last executing test programs: 55.625308759s ago: executing program 2 (id=208): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x6, 0x5, 0x1, 0x1, 0x3, 0x2, 0x4a, {0x0, @in={{0x2, 0x4e26, @broadcast}}, 0x5, 0x8, 0x8, 0x2, 0x400}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1, 0x8001, 0x4001}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001bc0)=0x18) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x14499}, &(0x7f0000000680)=0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) epoll_create1(0x0) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r11, 0x8983, &(0x7f0000000300)) (rerun: 64) getsockopt$XDP_MMAP_OFFSETS(r12, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x80) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x4e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x1, 0x8, 0x9, 0x5b, 0x200, 0xe, 0xfffffc01, 0x1008000}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x24048055) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000440)="c081cf04cebb48762919eff7772764e4723b1ca3e29fcbaf09cc9e52f0d1baec37362b74d662ff08785740c37aa5f0eaee5fc77911f4941c47628f0bda35ff2120e0bbdff2821f69750515da0928edbe9ea738bcb1b03ee49ae67daa19542f322cd15e94d4131d7b6098e01ff0585c", 0x6f}, {&(0x7f00000003c0)="b7", 0x1}, {&(0x7f00000004c0)="d166a70ec10e38473624642461441b77a3aae1bff36f683c82bd3aae2352152601c9dfe01302dc686e2f92f0dcecbb156fc6a10c0a1844eae44b1b7f2d5fd7f8e6196cbec734a7563013b5f616eac30da57b40a83d6c5d17d8ce7535d2d2143b951a600a3c44bdc6c4aea475616ee9d6d6349b1041c79ddc16ff584b444659a9edf57408393879ee02d5bc3926e0d163b4a3152b6230d0a88f5d14f8523a0e2fbba1b5d3126267a817a328da0dbf4653d0fd612bf94c7f4875d55ec6bc17a6a9f998cdbe583769b251c8f6d90c7f6ec39bd8b8d3d5ec37e2a392cc", 0xdb}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000001780)="a8cccb3ed3ef14d0307e4957d7a2677c13e3b793613815f4af7581bc1acad180d73effdb92f96a3dc8454e7fe07d8b5bfb14336db2b95ff675811d7f61887e38f4267e6a7a849218a1528a9e8bc38c73bea67b994d2ee62d190236ae5858", 0x5e}, {&(0x7f0000001600)="8c4906be6c3506691867d8b623b38ffb36f097bee43065cf7dd18a2c03f3f82126d28224ae80e5e33f20bc13f692b5902754604caa73f38ff1d9cd4712437d28037b2afccb96f8593438f5fb9ffc6d3824ef9315d3e668098a9bc4cd2c", 0x5d}, {&(0x7f00000016c0)="dffbefc7e4bd35f678b5099b89", 0xd}], 0x7, &(0x7f0000001c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001800)="ed4bea4cb03432e0305b3fed56688b7b04424bee775d2f794531719cec2c2b3478925732f4d6543c18aaf6eac7477509b39644584350ee9448ca285cd8218d017f8d3659b5902dd1d9d7197dfd5c423e061dee1da104083de69acf539822e18526f8da415000dc0034be7451ebea8afd1a98190322c3dec269b584783e728404", 0x80}, {&(0x7f0000001880)="8d4873be47c7a13c6301", 0xa}, {&(0x7f00000018c0)="6f9b42793c5865d5fbd8e90f024994cfcebdc1857f20cb5012a9ddb9beed94c06a13b97ad11f33de97e4706930b19b753239d3d4f1e3dd0a08e6f7f761ff9e04b2689a70180d74a3b9f40abd557937bf30f829a7d8de5785e5db26df2315a27840378f0f7c6cb012279740097a61ce0a27468d29b646976094005db6a155", 0x7e}, {&(0x7f0000001940)="f9d735c09c08a70fe2ff978784a2552c2569eae417691bd9a2cf764998a765a383be425e25d07c3e037e3113db5a975e064e8be5e6ecfb46e7317c0684d246fd6b87e399a3c98c92c73fa236b6c081f3f1060c578dd4f3a991e9ceb942fbba7c69ccc0fb605f19970dfc63575865bce2be", 0x71}, {&(0x7f00000019c0)="8c8ece555f8c5b556826fe4d8423885a07d34e391c6dfb247cba63ac8204af44be6ed02051b43fc633c008e65f840f", 0x2f}, {&(0x7f0000001a00)="9dd818771edddb6e011e0adfc1fd962db382f58c3d346f858a8a036a511d48bb807185f9daaef460d71aa7180ff1d5283e7539cc48bd300c31296ec06ff558bfd51041d73a1291c85cd736ad112cfccd38915f8b6687e5dc539d3fe8e0b355d25bed08bf03313aa20eb19f13da6c6ff460c4fae88be18d430f670d3249e6d4df4dd80f99482c5334300de8adc0964c84320a5f3de9b70dfd665362ee22746858168fbf1b38bbfe04bf91e7b73818cc83fae7d2b4950ac131c4c43ee07e69860619251a2ed5fbe576734cd49bc1964f9d77c48ef7c3aacc61185227165b", 0xdd}], 0x6, &(0x7f0000003180)=ANY=[@ANYBLOB="780000000000000000000000070000008802441c6c010000000000004d4864010102ffffff01e000000100000000864a00000003060c2d2c39dfb41e9c3cd61d030e3c560692df0325e9c0cff6d00510a7e7f4ed872d73a4ea31602da27a010991313cb883192f0208e49c0f23e84d0209ba490805c478dc1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1ea91bb19414e9a0ae00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRES8=r3, @ANYRESDEC=r1, @ANYBLOB="2cc8fe4978e1a560d121a6786e4a978539865a025b2f761ac9a102dfaa1dab4946235435ee89997f232e47a3529519226e9080d5b169c48a438e8380e4265342426c32f5066105790ab4393e69c46a7834fa98ca513e7bceab1eea1a327bd51faa7c9499f03af00feb3c7ca917298ed57bdb04461c858fb30e80", @ANYRES64=r2, @ANYBLOB="ac1e0001ac1414260000000014000000000000000000000002000000ff01000000000000"], 0x1c8}}], 0x2, 0x40) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) 55.481591151s ago: executing program 2 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000004000020000052c00048028000180080001006f7366001c0002800800014000000009080003400000040105000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000080)=""/230, 0x1000, 0x0, 0x2}, 0x20) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000000)="a6", 0x1}], 0x1, &(0x7f0000001b00)=[@assoc={0x18, 0x117, 0x4, 0xffff8000}], 0x18, 0x200008c0}], 0x1, 0x44840) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) recvmsg$can_j1939(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1}, 0x1) 55.273010446s ago: executing program 2 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x77, 0xb, 0x922, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x6, 0x40}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x3, 0x4) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x1a, 0x0, @void}, 0x10) clock_gettime(0x6, &(0x7f00000000c0)) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000380)) 55.083121528s ago: executing program 2 (id=211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x8, r2}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 54.741821997s ago: executing program 2 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) 54.159021375s ago: executing program 2 (id=220): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x19) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) unshare(0x6020480) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2e}, 0x20) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x20, 0x0, 0x3, 0xfffff000}, {0xfffb, 0x0, 0x0, 0xffffffed}, {0x4, 0x2, 0x3, 0x4}]}, 0x10) bind$can_raw(r4, &(0x7f0000000080), 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 53.811734195s ago: executing program 32 (id=220): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x19) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) unshare(0x6020480) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2e}, 0x20) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x20, 0x0, 0x3, 0xfffff000}, {0xfffb, 0x0, 0x0, 0xffffffed}, {0x4, 0x2, 0x3, 0x4}]}, 0x10) bind$can_raw(r4, &(0x7f0000000080), 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.750961347s ago: executing program 5 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df6000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0) 2.491037438s ago: executing program 5 (id=710): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000d40)='m', 0x1) setsockopt$inet_buf(r1, 0x0, 0x2a, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.191848895s ago: executing program 1 (id=715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000121, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff4}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000ac0)=r6, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 2.100351577s ago: executing program 1 (id=717): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe55}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) 1.992296031s ago: executing program 1 (id=720): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000002600)=ANY=[@ANYBLOB="18020000fbffffff000098f6b6b60b3de9d2822867f6bdd9a1f700000300000085000000bc0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) connect$pppoe(r4, &(0x7f0000001e40)={0x18, 0x0, {0x2, @multicast, 'wlan0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="060019"], 0x2c}}, 0x0) sendmsg$rds(r6, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1, &(0x7f0000000880)=[@cswp={0x58, 0x114, 0x7, {{0x81, 0x10001}, &(0x7f0000000100)=0xe, &(0x7f0000000140)=0x401, 0x9, 0x0, 0x8, 0x2, 0x8, 0x7ae}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/251, 0xfb}, &(0x7f0000000200), 0x79}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x4}, &(0x7f0000000240), &(0x7f00000003c0)=0x7f, 0x7fffffff, 0x4, 0x1000, 0xb, 0x3, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7}, &(0x7f0000000540)=0x7fffffff, &(0x7f0000000580)=0x5, 0x0, 0xffffffff, 0x8, 0xff1, 0x20, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/235, 0xeb}, &(0x7f00000005c0)}}], 0x168, 0x20000004}, 0x40010) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) sendmmsg$sock(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000a40)="bcafd50c765477343e9d876bd43fc57a089c9e977793a55b91b7fe9a0aca060f7ca47a9c4c59b819479a2fc8af1f01118fb86c2bafa02aab8131", 0x3a}, {&(0x7f0000000a80)="d4be7f653bcfe27ce8df82be43", 0xd}, {&(0x7f0000000ac0)="464defbe51c3e015c084d2798a8d79e25baacae0e34a41bfd81347a5651c551b7bea273a3189402374e593da6896a8c76193f984f54d768acc0579330f64ff14ee04385e361d56dbffd5cc5f3ed0c52e4a434d44509880ca66b9fa221ebf0c6970515355e704c664000695c21034cd3d15c802fe82", 0x75}, {&(0x7f0000000b40)="487c3001", 0x4}, {&(0x7f0000000b80)="2cdf427e186f5d0f74aa599d22508c06dcaa82306d0c9baa8f5a53a6ef3ab8d649a102bb79db9f35e46fe150c6ee623a8abf7c477881f9db5d22feb15b993baee4ae5b61bd76d92dcc5ec9321cf4732ace8b9b2b030721ef358c7313b12e390853af730781200ed3f4c75dc3cfb4510c623d45604ef6703915725b5c2fa11ae3a3faf36b175fe7", 0x87}, {&(0x7f0000000c40)="fc9b4c76242a0cb31471f6e3342558fa813b48c51d63f7fe60725b518ab4da0b14e34e5287e4a1970cae06abf35f25f16508517d3a09cedd12e28035d0e90a0aaa980c3fc926e163025638b037675240398669efa467ba0b06d608cef93933ff80a566c5bcedb84700f5eb1dbd40e2924ebbc55e4b41506e1efdbf460ba949a30f293428d3964ad3c00e0508449a0a1feeb1968744be0686ee60388b0f6ed37cce747d82f516a7146b5b5bddacd0ce69e1473f452f75df8e45e983dd6f275e662d6ef2a5d80fcc2b454fc254c752c6f89555f9aed29a43e1b83d1250f2843d3a", 0xe0}, {&(0x7f0000000d40)="cab6270ccbb3be010114d515444c146ff700ff7e1c95d45440009fcdb2a0f14ba4b104ea7035b01bec6c5d6a0a153a39d4e2f969d22e1c0e947babb9fe5513f2465f272dfe0ddd17d6edd60d92255b7d7e1a3604a3a99b6673d7a2004f9ce63acbbb48de8d5d781e50174cd1e98d68db5cf13e6c2e52c1a7fc904c27d712b211f66887c264d6e7ba530fb8114746250b821ad768a26e3a26745ee1b4c82529235c0713a3e468a3f30cbc96754e1d43389827e8844f0b1e44225e1f99dfec4ef0664d73094ad432b0d00bd9d58c76f1933c8f5e87f967c1435fa411d0d5fea45873126d8ba791446cdf91746fda972e", 0xef}, {&(0x7f0000000e40)="05ee0faa5dbe1f643cfd1f96b8a585b5af44c611264aaefa82de90e01483a7a000c90f862c9aa136f845f795", 0x2c}, {&(0x7f0000000e80)="318abffa630d564e1c5dc2cc64fb8a875295b246d2f226f41939bb333d312facfeb18405fd32242f84b0372c1207412c4fb2d7a1058ffd25a9e29e6b56f410cf8b7c734904f792d7aced155caccc8854af5f42d2f875d80565ab2cce85dadf0087fef281a048a4db22e946a9125b772e5a5f8522d732384507e9c4262a95789267bc6f745174e61ad484d21ad076a65e66d5f1b6c7e9d8c3f5c6a01fe72a8301bf084b86a544ce7b89b160d265553d95ce077f1020dc00aa0a3fd85532dcb74f2a48a587ee52df00a086a31f90c403a3b463", 0xd2}, {&(0x7f0000000f80)="508a7888da177f03cb5619d577d8ae1daf6503b96e5becd12c40ea44bc3632264ab1591dcdfead055e9778bd4814356ae10a47720561273ed4573247111904e4e6ebc5757ac3ef3b56a063961fc1f8959447ed47e031518936e0024742923d42108217b4c1ea5c7501d1f7545b7d8b60069011fbbe27ea7fc6eb10ce0999091e59379276799fb54df77039599acf788213614462d0b64109beaec1f9f0d0219eaedd1f87", 0xa4}], 0xa, &(0x7f0000001100)=[@timestamping={{0x14, 0x1, 0x25, 0x9a}}, @mark={{0x14, 0x1, 0x24, 0xfc0f}}], 0x30}}, {{&(0x7f0000001140)=@isdn={0x22, 0x4, 0xf, 0xc}, 0x80, &(0x7f0000001380)=[{&(0x7f00000011c0)="b02e88c38675402c379e474d405fc7b1887385764ca51c906b55f7da2f10631c861e7b3d5fd22793eb14c115c73de1544ec949b4200ab65847444d975c470efd2934c33b637e0259c6e4cd61d1c423534e473ac2938d5d4e060a65d71bbd33f25a759e989b27d645417bf6ad41ae5843da60cc96486a9fd3b9aa4850c57c39e5555b1d8096cd68852e6b5654b4ac294500c70a2fbc96b18c09a4638dbf7d999252cb71f9a972f81d6a04b8fba8c70a41b6bcfd82981d9a8d03fd1674a753ef384603b1d87fc3cf", 0xc7}, {&(0x7f00000012c0)="6ba9087b7e1e04f373386bad727ef5ce53c2dd61d0bf08faa2fe32f28a2d2a6322fd13b109ba80d3dd92779f103cb5640fa28f93abd231803b895ff1c1e9175bc306eb9f9b3b95360867c30d7333add7e7ec2962490d5a9bcffca5a705a1b34287302037fa2743b1b4f3cfc68e97083c88a72f9cc2b46f1e40f01387e0a80e0e2d255b510eae1d115e463d22864ee06c289bdc5b768326b39d78576195dc5e26e765", 0xa2}], 0x2, &(0x7f00000013c0)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000001440)=@nl=@unspec, 0x80, &(0x7f0000001880)=[{&(0x7f00000014c0)="7c7d5efad3c84e5751645926749a6b4440344b1bbc576e1b8531d2f44a190152e7bf30ef14e7dc4a9840582a087266ba0c53d5e5c3421acc6c68f49155b4e02fb392e7e401391dceb327815a523b16e291057636b397505cb0708d2a533ab3f005bb38dfd6d99223bb1b7efc74f6874e07b98b6ab20f0f7030a40099c9a246a8a946d3be4735050d4a887f78acc3b88b91629a6e254b4e6f527d9ef4b628bdfe44544b85c40cb03e31a917a172d4fb2f6335b3318f563c4c7610c559c8869932efaf19f47065ec719623702882", 0xcd}, {&(0x7f00000015c0)="43f63cf466166a19bfdca5d4e4bb7d4fbeec28b969fba40cfff7ab2aea1e74f2013256011776e442832ac2cab028105a5a908d4694138f3683c5ac2045d9f15515c0caf6571bd64c8185279589f29cc50b2401aded817ac169cd6b9587d8774f58f224070ad21acea50ddff1c63049abfc87498226719b5da7cd358bd9bf54b3e85edb38aa7e7302240e4502f01fa49b11fc5bcaea5fc1955c777abce7e9ec3ff9a91ec69e53732576878d77a5e6eea5b90b7186127a1a5126eda28231e63dd3aca65c47669a253e544e3958", 0xcc}, {&(0x7f00000016c0)="c56c33cd4377a0c96d7346f0d760649b3cf412a80e6326dc6f462c4c15d4645e2859c657b0454160f6cd49ee58d16796d5e754bfbb830410bea3165ffa877414a4e49eba43df05b1a5aff5e50d98f22eb1fc95d415e3cc44b2669bc6a8cf912315a544b986214f700c8634deb59977b7a7639719357530d543a5a1069d33cdba996323edf051a92a856992e46ed3ac79eba677", 0x93}, {&(0x7f0000001780)="48f7fee81d6be4ece86d54ae7fd98a8930ce2515315f35da8ca0c5782c551f3008a698c012f204c6d68dd0314659af01f8d6c4677d34b99d5c64e4d05c181721587a46c62f6bc5d6e93bd3fe2a9933ad7a9e0b65ceb196ea0ca1faf88ef134c92d4787b91b7ef7361115f165948a5e818369d866d6a98c940d5224cae36a80dac7fc79dd007143111354", 0x8a}, {&(0x7f0000001840)="f17ee8f649978bc428c00b5bb366e2e4300ac054b1909bcde3b7fb1710401bbb1206f189125a47238e0cbd4000", 0x2d}], 0x5, &(0x7f0000001900)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000001980)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0x2}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a00)="62a26b6715ca88efee99fe90a0185406bbc2e9620e67c82950fb37d7ce31b7982e54f7f59447560260da6e860580f1006e73524fd8fb105deae7fb550673ea32bf3e2a5e6d3238deb82ca290fc3db0cad84457498f13beab3a217009d20a05989b1ae41332c4f39d4d3894c52332a305c748431945bf77c633b89e82421118a6648bee54efa758b68bc4fe4f41cd34ddf5868de7acd89aab38a9", 0x9a}, {&(0x7f0000001ac0)="ad55e09b5c59f158bd582dfd534e4a16f38fd15b1bbf1e183ccea7f9006d72536b4284daa5d7", 0x26}, {&(0x7f0000001b00)="149e38eabde6780378a116c766a9807b867b51056cd9d4c2847f579be84a13254a00d191e485ad567fbefe0350a2a892119edbf31b4da209ba8b3d5469300ba45e0ed30891fa16380e8eaa214582c60f", 0x50}, {&(0x7f0000001b80)="937e9c4a", 0x4}, {&(0x7f0000001bc0)="b86171df471bffbb5802f8cdabe31483dde0bb92bc3d17e8257680b2408ba240707bf9862e8e958715924a926f3be91b0803e3cb640a6605995190c67eec8e5af55eadea2dfde66b2425c7e85770944e909a03017f16b1db0aa1", 0x5a}, {&(0x7f0000001c40)="adbbd4d4ec5e74787a9a0466f830cad86141204dfc4c0046f36d2f435bf644a8f0ce2db3b9ee0a1c6576f6101d79c0393dcfae5ae223885d1d944169d15178e34aa00a6f67808ed0af26da49f4f9fb63883470cb615ff3fc358625b429505171d685fc0aef2d3c520c0f93ce75d04f44549c4c7cd178e9bb56365e55728912772c3e7508958f15cb699e6d5141d5007dacca0f3ccef03713c39f761e13244d", 0x9f}, {&(0x7f0000001d00)="97a005686810d3cd92fdaa9afcaa297126cfbc84bfc9e45155abcb0740e84405a88d533c38cff5bae2", 0x29}, {&(0x7f0000001d40)="d9278a6900dc57984514d4cac831bbe9c61df8d54bbd736af895edfa559f97e130ded3f34a1cdec0bc51f62737675cfd96190e09c2a2878f9749d51812b67828ec9490ad2a47273c367088d884eb614e363ec293015e775bb9337fd2255be6ecf28259baa6710b037d1ddb11b01880274cca3fd66bc93ef6554c50bae27afd9774aa87506752b280c64d48755993e7773b0d7c2e99fbbab64f9a54eb11eab278911ea6b37a8297d7d915ecb8483c3197f6fd993538a8d5c3d1a7138434b1a3bc9f", 0xc1}, {&(0x7f0000001e40)}], 0x9}}, {{&(0x7f0000001f40)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001fc0)="a5b5144b2d872861d760dbfa9d5085bd3f5f07aee9e4974e1e9769846ebe2fa9c9c1b80697e413e423e79051b597680303", 0x31}, {&(0x7f0000002000)="e4cbe19395d6c5f963e3e215a6544587a4e973e29ed1c3b6fffe2c87806d03f63108e7e9fee81d342c14d62dacab8ebd08d851b27f395f29a97a2e91e6a25d194cd460bd3e88362b687836d11da540ad6bc40610ed1635f4bd7227dd9b044243bfc39a856b77ebac6adf10b3b0041ff6317a044736d6e0697ebc5e8d6605cc40756bfd2cc58362103722665b2454b027f940e74ddc51c3b24f9c4f9c7c9647bbfd4207842f6de0f72181edd3673370a2f43f8ce3c965b6f2d134cc488f1bcc5d20ee3b55ed05021ca0eaa5116d011155855778745a8d67ba17b1a030fd06150748620e4e1500b12d6c74d581c82f8d4401f5f32a1d94", 0xf6}, {&(0x7f0000002100)="c35b7c259b3aa1c1ee1b713a9570a2c8e1d6dd0b993bf4c14d6a4ee5d7abc57710adf15174447c9b6788e901b1f610c21c28c42785d56c0704d579e6a9821ade5586fcfd692f4d87ec2aa65d4b40a012ed7fd71f3ade96e9428f4366eb4a0f52f2e136ad753e85c2408ecf42a9fffc12b647729b0f6f3ad9acbdef2402581c8b3ed25ad08ec5db4727a13bae92d377828cc52130ee9464894b840fe23dac4ea4c8cf90a24b91e79882196c383ea0faf0123050fbf3f100ee7c142ddf1559d3797b3c93447236eec0", 