last executing test programs: 1m35.272698647s ago: executing program 1 (id=6178): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024811) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000a000000dd0100000000000063010400000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) 1m34.959016193s ago: executing program 1 (id=6182): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0xc, 0x0, &(0x7f0000000680)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 1m34.783176755s ago: executing program 1 (id=6187): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x3, 0x0, 0x1}, 0x1e, 0x2, 0x0, 0x0, "7683e930e5eba1082f0357173b8ba7a52f847581fe8059926f1981ee7825033e8503f5850ac847ed64dba33a75ef34b531ea3888a3b52bf6a3612e640feac110"}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x1, 0x3, 0x35, @private2, @private2, 0x1, 0x8000, 0x7, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x20, 0x8, 0x9, 0xae, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x68, 0x0, 0x3, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x27, 0x83, [@loopback, @rand_addr=0x64010102, @empty, @multicast2, @rand_addr=0x64010102, @local, @multicast2, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x5, [@remote, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x29, 0xd8, 0x3, 0xaf, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x8, 0x100, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000980)={&(0x7f0000000140), 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x110, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8090}, 0x800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map=0x1, 0x4, 0x1, 0x7f, &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@map=r11, 0xffffffffffffffff, 0x1c, 0x201c, 0x0, @value, @void, @void, @void, r10}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000c40)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(r12, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0xe13d21b4390abd5d}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x84, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r13}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x10) read$rfkill(0xffffffffffffffff, &(0x7f0000000ec0), 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r1) sendmsg$NL80211_CMD_GET_MPP(r12, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, r14, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r15 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001100)={'ip6_vti0\x00', &(0x7f0000001080)={'syztnl1\x00', r7, 0x4, 0x4, 0x11, 0x6, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x6, 0x5}}) sendmsg$TCPDIAG_GETSOCK(r15, &(0x7f0000002500)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000024c0)={&(0x7f0000001140)={0x134c, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x2, 0x6, 0x5, 0x6, {0x4e21, 0x4e23, [0x5, 0x80], [0x1, 0xed1, 0x5de, 0x1a4], r16, [0x2, 0x2]}, 0x9c53, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xac, 0x1, "52cdbd53ab6b9694f69b4cd32091cad2d34930ab823a5094cee63486e190c0d19492d8ee209124fb8902e8ec5abfa35dd1b2919b223474a6511a89c56a06cb55cfbe908836521b0a91cc0eab73c95291f32340775d34a1f2f7707e3e3de17d62f2702bcf00bda752736c6e415bd8c913cf24c064e5b2819fdb8956f638418fd1011bf31e9b3fe1ae3683635a914918df928facbda73568353213b4cd286dab24cd6e81af3f5fa164"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "68f7975d23e3d8c1364fdffeb43081a3113f506fa61875"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "e45157f9933798da98ba8cb394770acd20a31f74ff9548b0941a45adb75b01c66433d4528479e508bca284f7100e6c9bb741f035c499db97ed57ae2dd276a05a0c8d90e6fe05cbaf21b82a25e86e4dae597149d96c28118dbd3fd633455d1d8d44e2b340c76be285f99a4585f5dddff3c2348cb2bf60114bd9523f65bf2c9838374362cf3016b6683aedc9c03973c959eeda19ba6fd0e79b5e7c72e5c17dae90fea3b3b92bec23cc0e408d80e3bde3bdcb30ffeb1d718ea6dbebc7ce3e0973dc835a7f323f4cca"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "8ee88994096d4a8248d86072f72df27cbaa8bcb055643ca3db6d37cb7342c287a69de16b63f631d2b81ffb6ca606f54170c7640afbdde040fafa71b167c07b1939f151a4bddc753ba4e861a3f5f8f6c2b61fbdc0ed18328066d3ff4b6d12967eb4dce32786394e49b90f334233706554663ac1d38461736f5558d924ceee47cf99c381bd7ed72306fa46d96cc501b74f9ee830d3e3c985cef6069cb629bdbf30dccafdef481712ea5cc86f60ba0c84ec76f409235076dcbdf37c8be0d0c4eaac6295445246a00b21fdd40a14a5835db6d5bf9d797fa4ec8db800931e99cc06b4a8b134718f64844dbdc412ec9f64890ae6a6d0178bd45cbccf0229c90f606e20589339468926d402fedd524d62b7f2dd9d9d93fd5e5bff3da68850bda79820eaed39e7fa91d2c62e13063d38881a9435f414de3d442c0900f67883e11f27a5d0cbc7be9d4b8aaee25bed180df0486eb29d9d4ce3edd5bb07ca51a609d95d2e28d66bede62d983cffeee7823fab0e771208c0bb943eef31e6a6dcf30b0469c045521b6b427695a0c3defc714eff1c78d79760a8d314786b5a9ed5de94f978952e596b08d4f357c91b16a79ab6fcd7741a32a32f31c49a9c8bd0648412e5b21d935811ac4a14863b75988b69e38ffe96614cbca1d1e22d9e10edadf5c23eca6ccc0383180fc25911149f46bed2f4cd1264d135f61725d02cef3043beac32255a67e9d96804a43d93bcce1bdc7c08751f9ab891ca7da85856ebb866173f1723f165a7f68b6e1718cbcf2542e7cc2f8c5a9d997d378bad4bfeb351e0157dc608fd5218b1e00f3c2f497a8e9d536fa9ee66ae43a74a181c7ecafbad73fdb4f53c19fd9a27315651385804e02ac39d37ccdae8d1921b424a6a3c186d26b3f6816d961db0ea2c1f8b6fc1e906a2499912f9ab300db625661f57d69bbd50add80e7b35b2c8e80466af8ab30f430078d48cef3b4c4e162bf6ec25d82fef16f307c9925529f715cab56b12e4559b04a7b7834a0783ce1ae430ab87f590cd72b037d2d6ce2f25ce7a20a905339956c61abac4f6190ab53457fcd94827071a3bfde890b3feee2fcf253e2e37bb88b8a0a479b9b712d05cf2fdb97b80fb87385afcad40f321822ffde3111db37a54bfc37bbcc375d9c62544700a1303a684d0b86080993640024fcdefc7ef3299bc7864cdb5e24f12e3f9e8c96be398ec197db86663cf180ebe427cedd43ff081c8d8ffc1606ce71ab69a2e2490b15075ff8c30e86b3557b7c722b88cad1511994f1faa5e3b1016a28a328e27704b9470b862898369c1b7c976f7cb5371f1ce3a3188d65d9e207d2dd34f15ccf23b6b917e60e9095231bb1711b83cfc598e2925c61771559e1540a55ee9b3aa09a49cf98b328e10ab2143905a9f395c5bc54c4bd48c3ec0af544aad658fcea18f981460d26e355a13335a247375bd084a53a2643eafb5f2f9bf04ce30925e00e9d9cbc38bec3cb2892bd64b6be1083c113fb6f59413a13d8babd6546e3fd1cec63ebcc46701b485b9872f41dd493d543364241845ca8f8b554eab9b123745e414971c22c9003610ffdb3cb7fcbd62ed6da97755ba345a346ed8efb2c7500cfa962d95dc3a2ff03fd8835d4dc1ac259c3ba87c209a4174fc17f78ff5504459433af813c5eb30342824440e69bb3c139e639f950ffe55b5f82c5728660d1d42e470f0bbcae7a5868a53da397ac7fa816b1d2a946f71a82486401e0ba4e9a4d37f47c3cb4292edca68d70bab5e554815d236796686ff2d7c2722a5cc739d11c49f7cb39be709243a16cf2a89fd764e943450194c24a4d2e609e7026ea6738aa0b3f5702bd15354a2bcbb8c152dc6465c146cfcbe215e9093f435d4335a1985c639e8983547c306c3d910617a06793cb9f178cc72551a2d1b6f4aafa139f611a13a2d7c8b2b3380c8771b094c9acae15c84134c53a4da6aa4afcab6ed0d13eeba1b68eda5ff8d1530087461fa71e2c4341d174aa7e99bfdaaad034d5d2372061d30af3e4e01f153a2f5964e3891441d3321336c91cf3d4ffde90a7457f263a4057e82fc8bae8db6bc19c74466e7a88a0b1623617184a2e766e6f63af5ef15f61e111c6ea093fca1918fbc98d5d3c6a2318194595c1b613d4b0678eeae3691e46f851ecae91ee889b0e6e9d96f436b696436914bedcd70df82d8374c575d4c8b1a8770bcabca848ddc383ba21a805faf87f9421f95f2e8c5aa40d1fc3173177af165b909f54954eca03f1579648df953e221ff35e409d402c7722d5b0fdf9647de49898c2c44c350882ea2a4d414afb41aeb8dcfe0cadae872c13720d87c2c28e2465edf0fdf91161d2ddba00159ee1c2bcb5b1fe339122f53bbb34bb668b0b493fa5cd40e0eeb50836434338f3b6db05a5194d35793cb80dff74341e94ac98a0248b94f8e5bcf735ffcc4472c53afc5917228f95146e3e8eb2bf2b6f72d37b484a244b93dabb393273f6a5488b69c3a925aba998e3bd5709ea9874b8d251720e66b79a81e484b9566704a87586972a482d325b3dae8749e81dd3d113f7c61ae4dd5264c15d473f76ad5b371c71f57cdf638b2042b1d73a9141d5747460325332fcfbd0e6128dfb32d824c7d5b87bc2c4d27de1f8ff576d014c2e5e2ec019ebef35ed49b1ded2e0e19979db758852d2a7c2e63d5b1d017aa597031114b489f50680f5cb9a1341f7da42e4d4d4e9fc3893c4e421c006d6f250a53010efb1bdeb55514649066a740d609631d2e5230a569a50bc6cf2a293c07bfcd13d56c864d0eeb87cd20ff8a1494f8fb018fdcb32b260e16940cf468c574232ab3b2543f4269e1fa60cdf9de5c13f0608cec27daf16bd29cedeba3d9a85e402a8dc877fbbcba6a4299089a7f8f776634f7bfddd2434b4119d80b785b97487f71e5a279bb0e782204cfb162689f30b74921a3f8e7076cc5713697d1b7bbdade6110a861dc1576df13a6539827bf0438d0b52c1a0da656b4c3281a29c2662bb9a671fab4ec6b2bb26bf2c83e787e26b6fd9c5426586a03f484a9c1698ecdb0e750e3f515a41148b2ecea0ea0355ef3e394134b91aaf72649ab2ff1ac8af9c9be762b7fc16519b4eff558386554590f6420cc659cf46ec0d6554a489a3aa9084937be2c0de87883b32f98f313ee79c5366271e8ea1c3a68fa7857adeada728755301bd90c09dc0e6c6cf5a3eb857fe3a1fecab50b435c6e343d1a44070c0eafcfa4ab4354d88e84662f70fbf98e292bc2745d1d04e5ac160bff16f09c66006e6fa976e10aa65c4694fa69666648cff74544b811f62881a0eb4bfe20f845508a5ba90019d0309c8b0e092b7343854be31949b5995ffd17a8d199ad358e6d985dadc01c4352322d8cc22d6c46627458cc9b032dc9642790eeffd71fcdb0b3160003f40fdbd18706b8d81bd1be96dc8538869bc2ab156c72088065f1162b13de73103bdb5a4eb6dd27f607b9901a8b3d264c0af486067d9266dccd15e82ddb256dd14903b8673ab3611fabf06736c849c29fe6ee17b23b13f4b2160449c42a99d3356773bc308a6ca3785632f9e2095717b6a37d6a78cf92195daf89f6115aaa8a36a30dc5d0eaf8b18299ce81eb48e21713ecd2fd73fa42338f2cfe9b253695e9f9d64acaa352f4979ed820167ab1faf86a7038539536cd6a5c28075dcf2cbcf221f8f60d513992639a4c18f8ff545941eae89628f3c29b6f28fbf4ce4cece38b0da7112d941bb882eb6aa247b51de5fe92a57ffa15957d6ea69a38e4a2f9bdd73d81a6a685729fb3f3ce8981354fe4ce4a259807c3d8f3cb2a0eb3a27652b66399974323882be3511b27b88a3dea171744c668f667f50d91ea1e21e25381b6f6ccbd04a87272a944d2ce965460ac02dc6b6e9e2911d23da8e6c86d59f60479311383db03bbc383c5e19d24a57f231d7d6848b2056628b1b64ea748de83dbd3158de1233ecf9284810fb5e7ee4a6b6a0eab0208a9ba3fabcf06cde168bc94502b4fd219e0e6eb7df563282011899ffbcb4b6abe35e6debaee10f6860af0ed385028864a455c71443ad752ccf2e24e0f5df1ebae0251ada7c7a0b5901f040e0428e5962ceb008246019f99f7ee5c7617a6006bc416124132c381015b3eaeb58c54a7088689a171dc12690f009f2c72f0021cf6929ccf06128bfef1ef81c786da40774a3f6838606402d45582f627c235d0ac4f30a2219fd3b4ebc95c46f8d548c4d76109ba289481cfbf57658357ac4e52faf98669d00260a81cf19b460776ac06d07a496fb1178b16c3b78703357b3c00ccd52ef1702ecb042bd3b350b85e962eb843a201bb434fa7bd08386369c0011f2082672abc61f8604f249d14ca70d93c58aebb70e36ea1ca7af73418310557ef113de9cc1bf9e02f0b6871e43c22723033bf26efbf5281324542f068144804eef4a6f0c314ef8aa1e96148de4d8cd84501feb17fec4a5f2a606e367b68e6261715b7939fe542b5d62e9d341d24f260107c4b35676807d9d19ca117d5f0a9adf6c5e05c1cc06edc383a716cd0cbe96411fb1204e4d66169add716eaeed620c7c4290e73322ad3cf8cfec923cfe20b4d4377be7cc5bed921be1f8d111164ded4da69575b1f50a6032769f83c087d15848bd4a0a00cdb6fb55377a573d096eb44f72c68820d47a5e3b524765afe56ecdfd59710f8b61c5480e72be35df03acf75dbf4203a09f6c8d53ac5deeb8ce420b7cedc252ada9c65a6ca2ee579fec1cc4c45aaf6d8cc4221168793e7502a1cab376b72ed41a5909fbfc1cc300df0085aa0db78e5c48d177008d0d98d217344e75e92d017e4bf5598719a57d04f9349b79b834809a76cbe981965f742d7f20fb81275e92f987a8b623818fe4eafbebd1fbeac7b3b801c4622f6e9c823ac08c329f9d67c1025b88e04a8b48b07644f1edb4755fdaa1555917d280a626736eefcda48ad5a55f973b471d56e25f6b78045fab14eae3bd48f06f09da3c07accbfc7f0337be3f0e1fc912cb86c366a97697a6d18a082673d6f13edfab44566273a57702bbc426bd1ba6daca7b80ba76d81c08bbc8b24c7b21a56ef096bb0872956c682944d3cfedb629d779894912b6243393273b1c8638efaddfc0ec3bcc92c80746ed21dbff3668ae4cd37d93e1aeb86a658ab0341a1deb2d35ba3ea947f80c54f9e88581f1be680d16717c6d812f18a3446077e143841a1214df9c0bef5e51a0323f3f432037a8bda6062945d2c5a08f867a823b3d2fbb3736b9243817033ece03050f16ba22a406fc7553b2cb88cc150c717ed7c6cd33aa818a69216d3e5b1dcf7204854af29019ff0a8897899e29ed522f25e64eef4deb66a47040c5914db73a60b2e99e4a33d96dfc23a45d750bc6874e6f85c3f0ca16a6e65f2dea33a6352de7f14b3864b13d07d9ad1ca2f54fd5b1e3554cab59dfc8e3d38a6812f76508d0ecf334aa18c71f377ae28f8c1998d349b5dfea4971e2b08a19f018ccd33e058bdbe4752686f696a93508569309ac36cb965ff864201ae2fc8835c5098194172852e42133a58fb075443cecdf270ba94c47a7d795925dd49a6a1dda5c49ed5abeb14e3a43f12de06c81827a637f3a6e650689eeb0bd0bdadf0e7f57cad5777b330d21b11f5788b52332c5f738e613c46800bc9d7302f42b078982ec94d2bd0a8af5ae805612c28d319b2fd6265672f69787b6852fc1be89ab956a0cb4f8cf257e797db8dfc688041ee834652bb17d1fb325286691a00e9608cc98a5df1df13e5624b630881f89aa51323f0fa42f2593f99347dbec8dbdc91f987"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "a3cb8faac329526e63ac5d9d38afbc4a3e5c7e6f1e309362911b6ea3c481607e671640ee8693af58c00ed66c2436ad4d715e40ae90d88257654796eb906bf1339876a76a58fd6e5ad7808e03bd1ad9cd2e105209c654aeea10bff455f749373d2912b67c54bbc355e13b33080707d7081e9ddc473239efdb158bd5f1d3b86814b96d28915195b48ae4ca26106833fdcf5e3313bcf0a74be7f61dc1dff453b0dbcfd92ae4beb000a9c83e7140bad86016b02e6e2047024d76ccda71f348806a525d6cae6ccc87f648fc4db3cc26588559ff0b4bae88b0dc"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "a7f8014b24be28945a70b1b5c8f542e9b330dbfd50c7cfdbbba0b34ca539c4e0f3cf515fe2882ce7ca7bcd398200961b9ff374ca02307e9fa2e0bdb567b8b7b1142362566df562125cc77324cb6046f381ead565607380fb27fe1ebdb3ec79a688898bcd8511c7faa4a900f23611c5408ec61068ed405d08548cab937d01bd790da8e79d625a"}]}, 0x134c}, 0x1, 0x0, 0x0, 0x50}, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002540)=@ccm_128={{0x304}, "2bc4ebb450afe875", "83099bf9a64ba6e435df90834c2b94d2", "09158ef4", "ef66bbbafb57b93c"}, 0x28) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x74, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x74}}, 0x40000) setsockopt$SO_BINDTODEVICE_wg(r12, 0x1, 0x19, &(0x7f00000026c0)='wg0\x00', 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r15, 0xc0385868, &(0x7f0000002800)={r0, &(0x7f0000002700)='.)]%\\\x00', 0x20002, &(0x7f0000002740)={@align=0xfffffffffffeffff, {0x6, 0x6, 0x2, 0x2}}, 0x20, &(0x7f0000002780)={@_ha_fsid}, &(0x7f00000027c0)=0x5}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r17, 0x6, 0x14, &(0x7f0000002840)=0x1, 0x4) 1m34.619368885s ago: executing program 1 (id=6191): unshare(0x22020400) socket(0x840000000002, 0x3, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x4, 0x10000, 0x4}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004508004000000000000690780a010100ac14144200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0000000907800001d04f9891312c140c2ba3d3f0974fd90e4ff2a2b031e0000"], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000007000000020000060400020004000000000400000b000000060000000000615f2e5f2e2e00a9fd0e15eba6c957ddda5fcfb4048c49b37fa357af259df6eb5a7d981bbab8656e3bdeef90e5d07d2ae6226a9eb0e365378bccec72739d106293154881648934be95acfe07e3276d0522a2eec470daf13b6387d8bd2688177a71c30920e6594eaf6a5329b80cb79a9010e6eb0f222542129cce26caf6034b2d6ac29c35069e0a0c83475e6a"], 0x0, 0x3d, 0x0, 0x9, 0x6}, 0x28) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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") 1m34.322050986s ago: executing program 1 (id=6193): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000640)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async) write$nci(r1, 0x0, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6008129c1c"], 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000200"], 0x0, 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x24000000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, 0x0, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r8, 0x400454cd, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m34.140244982s ago: executing program 1 (id=6196): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000480)={@private1}, &(0x7f00000004c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0)=0x10) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x194, 0x24, 0xd0f, 0x8000000, 0x0, {0x60, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1c, 0x7, 0x5, 0x5, 0x1, 0x2, 0x4, 0x6}}, {0xfffffffffffffe12, 0x2, [0x9, 0xf9c0, 0xfbff, 0x10, 0xa, 0xd]}}, {{0x1c, 0x1, {0xf, 0xf9, 0x101, 0x8, 0x0, 0x4000000, 0x5, 0x7}}, {0x12, 0x2, [0x101, 0xb, 0x9, 0x0, 0xb, 0x81, 0xf8]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2, 0x7, 0x2, 0x4, 0x12, 0x1}}, {0x6, 0x2, [0x82]}}, {{0x1c, 0x1, {0x6, 0x5, 0x7, 0x3, 0x0, 0xff, 0x7, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x4, 0x25, 0x6, 0x9, 0x3, 0x8, 0x7b3c, 0x5}}, {0xe, 0x2, [0x9, 0x800, 0xfff2, 0x76, 0x9]}}, {{0x1c, 0x1, {0x7, 0x8, 0x4, 0x8, 0x1, 0xfff, 0xaa, 0x6}}, {0x10, 0x2, [0x2, 0x95e, 0x5597, 0x7, 0x0, 0xfff]}}, {{0x1c, 0x1, {0x0, 0x5, 0x5, 0x101, 0x1, 0x12, 0x100, 0x4}}, {0xc, 0x2, [0x5, 0x77c0, 0x1, 0x6]}}, {{0x1c, 0x1, {0x6, 0x0, 0x9, 0x629, 0x2, 0x200, 0x8, 0x3}}, {0xa}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0xfd, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x194}}, 0x0) 1m19.024639723s ago: executing program 32 (id=6196): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000480)={@private1}, &(0x7f00000004c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0)=0x10) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x194, 0x24, 0xd0f, 0x8000000, 0x0, {0x60, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1c, 0x7, 0x5, 0x5, 0x1, 0x2, 0x4, 0x6}}, {0xfffffffffffffe12, 0x2, [0x9, 0xf9c0, 0xfbff, 0x10, 0xa, 0xd]}}, {{0x1c, 0x1, {0xf, 0xf9, 0x101, 0x8, 0x0, 0x4000000, 0x5, 0x7}}, {0x12, 0x2, [0x101, 0xb, 0x9, 0x0, 0xb, 0x81, 0xf8]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2, 0x7, 0x2, 0x4, 0x12, 0x1}}, {0x6, 0x2, [0x82]}}, {{0x1c, 0x1, {0x6, 0x5, 0x7, 0x3, 0x0, 0xff, 0x7, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x4, 0x25, 0x6, 0x9, 0x3, 0x8, 0x7b3c, 0x5}}, {0xe, 0x2, [0x9, 0x800, 0xfff2, 0x76, 0x9]}}, {{0x1c, 0x1, {0x7, 0x8, 0x4, 0x8, 0x1, 0xfff, 0xaa, 0x6}}, {0x10, 0x2, [0x2, 0x95e, 0x5597, 0x7, 0x0, 0xfff]}}, {{0x1c, 0x1, {0x0, 0x5, 0x5, 0x101, 0x1, 0x12, 0x100, 0x4}}, {0xc, 0x2, [0x5, 0x77c0, 0x1, 0x6]}}, {{0x1c, 0x1, {0x6, 0x0, 0x9, 0x629, 0x2, 0x200, 0x8, 0x3}}, {0xa}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0xfd, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x194}}, 0x0) 3.016689312s ago: executing program 3 (id=7234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000003c0)=r3) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r7 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.578634025s ago: executing program 3 (id=7241): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0xbf6, 0x6, {{0x21, 0x4, 0x0, 0x7, 0x84, 0x66, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0xc, 0x93, 0x0, 0x5, [0x9, 0x8]}, @cipso={0x86, 0x23, 0x3, [{0x2, 0x6, "35d48503"}, {0x7, 0xa, "e92a0afcbef48e52"}, {0x0, 0xa, "1b80c3f5044b81ff"}, {0x5, 0x3, "04"}]}, @cipso={0x86, 0x9, 0x3, [{0x6, 0x3, '\a'}]}, @timestamp_addr={0x44, 0x1c, 0x31, 0x1, 0x2, [{@multicast2, 0x1000}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x6a17a0750d5ddaba, 0x11, "ebd34ed7c7b2f90a55936cb5e64496"}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x112, 0x112, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x40}}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x8001}], "6da8"}, @struct={0x5, 0x6, 0x0, 0x4, 0x1, 0x9, [{0x5, 0x4, 0x420}, {0x8, 0x3, 0xca}, {0x8, 0x1, 0x3}, {0xb, 0x4, 0x6}, {0x3, 0x0, 0x3}, {0xf, 0x5, 0x1ff}]}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0xa}, @fwd={0x9}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x5, [{0xb, 0x0, 0x4}]}, @struct={0x6, 0x3, 0x0, 0x4, 0x0, 0x4, [{0xc, 0x4, 0x80000000}, {0x1, 0x2, 0x37}, {0x6, 0x5, 0x40}]}]}, {0x0, [0x2e]}}, &(0x7f0000000680)=""/55, 0x12f, 0x37, 0x0, 0x400, 0x10000}, 0x28) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00', 0x5}, 0x1c) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008150}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r11, 0x10c, 0x7, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r6) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r12, 0xb01, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r13, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xd75a4e0d1c58079f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb46e7e0c340bc1a5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r6) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x104, r14, 0x1100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x5770d985becc4ed6) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0xc, &(0x7f00000011c0)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @generic={0x1, 0x1, 0xe, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x9, 0x3, 0xffffffffffffffc4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @generic={0x2, 0xa, 0x3, 0x1, 0xa}], &(0x7f0000001240)='GPL\x00', 0x8, 0x1000, &(0x7f0000001280)=""/4096, 0x40f00, 0xd, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002280)={0x2, 0x2, 0xfffffffe, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000022c0)=[{0x3, 0x1, 0xe, 0x4}, {0x3, 0x1, 0x2, 0xb}, {0x4, 0x2, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x4, 0x7}, {0x5, 0x2, 0xe}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002400)={r15, 0xffffffffffffffff, 0x17, 0x0, @val=@netfilter={0x7, 0x1, 0x1, 0x1}}, 0x20) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000002440)={@empty, r2}, 0x14) 2.128615561s ago: executing program 4 (id=7243): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000801}, 0x880) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000005200030d26bd7000fbdbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) 1.984365632s ago: executing program 3 (id=7246): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x18000000}, 