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 333.821257][T12408] tipc: Resetting bearer [ 333.828179][T12408] tipc: Resetting bearer [ 334.102569][T12408] tipc: Resetting bearer [ 334.127619][T12408] tipc: Resetting bearer [ 334.210675][T12408] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 334.232799][T12408] geneve2: left promiscuous mode [ 334.237831][T12408] geneve2: left allmulticast mode [ 334.247846][T12408] ip6tnl3: left allmulticast mode [ 334.644670][T12447] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 334.971364][T12461] netlink: 'syz.3.1661': attribute type 11 has an invalid length. [ 334.979452][T12461] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1661'. [ 336.819863][T12420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.084748][T12475] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1668'. [ 337.103674][T12481] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 337.204902][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 337.231583][T12481] tipc: Resetting bearer [ 338.463331][T12481] tipc: Resetting bearer [ 338.505535][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 339.057334][T12488] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 339.066179][ T35] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.121597][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.198284][ T35] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.230818][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.267123][ T35] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.301307][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.335068][ T35] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.368823][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1677'. [ 339.380608][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.574809][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.747327][T12525] batman_adv: batadv0: Adding interface: gretap3 [ 339.753712][T12525] batman_adv: batadv0: The MTU of interface gretap3 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.845855][T12525] batman_adv: batadv0: Interface activated: gretap3 [ 340.166200][T12547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1685'. [ 340.210530][T12550] netlink: 'syz.0.1686': attribute type 32 has an invalid length. [ 340.233028][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 340.255462][ T5622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.408305][T12550] bond5: option coupled_control: invalid value (255) [ 340.419871][T12550] bond5 (unregistering): Released all slaves [ 340.543814][T12560] syzkaller0: entered promiscuous mode [ 340.571591][T12560] syzkaller0: entered allmulticast mode [ 340.758003][T12578] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1689'. [ 341.091335][T12601] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 341.466839][T12601] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 341.999669][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 342.042954][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 343.101367][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 343.110314][T12632] netlink: 'syz.4.1700': attribute type 11 has an invalid length. [ 343.125061][T12638] lo speed is unknown, defaulting to 1000 [ 343.425357][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 343.434388][T12632] netlink: 'syz.4.1700': attribute type 11 has an invalid length. [ 343.712593][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1705'. [ 343.906228][T12677] bond0: option all_slaves_active: invalid value (3) [ 344.003928][T12684] geneve3: entered promiscuous mode [ 344.323222][T12697] vlan3: entered promiscuous mode [ 344.328938][T12697] gretap0: entered promiscuous mode [ 344.451945][T12700] Bluetooth: MGMT ver 1.23 [ 345.188703][T12726] net_ratelimit: 30 callbacks suppressed [ 345.188808][T12726] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 345.219083][T12726] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.292222][T12728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1725'. [ 345.319571][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1726'. [ 345.815470][T12737] sctp: [Deprecated]: syz.3.1729 (pid 12737) Use of int in max_burst socket option deprecated. [ 345.815470][T12737] Use struct sctp_assoc_value instead [ 345.927763][T12737] x_tables: duplicate underflow at hook 3 [ 346.186479][ T5623] Bluetooth: hci5: command tx timeout [ 346.348357][T12758] netlink: 'syz.0.1737': attribute type 4 has an invalid length. [ 346.357378][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 346.401388][T12762] netlink: 'syz.0.1737': attribute type 4 has an invalid length. [ 346.432534][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 346.563736][T12763] bridge0: left promiscuous mode [ 346.571305][T12763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.580097][T12763] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.590896][T12763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.678637][T12763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.689213][T12763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.707398][T12763] veth1_vlan: left promiscuous mode [ 346.713769][T12763] veth0_vlan: left promiscuous mode [ 346.720222][T12763] veth0_vlan: entered promiscuous mode [ 346.727638][T12763] veth1_vlan: entered promiscuous mode [ 346.749700][T12763] veth1_macvtap: left promiscuous mode [ 346.756212][T12763] veth0_macvtap: left promiscuous mode [ 346.763029][T12763] veth0_macvtap: entered promiscuous mode [ 346.769625][T12763] veth1_macvtap: entered promiscuous mode [ 346.783050][T12763] bridge0: entered promiscuous mode [ 346.821525][T12763] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 346.831948][T12763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.839564][T12763] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 346.876216][T12763] bridge1: entered promiscuous mode [ 346.883677][T12763] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 346.967153][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.978368][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.017986][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.030274][ T6818] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.038601][ T6818] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.057519][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.068001][ T6809] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 347.091463][ T6809] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 347.102132][ T7962] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 347.116784][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.129159][ T7962] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.308748][T12774] tipc: Started in network mode [ 347.323508][T12774] tipc: Node identity d69eb6ecd559, cluster identity 4711 [ 347.347927][T12774] tipc: Enabled bearer , priority 0 [ 347.542984][T12777] syzkaller0: entered promiscuous mode [ 347.558191][ T7962] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.578752][T12777] syzkaller0: entered allmulticast mode [ 347.609107][T12777] tipc: Resetting bearer [ 347.654080][T12793] netlink: 'syz.0.1744': attribute type 3 has an invalid length. [ 347.686902][T12793] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1744'. [ 347.837631][ T42] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 347.962130][T12777] tipc: Resetting bearer [ 348.118014][ T42] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 348.366479][T12813] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 348.433928][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 350.929480][T12777] tipc: Disabling bearer [ 350.938953][T12801] veth1_to_team: Caught tx_queue_len zero misconfig [ 351.024502][ T42] tipc: Node number set to 63420140 [ 352.036621][T12864] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1763'. [ 352.046557][T12865] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1763'. [ 352.273503][T12870] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1767'. [ 352.319941][T12873] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 352.327398][T12873] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 352.386648][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1762'. [ 352.608475][T12883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1768'. [ 352.642459][T12883] IPv6: NLM_F_REPLACE set, but no existing node found! [ 352.855450][T12890] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 352.931195][T12890] bond1: entered promiscuous mode [ 352.937452][T12890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.949552][T12894] tipc: Enabled bearer , priority 10 [ 352.955630][T12896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.980855][T12890] bond1: (slave bridge1): making interface the new active one [ 352.988363][T12890] bridge1: entered promiscuous mode [ 352.994445][T12890] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 353.005206][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 353.261634][T12907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 353.269212][T12905] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 353.541619][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 353.680432][T12920] netlink: 'syz.0.1782': attribute type 4 has an invalid length. [ 353.949480][ T5738] tipc: Node number set to 420310511 [ 355.165575][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 355.165597][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 355.986400][T13011] netlink: 'syz.5.1806': attribute type 10 has an invalid length. [ 355.994303][T13011] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1806'. [ 356.044298][T13011] netlink: 'syz.5.1806': attribute type 1 has an invalid length. [ 356.055942][T13011] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1806'. [ 356.135615][T13011] netlink: 'syz.5.1806': attribute type 1 has an invalid length. [ 356.446583][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 356.463367][T13036] geneve0: entered promiscuous mode [ 356.473084][T13036] geneve0: left promiscuous mode [ 356.594770][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 356.998379][T13050] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1814'. [ 357.964597][T13093] netlink: 'syz.0.1828': attribute type 3 has an invalid length. [ 358.149546][T13097] lo speed is unknown, defaulting to 1000 [ 358.173032][T13103] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 358.416694][T13114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1835'. [ 358.436914][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 358.747717][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 358.935466][T13125] netlink: 'syz.0.1836': attribute type 21 has an invalid length. [ 359.243883][T13103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.298333][ T7951] bridge1: left promiscuous mode [ 359.357863][T13144] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 359.665714][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 359.763119][T13161] ip6tnl3: entered allmulticast mode [ 360.004792][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1847'. [ 360.078536][T13176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'. [ 360.286015][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 360.734341][T13201] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 360.799826][T13201] bond8 (unregistering): Released all slaves [ 361.194838][T13211] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 362.084901][ T57] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.096834][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.121079][T13227] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1861'. [ 362.269594][T13229] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1862'. [ 362.486252][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'. [ 362.497143][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1865'. [ 362.878422][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 363.408103][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 363.423724][T13268] x_tables: duplicate underflow at hook 1 [ 363.437668][T13268] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 363.609933][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 363.729211][T13280] bond8 (unregistering): Released all slaves [ 363.797971][T13292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.248965][T13337] syzkaller0: entered promiscuous mode [ 364.254515][T13337] syzkaller0: entered allmulticast mode [ 365.208410][T13333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.411281][T13418] __nla_validate_parse: 32 callbacks suppressed [ 365.411328][T13418] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1887'. [ 365.668725][T13432] veth9: entered promiscuous mode [ 365.824854][T13426] syzkaller0: entered promiscuous mode [ 365.857185][T13426] syzkaller0: entered allmulticast mode [ 365.937328][T13426] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1889'. [ 366.008661][T13461] netlink: 'syz.0.1893': attribute type 3 has an invalid length. [ 366.023367][T13461] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1893'. [ 366.038206][T13462] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:1028 [ 366.045439][T13461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.543535][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 370.309154][T13483] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1898'. [ 370.502488][T13504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1903'. [ 370.752436][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 371.231968][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1911'. [ 371.532820][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1915'. [ 371.542964][T13541] openvswitch: netlink: Flow key attr not present in new flow. [ 371.756284][T13545] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1917'. [ 371.766248][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1917'. [ 371.777278][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1917'. [ 371.873987][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 372.288023][T13567] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1924'. [ 372.330247][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 372.542537][T13576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.661149][T13581] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 373.288871][T13611] team0 (unregistering): Port device team_slave_0 removed [ 373.298637][T13611] team0 (unregistering): Port device team_slave_1 removed [ 373.367629][T13616] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20002 [ 373.494354][T13621] netlink: 'syz.5.1941': attribute type 2 has an invalid length. [ 373.507127][T13621] netlink: 'syz.5.1941': attribute type 1 has an invalid length. [ 373.515977][T13621] nbd: illegal input index 65544 [ 373.752555][T13631] x_tables: duplicate underflow at hook 1 [ 373.853090][T13638] netlink: 'syz.5.1946': attribute type 3 has an invalid length. [ 373.912372][T13639] syzkaller0: entered promiscuous mode [ 373.917907][T13639] syzkaller0: entered allmulticast mode [ 373.948513][T13631] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 374.552653][T13666] ip6erspan0: entered allmulticast mode [ 375.090053][T13690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.485241][T13703] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 