0xc8}], 0x3, &(0x7f0000002240)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x368}}, @txtime={{0x18, 0x1, 0x3d, 0xf3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5d}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002340)="9424fa5e0b49d5724f22dd5210a8d0df706ed34de3465b5e02bca38bd531384252a766c07204c4c9604adcac936147da68232f33be509e53f311502df0d90eff50bdb670c7329bd14d8dee9cf6387af18283fe30c362cad525192ce5aef33407878bf2fde26f36232ca0065ffffa3e3dc7df9e05a142c096bcd842368531616c7f065e4ccdb499da21740ebb7cf1b11eacc38e08e139ea08c398196814c7db99ed36e3f9fcab9e9307836e325d6c17f0cc553d37b0c4890180a4cbc2c4b28a2eec9864686769c4168712dcb30abf1b9e713cde0f878da79d6da132fbd4992c835e6115487b188b1aaa24cbf4544017305dcf7473baa7aa20", 0xf8}, {&(0x7f0000002440)="bf9bc539e58f837402faa6e6d178a11e41fc9383ab88aff0587f", 0x1a}], 0x2, &(0x7f00000024c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x369}}, @timestamping={{0x14}}], 0x78}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, r10, 0x1, 0x6, 0x7, 0x1, "c291a25590ec955333d06b43591d154e23b960c945638a4409e8a20e6f33188ae72db258a198761e519c23890d2277c8156f99435c66b03783ebe846ecf910", 0x1}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000025c0)="11b5015b0e77e4ad3bfe6618614b912d55da31283df2414fed45191dff088254c669bf6238aadb11e02c427d6e815ef2e5ecf18b524c8c", 0x37}, {&(0x7f0000002600)}, {&(0x7f0000002640)="75c80bf77030a9b88b40be42d67addab5ad517a4413891ca548d8d005cbf2b157cb89373700f1d6613d2e2719ba3bc04aac9269469064429d1f86c48a197b81da01ced819f9bc1cbd089", 0x4a}], 0x3, &(0x7f0000002700)=[@timestamping={{0x14, 0x1, 0x25, 0x56}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc00}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0xa8}}, {{&(0x7f00000027c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000002840)="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", 0x1000}], 0x1, &(0x7f0000003880)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003900)="be9dcc324481733cf21a5d99a283aca1e9dea5aa30fc05c1d17ecf618f3bfa96833133d86270ef969048a62d2de7663ee1e55d3c48f0f28cda4a6ac66ccbc9736031097c10ecfeb7a375fa236bc7774b6e316e0d379331b39a6f0bd9805307e8baec38a212b1031c94dab1f3147d13f15420e36aef80250d8dfc1d54335cc709be13210482e17018300a13ad3294efa73d5c134607c17588aa734aa70749ed4dae4924df8eead991cf4c38a8b1272567a08776292f1b3fdb85386dfed3c1c118758f86c0f83b5c664ac89dc3bbc91e95388610c2383383af2afec4096e50f12a3d9d77", 0xe3}, {&(0x7f0000003a00)="8e3373ea6d39253867acdcabc3902186ccd93448756f3dfe9e36e0ba133f25a74ee2cb386144772c89baff9d3b8358b33f317e393c9cdde6d3744369212607a2becb710dd47d041c29fa8b0822bdca8d56a10d4938aa3e97fb09d337eab328ec175c026dae212daffaad2f78db28c5b963ba823662b567493608fc43d554a82ea2f4ed960b1157226d1c1cb1b4c9e61cd858e3336c2b1158523cb4d0aa302557f037c7853b1d2e2b5456a131ad069011e13ba090955df711f6cc106e20a9c4b07f41a80a76b90c820a01506a9a22a899575234725f6cf448f74675164d2a3e20ff2d25f7d00b7664728dd8a3d68b", 0xee}], 0x2, &(0x7f0000003b40)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}}], 0x9, 0x50000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="3a256ecb555a9a52ef5c3335495c", 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 1.599050004s ago: executing program 5 (id=725): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000000c0)={0x0, 0x23}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="ffffffff", 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fbc00002cb53e36e50c5e969c06", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0562d2c31ecdef3}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8804) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r11 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r11, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r10, 0x0, r11, 0x0, 0x8000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f0000000540)="4f695a34475116f52b2ed354a0ad5518a6aa458d9eb7dd0f68331ffe73b8a0c5c3c9d50750381df7d621259c8653201f9373cb337d048028805db600467dac0dfb4da162b59c12574bf1682adf51bfacf20cdd4c3b6a35a7", &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)="981df91d39310d6ee85eaafe30f5f3a8e2f0a2608094fc1386ee4bed619f3ae43be726af07f53eb39cdb649fc1a094a9a4363851fae1f7477859763123d4115713b31fc592b1c3a7fb280674b0d9e20121b3cfe60407ddb4f6a75cf6", &(0x7f0000001640)="0ef085e60242bb11af266936f493661ce20b40cf92c674df409806986b6fa4bc09a1ff359a3a1638f2621d019dcafe4467897c424d693e55b799baae27e8633a0c836f28e8ca67bdc32b802842610e9cc989678932dc519120679481ac51dc11112f9230164a15117bd125a9fa69a0a91fda72fb0d7c74fec24d4057aea9bc1c8d36bbdaf1b07b2511cd1ec36af693e35e5b77dc907bdb0a2c3ffa3fcecc887af2169a8f7cfa8eb09be78981b94f5e41b5f37b9a20bc4efe7701ab45f812014aa23c20a00999a6d233bd4ab2d99cd0b1d0eba5c1939661eb957efcb6bd36ada9e6b7476357f890847e3090dd2a4b2b86", 0x4, r10}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001780)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001880)={0x28, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x402, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008801}, 0x8020) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000035c0)={0x118, 0x28, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487060000000000000000009381bff81a8b9482565856555ee923b25973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43db0200115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079765734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x118}], 0x1}, 0x44) connect$ax25(r6, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 1.584630148s ago: executing program 0 (id=726): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3c}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc0000) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000000c0)=0x4, 0x4) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x24000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xfffffff0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x20008084) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) 1.120078037s ago: executing program 3 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000200)=0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r1, 0x180000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)={0x44, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe700}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000854) 1.039908163s ago: executing program 3 (id=733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028000000000000000200000020"], 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x8084) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xe7878000) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000600)='sample\x00', 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4089, 0xff9, 0x0, 0x0}, &(0x7f00000000c0)=0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x909, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0xff, 0x70, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "9e76f19d849de393"}, 0x1}}]}, 0x14c}}, 0x240440c8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd80}, &(0x7f0000000300)=0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000100)={0x81, {0x4, 0x380000000000, 0xfffffffffffffffa, 0x5, 0x9}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r6, r7, 0x1c, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r9 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r9, &(0x7f0000001500)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0xfffffffe}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0xb, "929048"}], 0x18}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r8], 0x0, 0x6e82, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc35, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4000010, r8, 0x7d063000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000002300)=@proc={0x10, 0x0, 0x1f3f, 0x2000000}, 0xc, &(0x7f0000002340), 0x0, 0x0, 0x0, 0x90}, 0x4000801) sendmsg$kcm(r0, &(0x7f00000022c0)={&(0x7f00000033c0)=@pppoe={0x18, 0x0, {0x3, @empty, 'xfrm0\x00'}}, 0x80, &(0x7f0000000ec0), 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1350}, 0x20000001) 1.03397377s ago: executing program 4 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000076000907010000000000000007020000", @ANYRES32=0x0, @ANYBLOB="10000d800c05"], 0x28}, 0x1, 0x5502000000000000}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000076000907010000000000000007020000", @ANYRES32=0x0, @ANYBLOB="10000d800c05"], 0x28}, 0x1, 0x5502000000000000}, 0x4000) 982.447493ms ago: executing program 0 (id=735): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYBLOB="e3"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000380), &(0x7f00000001c0)=0x8) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x70bd2a, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) accept4$packet(r0, &(0x7f0000000900), &(0x7f0000000940)=0x14, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb4db}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x48040) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40c404c}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYRES16=r7], &(0x7f00000008c0)='GPL\x00', 0x4, 0xfffffffffffffe6a}, 0x94) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, 0x0, 0x9) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x27) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000340)={r12, 0x2, 0x30, 0x3, 0xfffffffffffffffe}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000007c0)={r12, @in={{0x2, 0x4e22, @local}}, 0x80000001, 0x3, 0x400, 0x9, 0xe4, 0xddc, 0x80}, 0x9c) 981.164948ms ago: executing program 1 (id=736): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4827, 0x9, 0x849c00, 0xca51, 0x7, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$inet(0x2, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r12], 0x50}, 0x1, 0xba01}, 0x20) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4048004) ioctl$sock_SIOCBRDELBR(r13, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x120, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 919.139537ms ago: executing program 0 (id=737): socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0x71}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r2, 0x5}, 0x8) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000d40)="3ce2de", 0x3, 0x4000800, 0x0, 0x0) recvmmsg(r7, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x2}], 0x1, 0x22, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001080)={r7, 0x4, 0x2, 0x10000}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r8, 0x800442d3, &(0x7f0000001180)={0x1000, 0x4, 0x5, @remote, 'pimreg0\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB="2339a9b24978e9cc000002000004000000000000", @ANYRES32=0x0, @ANYBLOB="0380000010e3040008000500", @ANYRES32=r6, @ANYBLOB="480012800b000100697036677265000038000280060018000300000006000300b588000014000600fe800000000000000000000000000010060018007f000000060018000104000008000a00", @ANYRES32=r6, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 909.822291ms ago: executing program 3 (id=738): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x110, r0, 0xd1c94000) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080)=0xe83, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x8, 0x3, 0x4, {{0x14, 0x4, 0x1, 0x23, 0x50, 0x68, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x3c, 0x75, 0x3, 0x2, [{@multicast1, 0x53a}, {@remote, 0x3}, {@multicast1, 0x7}, {@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1141}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xe0, 0x5, 0x41, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x1, 0x7, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_delroute={0x54, 0x19, 0x100, 0x70bd25, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x4, 0x0, 0x0, 0xff, 0x1, 0x1000}, [@RTA_TABLE={0x8, 0xf, 0x9}, @RTA_OIF={0x8, 0x4, r2}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_OIF={0x8}, @RTA_FLOW={0x8, 0xb, 0x6c}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xc1) connect$phonet_pipe(r1, &(0x7f0000000380)={0x23, 0xc9, 0x7, 0x2f}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x84020014}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b8ea82c35d7643caf9b56f90ec7ab7c95935e2c140383f55"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000640)={0x30000011}) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000680)=0xa, 0x4) socketpair(0x9, 0x2, 0x10000, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=@expire={0x124, 0x18, 0x200, 0x70bd2d, 0x25dfdbfc, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x4e23, 0x1, 0x4e24, 0x6036, 0x2, 0xa0, 0x20, 0x1d, r3}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x8, 0xb1, 0x4, 0x8000000000000000, 0x1, 0xff, 0x400000, 0xfffffffffffffffa}, {0x8, 0x1, 0x10000, 0xfffffffffffffff6}, {0x6a, 0x4, 0x8}, 0x70bd2b, 0x3500, 0xa, 0x1, 0xb, 0x84}, 0x3}, [@user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}]}, 0x124}, 0x1, 0x0, 0x0, 0x50}, 0x20004880) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x7c, 0x1, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CT={0x3c, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, @NFQA_PAYLOAD={0x29, 0xa, "0434784cdae75240730dc4e39a553fc0847331675eab4e030fb28873a05cac2e6bd4ada473"}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc004}, 0x44010) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = accept(r6, &(0x7f0000000a40)=@isdn, &(0x7f0000000ac0)=0x80) recvfrom$phonet(r7, &(0x7f0000000b00)=""/157, 0x9d, 0x2002, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r9) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000c00)=0x63, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e20, 0x2, @local, 0x10000}}, 0xb, 0x973, 0x3, 0x0, 0x0, 0x400, 0xf2}, &(0x7f0000000d00)=0x9c) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000d40)=@assoc_value={r10, 0x1}, 0x8) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000d80)={@broadcast, @loopback, 0x1}, 0x10) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xd8, 0x1, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x8b, 0x6, "e4afa200da8d54ecd355ae6769a9106e7338739d84839771e9387e5c336c2ac5534d218ab08a6df3d59e67549ee6575bc27063ea09fd3ee306e1e85ad91299dd8a433745bd4d901b1a8166a1675b576ca66fd5e49c4f0fba2fe2211da26cfda295040d42d192b8a572acb16327041a3eb9f1ec0ab6c0a8489aac003c21063e9574042cde56ef93"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) ioctl$SIOCAX25OPTRT(r9, 0x89e7, &(0x7f0000000f80)={@bcast, @null, 0x2, 0x40}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r9) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r11, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x35}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4049010) 791.85826ms ago: executing program 4 (id=739): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@getchain={0x74, 0x66, 0xa54dfabccd2fa6fd, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x3}, {0x10, 0xb}, {0x9b7393e56c386e02, 0xb}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0xe0000400}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa5de}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2004c80c) 737.800749ms ago: executing program 3 (id=740): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004040000000000175b8d00"/31], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async, rerun: 32) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x30a, 0x1, 0x7, 0x2, 0xfe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) (async, rerun: 32) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xd0, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r12, @ANYRES32=r12, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="94cf8a1ffed4c09346358d18803cb1c815be17c77b73068d87463662d0e69d744dfb70ee8b4e2fde4b9e4a0eee41b836bd92d108d334c47ac09aba414508cd4fc9f80bb02a31febfe5c7bbf037d5e93bc3a1648c5af770fe96fdbc46f1a1044a3185fb53bd57a4f671a5b668e6605070cafffd4a3e648af4c431c4408c6d2fb47c5350e9cede8f09d1642c7df3cca46673001379a52d264ebafb23", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r12, @ANYRES32=r12, @ANYBLOB='/'], 0x20) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0xf4, r13, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x125}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa70}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4008080}, 0x4004080) 669.280962ms ago: executing program 5 (id=741): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22e", 0xe72}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) 660.33ms ago: executing program 0 (id=742): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r6) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xff, 0x4, 0x1d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0xffff888101827518}, 0x10, 0x8000, 0x0, 0x2}}) 635.367147ms ago: executing program 4 (id=743): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00'}, 0x18) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x33, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x14, &(0x7f0000000480)=@framed={{}, [@exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff801}}, @map_fd={0x18, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}, 0x1, 0x0, 0x0, 0x1}, 0x84) r5 = socket(0x18, 0x0, 0x2) getpeername$netrom(r5, 0x0, &(0x7f0000000080)=0xffffffffffffff77) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getpeername$ax25(r6, &(0x7f0000000540)={{0x3, @bcast}, [@default, @null, @netrom, @null, @rose, @netrom, @remote, @netrom]}, &(0x7f0000000300)=0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000d000314010029bd7000fcdbdf6d0000000073797a3100000000080041050000001c00000000776c616e3100000000000000050000007530e284e8a8399e274f7b1fb69139a49cea970eb46103a7"], 