0x78) 1.837119163s ago: executing program 3 (id=7249): socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa10000000000"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="04", @ANYRES16=r6, @ANYBLOB="000826bd7000fedbdf25010000000c009900070000007f000000"], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x40004) (async, rerun: 64) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x240080d0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000000000000095000900"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.818211914s ago: executing program 4 (id=7252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000061102c0000000000d4000000100000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.677101912s ago: executing program 4 (id=7254): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r1, 0x25, 0x0, @val=@netfilter={0x7, 0x1, 0xf, 0x1}}, 0x6c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e13808ca72381f41e5fff9cf6b7931c9b4"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@remote, 0x28}) 1.67297324s ago: executing program 3 (id=7255): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {0x3}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c051}, 0x40004) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) readv(r5, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r4, &(0x7f0000000140)=@abs, 0x6e) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbc7000ffdbdf250c000000180001801400020076657468315f746f5f687372000000000800038004000381"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff}, 0x1c) bind$l2tp6(r7, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 1.473159724s ago: executing program 0 (id=7257): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0xbf6, 0x6, {{0x21, 0x4, 0x0, 0x7, 0x84, 0x66, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0xc, 0x93, 0x0, 0x5, [0x9, 0x8]}, @cipso={0x86, 0x23, 0x3, [{0x2, 0x6, "35d48503"}, {0x7, 0xa, "e92a0afcbef48e52"}, {0x0, 0xa, "1b80c3f5044b81ff"}, {0x5, 0x3, "04"}]}, @cipso={0x86, 0x9, 0x3, [{0x6, 0x3, '\a'}]}, @timestamp_addr={0x44, 0x1c, 0x31, 0x1, 0x2, [{@multicast2, 0x1000}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x6a17a0750d5ddaba, 0x11, "ebd34ed7c7b2f90a55936cb5e64496"}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x112, 0x112, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x40}}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x8001}], "6da8"}, @struct={0x5, 0x6, 0x0, 0x4, 0x1, 0x9, [{0x5, 0x4, 0x420}, {0x8, 0x3, 0xca}, {0x8, 0x1, 0x3}, {0xb, 0x4, 0x6}, {0x3, 0x0, 0x3}, {0xf, 0x5, 0x1ff}]}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0xa}, @fwd={0x9}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x5, [{0xb, 0x0, 0x4}]}, @struct={0x6, 0x3, 0x0, 0x4, 0x0, 0x4, [{0xc, 0x4, 0x80000000}, {0x1, 0x2, 0x37}, {0x6, 0x5, 0x40}]}]}, {0x0, [0x2e]}}, &(0x7f0000000680)=""/55, 0x12f, 0x37, 0x0, 0x400, 0x10000}, 0x28) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00', 0x5}, 0x1c) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008150}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r11, 0x10c, 0x7, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r6) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r12, 0xb01, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r13, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xd75a4e0d1c58079f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb46e7e0c340bc1a5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r6) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x104, r14, 0x1100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x5770d985becc4ed6) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0xc, &(0x7f00000011c0)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @generic={0x1, 0x1, 0xe, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x9, 0x3, 0xffffffffffffffc4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @generic={0x2, 0xa, 0x3, 0x1, 0xa}], &(0x7f0000001240)='GPL\x00', 0x8, 0x1000, &(0x7f0000001280)=""/4096, 0x40f00, 0xd, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002280)={0x2, 0x2, 0xfffffffe, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000022c0)=[{0x3, 0x1, 0xe, 0x4}, {0x3, 0x1, 0x2, 0xb}, {0x4, 0x2, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x4, 0x7}, {0x5, 0x2, 0xe}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002400)={r15, 0xffffffffffffffff, 0x17, 0x0, @val=@netfilter={0x7, 0x1, 0x1, 0x1}}, 0x20) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000002440)={@empty, r2}, 0x14) 1.46262061s ago: executing program 4 (id=7258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006112a40000000000950000000000000093bcc239e1611493e05a5ca8000000005bd6b2acfa4266140dbf62fc9cad70c8473fcce00af3b297ee85307507f5b0ee2979184bec04bf762a754ef4e172877de1f0f41753363dfa7a1aaefbab2eda907f1ee8c3c8ca16a8b01ae5f9b7645686499216f75d57"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfa) sendto$inet6(r1, 0x0, 0x1e, 0x8840, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x1}, 0x1c) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071121200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x1b30, 0x4) (async) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r4], 0xb8}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.226211708s ago: executing program 0 (id=7261): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000040)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x4, 0x6, 0x2, 0xfffffffffffffffe, 0x4}, @map_fd={0x18, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x80000000, 0x92, &(0x7f0000000140)=""/146, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xd, 0x8, 0x3ff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x3, 0x0, 0x7}, {0x3, 0x2, 0xe, 0xa}, {0x4, 0x2, 0x0, 0x6}, {0x0, 0x4, 0xb, 0xb}, {0x0, 0x5, 0xf, 0xb}, {0x3, 0x5, 0xc, 0xb}, {0x5, 0x5, 0xf, 0x4}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xffff0000, 0x91, {{0x2e, 0x4, 0x0, 0x1, 0xb8, 0x64, 0x0, 0xe, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x3b, 0x0, 0x2, [0x5, 0x81d3, 0x0, 0x4, 0x8, 0x0]}, @rr={0x7, 0xf, 0x1a, [@local, @broadcast, @empty]}, @ssrr={0x89, 0xf, 0xa1, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast]}, @rr={0x7, 0x7, 0x6e, [@loopback]}, @rr={0x7, 0xf, 0x49, [@loopback, @local, @loopback]}, @generic={0x88, 0x10, "404025ea9f2345a52a6926120513"}, @lsrr={0x83, 0x1b, 0x20, [@remote, @broadcast, @multicast1, @remote, @private=0xa010101, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x6, 0x0, 0x1, [0x30]}, @timestamp={0x44, 0x20, 0x85, 0x0, 0x4, [0x4, 0x3, 0x2, 0x6, 0xffffff7f, 0x6079, 0x7]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf0, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008000}, 0x891) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d00)={{r0, &(0x7f0000000800)='bond_slave_0\x00', 0x2, &(0x7f0000000840)={@_ha_fsid={[0x9, 0x6]}, {0x8001, 0x773a, 0x7, 0x2}}, 0x0, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x1}, 0x6, &(0x7f0000000c40)=[{0x3, 0x0, &(0x7f0000000900)='ethtool\x00', &(0x7f0000000940)="52f356adffdc2b7f861a492282824940624b0c85a8bd319c89c117df08af97c11f3872a3e8cd6fbf5958c03bf9e547a2f3cd8583099b7b2920bdd5fb0116cf1c356480a6690a5f87200472676e3dbf6aa29bb6d439429f090d4bd0fe219fd48fc6dd187d7ae00c7f0ab4d30f062534edd9e6", 0x72, 0x40}, {0x3, 0xb0a, &(0x7f00000009c0)='ipvlan0\x00', &(0x7f0000000a00)="a966749cedd2bac4d0c248d16d72da147d875ec918f6a224c30621af9dc3dbfa5b4d6d9122a4c10acc", 0x29}, {0x2, 0xe0d7, &(0x7f0000000a40)='&&^\x00', &(0x7f0000000a80), 0x0, 0x30}, {0x3, 0x6, &(0x7f0000000ac0)=']\x00', &(0x7f0000000b00)="87d14aad1ba0b6950a16357f39a718c05c49c06bc95eb248d61101a429efafdc40ed3f02161eaa60ef4ceca95b4676415df0dbe9997f057a602873", 0x3b, 0x20}, {0x0, 0x1, &(0x7f0000000b40)='nr0\x00', &(0x7f0000000b80)="a0780f190aaf7c06ec671c5e6f6a1d11770caa", 0x13, 0x10}, {0x3, 0xffff, &(0x7f0000000bc0)='veth0_to_bond\x00', &(0x7f0000000c00)="c97e779c2fda45f37fdcddc3105c1db89361a0dd45695f85cf9f193cacd73246dac6c5", 0x23, 0x2}]}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000d80)={r6, 0x0, 0x0, 0xa, 0x5, 0xf}) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000dc0)={0x0, @in6={{0xa, 0x4e22, 0x4, @empty, 0x5}}, [0x0, 0x2, 0xfffffffffffffbff, 0x1, 0xfc, 0x3, 0x1, 0xc, 0x9, 0xb, 0xd04d, 0x8000000000000001, 0x1, 0x6, 0xfffffffffffffffa]}, &(0x7f0000000ec0)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000f00)={r8, 0xfff}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f80)={'nr0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x5201010}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd29, 0x25dfdbfb, {0x7, r9}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24000004}, 0x81) unshare(0x8020000) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000001080)={r8, 0x80000000, 0x3, 0x7f, 0xfff, 0x100, 0xc70, 0x6, {r8, @in6={{0xa, 0x4e24, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x0, 0x40, 0xff, 0x6, 0x2}}, &(0x7f0000001140)=0xb0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001180)={r6}, 0x8) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f00000011c0)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x6, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e21, @remote}}]}, 0x390) unshare(0x10000000) recvmsg$can_j1939(r6, &(0x7f0000001c40)={&(0x7f0000001580)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001600)=""/105, 0x69}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/246, 0xf6}, {&(0x7f0000001840)=""/5, 0x5}, {&(0x7f0000001880)=""/208, 0xd0}, {&(0x7f0000001980)=""/250, 0xfa}, {&(0x7f0000001a80)=""/74, 0x4a}], 0x7, &(0x7f0000001b80)=""/172, 0xac}, 0x140) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000001c80)={r11, 0x6}, &(0x7f0000001cc0)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003000)={r12, 0x20, &(0x7f0000002fc0)={&(0x7f0000001f40)=""/68, 0x44, 0x0, &(0x7f0000001fc0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000030c0)={0xb, 0x17, &(0x7f0000001d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3db9, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8cc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @ldst={0x0, 0x0, 0x6, 0x9, 0x5, 0xfffffffffffffff4, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}]}, &(0x7f0000001dc0)='syzkaller\x00', 0x3, 0x82, &(0x7f0000001e00)=""/130, 0x41100, 0x7a, '\x00', r3, @fallback=0x2d, r6, 0x8, &(0x7f0000001ec0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001f00)={0x2, 0xa, 0x0, 0xa1b}, 0x10, r13, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000003040)=[{0x3, 0x1, 0x7, 0x7}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x2, 0x7, 0x2}, {0x3, 0x2, 0x1, 0xb}, {0x0, 0x4, 0x0, 0x6}], 0x10, 0x4}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000003200)={0x2, 0x100000000, 0x5b, &(0x7f0000003180)=""/91}) pipe(&(0x7f0000003240)) unshare(0x0) 1.11266446s ago: executing program 5 (id=7262): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x24, 0x107, 0x70bd2e, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendto(r4, &(0x7f0000000200)="dba4cee999afc2f7e0d10c67665a4608461b8dd236d9d88b8f6b6da39dcdcc004909000000000500ef726d19b7b66ba2468b5ebbf525", 0x36, 0xc801, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x3, @empty, 'bond_slave_1\x00'}}, 0x80) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x80010) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000005280)) socket$nl_route(0x10, 0x3, 0x0) 1.099136233s ago: executing program 2 (id=7263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0x20, 0x84}, {@in6=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x3, 0x80000000}, {0x0, 0x0, 0x2000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'cbc(cast5)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000802}, 0x40040) 1.094156942s ago: executing program 4 (id=7264): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x8, 0x289, 0xe3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 991.256957ms ago: executing program 5 (id=7265): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f00000008c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x93, 0x5, 0x37, 0x6}]}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x6, 0x2, 0x12, {0xa, 0x0, 0x0, @loopback, 0xfffff43f}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010000000000ffdbdf25e00000020000000000000000000000000000000000000000010000000000000000000000000400000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff000000000000000000100000000000000000000000000002000000000000000000080000b06b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000020000000000000000000000000000000000000000200000000000003ffffffffffffffff0000000000000000000000000000000000000000020000000000000000000000ffffffffffffffff07000000000000000000"], 0xb8}}, 0x10) 808.745756ms ago: executing program 5 (id=7266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0030005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffff7f000000000000000010000000fbffffffffffffff00000000000000000000f981d745355e841b000000000002000000000000000000000000c06b6e0000000000000000008a04f96a659c9731ae54df0ac08df874cef35a25fc38fb1645be7b264dce47e581e1e44eaa018449ba0642b8e4f634034ced3822187499a3b4cae04bc7ac10562cc3049ab92717430d5687c004f709e8e60ea16a034ff8ed548e25cc7042517cafb5d6121db7d481fd387d2504b821"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000680)=""/24, 0x18}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x4, 0x0, {{0x12, 0x4, 0x2, 0x7, 0x48, 0x62, 0x0, 0x8, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x1c, 0xb7, 0x1, 0x5, [{@loopback, 0x3}, {@local}, {@remote, 0x8}]}, @timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x3, [{@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="56dcc33f10000100000000c3000000000000000a380b0000060a09040000000000000000020000000c00034000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x60}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x3ff, 0xffff, 0x4, 0xfe00}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1b4, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x10) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$inet_udp(0x2, 0x2, 0x0) 770.9831ms ago: executing program 0 (id=7267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f4}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x7, @private2}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x25bd33839f9e4759}, 0x20000000) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000001e308bba0100000000019f2b"], 0xf8}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000001000000000000000300000018130000", @ANYRES32, @ANYBLOB="0009000000abd4fbfc"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000012000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 721.817561ms ago: executing program 4 (id=7268): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) accept(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="25cafb74c7369bc99d7a472e0c660ecef97808251aec40318b37553b66063a56a5d36789026207b8e64b", 0x2a}, {&(0x7f0000000200)="3c9cc1d361db72", 0x7}], 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101380, 0x0) 617.108064ms ago: executing program 3 (id=7269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040c000b40000000000000000908000540000000020900020073797a310000000008000a40fffffffc08000840642b20de0c000b400000000000000006f81800000c0a010100000000000000000a0000060900020073797a3100000000c41803800c010080c30006400c71ee67b51b3e3b5c3dd9315f3dc3817d6be60acef1c0490c8fb14f64ff2cd3bf31c23b6ab8adc86f1f0e82a9b928edc1d085ccea6f580e6aed09b8d64e365d1b3f08a66ec8706a6f2e14a4cf2af0e8a41f963527a3818592d21e94f98aa12c87b22197654ab8977be88564ab849e7ebcad2b92986ecee5727c3ea745a5ea06e3c48b6d7645ce00c1ab8ba452a8ada4070dbc1448217b9c5532cfb16ae82abd4f0aacb15dfd11ccba695623bcc0b421bcd55cf4970099e2e93f25431e75dd000c000540000000000000000038000b80340001800a0001006d61746368000000240002800a0001007265616c6d00000008000240000000000b000100706f6c6963790000680100800c00044000000000000000068c000a80180002800900020073797a300000000008000340000000020c00028008000180fffffffc640001007a873b126fd8506c2e7b167660b70a8426422cfca52817838bafc7da985bbb0f8bcb62cebdfd17477982e83532c088e3a3a8bc105a6c9bc5c0a980866e9d58cc14a156ad7f5d7c847e7ea47d890b7a3685abe51d647f64a5b40fc8e32994a97ac80002803c00028008000180fffffffe08000340000000020900020073797a310000000008000180000000000900020073797a320000000008000180fffffffb1c00028008000180fffffffe080003400000000408000180fffffffb2000028008000180fffffffd08000340000000040900020073797a30000000000c00028008000180fffffffd2800028008000180ffffffff08000340000000030900020073797a320000000008000180ffffffff180002800900020073797a3000000000080003400000000304000a808c020080c8000640b403ed18f5a621283dfee2e4184e339dfb03832bfdf155a727bdd5ea623c30ade184ab5164ae4b47e4ee3273553c72010e5fddfc8ab3af6193e938278d6bb6edcab21cb94ecc395842eaadbe1fe8c8fdb7580c618deed129ecf109ea32e4f127635cf27362952cabf9ef41d3f195feb41ff18755ca997bc03b57a044159dd38ca73216628ad70f8fcddcccc22584ec4093b0fc6ee330fe4d768ef63f4d12a54237dc5670ff331bfd1905272fa5a208f249c81617972d494c3ad2c5c0c310189f3ff2067204010280ff000100b24c27fef95857c14b9ff93f45393d7c0c8a072f1d31b341ab9467dfbbce65dabb5e98509155f824107397e134601d84cb9e142d0e1a72e7025b399434cf164d4d2f4d956670e5bda0456984b1cd567a607ca98c3bdad0483be00fb522aef8e85a3a8d9ddb5d9a22b21bb9cf6d261a2f197e54f68dbd26b895e66fbeec5f4c06e48b82fe674d9b51eb0e551cfceba7be198b838ebd61d893d02b479d3e8e47b669906075a6e10070fc6e106230a5d55e3871f9a4692eba6a7f5f43f6a0547a1ef14b9138720465a3933cab32cc218d86767e6c1a5c0c9acbaad7f54cd5db2e0811e17c77937db7397b12c8c086557bd4a9f51575da20d60267c5d0000c00054000000000ffffffff0900090073797a320000000094000b80540001800b000100736f636b6574000044000280080001400000000308000240000000090800030000000740080003000000000108000300000000ba0800024000000017080002400000000a08000300000000b42c0001800b00010072656a65637400001c000280080001400000000308000140000000010800014000000000100001800b0001006e756d67656e000006000640336400000800034000000002b0130080e0100280180002800900020073797a32000000000800034000000001bd0001007b00e23ddec661ec0209dfd486f11acfa7bdc2afc7296d69a7aa34676176a19ce3860b89bedd8b8429351bd7e2ff23f0060c583aae9a2fab4a8e21e0493318ab03d244f5b0277f30f7df8dd8b241df11ccf46a751d4e5f40947b3567c89ec87e5bb4513cd3d4feff8fc600835dab58107c463b8c7c768bd9a5ceec5a3380db7f665ef126345d712151aad84ea485dd799b166282579d2b74e37b32334db9e12f93edd1ce33d073bdbbf7bbe66aee4eb22177bec991e451178700000004100100732ff3121b1677f1b31a4d19efea339a6e9e03c2694b3dbeeb12ee9382c1e145c43bba1b6e981255b584ad4afa2da101e2bb6edb0ac075658352b5317ac298fad8dbb1e681383830176110b6a5a6016c9044f6721bc7ef8cc885eb2ac05fbb6cb3d182ea89e3ae940cf41aed214112f1fa1f272ac583075edc0da873ccc87594b29d4bce10d647a1435c7851f0643f8b632242061a7e6d40aea673f877349ac600dad41c8288d1c4404104874899100c10c2acf41889ae372ad2f62557863b6c88d1ac807f6d83b6cfe9705807c0da38600fd2193495bb9c698cf89d58e6cdd93179d2b14f1cafae6e475841fb41f247ff7ab226fdfa15cfb7c6a42be9ed3ead144bf80b9fd29711087cdbd248d5411e3de882dd42a4dfa780251c4153041f726ec8ef84722b578e293b6c7cf96ce5a2fb803c9627d41021c802ba8b3bef8c968b390fc851ae109ea15ca852d5481c897e6562986c2673a2bc5b5a0c60600ab207cd87dfd17667ed17393cb70a2649d0c7cb624b27c9378b221968b52e88eaf3e60ef5d6f114a16ee692738d1c2550a82575674aa5947e35a669156360836708c1e44c11a2503c9dd6999ccc25955b995e3aa98e24a360334111eca3c39eba081fa4e45c2210909f2d0ef039399e6cc1defd8fd3b8a963d885f1579ec2c819f1f92b3427d213c03456fc6561eed8eaacc945da12e79611a2bf114b4da130490eba5173d9b22a9cfd04a456ab40d426868fcec2c2e45fcdb6d9d43ddfac22ec8339c9b2d09a58aedff0ae2d921c0ef16cd45c8fd338cbdd06df5ab4c6ca8be3f711e8681dd2c6482ed0e4d6cf13eeabd31eed559b1aff442e006182fa2dcd178fb872787eaee31826bc09744af694fa78500b90f12a0e3453ff05cdbe79eb6c0e0c82e6d0e3391eed0fcf6363e3cf89cdaf55ea0096677a25c19cc3ed4fb4202984d75ce983dec49596b61fbb0a62eff84db75767d891dc0423c2c35c2be1010f6ae0243371d3386c275bfe0ee5d68fb52846cfaadf2a6f6dacd582bc01af321f5f29cb9faa004aa635fe43480301547c133b324ea63f536edbc9f4dd95899feb879e625c9bb95a52e3c49894e7b23c5ad067458c636162c7d0fac9ad327c41ae583b4f413067159da0492c45a0875a4d930ce3e66655f4176ce84c8579e9e822e5a60edff0e87a4c4e379cb007bcd2e271c30e6617e89600f4750fbfbd519bc01e16f9f46db2114dabdc33cacf6eeb55783b4fba228d8a984cd84bc84f160669414090021c829c5e8e6c81c62b5f8e688e48180da5f35be7f0c95b9e526f661507be1d3baea7051b8269ee99366c3e9f8fe66fc80ff78080f1f0c2801b1414f7c5d59628dd407ff33e5f7ace8375b1c9dacc2b4bfca95e5a8590112d96d0ca75c41e1dc1be819955ff1f639fe252575795c67471332935f0104a61a4cb6b0915615f4dd49fe2dd2a0877951a72f022fd25312c8600fbec9c63d0675c32a2ba5cffb5c3689df4018fd6c034034b9e3d20ace70f08eb93409b8ef7e8ee0eb9785478c734b5fa268a4b13d14a3b5e6396b168c0b9f575018a395d99853de051cb8d34e59cc191b3e69aa54a204f94e4d82b8fe0d9dd533b69ea22e9bce0ecbcf1251e2a0be913d06d7b47796b67d74082dbc5d113c9cef9887cb843334b520e579f50f765ebd4ed212ccbc6996e8dfe4285035d5a383bf3d6067c04641b664dfcf71107641dac271e3d89663bb914168d650255c6c13712937ff80b1ef3b9f084bd4bc09c0e851a966d29e8f3f4fd209e79caae1eb42838a75af1c20db254037bdc2ef1aff84ff8bfcca730066b07ba6357cdb8c726657be700ecccd4c1fb74008cde4a649e59386713f762de4d32c258e3a3ce5fa3920c61ad65587d35b27ebe9d497887ba08363a7599d240ebef62358c90aa16daf54e95651408afdfc5fe4f1e4fca1c54afd0546efdf62e6cef1dab9bf479720023f37ab6956ff752ccd5933167de22