375.485567][T13708] syzkaller0: entered promiscuous mode [ 375.500185][T13708] syzkaller0: entered allmulticast mode [ 375.656143][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 376.123007][T13722] lo speed is unknown, defaulting to 1000 [ 376.139003][T13721] lo speed is unknown, defaulting to 1000 [ 376.226907][ T12] wlan1: Trigger new scan to find an IBSS to join [ 376.679200][T13744] dummy0: entered allmulticast mode [ 376.686996][T13744] syzkaller0: entered promiscuous mode [ 376.692536][T13744] syzkaller0: entered allmulticast mode [ 376.715754][T13744] __nla_validate_parse: 16 callbacks suppressed [ 376.715778][T13744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1980'. [ 376.732694][T13743] dummy0: left allmulticast mode [ 377.153723][T13751] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 377.179811][T13751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 377.361220][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 377.664334][T13764] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 377.681546][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'. [ 377.793018][T13767] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1986'. [ 377.949633][T13767] netlink: 'syz.5.1986': attribute type 3 has an invalid length. [ 377.987497][T13767] netlink: 'syz.5.1986': attribute type 1 has an invalid length. [ 378.059397][T13767] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1986'. [ 378.130760][T13767] NCSI netlink: No device for ifindex 0 [ 378.186303][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.257923][T13780] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1990'. [ 378.843214][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.066191][ T7962] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.093188][ T7962] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 379.113973][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.130976][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.144834][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.181092][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.222545][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.025564][ T42] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 380.037508][T13838] netlink: 'syz.5.2002': attribute type 9 has an invalid length. [ 380.050996][ T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 380.107606][ T35] wlan1: Trigger new scan to find an IBSS to join [ 380.246375][T13834] vcan0: Master is either lo or non-ether device [ 380.294298][T13852] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2005'. [ 380.349686][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2005'. [ 380.358712][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'. [ 380.735660][T13811] lo speed is unknown, defaulting to 1000 [ 380.907477][T13864] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 381.097758][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2004'. [ 381.277117][T13878] tipc: Enabled bearer , priority 0 [ 381.291916][T13878] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 381.409998][ T5630] Bluetooth: hci6: command tx timeout [ 381.522965][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.549934][T13876] tipc: Disabling bearer [ 381.627877][T13896] sctp: [Deprecated]: syz.0.2013 (pid 13896) Use of int in max_burst socket option deprecated. [ 381.627877][T13896] Use struct sctp_assoc_value instead [ 381.650131][T13897] tipc: Resetting bearer [ 381.680420][T13897] erspan0: left promiscuous mode [ 381.814447][T13897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.858037][T13897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.983149][T13897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.022603][T13897] veth1_vlan: left promiscuous mode [ 382.040029][T13897] veth0_vlan: left promiscuous mode [ 382.048996][T13897] veth0_vlan: entered promiscuous mode [ 382.077969][T13897] veth1_vlan: entered promiscuous mode [ 382.096835][T13897] tipc: Resetting bearer [ 382.102675][T13897] tipc: Resetting bearer [ 382.136881][T13897] veth1_macvtap: left promiscuous mode [ 382.144008][T13897] veth0_macvtap: left promiscuous mode [ 382.157698][T13897] veth0_macvtap: entered promiscuous mode [ 382.170511][T13897] veth1_macvtap: entered promiscuous mode [ 382.182245][T13897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.191340][T13897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.200091][T13897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.208587][T13897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.252215][T13897] erspan0: entered promiscuous mode [ 382.259237][T13897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.269608][T13897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.278991][T13897] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 382.286186][T13897] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 382.350756][ T6809] bond2: (slave bridge0): link status up again after 0 ms [ 382.411971][ T13] bond2: (slave bridge0): link status up again after 0 ms [ 382.422474][T13912] hsr0: entered promiscuous mode [ 382.432571][T13912] hsr0: left allmulticast mode [ 382.461011][ T35] bond2: (slave bridge0): link status up again after 0 ms [ 382.483919][ T6802] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.492852][ T6802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.501639][ T6802] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.510368][ T6802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.532590][ T6802] bond2: (slave bridge0): link status up again after 0 ms [ 382.575121][ T35] bond2: (slave bridge0): link status up again after 0 ms [ 382.687073][ T13] bond2: (slave bridge0): link status up again after 0 ms [ 382.697701][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 382.721327][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.730350][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.739129][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.843313][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.979649][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'. [ 383.036594][T13942] tipc: Enabling of bearer rejected, already enabled [ 383.069058][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.078101][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.085439][T13811] bridge_slave_0: entered allmulticast mode [ 383.092865][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'. [ 383.093844][T13811] bridge_slave_0: entered promiscuous mode [ 383.131652][T13811] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.161426][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.177532][T13811] bridge_slave_1: entered allmulticast mode [ 383.217958][T13811] bridge_slave_1: entered promiscuous mode [ 383.261851][T13950] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 383.339672][T13811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.360168][T13811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.475762][ T5630] Bluetooth: hci6: command tx timeout [ 383.522216][T13958] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2030'. [ 383.564310][T13965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2029'. [ 383.585516][T13811] team0: Port device team_slave_0 added [ 383.593262][T13811] team0: Port device team_slave_1 added [ 383.800198][T13811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.812488][T13811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.871540][T13811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.884232][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2032'. [ 383.913529][T13811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.931196][T13811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.983495][T13811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.080519][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 384.290724][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2036'. [ 384.400780][T13811] hsr_slave_0: entered promiscuous mode [ 384.419020][T13811] hsr_slave_1: entered promiscuous mode [ 384.425854][T13811] debugfs: 'hsr0' already exists in 'hsr' [ 384.431924][T13811] Cannot create hsr debugfs directory [ 384.446094][T13985] lo speed is unknown, defaulting to 1000 [ 385.162117][T14029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2042'. [ 385.425444][T13811] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 385.455909][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.465011][T13811] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 385.480093][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.556617][ T5630] Bluetooth: hci6: command tx timeout [ 385.572887][T13811] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 385.619928][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.628410][T13811] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 385.639197][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.164874][T13811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.332128][T14076] netlink: 'syz.3.2054': attribute type 15 has an invalid length. [ 386.356152][T13811] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.393432][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.415305][ T6802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.489977][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.497191][ T6802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.513509][T14080] netlink: 'syz.5.2056': attribute type 12 has an invalid length. [ 386.538594][T14080] netlink: 'syz.5.2056': attribute type 29 has an invalid length. [ 386.546961][T14080] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2056'. [ 386.581480][T14080] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2056'. [ 386.789810][T14087] lo speed is unknown, defaulting to 1000 [ 386.909934][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 387.320233][ T13] net_ratelimit: 9 callbacks suppressed [ 387.320256][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 387.540215][ T6802] bond2: (slave bridge0): failed to get link speed/duplex [ 387.647792][ T5630] Bluetooth: hci6: command tx timeout [ 387.775345][ T570] bond2: (slave bridge0): failed to get link speed/duplex [ 387.861618][T13811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.903168][ T6802] bond2: (slave bridge0): failed to get link speed/duplex [ 388.040699][T14137] __nla_validate_parse: 2 callbacks suppressed [ 388.040722][T14137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2069'. [ 388.059670][T14139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.094218][ T6802] bond2: (slave bridge0): failed to get link speed/duplex [ 388.218175][ T6802] bond2: (slave bridge0): failed to get link speed/duplex [ 388.286946][T14149] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 388.320982][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 388.436669][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 388.449377][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 388.491877][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2073'. [ 388.497803][T13811] veth0_vlan: entered promiscuous mode [ 388.941956][T14166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2076'. [ 388.972662][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 388.993708][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 389.042279][T13811] veth1_vlan: entered promiscuous mode [ 389.294887][T13811] veth0_macvtap: entered promiscuous mode [ 389.409540][T13811] veth1_macvtap: entered promiscuous mode [ 389.488360][T13811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.518363][T13811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.587643][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.596531][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.681140][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 389.690151][T14191] netlink: 'syz.1.2081': attribute type 2 has an invalid length. [ 389.697949][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.706733][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.838353][T14191] ip6_vti0: left allmulticast mode [ 389.952147][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.974634][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.020967][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2087'. [ 390.150017][T14203] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2085'. [ 390.176201][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.199876][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.244370][T14215] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 390.476317][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 390.529762][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1994'. [ 390.658244][T14237] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2096'. [ 390.692038][T14240] netlink: 'syz.0.2094': attribute type 1 has an invalid length. [ 390.911938][T14252] geneve1: Caught tx_queue_len zero misconfig [ 391.215524][T14260] vlan2: entered allmulticast mode [ 391.220726][T14260] bond0: entered allmulticast mode [ 391.279174][T14260] bond_slave_0: entered allmulticast mode [ 391.285110][T14260] bond_slave_1: entered allmulticast mode [ 391.520881][T14274] tipc: Enabled bearer , priority 0 [ 391.541830][T14274] tipc: Resetting bearer [ 391.614030][T14271] tipc: Disabling bearer [ 391.737767][T14283] lo speed is unknown, defaulting to 1000 [ 392.446681][T14314] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 392.476702][ T13] net_ratelimit: 16 callbacks suppressed [ 392.476726][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 392.939986][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 393.044188][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 393.477383][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 393.837229][T14337] __nla_validate_parse: 6 callbacks suppressed [ 393.837250][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2119'. [ 393.853169][T14351] sctp: [Deprecated]: syz.1.2122 (pid 14351) Use of int in max_burst socket option. [ 393.853169][T14351] Use struct sctp_assoc_value instead [ 394.112840][T14358] netlink: 'syz.0.2123': attribute type 4 has an invalid length. [ 394.176339][T14358] netlink: 'syz.0.2123': attribute type 4 has an invalid length. [ 394.269340][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 394.328061][T14362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2125'. [ 394.413489][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 394.535362][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 394.542907][T14374] netlink: 'syz.0.2126': attribute type 9 has an invalid length. [ 394.624412][T14355] lo speed is unknown, defaulting to 1000 [ 394.709519][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 395.067998][T14378] veth3: entered promiscuous mode [ 395.091646][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 395.275943][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 395.771489][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 395.841432][T14410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2136'. [ 395.885921][T14410] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0 [ 396.025187][T14417] tipc: Enabling of bearer rejected, already enabled [ 396.070137][T14417] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 396.083859][T14425] netlink: 'syz.5.2139': attribute type 1 has an invalid length. [ 