0x38}, 0x1, 0x0, 0x0, 0x4c091}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a1500000c000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2000000000000039, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x565}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x90) 579.147238ms ago: executing program 3 (id=744): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r14, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) 534.880243ms ago: executing program 1 (id=745): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x100, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xd0, 0x2, {{0xa, [0x7, 0x2, 0xb, 0x8c, 0xd, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0x9], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfffb, 0x9, 0xd4e8, 0x6, 0x200, 0xd, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0x100, 0x7fff, 0xc, 0x3, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8}, {0xc}, {0xc, 0x3, 0x3ff}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x10}, {0xc, 0x3, 0x5}]}]}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002680)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x7, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x80000000, 0x426, 0xb, {0x8, 0x0, 0xff00, 0x3, 0x101, 0xa0}, {0x8, 0x1, 0x100, 0x3, 0xa}, 0x8, 0x2, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0xd, 0x5, 0x7, 0xd, 0xf, 0x8, 0xf, 0x8, 0x9, 0x10001, 0x5ff, 0x5, 0x3ffc000, 0x1, 0x80000000, 0x75, 0x7d, 0x5, 0xffff, 0x80000000, 0x3, 0x49, 0x5, 0x4, 0xffff, 0xfada, 0x70000000, 0x80000000, 0x8, 0x4, 0x9, 0x7, 0x2, 0x401, 0xe0, 0x1fd, 0x4, 0x7, 0x3b1, 0x5, 0x9, 0x7, 0x4, 0x4, 0x7, 0x1, 0xfffffffd, 0xfd, 0xcc, 0x8, 0xb, 0x8000, 0x9, 0x0, 0x1, 0xfffffffe, 0x8, 0x1, 0x8d3, 0x1, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x81, 0x5000, 0xffff, 0x3, 0x8, 0x4, 0x40, 0x1ff, 0xd8, 0xfffffffd, 0x6, 0x5, 0x3, 0xffff, 0x4, 0x1f073468, 0x1, 0x7fffffff, 0x8, 0x1000, 0x7, 0x1, 0x7fff, 0x1ff, 0x4, 0x4, 0x4, 0x80000001, 0x3, 0x200, 0xffff, 0x20000, 0x9, 0x9a5, 0x0, 0x9, 0x10000, 0x8001, 0x5, 0x5ea, 0x5, 0x1ff, 0x8e2, 0x101, 0x9, 0x9, 0x14000, 0xffffe6d2, 0x1, 0xe61, 0x11, 0xff, 0x3857, 0x3, 0x69a, 0x11, 0x8, 0x48000000, 0x7, 0x8, 0xfffffff8, 0x7, 0x400, 0x3, 0xc37, 0x2, 0x0, 0x1, 0xfffffff8, 0xb6, 0x9, 0xfffffffd, 0x6, 0x8, 0x6, 0x2, 0x1, 0x55d0, 0x4000004, 0x3, 0x2, 0x6, 0x401, 0xffff, 0x5, 0x4, 0x10, 0x4, 0x7, 0x1000, 0x7a, 0x4, 0xa0, 0x4, 0x10000000, 0x7, 0x0, 0x200, 0x8000, 0x8, 0x87fa, 0x0, 0x3, 0x9, 0x4, 0x4, 0x3, 0x4, 0xb4a, 0xffff17f2, 0x7, 0x71a, 0xfff, 0x4, 0xa, 0x0, 0xff, 0x8, 0x9, 0xf8bb, 0x55, 0x100, 0x9, 0x9, 0x9, 0x9, 0x5, 0x7ff, 0x775, 0x9, 0xff, 0xfffffffd, 0x6, 0x8, 0x0, 0x9, 0xc, 0x100, 0x2, 0x0, 0x5, 0x8, 0x4, 0x1, 0x8, 0x46, 0x7f, 0x3, 0x3, 0x1, 0x4000000, 0x2, 0x0, 0x6, 0x6, 0x1854, 0xaed, 0x5, 0x9, 0x0, 0x4, 0xff, 0x1, 0x4, 0x748, 0xd7a, 0x0, 0x9, 0x5, 0x7, 0xd, 0x6, 0xffff8500, 0x1000, 0x1, 0x101, 0x6, 0x5, 0x5, 0x5, 0x10001, 0x231, 0x3, 0x100004, 0x1ff, 0x194, 0x5, 0x5]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x45}]}}]}, 0x480}}, 0x20004804) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r3) r12 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r15, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r15, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000ffdbdf252b0000000c0005000203aaaaaaaaaaaa0a0201007770616e31000000904db42fe0b421c9443b5e5886c5a5e2444f518cdc3ecb9062b1cdc738ec2f9d30b31bcf207e43a72c66671a36299afcff6599d95243a9cfbe331db8cd57dd0efb257a8b7c2e44fd75d11af353be485ce26e96716ac9a018c8a7eff45c9e2e1d483a4d716f805f2536943dcba4ae596a5d2d54eb94ab9e3a46d995fd85026cd24dc23768e9f4addf5331558467a4fca2c7023efaee8cd72624070fcaef361f09e13375b190360884ed54bfa4000db6c416c2e8dd25747acec043f8b6caa73e9c90d2114c1ccc8c77964561d442efe04d40fd9c2c7cee8b84834a418b08edb15fa2c8ecf8f3c3216488f494e8ed53a9e246034bb0715e8cf553cb758ab2a2c7e42c1c29fd19f05b021c12154354709142bbea2f41537b4656ebb956f1214716d274f9a0cdb0cdc722d16132"], 0x2c}}, 0x4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400b9486b8fe900", @ANYRES16=r11, @ANYBLOB="000128bd7000ffdbdf25280000000c002d000202aaaaaaaaaaaa06000400feff00000a0001007770616e34000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 514.274317ms ago: executing program 5 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4ecd, 0x1}, 0x12) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='virtio_transport_alloc_pkt\x00', r7}, 0x18) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000240)) close(r5) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x8000000, {0x0, 0x0, 0x0, r11, {0x4, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r12) 435.96824ms ago: executing program 4 (id=747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000008001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000000000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 295.489316ms ago: executing program 0 (id=748): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 291.904418ms ago: executing program 3 (id=749): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x78, 0x10, 0x100, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000, 0x21058}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x5}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010101}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x78}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r1, 0x0, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="000429bd7000fddbdf253400000008000300b24810bd56bbed0ccec4638479d5d53bd3c718262e8cd70f9066d4bb43c98f1d9bcb8b9754747684e60a4f22460778dbb5b8dcdc0f795b9a517d1476a678f1315307502378db5556b2743b2e9a9b05bfb24202d3d918144b8e8de58d149d86185951d8d5655602595968a52662a45c8ee7a1e816b84095c0d46793a396e4e4ba42f1dbfbd6db80392bb3873fe66ec7d74f0d2fb51c81e7d4f82fa8894f1387fd5bf459fe9ac9488da94ebb0d7831f3dc648bb16eff114a8c844b", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r8, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9d40, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtfilter={0xcb4, 0x2c, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0x7}, {0xa, 0x6c41a8ae70919ba3}, {0xfff3, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc84, 0x2, [@TCA_FLOW_POLICE={0xc6c, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffbd0f, 0x6, 0x8, 0x1, 0xd00, {0x8, 0x2, 0x6, 0x2, 0x80, 0x8}, {0xb0, 0x0, 0x3, 0x6, 0x2, 0x2}, 0xfffffff9, 0x9ed, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x7, 0x7, 0x1, 0x5, 0x3, 0xe0b7, 0x7, 0x1, 0xffffffd1, 0x6, 0x6, 0x9, 0x6, 0xbe5b, 0x1, 0x6, 0x100, 0x10000, 0x800, 0x1ec8c8c, 0xbb7b, 0x6, 0x6, 0x2, 0x7, 0xebb, 0x6, 0x3, 0x6, 0x2, 0x9, 0x4, 0x3, 0x95a8, 0x5, 0xfffffff9, 0x6, 0x5, 0x0, 0x2, 0x7, 0x48000000, 0x7, 0xa, 0x4, 0x1ff, 0x2, 0xffffffff, 0x16, 0x0, 0x1, 0x9, 0x3, 0x9, 0x4, 0x8b, 0x4, 0xac, 0x94a5, 0x80, 0x8, 0x3ff, 0x5, 0x7, 0x7f, 0x80000000, 0xe, 0x9, 0xb, 0x14, 0xaa, 0x9, 0xb34c, 0x8000, 0x7ff, 0xfffff927, 0x1f, 0xc, 0x0, 0x2, 0x4, 0x7fffffff, 0x1, 0x6, 0xbd, 0x68, 0x7fffffff, 0x1, 0x2, 0x6, 0x9, 0xb0, 0x47, 0x3, 0x6, 0x5, 0x8, 0x9, 0x43, 0x62, 0x80000000, 0x10000, 0x2, 0x2aa, 0x40598d22, 0x3ff, 0x7, 0x0, 0x0, 0xff2, 0x8, 0x7, 0x8ae, 0x7, 0x9, 0x5, 0x7c5, 0x8, 0xb, 0x0, 0x3, 0x1, 0x6, 0x101, 0x4, 0x0, 0x5, 0x3, 0x2, 0x4, 0x81, 0xfffffff8, 0x4, 0x0, 0x1, 0xff, 0x2, 0x3, 0x501, 0x4, 0x8000, 0x9, 0x63, 0x8001, 0x0, 0xffffff48, 0x2, 0x9, 0x4, 0xe, 0xad, 0x39b8, 0xbfdf, 0x4, 0x30, 0x8, 0x3, 0x5, 0x572563c2, 0x2, 0x3af6, 0x80000000, 0x3, 0x0, 0xfab8, 0x5, 0x9, 0x7, 0x5, 0x1, 0x5, 0x1, 0x80000000, 0x4fd, 0x5, 0x3c2, 0x8e69, 0x5, 0xbd, 0x1, 0x5, 0x7, 0x2, 0xef5, 0x7, 0x2, 0x8, 0x8, 0x1000, 0x1, 0xe7, 0x7, 0x5, 0x2, 0x0, 0x1, 0x4, 0x2, 0x9, 0x8, 0xff, 0x7, 0x7f, 0x6, 0xfffffffe, 0x876, 0x100, 0x5, 0x4, 0xd6, 0x3, 0xff, 0x1000, 0x8, 0x6, 0x3, 0x0, 0x80, 0x95e4, 0x2, 0xc, 0x3, 0x1, 0x7, 0x0, 0x8, 0x6, 0x0, 0x5, 0x7, 0x8000, 0x5, 0x8, 0x0, 0x2, 0x200, 0x333, 0xf1, 0x853c, 0x51c1, 0x10001, 0x7fffffff, 0xfff, 0x125, 0x7, 0xffff7874, 0x3, 0x0, 0x0, 0xe, 0x2, 0x2, 0xf, 0x5, 0x5ef6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x4, 0x91a8, 0x8, 0x6, 0x3, 0x7, 0x1ff, 0xf, 0x9, 0x1f, 0x14, 0x8, 0x4, 0x2, 0x771054ba, 0x2, 0x0, 0x8, 0x8, 0x9, 0x7, 0xe9e, 0x7, 0x1, 0x2, 0x5, 0xd, 0x3a9, 0x25e0, 0x40, 0x0, 0x7, 0x8, 0x401, 0x3ff, 0x5, 0x2, 0x7, 0x6, 0x80000000, 0x1, 0x8, 0xd, 0x2, 0xb86f, 0xf6, 0x68, 0xe, 0x8, 0x2f, 0xffff, 0xeabd, 0x4e0c9a54, 0x400, 0x6, 0x7, 0x5f094668, 0x200000, 0xa, 0x200, 0x1, 0x2, 0x0, 0x4, 0x0, 0xfff, 0x10001, 0xffff, 0x9, 0x8, 0x9, 0x0, 0x80000000, 0x40000000, 0x7, 0x1, 0x7, 0x3, 0x9, 0x281, 0x4, 0x8, 0x7, 0x5, 0x6, 0x987b, 0x2, 0x7, 0x10000, 0x9, 0xfb, 0x7209, 0x9, 0x7fff, 0x1, 0x6, 0x9, 0xae79, 0x3, 0x1ff, 0x1, 0x401, 0x9, 0x6, 0xffffcf9a, 0x0, 0x8, 0x8001, 0x7, 0x8000, 0x7, 0x2, 0x3, 0x0, 0x8, 0xfffffff8, 0x8, 0x7, 0x2, 0x10001, 0x9, 0x8, 0x8001, 0x508, 0xa, 0xf214, 0x4, 0x3, 0x5d9, 0x7, 0xc1, 0x5, 0x1, 0xe0000000, 0x4, 0x4, 0x6ad20d9d, 0x5, 0x1, 0x100, 0x0, 0x80000001, 0x8, 0x7, 0x9, 0x0, 0x2, 0x71490f4c, 0xffff, 0x8, 0x6, 0xfffff972, 0x10001, 0x2, 0x100000, 0x7, 0x9, 0x6, 0x81, 0x1ff, 0x401, 0x6, 0x2, 0x8, 0x7, 0x6, 0xf4, 0x10000, 0x4, 0x15fc8c02, 0x3, 0x3, 0x80000000, 0x5, 0x3, 0x4, 0x1ff, 0x3ff, 0x3, 0x80000001, 0xca25, 0x6, 0xfffffff6, 0x81, 0x7fffffff, 0x200, 0x8, 0xdef, 0x10, 0x0, 0x5, 0x8, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x51, 0x6, 0x6, 0x7, 0x7c6a, 0xffff7ad3, 0x0, 0xd, 0xe66, 0x100, 0x7f, 0x9, 0x81, 0x5, 0x5f18b764, 0xc61, 0x8, 0x6ae00000, 0x4, 0x8, 0xe3, 0x0, 0x7, 0x7f, 0x1, 0x8, 0x6, 0x80000001, 0x6, 0x6, 0x2, 0x2, 0x1, 0x777, 0x0, 0xe, 0x3ff, 0x4, 0x7, 0x4, 0x7, 0x9, 0xe, 0x3, 0x800, 0xfffffff7, 0x6, 0x8, 0x9b84, 0xfff7ff0e, 0x394, 0x7, 0x9, 0x400, 0x3, 0x2f18, 0x6]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x6d25373e, 0x7, 0x3, 0x2b, 0x3ff, 0x0, 0x40, 0x3, 0x10001, 0x0, 0x6, 0x2, 0x3, 0x5, 0xa000000, 0x9, 0x2, 0x5, 0x4, 0x2, 0x9, 0x101, 0xfff, 0xb, 0x7d, 0x8, 0x2, 0xc, 0x101, 0x8, 0x5, 0x101, 0x400, 0x10, 0x3, 0x9, 0x3, 0xaf, 0x9, 0x5, 0x0, 0xff, 0x424, 0x904, 0xc, 0x5, 0x8000, 0x3, 0x6, 0x3, 0x3, 0x3, 0x2, 0x6, 0x8, 0x2, 0x8, 0xe, 0x3, 0x8, 0x3, 0x200, 0x80000001, 0xffff0001, 0x5, 0x93, 0x3, 0xf3b, 0xffffffff, 0x6, 0x3, 0xc05, 0x3, 0x6, 0xfffffffc, 0x7, 0x4, 0x8133, 0x1ff, 0x8, 0x18000000, 0x8000000, 0x9, 0x3, 0x5, 0x400, 0x2, 0x3, 0xffff, 0x6, 0x5, 0x0, 0xffff73d5, 0x6, 0xf1, 0x3, 0x8, 0xffffffff, 0x9, 0x10001, 0x3, 0x7, 0x6000000, 0xff, 0xe, 0x2, 0x9, 0x1, 0x6, 0x4, 0x3c, 0x4, 0x5, 0x4, 0x6, 0x2, 0xf0, 0xffff, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8001, 0x8, 0x5, 0x3, 0xffff7c60, 0x0, 0x80000000, 0x3ad0ac67, 0x5, 0x0, 0x7fffffff, 0x7, 0x3, 0x1ff, 0xb, 0x1, 0x4, 0x5, 0x0, 0x396a, 0x0, 0x2, 0x1, 0x6, 0x5, 0xc, 0x3, 0x3, 0x5, 0x40, 0xffffffff, 0x5, 0x4, 0xee, 0x2, 0x2d, 0x8f8, 0x5, 0x53a, 0x7, 0x0, 0x40000000, 0x0, 0x80000001, 0x7fff, 0x56a5d1d8, 0x4ca3, 0x0, 0x9, 0xe, 0x101, 0x86, 0x4, 0x3, 0x9, 0x4, 0x81, 0x5, 0x4, 0x0, 0x1, 0x3, 0x8001, 0x1, 0x5, 0x1, 0x6, 0x4, 0x5, 0x765c, 0x19d, 0x2, 0x7, 0x9, 0x2, 0x0, 0xa0, 0x5, 0xa, 0x9, 0x100, 0x4, 0x6, 0x9, 0xfffff001, 0x2, 0x0, 0x7f, 0x6, 0x5, 0x8000, 0x8, 0x6, 0x9, 0x6, 0x7, 0x7fffffff, 0xfffffffb, 0x0, 0x80000000, 0x6, 0x8, 0x0, 0x8001, 0xbea4, 0x200, 0xfffffffb, 0x5, 0xffffffff, 0x80000000, 0xe37, 0x3, 0x43, 0x1000, 0x5, 0x6, 0x0, 0x8, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, 0x4, 0x1000, 0x80000000, 0x1, 0x6, 0x7, 0xffffffff, 0x0, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_ACT={0x4}]}}]}, 0xcb4}}, 0x40) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r13, 0x0, 0xa, &(0x7f0000000080)=0x7, 0x4) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000f13184c7f5b440000101000010000000", @ANYRES32, @ANYBLOB="a500"/20, @ANYRES32=r8, @ANYRES32=r14, @ANYBLOB="0200000001000000000000000e00"/28], 0x9) 290.308423ms ago: executing program 4 (id=750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xae}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', r9, @fallback=0x30, 0xffffffffffffffff, 0x6}, 0x94) 93.671411ms ago: executing program 5 (id=751): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000000c0)={0x0, 0x23}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="ffffffff", 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fbc00002cb53e36e50c5e969c06", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0562d2c31ecdef3}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(0x0, r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8804) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r11 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r11, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r10, 0x0, r11, 0x0, 0x8000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f0000000540)="4f695a34475116f52b2ed354a0ad5518a6aa458d9eb7dd0f68331ffe73b8a0c5c3c9d50750381df7d621259c8653201f9373cb337d048028805db600467dac0dfb4da162b59c12574bf1682adf51bfacf20cdd4c3b6a35a7", &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)="981df91d39310d6ee85eaafe30f5f3a8e2f0a2608094fc1386ee4bed619f3ae43be726af07f53eb39cdb649fc1a094a9a4363851fae1f7477859763123d4115713b31fc592b1c3a7fb280674b0d9e20121b3cfe60407ddb4f6a75cf6", &(0x7f0000001640)="0ef085e60242bb11af266936f493661ce20b40cf92c674df409806986b6fa4bc09a1ff359a3a1638f2621d019dcafe4467897c424d693e55b799baae27e8633a0c836f28e8ca67bdc32b802842610e9cc989678932dc519120679481ac51dc11112f9230164a15117bd125a9fa69a0a91fda72fb0d7c74fec24d4057aea9bc1c8d36bbdaf1b07b2511cd1ec36af693e35e5b77dc907bdb0a2c3ffa3fcecc887af2169a8f7cfa8eb09be78981b94f5e41b5f37b9a20bc4efe7701ab45f812014aa23c20a00999a6d233bd4ab2d99cd0b1d0eba5c1939661eb957efcb6bd36ada9e6b7476357f890847e3090dd2a4b2b86", 0x4, r10}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001780)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001880)={0x28, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x402, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008801}, 0x8020) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000035c0)={0x118, 0x28, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487060000000000000000009381bff81a8b9482565856555ee923b25973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43db0200115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079765734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x118}], 0x1}, 0x44) connect$ax25(r6, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 46.751331ms ago: executing program 1 (id=752): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x140f, 0x1, 0x70bd24, 0x21dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x480a0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@getchain={0x54, 0x66, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xffff}, {0xffff, 0x9}, {0x10, 0xa}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x8}]}, 0x54}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000800)={{r3}, r4, 0x4, @inherit={0x50, &(0x7f0000000280)={0x1, 0x1, 0x6, 0xf9, {0x18, 0x4, 0x9, 0xb, 0x5}, [0x20]}}, @subvolid}) 1.803284ms ago: executing program 4 (id=753): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@getchain={0x74, 0x66, 0xa54dfabccd2fa6fd, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x3}, {0x10, 0xb}, {0x9b7393e56c386e02, 0xb}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0xe0000400}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa5de}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2004c80c) 0s ago: executing program 0 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. [ 82.452208][ T5850] cgroup: Unknown subsys name 'net' [ 82.589775][ T5850] cgroup: Unknown subsys name 'cpuset' [ 82.599012][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.298711][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.642913][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.653323][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.661139][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.669697][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.677699][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.684992][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.693742][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.706048][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.719385][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.727956][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.730017][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.742218][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.750434][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.758591][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.767440][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.776718][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.777081][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.791488][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.805829][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.814822][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.817318][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.823109][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.845342][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.853359][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.861989][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.530193][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 