094569d809334e2f5c68470984320111723f08e8da6494ffe451c0626882d3b003b14845d7b455f33a0825f1c8625f5d7dd36aee16a1da8557c029be619bfc51c8eb4c4181e3afcf348a52a2743260c287ab36c06a16d42e8acf1b7fcfa59358e244d47121eb79d249534858130564cd4102e0028737858746646435a537e8e9cd5b2e5329c4e05c431f92a20bc39eb9bfefd078b0bd69b021801bb2292c63e1a466e56e2560669a5837ac3dda5909966047b892eda30990741dfc381c01c0901e242b6160cdc8f85f880ad55363bee9bbe33d264bc0fb760b57f97896ecdd7eb5bcd2789eddaa2222d0e7fb754f7b511d4f9c6cb73e6553610ea979ab51b8e20ff424835177c97243f10af53f1876e60d9d850467011b3d3d15e09c824c66b60b98ca53fbabaed05d48e871cb283bc925053c82a3713992d48cd3b225aeff21ef30ba059360c12a193b99544d4275d9a5035536636a9f90bcf07b77c19f3e4ad55819b208e4813c06ca51f645a0b85c26dccd502a641fc52558aae7a90a6b4fa12f240dcd4dd0f31444a6e93803922124c13135d02e29fcc2901b89b31228bc65e60d0d0216f823c5380e81b57ff32518b7f96466317e5a5448bb69889af5181b7bde26bcd697fd8d94bb7603ca2074b857cc865323da7b4c6304e7044413b639b3a20acd7bc6677dc6bb51454fb303e431a3d3646ab26c1d96d074dabfb31aab56b7af641a1cb38523668d1c79b15b741b56d2e9a9f4ff25c1afa73fb89f30ef43d8fb9d3941072ca04a6d2c2c6340ab592e2f67045b8d955b9706c196459079f559aa80999fa581f1386fa79f20ff45e2ab719b035813f7efcfcabb2c657e1e0fdc5e69b199fbf804fa00a9c2b1b08add40f3169ce3668ec62dba781850bc0d6f22a4047f5859cd4a4973490968e8230c1e3aaea7d327b43d02088534555a0c7002b31880fe5d8614338fbb13d4af679ca77824d74582f2e0b7dd2648d7d569ec281a50e003c8ad9ca1ce6fed68371bfc7d655d415edd61f2c961aeebb4eed0e6abf64b337f1e9ade050faaa3fed2a6092b53c7372ce8e89978e47da9305769ca9fc934cb040aa3c9d3aacde355136163e9a5536daa90d0825c838edd09cf80a07db6a0b1a154873097030bfda15a142d6a23bb99b04d5e2618e15909ab19fd7ed2cc0d12267d5e7d570c553de862e0156211e9e6ec00b42b6ae3c05f812ff46965fce864769b0501e50fe23213721ba413446085eed711d9a07c4d1079bc4954303c9fc46d40af7638f8e2b4e276c149f2c5153e112ce6a0fd6f21482a5719de12b29a70d2ed634d92504afa0efa5e61a7661eb810bb4e028cf42ffa5ea908814eaf5ca6134c4c44d6fd7edfa4feb2373d527f6fa5292058844ad9da3c09663f094ab32d35722108dc0265400dd9af021b7b25742f42afb668b821d25f63b9b3172e6abf5af120f61b2d6471cf480f622e06fab22559535e335c45c3fc708f3f89a67bea6b38258cf95f4eae51c2274c27d0da7a2deeb88b179c481eb4da0db737389e82002e141a775e300d0c904aa0523637bf7e43132ef131cc095793b998c5c62b059972241bb8875c71bbf64b4a3c4ea6dd639b5db4a924c7826302b6f39fb17ea28d1b775b46cca9b050251677849840fb52029c477df98e27455b6c1bf4725fb5e3931d1e0fa40f42486f3ac54fadb5f384c9dc32174d7caf792d093ac01117b8b308bf480336b7e0aae8874875654c3f0ca21379ff4f16ce9cb26ed4db42d1d7c973736acccd5442c360168579b8f28755e9b024106236ba9a194ab2b534fb23d2b657e24524ccf682c700602b3c05af424dd1d8d441763c473935377d7fe7fe7bd3f5f42da349adfa176d0ca5e7e7dac8cd2befeea74b029d22a9d24272045a99c8ccbd9bc13f46f05ae4390afe70ca6ae8c78cfef5076164765aea6a86013cca210de7d9bf15211cb8f7a33d1833d6966af5819e476466403b97c801dc004832ebcbf4b8b42268dc772f21165b4a2eefec41903da0d655c94da4e84491aa6678b17ff353d336768a2670ce2cdd594cb698be8801d00391723cd99fc238122b8f89cbc241fa80902294d11d7e2096068fc4e160c55046319df33cb784142ab980bc194b72e104f8455efc609af180e304af1370d9ee167e99dc3e28371428c574b83643755b5c45b5f87bf118d3ec0cde20b8e3d6741e2ba08a484f1088e219fc8f92a8d552211a3af970738afdee8c279b2c7a3f077e86b76156765759141d4ce9d507f153e858dc4c24c44d68e7349c487e3476bc949eaaaa0efc6774becbbb8bdfe2ba6266d7aa74d989f0643927951d8041431e821292abf88149b9039f0fbbf6efe1ecf6b6286888be99db572e36ea77e29100d3d643ea2e665ab5dd4b5c0306b9ef6eade3e614eef61f7b5029aa8cdf712520dc8d0a44be359458e3f2bfdab377105e41be88bd8615ee681576c6ec3d74e6087ce392d98871cefdc224220720282c6f00973bb36bc14fc40f7cbb1c03964401084a54b179f0d3f9a6647622cd2315e9305feed4a18dd6ec07ac8e51ea4e90f20ad672be333b03308ba0149e69bb198e54c81327d3bdb45cc7efbb0f0891f8eb21bdcca8ce4bb65bd5b8009b05f847934941e7cde6d02f4ae06906fd0ee669280d827227ffd9f9498bb9ebf32ac45943b31765aa0a3a386d2300198d63b324309fad10dfab5608d763b4fa8b11aee58dcc7d29ffb89e683193cc6c3aaae5962cef93d8d13acb309d36f0f603a812a4d046c33127233865cb804734249004aef7cf125940fe587c21b71a4bb873b9313a41f84602e7fc4ec82f795cb45c51be74c482fa1f8588f2efb1486192e1f6290871585ac1fb9fcc182bb21064985ec903c4cae4fb9caf52fa2b882d3b1057697b779370c57fa6ce2c465cfd35abcff3187aa29bc87463c6e81796355a132c4810822d6a44dcb25c99371b65f6fe2e0c60bff1bc50df57d2de1548abd55a7b73fce4661bc909683d363ed967130cdfe65e12e31d25f61de4570f55223d408341c66dc27bee1818ade6556adaa3d70139776e53a1aefa1ac21a86208fac353906454bd9a780533553f7648b4f260550b5631483de80760ff77d4ee0b542429b387e85cce0fc96883318d2d23975381fcf386ff06d40248bac23973cd213074b6715ce798632caeebdb5484c38ccfab7d8b34dd4a43f8330b552673e3553a43d3eb52aedea82dd1f64491ee833d97472f6fcdfb44289285655a96388b6161d87cc76e6aaded3f2bc2aa324d5140dad3677450882d72efa13feb11f0537b0acbb2d34d7026022de62ccdc5ede8373cefa34c5f41406f3b5aaaf1fbe5922861f2b9d0cf716a527112f1ce25bd164ae6b9f7c7b46381894b9dc62e39bb4fb353721c816be01b7beb3cd09ec039ea60d8bd1754c9ce081af291c4838866a08435ff18f8e40827b746bae778a09422f983d2d242803188275cc099128af6427551e4de4ffa4fb50c551a55ad8e754dec428abc34601f8f3dfd690d2bfd1bdc664399162824fd49b787a5cf8d023b0c936c72c7b06c2de593289d2c6216a43d8497adf44a43076d45dddec61491ed379e0383a6a2e4803bf244e0ebc9a3915ecdbeb19433cc011dc66c18d21d5f197ac461bcb7e9c883febdc2c6fdde1be6f8e88c7de71b93e4f84be2b49db2e2b7cba93026b2ff2b7d221e6aad0527e24c0706569f802a51e4ed6029381c2dbd1cebdbae4e82e62d6dc1142d66429476a890d7505d51af40fb7fd973b8708a84098e9a6052b3a43b90c0005400000000000000e895c000640ffc02b8dedad362de060930ca6a0a986dfa9c2c5e891d9c438f839f3cd38854cfd3f5300193e7085952ff14c78b0c1d5f6ed89df0aee67852661de634c136321cbf500dfda275f04ddcfd61662a71f3d8592609b39d97ac70900090073797a3200000000c4010a8053000100a82024b83860ac6f720b8febbcf2d98d7bc0f1f1f754560a55553eca068e4f8dd2eab1ba2aa77234929c1d76a2d59bd9281496a3d3d966d51cb18fae85604dcd18d85853af0e774d06a92f8136d5ca002d000100b460832db9649ecb4946fdfbe50922489a7d4c4ef3e445a4b1d707a639a21e61220a89eac238c77f260000002400028008000180ffffffff080003400000000308000180ffffffff0800034000000002300002800900020073797a31000000000900020073797a31000000000900020073797a30000000000800034000000004280002800900020073797a30000000000900020073797a32000000000900020073797a32000000005e0001005181b0c10c516b4f5a8d66e924c1b6bb00db0c66770f724c35ddf1f55ef58957535975a350293bd9559ca4ce59f0838d86e685a43b6a8c44f9fcaabb63b09b3d42e95e5b9ffe8a71b6cce066ea145a1791c83c3f53dc8d0c749b0000600002800900020073797a32000000000900020073797a3200000000080003400000000108000180fffffffb0900020073797a310000000008000180fffffffe0900020073797a32000000000900020073797a300000000008000180ffffffff94000280340002800800034000000001080001800000000008000180fffffffc080003400000000308000180ffffffff08000340000000015c00028008000180000000000900020073797a32000000000900020073797a310000000008000340000000020900020073797a320000000008000180ffffffff08000340000000010900020073797a320000000008000180ffffffff100000800900090073797a320000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x1970}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c00000000e9c7d2ac13a16a28010073797a31000000000900020073797a3100000700e2c12147e236fd692d09921e476a7231097de60cf783762729ab619d657308d1d6f18295933c767ff1b35cfe6fcd72c6e0695eac68ddc92bacb969dd9a304259270ff74b6cd569b02ad415bb7c71b9effa28ff55ad81268f6d728a24fabb52b22d2e5100f26eb0b811c3abb49183e14c150f72b6cbea25262ef63b883fa092be8ee38e08"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70f9cbaa00fbdbdf25030000000000010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'geneve1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="b7000018110058beef4ba0d598", 0xd}, {&(0x7f00000002c0)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c191f", 0x21}], 0x3) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0x57}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000140)=0x8, 0x4) write(r8, 0x0, 0xfffffe90) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/101, 0x65}, 0x2}], 0x1, 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xffffff22}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9a}}]}, &(0x7f0000000280)='syzkaller\x00', 0x7fffffff, 0x35, &(0x7f0000000300)=""/53, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x8, 0xb4c2, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 523.629239ms ago: executing program 2 (id=7270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604, 0x3}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a006da800000000fbdbdf251c000800"], 0x30}}, 0x0) 477.617583ms ago: executing program 5 (id=7271): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0xbf6, 0x6, {{0x21, 0x4, 0x0, 0x7, 0x84, 0x66, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0xc, 0x93, 0x0, 0x5, [0x9, 0x8]}, @cipso={0x86, 0x23, 0x3, [{0x2, 0x6, "35d48503"}, {0x7, 0xa, "e92a0afcbef48e52"}, {0x0, 0xa, "1b80c3f5044b81ff"}, {0x5, 0x3, "04"}]}, @cipso={0x86, 0x9, 0x3, [{0x6, 0x3, '\a'}]}, @timestamp_addr={0x44, 0x1c, 0x31, 0x1, 0x2, [{@multicast2, 0x1000}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x6a17a0750d5ddaba, 0x11, "ebd34ed7c7b2f90a55936cb5e64496"}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x112, 0x112, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x40}}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x8001}], "6da8"}, @struct={0x5, 0x6, 0x0, 0x4, 0x1, 0x9, [{0x5, 0x4, 0x420}, {0x8, 0x3, 0xca}, {0x8, 0x1, 0x3}, {0xb, 0x4, 0x6}, {0x3, 0x0, 0x3}, {0xf, 0x5, 0x1ff}]}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0xa}, @fwd={0x9}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x5, [{0xb, 0x0, 0x4}]}, @struct={0x6, 0x3, 0x0, 0x4, 0x0, 0x4, [{0xc, 0x4, 0x80000000}, {0x1, 0x2, 0x37}, {0x6, 0x5, 0x40}]}]}, {0x0, [0x2e]}}, &(0x7f0000000680)=""/55, 0x12f, 0x37, 0x0, 0x400, 0x10000}, 0x28) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00', 0x5}, 0x1c) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008150}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r11, 0x10c, 0x7, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r6) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r12, 0xb01, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r13, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xd75a4e0d1c58079f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb46e7e0c340bc1a5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x104, r14, 0x1100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x5770d985becc4ed6) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0xc, &(0x7f00000011c0)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @generic={0x1, 0x1, 0xe, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x9, 0x3, 0xffffffffffffffc4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @generic={0x2, 0xa, 0x3, 0x1, 0xa}], &(0x7f0000001240)='GPL\x00', 0x8, 0x1000, &(0x7f0000001280)=""/4096, 0x40f00, 0xd, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002280)={0x2, 0x2, 0xfffffffe, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000022c0)=[{0x3, 0x1, 0xe, 0x4}, {0x3, 0x1, 0x2, 0xb}, {0x4, 0x2, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x4, 0x7}, {0x5, 0x2, 0xe}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002400)={r16, 0xffffffffffffffff, 0x17, 0x0, @val=@netfilter={0x7, 0x1, 0x1, 0x1}}, 0x20) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000002440)={@empty, r2}, 0x14) 368.627828ms ago: executing program 2 (id=7272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 367.990516ms ago: executing program 0 (id=7273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @empty, @empty}, &(0x7f0000000880)=0xc) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="1752caab45c9e7bfefaab4dc50cf153b0996fa00ea52348bd5d9421c7cb4116e", 0x20}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x83, 0x5, "9ade9e"}, @lsrr={0x83, 0x13, 0xf7, [@multicast1, @local, @empty, @local]}, @rr={0x7, 0x13, 0xa2, [@multicast2, @remote, @multicast1, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010102}}}], 0xb0}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="cc04878ab00a59651bb3d28863df96004c121e382c777ecebe02e223fd273190e77adab4d2a5f187de7322bb7e040fdff85dfbe375ba1424f9b6f562f4ae225b839d322a082e4a342c8648aec38823b05ad9c0a81d61218959e8810d7a954b4b37f1445ae9eb2b5e69ca6ad6fe66e2a9410dd4ce41ab67e1d0a2762e823a01f85b6af47f7d69564e720266895c04b5ccc2316dab07e7eac248b819940c92", 0x9e}, {&(0x7f0000000340)="4f7d8181c2ebfcee91215923834c96c674b9989dfb755a798787638afb541fc8d2549eb7e475dc21433ce8b14d2eff91fc3658e6189ba28d9316a1170a8eef133ad659bfff99a5e2b7500d22514ea758bae7f80649c1b45526927ac1f07afc4778b6a4ebd9458cb3040f385f9a1d977c6c15c34b7bf2c8076564170251554de3880d1d6f0ef8ec4f0282ded9f8a3e50a2ac2a7d17b684125a86d", 0x9a}, {&(0x7f0000000400)="c554b331d63077ab433c4f4526df5c4c44a8501fbc54c857a54bae13b2830b6c753bba5a23e2d64535cc25cacc7dd0d27589b7c0", 0x34}, {&(0x7f0000000440)="8a0bbd61ec998d97df8feb41c1c7", 0xe}, {&(0x7f0000000480)="3ab2ea7e0dd8381a0c04926b664d658a6c25a4fd52daadb2abf4d11d9cc4f09d612cf682cd93512ad5ab62506d83782a6ad5c1ae97b7d9b863c41f87b9d88bd1fd8638be5d4ce384ea7e54e8eaa668", 0x4f}], 0x5}}, {{&(0x7f0000000580)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f00000005c0)="d61968f0e43487430182d6ba53b8106dc2a5f60d4f7e47f7035f257692e5e7faca979ba78b426a2f8a2fd2bef0976e833a79f5222f1b4fc8ef690e120336ffff855f139fa2a582ec5a25a91ac3285d6b39c584bfeb7802089a1a2c5d04ac774998dd24f36428040081a5a4dd582bdecc842754d0cb30eb10add8aa6c5e22bcc1ff819b1663a16cc24ed89250595513f4cf08eec9a502625d04927560dd0012ea3083a71891a7bf88493ca53cea55733469e0e001865a7590a1c4956f7cafbe99abedac1563d16306ce91c6b9261127ba14779048299c760c9da7aa576ea489d49f2b84961dbc61a5d2f456fa84f3", 0xee}, {&(0x7f00000006c0)="afede086e57c45e948676710bfb19c412a6b8eeb515a5f3082780db33da94ca6efad7582c05a22937e", 0x29}, {&(0x7f0000000700)="3fb5fefee3fe19909c140d6cbcf8c272083f618252fa25a3df613202dfcd8aa2657390c77661a66f5e1ae0c525c1f42b9ed98c939c002ba931959526307f691a5ccd3f2389d3a7103a205ac3811233a6c660cd702b58e5e3df244c79384990b79db892d0945fb36be9c8677dc29bf5e751eac42663999d68b8ef504a5b", 0x7d}, {&(0x7f0000000780)="514163f651e6c8c149e76d87c63947dc464137929e8f3b4c56fb72b91f6c1de72d92c37a8fbf3d4ecb03c6af5d185ec722fb6dad5e70b781d90d1d60f2749cff5bde4d85e0f5611a9e262dcd2bdfb8e27a61eac038b81c76ada8a2679923", 0x5e}], 0x4, &(0x7f00000008c0)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000940)="6cbd7201017d82e71576ac959ad8d1f4603495269484936f8e771fe09edeaa8d5eb51aec8535edcda33771f95cfe340d5c30adccf114db2e8cb0a6fb8ce45f31759618fcebd3212ac990e519972225573223bae8f8a518", 0x57}, {&(0x7f00000009c0)="640bd3e3284d0eaf7b4cf63a282521f20cc6b78fcebab1b7d18bd59e2ce75170233a023b42eaa44976f376", 0x2b}, {&(0x7f0000000a00)="bd7b297b10d241c3528287b4233ef3548fda15b792f36451577d175efdc448c6f916eace608a6d39dbb09e59c9778084e3faee4975d359ed9b5cf6f242cdf11250ad5573a99b637cfc2ac0438cbcb9f464926e68514ac33536f1df0cd60eedbdf30e7d2c380e7f6f238ad345bf127cb117904447a868eaa59c15bd44866d7ad2cf7e185fbcac9b166409651c5870210bbcb4a2312cb894339a3228eb201977463cb8260cc025c326d347fe825496f59f6ae462dc8847508f6d8cb226", 0xbc}, {&(0x7f0000000ac0)="857a33a053710ea5ba5308141c546912d728c873e33328bf39659ee0b2aa6aad58ee437d5f3176c38980108e48d6989f9bb5e8696e6d27ede99b77dc9280013d0674e40c2365ac6dd780cb7af55c9116f7fc", 0x52}, {&(0x7f0000000b40)="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", 0xfc}, {&(0x7f0000000c40)="9808c4dee26e98c866c87ebbdf88e1fb9c1f47793e85d8fdfc3fff57c67f850bd851c5c3e138181cab9b16da83f3659063da508626ec72e449d87b981ada6c4460c32ac83192b4d92ea61e5eddae9fc2100d7d2f37cd723715387ebc92d440aec3f108eff83cbf4e0d10728434966b3bfec7d7bfb532d42cb162240b18710d0e65885917dd54baef4900d2981a0774c908a9235347ed0474c1018e2f4e1664e53ea412d79c2db50da25a7028cb2c61b527bcb02add3708c957a7cbf72a6b3a4c20d1e16f7aac792fde670a5789393ea863d0ee27cb1adde26286bce20ddcf007", 0xe0}], 0x6, &(0x7f0000000dc0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x13, 0x63, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @noop, @generic={0x44, 0x10, "701d72f9e1aafd566d51a7ad7e31"}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x68}}], 0x4, 0x40) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x76b8b25f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001040), 0xc0000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001080)={0x0, 0x7}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000001100)={r5, 0x4}, &(0x7f0000001140)=0x8) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001180)={0x2b, @broadcast, 0x4e23, 0x4, 'ovf\x00', 0x12, 0x9, 0xd}, 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@ipv6_newnexthop={0x1c, 0x68, 0xd08, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x5}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000013c0)={r3, &(0x7f00000012c0)='\x00', 0x0, &(0x7f0000001300)={@_ha_fsid={[0x2]}, {0x9, 0xd, 0x6, 0x6c32}}, 0x3, &(0x7f0000001340), &(0x7f0000001380)=0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000001400), &(0x7f0000001440)=0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000001480)={r5, @in={{0x2, 0x4e22, @remote}}, 0x80000000, 0xd, 0x401, 0xd, 0x41, 0xff, 0x1}, &(0x7f0000001540)=0x9c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000001580)={r10, 0xfffffffd}, 0x8) write$tun(r8, &(0x7f00000015c0)={@val={0x0, 0x8848}, @val={0x2, 0x3, 0x7ca2, 0xfff9, 0x9, 0x3}, @ipv4=@tipc={{0x8, 0x4, 0x0, 0x8, 0x43, 0x66, 0x0, 0x40, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "d3"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @payload_direct={{{{0x23, 0x0, 0x1, 0x1, 0x1, 0x8, 0x1, 0x2, 0x1, 0x0, 0x3, 0x4, 0x4, 0x3, 0xf000, 0xe, 0x3, 0x4e20, 0x4e21}, 0x0, 0x3}}, [0x0, 0x0, 0x0]}}}, 0x51) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001640), 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001680), r8) pselect6(0x40, &(0x7f00000016c0)={0x1, 0x8000000000000000, 0x0, 0xc, 0x5, 0x6, 0x5, 0x3}, &(0x7f0000001700)={0x2, 0x1, 0x0, 0x1, 0xa, 0x11a8, 0x6, 0x3}, &(0x7f0000001740)={0x0, 0x7, 0x4ea0f47e, 0xea11, 0x7681, 0x7fffffff, 0xef80000000000000, 0xb}, &(0x7f0000001780), &(0x7f0000001800)={&(0x7f00000017c0)={[0x3]}, 0x8}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000001840)={r6, 0x2896, 0x3, [0x4, 0x9, 0x1]}, &(0x7f0000001880)=0xe) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(r8, &(0x7f00000018c0)='cpu.stat\x00', 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x10402, 0x0) write$tun(r11, &(0x7f0000001940)={@val={0x0, 0x6006}, @val={0x0, 0x80, 0x6, 0x4, 0x7ff, 0xfff7}, @mpls={[{0x8}, {0x2, 0x0, 0x1}, {0x80}, {0x100}], @ipv6=@icmpv6={0x2, 0x6, "dadb74", 0xcd, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, {[@dstopts={0x29, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @hopopts={0x73, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x2}]}, @fragment={0x32, 0x0, 0x2, 0x0, 0x0, 0xb, 0x65}, @dstopts={0x32}, @srh={0x73, 0xc, 0x4, 0x6, 0x5, 0x30, 0x4, [@ipv4={'\x00', '\xff\xff', @local}, @local, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1]}], @ni={0x0, 0x0, 0x0, 0xa, 0x6, 0x2, "6e6df59ba4a1bc060f466060b580c8d6875b25261b5a919a8b9777574d"}}}}}, 0x113) sendmsg$nl_route_sched_retired(r8, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x51010}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)=@newqdisc={0xe8, 0x24, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1001b, 0x3}, {0xd, 0x5}, {0x3, 0xffe7}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x713a}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x240048c4}, 0x20000880) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000001c40)={0x1f, 0x3}, 0x6) 303.529155ms ago: executing program 0 (id=7274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001a00b70300000000000085000000a0000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0}, 0x94) 273.754815ms ago: executing program 2 (id=7275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) (async) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000cc0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000001cc0)=""/243, 0xf3}], 0x3}, 0x1081}], 0x1, 0x40000040, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x8, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff00}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1, 0x3f00}, @generic={0x5, 0x0, 0x0, 0x2, 0x27}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x114, 0x0, 0x106, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'P-,,-\'#-\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "92"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+#:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '-@&%!\'@\\.