396.092006][T14424] netlink: 'syz.5.2139': attribute type 1 has an invalid length. [ 396.099116][T14417] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 396.230519][T14424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.232651][T14435] FAULT_INJECTION: forcing a failure. [ 396.232651][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.251662][T14430] netlink: 'syz.0.2140': attribute type 1 has an invalid length. [ 396.266136][T14435] CPU: 1 UID: 0 PID: 14435 Comm: syz.3.2141 Not tainted syzkaller #0 PREEMPT(full) [ 396.266165][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.266177][T14435] Call Trace: [ 396.266250][T14435] [ 396.266311][T14435] dump_stack_lvl+0xe8/0x150 [ 396.266437][T14435] should_fail_ex+0x40c/0x560 [ 396.266537][T14435] _copy_to_user+0x31/0xb0 [ 396.266616][T14435] bpf_verifier_vlog+0x606/0x900 [ 396.266675][T14435] __btf_verifier_log+0xe2/0x140 [ 396.266724][T14435] ? __pfx___btf_verifier_log+0x10/0x10 [ 396.266766][T14435] ? __might_fault+0xaf/0x130 [ 396.266826][T14435] ? btf_parse_hdr+0x1da/0x810 [ 396.266860][T14435] btf_parse_hdr+0x313/0x810 [ 396.266894][T14435] btf_new_fd+0x32f/0xbb0 [ 396.266931][T14435] __sys_bpf+0xd2e/0xd90 [ 396.266967][T14435] ? __pfx___sys_bpf+0x10/0x10 [ 396.267005][T14435] ? __fget_files+0x2a/0x420 [ 396.267065][T14435] ? ksys_write+0x242/0x270 [ 396.267111][T14435] ? __pfx_ksys_write+0x10/0x10 [ 396.267147][T14435] __x64_sys_bpf+0xba/0xd0 [ 396.267171][T14435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.267215][T14435] do_syscall_64+0x174/0x580 [ 396.267325][T14435] ? trace_irq_disable+0x3b/0x140 [ 396.267360][T14435] ? clear_bhb_loop+0x40/0x90 [ 396.267387][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.267429][T14435] RIP: 0033:0x7f9047f9de59 [ 396.267473][T14435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.267492][T14435] RSP: 002b:00007f9048e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.267545][T14435] RAX: ffffffffffffffda RBX: 00007f9048225fa0 RCX: 00007f9047f9de59 [ 396.267561][T14435] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 396.267575][T14435] RBP: 00007f9048e48090 R08: 0000000000000000 R09: 0000000000000000 [ 396.267588][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.267601][T14435] R13: 00007f9048226038 R14: 00007f9048225fa0 R15: 00007ffd008c0a08 [ 396.267635][T14435] [ 396.495041][T14428] bond2: (slave veth5): Enslaving as an active interface with a down link [ 396.557762][T14431] netlink: 'syz.0.2140': attribute type 5 has an invalid length. [ 396.633358][T14430] bond7: entered promiscuous mode [ 396.639093][T14430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 396.774945][T14439] macvtap1: entered allmulticast mode [ 397.377042][T14475] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 397.458291][T14475] 8021q: adding VLAN 0 to HW filter on device bond6 [ 397.471911][T14475] netlink: 'syz.1.2150': attribute type 23 has an invalid length. [ 397.479794][T14475] netlink: 'syz.1.2150': attribute type 21 has an invalid length. [ 397.515321][T14466] lo speed is unknown, defaulting to 1000 [ 397.841979][T14487] bond6: (slave veth7): Enslaving as an active interface with a down link [ 398.030383][T14475] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 398.092354][T14503] FAULT_INJECTION: forcing a failure. [ 398.092354][T14503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.105459][T14503] CPU: 0 UID: 0 PID: 14503 Comm: syz.5.2153 Not tainted syzkaller #0 PREEMPT(full) [ 398.105487][T14503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.105499][T14503] Call Trace: [ 398.105505][T14503] [ 398.105512][T14503] dump_stack_lvl+0xe8/0x150 [ 398.105543][T14503] should_fail_ex+0x40c/0x560 [ 398.105565][T14503] _copy_to_user+0x31/0xb0 [ 398.105589][T14503] bpf_verifier_vlog+0x52a/0x900 [ 398.105616][T14503] __btf_verifier_log+0xe2/0x140 [ 398.105639][T14503] ? __pfx___btf_verifier_log+0x10/0x10 [ 398.105654][T14503] ? __might_fault+0xaf/0x130 [ 398.105681][T14503] ? btf_parse_hdr+0x1da/0x810 [ 398.105706][T14503] btf_parse_hdr+0x33f/0x810 [ 398.105732][T14503] btf_new_fd+0x32f/0xbb0 [ 398.105760][T14503] __sys_bpf+0xd2e/0xd90 [ 398.105788][T14503] ? __pfx___sys_bpf+0x10/0x10 [ 398.105817][T14503] ? __fget_files+0x2a/0x420 [ 398.105853][T14503] ? ksys_write+0x242/0x270 [ 398.105879][T14503] ? __pfx_ksys_write+0x10/0x10 [ 398.105906][T14503] __x64_sys_bpf+0xba/0xd0 [ 398.105925][T14503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.105941][T14503] do_syscall_64+0x174/0x580 [ 398.105967][T14503] ? trace_irq_disable+0x3b/0x140 [ 398.105987][T14503] ? clear_bhb_loop+0x40/0x90 [ 398.106006][T14503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.106021][T14503] RIP: 0033:0x7f2e88d9de59 [ 398.106037][T14503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.106051][T14503] RSP: 002b:00007f2e89b7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.106069][T14503] RAX: ffffffffffffffda RBX: 00007f2e89025fa0 RCX: 00007f2e88d9de59 [ 398.106081][T14503] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 398.106091][T14503] RBP: 00007f2e89b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.106100][T14503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.106109][T14503] R13: 00007f2e89026038 R14: 00007f2e89025fa0 R15: 00007ffd4a4ef9a8 [ 398.106135][T14503] [ 398.107950][T14475] bond6: (slave batadv1): making interface the new active one [ 398.330997][T14475] batadv1: entered promiscuous mode [ 398.345855][T14475] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 398.368141][T14471] lo speed is unknown, defaulting to 1000 [ 398.467336][T14487] bond6 (unregistering): (slave veth7): Releasing active interface [ 398.480600][T14487] bond6 (unregistering): (slave batadv1): Releasing active interface [ 398.496051][T14487] bond6 (unregistering): Released all slaves [ 398.515407][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2157'. [ 398.608606][T14508] veth9: entered promiscuous mode [ 398.882521][T14526] bond0: Caught tx_queue_len zero misconfig [ 399.235839][ T6807] net_ratelimit: 13 callbacks suppressed [ 399.235862][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 399.358232][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 399.505332][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.514451][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.539091][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.547471][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.555811][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.564228][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.572545][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.580965][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.589298][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.597642][T14548] tc action pedit unable to extract header offset for header type (0x5) [ 399.605997][T14548] 0: reclassify loop, rule prio 0, protocol 800 [ 399.707317][T14550] FAULT_INJECTION: forcing a failure. [ 399.707317][T14550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.720576][T14550] CPU: 0 UID: 0 PID: 14550 Comm: syz.5.2164 Not tainted syzkaller #0 PREEMPT(full) [ 399.720604][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.720616][T14550] Call Trace: [ 399.720625][T14550] [ 399.720634][T14550] dump_stack_lvl+0xe8/0x150 [ 399.720672][T14550] should_fail_ex+0x40c/0x560 [ 399.720702][T14550] _copy_to_user+0x31/0xb0 [ 399.720768][T14550] bpf_verifier_vlog+0x606/0x900 [ 399.720803][T14550] __btf_verifier_log+0xe2/0x140 [ 399.720833][T14550] ? __pfx___btf_verifier_log+0x10/0x10 [ 399.720854][T14550] ? __might_fault+0xaf/0x130 [ 399.720884][T14550] ? btf_parse_hdr+0x1da/0x810 [ 399.720917][T14550] btf_parse_hdr+0x33f/0x810 [ 399.720951][T14550] btf_new_fd+0x32f/0xbb0 [ 399.720988][T14550] __sys_bpf+0xd2e/0xd90 [ 399.721025][T14550] ? __pfx___sys_bpf+0x10/0x10 [ 399.721063][T14550] ? __fget_files+0x2a/0x420 [ 399.721109][T14550] ? ksys_write+0x242/0x270 [ 399.721142][T14550] ? __pfx_ksys_write+0x10/0x10 [ 399.721178][T14550] __x64_sys_bpf+0xba/0xd0 [ 399.721202][T14550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.721225][T14550] do_syscall_64+0x174/0x580 [ 399.721252][T14550] ? trace_irq_disable+0x3b/0x140 [ 399.721278][T14550] ? clear_bhb_loop+0x40/0x90 [ 399.721303][T14550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.721324][T14550] RIP: 0033:0x7f2e88d9de59 [ 399.721343][T14550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.721354][T14550] RSP: 002b:00007f2e89b7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.721369][T14550] RAX: ffffffffffffffda RBX: 00007f2e89025fa0 RCX: 00007f2e88d9de59 [ 399.721378][T14550] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 399.721386][T14550] RBP: 00007f2e89b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 399.721393][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.721400][T14550] R13: 00007f2e89026038 R14: 00007f2e89025fa0 R15: 00007ffd4a4ef9a8 [ 399.721418][T14550] [ 400.006786][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 400.107568][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 400.187416][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2168'. [ 400.235863][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 400.290100][T14568] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 400.366154][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 400.409380][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2173'. [ 400.476896][T14577] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 400.543319][T14579] netlink: 'syz.1.2175': attribute type 6 has an invalid length. [ 400.664373][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 400.770484][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 400.928353][T14586] ipip2: entered promiscuous mode [ 400.933469][T14586] ipip2: entered allmulticast mode [ 401.463508][T14606] veth1_to_batadv: entered promiscuous mode [ 401.696717][T14610] veth11: entered promiscuous mode [ 401.799318][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2188'. [ 401.808602][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2188'. [ 401.875619][T14591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.900138][T14625] IPVS: Unknown mcast interface: veth0_to_bond [ 402.052886][T14628] netlink: 'syz.5.2193': attribute type 23 has an invalid length. [ 402.407830][T14644] veth9: entered promiscuous mode [ 402.752858][T14659] netlink: 'syz.1.2203': attribute type 2 has an invalid length. [ 402.813249][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2204'. [ 402.825928][T14659] : entered promiscuous mode [ 402.843116][T14661] netlink: 'syz.0.2204': attribute type 10 has an invalid length. [ 402.864579][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 402.941114][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'. [ 404.208459][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2212'. [ 404.389750][T14705] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 404.431244][ T35] net_ratelimit: 23 callbacks suppressed [ 404.431277][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 404.485030][T14708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2217'. [ 404.508532][T14708] syzkaller1: entered promiscuous mode [ 404.514055][T14708] syzkaller1: entered allmulticast mode [ 404.527732][T14712] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2217'. [ 404.562071][T14705] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 404.615607][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 404.818064][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 404.844786][T14722] syzkaller0: entered promiscuous mode [ 404.850335][T14722] syzkaller0: entered allmulticast mode [ 404.951077][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 405.066635][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 405.192187][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 405.317201][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 405.500718][T14741] veth11: entered promiscuous mode [ 405.569722][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 405.715285][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 405.800125][T14754] __nla_validate_parse: 1 callbacks suppressed [ 405.800148][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 405.829399][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 405.992179][T14763] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 406.023805][T14763] bond8: entered promiscuous mode [ 406.029459][T14763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.091246][T14763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.098366][T14763] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 406.108664][T14763] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 406.122808][T14763] bond8: (slave ip6gre1): making interface the new active one [ 406.130334][T14763] ip6gre1: entered promiscuous mode [ 406.145738][T14763] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 406.183979][T14765] xt_hashlimit: size too large, truncated to 1048576 [ 406.385818][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 406.996646][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 407.009976][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 407.029569][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 407.050324][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 407.092567][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 407.248153][T14780] veth13: entered promiscuous mode [ 407.308350][T14785] tipc: Resetting bearer [ 407.745766][T14795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2243'. [ 408.131526][T14772] lo speed is unknown, defaulting to 1000 [ 408.436847][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 408.560763][T14815] bond8: entered promiscuous mode [ 408.585274][T14815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.677051][T14815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'. [ 408.708041][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2252'. [ 409.132821][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 409.157873][T14831] veth7: entered promiscuous mode [ 409.200728][ T5623] Bluetooth: hci7: command tx timeout [ 409.496663][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2257'. [ 409.562183][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.777912][ T6809] net_ratelimit: 17 callbacks suppressed [ 409.777937][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 409.873537][T14859] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2260'. [ 410.050903][T14772] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.066934][T14772] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.080737][T14772] bridge_slave_0: entered allmulticast mode [ 410.119069][T14772] bridge_slave_0: entered promiscuous mode [ 410.128472][T14772] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.135826][T14772] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.163087][T14772] bridge_slave_1: entered allmulticast mode [ 410.174967][T14772] bridge_slave_1: entered promiscuous mode [ 410.245631][T14772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.285903][T14772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.346392][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 410.553205][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.807118][T14893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.818827][T14772] team0: Port device team_slave_0 added [ 410.969820][T14901] FAULT_INJECTION: forcing a failure. [ 410.969820][T14901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.991886][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2269'. [ 411.028802][T14901] CPU: 1 UID: 0 PID: 14901 Comm: syz.0.2270 Not tainted syzkaller #0 PREEMPT(full) [ 411.028832][T14901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.028844][T14901] Call Trace: [ 411.028852][T14901] [ 411.028861][T14901] dump_stack_lvl+0xe8/0x150 [ 411.028898][T14901] should_fail_ex+0x40c/0x560 [ 411.028929][T14901] _copy_to_user+0x31/0xb0 [ 411.028961][T14901] bpf_verifier_vlog+0x606/0x900 [ 411.028994][T14901] __btf_verifier_log+0xe2/0x140 [ 411.029023][T14901] ? __pfx___btf_verifier_log+0x10/0x10 [ 411.029044][T14901] ? __might_fault+0xaf/0x130 [ 411.029074][T14901] ? btf_parse_hdr+0x1da/0x810 [ 411.029107][T14901] btf_parse_hdr+0x290/0x810 [ 411.029144][T14901] btf_new_fd+0x32f/0xbb0 [ 411.029181][T14901] __sys_bpf+0xd2e/0xd90 [ 411.029217][T14901] ? __pfx___sys_bpf+0x10/0x10 [ 411.029256][T14901] ? __fget_files+0x2a/0x420 [ 411.029299][T14901] ? ksys_write+0x242/0x270 [ 411.029333][T14901] ? __pfx_ksys_write+0x10/0x10 [ 411.029364][T14901] __x64_sys_bpf+0xba/0xd0 [ 411.029389][T14901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.029410][T14901] do_syscall_64+0x174/0x580 [ 411.029436][T14901] ? trace_irq_disable+0x3b/0x140 [ 411.029461][T14901] ? clear_bhb_loop+0x40/0x90 [ 411.029496][T14901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.029516][T14901] RIP: 0033:0x7fbcde19de59 [ 411.029536][T14901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.029553][T14901] RSP: 002b:00007fbcdf14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.029575][T14901] RAX: ffffffffffffffda RBX: 00007fbcde425fa0 RCX: 00007fbcde19de59 [ 411.029590][T14901] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 411.029602][T14901] RBP: 00007fbcdf14a090 R08: 0000000000000000 R09: 0000000000000000 [ 411.029614][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.029626][T14901] R13: 00007fbcde426038 R14: 00007fbcde425fa0 R15: 00007ffc549f6538 [ 411.029659][T14901] [ 411.327995][T14892] veth15: entered promiscuous mode [ 411.336192][T14772] team0: Port device team_slave_1 added [ 411.363450][ T5623] Bluetooth: hci7: command tx timeout [ 411.382950][T14772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.390890][T14772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.426305][T14772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.472134][T14772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.509988][T14772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.542828][T14772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.626299][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 411.718867][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.889721][T14772] hsr_slave_0: entered promiscuous mode [ 411.897975][T14772] hsr_slave_1: entered promiscuous mode [ 411.904503][T14772] debugfs: 'hsr0' already exists in 'hsr' [ 411.910698][T14772] Cannot create hsr debugfs directory [ 412.184433][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.287114][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 412.676255][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 412.935956][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 413.063059][T14964] veth17: entered promiscuous mode [ 413.139265][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 413.183365][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 413.393603][ T5623] Bluetooth: hci7: command tx timeout [ 413.474368][T14983] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 413.574496][ T35] bridge_slave_1: left allmulticast mode [ 413.584300][ T35] bridge_slave_1: left promiscuous mode [ 413.594945][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.646902][ T35] bridge_slave_0: left allmulticast mode [ 413.655532][ T35] bridge_slave_0: left promiscuous mode [ 413.666016][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.486031][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.495925][ T35] bond_slave_0: left allmulticast mode [ 414.577908][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.588634][ T35] bond_slave_1: left allmulticast mode [ 414.596201][ T35] bond0 (unregistering): Released all slaves [ 414.665077][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 414.785616][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 414.954590][T15030] veth13: entered promiscuous mode [ 415.048911][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 415.181078][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 415.312787][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 415.339153][T15047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2298'. [ 415.438937][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 415.508416][ T5623] Bluetooth: hci7: command tx timeout [ 415.605365][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 415.802839][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 415.858146][ T35] hsr_slave_0: left promiscuous mode [ 415.864505][ T35] hsr_slave_1: left promiscuous mode [ 415.870774][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.878248][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.890432][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.897870][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.970093][ T35] veth1_macvtap: left promiscuous mode [ 415.976540][ T35] veth0_macvtap: left promiscuous mode [ 415.982213][ T35] veth1_vlan: left promiscuous mode [ 415.987624][ T35] veth0_vlan: left promiscuous mode [ 415.988259][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 416.071177][T14969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.505029][T15088] netlink: del zone limit has 4 unknown bytes [ 416.620338][T15090] netlink: 'syz.5.2301': attribute type 1 has an invalid length. [ 416.985050][ T35] team0 (unregistering): Port device team_slave_1 removed [ 417.006870][ T35] team0 (unregistering): Port device team_slave_0 removed [ 417.215280][T14772] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 417.227270][T14772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.235275][T15088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2302'. [ 417.278079][T14772] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 417.298121][T14772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.307148][T14772] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 417.416314][T14772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.448421][T14772] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 417.488274][T15115] netlink: 'syz.3.2304': attribute type 11 has an invalid length. [ 417.591701][T14772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.615030][T15117] sctp: [Deprecated]: syz.3.2304 (pid 15117) Use of int in max_burst socket option deprecated. [ 417.615030][T15117] Use struct sctp_assoc_value instead [ 417.813826][T15134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2307'. [ 417.917686][T15115] netlink: 'syz.3.2304': attribute type 11 has an invalid length. [ 417.967912][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 417.995044][T15133] Cannot find add_set index 0 as target [ 418.221976][T15153] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.2310'. [ 418.245893][T15155] FAULT_INJECTION: forcing a failure. [ 418.245893][T15155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.285250][T15155] CPU: 1 UID: 0 PID: 15155 Comm: syz.0.2311 Not tainted syzkaller #0 PREEMPT(full) [ 418.285278][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.285290][T15155] Call Trace: [ 418.285298][T15155] [ 418.285307][T15155] dump_stack_lvl+0xe8/0x150 [ 418.285349][T15155] should_fail_ex+0x40c/0x560 [ 418.285383][T15155] _copy_to_user+0x31/0xb0 [ 418.285415][T15155] bpf_verifier_vlog+0x52a/0x900 [ 418.285451][T15155] __btf_verifier_log+0xe2/0x140 [ 418.285483][T15155] ? __pfx___btf_verifier_log+0x10/0x10 [ 418.285503][T15155] ? __might_fault+0xaf/0x130 [ 418.285535][T15155] ? btf_parse_hdr+0x1da/0x810 [ 418.285568][T15155] btf_parse_hdr+0x313/0x810 [ 418.285601][T15155] btf_new_fd+0x32f/0xbb0 [ 418.285638][T15155] __sys_bpf+0xd2e/0xd90 [ 418.285675][T15155] ? __pfx___sys_bpf+0x10/0x10 [ 418.285713][T15155] ? __fget_files+0x2a/0x420 [ 418.285760][T15155] ? ksys_write+0x242/0x270 [ 418.285795][T15155] ? __pfx_ksys_write+0x10/0x10 [ 418.285831][T15155] __x64_sys_bpf+0xba/0xd0 [ 418.285856][T15155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.285881][T15155] do_syscall_64+0x174/0x580 [ 418.285913][T15155] ? trace_irq_disable+0x3b/0x140 [ 418.285940][T15155] ? clear_bhb_loop+0x40/0x90 [ 418.285967][T15155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.285987][T15155] RIP: 0033:0x7fbcde19de59 [ 418.286008][T15155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.286025][T15155] RSP: 002b:00007fbcdf14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.286058][T15155] RAX: ffffffffffffffda RBX: 00007fbcde425fa0 RCX: 00007fbcde19de59 [ 418.286073][T15155] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 418.286086][T15155] RBP: 00007fbcdf14a090 R08: 0000000000000000 R09: 0000000000000000 [ 418.286099][T15155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.286112][T15155] R13: 00007fbcde426038 R14: 00007fbcde425fa0 R15: 00007ffc549f6538 [ 418.286146][T15155] [ 418.290748][T15115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.498867][T15160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2313'. [ 418.562816][T15115] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.640132][T15115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.835623][T15167] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 418.880106][T15115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.896066][T15167] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2315'. [ 418.921442][T15115] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 419.022047][ T187] bridge1: entered promiscuous mode [ 419.526985][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 419.553892][T15181] tipc: New replicast peer: 255.255.255.255 [ 419.574455][T15181] tipc: Enabled bearer , priority 10 [ 419.592563][T15185] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2319'. [ 419.608984][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2319'. [ 419.671520][T15183] syzkaller1: entered promiscuous mode [ 419.684876][T15183] syzkaller1: entered allmulticast mode [ 419.871778][T15198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2322'. [ 420.065221][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2322'. [ 420.074329][T15198] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2322'. [ 420.091629][ T6809] net_ratelimit: 1 callbacks suppressed [ 420.091650][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 420.113299][T15198] sctp: [Deprecated]: syz.3.2322 (pid 15198) Use of int in max_burst socket option. [ 420.113299][T15198] Use struct sctp_assoc_value instead [ 420.178310][T14772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.283688][T14772] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.361116][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.368327][ T6807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.570731][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.577950][ T6807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.595341][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 420.857820][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 420.976068][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 421.253748][T15242] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 421.394164][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 421.523218][T15244] syzkaller1: entered promiscuous mode [ 421.541745][T15244] syzkaller1: entered allmulticast mode [ 421.572142][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 421.698743][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 421.865941][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 422.106852][ T12] bond2: (slave bridge0): failed to get link speed/duplex [ 422.202092][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 422.249995][T14772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.473460][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 422.698219][T14772] veth0_vlan: entered promiscuous mode [ 422.713152][T14772] veth1_vlan: entered promiscuous mode [ 422.783066][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 422.853571][T14772] veth0_macvtap: entered promiscuous mode [ 422.864829][T14772] veth1_macvtap: entered promiscuous mode [ 422.940141][T14772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.003655][T14772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.025305][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.034175][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.043057][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.051813][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.199185][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.247508][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.290141][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.298093][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.561349][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 423.617016][T15300] FAULT_INJECTION: forcing a failure. [ 423.617016][T15300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.632640][T15300] CPU: 1 UID: 0 PID: 15300 Comm: syz.7.2237 Not tainted syzkaller #0 PREEMPT(full) [ 423.632668][T15300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.632681][T15300] Call Trace: [ 423.632689][T15300] [ 423.632699][T15300] dump_stack_lvl+0xe8/0x150 [ 423.632741][T15300] should_fail_ex+0x40c/0x560 [ 423.632771][T15300] _copy_to_user+0x31/0xb0 [ 423.632803][T15300] bpf_verifier_vlog+0x606/0x900 [ 423.632837][T15300] __btf_verifier_log+0xe2/0x140 [ 423.632867][T15300] ? __pfx___btf_verifier_log+0x10/0x10 [ 423.632887][T15300] ? __might_fault+0xaf/0x130 [ 423.632917][T15300] ? btf_parse_hdr+0x1da/0x810 [ 423.632948][T15300] btf_parse_hdr+0x3c1/0x810 [ 423.632981][T15300] btf_new_fd+0x32f/0xbb0 [ 423.633025][T15300] __sys_bpf+0xd2e/0xd90 [ 423.633062][T15300] ? __pfx___sys_bpf+0x10/0x10 [ 423.633100][T15300] ? __fget_files+0x2a/0x420 [ 423.633146][T15300] ? ksys_write+0x242/0x270 [ 423.633179][T15300] ? __pfx_ksys_write+0x10/0x10 [ 423.633215][T15300] __x64_sys_bpf+0xba/0xd0 [ 423.633239][T15300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.633262][T15300] do_syscall_64+0x174/0x580 [ 423.633291][T15300] ? trace_irq_disable+0x3b/0x140 [ 423.633325][T15300] ? clear_bhb_loop+0x40/0x90 [ 423.633351][T15300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.633371][T15300] RIP: 0033:0x7fbe59f9de59 [ 423.633391][T15300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.633408][T15300] RSP: 002b:00007fbe581f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.633431][T15300] RAX: ffffffffffffffda RBX: 00007fbe5a225fa0 RCX: 00007fbe59f9de59 [ 423.633445][T15300] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 423.633458][T15300] RBP: 00007fbe581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.633471][T15300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.633483][T15300] R13: 00007fbe5a226038 R14: 00007fbe5a225fa0 R15: 00007fffd8151cc8 [ 