89.607096][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 89.692947][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 89.725380][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 89.868904][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 89.880135][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.888275][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.895646][ T5861] bridge_slave_0: entered allmulticast mode [ 89.903752][ T5861] bridge_slave_0: entered promiscuous mode [ 89.960346][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.969861][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.977138][ T5861] bridge_slave_1: entered allmulticast mode [ 89.984383][ T5861] bridge_slave_1: entered promiscuous mode [ 90.070684][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.077997][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.085154][ T5865] bridge_slave_0: entered allmulticast mode [ 90.092659][ T5865] bridge_slave_0: entered promiscuous mode [ 90.100178][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.107757][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.114932][ T5866] bridge_slave_0: entered allmulticast mode [ 90.122417][ T5866] bridge_slave_0: entered promiscuous mode [ 90.158097][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.167652][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.174843][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.182611][ T5865] bridge_slave_1: entered allmulticast mode [ 90.189973][ T5865] bridge_slave_1: entered promiscuous mode [ 90.207557][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.214743][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.222241][ T5866] bridge_slave_1: entered allmulticast mode [ 90.229558][ T5866] bridge_slave_1: entered promiscuous mode [ 90.255062][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.303977][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.311741][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.319352][ T5876] bridge_slave_0: entered allmulticast mode [ 90.326839][ T5876] bridge_slave_0: entered promiscuous mode [ 90.356637][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.378741][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.386081][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.393304][ T5876] bridge_slave_1: entered allmulticast mode [ 90.401168][ T5876] bridge_slave_1: entered promiscuous mode [ 90.424691][ T5861] team0: Port device team_slave_0 added [ 90.432633][ T5861] team0: Port device team_slave_1 added [ 90.440963][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.452544][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.524813][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.537257][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.546948][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.554163][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.561653][ T5871] bridge_slave_0: entered allmulticast mode [ 90.570243][ T5871] bridge_slave_0: entered promiscuous mode [ 90.622942][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.632707][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.640178][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.648029][ T5871] bridge_slave_1: entered allmulticast mode [ 90.655276][ T5871] bridge_slave_1: entered promiscuous mode [ 90.663306][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.670541][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.696550][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.709953][ T5865] team0: Port device team_slave_0 added [ 90.755778][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.763143][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.789329][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.801953][ T5865] team0: Port device team_slave_1 added [ 90.809696][ T5866] team0: Port device team_slave_0 added [ 90.816830][ T5864] Bluetooth: hci1: command tx timeout [ 90.868993][ T5866] team0: Port device team_slave_1 added [ 90.888796][ T5876] team0: Port device team_slave_0 added [ 90.895348][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.903185][ T5864] Bluetooth: hci4: command tx timeout [ 90.903195][ T5869] Bluetooth: hci0: command tx timeout [ 90.904345][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.941122][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.957866][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.970346][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.979988][ T5864] Bluetooth: hci3: command tx timeout [ 90.980152][ T5864] Bluetooth: hci2: command tx timeout [ 91.002777][ T5876] team0: Port device team_slave_1 added [ 91.009890][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.017003][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.043265][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.134531][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.142040][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.169008][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.194282][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.201886][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.227843][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.244444][ T5861] hsr_slave_0: entered promiscuous mode [ 91.251200][ T5861] hsr_slave_1: entered promiscuous mode [ 91.259431][ T5871] team0: Port device team_slave_0 added [ 91.266735][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.273793][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.300147][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.319258][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.326550][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.352509][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.364985][ T5871] team0: Port device team_slave_1 added [ 91.399153][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.406212][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.432640][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.475776][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.482882][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.508921][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.544494][ T5865] hsr_slave_0: entered promiscuous mode [ 91.551451][ T5865] hsr_slave_1: entered promiscuous mode [ 91.557995][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 91.563789][ T5865] Cannot create hsr debugfs directory [ 91.678467][ T5876] hsr_slave_0: entered promiscuous mode [ 91.685463][ T5876] hsr_slave_1: entered promiscuous mode [ 91.692392][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 91.698215][ T5876] Cannot create hsr debugfs directory [ 91.715477][ T5866] hsr_slave_0: entered promiscuous mode [ 91.723628][ T5866] hsr_slave_1: entered promiscuous mode [ 91.730205][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 91.736027][ T5866] Cannot create hsr debugfs directory [ 91.821285][ T5871] hsr_slave_0: entered promiscuous mode [ 91.827809][ T5871] hsr_slave_1: entered promiscuous mode [ 91.833947][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 91.839748][ T5871] Cannot create hsr debugfs directory [ 92.019868][ T92] cfg80211: failed to load regulatory.db [ 92.357119][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.370663][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.398825][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.418618][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.482042][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.497754][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.509684][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.522229][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.633544][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.652366][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.663636][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.688533][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.769718][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.781096][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.794239][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.806375][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.849954][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.896322][ T5864] Bluetooth: hci1: command tx timeout [ 92.932246][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.952227][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.964647][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.976762][ T5864] Bluetooth: hci4: command tx timeout [ 92.983456][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.990828][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.998991][ T5864] Bluetooth: hci0: command tx timeout [ 93.012141][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.022461][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.056527][ T5864] Bluetooth: hci2: command tx timeout [ 93.063292][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.070523][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.078104][ T5864] Bluetooth: hci3: command tx timeout [ 93.160258][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.185683][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.222194][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.256680][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.263814][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.302931][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.310167][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.342938][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.380288][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.387506][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.429001][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.436273][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.468975][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.527790][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.573182][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.600953][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.650749][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.657937][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.679381][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.722192][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.739797][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.747053][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.790292][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.797589][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.820146][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.827386][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.004479][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.053516][ T5861] veth0_vlan: entered promiscuous mode [ 94.090430][ T5861] veth1_vlan: entered promiscuous mode [ 94.194083][ T5865] veth0_vlan: entered promiscuous mode [ 94.234989][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.253138][ T5865] veth1_vlan: entered promiscuous mode [ 94.288391][ T5861] veth0_macvtap: entered promiscuous mode [ 94.334780][ T5861] veth1_macvtap: entered promiscuous mode [ 94.428509][ T5865] veth0_macvtap: entered promiscuous mode [ 94.444018][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.462721][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.500110][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.508151][ T5865] veth1_macvtap: entered promiscuous mode [ 94.515448][ T5876] veth0_vlan: entered promiscuous mode [ 94.542423][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.568301][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.581732][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591899][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.604215][ T5876] veth1_vlan: entered promiscuous mode [ 94.623828][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.640724][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.650168][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.712261][ T5866] veth0_vlan: entered promiscuous mode [ 94.748218][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.757264][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.782025][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.797372][ T5866] veth1_vlan: entered promiscuous mode [ 94.831064][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.841214][ T5876] veth0_macvtap: entered promiscuous mode [ 94.887923][ T5876] veth1_macvtap: entered promiscuous mode [ 94.927314][ T5866] veth0_macvtap: entered promiscuous mode [ 94.981417][ T5864] Bluetooth: hci1: command tx timeout [ 95.008870][ T5866] veth1_macvtap: entered promiscuous mode [ 95.025449][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.056978][ T5864] Bluetooth: hci0: command tx timeout [ 95.057046][ T5869] Bluetooth: hci4: command tx timeout [ 95.079838][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.110442][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.119324][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.136350][ T5869] Bluetooth: hci3: command tx timeout [ 95.138325][ T5864] Bluetooth: hci2: command tx timeout [ 95.166851][ T3463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.175636][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.187123][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.202388][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.210532][ T3491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.221816][ T3491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.247414][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.258914][ T3491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.281988][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.290211][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.333786][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.353254][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.364378][ T5871] veth0_vlan: entered promiscuous mode [ 95.384092][ T3463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.422825][ T3463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.452942][ T3463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.460324][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.465287][ T3463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.488220][ T5871] veth1_vlan: entered promiscuous mode [ 95.510731][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.525134][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.719160][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.732769][ T5985] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 95.742312][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.744889][ T5871] veth0_macvtap: entered promiscuous mode [ 95.859356][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.877598][ T5871] veth1_macvtap: entered promiscuous mode [ 95.899083][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.972482][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.033429][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.077331][ T5999] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.122874][ T1135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.159199][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.174825][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.197756][ T1135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.209587][ T1135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.228627][ T1135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.604976][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.665900][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.837812][ T30] audit: type=1800 audit(1758838775.056:2): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10" name="blkio.bfq.time_recursive" dev="tmpfs" ino=34 res=0 errno=0 [ 96.892498][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.934052][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.060649][ T5864] Bluetooth: hci1: command tx timeout [ 97.137779][ T5864] Bluetooth: hci0: command tx timeout [ 97.143240][ T5864] Bluetooth: hci4: command tx timeout [ 97.159563][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 97.174972][ T6025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12'. [ 97.216732][ T5864] Bluetooth: hci2: command tx timeout [ 97.216748][ T5869] Bluetooth: hci3: command tx timeout [ 97.481538][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 97.502808][ T6047] netlink: 'syz.4.5': attribute type 12 has an invalid length. [ 97.525371][ T6047] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.630853][ T6054] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.760621][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.881620][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.907840][ T6068] netlink: 128 bytes leftover after parsing attributes in process `syz.2.24'. [ 97.921913][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'. [ 97.948397][ T6068] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 97.982183][ T6072] bridge_slave_0: left allmulticast mode [ 98.004970][ T6072] bridge_slave_0: left promiscuous mode [ 98.022448][ T6078] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 98.044356][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.114851][ T6072] bridge_slave_1: left allmulticast mode [ 98.136984][ T6072] bridge_slave_1: left promiscuous mode [ 98.144721][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.166869][ T6072] bond0: (slave bond_slave_0): Releasing backup interface [ 98.188623][ T6072] bond0: (slave bond_slave_1): Releasing backup interface [ 98.212323][ T6072] team0: Port device team_slave_0 removed [ 98.224744][ T6072] team0: Port device team_slave_1 removed [ 98.231736][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.239707][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.249696][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.259194][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.270323][ T6072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.339380][ T6077] veth3: entered promiscuous mode [ 98.360922][ T6077] bond0: (slave veth3): Enslaving as an active interface with an up link [ 98.377187][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26'. [ 98.395548][ T6090] openvswitch: netlink: Flow key attr not present in new flow. [ 98.414048][ T6078] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.621963][ T6095] batman_adv: batadv0: Adding interface: vlan2 [ 98.636092][ T6095] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.680944][ T6095] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 98.694305][ T6083] syz.3.22 (6083) used greatest stack depth: 17864 bytes left [ 99.330563][ T6128] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.343475][ T6128] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 99.365486][ T6123] netlink: 'syz.4.35': attribute type 4 has an invalid length. [ 99.436123][ T6123] netlink: 'syz.4.35': attribute type 4 has an invalid length. [ 99.914341][ T6140] Bluetooth: MGMT ver 1.23 [ 99.984158][ T6139] geneve2: entered promiscuous mode [ 100.029028][ T6142] Illegal XDP return value 6142 on prog (id 19) dev N/A, expect packet loss! [ 100.706502][ T6165] dvmrp11: entered allmulticast mode [ 100.753588][ T6169] netlink: 'syz.4.48': attribute type 7 has an invalid length. [ 101.232512][ T6190] __nla_validate_parse: 9 callbacks suppressed [ 101.232532][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 101.265385][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 101.284811][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 101.463328][ T6197] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 101.506138][ T6182] Zero length message leads to an empty skb [ 101.537414][ T6205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.941690][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 101.962143][ T6221] tipc: Enabling of bearer rejected, failed to enable media [ 102.035013][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 102.311052][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 102.711233][ T6260] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 103.066653][ T6278] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 103.112319][ T6278] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 103.517664][ T6300] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 103.840970][ T6304] vlan2: entered allmulticast mode [ 103.940146][ T6304] veth1: entered allmulticast mode [ 104.299643][ T6324] FAULT_INJECTION: forcing a failure. [ 104.299643][ T6324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.386075][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.1.81 Not tainted syzkaller #0 PREEMPT(full) [ 104.386116][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.386140][ T6324] Call Trace: [ 104.386151][ T6324] [ 104.386160][ T6324] dump_stack_lvl+0x189/0x250 [ 104.386191][ T6324] ? __pfx____ratelimit+0x10/0x10 [ 104.386221][ T6324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.386243][ T6324] ? __pfx__printk+0x10/0x10 [ 104.386268][ T6324] ? __might_fault+0xb0/0x130 [ 104.386303][ T6324] should_fail_ex+0x414/0x560 [ 104.386344][ T6324] _copy_from_iter+0x1de/0x1790 [ 104.386373][ T6324] ? rcu_is_watching+0x15/0xb0 [ 104.386393][ T6324] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 104.386420][ T6324] ? __pfx__copy_from_iter+0x10/0x10 [ 104.386443][ T6324] ? __build_skb_around+0x257/0x3e0 [ 104.386469][ T6324] ? netlink_sendmsg+0x642/0xb30 [ 104.386489][ T6324] ? skb_put+0x11b/0x210 [ 104.386515][ T6324] netlink_sendmsg+0x6b2/0xb30 [ 104.386547][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.386573][ T6324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 104.386606][ T6324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.386625][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.386648][ T6324] __sock_sendmsg+0x219/0x270 [ 104.386681][ T6324] ____sys_sendmsg+0x52d/0x830 [ 104.386711][ T6324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.386746][ T6324] ? import_iovec+0x74/0xa0 [ 104.386773][ T6324] ___sys_sendmsg+0x21f/0x2a0 [ 104.386801][ T6324] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.386864][ T6324] ? __fget_files+0x2a/0x420 [ 104.386890][ T6324] ? __fget_files+0x3a0/0x420 [ 104.386929][ T6324] __sys_sendmmsg+0x227/0x430 [ 104.386960][ T6324] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.386982][ T6324] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 104.387029][ T6324] ? ksys_write+0x22a/0x250 [ 104.387056][ T6324] ? __pfx_ksys_write+0x10/0x10 [ 104.387078][ T6324] ? rcu_is_watching+0x15/0xb0 [ 104.387107][ T6324] __x64_sys_sendmmsg+0xa0/0xc0 [ 104.387135][ T6324] do_syscall_64+0xfa/0x3b0 [ 104.387153][ T6324] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.387182][ T6324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.387201][ T6324] ? clear_bhb_loop+0x60/0xb0 [ 104.387225][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.387244][ T6324] RIP: 0033:0x7ffaa438eec9 [ 104.387267][ T6324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.387282][ T6324] RSP: 002b:00007ffaa52bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.387304][ T6324] RAX: ffffffffffffffda RBX: 00007ffaa45e5fa0 RCX: 00007ffaa438eec9 [ 104.387318][ T6324] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 104.387330][ T6324] RBP: 00007ffaa52bf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.387348][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.387359][ T6324] R13: 00007ffaa45e6038 R14: 00007ffaa45e5fa0 R15: 00007fff24b78a58 [ 104.387391][ T6324] [ 105.127557][ T6336] team0: Device ipip0 is of different type [ 105.529640][ T6348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.88'. [ 106.266992][ T6376] netlink: 52 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.387533][ T6384] IPVS: set_ctl: invalid protocol: 58 172.20.20.16:20004 [ 106.716390][ T6394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.101'. [ 107.225167][ T6410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.106'. [ 107.269355][ T6410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.106'. [ 107.337596][ T6417] syzkaller1: entered promiscuous mode [ 107.343110][ T6417] syzkaller1: entered allmulticast mode [ 107.385179][ T6421] netlink: 60 bytes leftover after parsing attributes in process `syz.3.106'. [ 107.393042][ T6422] netlink: 228 bytes leftover after parsing attributes in process `syz.0.108'. [ 107.660608][ T6423] delete_channel: no stack [ 107.688171][ T6431] netlink: 'syz.4.112': attribute type 13 has an invalid length. [ 107.705925][ T6431] netlink: 'syz.4.112': attribute type 17 has an invalid length. [ 108.152713][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.160599][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.319859][ T6452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.116'. [ 108.391222][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.408820][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.423006][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.745403][ T6440] geneve2: left promiscuous mode [ 108.785101][ T6454] tipc: Started in network mode [ 108.791767][ T6454] tipc: Node identity 0e0fd131e9d, cluster identity 4711 [ 108.801145][ T6454] tipc: Enabled bearer , priority 0 [ 108.817764][ T6456] syzkaller0: entered promiscuous mode [ 108.829642][ T6456] syzkaller0: entered allmulticast mode [ 108.853164][ T3491] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.872442][ T3491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.922349][ T6443] tipc: Resetting bearer [ 108.984289][ T6443] tipc: Disabling bearer [ 108.999472][ T3491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.020974][ T6480] pimreg: entered allmulticast mode [ 109.260865][ T3491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.292612][ T6494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.125'. [ 109.852674][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 109.885491][ T6513] syz_tun: entered allmulticast mode [ 109.984324][ T6512] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 110.021590][ T6515] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 110.076425][ T6511] syz_tun: left allmulticast mode [ 110.190142][ T6520] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 110.235625][ T6522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.133'. [ 110.287850][ T6520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.381278][ T6520] netlink: 'syz.3.132': attribute type 10 has an invalid length. [ 110.395942][ T6520] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 110.531817][ T6530] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 110.700214][ T6536] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 110.895755][ T6536] bridge1: entered promiscuous mode [ 110.906125][ T6536] bridge1: entered allmulticast mode [ 110.960996][ T6543] pimreg: left allmulticast mode [ 111.494781][ T6590] __nla_validate_parse: 3 callbacks suppressed [ 111.494801][ T6590] netlink: 60 bytes leftover after parsing attributes in process `syz.3.149'. [ 112.736033][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 114.744612][ T6615] netlink: 84 bytes leftover after parsing attributes in process `syz.3.152'. [ 115.456610][ T6624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.158'. [ 116.050090][ T6646] netlink: 'syz.4.166': attribute type 21 has an invalid length. [ 116.058944][ T6646] netlink: 'syz.4.166': attribute type 22 has an invalid length. [ 116.066830][ T6646] netlink: 'syz.4.166': attribute type 23 has an invalid length. [ 116.074844][ T6646] netlink: 'syz.4.166': attribute type 25 has an invalid length. [ 116.082711][ T6646] netlink: 'syz.4.166': attribute type 26 has an invalid length. [ 116.098252][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.166'. [ 116.153621][ T6649] netlink: 'syz.2.169': attribute type 29 has an invalid length. [ 116.177306][ T6652] netlink: 'syz.2.169': attribute type 29 has an invalid length. [ 116.204190][ T6649] netlink: 500 bytes leftover after parsing attributes in process `syz.2.169'. [ 116.253798][ T6013] IPVS: starting estimator thread 0... [ 116.346816][ T6661] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.390709][ T6665] netlink: 6 bytes leftover after parsing attributes in process `syz.2.173'. [ 116.785341][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 116.794488][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 116.837509][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 117.531015][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 117.578573][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 117.648226][ T6722] netlink: 'syz.1.190': attribute type 29 has an invalid length. [ 117.648658][ T6717] netlink: 64 bytes leftover after parsing attributes in process `syz.0.188'. [ 117.795679][ T6733] IPVS: length: 4096 != 8 [ 117.802607][ T6729] FAULT_INJECTION: forcing a failure. [ 117.802607][ T6729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.856222][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(full) [ 117.856252][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.856267][ T6729] Call Trace: [ 117.856275][ T6729] [ 117.856283][ T6729] dump_stack_lvl+0x189/0x250 [ 117.856317][ T6729] ? __pfx____ratelimit+0x10/0x10 [ 117.856348][ T6729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.856369][ T6729] ? __pfx__printk+0x10/0x10 [ 117.856395][ T6729] ? __might_fault+0xb0/0x130 [ 117.856432][ T6729] should_fail_ex+0x414/0x560 [ 117.856465][ T6729] _copy_from_user+0x2d/0xb0 [ 117.856490][ T6729] ax25_setsockopt+0x16c/0xc20 [ 117.856515][ T6729] ? __pfx_aa_sk_perm+0x10/0x10 [ 117.856543][ T6729] ? __pfx_ax25_setsockopt+0x10/0x10 [ 117.856564][ T6729] ? __fget_files+0x2a/0x420 [ 117.856589][ T6729] ? aa_sock_opt_perm+0xff/0x1b0 [ 117.856610][ T6729] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 117.856629][ T6729] ? __pfx_ax25_setsockopt+0x10/0x10 [ 117.856653][ T6729] do_sock_setsockopt+0x17c/0x1b0 [ 117.856682][ T6729] __x64_sys_setsockopt+0x13f/0x1b0 [ 117.856710][ T6729] do_syscall_64+0xfa/0x3b0 [ 117.856727][ T6729] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.856756][ T6729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.856775][ T6729] ? clear_bhb_loop+0x60/0xb0 [ 117.856798][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.856816][ T6729] RIP: 0033:0x7f223938eec9 [ 117.856840][ T6729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.856856][ T6729] RSP: 002b:00007f22375f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 117.856880][ T6729] RAX: ffffffffffffffda RBX: 00007f22395e5fa0 RCX: 00007f223938eec9 [ 117.856894][ T6729] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 117.856906][ T6729] RBP: 00007f22375f6090 R08: 0000000000000010 R09: 0000000000000000 [ 117.856918][ T6729] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 117.856929][ T6729] R13: 00007f22395e6038 R14: 00007f22395e5fa0 R15: 00007ffc6a093888 [ 117.856961][ T6729] [ 118.189341][ T6733] IPv6: sit1: Disabled Multicast RS [ 118.217822][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.193'. [ 118.511313][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 118.605044][ T6751] netlink: 'syz.0.197': attribute type 7 has an invalid length. [ 118.638136][ T6751] netlink: 'syz.0.197': attribute type 8 has an invalid length. [ 118.676819][ T6753] 8021q: VLANs not supported on ip6tnl0 [ 118.703065][ T6757] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 118.776235][ T6755] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 118.857221][ T6767] ip6gre1: entered allmulticast mode [ 118.868414][ T6769] FAULT_INJECTION: forcing a failure. [ 118.868414][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.892711][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT(full) [ 118.892738][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.892749][ T6769] Call Trace: [ 118.892757][ T6769] [ 118.892765][ T6769] dump_stack_lvl+0x189/0x250 [ 118.892790][ T6769] ? __pfx____ratelimit+0x10/0x10 [ 118.892819][ T6769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.892839][ T6769] ? __pfx__printk+0x10/0x10 [ 118.892883][ T6769] should_fail_ex+0x414/0x560 [ 118.892915][ T6769] _copy_from_user+0x2d/0xb0 [ 118.892939][ T6769] copy_from_sockptr+0x5e/0xa0 [ 118.892962][ T6769] ax25_setsockopt+0x34d/0xc20 [ 118.892987][ T6769] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.893014][ T6769] ? __pfx_ax25_setsockopt+0x10/0x10 [ 118.893034][ T6769] ? __fget_files+0x2a/0x420 [ 118.893058][ T6769] ? aa_sock_opt_perm+0xff/0x1b0 [ 118.893078][ T6769] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 118.893096][ T6769] ? __pfx_ax25_setsockopt+0x10/0x10 [ 118.893117][ T6769] do_sock_setsockopt+0x17c/0x1b0 [ 118.893145][ T6769] __x64_sys_setsockopt+0x13f/0x1b0 [ 118.893173][ T6769] do_syscall_64+0xfa/0x3b0 [ 118.893190][ T6769] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.893218][ T6769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.893236][ T6769] ? clear_bhb_loop+0x60/0xb0 [ 118.893258][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.893275][ T6769] RIP: 0033:0x7f33b838eec9 [ 118.893292][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.893305][ T6769] RSP: 002b:00007f33b9221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.893324][ T6769] RAX: ffffffffffffffda RBX: 00007f33b85e5fa0 RCX: 00007f33b838eec9 [ 118.893337][ T6769] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 118.893348][ T6769] RBP: 00007f33b9221090 R08: 0000000000000010 R09: 0000000000000000 [ 118.893359][ T6769] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 118.893370][ T6769] R13: 00007f33b85e6038 R14: 00007f33b85e5fa0 R15: 00007fff0c595a78 [ 118.893400][ T6769] [ 119.819824][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 120.045165][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.053488][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.100835][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 120.132014][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.139284][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.146933][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.154116][ T6819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.170515][ T6819] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.232196][ T6823] bridge_slave_1: left allmulticast mode [ 120.244626][ T6823] bridge_slave_1: left promiscuous mode [ 120.253500][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.267833][ T6823] bridge_slave_0: left allmulticast mode [ 120.273705][ T6823] bridge_slave_0: left promiscuous mode [ 