%-*--\x89\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae12}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x41}, 0x4001) 231.015851ms ago: executing program 5 (id=7276): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f00000008c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x93, 0x5, 0x37, 0x6}]}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x6, 0x2, 0x12, {0xa, 0x0, 0x0, @loopback, 0xfffff43f}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010000000000ffdbdf25e00000020000000000000000000000000000000000000000010000000000000000000000000400000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff000000000000000000100000000000000000000000000002000000000000000000080000b06b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000020000000000000000000000000000000000000000200000000000006ffffffffffffffff0000000000000000000000000000000000000000020000000000000000000000ffffffffffffffff07000000000000000000"], 0xb8}}, 0x10) 140.40925ms ago: executing program 2 (id=7277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000003af60d7b262c59213509593aa80ddd9f58e95a26f1989d5db478ed8abb4d51956239d550c180a59b7fc9a3d2ef95d82a5e50324e6d3b1f7240c1e901cf5cf79ea9e1f85602325d3aca1f7c0dd17ac574a236d03d6c9ebbe59b818027b9cb717586caa4541fbd9cc33cbcb4c8884ccc6cc79fd7b76a", @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f0000000800030062686daceb29257f4d2aeaad97c4fd12522a9cdb5d50662a0bda263c6e2c2e787794fcc58a2484c2ce48374656645cf2a58ad01a77", @ANYRES32=r2, @ANYRES64=r2], 0x2c}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000180)="560003000000", 0x6) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x40, 0x28, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2, 0x8}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x40}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) r12 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 139.965306ms ago: executing program 0 (id=7278): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) write$bt_hci(r1, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000300)=0x1, &(0x7f0000000440)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000030801010000000000000000010000030900010073797a31000000000600024000080000090001007306a0b5797a30000000000600024000150000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x15, 0x5, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x4c040) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x80, 0xca, 0x0, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x68, 0x0, 0x40, 0x2f, 0x0, @local, @local, {[@generic={0x83, 0x7, "19db5dbee9"}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x9, [{@remote, 0x3}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x31, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.702781ms ago: executing program 5 (id=7279): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0xa, 0xf0, 0x7, 0xa, @remote, @local, 0x40, 0x40, 0x8d74, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7, 0x7, 0x6, 0x2, {{0x21, 0x4, 0x3, 0x7, 0x84, 0x68, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xb, 0x88, [@rand_addr=0x64010102, @loopback]}, @end, @ssrr={0x89, 0xf, 0x8b, [@remote, @remote, @loopback]}, @lsrr={0x83, 0x1f, 0x53, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @multicast2, @local, @empty]}, @lsrr={0x83, 0x2b, 0xb4, [@private=0xa010102, @multicast2, @loopback, @empty, @empty, @empty, @private=0xa010102, @remote, @local, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x52, [@dev={0xac, 0x14, 0x14, 0x30}, @local]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001940)={@multicast1, @loopback, 0x0}, &(0x7f0000001980)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a80)={'ip6gre0\x00', &(0x7f0000001a00)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xf2, 0x2, 0x45, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x80, 0x8000, 0xfffffff9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b40)={'ip6_vti0\x00', &(0x7f0000001ac0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x81, 0x5, 0x20, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101, 0x80, 0x4, 0x81}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtaction={0x1ae8, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x1ad4, 0x1, [@m_ct={0xb8, 0x4, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "4696211389c61b507fe9f751d1dfa9c1"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "9c7c44e7cb65c124f694e89ead92f3d5"}]}, {0x5f, 0x6, "02f761305e0140ba6dd9c16835804f4f113ad880f45736fbb70cf277d795c4b2be32083aee8288e614aac39df04bac62b6b15d14d47698352053150861aa8fe0c514bf44e612058d113cfdbe64416236b93b663e2afa0d4b310ff9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x178, 0xd, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x0, 0x6939050b, 0x9}, @multicast2, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x5, 0x6, 0x2, 0x3}, @dev={0xac, 0x14, 0x14, 0x3b}, @local, 0xff000000, 0x1}}]}, {0xfe, 0x6, "d3de8ef8a04b039ac115e48e83b67adb481ec8024aba3e3938cd3fca410eac9ca55f76e7d5ab642e9c6521503a5b7538506755f36c3ee4f4dbb0405a1aa5c0872ed7e2b37d79199f810dcd564c4bddd75974e177ada75d8f7bd199542b8953dca798d1f397972d2d95fad9272782c2fdf1711ce790135697864ddfbb7d081c3c9576da8b66aaf0d0eb1711cf7b560d5e983075399c1a203811b517130185a3db10051395a7157a09e44b39aca8ba6080b1a4d19d18626a311ffbab757d8c100224629c1733d4814879c747f6fb3e63f21be95c6bb69ca6e8befb9277347a307489956428d5405b0b9e65d7a16f3168358424fa31dc10ffc08561"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xe4, 0x1b, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0xe9, 0x5, 0x44be475d}, {0xd4d, 0x6, 0x74, 0x3}, {0x5, 0x0, 0x5, 0x4}, {0x800, 0x0, 0x5, 0x8}, {0xadac, 0x0, 0x8, 0x4}, {0xf, 0x1, 0x5b, 0x3}, {0x3fcf, 0x2, 0xf9, 0x6}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x51, 0x6, "01fa8505b23de417b19fad009aaed30143cef345477c589e81bb151a8915207f571e1f8590bb2919ede77178d3c2b0d38ae2bdb39b474fcee869cb52438ceab799d0eb3547a5799fecc0e6cd10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1c, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0xcc, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd1e, 0x6, 0x2, 0x3c2a4819, 0x9}, 0x30}}]}, {0x83, 0x6, "20f5307a2fc9f419d6024a18ce83544abd963b3c42bbbc919da471863fb2c7671519b1fdc436598e767cd6a0a8020cde284794550a79b7046d8ec5841f9ce9771f31647d1af43fea225cb11141ee18a268dab3ad1d383b9d31f791eb8cc974b2e1da99b4773e2a386afe0f2c103402c82c2490f99bb7442e88b35328a3d26f"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10cc, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x7, 0x0, 0x2, 0x80}, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x10000000, 0x6, 0xfad}, @broadcast, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x1, 0x6, 0xd, 0x4}, @private=0xa010101, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffeffff, 0x200, 0x8, 0x4, 0x3}, @local, @rand_addr=0x64010100, 0xff000000}}]}, {0x1004, 0x6, "e485e0bfd8486aa0aefadbf6df125b6b3fbb24dd559e03941c02cc2feb01cccccb193e988c106014f63d8f9a6f27e758ae9cbff4c508586461cfd13fe978bee0886118790f4b90064d788e61c1679fcf069ee748bba14f9c382bb8467b02045ccbf91fac6fd8e7e2adc62aaa137307673eb4984799846f72c5ed2b679344e139af8596e3ed942116a97bda0b74974a9ed29ce9ec562fbbb102d817024326c94e9a8744ded603f735f4e2eec7c49057fabcb16a0a427a32f37ffd29dadade8bf4c4382a8911c340b2b223ab75c4c3f9efd771046a66ffa53520afc74b890955edbed92e9e136b564b7ce1e23bc6e3398cef7ed2ea65ebc24d579a24d1c059d37336ab83642f8b371fa38e80837bd4e9c2e72c1936ca51ff6e0d3cc05f167bfcd38b7120a1f849deeeb678b3de71d91a6f35a5cdecb6c54bfe45eece7b26389b9a398836746b033290cf5fdffd501e7b860dacf21115c68fbf8e00ccb70593d76fbe9c4d0dac63fc6b9c57db7374885f8d8f37de527cd83472d159a1d35c6aee23d1433f5bb9691eb82459f46cf449054c1d215d43df431439c087f9caf72f32f2f727c853a732635f1623bc5061589a8515173f8710dbf9d5e92006561d322b365efd34d29b5955af5b4fcd3b7a24592f6e94e36693ed2aab6921c577a978e2bf4b2775b3a2b211c59d832ff6e329fcc1df6000c4c928ff86628591fa7bc20e305e6b2c029ad0bc07ef768c3fcabe0c79307b407bb17d77f332ce5b4392c2cf8218daaf06032ac560eb9a3cf6188419e0d0af55c1032af0bd86d96f13c3b30b0105e3c8fdf2727f41b1916f758732592d6ca1f38b52fd30453ab132b1da34dd600bee6bcb597f663dba6af7abc960ff172be379a2abb0f7196d6987c67541542ba6ced06b63ddec2baf61f311fa43c29dc09137056411ce7f88f598dee5b2298dae359a6d8e704a61b24ee9bb3297fe3890df6f83f4f6cf9b8bcf6a385365b4657f35c3af60f8bea69b14cb19c924996aeaf745ce570bcb1a9c87b7617f5b5d09b40578d1fbb404d326442c3a0ff417b45c3514cce25e63139db485721cad789749243fd7c7c15df469504d568bd2bccae1c8766e7ccdc33c051850661d56b3d0b15b05523ef22f2a16de441f068cb2a6f31d451506a95fe50fb3e6c6ff6d71d8baff4e692d59756d9f691536f7fc40fb7fd7cd2de8b5bfd7dcd6622fce5ba58fd9ef052216891cd3d4ba35ad86c3f7c58c2524361d58ee747a7aca0e27c5338b894b8471ec899ead922147f8a08fb089d173bb8631aedc32197ddc1a4a96ddfc26f605a30897a19ddf67f2e9fc60393639a047b0341e30d9627e05ee4f0907bcd4deec1ce7f1626bf36642dec0b3f2449d5e884087946a90ff3de72783b8486bae2a52fe3875c3f07391f3abab84a77a2a124957140feec45a200e246941e70edc2488bbff45bd7a375905e6cbb6328eae89ac50b3c09747146fa76a88b7081bc7169b12c8d27c1f8bd354ca8b7785216595c29840699e994bdc56ed98e94bfece69d0e7c7186efc693fa9caf0fc2f5138bbc318912de0d8f2306490f8052c9f67acda68fea4bdae4d69152deedad4d60b1a6ab79f8e7d4fa12ffdc77055460fa03b2b2860e2b9d90fb670e29241a6043ade0d889bdc47258702340aacac91b56d9970aef8b1f08ec488f2644ca3c4499d198157a039dcdb4f1219cd1edac04525a56ca02f9a5bea43592acf4f4f2132a04e8098ccde0ad0d47a2db72015de99136dc9eb1e74c01af2f34ee26b455609fce52fb60f06f54be50c6fd85ed41155b0c57fd8c85e70a01343db41bb687a78ed4ba87cb1cee14949a191594c801bb2c372380c497267325bdf88718f2221f3120ce4f21e94ec19a74235d325e8803a27dd66bd4c443cc4dd781665e2af9ea733e235b2462b2b0cb1eeb1c5776893797678928adaef2149294086ef62b4cf0e68dd1b5635c2e0c3c79ecf3383a1ab8631106ca9a9cfb8932de54f045423fc3a2ce55132d1bfc8c88cf57d70500419600389483ae21149e68f9c382b07eda7118d3bc65864b788cd6426b8c0bff2339e39a23b98e0bd0cb09684c09f91159f4d6a49db89f91d0fd5640d67529582daaa7d25bf6d216b8c9cf11c73cd47d09fb00dcef3fa9afba6da97ce0d987848427c000189384db1a4d5b3d8f66b39970b4af6f775b3f6f837d31f19322b4bc2254e56d9678f6d1339d4b08c80510c3fc4b9104bb3c0a1b402677042070c2ad78dd01d640b1c68e18460aa9bede057cd63ab4d70357bcd3b0997e5ec9c80a6c9bd7accbb9d35f804a56365b6d57d7caaf6410222c8464b713636b8d1aa0fa76bd0972403efe329b2e16c971b685baa09c3101cf4a9ac124769046f83d3e7ee9f21caa3fccd194a40bc310736bf6d6c8055521bc6a1da68c2ea3c17f32c3030338c0ebd67a4c4fd2166d6367a54a69b94c83eb8a35adb275e0caddf944c30f5d725408996713c6cb2f71e8cd4f0f9933b8715898bad5b496990139e25272079d8860c497d7debab8a896b6289325a3c3d92df9582582a71298cf3e7cca51446fadd30f06297a54e51e27b2c4ae9817a6cf5c59dd671346d77e30e4fdd44a067ebd9d826da37d13461cef45abe25725280e189b64d1a1a235d2d696d19744bb469221371cc48fdda3ddb1ddbc12d58e82141aac674374f03d94def05f70f21fd985cbab33b2f11b8b2a4911541423931c95fe2a308f60d7815cb89aeccef8e432b44eaee82b2f6f14f0c477c86e9b6968d4754acd9af1345764c6d20b9fc36d6fff9cbcaae517bc9890c147c9ee38fe5ff42f5ecd9beda87dee52d7406add848471bfa4f254c04abdff13a932f99a053f1115126dbc943fc357a8413094441fdad9c8a9ed1c68f6d935020b0d6512e0d21e9144710d6e1a33458ee911b4af24c6fdbcb82d11a39e87dd92378a76c3629e647487acceb91c35d274689949c7e04551673ea5c44939ff914d52ac3ab8b71069ce6a619d4d1cddb3b65c368579ebb94fce18a3f8568cbc733e1426384ade3c0b4190ae6803ff61211fb360eec791a0d7097842d04a5623cadfd7b85491c61c2516c0666fbd0c5ba1914d41d4d6d11be997c47af255eeffc7675249cac475ca7d6915b23fe7f31fae7f1331907907f5407130f490ea717ead9b223f53778e0cc40fcee93f49dedffbfc5e527ae8afab59766f8dcbde78c684a7c49dd6158e10c5737eff8d15f4b14e461be6716874074bbb44ef3f41383b86682bad277b0c153ffb85140ab2e5257d06813dc0681629a30a77cebd5d403090a8e69e6c2e68715ae946fdcac4197f42bb9b7c5d8620d4f26d1deeb085843ba7bb41b798e30ba8b6aa0fe97b88efd300db2fa51e32564f812e5632305805c57469eeef6c294db4d739263e36af69158bb1aaee878cba7c0f1a47ba28cce91d98e3d451f8f67e510d30d6ef662711c464bfddbbf26b0083a9a77473d38303294af74d3f98f9fedf3474fca62c949bb1d66e48e98e861b07fba475ea421d9bc0d17c2b26171efb1c1fecd884798118065dadea9331734113c87f4371da5ac509190d5072861df5359983a6fefea35fd58f1f849386ba58325f745baa1efc2af585b60e8a71dad1588c9688efd07398ad026863cb7094db0bb1fca66a3bc75b85e6b4d06f66bec81a48f1c803ac55cb2e8377e9517be0a2da20ffdb9bce05721892fbfe850652c531fa14daca82f058dbe3e8fbd60ba8cdd56160971c42725214d50bd894b7ff1464d0c5af63a05a8b4b445d8b939e90f03b719f5637e1c52746b7b33c21a1ea2b1ef086b7067344f2cb82017d1e29e93bcfc83bd6ab389016b311b75c0874b97b6a42041911b0f060c6ef973dd2a974a33ead4d28f4fca9511effea8481345cb226598c52edee318ebce084ed09fda8cfd215983fb8cecfb4e2e635564f25078f662a98e5b33ee6b676aa564f25495739decd6dfea954dd93174cd1695f580c84c5ab75269b92020bd964a8f7aef379d011c9cd9b19ca51f2463824a7c7330e91af1b70e5e5a40a97477245174b48066a1180a88f83e2252c5fc65815bf66fa01684dafef68b1b2c6c05eaed26fed8a6a10fd3ef41a0bbb3bef441f96235117cdfdd0e674a1df2797cf2b5639a90cde28c76f58846cb0e08b2bf43aebe7c1f7024b14b88d210bfb3479f2433f99b7c2cf1d7c1e75779bf7709a86c3b915f12581f279d81552241863179e416c7a4acaf90c98a8465969c6b5d520ce869a0be7298a77c38b5f9465beecc09ac90c0deed8c130a1368baad74f1790b4d6e6006c09cd02ec8795dfe0942992c3e158aa258b391daf0cb946420ff16de785d82f48366e53ba041b3de09f797595cae7d57304707a215f68b92dd2ed559fdf0ebdfe95fffea24204aae2684fe422b7e93a74126a1e5ef2b0407903b054d2b79d694d4bf39537a77e27320aab7f5aebac79bf3c60dca949fe54dca85c766d39544abed2e6a7761ed48da4583e47a7db06b82c137fea8750a0693aad8e83fbc5a057c4f861b9376c30c28c0f1ea3dd8c57d864c1334af0544b267e13d765f0c835ec7d04b92246d8f867e4c3548382a9c4cebf0af35310f457c4863d481366d624795f2fd9c2380bf6a3f5120a32bc62152afc22ab19ce0b6d24bbac66a00ccc7af628fdd957e7a7a9c09da2d1191dd2f0cf4c3bd1f8d987b035f6a3a5e0fedc5612259fcd4d26b0cdb9a708ef889bca3f4cc286d3ab8caf00b49eff8f540a16ff3497996dfccd1f4daa37dab3624299dcb77dc0ab883e6b10d45fd54e754a71ece0c9ea3d02f40231a6f6efae06a40800e4932c096183e0fc4bca59577cd8aa43a8fe84d7d60344dbf060b61cf56e0c2cde2ac0acb4329fe9367fea9062ef6f0e1549cb2ee0d07d04bb00722fc39b471db6c1d6891a48cb4e65eedbd566c99ce351d9dd1ed33a59060ded4e72764860b5c0568e01f82650e4b3a3c4076429a5fadc8cbcdbe9d7b2c38f5c4558ae5d1fd30292269f2256a4ccd72f2106351ea4240c3d47475396ef076869359eb9df96744dc53679e7dd6f43a1413829a4d223d426513eb5aa0e2bbbd8a91e31e74d6917210b22386593701a947f7c39be1f35c626764cfea726dc4366738bc02a2d1614ee1d68ca0f2358ba14f94f7b684928aa38c14ac3981fc44af16889680266a31c126bf2f7dc1fbd4873a6f85d959c8c37492af18fc365af1edceb33deed47b07fb6bd6eff09357bfdf9c34e1bacd47cca1b641acf5f06474acb9ecfdec31ad8a98227b3d98de380bd7dceb0d7028b28b05af2b57bc0b1c6f280708a4b20526606a28e3ab9c82d38bde2b649c4dfbfacab74a34d358816faee991bd20bbf4f305e26fffca7634a782bfe3cead954640d67a80af3dfd68e976748e64dc4d3c1767c98dd608247b7e215857c30ab9f721582f1528e68c0c0d5d72874a5cbac5e96f293215491c69e65f03205e121a8cd71d27650d4f470718a241fa679bef6202460b2591166bca283f10f02ea2bcce6a80c4debf6b0b1b6dd2957b7da68994b49f7e674a333ad1fc00a31a51e6a66deccb541a239402e9ced76ff8c9680f95fcbd8f9c00ead0c726653bddc6a97d8f446f517401b5bbc18731635d486b05e46a13447ec0f930dba171baa90dd35193507b9637c64b6dd801527b45d6cc78b1a8c1d43870c270fa1ae12bcd9c80723ca961f05276600bd0cf9392e98c33f22ebdc7ad6454ff17827f0316e73bc34fb2e4d45a7e22eed77d04f332c706cbe64ab81b4397e840e2891c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xf4, 0xd, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff5, 0xf}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xe}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x5, 0x3, 0x4f, 0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x8f, 0x6, "5dcd7399c84c4ff193512700a2a8f14d2881f855feef976e0ea0582bf97a2d1f518842408efabcc511a15666430d69ad888deacbb02540741d5483506df9caec08afdf0b8a55ed44a4ccc64167f36390af30c7ca46013afb5f7dee1149ef7bf62cbc02e528f5fc3c7df6d5bcbacc1088dbcf1dd576f399d5becb6eefa54cfef844d7dd06fec06f47757568"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x1f8, 0x10, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x4, 0x0, 0xffffffff}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x58d2, 0x3, 0x4, 0x6}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x10000000, 0x4, 0x8}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffffe, 0x0, 0x7, 0x2}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1dbf, 0x1, 0x4, 0x100, 0x4}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x0, 0x4, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2d, 0x200, 0x5, 0x1, 0x7fff}, 0x2, r6}}]}, {0xe9, 0x6, "86e781e7263605da03fdf54fdd5ccaf8b2d4d58ca8c19ebf50252e3ab25947158b4109c69f86f0d8256f04db9c074e501bfd55b77b9c83df14842d0ad35ed74741c89d318da072049b68df4a59b454048da6184cc416276c7b087b381750d24ae16e090544f6e1ed8d718c13eb774b6290080a539446cc1aac6c77c10a8109f75441a77f52d69d5da5eab6e94873dc7937a9fc5e9ac050b3f807f6fed4c54b50f9c47cfeb703eec591ead8e0191e785f4320b1409d1d90a5b0459403d26e1be3e52cb3ebcecc27331061b5d7585af6229eca166b458caf8ed5e963ced7aac550410add3997"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xac, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1240, 0x5, 0x5, 0x80, 0xfffffffd}}]}, {0x65, 0x6, "db06b96885f35d0c54ffb79ba06251fcdfbeee4feb26455d32e21402dea5d5b2b09a984365c89fc65750d243637f237872d340dda0f7f1db2e3d35c104d6a37f328eeb26f1dfd1f5626a61bb60fb8cabae70e81adbffb918fb70f74e63d0433802"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x128, 0x12, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x5c, 0x10000008, 0x80, 0x3}, 0x2}}]}, {0xdd, 0x6, "15198f6832c7d5aad800d9885eeb8fef8afd33c1fad51c8a5ae2063e3e48e43578451e8e70cc253262f207a1f34717f63e39e3576275052f36de70c9a589221768fc84c5cc0bb88b9d9538b5a6fc915003a718f027e4163224650bdba94a2343c977caca7529700bb45a2acc7cd843b3865f101876292f8e846c47e5d317f042b2bfeb945de4ab069f4de61a6ef7acdc05a09037d39393a43a6382eea0a397f156583898ff29e453368fb826d416a1136852b7a5d16b2414543f0165f792f61b2d50094674b52f4ce79d007d12787dd86acfdff12d5e45bfb4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_connmark={0x11c, 0x1d, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x400, 0x0, 0x6, 0x53b}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xfffffff9, 0x2, 0x5f, 0x3ff}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff58, 0x9bf, 0x4, 0x0, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x0, 0xfffffff7, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x44f, 0x3, 0x10000000, 0xfffffffa, 0x6}, 0x4}}]}, {0x5f, 0x6, "73cacee1cdb25a2edb1832b8cf79276f8a1b368002cec84e44507fdc0c2f303fba7ef203ed6991204d7f77b91454b7b243d6eaf0775055df5c5e651da0c66b280281987a7b10984ec29daed515302a6963503caead06c2db330906"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1ae8}, 0x1, 0x0, 0x0, 0x4840}, 0x20040000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 0s ago: executing program 2 (id=7280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) kernel console output (not intermixed with test programs): g): Released all slaves [ 823.158138][ T6430] bond7 (unregistering): Released all slaves [ 823.172247][ T6430] bond8 (unregistering): Released all slaves [ 823.194688][ T6430] bond9 (unregistering): Released all slaves [ 823.209769][ T6430] bond10 (unregistering): Released all slaves [ 823.224321][ T6430] bond11 (unregistering): Released all slaves [ 823.238095][ T6430] bond12 (unregistering): Released all slaves [ 823.260300][ T6430] bond13 (unregistering): Released all slaves [ 823.279092][ T6430] bond14 (unregistering): Released all slaves [ 823.292398][ T6430] bond15 (unregistering): Released all slaves [ 823.306857][ T6430] bond16 (unregistering): Released all slaves [ 823.345753][T28244] lo speed is unknown, defaulting to 1000 [ 823.637171][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 823.721701][ T6430] tipc: Disabling bearer [ 823.741478][ T6430] tipc: Left network mode [ 824.172825][T28346] netlink: 'syz.2.6081': attribute type 3 has an invalid length. [ 824.213713][T19951] Bluetooth: hci4: command tx timeout [ 824.529919][T28351] block nbd2: NBD_DISCONNECT [ 824.939287][T28377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6087'. [ 824.972707][T28193] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.981483][T28193] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.990174][T28193] bridge_slave_0: entered allmulticast mode [ 825.000182][T28193] bridge_slave_0: entered promiscuous mode [ 825.107845][T28193] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.118789][T28193] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.129969][T28193] bridge_slave_1: entered allmulticast mode [ 825.140659][T28388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6089'. [ 825.155194][T28193] bridge_slave_1: entered promiscuous mode [ 825.280260][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 825.322350][T28193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.360486][T28193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.467679][T28405] netlink: 428 bytes leftover after parsing attributes in process `syz.1.6092'. [ 825.550637][T28405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6092'. [ 825.552766][T28193] team0: Port device team_slave_0 added [ 825.574914][T28193] team0: Port device team_slave_1 added [ 825.697571][T28414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6095'. [ 825.882445][T28422] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 825.888066][T28402] lo speed is unknown, defaulting to 1000 [ 826.066082][T28426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6097'. [ 826.170917][T28193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.183516][T28193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.210933][T19951] block nbd2: Receive control failed (result -1) [ 826.231596][T28193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.293642][T19951] Bluetooth: hci4: command tx timeout [ 826.359703][T28426] nbd2: detected capacity change from 0 to 137438953472 [ 826.387909][ T6430] hsr_slave_0: left promiscuous mode [ 826.423732][ T6430] hsr_slave_1: left promiscuous mode [ 826.452856][ T6430] batman_adv: batadv0: Removing interface: dummy0 [ 826.469901][T25326] block nbd2: Dead connection, failed to find a fallback [ 826.489128][T25326] block