423.633516][T15300] [ 424.277400][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 425.122202][ T6809] net_ratelimit: 15 callbacks suppressed [ 425.122228][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 425.236386][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 425.343348][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 425.458653][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 425.571600][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 425.685924][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 425.798175][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 425.907041][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 426.025465][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 426.136801][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 430.217469][ T57] net_ratelimit: 35 callbacks suppressed [ 430.217493][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 430.338659][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 430.453192][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 430.567767][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 430.682953][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 430.796792][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 430.910868][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 431.025620][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 431.138487][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 431.247729][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 435.316676][ T35] net_ratelimit: 35 callbacks suppressed [ 435.316702][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 435.425415][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 435.533799][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 435.666073][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 435.784741][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 435.910779][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 436.015938][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 436.129105][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 436.249950][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 436.367660][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 437.140013][T15384] ip6t_rpfilter: unknown options [ 437.280141][T15387] __nla_validate_parse: 4 callbacks suppressed [ 437.280163][T15387] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2344'. [ 437.388498][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2344'. [ 437.606648][T15407] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2346'. [ 437.681088][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 437.724434][T15407] syzkaller1: entered promiscuous mode [ 437.730721][T15407] syzkaller1: entered allmulticast mode [ 437.792295][T15407] xt_CONNSECMARK: invalid mode: 254 [ 437.809655][T15417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2350'. [ 438.415306][T15439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2354'. [ 438.510336][T15441] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2355'. [ 438.550288][T15441] syzkaller1: entered promiscuous mode [ 438.555830][T15441] syzkaller1: entered allmulticast mode [ 438.570191][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2355'. [ 438.682914][T15445] syzkaller1: entered promiscuous mode [ 438.688791][T15445] syzkaller1: entered allmulticast mode [ 438.973276][T15460] syzkaller0: entered promiscuous mode [ 438.979304][T15460] syzkaller0: entered allmulticast mode [ 439.140930][T15468] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 439.175733][T15468] bond9 (unregistering): Released all slaves [ 439.455635][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2364'. [ 439.584243][T15483] sctp: [Deprecated]: syz.5.2365 (pid 15483) Use of int in max_burst socket option deprecated. [ 439.584243][T15483] Use struct sctp_assoc_value instead [ 440.323531][ T6809] net_ratelimit: 21 callbacks suppressed [ 440.323554][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 440.328306][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.448393][ T570] bond2: (slave bridge0): failed to get link speed/duplex [ 440.567597][ T13] bond2: (slave bridge0): failed to get link speed/duplex [ 440.670589][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 440.785790][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 440.910759][ T6807] bond2: (slave bridge0): failed to get link speed/duplex [ 441.025273][ T6809] bond2: (slave bridge0): failed to get link speed/duplex [ 441.130154][ T35] bond2: (slave bridge0): failed to get link speed/duplex [ 441.246738][ T6818] bond2: (slave bridge0): failed to get link speed/duplex [ 441.359775][ T57] bond2: (slave bridge0): failed to get link speed/duplex [ 441.580770][T15445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.036378][T15504] FAULT_INJECTION: forcing a failure. [ 442.036378][T15504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.102887][T15504] CPU: 0 UID: 0 PID: 15504 Comm: syz.1.2374 Not tainted syzkaller #0 PREEMPT(full) [ 442.102917][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.102929][T15504] Call Trace: [ 442.102937][T15504] [ 442.102946][T15504] dump_stack_lvl+0xe8/0x150 [ 442.102985][T15504] should_fail_ex+0x40c/0x560 [ 442.103014][T15504] _copy_to_user+0x31/0xb0 [ 442.103046][T15504] bpf_verifier_vlog+0x496/0x900 [ 442.103079][T15504] __btf_verifier_log+0xe2/0x140 [ 442.103110][T15504] ? __pfx___btf_verifier_log+0x10/0x10 [ 442.103148][T15504] __btf_verifier_log_type+0x3c8/0x6a0 [ 442.103182][T15504] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 442.103219][T15504] btf_datasec_check_meta+0x40e/0xad0 [ 442.103254][T15504] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 442.103293][T15504] btf_parse_type_sec+0x3cf/0x2360 [ 442.103330][T15504] ? btf_parse_hdr+0x1da/0x810 [ 442.103364][T15504] ? btf_parse_hdr+0x5f2/0x810 [ 442.103389][T15504] ? btf_parse_str_sec+0x244/0x2f0 [ 442.103421][T15504] btf_new_fd+0x487/0xbb0 [ 442.103460][T15504] __sys_bpf+0xd2e/0xd90 [ 442.103497][T15504] ? __pfx___sys_bpf+0x10/0x10 [ 442.103536][T15504] ? __fget_files+0x2a/0x420 [ 442.103580][T15504] ? ksys_write+0x242/0x270 [ 442.103613][T15504] ? __pfx_ksys_write+0x10/0x10 [ 442.103649][T15504] __x64_sys_bpf+0xba/0xd0 [ 442.103682][T15504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.103705][T15504] do_syscall_64+0x174/0x580 [ 442.103734][T15504] ? trace_irq_disable+0x3b/0x140 [ 442.103758][T15504] ? clear_bhb_loop+0x40/0x90 [ 442.103783][T15504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.103803][T15504] RIP: 0033:0x7fa46359de59 [ 442.103823][T15504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.103839][T15504] RSP: 002b:00007fa4644b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.103862][T15504] RAX: ffffffffffffffda RBX: 00007fa463825fa0 RCX: 00007fa46359de59 [ 442.103877][T15504] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 442.103890][T15504] RBP: 00007fa4644b2090 R08: 0000000000000000 R09: 0000000000000000 [ 442.103903][T15504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.103914][T15504] R13: 00007fa463826038 R14: 00007fa463825fa0 R15: 00007ffd61758f08 [ 442.103947][T15504] [ 442.168659][T15490] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2366'. [ 442.318611][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'. [ 442.463532][T15513] 8021q: adding VLAN 0 to HW filter on device bond9 [ 442.512570][T15520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.537676][T15522] netlink: 49 bytes leftover after parsing attributes in process `syz.7.2376'. [ 442.557562][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 442.564118][T15522] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2376'. [ 442.577928][T15513] 8021q: adding VLAN 0 to HW filter on device bond10 [ 442.616938][T15513] bond9: (slave bond10): Enslaving as an active interface with an up link [ 442.664431][T15523] bond9 (unregistering): (slave bond10): Releasing backup interface [ 442.694718][T15523] bond9 (unregistering): Released all slaves [ 442.844654][T15532] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2379'. [ 443.109752][T15543] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 443.147183][T15529] vlan2: entered allmulticast mode [ 443.153216][T15529] bond0: entered allmulticast mode [ 443.159233][T15529] bond_slave_0: entered allmulticast mode [ 443.165579][T15529] bond_slave_1: entered allmulticast mode [ 443.222510][T15544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2383'. [ 443.232612][T15544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2383'. [ 443.265037][T15532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.302665][T15532] bond_slave_0: left allmulticast mode [ 443.337537][T15532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.348567][T15532] bond_slave_1: left allmulticast mode [ 443.363587][T15532] bond0 (unregistering): Released all slaves [ 443.408203][T15549] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 443.527769][T15553] FAULT_INJECTION: forcing a failure. [ 443.527769][T15553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.541254][T15553] CPU: 1 UID: 0 PID: 15553 Comm: syz.3.2386 Not tainted syzkaller #0 PREEMPT(full) [ 443.541282][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.541295][T15553] Call Trace: [ 443.541304][T15553] [ 443.541311][T15553] dump_stack_lvl+0xe8/0x150 [ 443.541348][T15553] should_fail_ex+0x40c/0x560 [ 443.541379][T15553] _copy_to_user+0x31/0xb0 [ 443.541411][T15553] bpf_verifier_vlog+0x52a/0x900 [ 443.541445][T15553] btf_verifier_log+0x11d/0x1a0 [ 443.541475][T15553] ? __pfx_btf_verifier_log+0x10/0x10 [ 443.541511][T15553] __btf_verifier_log_type+0x45d/0x6a0 [ 443.541547][T15553] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 443.541583][T15553] btf_datasec_check_meta+0x40e/0xad0 [ 443.541617][T15553] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 443.541654][T15553] btf_parse_type_sec+0x3cf/0x2360 [ 443.541688][T15553] ? btf_parse_hdr+0x1da/0x810 [ 443.541720][T15553] ? btf_parse_hdr+0x5f2/0x810 [ 443.541745][T15553] ? btf_parse_str_sec+0x244/0x2f0 [ 443.541777][T15553] btf_new_fd+0x487/0xbb0 [ 443.541813][T15553] __sys_bpf+0xd2e/0xd90 [ 443.541847][T15553] ? __pfx___sys_bpf+0x10/0x10 [ 443.541885][T15553] ? __fget_files+0x2a/0x420 [ 443.541929][T15553] ? ksys_write+0x242/0x270 [ 443.541962][T15553] ? __pfx_ksys_write+0x10/0x10 [ 443.541996][T15553] __x64_sys_bpf+0xba/0xd0 [ 443.542019][T15553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.542041][T15553] do_syscall_64+0x174/0x580 [ 443.542069][T15553] ? trace_irq_disable+0x3b/0x140 [ 443.542094][T15553] ? clear_bhb_loop+0x40/0x90 [ 443.542128][T15553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.542147][T15553] RIP: 0033:0x7f9047f9de59 [ 443.542168][T15553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.542185][T15553] RSP: 002b:00007f9048e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.542213][T15553] RAX: ffffffffffffffda RBX: 00007f9048225fa0 RCX: 00007f9047f9de59 [ 443.542228][T15553] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 443.542241][T15553] RBP: 00007f9048e48090 R08: 0000000000000000 R09: 0000000000000000 [ 443.542253][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.542266][T15553] R13: 00007f9048226038 R14: 00007f9048225fa0 R15: 00007ffd008c0a08 [ 443.542299][T15553] [ 443.930071][T15563] netlink: 16170 bytes leftover after parsing attributes in process `syz.5.2387'. [ 444.282921][T15580] netlink: 'syz.3.2390': attribute type 3 has an invalid length. [ 444.288318][T15575] ksmbd: Unknown IPC event: 1, ignore. [ 444.441514][T15583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2395'. [ 444.586920][T15592] netlink: 'syz.0.2398': attribute type 41 has an invalid length. [ 444.663554][T15594] tipc: Resetting bearer [ 445.291501][T15594] tipc: Resetting bearer [ 445.387268][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.398866][T15594] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 445.406059][T15594] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 445.413431][T15594] macsec2: left promiscuous mode [ 445.418686][T15594] ipip0: left promiscuous mode [ 445.423914][T15594] bond3: left promiscuous mode [ 445.428724][T15594] veth0_to_bond: left promiscuous mode [ 445.434622][T15594] bond3: left allmulticast mode [ 445.439512][T15594] veth0_to_bond: left allmulticast mode [ 445.445399][T15594] ip6tnl5: left allmulticast mode [ 445.512240][T15594] bond5: left promiscuous mode [ 445.519541][T15594] veth5: left promiscuous mode [ 445.538390][T15594] ip6erspan0: left allmulticast mode [ 445.556331][T15594] veth9: left promiscuous mode [ 445.632276][T15594] veth11: left promiscuous mode [ 445.650003][T15594] veth13: left promiscuous mode [ 445.658818][ T5282] veth0_vlan: left promiscuous mode [ 445.707719][ T35] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.763600][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.819542][ T35] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.828568][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.892732][T14010] veth0_vlan: entered promiscuous mode [ 445.948274][ T35] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.979520][T15629] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2404'. [ 446.004536][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.013946][ T35] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.023122][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.431474][T15645] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 446.560497][T15651] netlink: 'syz.0.2408': attribute type 5 has an invalid length. [ 446.628555][T15656] netlink: 'syz.0.2408': attribute type 5 has an invalid length. [ 446.661985][T15656] netlink: 'syz.0.2408': attribute type 8 has an invalid length. [ 446.685304][ T6807] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.694927][ T6807] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.703396][ T6807] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.123360][ T6807] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.131966][T15651] net_ratelimit: 14 callbacks suppressed [ 447.131989][T15651] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 447.170697][T15666] netlink: 'syz.7.2411': attribute type 5 has an invalid length. [ 447.413068][T15675] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 447.431722][T15679] __nla_validate_parse: 6 callbacks suppressed [ 447.431743][T15679] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2413'. [ 447.673395][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 447.797292][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'. [ 447.845374][T15704] batadv_slave_0: entered promiscuous mode [ 448.384461][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2416'. [ 448.624666][T15729] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 448.909207][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2426'. [ 449.810781][T15779] netlink: 'syz.0.2433': attribute type 1 has an invalid length. [ 450.430860][T15798] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2436'. [ 450.544234][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 450.659059][T15806] netlink: 'syz.0.2439': attribute type 3 has an invalid length. [ 450.772156][T15812] netlink: 'syz.5.2442': attribute type 21 has an invalid length. [ 451.196620][T15833] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2447'. [ 