120.279833][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.312347][ T6823] bond0: (slave bridge0): Releasing backup interface [ 120.400050][ T6829] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 120.761233][ T3463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.860879][ T3463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.946092][ T3463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.047835][ T3463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.099254][ T6846] !: renamed from dummy0 (while UP) [ 121.148257][ T6850] trusted_key: syz.1.224 sent an empty control message without MSG_MORE. [ 121.200171][ T6852] syzkaller1: entered promiscuous mode [ 121.205766][ T6852] syzkaller1: entered allmulticast mode [ 121.425616][ T3463] bridge_slave_1: left allmulticast mode [ 121.444853][ T3463] bridge_slave_1: left promiscuous mode [ 121.454583][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.472792][ T3463] bridge_slave_0: left allmulticast mode [ 121.478819][ T3463] bridge_slave_0: left promiscuous mode [ 121.484766][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.591264][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.600886][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.610017][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.625522][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.633469][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.841279][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.852757][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.864447][ T3463] bond0 (unregistering): (slave veth3): Releasing backup interface [ 121.874349][ T3463] bond0 (unregistering): Released all slaves [ 121.888707][ T6857] lo speed is unknown, defaulting to 1000 [ 121.906068][ T6857] lo speed is unknown, defaulting to 1000 [ 121.993414][ T6857] lo speed is unknown, defaulting to 1000 [ 122.019763][ T6857] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.044128][ T6857] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 122.101150][ T6869] __nla_validate_parse: 4 callbacks suppressed [ 122.101170][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'. [ 122.126177][ T6869] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 122.207348][ T6857] lo speed is unknown, defaulting to 1000 [ 122.250213][ T6868] lo speed is unknown, defaulting to 1000 [ 122.277967][ T6857] lo speed is unknown, defaulting to 1000 [ 122.326071][ T6857] lo speed is unknown, defaulting to 1000 [ 122.350675][ T6876] lo speed is unknown, defaulting to 1000 [ 122.371431][ T6857] lo speed is unknown, defaulting to 1000 [ 122.403680][ T6857] lo speed is unknown, defaulting to 1000 [ 122.440534][ T6857] lo speed is unknown, defaulting to 1000 [ 122.490564][ T6857] lo speed is unknown, defaulting to 1000 [ 122.575691][ T3463] hsr_slave_0: left promiscuous mode [ 122.592628][ T3463] hsr_slave_1: left promiscuous mode [ 122.610397][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.617979][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.636989][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.644489][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.682713][ T3463] veth1_macvtap: left promiscuous mode [ 122.689950][ T3463] veth0_macvtap: left promiscuous mode [ 122.698113][ T3463] veth1_vlan: left promiscuous mode [ 122.712683][ T3463] veth0_vlan: left promiscuous mode [ 123.586333][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 123.650576][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 123.696096][ T5864] Bluetooth: hci4: command tx timeout [ 124.540998][ T6952] netlink: 48 bytes leftover after parsing attributes in process `syz.4.238'. [ 124.554011][ T6952] netlink: 48 bytes leftover after parsing attributes in process `syz.4.238'. [ 124.627129][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 124.767890][ T6970] validate_nla: 3 callbacks suppressed [ 124.767908][ T6970] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 124.781757][ T6970] netlink: 180 bytes leftover after parsing attributes in process `syz.3.241'. [ 124.797552][ T6971] netlink: 3 bytes leftover after parsing attributes in process `syz.4.243'. [ 124.886677][ T6971] batadv1: entered promiscuous mode [ 124.891937][ T6971] batadv1: entered allmulticast mode [ 124.930297][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.243'. [ 125.034528][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.062615][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.076331][ T6864] bridge_slave_0: entered allmulticast mode [ 125.088602][ T6864] bridge_slave_0: entered promiscuous mode [ 125.100688][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.115984][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.123401][ T6864] bridge_slave_1: entered allmulticast mode [ 125.131125][ T6864] bridge_slave_1: entered promiscuous mode [ 125.272615][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.349426][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.692604][ T6864] team0: Port device team_slave_0 added [ 125.703874][ T6864] team0: Port device team_slave_1 added [ 125.788280][ T5864] Bluetooth: hci4: command tx timeout [ 125.801455][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.808646][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.835343][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.849370][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.856657][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.882971][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.972714][ T6864] hsr_slave_0: entered promiscuous mode [ 125.987454][ T6864] hsr_slave_1: entered promiscuous mode [ 126.005018][ T6864] debugfs: 'hsr0' already exists in 'hsr' [ 126.015235][ T6864] Cannot create hsr debugfs directory [ 126.083179][ T7021] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 126.382931][ T6864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.393817][ T6864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.442808][ T6864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.469812][ T6864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.674369][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 126.809349][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.873933][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.960939][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.968144][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.079313][ T6837] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.086556][ T6837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.294559][ T7084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'. [ 127.406422][ T7086] lo speed is unknown, defaulting to 1000 [ 127.513212][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 127.608522][ T7111] FAULT_INJECTION: forcing a failure. [ 127.608522][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 127.626147][ T7111] CPU: 0 UID: 0 PID: 7111 Comm: syz.4.281 Not tainted syzkaller #0 PREEMPT(full) [ 127.626173][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.626185][ T7111] Call Trace: [ 127.626193][ T7111] [ 127.626202][ T7111] dump_stack_lvl+0x189/0x250 [ 127.626238][ T7111] ? __pfx____ratelimit+0x10/0x10 [ 127.626269][ T7111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.626290][ T7111] ? __pfx__printk+0x10/0x10 [ 127.626318][ T7111] ? __lock_acquire+0xab9/0xd20 [ 127.626354][ T7111] should_fail_ex+0x414/0x560 [ 127.626387][ T7111] should_failslab+0xa8/0x100 [ 127.626417][ T7111] kmem_cache_alloc_noprof+0x73/0x3c0 [ 127.626441][ T7111] ? skb_clone+0x212/0x3a0 [ 127.626471][ T7111] skb_clone+0x212/0x3a0 [ 127.626501][ T7111] __netlink_deliver_tap+0x404/0x850 [ 127.626537][ T7111] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.626560][ T7111] netlink_deliver_tap+0x19c/0x1b0 [ 127.626583][ T7111] netlink_unicast+0x7fa/0x9e0 [ 127.626611][ T7111] ? __pfx_netlink_unicast+0x10/0x10 [ 127.626633][ T7111] ? netlink_sendmsg+0x642/0xb30 [ 127.626652][ T7111] ? skb_put+0x11b/0x210 [ 127.626678][ T7111] netlink_sendmsg+0x805/0xb30 [ 127.626711][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.626736][ T7111] ? aa_sock_msg_perm+0xf1/0x1d0 [ 127.626768][ T7111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.626788][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.626811][ T7111] __sock_sendmsg+0x219/0x270 [ 127.626843][ T7111] ____sys_sendmsg+0x52d/0x830 [ 127.626874][ T7111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.626909][ T7111] ? import_iovec+0x74/0xa0 [ 127.626936][ T7111] ___sys_sendmsg+0x21f/0x2a0 [ 127.626985][ T7111] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.627052][ T7111] ? __might_fault+0xb0/0x130 [ 127.627082][ T7111] __sys_sendmmsg+0x227/0x430 [ 127.627113][ T7111] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.627135][ T7111] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 127.627184][ T7111] ? ksys_write+0x22a/0x250 [ 127.627211][ T7111] ? __pfx_ksys_write+0x10/0x10 [ 127.627239][ T7111] ? rcu_is_watching+0x15/0xb0 [ 127.627264][ T7111] __x64_sys_sendmmsg+0xa0/0xc0 [ 127.627292][ T7111] do_syscall_64+0xfa/0x3b0 [ 127.627309][ T7111] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.627338][ T7111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.627357][ T7111] ? clear_bhb_loop+0x60/0xb0 [ 127.627381][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.627400][ T7111] RIP: 0033:0x7f7d0998eec9 [ 127.627418][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.627434][ T7111] RSP: 002b:00007f7d0a8a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.627455][ T7111] RAX: ffffffffffffffda RBX: 00007f7d09be5fa0 RCX: 00007f7d0998eec9 [ 127.627469][ T7111] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 127.627500][ T7111] RBP: 00007f7d0a8a0090 R08: 0000000000000000 R09: 0000000000000000 [ 127.627512][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.627524][ T7111] R13: 00007f7d09be6038 R14: 00007f7d09be5fa0 R15: 00007ffc80ea1b38 [ 127.627557][ T7111] [ 127.680133][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.902888][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 127.919058][ T5864] Bluetooth: hci4: command tx timeout [ 128.021694][ T7116] netlink: 'syz.4.282': attribute type 4 has an invalid length. [ 128.536207][ T6864] veth0_vlan: entered promiscuous mode [ 128.572512][ T6864] veth1_vlan: entered promiscuous mode [ 128.642473][ T7138] vlan2: entered promiscuous mode [ 128.648982][ T7138] geneve1: entered promiscuous mode [ 128.654550][ T7138] vlan2: entered allmulticast mode [ 128.660623][ T7138] geneve1: entered allmulticast mode [ 128.699549][ T6864] veth0_macvtap: entered promiscuous mode [ 128.722989][ T6864] veth1_macvtap: entered promiscuous mode [ 128.775037][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.805044][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.856726][ T3491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.882429][ T3491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.926372][ T3491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.935151][ T3491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.016996][ T7142] lo speed is unknown, defaulting to 1000 [ 129.118093][ T7148] lo speed is unknown, defaulting to 1000 [ 129.539111][ T6838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.566695][ T6838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.709840][ T6838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.729805][ T6838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.017191][ T5864] Bluetooth: hci4: command tx timeout [ 130.088249][ T7189] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 130.162742][ T7160] infiniband syz0: set active [ 130.178240][ T7160] infiniband syz0: added veth1_to_hsr [ 130.199265][ T7160] syz0: rxe_create_cq: returned err = -12 [ 130.216871][ T7160] infiniband syz0: Couldn't create ib_mad CQ [ 130.223160][ T7160] infiniband syz0: Couldn't open port 1 [ 130.339575][ T7206] netlink: 76 bytes leftover after parsing attributes in process `syz.3.300'. [ 130.378468][ T7160] RDS/IB: syz0: added [ 130.464237][ T7198] lo speed is unknown, defaulting to 1000 [ 130.502383][ T7192] netlink: 'syz.3.300': attribute type 3 has an invalid length. [ 130.520958][ T7192] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 130.555683][ T7192] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.300'. [ 130.708403][ T7214] netlink: 'syz.5.304': attribute type 1 has an invalid length. [ 130.815267][ T7214] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 131.084943][ T7223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.132780][ T7224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.334785][ T7244] netlink: 7 bytes leftover after parsing attributes in process `syz.5.310'. [ 131.664986][ T7260] netlink: 'syz.3.317': attribute type 4 has an invalid length. [ 131.683183][ T7260] netlink: 48 bytes leftover after parsing attributes in process `syz.3.317'. [ 131.906695][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 131.948058][ T7268] netlink: 'syz.3.318': attribute type 3 has an invalid length. [ 131.957059][ T7268] netlink: 666 bytes leftover after parsing attributes in process `syz.3.318'. [ 131.978228][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 132.820021][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.327'. [ 133.227774][ T7323] netlink: 'syz.5.332': attribute type 1 has an invalid length. [ 133.253271][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.332'. [ 133.913151][ T7335] lo speed is unknown, defaulting to 1000 [ 133.966071][ T7347] bond0: (slave erspan0): Opening slave failed [ 133.982727][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 134.728942][ T7372] netlink: 68 bytes leftover after parsing attributes in process `syz.1.346'. [ 137.727015][ T7384] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 137.754548][ T7384] bridge0: entered allmulticast mode [ 137.759357][ T7389] sctp: [Deprecated]: syz.1.350 (pid 7389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.759357][ T7389] Use struct sctp_sack_info instead [ 138.080456][ T7402] netlink: 244 bytes leftover after parsing attributes in process `syz.3.354'. [ 138.117542][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.132079][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.139807][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.493820][ T7398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.548508][ T7398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.940019][ T7425] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 138.965980][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 139.014706][ T7398] ip6gre1: left allmulticast mode [ 139.119207][ T6837] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.138620][ T6837] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.158474][ T6837] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.177016][ T6837] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.240282][ T7438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.361'. [ 139.279298][ T7438] tap0: tun_chr_ioctl cmd 1074025680 [ 139.320470][ T7437] tipc: Enabling of bearer rejected, failed to enable media [ 139.350376][ T7444] netlink: 'syz.1.363': attribute type 30 has an invalid length. [ 139.456184][ T7449] netlink: 34 bytes leftover after parsing attributes in process `syz.0.362'. [ 139.467475][ T7446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.362'. [ 139.478404][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 140.014995][ T7462] netlink: 80 bytes leftover after parsing attributes in process `syz.3.367'. [ 140.131869][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 140.141082][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 140.402729][ T7496] netlink: 228 bytes leftover after parsing attributes in process `syz.0.370'. [ 140.471185][ T7495] pim6reg1: entered promiscuous mode [ 140.485967][ T7495] pim6reg1: entered allmulticast mode [ 140.494725][ T7491] lo speed is unknown, defaulting to 1000 [ 140.586704][ T7502] macsec1: entered promiscuous mode [ 140.592103][ T7502] macvlan0: entered promiscuous mode [ 140.600776][ T7502] macvlan0: left promiscuous mode [ 140.637661][ T7503] macsec1: entered promiscuous mode [ 140.643374][ T7503] macvlan0: entered promiscuous mode [ 140.667337][ T7503] macvlan0: left promiscuous mode [ 140.857786][ T7509] lo speed is unknown, defaulting to 1000 [ 140.955424][ T7513] netlink: 'syz.5.377': attribute type 10 has an invalid length. [ 141.005967][ T7513] batman_adv: batadv0: Adding interface: netdevsim0 [ 141.012806][ T7513] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.056423][ T7513] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 141.242201][ T7519] bond0: entered promiscuous mode [ 141.255892][ T7519] bond_slave_0: entered promiscuous mode [ 141.266926][ T7519] bond_slave_1: entered promiscuous mode [ 141.284517][ T7519] bond0: left promiscuous mode [ 141.313280][ T7519] bond_slave_0: left promiscuous mode [ 141.318976][ T7519] bond_slave_1: left promiscuous mode [ 141.556555][ T7533] netlink: 'syz.5.382': attribute type 2 has an invalid length. [ 141.759225][ T7533] tap0: tun_chr_ioctl cmd 2147767507 [ 141.773413][ T7547] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 142.078040][ T7550] netlink: 'syz.5.388': attribute type 1 has an invalid length. [ 142.143930][ T7553] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.166364][ T7554] netlink: 'syz.5.388': attribute type 1 has an invalid length. [ 142.174735][ T7553] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.272018][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 143.191664][ T7597] __nla_validate_parse: 7 callbacks suppressed [ 143.191682][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.401'. [ 143.294922][ T7601] bond0: (slave bond_slave_0): Releasing backup interface [ 143.310111][ T7601] bond0: (slave bond_slave_1): Releasing backup interface [ 143.326122][ T7601] team0: Port device team_slave_0 removed [ 143.339035][ T7601] team0: Port device team_slave_1 removed [ 143.345713][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.353715][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.363490][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.371170][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.380671][ T7601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.532347][ T7613] netlink: 96 bytes leftover after parsing attributes in process `syz.4.408'. [ 143.581264][ T7614] Bluetooth: MGMT ver 1.23 [ 143.638312][ T7619] netlink: 104 bytes leftover after parsing attributes in process `syz.0.407'. [ 143.909646][ T7639] atomic_op ffff888030a7c998 conn xmit_atomic 0000000000000000 [ 144.015667][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 144.053264][ T7647] veth0: entered promiscuous mode [ 144.060724][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 144.279738][ T7662] siw: device registration error -23 [ 144.339191][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.463236][ T7675] netlink: 44 bytes leftover after parsing attributes in process `syz.1.424'. [ 144.490295][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 144.760993][ T7701] netlink: 48 bytes leftover after parsing attributes in process `syz.5.428'. [ 144.888907][ T7708] IPv6: NLM_F_REPLACE set, but no existing node found! [ 144.935332][ T7702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.948539][ T7687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.007919][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'. [ 145.581154][ T7737] netlink: 'syz.5.434': attribute type 27 has an invalid length. [ 145.933680][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.942039][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.463692][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.568793][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.285640][ T3491] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.326027][ T3491] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.356191][ T7779] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 147.356409][ T3491] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.432779][ T7794] netlink: 'syz.5.442': attribute type 12 has an invalid length. [ 147.463467][ T7794] netlink: 'syz.5.442': attribute type 29 has an invalid length. [ 147.546208][ T3491] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.588986][ T7810] tipc: Started in network mode [ 147.593892][ T7810] tipc: Node identity 4, cluster identity 4711 [ 147.601360][ T7810] tipc: Node number set to 4 [ 147.643501][ T7808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.704038][ T7818] netlink: 'syz.5.447': attribute type 11 has an invalid length. [ 147.764425][ T7809] lo speed is unknown, defaulting to 1000 [ 147.971228][ T7827] netlink: 'syz.3.450': attribute type 12 has an invalid length. [ 148.611269][ T7878] tipc: Enabled bearer , priority 0 [ 148.815117][ T7879] syzkaller0: entered promiscuous mode [ 148.823021][ T7879] syzkaller0: entered allmulticast mode [ 149.074325][ T7899] geneve2: entered promiscuous mode [ 149.433522][ T7850] tipc: Resetting bearer [ 149.481986][ T7850] tipc: Disabling bearer [ 149.528870][ T7911] netlink: 'syz.5.462': attribute type 13 has an invalid length. [ 149.537205][ T7911] netlink: 'syz.5.462': attribute type 17 has an invalid length. [ 149.628116][ T7911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.651247][ T7911] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.666864][ T7911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.687641][ T7912] xfrm0: entered promiscuous mode [ 149.696538][ T7912] xfrm0: entered allmulticast mode [ 149.801776][ T7913] lo speed is unknown, defaulting to 1000 [ 150.035553][ T7939] __nla_validate_parse: 5 callbacks suppressed [ 150.035573][ T7939] netlink: 388 bytes leftover after parsing attributes in process `syz.4.467'. [ 150.210502][ T7946] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 150.228500][ T7946] netlink: 224 bytes leftover after parsing attributes in process `syz.1.469'. [ 150.548325][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.472'. [ 150.567166][ T7962] vlan0: entered promiscuous mode [ 151.062751][ T7982] Bluetooth: MGMT ver 1.23 [ 151.124909][ T7982] geneve2: entered promiscuous mode [ 151.148032][ T7869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.171015][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.484'. [ 151.186020][ T7869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.194789][ T7869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.256837][ T7869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.832033][ T8000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 151.860251][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 152.219169][ T8020] netlink: 72 bytes leftover after parsing attributes in process `syz.5.495'. [ 152.637767][ T8010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.490'. [ 152.637776][ T8034] netlink: 'syz.3.501': attribute type 3 has an invalid length. [ 152.654432][ T8010] netlink: 13 bytes leftover after parsing attributes in process `syz.0.490'. [ 152.673652][ T8010] netlink: 5 bytes leftover after parsing attributes in process `syz.0.490'. [ 152.916572][ T8051] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 152.975279][ T8051] bond1: entered promiscuous mode [ 152.989457][ T8051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.024983][ T8060] netlink: 'syz.1.506': attribute type 11 has an invalid length. [ 153.039490][ T8060] netlink: 'syz.1.506': attribute type 5 has an invalid length. [ 153.053923][ T8051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.068359][ T8051] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 153.081432][ T8051] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 153.144511][ T8051] bond1: (slave wireguard0): making interface the new active one [ 153.155325][ T8051] wireguard0: entered promiscuous mode [ 153.163708][ T8051] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 153.192128][ T8064] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 153.211516][ T8064] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 153.316397][ T8068] lo speed is unknown, defaulting to 1000 [ 154.194139][ T8109] netlink: 'syz.5.522': attribute type 4 has an invalid length. [ 154.556819][ T8123] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 154.939913][ T8144] lo speed is unknown, defaulting to 1000 [ 155.155582][ T8158] atomic_op ffff888062926998 conn xmit_atomic 0000000000000000 [ 155.165285][ T8158] __nla_validate_parse: 12 callbacks suppressed [ 155.165314][ T8158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.534'. [ 155.182938][ T8158] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 155.303453][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 155.316873][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 155.326048][ T8163] netlink: 'syz.0.535': attribute type 18 has an invalid length. [ 155.426741][ T8172] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 155.440974][ T8172] dvmrp1: linktype set to 805 [ 155.539618][ T8135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.562678][ T8167] netlink: 228 bytes leftover after parsing attributes in process `syz.4.530'. [ 156.199268][ T8206] netlink: 132 bytes leftover after parsing attributes in process `syz.5.548'. [ 156.511145][ T8231] netlink: 52 bytes leftover after parsing attributes in process `syz.1.554'. [ 156.584803][ T8235] netlink: 'syz.1.555': attribute type 12 has an invalid length. [ 156.649867][ T8239] netlink: 228 bytes leftover after parsing attributes in process `syz.5.553'. [ 156.728614][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 156.923474][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 157.140216][ T8260] tun0: tun_chr_ioctl cmd 1074025681 [ 157.148433][ T8260] syz_tun: entered allmulticast mode [ 157.162878][ T8260] dvmrp1: entered allmulticast mode [ 157.333745][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'. [ 157.877470][ T8282] vlan2: entered promiscuous mode [ 157.882802][ T8282] macvtap0: entered promiscuous mode [ 157.962812][ T8259] syz_tun: left allmulticast mode [ 158.553174][ T8312] macsec1: entered promiscuous mode [ 158.556864][ T7765] IPVS: starting estimator thread 0... [ 158.589968][ T8312] hsr0: entered promiscuous mode [ 158.657115][ T8316] IPVS: using max 24 ests per chain, 57600 per kthread [ 158.919718][ T8340] lo speed is unknown, defaulting to 1000 [ 158.959990][ T8343] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 159.029128][ T8343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.035728][ T8352] netlink: 'syz.5.588': attribute type 10 has an invalid length. [ 159.080011][ T8350] lo speed is unknown, defaulting to 1000 [ 159.173365][ T8351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.180762][ T8351] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.203109][ T8351] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 159.249915][ T8352] batman_adv: batadv0: Adding interface: virt_wifi0 [ 159.264456][ T8352] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.323679][ T8352] batman_adv: batadv0: Interface activated: virt_wifi0 [ 159.391275][ T8343] veth3: entered promiscuous mode [ 159.418134][ T8343] bond1: (slave veth3): Enslaving as an active interface with a down link [ 160.610487][ T8403] geneve3: entered promiscuous mode [ 160.769335][ T8397] syzkaller1: entered promiscuous mode [ 160.775059][ T8397] syzkaller1: entered allmulticast mode [ 160.832046][ T8412] netlink: 'syz.3.603': attribute type 13 has an invalid length. [ 160.923513][ T8412] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 161.111975][ T8424] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 161.145913][ T8424] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 161.166646][ T8424] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 161.349758][ T8440] __nla_validate_parse: 12 callbacks suppressed [ 161.349777][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 161.436266][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 161.455408][ T8443] lo: entered allmulticast mode [ 161.471969][ T8443] lo: left allmulticast mode [ 161.489056][ T8443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.617164][ T8450] lo speed is unknown, defaulting to 1000 [ 161.642349][ T8456] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 161.808955][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.618'. [ 161.897892][ T8474] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 161.938995][ T8478] netlink: 76 bytes leftover after parsing attributes in process `syz.5.617'. [ 162.207996][ T8484] lo speed is unknown, defaulting to 1000 [ 162.660512][ T8494] lo speed is unknown, defaulting to 1000 [ 162.754478][ T8503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.626'. [ 162.787660][ T8503] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 162.930105][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 163.756000][ T8534] tipc: Started in network mode [ 163.760908][ T8534] tipc: Node identity a271f85b2369, cluster identity 4711 [ 163.777843][ T8534] tipc: Enabled bearer , priority 0 [ 163.918153][ T8530] bond1: entered promiscuous mode [ 163.935951][ T8530] bond1: entered allmulticast mode [ 163.943947][ T8530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.994966][ T8536] syzkaller0: entered promiscuous mode [ 164.001947][ T8536] syzkaller0: entered allmulticast mode [ 164.011122][ T8545] netlink: 'syz.0.637': attribute type 13 has an invalid length. [ 164.090468][ T8545] hsr0: left promiscuous mode [ 164.115944][ T8535] lo speed is unknown, defaulting to 1000 [ 164.243293][ T8534] tipc: Resetting bearer [ 164.272063][ T8534] tipc: Disabling bearer [ 165.841549][ T8544] Set syz1 is full, maxelem 6117 reached [ 165.933134][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.641'. [ 166.388613][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 166.537864][ T8584] lo speed is unknown, defaulting to 1000 [ 166.647417][ T8594] vlan0: entered promiscuous mode [ 166.658657][ T8594] team0: entered promiscuous mode [ 166.666134][ T8594] team_slave_0: entered promiscuous mode [ 166.683741][ T8595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.696390][ T8594] team_slave_1: entered promiscuous mode [ 166.983178][ T8600] netlink: 'syz.3.654': attribute type 3 has an invalid length. [ 167.419821][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 167.430013][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 167.777705][ T8627] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 167.788005][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 168.032637][ T8636] netlink: 'syz.3.667': attribute type 3 has an invalid length. [ 168.057786][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.667'. [ 168.102808][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.667'. [ 168.372243][ T8647] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.594304][ T8662] netlink: 'syz.5.674': attribute type 1 has an invalid length. [ 168.858540][ T8670] netlink: 'syz.0.676': attribute type 30 has an invalid length. [ 168.952063][ T8674] tun0: tun_chr_ioctl cmd 2147767521 [ 169.037889][ T8682] netlink: 104 bytes leftover after parsing attributes in process `syz.1.680'. [ 169.246368][ T8697] lo speed is unknown, defaulting to 1000 [ 169.287439][ T8706] netlink: 'syz.5.686': attribute type 1 has an invalid length. [ 169.308927][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 169.430047][ T8712] bond1: (slave bridge1): making interface the new active one [ 169.438546][ T8712] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 169.517824][ T8720] netlink: 27 bytes leftover after parsing attributes in process `syz.4.689'. [ 169.865145][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 169.889293][ T8732] gtp0: entered promiscuous mode [ 170.373223][ T8758] netlink: 'syz.5.698': attribute type 1 has an invalid length. [ 171.642833][ T8758] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 171.786701][ T8788] __nla_validate_parse: 2 callbacks suppressed [ 171.786723][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 171.930401][ T8788] tipc: Started in network mode [ 171.950381][ T8788] tipc: Node identity 76f1361a61c5, cluster identity 4711 [ 171.951389][ T8796] netlink: 'syz.4.705': attribute type 3 has an invalid length. [ 171.981411][ T8788] tipc: Enabled bearer , priority 0 [ 172.004139][ T8788] tipc: Resetting bearer [ 172.112322][ T8787] tipc: Disabling bearer [ 172.169112][ T8807] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'. [ 172.178204][ T8807] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'. [ 172.605489][ T8820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.712'. [ 172.617836][ T8820] syzkaller1: entered promiscuous mode [ 172.623343][ T8820] syzkaller1: entered allmulticast mode [ 172.901904][ T8843] netlink: 'syz.1.720': attribute type 25 has an invalid length. [ 173.019342][ T8853] pimreg: entered allmulticast mode [ 173.710484][ T8880] netlink: 228 bytes leftover after parsing attributes in process `syz.5.725'. [ 173.741283][ T8891] tipc: Cannot configure node identity twice [ 173.749031][ T8891] tipc: Cannot configure node identity twice [ 173.861208][ T8897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.734'. [ 173.892139][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 173.935352][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 173.953205][ T8899] tipc: Enabled bearer , priority 0 [ 173.960945][ T8899] syzkaller0: entered promiscuous mode [ 173.968331][ T8899] syzkaller0: entered allmulticast mode [ 174.021065][ T8899] tipc: Resetting bearer [ 174.104025][ T8898] tipc: Resetting bearer [ 174.133393][ T8898] tipc: Disabling bearer [ 174.274513][ T8921] netlink: 'syz.4.743': attribute type 23 has an invalid length. [ 174.412458][ T8934] syzkaller0: entered promiscuous mode [ 174.439332][ T8934] syzkaller0: entered allmulticast mode [ 174.478209][ T8930] tipc: Started in network mode [ 174.486573][ T8930] tipc: Node identity 7ac75f7b1d01, cluster identity 4711 [ 174.504327][ T8930] tipc: Enabled bearer , priority 0 [ 174.579354][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 174.588757][ T8930] tipc: Resetting bearer [ 174.654690][ T8930] tipc: Disabling bearer [ 174.669431][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 174.781838][ T8948] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 174.872957][ C1] ================================================================== [ 174.889307][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 174.897413][ C1] Write of size 8 at addr ffff888050e819b0 by task modprobe/8960 [ 174.905162][ C1] [ 174.907516][ C1] CPU: 1 UID: 0 