nbd2: shutting down sockets [ 826.506177][T28439] netlink: 'syz.4.6098': attribute type 1 has an invalid length. [ 826.520017][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.566116][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.588877][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.614207][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.630950][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.657755][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.668417][T28443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6098'. [ 826.679451][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.709992][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.731275][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.761128][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.782729][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.808662][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.818900][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.829343][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.841562][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.857534][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.881012][T25326] ldm_validate_partition_table(): Disk read failed. [ 826.890141][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.905021][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.919585][T25326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.940234][T25326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 826.954418][T25326] Dev nbd2: unable to read RDB block 0 [ 826.965440][T25326] nbd2: unable to read partition table [ 827.000451][T25326] ldm_validate_partition_table(): Disk read failed. [ 827.012210][T25326] Dev nbd2: unable to read RDB block 0 [ 827.021462][T25326] nbd2: unable to read partition table [ 827.255140][T28193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.262135][T28193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.288470][T28193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.406065][T28402] lo speed is unknown, defaulting to 1000 [ 827.410170][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 827.418805][T28408] lo speed is unknown, defaulting to 1000 [ 827.604471][T28459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6102'. [ 827.674661][T28457] IPv6: addrconf: prefix option has invalid lifetime [ 827.674994][T28193] hsr_slave_0: entered promiscuous mode [ 827.710450][T28193] hsr_slave_1: entered promiscuous mode [ 827.725230][T28193] debugfs: 'hsr0' already exists in 'hsr' [ 827.743257][T28193] Cannot create hsr debugfs directory [ 827.862822][T28408] lo speed is unknown, defaulting to 1000 [ 828.097999][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6103'. [ 828.372392][T28477] batadv_slave_1: entered promiscuous mode [ 828.375313][T19951] Bluetooth: hci4: command tx timeout [ 828.457490][T28476] batadv_slave_1: left promiscuous mode [ 828.711569][T28487] netlink: 'syz.4.6106': attribute type 39 has an invalid length. [ 828.805550][T28487] hsr_slave_0 (unregistering): left promiscuous mode [ 829.178863][T28507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6110'. [ 829.219940][T28507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6110'. [ 829.276578][T28507] bond2: entered promiscuous mode [ 829.282439][T28507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.301566][T28515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6112'. [ 829.335986][T28507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.382304][T28507] bond2: (slave sit2): The slave device specified does not support setting the MAC address [ 829.425564][T28507] bond2: (slave sit2): Error -95 calling set_mac_address [ 829.676781][T28531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6113'. [ 829.910204][T28193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 829.935206][T28193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 829.954781][T28541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6117'. [ 829.984825][T28193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 830.025921][T28193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.048012][T28193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 830.112104][T28193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.139992][T28193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 830.175581][T28193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.204710][T28558] netlink: 'syz.1.6122': attribute type 1 has an invalid length. [ 830.386041][T28578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6124'. [ 830.472939][T28558] bond2: entered promiscuous mode [ 830.489977][T28558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 830.514180][T28578] xt_hashlimit: max too large, truncated to 1048576 [ 830.543853][T28578] xt_hashlimit: overflow, try lower: 2/0 [ 830.615069][T28577] ipvlan2: entered allmulticast mode [ 830.628139][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 830.640373][T28577] bond2: entered allmulticast mode [ 830.770626][T28583] bond2: (slave bridge1): making interface the new active one [ 830.800566][T28583] bridge1: entered promiscuous mode [ 830.813884][T28583] bridge1: entered allmulticast mode [ 830.821198][T28583] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 831.040728][T28608] lo speed is unknown, defaulting to 1000 [ 831.077630][ T30] audit: type=1804 audit(1777291640.356:12): pid=28612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6129" name="/newroot/565/cgroup.controllers" dev="tmpfs" ino=2890 res=1 errno=0 [ 831.165951][ T30] audit: type=1800 audit(1777291640.356:13): pid=28612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6129" name="cgroup.controllers" dev="tmpfs" ino=2890 res=0 errno=0 [ 831.205281][T28618] pim6reg: entered allmulticast mode [ 831.241010][T28193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.260919][T28618] pim6reg: left allmulticast mode [ 831.332240][T28193] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.372285][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.379516][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.486587][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.493805][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.813788][T28608] lo speed is unknown, defaulting to 1000 [ 831.960815][T28648] netlink: 'syz.1.6138': attribute type 6 has an invalid length. [ 831.971953][T28648] __nla_validate_parse: 1 callbacks suppressed [ 831.971970][T28648] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6138'. [ 832.228038][T28655] tipc: Cannot configure node identity twice [ 832.573470][T28675] trusted_key: syz.2.6142 sent an empty control message without MSG_MORE. [ 832.586200][T28667] lo speed is unknown, defaulting to 1000 [ 833.041054][T28696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6144'. [ 833.083605][T28698] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6146'. [ 833.265416][T28707] FAULT_INJECTION: forcing a failure. [ 833.265416][T28707] name failslab, interval 1, probability 0, space 0, times 0 [ 833.300380][T28707] CPU: 0 UID: 0 PID: 28707 Comm: syz.2.6147 Not tainted syzkaller #0 PREEMPT(full) [ 833.300406][T28707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 833.300417][T28707] Call Trace: [ 833.300425][T28707] [ 833.300434][T28707] dump_stack_lvl+0xe8/0x150 [ 833.300461][T28707] should_fail_ex+0x412/0x560 [ 833.300490][T28707] should_failslab+0xa8/0x100 [ 833.300519][T28707] __kvmalloc_node_noprof+0x178/0x8a0 [ 833.300546][T28707] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 833.300578][T28707] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 833.300607][T28707] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 833.300644][T28707] ? __pfx_autoremove_wake_function+0x10/0x10 [ 833.300674][T28707] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 833.300717][T28707] ? 0xffffffffa0202ad8 [ 833.300759][T28707] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 833.300792][T28707] ? _copy_from_user+0x94/0xb0 [ 833.300817][T28707] ? bpf_test_init+0x113/0x150 [ 833.300836][T28707] ? xdp_convert_md_to_buff+0x5b/0x330 [ 833.300861][T28707] bpf_prog_test_run_xdp+0x81c/0x1160 [ 833.300898][T28707] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 833.300925][T28707] ? __fget_files+0x2a/0x420 [ 833.300952][T28707] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 833.300976][T28707] bpf_prog_test_run+0x2c7/0x340 [ 833.300999][T28707] __sys_bpf+0x643/0x950 [ 833.301028][T28707] ? __pfx___sys_bpf+0x10/0x10 [ 833.301068][T28707] ? ksys_write+0x242/0x270 [ 833.301096][T28707] ? __pfx_ksys_write+0x10/0x10 [ 833.301126][T28707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.301146][T28707] __x64_sys_bpf+0x7c/0x90 [ 833.301172][T28707] do_syscall_64+0x15f/0xf80 [ 833.301211][T28707] ? trace_irq_disable+0x3b/0x140 [ 833.301236][T28707] ? clear_bhb_loop+0x40/0x90 [ 833.301258][T28707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.301276][T28707] RIP: 0033:0x7f327ff9cdd9 [ 833.301292][T28707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.301307][T28707] RSP: 002b:00007f3280ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 833.301326][T28707] RAX: ffffffffffffffda RBX: 00007f3280215fa0 RCX: 00007f327ff9cdd9 [ 833.301339][T28707] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 833.301351][T28707] RBP: 00007f3280ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 833.301363][T28707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.301377][T28707] R13: 00007f3280216038 R14: 00007f3280215fa0 R15: 00007ffcb96399c8 [ 833.301404][T28707] [ 833.622921][T28193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.667766][T28193] veth0_vlan: entered promiscuous mode [ 833.682931][T28193] veth1_vlan: entered promiscuous mode [ 833.710400][T28193] veth0_macvtap: entered promiscuous mode [ 833.720262][T28193] veth1_macvtap: entered promiscuous mode [ 833.738339][T28193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.754227][T28193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.766487][ T6428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.864331][ T6428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.885482][ T6428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.946926][ T6428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.097142][T28667] lo speed is unknown, defaulting to 1000 [ 834.126591][T28728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6152'. [ 834.190748][T28728] erspan1: entered allmulticast mode [ 834.262921][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6152'. [ 834.309046][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.320798][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.492396][ T30] audit: type=1107 audit(1777291643.766:14): pid=28746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 834.585411][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.631348][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.738537][T28753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6157'. [ 834.801556][T28751] netlink: 'syz.4.6156': attribute type 10 has an invalid length. [ 834.832178][T28751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6156'. [ 835.019444][T28767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 835.021950][T28768] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6159'. [ 835.131024][T28773] netlink: 364 bytes leftover after parsing attributes in process `syz.3.6161'. [ 835.809624][T28797] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.817303][T28797] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.067768][T28797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.080818][T28812] netlink: 'syz.0.6174': attribute type 1 has an invalid length. [ 836.096060][T28797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.400636][ T6428] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.412769][ T6428] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.437146][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.474544][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.615484][T28840] geneve3: entered promiscuous mode [ 837.007911][T28871] __nla_validate_parse: 6 callbacks suppressed [ 837.007931][T28871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6191'. [ 837.067260][T28871] openvswitch: netlink: Flow actions attr not present in new flow. [ 837.258144][T28876] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 837.525847][T28898] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6197'. [ 837.597452][T28901] netlink: 1744 bytes leftover after parsing attributes in process `syz.2.6198'. [ 837.899660][T28930] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6202'. [ 837.916272][T28928] xt_hashlimit: max too large, truncated to 1048576 [ 837.922897][T28928] xt_hashlimit: overflow, try lower: 2/0 [ 838.180417][T28945] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.6209'. [ 838.249257][T28947] netlink: 'syz.0.6210': attribute type 2 has an invalid length. [ 838.361552][T28953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.398107][T28955] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6214'. [ 838.409972][T28955] netlink: ct family unspecified [ 838.416401][T28955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.481681][T28960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6215'. [ 838.554763][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6216'. [ 838.633082][T28967] Cannot find set identified by id 65534 to match [ 838.647009][T28968] Cannot find set identified by id 65534 to match [ 838.692996][T28973] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.732208][T28973] bridge_slave_0 (unregistering): left allmulticast mode [ 838.759105][T28973] bridge_slave_0 (unregistering): left promiscuous mode [ 838.771620][T28973] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.858575][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'. [ 839.481764][T29015] netlink: 71 bytes leftover after parsing attributes in process `syz.2.6232'. [ 840.218118][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 840.234877][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 840.245883][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 840.257532][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 840.270001][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 840.869731][T29056] lo speed is unknown, defaulting to 1000 [ 841.206922][T29056] lo speed is unknown, defaulting to 1000 [ 841.333896][T19951] Bluetooth: hci3: command 0x0406 tx timeout [ 841.541640][ T6432] vlan1: left allmulticast mode [ 841.547791][ T6432] geneve0: left allmulticast mode [ 841.552991][ T6432] vlan1: left promiscuous mode [ 841.558904][ T6432] geneve0: left promiscuous mode [ 841.565938][ T6432] bridge0: port 3(vlan1) entered disabled state [ 841.577249][ T6432] bridge_slave_1: left allmulticast mode [ 841.582993][ T6432] bridge_slave_1: left promiscuous mode [ 841.589917][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.600623][ T6432] bridge_slave_0: left allmulticast mode [ 841.607552][ T6432] bridge_slave_0: left promiscuous mode [ 841.615950][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.960411][ T6432] bond1 (unregistering): (slave erspan1): Releasing active interface [ 842.376230][ T5623] Bluetooth: hci0: command tx timeout [ 842.559710][ T6432] bond6 (unregistering): (slave bridge5): Releasing active interface [ 842.953528][ T6432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.972314][ T6432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.982959][ T6428] smbdirect: ib_dev[syz1] removed [ 842.983864][ T6432] bond0 (unregistering): Released all slaves [ 843.002460][ T6432] bond1 (unregistering): Released all slaves [ 843.032507][ T6432] bond2 (unregistering): Released all slaves [ 843.046153][ T6432] bond3 (unregistering): Released all slaves [ 843.060937][ T6432] bond4 (unregistering): Released all slaves [ 843.080675][ T6432] bond5 (unregistering): Released all slaves [ 843.094445][ T6432] bond6 (unregistering): Released all slaves [ 843.108603][ T6432] bond7 (unregistering): Released all slaves [ 843.128460][ T6432] bond8 (unregistering): Released all slaves [ 843.141935][ T6432] bond9 (unregistering): Released all slaves [ 843.157571][ T6432] bond10 (unregistering): Released all slaves [ 843.170705][ T6432] bond11 (unregistering): Released all slaves [ 843.186771][ T6432] bond12 (unregistering): Released all slaves [ 843.215591][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 843.254931][T29091] lo speed is unknown, defaulting to 1000 [ 843.273686][T24257] infiniband syz1: ib_query_port failed (-19) [ 843.446570][ T6432] ?: left promiscuous mode [ 843.585287][T29106] __nla_validate_parse: 7 callbacks suppressed [ 843.585305][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6253'. [ 843.625798][T29106] hsr_slave_1 (unregistering): left promiscuous mode [ 843.780748][T29091] lo speed is unknown, defaulting to 1000 [ 843.826629][ T6432] tipc: Disabling bearer [ 843.843544][ T6432] tipc: Left network mode [ 844.019690][T29056] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.040458][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.056090][T29056] bridge_slave_0: entered allmulticast mode [ 844.064652][T29056] bridge_slave_0: entered promiscuous mode [ 844.089514][T29056] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.127850][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.149347][T29056] bridge_slave_1: entered allmulticast mode [ 844.170982][T29056] bridge_slave_1: entered promiscuous mode [ 844.417837][T29056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.454106][ T5623] Bluetooth: hci0: command tx timeout [ 844.497996][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 844.509712][T29056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.592129][T29056] team0: Port device team_slave_0 added [ 844.624694][T29056] team0: Port device team_slave_1 added [ 844.650334][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6258'. [ 844.670967][T29056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.679343][T29056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.705424][T29056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.730044][T29056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.757376][T29056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.789169][T29056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.940304][T29056] hsr_slave_0: entered promiscuous mode [ 844.964356][T29056] hsr_slave_1: entered promiscuous mode [ 844.986289][T29056] debugfs: 'hsr0' already exists in 'hsr' [ 845.016844][T29056] Cannot create hsr debugfs directory [ 845.062548][T29154] netlink: 364 bytes leftover after parsing attributes in process `syz.4.6260'. [ 845.097197][T29157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6261'. [ 845.137260][T29157] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6261'. [ 845.185492][T29154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6260'. [ 845.369637][T29164] FAULT_INJECTION: forcing a failure. [ 845.369637][T29164] name failslab, interval 1, probability 0, space 0, times 0 [ 845.384403][T29164] CPU: 1 UID: 0 PID: 29164 Comm: syz.4.6262 Not tainted syzkaller #0 PREEMPT(full) [ 845.384429][T29164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 845.384441][T29164] Call Trace: [ 845.384449][T29164] [ 845.384460][T29164] dump_stack_lvl+0xe8/0x150 [ 845.384487][T29164] should_fail_ex+0x412/0x560 [ 845.384514][T29164] should_failslab+0xa8/0x100 [ 845.384544][T29164] __kmalloc_noprof+0xe8/0x760 [ 845.384569][T29164] ? bpf_test_init+0x9f/0x150 [ 845.384596][T29164] bpf_test_init+0x9f/0x150 [ 845.384619][T29164] bpf_prog_test_run_xdp+0x529/0x1160 [ 845.384656][T29164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 845.384684][T29164] ? __fget_files+0x2a/0x420 [ 845.384710][T29164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 845.384734][T29164] bpf_prog_test_run+0x2c7/0x340 [ 845.384756][T29164] __sys_bpf+0x643/0x950 [ 845.384784][T29164] ? __pfx___sys_bpf+0x10/0x10 [ 845.384825][T29164] ? ksys_write+0x242/0x270 [ 845.384852][T29164] ? __pfx_ksys_write+0x10/0x10 [ 845.384881][T29164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.384901][T29164] __x64_sys_bpf+0x7c/0x90 [ 845.384927][T29164] do_syscall_64+0x15f/0xf80 [ 845.384947][T29164] ? trace_irq_disable+0x3b/0x140 [ 845.384972][T29164] ? clear_bhb_loop+0x40/0x90 [ 845.384994][T29164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.385012][T29164] RIP: 0033:0x7fbfc859cdd9 [ 845.385030][T29164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.385045][T29164] RSP: 002b:00007fbfc9407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 845.385063][T29164] RAX: ffffffffffffffda RBX: 00007fbfc8815fa0 RCX: 00007fbfc859cdd9 [ 845.385076][T29164] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 845.385089][T29164] RBP: 00007fbfc9407090 R08: 0000000000000000 R09: 0000000000000000 [ 845.385100][T29164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.385111][T29164] R13: 00007fbfc8816038 R14: 00007fbfc8815fa0 R15: 00007ffcfdfa2318 [ 