451.217457][T15835] FAULT_INJECTION: forcing a failure. [ 451.217457][T15835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.252942][T15835] CPU: 1 UID: 0 PID: 15835 Comm: syz.3.2450 Not tainted syzkaller #0 PREEMPT(full) [ 451.252974][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.252986][T15835] Call Trace: [ 451.252994][T15835] [ 451.253004][T15835] dump_stack_lvl+0xe8/0x150 [ 451.253044][T15835] should_fail_ex+0x40c/0x560 [ 451.253074][T15835] _copy_from_user+0x2d/0xb0 [ 451.253104][T15835] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 451.253136][T15835] bpf_vlog_finalize+0x154/0x3f0 [ 451.253162][T15835] bpf_log_attr_finalize+0x80/0x1e0 [ 451.253185][T15835] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 451.253212][T15835] ? btf_parse_hdr+0x5f2/0x810 [ 451.253238][T15835] ? btf_parse_str_sec+0x244/0x2f0 [ 451.253271][T15835] btf_new_fd+0x35e/0xbb0 [ 451.253310][T15835] __sys_bpf+0xd2e/0xd90 [ 451.253346][T15835] ? __pfx___sys_bpf+0x10/0x10 [ 451.253394][T15835] ? __fget_files+0x2a/0x420 [ 451.253441][T15835] ? ksys_write+0x242/0x270 [ 451.253475][T15835] ? __pfx_ksys_write+0x10/0x10 [ 451.253511][T15835] __x64_sys_bpf+0xba/0xd0 [ 451.253536][T15835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.253559][T15835] do_syscall_64+0x174/0x580 [ 451.253587][T15835] ? trace_irq_disable+0x3b/0x140 [ 451.253613][T15835] ? clear_bhb_loop+0x40/0x90 [ 451.253639][T15835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.253659][T15835] RIP: 0033:0x7f9047f9de59 [ 451.253679][T15835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.253697][T15835] RSP: 002b:00007f9048e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.253719][T15835] RAX: ffffffffffffffda RBX: 00007f9048225fa0 RCX: 00007f9047f9de59 [ 451.253734][T15835] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 451.253747][T15835] RBP: 00007f9048e48090 R08: 0000000000000000 R09: 0000000000000000 [ 451.253759][T15835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.253772][T15835] R13: 00007f9048226038 R14: 00007f9048225fa0 R15: 00007ffd008c0a08 [ 451.253814][T15835] [ 451.515860][T15838] netlink: 'syz.5.2447': attribute type 1 has an invalid length. [ 451.790596][T15845] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2452'. [ 451.952782][T15849] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 451.963102][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 452.171731][T15862] netlink: 'syz.3.2459': attribute type 1 has an invalid length. [ 452.353598][T15862] veth19: entered allmulticast mode [ 452.365714][T15862] bond11: (slave veth19): Enslaving as an active interface with a down link [ 452.423946][T15868] netlink: 'syz.0.2460': attribute type 12 has an invalid length. [ 452.464213][T15862] macvlan4: entered promiscuous mode [ 452.469581][T15862] macvlan4: entered allmulticast mode [ 452.475801][T15862] bond11: entered promiscuous mode [ 452.523218][T15862] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 452.566010][T15862] bond11: left promiscuous mode [ 452.689811][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 453.274819][T15916] FAULT_INJECTION: forcing a failure. [ 453.274819][T15916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.319263][T15899] syzkaller0: entered promiscuous mode [ 453.324821][T15899] syzkaller0: entered allmulticast mode [ 453.349265][T15916] CPU: 1 UID: 0 PID: 15916 Comm: syz.5.2470 Not tainted syzkaller #0 PREEMPT(full) [ 453.349295][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.349306][T15916] Call Trace: [ 453.349313][T15916] [ 453.349322][T15916] dump_stack_lvl+0xe8/0x150 [ 453.349357][T15916] should_fail_ex+0x40c/0x560 [ 453.349387][T15916] _copy_to_user+0x31/0xb0 [ 453.349419][T15916] bpf_vlog_reverse_ubuf+0x289/0x3e0 [ 453.349447][T15916] bpf_vlog_finalize+0x189/0x3f0 [ 453.349475][T15916] bpf_log_attr_finalize+0x80/0x1e0 [ 453.349498][T15916] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 453.349522][T15916] ? btf_parse_hdr+0x5f2/0x810 [ 453.349546][T15916] ? btf_parse_str_sec+0x244/0x2f0 [ 453.349576][T15916] btf_new_fd+0x35e/0xbb0 [ 453.349613][T15916] __sys_bpf+0xd2e/0xd90 [ 453.349646][T15916] ? __pfx___sys_bpf+0x10/0x10 [ 453.349683][T15916] ? __fget_files+0x2a/0x420 [ 453.349725][T15916] ? ksys_write+0x242/0x270 [ 453.349758][T15916] ? __pfx_ksys_write+0x10/0x10 [ 453.349790][T15916] __x64_sys_bpf+0xba/0xd0 [ 453.349825][T15916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.349847][T15916] do_syscall_64+0x174/0x580 [ 453.349874][T15916] ? trace_irq_disable+0x3b/0x140 [ 453.349899][T15916] ? clear_bhb_loop+0x40/0x90 [ 453.349924][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.349943][T15916] RIP: 0033:0x7f2e88d9de59 [ 453.349963][T15916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.349979][T15916] RSP: 002b:00007f2e89b7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.350002][T15916] RAX: ffffffffffffffda RBX: 00007f2e89025fa0 RCX: 00007f2e88d9de59 [ 453.350016][T15916] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 453.350028][T15916] RBP: 00007f2e89b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 453.350040][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.350051][T15916] R13: 00007f2e89026038 R14: 00007f2e89025fa0 R15: 00007ffd4a4ef9a8 [ 453.350083][T15916] [ 453.373363][T15899] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 453.612366][T15914] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 453.620165][T15914] netlink: 'syz.0.2468': attribute type 2 has an invalid length. [ 453.628051][T15899] netlink: 'syz.0.2468': attribute type 2 has an invalid length. [ 453.677055][T15871] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2461'. [ 453.695530][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 453.732968][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2474'. [ 453.834933][T15927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2474'. [ 454.014860][ T29] audit: type=1800 audit(1783768029.564:10): pid=15929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2475" name="blkio.bfq.time_recursive" dev="tmpfs" ino=167 res=0 errno=0 [ 455.625684][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 458.014989][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2478'. [ 458.053577][T15955] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 458.380289][T15959] sctp: [Deprecated]: syz.1.2479 (pid 15959) Use of int in max_burst socket option deprecated. [ 458.380289][T15959] Use struct sctp_assoc_value instead [ 463.765343][T15926] syzkaller0: entered promiscuous mode [ 463.771132][T15926] syzkaller0: entered allmulticast mode [ 463.777854][T15920] tipc: Started in network mode [ 463.782758][T15920] tipc: Node identity , cluster identity 4711 [ 463.788949][T15920] tipc: Failed to obtain node identity [ 463.794439][T15920] tipc: Enabling of bearer rejected, failed to enable media [ 463.808224][T15932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2473'. [ 463.874766][T15966] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 463.882417][T15966] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 464.119331][T15980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2483'. [ 464.520937][T16052] FAULT_INJECTION: forcing a failure. [ 464.520937][T16052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.587285][T16052] CPU: 0 UID: 0 PID: 16052 Comm: syz.0.2484 Not tainted syzkaller #0 PREEMPT(full) [ 464.587315][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.587327][T16052] Call Trace: [ 464.587335][T16052] [ 464.587344][T16052] dump_stack_lvl+0xe8/0x150 [ 464.587382][T16052] should_fail_ex+0x40c/0x560 [ 464.587411][T16052] _copy_to_user+0x31/0xb0 [ 464.587444][T16052] bpf_vlog_reverse_ubuf+0x2e2/0x3e0 [ 464.587472][T16052] bpf_vlog_finalize+0x189/0x3f0 [ 464.587497][T16052] bpf_log_attr_finalize+0x80/0x1e0 [ 464.587520][T16052] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 464.587546][T16052] ? btf_parse_hdr+0x5f2/0x810 [ 464.587570][T16052] ? btf_parse_str_sec+0x244/0x2f0 [ 464.587601][T16052] btf_new_fd+0x35e/0xbb0 [ 464.587637][T16052] __sys_bpf+0xd2e/0xd90 [ 464.587681][T16052] ? __pfx___sys_bpf+0x10/0x10 [ 464.587719][T16052] ? __fget_files+0x2a/0x420 [ 464.587763][T16052] ? ksys_write+0x242/0x270 [ 464.587796][T16052] ? __pfx_ksys_write+0x10/0x10 [ 464.587832][T16052] __x64_sys_bpf+0xba/0xd0 [ 464.587855][T16052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.587876][T16052] do_syscall_64+0x174/0x580 [ 464.587904][T16052] ? trace_irq_disable+0x3b/0x140 [ 464.587928][T16052] ? clear_bhb_loop+0x40/0x90 [ 464.587953][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.587971][T16052] RIP: 0033:0x7fbcde19de59 [ 464.587991][T16052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.588007][T16052] RSP: 002b:00007fbcdf14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.588029][T16052] RAX: ffffffffffffffda RBX: 00007fbcde425fa0 RCX: 00007fbcde19de59 [ 464.588043][T16052] RDX: 0000000000000028 RSI: 0000200000001440 RDI: 0000000000000012 [ 464.588056][T16052] RBP: 00007fbcdf14a090 R08: 0000000000000000 R09: 0000000000000000 [ 464.588068][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.588080][T16052] R13: 00007fbcde426038 R14: 00007fbcde425fa0 R15: 00007ffc549f6538 [ 464.588112][T16052] [ 464.889630][T15982] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_cmd_wq": -EINTR [ 465.427790][T16083] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 465.528795][T16094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 465.602329][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2486'. [ 465.633825][T16083] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.784097][T16094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 466.726835][T16142] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 466.730117][T16140] ip6gre2: entered promiscuous mode [ 466.744531][T16140] ip6gre2: entered allmulticast mode [ 466.758088][T16138] bond0: option arp_validate: invalid value (55553) [ 466.772238][ T570] bond0: (slave bond_slave_0): interface is now down [ 466.781415][ T570] bond0: (slave bond_slave_1): interface is now down [ 466.804760][T16023] udevd[16023]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 466.810012][T16146] tap0: tun_chr_ioctl cmd 1074025677 [ 466.838053][ T6807] bond0: (slave bond_slave_0): interface is now down [ 466.854647][T16146] tap0: linktype set to 804 [ 466.859701][T16127] lo speed is unknown, defaulting to 1000 [ 466.888473][T16150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.907735][ T6807] bond0: (slave bond_slave_1): interface is now down [ 466.992616][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'. [ 467.007109][ T570] bond0: (slave bond_slave_0): interface is now down [ 467.014237][ T570] bond0: (slave bond_slave_1): interface is now down [ 467.015450][T16154] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2500'. [ 467.059455][ T13] bond0: (slave bond_slave_0): interface is now down [ 467.066325][ T13] bond0: (slave bond_slave_1): interface is now down [ 467.121624][ T570] bond0: (slave bond_slave_0): interface is now down [ 467.130898][ T570] bond0: (slave bond_slave_1): interface is now down [ 467.134293][T16150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.167803][ T570] bond0: (slave bond_slave_0): interface is now down [ 467.174918][ T570] bond0: (slave bond_slave_1): interface is now down [ 467.238623][ T6809] bond0: (slave bond_slave_0): interface is now down [ 467.242619][T16148] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 467.252345][ T6809] bond0: (slave bond_slave_1): interface is now down [ 467.286512][ T6807] bond0: (slave bond_slave_0): interface is now down [ 467.304526][ T6807] bond0: (slave bond_slave_1): interface is now down [ 467.335998][ T6807] bond0: (slave bond_slave_0): interface is now down [ 467.346392][ T6807] bond0: (slave bond_slave_1): interface is now down [ 467.353835][T16154] geneve2: entered promiscuous mode [ 467.359299][T16154] geneve2: entered allmulticast mode [ 467.403569][ T35] bond0: (slave bond_slave_0): interface is now down [ 467.414332][ T35] bond0: (slave bond_slave_1): interface is now down [ 467.476527][ T35] bond0: (slave bond_slave_0): interface is now down [ 467.483529][ T35] bond0: (slave bond_slave_1): interface is now down [ 467.527714][ T6802] bond0: (slave bond_slave_0): interface is now down [ 467.534477][ T6802] bond0: (slave bond_slave_1): interface is now down [ 467.666444][ T6802] bond0: (slave bond_slave_0): interface is now down [ 467.673206][ T6802] bond0: (slave bond_slave_1): interface is now down [ 467.695735][ T570] bond0: (slave bond_slave_0): interface is now down [ 467.706971][ T570] bond0: (slave bond_slave_1): interface is now down [ 467.766893][ T6807] bond0: (slave bond_slave_0): interface is now down [ 467.785456][ T6807] bond0: (slave bond_slave_1): interface is now down [ 467.949256][ T6809] bond0: (slave bond_slave_0): interface is now down [ 467.967967][ T6809] bond0: (slave bond_slave_1): interface is now down [ 468.062078][ T6809] bond0: now running without any active interface! [ 468.149692][T16176] can: request_module (can-proto-0) failed. [ 468.235867][T16185] netlink: 'syz.3.2507': attribute type 29 has an invalid length. [ 468.244348][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'. [ 468.264041][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2507'. [ 468.551616][T16197] netlink: 'syz.1.2511': attribute type 10 has an invalid length. [ 468.599404][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2510'. [ 468.965470][T16218] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2515'. [ 469.542035][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2520'. [ 469.666636][T16234] 8021q: adding VLAN 0 to HW filter on device bond11 [ 469.694800][T16241] ±ÿ: renamed from lo (while UP) [ 469.730334][T16234] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 469.750673][T16234] bond11: (slave wlan1): Enslaving as an active interface with an up link [ 469.870849][T16256] netlink: 'syz.1.2525': attribute type 1 has an invalid length. [ 469.996770][T16256] gretap3: entered allmulticast mode [ 470.006524][T16256] bond6: (slave gretap3): making interface the new active one [ 470.044375][T16256] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 470.188731][T16273] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 470.195988][T16273] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 470.263831][T16273] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 470.517160][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 470.546475][T16285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2534'. [ 470.610723][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2536'. [ 470.771001][T16301] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 470.784040][T16301] bond1: (slave vti0): Error -95 calling set_mac_address [ 470.838023][T16300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 470.942687][T16308] batman_adv: batadv0: Adding interface: vlan2 [ 470.948923][T16308] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.974348][T16308] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 471.026647][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 471.184442][T16325] netlink: 'syz.5.2544': attribute type 23 has an invalid length. [ 471.220114][T16324] netlink: 'syz.5.2544': attribute type 23 has an invalid length. [ 471.252988][T16325] netlink: 