PID: 8960 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 174.907543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.907556][ C1] Call Trace: [ 174.907565][ C1] [ 174.907574][ C1] dump_stack_lvl+0x189/0x250 [ 174.907601][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 174.907626][ C1] ? rcu_is_watching+0x15/0xb0 [ 174.907644][ C1] ? __kasan_check_byte+0x12/0x40 [ 174.907672][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.907693][ C1] ? rcu_is_watching+0x15/0xb0 [ 174.907712][ C1] ? lock_release+0x4b/0x3e0 [ 174.907743][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 174.907767][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 174.907793][ C1] print_report+0xca/0x240 [ 174.907823][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 174.907847][ C1] kasan_report+0x118/0x150 [ 174.907876][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 174.907906][ C1] __xfrm_state_delete+0x696/0xca0 [ 174.907938][ C1] xfrm_timer_handler+0x18f/0xa00 [ 174.907969][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 174.907993][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 174.908022][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.908054][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 174.908084][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.908117][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 174.908142][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 174.908166][ C1] __hrtimer_run_queues+0x529/0xc60 [ 174.908208][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 174.908239][ C1] ? read_tsc+0x9/0x20 [ 174.908267][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 174.908304][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 174.908326][ C1] handle_softirqs+0x283/0x870 [ 174.908360][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 174.908381][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 174.908418][ C1] __irq_exit_rcu+0xca/0x1f0 [ 174.908442][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 174.908465][ C1] irq_exit_rcu+0x9/0x30 [ 174.908481][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 174.908513][ C1] [ 174.908520][ C1] [ 174.908528][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 174.908551][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 174.908578][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 c7 fd 0b 48 89 de 5b e9 13 b0 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 30 9e 92 65 8b 15 88 82 [ 174.908596][ C1] RSP: 0018:ffffc9001aa67118 EFLAGS: 00000246 [ 174.908616][ C1] RAX: ffff8000c5520000 RBX: ffffffff8cbad583 RCX: ffff88802b545a00 [ 174.908633][ C1] RDX: 0000000000000000 RSI: ffff806a683aa000 RDI: ffff8000c5520000 [ 174.908647][ C1] RBP: ffffc9001aa672f0 R08: 0000000000000003 R09: 0000000000000004 [ 174.908660][ C1] R10: dffffc0000000000 R11: fffffbfff33fdd1c R12: 0000000000000001 [ 174.908674][ C1] R13: ffff8000c5520000 R14: ffffffffffffffff R15: ffffffff8cbad5e3 [ 174.908701][ C1] mt_validate+0x2b4f/0x4380 [ 174.908728][ C1] ? __pfx_mt_validate+0x10/0x10 [ 174.908751][ C1] ? trace_ma_write+0x87/0x1f0 [ 174.908780][ C1] ? uprobe_mmap+0x177/0x1020 [ 174.908806][ C1] validate_mm+0xb6/0x4b0 [ 174.908827][ C1] ? __pfx_validate_mm+0x10/0x10 [ 174.908848][ C1] ? __pfx_uprobe_mmap+0x10/0x10 [ 174.908867][ C1] ? vma_complete+0x9e7/0xae0 [ 174.908886][ C1] ? vma_prepare+0x485/0x4b0 [ 174.908903][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 174.908934][ C1] __split_vma+0x8bd/0xa00 [ 174.908962][ C1] ? __pfx___split_vma+0x10/0x10 [ 174.908995][ C1] vms_gather_munmap_vmas+0x2ea/0x12f0 [ 174.909024][ C1] ? mtree_range_walk+0x6a7/0x840 [ 174.909054][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 174.909082][ C1] ? mas_find+0xa7d/0xd30 [ 174.909114][ C1] mmap_region+0x724/0x20c0 [ 174.909145][ C1] ? process_measurement+0x15b6/0x1a40 [ 174.909170][ C1] ? __pfx_mmap_region+0x10/0x10 [ 174.909193][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 174.909222][ C1] ? rcu_is_watching+0x15/0xb0 [ 174.909239][ C1] ? process_measurement+0x15c3/0x1a40 [ 174.909284][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 174.909314][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 174.909342][ C1] ? cap_mmap_addr+0xb0/0x100 [ 174.909369][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 174.909392][ C1] ? security_mmap_addr+0x71/0x270 [ 174.909419][ C1] ? shmem_mapping+0xd/0x50 [ 174.909444][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 174.909467][ C1] do_mmap+0xc45/0x10d0 [ 174.909497][ C1] ? __pfx_do_mmap+0x10/0x10 [ 174.909518][ C1] ? down_write_killable+0x178/0x230 [ 174.909543][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 174.909564][ C1] ? common_file_perm+0x1b5/0x230 [ 174.909600][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 174.909626][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 174.909649][ C1] ? __fget_files+0x2a/0x420 [ 174.909692][ C1] ? __fget_files+0x3a0/0x420 [ 174.909717][ C1] ? __fget_files+0x2a/0x420 [ 174.909744][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 174.909770][ C1] do_syscall_64+0xfa/0x3b0 [ 174.909787][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.909816][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.909835][ C1] ? clear_bhb_loop+0x60/0xb0 [ 174.909856][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.909874][ C1] RIP: 0033:0x7f9597c78242 [ 174.909891][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 174.909905][ C1] RSP: 002b:00007fff3aade128 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 174.909925][ C1] RAX: ffffffffffffffda RBX: 00007f9597b9a000 RCX: 00007f9597c78242 [ 174.909939][ C1] RDX: 0000000000000005 RSI: 0000000000086000 RDI: 00007f9597b9a000 [ 174.909951][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000010000 [ 174.909963][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff3aade178 [ 174.909975][ C1] R13: 00007f9597c4c0c0 R14: 00007fff3aade530 R15: 00000fffe755bc28 [ 174.909997][ C1] [ 174.910004][ C1] [ 175.493881][ C1] Allocated by task 6780: [ 175.498246][ C1] kasan_save_track+0x3e/0x80 [ 175.502929][ C1] __kasan_slab_alloc+0x6c/0x80 [ 175.507782][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 175.513274][ C1] xfrm_state_alloc+0x24/0x2f0 [ 175.518036][ C1] __find_acq_core+0x8a7/0x1c00 [ 175.522888][ C1] xfrm_find_acq+0x78/0xa0 [ 175.527312][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 175.532334][ C1] xfrm_user_rcv_msg+0x7a3/0xab0 [ 175.537300][ C1] netlink_rcv_skb+0x208/0x470 [ 175.542120][ C1] xfrm_netlink_rcv+0x79/0x90 [ 175.546803][ C1] netlink_unicast+0x82f/0x9e0 [ 175.551565][ C1] netlink_sendmsg+0x805/0xb30 [ 175.556327][ C1] __sock_sendmsg+0x219/0x270 [ 175.561010][ C1] ____sys_sendmsg+0x505/0x830 [ 175.565787][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 175.570471][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 175.575405][ C1] do_syscall_64+0xfa/0x3b0 [ 175.579907][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.585799][ C1] [ 175.588119][ C1] Freed by task 7769: [ 175.592127][ C1] kasan_save_track+0x3e/0x80 [ 175.596806][ C1] kasan_save_free_info+0x46/0x50 [ 175.601827][ C1] __kasan_slab_free+0x5b/0x80 [ 175.606589][ C1] kmem_cache_free+0x18f/0x400 [ 175.611374][ C1] xfrm_state_gc_task+0x52d/0x6b0 [ 175.616396][ C1] process_scheduled_works+0xae1/0x17b0 [ 175.621945][ C1] worker_thread+0x8a0/0xda0 [ 175.626528][ C1] kthread+0x70e/0x8a0 [ 175.630598][ C1] ret_from_fork+0x439/0x7d0 [ 175.635180][ C1] ret_from_fork_asm+0x1a/0x30 [ 175.639964][ C1] [ 175.642290][ C1] The buggy address belongs to the object at ffff888050e81980 [ 175.642290][ C1] which belongs to the cache xfrm_state of size 928 [ 175.656289][ C1] The buggy address is located 48 bytes inside of [ 175.656289][ C1] freed 928-byte region [ffff888050e81980, ffff888050e81d20) [ 175.670016][ C1] [ 175.672341][ C1] The buggy address belongs to the physical page: [ 175.678767][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888050e83b80 pfn:0x50e80 [ 175.688829][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 175.697328][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 175.704881][ C1] page_type: f5(slab) [ 175.708866][ C1] raw: 00fff00000000040 ffff888142a9fa00 dead000000000122 0000000000000000 [ 175.717534][ C1] raw: ffff888050e83b80 00000000800f000d 00000000f5000000 0000000000000000 [ 175.726116][ C1] head: 00fff00000000040 ffff888142a9fa00 dead000000000122 0000000000000000 [ 175.734784][ C1] head: ffff888050e83b80 00000000800f000d 00000000f5000000 0000000000000000 [ 175.743452][ C1] head: 00fff00000000002 ffffea000143a001 00000000ffffffff 00000000ffffffff [ 175.752126][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 175.760785][ C1] page dumped because: kasan: bad access detected [ 175.767231][ C1] page_owner tracks the page as allocated [ 175.772956][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6003, tgid 6002 (syz.0.8), ts 96153007871, free_ts 95889235077 [ 175.791817][ C1] post_alloc_hook+0x240/0x2a0 [ 175.796611][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 175.802163][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 175.807978][ C1] alloc_pages_mpol+0x232/0x4a0 [ 175.812829][ C1] allocate_slab+0x8a/0x370 [ 175.817327][ C1] ___slab_alloc+0xbeb/0x1420 [ 175.822002][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 175.827495][ C1] xfrm_state_alloc+0x24/0x2f0 [ 175.832297][ C1] pfkey_add+0x6e4/0x2e00 [ 175.836629][ C1] pfkey_sendmsg+0xbfe/0x1090 [ 175.841338][ C1] __sock_sendmsg+0x219/0x270 [ 175.846035][ C1] ____sys_sendmsg+0x505/0x830 [ 175.850820][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 175.855516][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 175.860459][ C1] do_syscall_64+0xfa/0x3b0 [ 175.864970][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.870870][ C1] page last free pid 5982 tgid 5982 stack trace: [ 175.877196][ C1] __free_pages_ok+0xa83/0xbe0 [ 175.881971][ C1] free_large_kmalloc+0x13a/0x1f0 [ 175.887015][ C1] free_netdev+0x148/0x700 [ 175.891438][ C1] netdev_run_todo+0xd0c/0xea0 [ 175.896470][ C1] tun_chr_close+0x13c/0x1c0 [ 175.901060][ C1] __fput+0x449/0xa70 [ 175.905044][ C1] task_work_run+0x1d1/0x260 [ 175.909635][ C1] exit_to_user_mode_loop+0xec/0x110 [ 175.914919][ C1] do_syscall_64+0x2bd/0x3b0 [ 175.919506][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.925395][ C1] [ 175.927713][ C1] Memory state around the buggy address: [ 175.933344][ C1] ffff888050e81880: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 175.941400][ C1] ffff888050e81900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 175.949452][ C1] >ffff888050e81980: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.957507][ C1] ^ [ 175.963132][ C1] ffff888050e81a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.971290][ C1] ffff888050e81a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.979872][ C1] ================================================================== [ 175.988097][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 175.995356][ C1] CPU: 1 UID: 0 PID: 8960 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 176.004501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.014665][ C1] Call Trace: [ 176.017962][ C1] [ 176.020831][ C1] dump_stack_lvl+0x99/0x250 [ 176.025450][ C1] ? __asan_memcpy+0x40/0x70 [ 176.030075][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.035304][ C1] ? __pfx__printk+0x10/0x10 [ 176.039949][ C1] vpanic+0x281/0x750 [ 176.043964][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 176.049193][ C1] ? __pfx_vpanic+0x10/0x10 [ 176.053727][ C1] ? irqentry_exit+0x74/0x90 [ 176.058357][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.063597][ C1] panic+0xb9/0xc0 [ 176.067343][ C1] ? __pfx_panic+0x10/0x10 [ 176.071791][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 176.077726][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 176.084108][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 176.089430][ C1] check_panic_on_warn+0x89/0xb0 [ 176.094404][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 176.099724][ C1] end_report+0x78/0x160 [ 176.104002][ C1] kasan_report+0x129/0x150 [ 176.108546][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 176.113871][ C1] __xfrm_state_delete+0x696/0xca0 [ 176.119025][ C1] xfrm_timer_handler+0x18f/0xa00 [ 176.124090][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 176.129671][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 176.135608][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.140842][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 176.146771][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 176.153121][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 176.158698][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 176.164289][ C1] __hrtimer_run_queues+0x529/0xc60 [ 176.169562][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 176.175316][ C1] ? read_tsc+0x9/0x20 [ 176.179421][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 176.185276][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 176.190410][ C1] handle_softirqs+0x283/0x870 [ 176.195208][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 176.200010][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 176.205342][ C1] __irq_exit_rcu+0xca/0x1f0 [ 176.209955][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 176.215180][ C1] irq_exit_rcu+0x9/0x30 [ 176.219440][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 176.225121][ C1] [ 176.228093][ C1] [ 176.231055][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.237062][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 176.243169][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 c7 fd 0b 48 89 de 5b e9 13 b0 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 30 9e 92 65 8b 15 88 82 [ 176.262888][ C1] RSP: 0018:ffffc9001aa67118 EFLAGS: 00000246 [ 176.268989][ C1] RAX: ffff8000c5520000 RBX: ffffffff8cbad583 RCX: ffff88802b545a00 [ 176.276996][ C1] RDX: 0000000000000000 RSI: ffff806a683aa000 RDI: ffff8000c5520000 [ 176.284995][ C1] RBP: ffffc9001aa672f0 R08: 0000000000000003 R09: 0000000000000004 [ 176.292989][ C1] R10: dffffc0000000000 R11: fffffbfff33fdd1c R12: 0000000000000001 [ 176.300996][ C1] R13: ffff8000c5520000 R14: ffffffffffffffff R15: ffffffff8cbad5e3 [ 176.309007][ C1] mt_validate+0x2b4f/0x4380 [ 176.313656][ C1] ? __pfx_mt_validate+0x10/0x10 [ 176.318626][ C1] ? trace_ma_write+0x87/0x1f0 [ 176.323512][ C1] ? uprobe_mmap+0x177/0x1020 [ 176.328229][ C1] validate_mm+0xb6/0x4b0 [ 176.332595][ C1] ? __pfx_validate_mm+0x10/0x10 [ 176.337558][ C1] ? __pfx_uprobe_mmap+0x10/0x10 [ 176.342522][ C1] ? vma_complete+0x9e7/0xae0 [ 176.347228][ C1] ? vma_prepare+0x485/0x4b0 [ 176.351847][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 176.357342][ C1] __split_vma+0x8bd/0xa00 [ 176.361793][ C1] ? __pfx___split_vma+0x10/0x10 [ 176.366777][ C1] vms_gather_munmap_vmas+0x2ea/0x12f0 [ 176.372281][ C1] ? mtree_range_walk+0x6a7/0x840 [ 176.377354][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 176.383284][ C1] ? mas_find+0xa7d/0xd30 [ 176.387737][ C1] mmap_region+0x724/0x20c0 [ 176.392291][ C1] ? process_measurement+0x15b6/0x1a40 [ 176.397779][ C1] ? __pfx_mmap_region+0x10/0x10 [ 176.402748][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 176.408413][ C1] ? rcu_is_watching+0x15/0xb0 [ 176.413202][ C1] ? process_measurement+0x15c3/0x1a40 [ 176.418714][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 176.424637][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 176.430829][ C1] ? cap_mmap_addr+0xb0/0x100 [ 176.435539][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 176.440424][ C1] ? security_mmap_addr+0x71/0x270 [ 176.445569][ C1] ? shmem_mapping+0xd/0x50 [ 176.450097][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 176.455585][ C1] do_mmap+0xc45/0x10d0 [ 176.459773][ C1] ? __pfx_do_mmap+0x10/0x10 [ 176.464393][ C1] ? down_write_killable+0x178/0x230 [ 176.469706][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 176.475382][ C1] ? common_file_perm+0x1b5/0x230 [ 176.480450][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 176.485074][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 176.490215][ C1] ? __fget_files+0x2a/0x420 [ 176.494854][ C1] ? __fget_files+0x3a0/0x420 [ 176.499572][ C1] ? __fget_files+0x2a/0x420 [ 176.504206][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 176.509013][ C1] do_syscall_64+0xfa/0x3b0 [ 176.513537][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.518776][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.524870][ C1] ? clear_bhb_loop+0x60/0xb0 [ 176.529587][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.535504][ C1] RIP: 0033:0x7f9597c78242 [ 176.539944][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 176.559574][ C1] RSP: 002b:00007fff3aade128 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 176.568020][ C1] RAX: ffffffffffffffda RBX: 00007f9597b9a000 RCX: 00007f9597c78242 [ 176.576020][ C1] RDX: 0000000000000005 RSI: 0000000000086000 RDI: 00007f9597b9a000 [ 176.584015][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000010000 [ 176.592014][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff3aade178 [ 176.600006][ C1] R13: 00007f9597c4c0c0 R14: 00007fff3aade530 R15: 00000fffe755bc28 [ 176.607993][ C1] [ 176.611156][ C1] Kernel Offset: disabled [ 176.615500][ C1] Rebooting in 86400 seconds..