845.385141][T29164] [ 845.671113][ T6432] hsr_slave_0: left promiscuous mode [ 845.687108][ T6432] hsr_slave_1: left promiscuous mode [ 845.695390][ T6432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.780537][ T6432] pim6reg (unregistering): left allmulticast mode [ 846.011788][ T12] smbdirect: ib_dev[syz2] removed [ 846.039638][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 846.392430][T29186] IPVS: Scheduler module ip_vs_ not found [ 846.534819][ T5623] Bluetooth: hci0: command tx timeout [ 846.622668][ T6432] IPVS: stop unused estimator thread 0... [ 846.651226][T29202] IPVS: length: 122 != 8 [ 846.949459][T29216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'. [ 846.992554][T29213] lo speed is unknown, defaulting to 1000 [ 847.136074][T29220] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6275'. [ 847.187752][T29056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 847.222950][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 847.245581][T29056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 847.273501][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 847.287313][T29056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 847.322312][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 847.341069][T29056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 847.361645][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 847.635707][T29056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.663551][T29244] sctp: [Deprecated]: syz.0.6279 (pid 29244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 847.663551][T29244] Use struct sctp_sack_info instead [ 847.709421][T29244] sctp: [Deprecated]: syz.0.6279 (pid 29244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 847.709421][T29244] Use struct sctp_sack_info instead [ 847.754025][T29056] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.762537][T29244] netlink: 'syz.0.6279': attribute type 1 has an invalid length. [ 847.816106][T29253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6279'. [ 847.862144][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.869360][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.906768][T29253] bond11: (slave bridge0): making interface the new active one [ 847.916600][T29253] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 847.944813][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.952016][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.020369][T29244] macvlan2: entered promiscuous mode [ 848.043509][T29244] macvlan2: entered allmulticast mode [ 848.071328][T29244] bond11: entered promiscuous mode [ 848.099379][T29244] bridge0: entered promiscuous mode [ 848.112504][T29244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 848.141864][T29244] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 848.161618][T29244] bond11: left promiscuous mode [ 848.173499][T29244] bridge0: left promiscuous mode [ 848.487988][T29277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6283'. [ 848.599628][T29280] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 848.611268][T29280] bond1 (unregistering): Released all slaves [ 848.617956][ T5623] Bluetooth: hci0: command tx timeout [ 848.966973][T29302] netlink: 'syz.3.6290': attribute type 1 has an invalid length. [ 848.998990][T29302] __nla_validate_parse: 2 callbacks suppressed [ 848.999008][T29302] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6290'. [ 849.019957][T29302] netlink: 'syz.3.6290': attribute type 1 has an invalid length. [ 849.028062][T29302] netlink: 638 bytes leftover after parsing attributes in process `syz.3.6290'. [ 849.038319][T29302] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6290'. [ 849.207182][T29056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.324431][T29056] veth0_vlan: entered promiscuous mode [ 849.341445][T29056] veth1_vlan: entered promiscuous mode [ 849.375218][T29321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6294'. [ 849.391899][T29056] veth0_macvtap: entered promiscuous mode [ 849.417676][T29056] veth1_macvtap: entered promiscuous mode [ 849.491527][T29056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.553668][T29325] FAULT_INJECTION: forcing a failure. [ 849.553668][T29325] name failslab, interval 1, probability 0, space 0, times 0 [ 849.556940][T29056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.600671][ T1028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.611206][T29327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6296'. [ 849.613557][ T1028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.637922][T29325] CPU: 1 UID: 0 PID: 29325 Comm: syz.3.6295 Not tainted syzkaller #0 PREEMPT(full) [ 849.637945][T29325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 849.637955][T29325] Call Trace: [ 849.637963][T29325] [ 849.637970][T29325] dump_stack_lvl+0xe8/0x150 [ 849.637997][T29325] should_fail_ex+0x412/0x560 [ 849.638025][T29325] should_failslab+0xa8/0x100 [ 849.638054][T29325] __kvmalloc_node_noprof+0x178/0x8a0 [ 849.638080][T29325] ? is_bpf_text_address+0x26/0x2b0 [ 849.638098][T29325] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 849.638130][T29325] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 849.638151][T29325] ? arch_stack_walk+0xfb/0x150 [ 849.638185][T29325] ? __pfx_stack_trace_save+0x10/0x10 [ 849.638213][T29325] ? stack_depot_save_flags+0x33/0x810 [ 849.638244][T29325] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 849.638264][T29325] ? bpf_test_init+0x9f/0x150 [ 849.638282][T29325] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 849.638303][T29325] ? bpf_prog_test_run+0x2c7/0x340 [ 849.638320][T29325] ? __sys_bpf+0x643/0x950 [ 849.638343][T29325] ? __x64_sys_bpf+0x7c/0x90 [ 849.638399][T29325] ? __might_fault+0xaf/0x130 [ 849.638422][T29325] ? __might_fault+0xaf/0x130 [ 849.638450][T29325] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 849.638491][T29325] ? _copy_from_user+0x94/0xb0 [ 849.638516][T29325] ? bpf_test_init+0x113/0x150 [ 849.638534][T29325] ? xdp_convert_md_to_buff+0x5b/0x330 [ 849.638559][T29325] bpf_prog_test_run_xdp+0x81c/0x1160 [ 849.638593][T29325] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 849.638618][T29325] ? __fget_files+0x2a/0x420 [ 849.638645][T29325] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 849.638666][T29325] bpf_prog_test_run+0x2c7/0x340 [ 849.638691][T29325] __sys_bpf+0x643/0x950 [ 849.638719][T29325] ? __pfx___sys_bpf+0x10/0x10 [ 849.638760][T29325] ? ksys_write+0x242/0x270 [ 849.638787][T29325] ? __pfx_ksys_write+0x10/0x10 [ 849.638815][T29325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.638835][T29325] __x64_sys_bpf+0x7c/0x90 [ 849.638861][T29325] do_syscall_64+0x15f/0xf80 [ 849.638881][T29325] ? trace_irq_disable+0x3b/0x140 [ 849.638907][T29325] ? clear_bhb_loop+0x40/0x90 [ 849.638929][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.638947][T29325] RIP: 0033:0x7f7df979cdd9 [ 849.638964][T29325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.638980][T29325] RSP: 002b:00007f7dfa717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 849.638999][T29325] RAX: ffffffffffffffda RBX: 00007f7df9a15fa0 RCX: 00007f7df979cdd9 [ 849.639013][T29325] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 849.639024][T29325] RBP: 00007f7dfa717090 R08: 0000000000000000 R09: 0000000000000000 [ 849.639035][T29325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.639046][T29325] R13: 00007f7df9a16038 R14: 00007f7df9a15fa0 R15: 00007fff433c9278 [ 849.639074][T29325] [ 849.655644][ T1028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.962500][T29305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.199108][ T1028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.407269][T29344] syzkaller1: entered promiscuous mode [ 850.423157][T29344] syzkaller1: entered allmulticast mode [ 850.499255][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.516878][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.569411][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.579469][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.707811][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 851.315591][T29355] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 852.613241][ T5623] Bluetooth: hci0: command 0x0401 tx timeout [ 852.717934][T19951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 852.733251][T19951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 852.744766][T19951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 852.756812][T19951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 852.770314][T19951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 852.888507][T29422] lo speed is unknown, defaulting to 1000 [ 852.961807][T29428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6315'. [ 853.490881][T29432] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 853.835539][T29419] lo speed is unknown, defaulting to 1000 [ 854.009939][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6320'. [ 854.070908][T29457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6321'. [ 854.491142][T29463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6323'. [ 854.523188][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6325'. [ 854.853252][ T5623] Bluetooth: hci2: command tx timeout [ 854.920603][T29478] bond12: option all_slaves_active: invalid value (5) [ 854.985230][T29478] bond12 (unregistering): Released all slaves [ 855.035453][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6329'. [ 855.086549][T29488] netlink: 'syz.4.6329': attribute type 1 has an invalid length. [ 855.113239][T29488] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6329'. [ 855.328308][ T1028] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.358435][ T1028] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.372111][T29482] lo speed is unknown, defaulting to 1000 [ 855.440568][ T1028] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.468814][ T1028] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.556959][T29501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6332'. [ 855.703989][T29506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6333'. [ 855.865632][T29509] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6334'. [ 855.879327][T29509] netlink: 245 bytes leftover after parsing attributes in process `syz.0.6334'. [ 856.099055][T29517] sit1: entered allmulticast mode [ 856.105355][T29419] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.124440][T29419] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.132744][T29419] bridge_slave_0: entered allmulticast mode [ 856.167857][T29419] bridge_slave_0: entered promiscuous mode [ 856.192263][T29419] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.202361][T29419] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.209770][T29419] bridge_slave_1: entered allmulticast mode [ 856.217830][T29419] bridge_slave_1: entered promiscuous mode [ 856.278627][T29419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.317743][T29419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.339768][T29533] geneve2: entered promiscuous mode [ 856.394807][T29535] netlink: 'syz.4.6342': attribute type 10 has an invalid length. [ 856.449116][T29419] team0: Port device team_slave_0 added [ 856.502434][T29535] team0: Port device vlan0 added [ 856.519034][T29419] team0: Port device team_slave_1 added [ 856.708253][T29419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.717275][T29419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.745589][T29419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.758633][T29419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.767057][T29419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.793664][T29419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.891355][T29419] hsr_slave_0: entered promiscuous mode [ 856.898587][T29419] hsr_slave_1: entered promiscuous mode [ 856.905436][T29419] debugfs: 'hsr0' already exists in 'hsr' [ 856.911202][T29419] Cannot create hsr debugfs directory [ 856.933191][ T5623] Bluetooth: hci2: command tx timeout [ 857.387635][T29574] Cannot find set identified by id 0 to match [ 857.444447][T29570] lo speed is unknown, defaulting to 1000 [ 857.674473][T29419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 857.711125][T29419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 857.734150][T29419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 857.751225][T29419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 857.772957][T29419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 857.787978][T29419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 857.814413][T29419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 857.835670][T29419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 858.052222][T29419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.111699][T29419] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.214387][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.221609][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.261125][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.268368][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.892634][T29623] lo speed is unknown, defaulting to 1000 [ 859.014123][ T5623] Bluetooth: hci2: command tx timeout [ 859.396556][T29642] __nla_validate_parse: 9 callbacks suppressed [ 859.396577][T29642] netlink: 71 bytes leftover after parsing attributes in process `syz.4.6375'. [ 859.411385][T29419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.498324][T29645] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6376'. [ 859.735610][T29656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6379'. [ 859.911534][T29669] netlink: 'syz.4.6382': attribute type 29 has an invalid length. [ 860.096974][T29676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6385'. [ 860.127246][T29676] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6385'. [ 860.142752][T29678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6386'. [ 860.186207][T29419] veth0_vlan: entered promiscuous mode [ 860.286575][T29419] veth1_vlan: entered promiscuous mode [ 860.404265][T29419] veth0_macvtap: entered promiscuous mode [ 860.429481][T29419] veth1_macvtap: entered promiscuous mode [ 860.477815][T29419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.515188][T29419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.516489][T29688] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6390'. [ 860.542937][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.554008][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.561966][T29690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 860.577945][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.597071][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.826700][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.849715][T29697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6394'. [ 860.857339][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.966784][T29701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6396'. [ 861.037803][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.058841][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.093662][ T5623] Bluetooth: hci2: command tx timeout [ 861.175335][T29709] sctp: [Deprecated]: syz.2.6400 (pid 29709) Use of int in max_burst socket option deprecated. [ 861.175335][T29709] Use struct sctp_assoc_value instead [ 861.717130][T29739] FAULT_INJECTION: forcing a failure. [ 861.717130][T29739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.743461][T29739] CPU: 0 UID: 0 PID: 29739 Comm: syz.2.6407 Not tainted syzkaller #0 PREEMPT(full) [ 861.743486][T29739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 861.743496][T29739] Call Trace: [ 861.743504][T29739] [ 861.743512][T29739] dump_stack_lvl+0xe8/0x150 [ 861.743536][T29739] should_fail_ex+0x412/0x560 [ 861.743562][T29739] _copy_to_user+0x31/0xb0 [ 861.743587][T29739] bpf_test_finish+0x53c/0x6b0 [ 861.743615][T29739] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 861.743637][T29739] ? __pfx_bpf_test_finish+0x10/0x10 [ 861.743662][T29739] ? _copy_from_user+0x94/0xb0 [ 861.743684][T29739] ? bpf_test_init+0x113/0x150 [ 861.743707][T29739] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 861.743745][T29739] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 861.743772][T29739] ? __fget_files+0x2a/0x420 [ 861.743798][T29739] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 861.743821][T29739] bpf_prog_test_run+0x2c7/0x340 [ 861.743842][T29739] __sys_bpf+0x643/0x950 [ 861.743871][T29739] ? __pfx___sys_bpf+0x10/0x10 [ 861.743911][T29739] ? ksys_write+0x242/0x270 [ 861.743938][T29739] ? __pfx_ksys_write+0x10/0x10 [ 861.743967][T29739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.743985][T29739] __x64_sys_bpf+0x7c/0x90 [ 861.744009][T29739] do_syscall_64+0x15f/0xf80 [ 861.744029][T29739] ? trace_irq_disable+0x3b/0x140 [ 861.744055][T29739] ? clear_bhb_loop+0x40/0x90 [ 861.744077][T29739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.744096][T29739] RIP: 0033:0x7fa5d9b9cdd9 [ 861.744113][T29739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.744129][T29739] RSP: 002b:00007fa5daaa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 861.744148][T29739] RAX: ffffffffffffffda RBX: 00007fa5d9e15fa0 RCX: 00007fa5d9b9cdd9 [ 861.744169][T29739] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 861.744181][T29739] RBP: 00007fa5daaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 861.744192][T29739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 861.744204][T29739] R13: 00007fa5d9e16038 R14: 00007fa5d9e15fa0 R15: 00007ffc39b981e8 [ 861.744233][T29739] [ 862.191547][T19951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 862.202909][T19951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 862.211327][T19951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 862.222123][T19951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 862.265369][T19951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 862.424562][T29760] bond3: option xmit_hash_policy: invalid value (10) [ 862.446839][T29760] bond3 (unregistering): Released all slaves [ 862.834756][T29792] FAULT_INJECTION: forcing a failure. [ 862.834756][T29792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.857797][T29792] CPU: 1 UID: 0 PID: 29792 Comm: syz.3.6418 Not tainted syzkaller #0 PREEMPT(full) [ 862.857824][T29792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 862.857836][T29792] Call Trace: [ 862.857843][T29792] [ 862.857852][T29792] dump_stack_lvl+0xe8/0x150 [ 862.857879][T29792] should_fail_ex+0x412/0x560 [ 862.857908][T29792] _copy_to_user+0x31/0xb0 [ 862.857936][T29792] simple_read_from_buffer+0xe1/0x170 [ 862.857962][T29792] proc_fail_nth_read+0x1bb/0x230 [ 862.857989][T29792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.858032][T29792] ? rw_verify_area+0x2a6/0x4d0 [ 862.858056][T29792] ? __fget_files+0x2a/0x420 [ 862.858075][T29792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.858100][T29792] vfs_read+0x20c/0xa70 [ 862.858129][T29792] ? __pfx___mutex_lock+0x10/0x10 [ 862.858151][T29792] ? __pfx_vfs_read+0x10/0x10 [ 862.858176][T29792] ? __fget_files+0x2a/0x420 [ 862.858200][T29792] ? __fget_files+0x3a0/0x420 [ 862.858220][T29792] ? __fget_files+0x2a/0x420 [ 862.858249][T29792] ksys_read+0x150/0x270 [ 862.858277][T29792] ? __pfx_ksys_read+0x10/0x10 [ 862.858308][T29792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.858334][T29792] do_syscall_64+0x15f/0xf80 [ 862.858357][T29792] ? clear_bhb_loop+0x40/0x90 [ 862.858379][T29792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.858397][T29792] RIP: 0033:0x7f7df975d60e [ 862.858414][T29792] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 862.858429][T29792] RSP: 002b:00007f7dfa716fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.858448][T29792] RAX: ffffffffffffffda RBX: 00007f7dfa7176c0 RCX: 00007f7df975d60e [ 862.858461][T29792] RDX: 000000000000000f RSI: 00007f7dfa7170a0 RDI: 0000000000000005 [ 862.858473][T29792] RBP: 00007f7dfa717090 R08: 0000000000000000 R09: 0000000000000000 [ 862.858503][T29792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 862.858513][T29792] R13: 00007f7df9a16038 R14: 00007f7df9a15fa0 R15: 00007fff433c9278 [ 862.858540][T29792] [ 863.150317][T29797] netlink: 'syz.2.6419': attribute type 21 has an invalid length. [ 863.520651][T29744] lo speed is unknown, defaulting to 1000 [ 863.645532][T29826] netlink: 'syz.3.6426': attribute type 83 has an invalid length. [ 863.828141][T29835] netlink: 'syz.4.6429': attribute type 11 has an invalid length. [ 864.175761][T29848] netlink: 'syz.4.6432': attribute type 14 has an invalid length. [ 864.294238][ T5623] Bluetooth: hci6: command tx timeout [ 864.514976][T29864] batadv_slave_1: entered promiscuous mode [ 864.551885][T29867] batadv_slave_1: left promiscuous mode [ 864.616211][T29744] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.624156][T29744] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.634608][T29744] bridge_slave_0: entered allmulticast mode [ 864.642490][T29744] bridge_slave_0: entered