'syz.5.2544': attribute type 21 has an invalid length. [ 471.262163][T16324] netlink: 'syz.5.2544': attribute type 21 has an invalid length. [ 471.270024][T16324] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.384025][T16334] netlink: 'syz.7.2549': attribute type 1 has an invalid length. [ 471.502437][T16334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.692052][T16334] bond2: (slave veth5): Enslaving as an active interface with a down link [ 471.823056][T16352] netlink: 'syz.5.2556': attribute type 32 has an invalid length. [ 471.842623][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2556'. [ 471.862608][T16355] netlink: 556 bytes leftover after parsing attributes in process `syz.7.2549'. [ 471.872018][T16345] block nbd0: Unsupported socket: should be TCP or UNIX. [ 471.914794][T16356] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.932399][T16356] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.085886][T16352] bond0: Setting coupled_control to off (0) [ 472.114267][T16350] lo speed is unknown, defaulting to 1000 [ 472.128125][T16360] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 472.175307][T16360] ipvlan0: entered allmulticast mode [ 472.185572][T16360] veth0_vlan: entered allmulticast mode [ 472.281410][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2559'. [ 472.570868][T16379] syzkaller0: entered promiscuous mode [ 472.576772][T16379] syzkaller0: entered allmulticast mode [ 472.632617][T16379] Bluetooth: MGMT ver 1.23 [ 472.942472][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2565'. [ 473.063333][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 473.463918][T16402] team1: entered promiscuous mode [ 473.471760][T16402] team1: entered allmulticast mode [ 473.503056][T16402] 8021q: adding VLAN 0 to HW filter on device team1 [ 473.571736][T16403] team2: entered promiscuous mode [ 473.577498][T16403] team2: entered allmulticast mode [ 473.584113][T16403] 8021q: adding VLAN 0 to HW filter on device team2 [ 473.950084][T16418] __nla_validate_parse: 2 callbacks suppressed [ 473.950122][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 474.019746][T16418] bond12: Invalid ad_actor_system MAC address. [ 474.031479][T16418] bond12: option ad_actor_system: invalid value (7) [ 474.048256][T16418] bond12 (unregistering): Released all slaves [ 474.248892][T16437] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2581'. [ 474.259155][T16437] netlink: 'syz.1.2581': attribute type 11 has an invalid length. [ 474.279089][T16438] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2580'. [ 474.488705][T16448] ip6tnl0: Caught tx_queue_len zero misconfig [ 474.504671][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 474.539932][T16453] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 474.549454][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2584'. [ 474.904213][T16468] lo speed is unknown, defaulting to 1000 [ 475.032638][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2589'. [ 475.048812][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2589'. [ 475.057917][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2589'. [ 475.496904][T16495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2592'. [ 475.866151][T16503] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2594'. [ 475.919143][T16508] netlink: 'syz.3.2595': attribute type 1 has an invalid length. [ 476.810639][T16550] netlink: 'syz.0.2605': attribute type 26 has an invalid length. [ 476.841320][T16538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.848806][T16538] bridge0: port 3(bond3) entered blocking state [ 476.855297][T16538] bridge0: port 3(bond3) entered disabled state [ 476.861935][T16538] bond3: entered allmulticast mode [ 476.869809][T16538] bond3: entered promiscuous mode [ 476.877673][T16538] bridge0: port 3(bond3) entered blocking state [ 476.884552][T16538] bridge0: port 3(bond3) entered forwarding state [ 476.929802][ T570] bridge0: port 3(bond3) entered disabled state [ 478.185534][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 491.465838][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 493.887190][T16575] x_tables: duplicate underflow at hook 3 [ 494.372321][T16603] __nla_validate_parse: 6 callbacks suppressed [ 494.372346][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2622'. [ 494.434833][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2622'. [ 494.528187][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 495.258889][T16625] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 495.299653][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 495.401110][T16632] netlink: 'syz.1.2630': attribute type 3 has an invalid length. [ 495.462502][T16632] netlink: 'syz.1.2630': attribute type 1 has an invalid length. [ 495.597326][T16632] bond7: entered promiscuous mode [ 495.603193][T16632] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.862174][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2630'. [ 495.885888][T16642] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.893194][T16642] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 495.903230][T16642] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 495.931992][T16642] bond7: (slave gre1): making interface the new active one [ 495.939768][T16642] gre1: entered promiscuous mode [ 495.953114][T16642] bond7: (slave gre1): Enslaving as an active interface with an up link [ 496.141411][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2635'. [ 496.450634][T16681] batadv_slave_1: entered promiscuous mode [ 496.697011][T16679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.704550][T16679] bridge0: port 4(bond5) entered blocking state [ 496.711058][T16679] bridge0: port 4(bond5) entered disabled state [ 496.717526][T16679] bond5: entered allmulticast mode [ 496.725499][T16679] bond5: entered promiscuous mode [ 496.731388][T16679] bridge0: port 4(bond5) entered blocking state [ 496.737835][T16679] bridge0: port 4(bond5) entered forwarding state [ 496.739268][T16688] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 496.809088][ T6818] bridge0: port 4(bond5) entered disabled state [ 496.892411][T16664] batadv_slave_1: left promiscuous mode [ 497.094389][T16709] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2648'. [ 497.152538][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 497.168426][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 497.196685][T16712] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 497.401344][T16721] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2652'. [ 497.412683][T16723] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 497.916311][T16746] netlink: 'syz.7.2660': attribute type 1 has an invalid length. [ 498.785294][T16794] xt_bpf: check failed: parse error [ 498.817425][T16794] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 499.436324][T16806] gretap0: entered promiscuous mode [ 499.443915][T16806] vlan4: entered promiscuous mode [ 499.510307][T16810] __nla_validate_parse: 22 callbacks suppressed [ 499.510333][T16810] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2676'. [ 499.615069][T16811] lo speed is unknown, defaulting to 1000 [ 499.769961][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2679'. [ 499.779019][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2679'. [ 499.864671][T16824] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2679'. [ 500.194774][T16844] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2683'. [ 500.340067][T16853] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 500.355906][T16846] netlink: 'syz.3.2684': attribute type 7 has an invalid length. [ 500.532033][T16853] bond9: entered promiscuous mode [ 500.537769][T16853] 8021q: adding VLAN 0 to HW filter on device bond9 [ 500.571017][T16862] vlan3: entered allmulticast mode [ 500.576215][T16862] bond9: entered allmulticast mode [ 500.589938][T16848] lo speed is unknown, defaulting to 1000 [ 500.690076][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2689'. [ 500.703938][T16853] bond9: (slave bridge8): making interface the new active one [ 500.712375][T16853] bridge8: entered promiscuous mode [ 500.719656][T16853] bridge8: entered allmulticast mode [ 500.733695][T16853] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 500.979480][T16872] syzkaller0: entered promiscuous mode [ 501.030212][T16872] syzkaller0: entered allmulticast mode [ 501.443724][T16884] x_tables: duplicate underflow at hook 1 [ 501.452991][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 501.468125][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 501.479995][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 501.520749][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 501.549723][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 501.757508][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.022841][T16899] syzkaller1: entered promiscuous mode [ 502.028400][T16899] syzkaller1: entered allmulticast mode [ 502.483525][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2701'. [ 502.495758][T16885] lo speed is unknown, defaulting to 1000 [ 502.502936][T16911] netlink: 'syz.5.2701': attribute type 1 has an invalid length. [ 502.608051][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 502.672955][T16916] netlink: 'syz.3.2703': attribute type 21 has an invalid length. [ 502.691888][T16916] netlink: 'syz.3.2703': attribute type 20 has an invalid length. [ 502.838603][T16920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'. [ 503.238821][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 503.493371][T16885] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.501057][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.509015][T16885] bridge_slave_0: entered allmulticast mode [ 503.517893][T16885] bridge_slave_0: entered promiscuous mode [ 503.527527][T16885] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.536429][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.543675][T16885] bridge_slave_1: entered allmulticast mode [ 503.552721][T16885] bridge_slave_1: entered promiscuous mode [ 503.600644][T16885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.614373][T16885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.625713][ T5630] Bluetooth: hci6: command tx timeout [ 503.673750][T16885] team0: Port device team_slave_0 added [ 503.683508][T16885] team0: Port device team_slave_1 added [ 503.733744][T16885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.751734][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.785805][T16948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.798836][T16885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.826400][T16885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.849630][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.921170][T16885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.119863][T16885] hsr_slave_0: entered promiscuous mode [ 504.126912][T16885] hsr_slave_1: entered promiscuous mode [ 504.133489][T16885] debugfs: 'hsr0' already exists in 'hsr' [ 504.139320][T16885] Cannot create hsr debugfs directory [ 504.209665][T16952] syzkaller0: entered promiscuous mode [ 504.215715][T16952] syzkaller0: entered allmulticast mode [ 504.978606][T16973] __nla_validate_parse: 2 callbacks suppressed [ 504.978629][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2717'. [ 505.706605][ T5630] Bluetooth: hci6: command tx timeout [ 507.789801][ T5630] Bluetooth: hci6: command tx timeout [ 508.351766][T16982] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 508.458717][T16984] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2719'. [ 508.484570][T16984] lo speed is unknown, defaulting to 1000 [ 508.593196][T16988] x_tables: duplicate underflow at hook 2 [ 508.707686][T16998] netlink: 'syz.7.2723': attribute type 4 has an invalid length. [ 509.240624][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.248429][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.532147][T17006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.551752][T17006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.718544][T17013] erspan0: entered promiscuous mode [ 509.723833][T17013] erspan0: entered allmulticast mode [ 509.792134][ T13] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.801707][ T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.866462][ T5630] Bluetooth: hci6: command tx timeout [ 509.905253][ T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.966764][ T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.366115][T16885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.381160][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.389639][T16885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.404965][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.421476][T16885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.486487][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.506827][T17040] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2735'. [ 510.516792][T16885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 510.542218][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.631503][T17052] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 510.883534][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.944705][T16885] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.998472][T16885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.027324][T16885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.077807][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.085065][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.094735][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.102027][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.310446][ T30] INFO: task syz.4.1875:13308 blocked for more than 143 seconds. [ 511.381655][ T30] Not tainted syzkaller #0 [ 511.417840][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.483647][ T30] task:syz.4.1875 state:D stack:25872 pid:13308 tgid:13272 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 511.695326][ T30] Call Trace: [ 511.698763][ T30] [ 511.701824][ T30] __schedule+0x17d9/0x56c0 [ 511.707290][ T30] ? __lock_acquire+0x683/0x2cf0 [ 511.712514][ T30] ? __pfx___schedule+0x10/0x10 [ 511.718278][ T30] ? schedule+0x90/0x2b0 [ 511.723183][ T30] schedule+0x164/0x2b0 [ 511.727516][ T30] schedule_preempt_disabled+0x13/0x30 [ 511.733571][ T30] __mutex_lock+0x7bf/0x1550 [ 511.738956][ T30] ? __mutex_lock+0x5d4/0x1550 [ 511.747406][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 511.775620][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 511.794766][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 511.805206][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 511.814157][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 511.826050][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 511.835686][ T30] ? kasan_save_track+0x3e/0x80 [ 511.844458][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 511.855519][ T30] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 511.867272][ T30] ? __alloc_skb+0x2bd/0x7a0 [ 511.872105][ T30] ? netlink_dump+0x1e7/0xee0 [ 511.877720][ T30] ? __netlink_dump_start+0x589/0x7b0 [ 511.883186][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 511.885761][T16885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.889853][ T30] ? genl_rcv_msg+0x5e1/0x7a0 [ 511.901444][ T30] ? genl_rcv+0x28/0x40 [ 511.908104][ T30] ? netlink_unicast+0x7bb/0x940 [ 511.913154][ T30] ? netlink_sendmsg+0x813/0xb40 [ 511.919326][ T30] ? sock_sendmsg_nosec+0x13a/0x180 [ 511.924775][ T30] ? ____sys_sendmsg+0x54e/0x850 [ 511.930611][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 511.936083][ T30] ? __x64_sys_sendmsg+0x1b1/0x290 [ 511.941372][ T30] ? do_syscall_64+0x174/0x580 [ 511.947379][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.953630][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 511.960945][ T30] ? rcu_is_watching+0x15/0xb0 [ 511.966177][ T30] ? trace_kmalloc+0x2a/0xf0 [ 511.970858][ T30] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 511.974089][T16885] veth0_vlan: entered promiscuous mode [ 511.978526][ T30] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 511.990344][ T30] ? netlink_dump+0x1e7/0xee0 [ 511.992081][T16885] veth1_vlan: entered promiscuous mode [ 511.995660][ T30] ? netlink_dump+0x1e7/0xee0 [ 512.005890][ T30] genl_dumpit+0x10b/0x1b0 [ 512.010467][ T30] netlink_dump+0x711/0xee0 [ 512.015037][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 512.021296][ T30] ? genl_start+0x497/0x6d0 [ 512.028036][ T30] __netlink_dump_start+0x589/0x7b0 [ 512.033327][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 512.039950][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 512.050864][ T30] ? genl_get_cmd+0x523/0x960 [ 512.055175][T16885] veth0_macvtap: entered promiscuous mode [ 512.056496][ T30] ? __pfx_genl_start+0x10/0x10 [ 512.067929][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 512.070275][T16885] veth1_macvtap: entered promiscuous mode [ 512.073101][ T30] ? __pfx_genl_done+0x10/0x10 [ 512.084372][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 512.090096][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 512.094833][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.095096][T16885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.100864][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 512.114988][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 512.116845][T16885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.121155][ T30] netlink_rcv_skb+0x226/0x4a0 [ 512.133857][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.139569][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.145536][ T30] ? down_read+0x2be/0x330 [ 512.150146][ T30] genl_rcv+0x28/0x40 [ 512.154330][ T30] netlink_unicast+0x7bb/0x940 [ 512.160669][ T30] netlink_sendmsg+0x813/0xb40 [ 512.160965][ T570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.166126][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.180188][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.186343][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.186585][ T570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.191806][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 512.200454][ T570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.200496][ T570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.223568][ T30] ____sys_sendmsg+0x54e/0x850 [ 512.228617][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.234089][ T30] ? import_iovec+0x73/0xa0 [ 512.238810][ T30] ___sys_sendmsg+0x2a5/0x360 [ 512.243626][ T30] ? __lock_acquire+0x683/0x2cf0 [ 512.248978][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.254364][ T30] ? futex_wake+0x51b/0x5f0 [ 512.259146][ T30] ? __fget_files+0x2a/0x420 [ 512.263903][ T30] ? __fget_files+0x3a2/0x420 [ 512.269629][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 512.274746][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.280732][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.287377][ T30] do_syscall_64+0x174/0x580 [ 512.292171][ T30] ? trace_irq_disable+0x3b/0x140 [ 512.297445][ T30] ? clear_bhb_loop+0x40/0x90 [ 512.302270][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.308582][ T30] RIP: 0033:0x7f0b3919de59 [ 512.313157][ T30] RSP: 002b:00007f0b3a0bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.322334][ T30] RAX: ffffffffffffffda RBX: 00007f0b39426180 RCX: 00007f0b3919de59 [ 512.330507][ T30] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 512.339106][ T30] RBP: 00007f0b39233e6f R08: 0000000000000000 R09: 0000000000000000 [ 512.347570][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.355766][ T30] R13: 00007f0b39426218 R14: 00007f0b39426180 R15: 00007ffe78de2948 [ 512.363798][ T30] [ 512.367328][ T30] [ 512.367328][ T30] Showing all locks held in the system: [ 512.375777][ T30] 3 locks held by kworker/u8:0/12: [ 512.381153][ T30] #0: ffff888032c25940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.393223][ T30] #1: ffffc90000117c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.407570][ T30] #2: ffffffff9002c000 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 512.426124][ T30] 2 locks held by ksoftirqd/1/23: [ 512.431382][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 512.441782][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 512.451051][ T30] 1 lock held by khungtaskd/30: [ 512.456024][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 512.466533][ T30] 2 locks held by getty/5375: [ 512.471354][ T30] #0: ffff8880364760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 512.481550][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 512.491928][ T30] 3 locks held by kworker/0:3/5622: [ 512.497381][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.508802][ T30] #1: ffffc900039dfc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.521673][ T30] #2: ffff88807f1e2250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 512.532354][ T30] 3 locks held by kworker/0:5/5738: [ 512.537886][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.549308][ T30] #1: ffffc9000419fc40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.561383][ T30] #2: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 512.571499][ T30] 3 locks held by kworker/0:8/7951: [ 512.576927][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.588579][ T30] #1: ffffc9000cbe7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.601835][ T30] #2: ffff888083bc4250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 512.612270][ T30] 2 locks held by syz.2.1288/11021: [ 512.618469][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.627076][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 512.637624][ T30] 3 locks held by syz.4.1875/13308: [ 512.642844][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.652664][ T30] #1: ffff888076f026e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 512.663608][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 512.674347][ T30] 3 locks held by syz-executor/16885: [ 512.680216][ T30] #0: ffffffff9002c000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 512.689523][ T30] #1: ffff888035eb5610 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 512.699524][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 512.711261][ T30] 1 lock held by syz.7.2726/17006: [ 512.716783][ T30] #0: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 512.726980][ T30] [ 512.729384][ T30] ============================================= [ 512.729384][ T30] [ 512.752140][ T30] NMI backtrace for cpu 1 [ 512.752160][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.752182][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.752194][ T30] Call Trace: [ 512.752202][ T30] [ 512.752210][ T30] dump_stack_lvl+0xe8/0x150 [ 512.752246][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 512.752371][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.752404][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 512.752426][ T30] sys_info+0x135/0x170 [ 512.752442][ T30] watchdog+0xfd7/0x1030 [ 512.752468][ T30] ? watchdog+0x1c7/0x1030 [ 512.752493][ T30] kthread+0x388/0x470 [ 512.752514][ T30] ? __pfx_watchdog+0x10/0x10 [ 512.752531][ T30] ? __pfx_kthread+0x10/0x10 [ 512.752556][ T30] ret_from_fork+0x514/0xb70 [ 512.752600][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 512.752622][ T30] ? __switch_to+0xc89/0x1420 [ 512.752646][ T30] ? __pfx_kthread+0x10/0x10 [ 512.752670][ T30] ret_from_fork_asm+0x1a/0x30 [ 512.752699][ T30] [ 512.752707][ T30] Sending NMI from CPU 1 to CPUs 0: [ 512.776659][T16885] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 512.781247][ C0] NMI backtrace for cpu 0 [ 512.781265][ C0] CPU: 0 UID: 0 PID: 16885 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 512.781283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.781293][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 512.781399][ C0] Code: e8 0e ab 60 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 37 ce fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 512.781412][ C0] RSP: 0018:ffffc9001e7669c8 EFLAGS: 00000002 [ 512.781428][ C0] RAX: 1ffffffff3559a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 512.781441][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 512.781451][ C0] RBP: dffffc0000000000 R08: ffff888026560237 R09: 1ffff11004cac046 [ 512.781463][ C0] R10: dffffc0000000000 R11: ffffffff8565c6e0 R12: dffffc0000000000 [ 512.781474][ C0] R13: 0000000000000000 R14: ffffffff9aacd0e0 R15: 0000000000000000 [ 512.781486][ C0] FS: 000055556f423500(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 512.781500][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.781511][ C0] CR2: 00007f4cc64f8e9c CR3: 000000007f610000 CR4: 00000000003526f0 [ 512.781535][ C0] Call Trace: [ 512.781541][ C0] [ 512.781550][ C0] wait_for_lsr+0x184/0x2f0 [ 512.781569][ C0] serial8250_console_write+0x12ef/0x1ba0 [ 512.781586][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 512.781612][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 512.781630][ C0] ? console_flush_all+0x123/0xaf0 [ 512.781650][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 512.781669][ C0] ? console_flush_all+0x123/0xaf0 [ 512.781686][ C0] console_flush_all+0x6ea/0xaf0 [ 512.781705][ C0] ? console_flush_all+0x123/0xaf0 [ 512.781724][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 512.781744][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 512.781765][ C0] console_unlock+0xd1/0x1c0 [ 512.781780][ C0] ? vprintk_emit+0x2cf/0x560 [ 512.781796][ C0] ? __pfx_console_unlock+0x10/0x10 [ 512.781814][ C0] ? vprintk_emit+0x2cf/0x560 [ 512.781828][ C0] ? vprintk_emit+0x2cf/0x560 [ 512.781843][ C0] vprintk_emit+0x485/0x560 [ 512.781860][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 512.781880][ C0] dev_vprintk_emit+0x338/0x400 [ 512.781897][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 512.781920][ C0] ? hwsim_new_radio_nl+0xd8b/0xf90 [ 512.781990][ C0] ? __x64_sys_sendto+0xde/0x100 [ 512.782010][ C0] ? do_syscall_64+0x174/0x580 [ 512.782033][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.782053][ C0] dev_printk_emit+0xee/0x140 [ 512.782074][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 512.782094][ C0] ? __dev_printk+0x131/0x190 [ 512.782157][ C0] _dev_printk+0x127/0x180 [ 512.782172][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 512.782195][ C0] ? __kmalloc_cache_noprof+0x32d/0x660 [ 512.782217][ C0] ? __pfx__dev_printk+0x10/0x10 [ 512.782235][ C0] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 512.782293][ C0] ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 512.782350][ C0] ieee80211_register_hw+0x38a6/0x4a50 [ 512.782407][ C0] ? ieee80211_register_hw+0x1ae1/0x4a50 [ 512.782432][ C0] ? ieee80211_register_hw+0x19e1/0x4a50 [ 512.782465][ C0] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 512.782488][ C0] ? __asan_memset+0x22/0x50 [ 512.782506][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 512.782528][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 512.782551][ C0] mac80211_hwsim_new_radio+0x3238/0x5680 [ 512.782585][ C0] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 512.782606][ C0] ? trace_kmalloc+0x2a/0xf0 [ 512.782628][ C0] hwsim_new_radio_nl+0xd8b/0xf90 [ 512.782655][ C0] genl_family_rcv_msg_doit+0x233/0x340 [ 512.782678][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 512.782703][ C0] ? bpf_lsm_capable+0x9/0x20 [ 512.782728][ C0] ? security_capable+0x7e/0x2c0 [ 512.782791][ C0] genl_rcv_msg+0x614/0x7a0 [ 512.782813][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.782831][ C0] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 512.782851][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 512.782875][ C0] netlink_rcv_skb+0x226/0x4a0 [ 512.782899][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.782918][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.782947][ C0] ? down_read+0x2be/0x330 [ 512.782964][ C0] genl_rcv+0x28/0x40 [ 512.782981][ C0] netlink_unicast+0x7bb/0x940 [ 512.783007][ C0] netlink_sendmsg+0x813/0xb40 [ 512.783027][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.783044][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.783063][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.783077][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 512.783097][ C0] __sys_sendto+0x408/0x5a0 [ 512.783120][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 512.783139][ C0] ? errseq_sample+0x40/0x70 [ 512.783173][ C0] ? fd_install+0x94/0x3d0 [ 512.783191][ C0] ? fd_install+0x306/0x3d0 [ 512.783213][ C0] __x64_sys_sendto+0xde/0x100 [ 512.783234][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.783252][ C0] do_syscall_64+0x174/0x580 [ 512.783273][ C0] ? trace_irq_disable+0x3b/0x140 [ 512.783293][ C0] ? clear_bhb_loop+0x40/0x90 [ 512.783311][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.783327][ C0] RIP: 0033:0x7faad255e68e [ 512.783342][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 512.783355][ C0] RSP: 002b:00007ffe9f10bf98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 512.783372][ C0] RAX: ffffffffffffffda RBX: 000055556f423500 RCX: 00007faad255e68e [ 512.783384][ C0] RDX: 0000000000000024 RSI: 00007faad3354670 RDI: 0000000000000003 [ 512.783395][ C0] RBP: 0000000000000001 R08: 00007ffe9f10c014 R09: 000000000000000c [ 512.783406][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 512.783416][ C0] R13: 0000000000000000 R14: 00007faad3354670 R15: 0000000000000000 [ 512.783436][ C0] [ 512.819701][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 512.819725][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.819747][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.819759][ T30] Call Trace: [ 512.819769][ T30] [ 512.819778][ T30] vpanic+0x56c/0xa60 [ 512.819811][ T30] ? __pfx___schedule+0x10/0x10 [ 512.819837][ T30] ? __pfx_vpanic+0x10/0x10 [ 512.819872][ T30] panic+0xc5/0xd0 [ 512.819898][ T30] ? __pfx_panic+0x10/0x10 [ 512.819922][ T30] ? preempt_schedule_common+0x82/0xd0 [ 512.819947][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 512.819970][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 512.819996][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 512.820083][ T30] watchdog+0x1030/0x1030 [ 512.820113][ T30] ? watchdog+0x1c7/0x1030 [ 512.820140][ T30] kthread+0x388/0x470 [ 512.820167][ T30] ? __pfx_watchdog+0x10/0x10 [ 512.820186][ T30] ? __pfx_kthread+0x10/0x10 [ 512.820211][ T30] ret_from_fork+0x514/0xb70 [ 512.820240][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 512.820265][ T30] ? __switch_to+0xc89/0x1420 [ 512.820290][ T30] ? __pfx_kthread+0x10/0x10 [ 512.820316][ T30] ret_from_fork_asm+0x1a/0x30 [ 512.820349][ T30] [ 512.824121][ T30] Kernel Offset: disabled