promiscuous mode [ 864.655976][T29744] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.663503][T29744] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.670831][T29744] bridge_slave_1: entered allmulticast mode [ 864.679429][T29744] bridge_slave_1: entered promiscuous mode [ 864.727184][T29744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.747687][T29744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.864522][T29744] team0: Port device team_slave_0 added [ 864.875910][T29744] team0: Port device team_slave_1 added [ 864.955391][T29882] bond1: option resend_igmp: invalid value (2100030) [ 864.973206][T29882] bond1: option resend_igmp: allowed values 0 - 255 [ 865.132383][T29896] __nla_validate_parse: 7 callbacks suppressed [ 865.132396][T29896] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6443'. [ 865.168530][T29882] bond1 (unregistering): Released all slaves [ 865.228401][T29744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.235535][T29744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.272148][T29744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.298074][T29896] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6443'. [ 865.310132][T29744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.334392][T29744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.386925][T29744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.596358][T29744] hsr_slave_0: entered promiscuous mode [ 865.615739][T29744] hsr_slave_1: entered promiscuous mode [ 865.622540][T29744] debugfs: 'hsr0' already exists in 'hsr' [ 865.631784][T29744] Cannot create hsr debugfs directory [ 865.665100][T29917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6452'. [ 865.975066][T29924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6454'. [ 866.047274][T29931] netlink: 'syz.3.6455': attribute type 11 has an invalid length. [ 866.067284][T29930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6456'. [ 866.083161][T29931] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6455'. [ 866.297362][T29935] macvtap0: entered allmulticast mode [ 866.347297][T29935] netlink: 'syz.3.6458': attribute type 1 has an invalid length. [ 866.363140][T29935] netlink: 'syz.3.6458': attribute type 2 has an invalid length. [ 866.373186][ T5623] Bluetooth: hci6: command tx timeout [ 866.386669][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6458'. [ 866.417683][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6458'. [ 866.491314][T29935] macvtap0 (unregistering): left allmulticast mode [ 866.989655][T29948] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6463'. [ 867.016773][T29955] xt_hl: Unknown Hop Limit match mode: 206 [ 867.069911][T29950] tipc: Enabling of bearer rejected, failed to enable media [ 867.184566][T29960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6467'. [ 867.321206][T29965] netlink: 'syz.5.6469': attribute type 3 has an invalid length. [ 867.345177][T29744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 867.358433][T29744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.366977][T29744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 867.389115][T29744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.420730][T29744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 867.465516][T29744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 867.497687][T29744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.502883][T29969] IPVS: Scheduler module ip_vs_ not found [ 867.542405][T29744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.744397][T29744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.804070][T29744] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.845264][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.852475][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.903574][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.910790][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.453740][ T5623] Bluetooth: hci6: command tx timeout [ 868.829101][T30019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.061713][T29744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.240287][T30032] lo speed is unknown, defaulting to 1000 [ 869.417152][T29744] veth0_vlan: entered promiscuous mode [ 869.540142][T30044] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 869.564557][T30044] bridge1: entered allmulticast mode [ 869.570914][T29744] veth1_vlan: entered promiscuous mode [ 869.692856][T29744] veth0_macvtap: entered promiscuous mode [ 869.718409][T29744] veth1_macvtap: entered promiscuous mode [ 869.782912][T29744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.854251][T29744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.970863][ T3362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.981590][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.982076][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.017127][ T3362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.070775][ T3362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.080077][ T3362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.192481][T30063] batadv_slave_0: entered promiscuous mode [ 870.535256][ T5623] Bluetooth: hci6: command tx timeout [ 870.604250][T30068] lo speed is unknown, defaulting to 1000 [ 870.623675][T30061] batadv_slave_0: left promiscuous mode [ 870.652176][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.678015][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.799571][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.812045][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.060266][T11498] bridge0: entered promiscuous mode [ 871.562435][T30107] lo speed is unknown, defaulting to 1000 [ 871.750283][T30121] netlink: 'syz.0.6511': attribute type 3 has an invalid length. [ 871.821972][T30121] __nla_validate_parse: 6 callbacks suppressed [ 871.821992][T30121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6511'. [ 871.883113][T30123] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6512'. [ 871.928517][T30125] netlink: 'syz.5.6513': attribute type 1 has an invalid length. [ 872.158800][T30125] netlink: 'syz.5.6513': attribute type 1 has an invalid length. [ 872.308597][T30141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6516'. [ 872.370716][T30125] netlink: 'syz.5.6513': attribute type 1 has an invalid length. [ 872.395936][T30125] netlink: 'syz.5.6513': attribute type 1 has an invalid length. [ 872.597233][T30125] netlink: 'syz.5.6513': attribute type 1 has an invalid length. [ 873.322143][T30178] netlink: 364 bytes leftover after parsing attributes in process `syz.5.6526'. [ 873.459021][T30187] sctp: [Deprecated]: syz.3.6529 (pid 30187) Use of int in maxseg socket option. [ 873.459021][T30187] Use struct sctp_assoc_value instead [ 874.012296][T30213] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6537'. [ 874.050045][T30215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6538'. [ 874.075413][T30215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6538'. [ 874.282518][T30213] syzkaller0: entered promiscuous mode [ 874.311188][T30213] syzkaller0: entered allmulticast mode [ 874.650669][T30239] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6543'. [ 874.673711][T30243] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 875.051632][T30263] erspan1: entered allmulticast mode [ 875.076999][T30261] syzkaller1: entered promiscuous mode [ 875.082617][T30261] syzkaller1: entered allmulticast mode [ 875.119015][T30264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6553'. [ 875.281384][T30272] : renamed from veth0_to_bond (while UP) [ 875.300298][T30274] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002 [ 875.355905][T30274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6557'. [ 875.507230][T30281] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 875.523456][T30281] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 875.654070][T30291] tipc: Started in network mode [ 875.674907][T30291] tipc: Node identity 080211000001, cluster identity 4711 [ 875.692487][T30291] tipc: Enabled bearer , priority 0 [ 875.725262][T30291] tipc: Resetting bearer [ 875.879527][T30298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.450179][T30337] netlink: 'syz.4.6580': attribute type 9 has an invalid length. [ 876.517223][T30343] IPv6: Can't replace route, no match found [ 876.529452][T30343] IPv6: Can't replace route, no match found [ 876.723587][ T8369] tipc: Node number set to 134418688 [ 876.843765][T30360] __nla_validate_parse: 9 callbacks suppressed [ 876.843850][T30360] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6587'. [ 876.875173][T30358] netlink: 'syz.2.6585': attribute type 4 has an invalid length. [ 877.209962][T30379] tipc: Started in network mode [ 877.227736][T30379] tipc: Node identity aa1437044283, cluster identity 4711 [ 877.236843][T30379] tipc: Enabled bearer , priority 0 [ 877.247606][T30383] FAULT_INJECTION: forcing a failure. [ 877.247606][T30383] name failslab, interval 1, probability 0, space 0, times 0 [ 877.276578][T30383] CPU: 0 UID: 0 PID: 30383 Comm: syz.2.6595 Not tainted syzkaller #0 PREEMPT(full) [ 877.276604][T30383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 877.276615][T30383] Call Trace: [ 877.276622][T30383] [ 877.276630][T30383] dump_stack_lvl+0xe8/0x150 [ 877.276656][T30383] should_fail_ex+0x412/0x560 [ 877.276680][T30383] should_failslab+0xa8/0x100 [ 877.276708][T30383] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 877.276733][T30383] ? __alloc_skb+0x186/0x7d0 [ 877.276752][T30383] ? __alloc_skb+0x1d0/0x7d0 [ 877.276770][T30383] ? __local_bh_enable_ip+0xd0/0x130 [ 877.276791][T30383] __alloc_skb+0x1d0/0x7d0 [ 877.276814][T30383] netlink_sendmsg+0x5d4/0xb40 [ 877.276845][T30383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.276870][T30383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 877.276894][T30383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 877.276921][T30383] ____sys_sendmsg+0x972/0x9f0 [ 877.276944][T30383] ? __might_fault+0xaf/0x130 [ 877.276972][T30383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.277001][T30383] ? import_iovec+0x73/0xa0 [ 877.277028][T30383] ___sys_sendmsg+0x2a5/0x360 [ 877.277049][T30383] ? __lock_acquire+0x6b5/0x2cf0 [ 877.277072][T30383] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.277125][T30383] ? __fget_files+0x2a/0x420 [ 877.277144][T30383] ? __fget_files+0x3a0/0x420 [ 877.277171][T30383] __x64_sys_sendmsg+0x1bd/0x2a0 [ 877.277195][T30383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 877.277226][T30383] ? __pfx_ksys_write+0x10/0x10 [ 877.277259][T30383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.277279][T30383] do_syscall_64+0x15f/0xf80 [ 877.277299][T30383] ? trace_irq_disable+0x3b/0x140 [ 877.277323][T30383] ? clear_bhb_loop+0x40/0x90 [ 877.277345][T30383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.277362][T30383] RIP: 0033:0x7fa5d9b9cdd9 [ 877.277381][T30383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.277396][T30383] RSP: 002b:00007fa5daaa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.277416][T30383] RAX: ffffffffffffffda RBX: 00007fa5d9e15fa0 RCX: 00007fa5d9b9cdd9 [ 877.277429][T30383] RDX: 0000000000000000 RSI: 000020000000d040 RDI: 0000000000000003 [ 877.277441][T30383] RBP: 00007fa5daaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 877.277453][T30383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.277464][T30383] R13: 00007fa5d9e16038 R14: 00007fa5d9e15fa0 R15: 00007ffc39b981e8 [ 877.277500][T30383] [ 877.573763][T30379] syzkaller0: entered promiscuous mode [ 877.579303][T30379] syzkaller0: entered allmulticast mode [ 877.598623][T30393] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6599'. [ 877.640873][T30379] tipc: Resetting bearer [ 877.673370][T30378] tipc: Resetting bearer [ 877.739862][T30378] tipc: Disabling bearer [ 877.786204][T30400] bridge0: port 3(bond0) entered blocking state [ 877.800289][T30400] bridge0: port 3(bond0) entered disabled state [ 877.818391][T30400] bond0: entered allmulticast mode [ 877.830239][T30400] bond_slave_0: entered allmulticast mode [ 877.836121][T30400] bond_slave_1: entered allmulticast mode [ 877.846236][T30400] bond0: entered promiscuous mode [ 877.852489][T30400] bond_slave_0: entered promiscuous mode [ 877.859224][T30400] bond_slave_1: entered promiscuous mode [ 878.037247][T30417] erspan1: entered allmulticast mode [ 878.057049][T30414] tipc: Enabled bearer , priority 0 [ 878.090442][T30423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6607'. [ 878.112826][ T30] audit: type=1800 audit(1777291687.386:15): pid=30418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6606" name="memory.events" dev="tmpfs" ino=271 res=0 errno=0 [ 878.172054][T30426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6605'. [ 878.287010][T30414] syzkaller0: entered promiscuous mode [ 878.292606][T30414] syzkaller0: entered allmulticast mode [ 878.311273][T30414] tipc: Resetting bearer [ 878.385852][T30434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6612'. [ 878.406924][T30435] syzkaller1: entered promiscuous mode [ 878.431631][T30441] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6613'. [ 878.445530][T30441] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 878.447397][T30435] syzkaller1: entered allmulticast mode [ 878.494968][T30441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6613'. [ 878.504149][T30441] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6613'. [ 878.557605][T30430] tipc: Resetting bearer [ 879.271833][T30475] FAULT_INJECTION: forcing a failure. [ 879.271833][T30475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.285329][T30475] CPU: 1 UID: 0 PID: 30475 Comm: syz.2.6626 Not tainted syzkaller #0 PREEMPT(full) [ 879.285350][T30475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.285359][T30475] Call Trace: [ 879.285366][T30475] [ 879.285373][T30475] dump_stack_lvl+0xe8/0x150 [ 879.285394][T30475] should_fail_ex+0x412/0x560 [ 879.285417][T30475] _copy_from_iter+0x1d3/0x1670 [ 879.285437][T30475] ? rcu_is_watching+0x15/0xb0 [ 879.285459][T30475] ? __pfx__copy_from_iter+0x10/0x10 [ 879.285482][T30475] ? netlink_sendmsg+0x650/0xb40 [ 879.285498][T30475] ? skb_put+0x11b/0x210 [ 879.285518][T30475] netlink_sendmsg+0x6c0/0xb40 [ 879.285543][T30475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.285564][T30475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 879.285582][T30475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 879.285603][T30475] ____sys_sendmsg+0x972/0x9f0 [ 879.285621][T30475] ? __might_fault+0xaf/0x130 [ 879.285642][T30475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.285665][T30475] ? import_iovec+0x73/0xa0 [ 879.285686][T30475] ___sys_sendmsg+0x2a5/0x360 [ 879.285702][T30475] ? __lock_acquire+0x6b5/0x2cf0 [ 879.285720][T30475] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.285764][T30475] ? __fget_files+0x2a/0x420 [ 879.285780][T30475] ? __fget_files+0x3a0/0x420 [ 879.285804][T30475] __x64_sys_sendmsg+0x1bd/0x2a0 [ 879.285823][T30475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.285848][T30475] ? __pfx_ksys_write+0x10/0x10 [ 879.285874][T30475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.285891][T30475] do_syscall_64+0x15f/0xf80 [ 879.285907][T30475] ? trace_irq_disable+0x3b/0x140 [ 879.285927][T30475] ? clear_bhb_loop+0x40/0x90 [ 879.285944][T30475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.285958][T30475] RIP: 0033:0x7fa5d9b9cdd9 [ 879.285973][T30475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.285985][T30475] RSP: 002b:00007fa5daaa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.286002][T30475] RAX: ffffffffffffffda RBX: 00007fa5d9e15fa0 RCX: 00007fa5d9b9cdd9 [ 879.286013][T30475] RDX: 0000000000000000 RSI: 000020000000d040 RDI: 0000000000000003 [ 879.286022][T30475] RBP: 00007fa5daaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 879.286031][T30475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.286040][T30475] R13: 00007fa5d9e16038 R14: 00007fa5d9e15fa0 R15: 00007ffc39b981e8 [ 879.286062][T30475] [ 881.402525][T30430] tipc: Disabling bearer [ 881.460387][ T5810] tipc: Node number set to 3902224132 [ 881.696227][T30502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6630'. [ 881.917675][T30511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6636'. [ 882.175776][T30519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.200059][T30519] ieee802154 phy0 wpan0: encryption failed: -22 [ 882.340221][T30539] netlink: 'syz.3.6645': attribute type 1 has an invalid length. [ 883.245145][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6657'. [ 883.460663][T30604] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6664'. [ 883.460802][T30607] FAULT_INJECTION: forcing a failure. [ 883.460802][T30607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.492586][T30607] CPU: 0 UID: 0 PID: 30607 Comm: syz.3.6665 Not tainted syzkaller #0 PREEMPT(full) [ 883.492611][T30607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 883.492622][T30607] Call Trace: [ 883.492629][T30607] [ 883.492636][T30607] dump_stack_lvl+0xe8/0x150 [ 883.492664][T30607] should_fail_ex+0x412/0x560 [ 883.492689][T30607] _copy_from_user+0x2d/0xb0 [ 883.492713][T30607] ___sys_sendmsg+0x1c6/0x360 [ 883.492735][T30607] ? __lock_acquire+0x6b5/0x2cf0 [ 883.492759][T30607] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.492815][T30607] ? __fget_files+0x2a/0x420 [ 883.492834][T30607] ? __fget_files+0x3a0/0x420 [ 883.492866][T30607] __x64_sys_sendmsg+0x1bd/0x2a0 [ 883.492891][T30607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 883.492920][T30607] ? __pfx_ksys_write+0x10/0x10 [ 883.492952][T30607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.492975][T30607] do_syscall_64+0x15f/0xf80 [ 883.492992][T30607] ? trace_irq_disable+0x3b/0x140 [ 883.493017][T30607] ? clear_bhb_loop+0x40/0x90 [ 883.493037][T30607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.493053][T30607] RIP: 0033:0x7f7df979cdd9 [ 883.493076][T30607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.493091][T30607] RSP: 002b:00007f7dfa717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.493110][T30607] RAX: ffffffffffffffda RBX: 00007f7df9a15fa0 RCX: 00007f7df979cdd9 [ 883.493123][T30607] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 883.493135][T30607] RBP: 00007f7dfa717090 R08: 0000000000000000 R09: 0000000000000000 [ 883.493147][T30607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.493157][T30607] R13: 00007f7df9a16038 R14: 00007f7df9a15fa0 R15: 00007fff433c9278 [ 883.493183][T30607] [ 883.501204][T30602] erspan1: entered allmulticast mode [ 883.507303][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6663'. [ 883.919036][T30625] sctp: [Deprecated]: syz.5.6668 (pid 30625) Use of int in max_burst socket option deprecated. [ 883.919036][T30625] Use struct sctp_assoc_value instead [ 884.126454][T30638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6671'. [ 884.176883][T30643] FAULT_INJECTION: forcing a failure. [ 884.176883][T30643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.191613][T30643] CPU: 1 UID: 0 PID: 30643 Comm: syz.5.6674 Not tainted syzkaller #0 PREEMPT(full) [ 884.191637][T30643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.191648][T30643] Call Trace: [ 884.191654][T30643] [ 884.191662][T30643] dump_stack_lvl+0xe8/0x150 [ 884.191688][T30643] should_fail_ex+0x412/0x560 [ 884.191716][T30643] _copy_from_user+0x2d/0xb0 [ 884.191742][T30643] do_sock_getsockopt+0x200/0x7e0 [ 884.191770][T30643] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 884.191806][T30643] ? __fget_files+0x3a0/0x420 [ 884.191827][T30643] ? __fget_files+0x2a/0x420 [ 884.191855][T30643] __x64_sys_getsockopt+0x1a4/0x240 [ 884.191882][T30643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.191903][T30643] do_syscall_64+0x15f/0xf80 [ 884.191923][T30643] ? trace_irq_disable+0x3b/0x140 [ 884.191949][T30643] ? clear_bhb_loop+0x40/0x90 [ 884.191971][T30643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.191989][T30643] RIP: 0033:0x7fc22df9cdd9 [ 884.192006][T30643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.192022][T30643] RSP: 002b:00007fc22ed74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 884.192048][T30643] RAX: ffffffffffffffda RBX: 00007fc22e215fa0 RCX: 00007fc22df9cdd9 [ 884.192062][T30643] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 884.192073][T30643] RBP: 00007fc22ed74090 R08: 0000200000000500 R09: 0000000000000000 [ 884.192085][T30643] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 884.192097][T30643] R13: 00007fc22e216038 R14: 00007fc22e215fa0 R15: 00007ffea27a4778 [ 884.192127][T30643] [ 884.214135][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6672'. [ 884.440263][T30645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6671'. [ 884.652123][T30669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6679'. [ 884.704958][T30671] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 884.725645][T30671] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 884.757408][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6681'. [ 884.832329][T18656] IPVS: starting estimator thread 0... [ 884.936062][T30677] IPVS: using max 40 ests per chain, 96000 per kthread [ 885.293198][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6688'. [ 885.348290][T30703] erspan1: entered allmulticast mode [ 885.426513][T30689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.471763][T30707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 885.567091][T30689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.716231][T30689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.771094][T30721] tipc: Started in network mode [ 885.778120][T30721] tipc: Node identity ac14140f, cluster identity 4711 [ 885.797855][T30721] tipc: New replicast peer: 255.255.255.255 [ 885.815049][T30721] tipc: Enabled bearer , priority 5 [ 885.852399][T30689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.029141][ T3362] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.128766][ T1028] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.188148][ T6432] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.268846][ T3362] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.351229][T30733] lo speed is unknown, defaulting to 1000 [ 886.838913][T30761] netlink: 'syz.4.6708': attribute type 15 has an invalid length. [ 886.849883][T30761] netlink: 'syz.4.6708': attribute type 25 has an invalid length. [ 886.859643][T11495] tipc: Node number set to 2886997007 [ 886.929084][T30764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 886.936409][T30764] IPv6: NLM_F_CREATE should be set when creating new route [ 886.943687][T30764] IPv6: NLM_F_CREATE should be set when creating new route [ 886.985975][T30771] __nla_validate_parse: 11 callbacks suppressed [ 886.985995][T30771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6711'. [ 887.035866][T30775] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6709'. [ 887.428009][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6714'. [ 887.485013][T30783] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6714'. [ 887.645223][T30799] netlink: 364 bytes leftover after parsing attributes in process `syz.2.6717'. [ 887.756701][T30799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6717'. [ 887.838456][T30810] netlink: 364 bytes leftover after parsing attributes in process `syz.0.6719'. [ 887.917622][T30804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6719'. [ 888.015422][T30817] netlink: 'syz.4.6723': attribute type 21 has an invalid length. [ 888.033107][T30817] netlink: 'syz.4.6723': attribute type 22 has an invalid length. [ 888.061809][T30817] netlink: 'syz.4.6723': attribute type 23 has an invalid length. [ 888.092404][T30817] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6723'. [ 888.122185][T30823] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6725'. [ 888.329516][T30839] ip6erspan0: entered allmulticast mode [ 889.251577][T30880] netlink: 'syz.4.6741': attribute type 4 has an invalid length. [ 889.507000][T30894] netlink: 'syz.0.6748': attribute type 29 has an invalid length. [ 889.800309][T30918] netlink: 'syz.2.6751': attribute type 28 has an invalid length. [ 890.225281][T30934] erspan1: entered allmulticast mode [ 890.977474][T30971] netlink: 'syz.3.6766': attribute type 1 has an invalid length. [ 891.166834][T30988] x_tables: duplicate underflow at hook 2 [ 891.196691][T30978] bond2: (slave veth3): Enslaving as an active interface with a down link [ 891.205440][T30979] batadv_slave_1: entered promiscuous mode [ 891.242557][T30986] bond2: (slave veth5): Enslaving as an active interface with a down link [ 891.284331][T30971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 891.367637][T30995] erspan1: entered allmulticast mode [ 891.450917][T31000] netlink: 'syz.3.6771': attribute type 21 has an invalid length. [ 891.788374][T31013] netlink: 'syz.0.6776': attribute type 4 has an invalid length. [ 891.810373][T31013] netlink: 'syz.0.6776': attribute type 4 has an invalid length. [ 891.833949][T30973] batadv_slave_1: left promiscuous mode [ 892.048111][T31025] xt_hashlimit: size too large, truncated to 1048576 [ 892.100449][T31027] __nla_validate_parse: 8 callbacks suppressed [ 892.100468][T31027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6781'. [ 892.196869][T31031] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 892.414350][T31041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6785'. [ 892.456410][T31043] team_slave_0: entered promiscuous mode [ 892.462259][T31043] team_slave_0: entered allmulticast mode [ 892.570304][T31050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6789'. [ 892.937135][T31073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6796'. [ 893.024684][T31075] syzkaller0: entered promiscuous mode [ 893.033210][T31075] syzkaller0: entered allmulticast mode [ 893.063820][T31075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6797'. [ 893.162872][T31082] rdma_rxe: rxe_newlink: failed to add lo [ 893.380040][T31096] ip6erspan0: entered allmulticast mode [ 893.388739][T31096] validate_nla: 2 callbacks suppressed [ 893.388780][T31096] netlink: 'syz.4.6803': attribute type 21 has an invalid length. [ 893.650879][T31109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.665584][T31109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6808'. [ 893.886949][T31111] erspan1: entered allmulticast mode [ 893.927861][T31111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6809'. [ 893.988298][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6811'. [ 894.238546][T31131] netlink: 'syz.0.6816': attribute type 1 has an invalid length. [ 894.280453][T31131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 895.121195][T31175] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6827'. [ 895.153943][T31175] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 895.156215][T31177] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6827'. [ 895.184353][T31177] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 895.258700][T31185] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.265503][T31185] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.772159][T31205] team0: Failed to send options change via netlink (err -105) [ 895.780144][T31205] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 895.789699][T31205] team0: Port device team_slave_0 removed [ 895.806307][T31208] hmac(sha224): entered promiscuous mode [ 895.817444][T31195] bridge_slave_0 (unregistering): left allmulticast mode [ 895.828687][T31195] bridge_slave_0 (unregistering): left promiscuous mode [ 895.843187][T31195] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.001165][T31219] netlink: 'syz.2.6842': attribute type 29 has an invalid length. [ 896.670973][T31255] netlink: 'syz.0.6851': attribute type 7 has an invalid length. [ 896.680327][T31255] netlink: 'syz.0.6851': attribute type 8 has an invalid length. [ 896.714828][T31255] gretap0: entered promiscuous mode [ 896.817423][T31255] gretap0: left promiscuous mode [ 897.107525][T31267] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 897.208580][T31272] __nla_validate_parse: 8 callbacks suppressed [ 897.208599][T31272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6856'. [ 897.271313][T31276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.303758][T31276] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6858'. [ 897.319398][T31276] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6858'. [ 897.387890][T31283] netlink: 364 bytes leftover after parsing attributes in process `syz.3.6860'. [ 897.399477][T31276] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6858'. [ 897.401255][T31286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.437177][T31276] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6858'. [ 897.456498][T31288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6860'. [ 897.514727][T31291] netlink: 'syz.4.6862': attribute type 1 has an invalid length. [ 897.602793][T31295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6862'. [ 897.605415][T31291] bond3: entered promiscuous mode [ 897.617708][T31291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.628702][T31295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6862'. [ 897.739242][T31291] bond3: (slave bridge4): making interface the new active one [ 897.764040][T31291] bridge4: entered promiscuous mode [ 897.791472][T31291] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 898.020547][T31317] netlink: 'syz.4.6868': attribute type 10 has an invalid length. [ 898.066178][T31317] team0: Device veth1_virt_wifi failed to register rx_handler [ 898.119726][T31326] ieee802154 phy0 wpan0: encryption failed: -22 [ 898.226387][T31326] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.370063][T31341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6874'. [ 898.887222][T31366] lo speed is unknown, defaulting to 1000 [ 899.826820][T31414] netlink: 'syz.4.6898': attribute type 1 has an invalid length. [ 900.270206][T31417] bond4: (slave bridge5): making interface the new active one [ 900.296615][T31417] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 900.492407][T31444] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 900.638794][T31457] erspan1: entered allmulticast mode [ 901.044388][T31466] netlink: 'syz.2.6913': attribute type 1 has an invalid length. [ 901.063635][T31466] netlink: 'syz.2.6913': attribute type 4 has an invalid length. [ 901.080873][T31466] netlink: 'syz.2.6913': attribute type 1 has an invalid length. [ 901.089101][T31466] netlink: 'syz.2.6913': attribute type 4 has an invalid length. [ 901.188963][T31480] xt_l2tp: missing protocol rule (udp|l2tpip) [ 901.300060][T31485] pim6reg: entered allmulticast mode [ 901.338876][T31483] lo speed is unknown, defaulting to 1000 [ 901.848876][T31506] IPVS: Scheduler module ip_vs_ not found [ 901.884224][T31516] tc_dump_action: action bad kind [ 901.976106][T31519] FAULT_INJECTION: forcing a failure. [ 901.976106][T31519] name failslab, interval 1, probability 0, space 0, times 0 [ 902.005890][T31519] CPU: 1 UID: 0 PID: 31519 Comm: syz.4.6927 Not tainted syzkaller #0 PREEMPT(full) [ 902.005937][T31519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 902.005961][T31519] Call Trace: [ 902.005978][T31519] [ 902.005996][T31519] dump_stack_lvl+0xe8/0x150 [ 902.006024][T31519] should_fail_ex+0x412/0x560 [ 902.006050][T31519] ? __d_alloc+0x37/0x6f0 [ 902.006073][T31519] should_failslab+0xa8/0x100 [ 902.006103][T31519] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 902.006136][T31519] __d_alloc+0x37/0x6f0 [ 902.006166][T31519] d_alloc+0x4b/0x190 [ 902.006187][T31519] ? lookup_one_qstr_excl+0xc4/0x360 [ 902.006214][T31519] lookup_one_qstr_excl+0xd8/0x360 [ 902.006238][T31519] ? lookup_noperm_common+0x245/0x430 [ 902.006264][T31519] start_dirop+0x5c/0x90 [ 902.006286][T31519] simple_start_creating+0xcc/0x110 [ 902.006315][T31519] ? __pfx_simple_start_creating+0x10/0x10 [ 902.006339][T31519] ? do_raw_spin_unlock+0xf5/0x210 [ 902.006365][T31519] ? mntput+0x65/0xc0 [ 902.006398][T31519] debugfs_start_creating+0xdb/0x1a0 [ 902.006426][T31519] __debugfs_create_file+0x6f/0x400 [ 902.006457][T31519] debugfs_create_file_full+0x3f/0x60 [ 902.006487][T31519] ref_tracker_dir_debugfs+0x197/0x360 [ 902.006512][T31519] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 902.006561][T31519] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 902.006587][T31519] ? alloc_netdev_mqs+0xa8/0x1210 [ 902.006614][T31519] ? __raw_spin_lock_init+0x45/0x100 [ 902.006643][T31519] alloc_netdev_mqs+0x274/0x1210 [ 902.006666][T31519] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 902.006699][T31519] rtnl_create_link+0x31f/0xd70 [ 902.006731][T31519] rtnl_newlink_create+0x277/0xb70 [ 902.006753][T31519] ? __pfx___nla_validate_parse+0x10/0x10 [ 902.006788][T31519] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 902.006813][T31519] ? __pfx___mutex_lock+0x10/0x10 [ 902.006846][T31519] ? ns_capable+0x89/0xe0 [ 902.006869][T31519] rtnl_newlink+0x166a/0x1bb0 [ 902.006912][T31519] ? __pfx_rtnl_newlink+0x10/0x10 [ 902.006929][T31519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.006986][T31519] ? kasan_quarantine_put+0xbb/0x1f0 [ 902.007010][T31519] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.007033][T31519] ? nlmon_xmit+0xb0/0x100 [ 902.007053][T31519] ? kmem_cache_free+0x182/0x650 [ 902.007087][T31519] ? __lock_acquire+0x6b5/0x2cf0 [ 902.007110][T31519] ? __dev_queue_xmit+0x2b6/0x3950 [ 902.007137][T31519] ? __local_bh_enable_ip+0xd0/0x130 [ 902.007157][T31519] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.007176][T31519] ? __dev_queue_xmit+0x2b6/0x3950 [ 902.007198][T31519] ? __local_bh_enable_ip+0xd0/0x130 [ 902.007216][T31519] ? __dev_queue_xmit+0x2b6/0x3950 [ 902.007247][T31519] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 902.007283][T31519] ? __pfx_rtnl_newlink+0x10/0x10 [ 902.007303][T31519] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 902.007328][T31519] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 902.007347][T31519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 902.007366][T31519] ? ref_tracker_free+0x693/0x840 [ 902.007393][T31519] ? __pfx_ref_tracker_free+0x10/0x10 [ 902.007427][T31519] netlink_rcv_skb+0x232/0x4b0 [ 902.007451][T31519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 902.007474][T31519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 902.007493][T31519] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.007537][T31519] netlink_unicast+0x75c/0x8e0 [ 902.007568][T31519] netlink_sendmsg+0x813/0xb40 [ 902.007600][T31519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.007625][T31519] ? ktime_get+0x45/0x220 [ 902.007649][T31519] ? aa_sock_msg_perm+0xf1/0x1b0 [ 902.007674][T31519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 902.007702][T31519] ____sys_sendmsg+0x972/0x9f0 [ 902.007726][T31519] ? __might_fault+0xaf/0x130 [ 902.007755][T31519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.007788][T31519] ? import_iovec+0x73/0xa0 [ 902.007817][T31519] ___sys_sendmsg+0x2a5/0x360 [ 902.007839][T31519] ? __lock_acquire+0x6b5/0x2cf0 [ 902.007863][T31519] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.007926][T31519] ? __fget_files+0x2a/0x420 [ 902.007948][T31519] ? __fget_files+0x3a0/0x420 [ 902.007980][T31519] __x64_sys_sendmsg+0x1bd/0x2a0 [ 902.008006][T31519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.008040][T31519] ? __pfx_ksys_write+0x10/0x10 [ 902.008074][T31519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.008095][T31519] do_syscall_64+0x15f/0xf80 [ 902.008115][T31519] ? trace_irq_disable+0x3b/0x140 [ 902.008141][T31519] ? clear_bhb_loop+0x40/0x90 [ 902.008164][T31519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.008182][T31519] RIP: 0033:0x7fbfc859cdd9 [ 902.008200][T31519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.008216][T31519] RSP: 002b:00007fbfc9407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.008235][T31519] RAX: ffffffffffffffda RBX: 00007fbfc8815fa0 RCX: 00007fbfc859cdd9 [ 902.008249][T31519] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000006 [ 902.008261][T31519] RBP: 00007fbfc9407090 R08: 0000000000000000 R09: 0000000000000000 [ 902.008273][T31519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.008284][T31519] R13: 00007fbfc8816038 R14: 00007fbfc8815fa0 R15: 00007ffcfdfa2318 [ 902.008316][T31519] [ 902.650099][T31532] erspan1: entered allmulticast mode [ 902.716493][T31537] __nla_validate_parse: 26 callbacks suppressed [ 902.716512][T31537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6931'. [ 902.896951][T31547] IPVS: Scheduler module ip_vs_ not found [ 902.929782][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6936'. [ 902.976536][T31553] netlink: 364 bytes leftover after parsing attributes in process `syz.4.6938'. [ 903.270441][T31556] lo speed is unknown, defaulting to 1000 [ 903.364172][T31568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6943'. [ 903.406191][T31568] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 903.741004][T31550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6936'. [ 903.797898][T31550] sctp: [Deprecated]: syz.3.6936 (pid 31550) Use of int in maxseg socket option. [ 903.797898][T31550] Use struct sctp_assoc_value instead [ 903.927704][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6936'. [ 903.973595][T31550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6936'. [ 903.993763][T31550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6936'. [ 904.030593][T31599] netlink: 388 bytes leftover after parsing attributes in process `syz.3.6936'. [ 904.056036][T31591] IPVS: Scheduler module ip_vs_ not found [ 904.195726][T31603] netlink: 364 bytes leftover after parsing attributes in process `syz.5.6953'. [ 904.216535][T31605] FAULT_INJECTION: forcing a failure. [ 904.216535][T31605] name failslab, interval 1, probability 0, space 0, times 0 [ 904.252000][T31605] CPU: 1 UID: 0 PID: 31605 Comm: syz.0.6954 Not tainted syzkaller #0 PREEMPT(full) [ 904.252026][T31605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 904.252037][T31605] Call Trace: [ 904.252046][T31605] [ 904.252054][T31605] dump_stack_lvl+0xe8/0x150 [ 904.252082][T31605] should_fail_ex+0x412/0x560 [ 904.252110][T31605] should_failslab+0xa8/0x100 [ 904.252140][T31605] __kmalloc_cache_noprof+0x88/0x660 [ 904.252164][T31605] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 904.252186][T31605] ? sctp_add_bind_addr+0x8c/0x370 [ 904.252212][T31605] sctp_add_bind_addr+0x8c/0x370 [ 904.252238][T31605] sctp_copy_local_addr_list+0x314/0x4f0 [ 904.252263][T31605] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 904.252284][T31605] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 904.252306][T31605] ? sctp_v6_is_any+0x64/0x80 [ 904.252329][T31605] ? sctp_copy_one_addr+0x93/0x360 [ 904.252354][T31605] sctp_bind_addr_copy+0xb3/0x3c0 [ 904.252376][T31605] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 904.252407][T31605] sctp_connect_new_asoc+0x2ff/0x6b0 [ 904.252433][T31605] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 904.252457][T31605] ? sctp_get_af_specific+0x29/0x80 [ 904.252474][T31605] ? sctp_inet6_send_verify+0x80/0x300 [ 904.252489][T31605] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 904.252515][T31605] __sctp_connect+0x5cb/0xdc0 [ 904.252551][T31605] ? __pfx___sctp_connect+0x10/0x10 [ 904.252575][T31605] ? security_sctp_bind_connect+0x7e/0x2c0 [ 904.252596][T31605] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 904.252626][T31605] sctp_getsockopt_connectx3+0x227/0x360 [ 904.252647][T31605] ? lock_sock_nested+0x6a/0x100 [ 904.252676][T31605] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 904.252700][T31605] ? sctp_getsockopt+0x12f/0xb90 [ 904.252725][T31605] ? __local_bh_enable_ip+0xd0/0x130 [ 904.252749][T31605] sctp_getsockopt+0x984/0xb90 [ 904.252772][T31605] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 904.252790][T31605] do_sock_getsockopt+0x51d/0x7e0 [ 904.252818][T31605] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 904.252854][T31605] ? __fget_files+0x3a0/0x420 [ 904.252875][T31605] ? __fget_files+0x2a/0x420 [ 904.252902][T31605] __x64_sys_getsockopt+0x1a4/0x240 [ 904.252930][T31605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.252951][T31605] do_syscall_64+0x15f/0xf80 [ 904.252970][T31605] ? trace_irq_disable+0x3b/0x140 [ 904.252995][T31605] ? clear_bhb_loop+0x40/0x90 [ 904.253018][T31605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.253038][T31605] RIP: 0033:0x7f7c5379cdd9 [ 904.253055][T31605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.253070][T31605] RSP: 002b:00007f7c546b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 904.253088][T31605] RAX: ffffffffffffffda RBX: 00007f7c53a15fa0 RCX: 00007f7c5379cdd9 [ 904.253100][T31605] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 904.253111][T31605] RBP: 00007f7c546b8090 R08: 0000200000000500 R09: 0000000000000000 [ 904.253122][T31605] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 904.253134][T31605] R13: 00007f7c53a16038 R14: 00007f7c53a15fa0 R15: 00007ffe02cf3438 [ 904.253163][T31605] [ 905.841838][T31646] netlink: 'syz.5.6966': attribute type 1 has an invalid length. [ 905.871757][T31646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.893643][T31643] IPVS: Scheduler module ip_vs_ not found [ 906.093252][T31651] netlink: 'syz.4.6967': attribute type 4 has an invalid length. [ 906.495009][T31669] sit1: entered allmulticast mode [ 906.746444][T31688] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 906.761585][T31684] IPVS: Scheduler module ip_vs_ not found [ 906.878654][T31694] lo speed is unknown, defaulting to 1000 [ 907.104566][T31707] netlink: 'syz.2.6985': attribute type 89 has an invalid length. [ 907.499607][T31719] lo speed is unknown, defaulting to 1000 [ 907.939840][T31724] sit1: entered allmulticast mode [ 908.001964][T31729] __nla_validate_parse: 9 callbacks suppressed [ 908.001983][T31729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6993'. [ 908.271620][T31736] IPVS: Scheduler module ip_vs_ not found [ 908.419172][T31729] lo speed is unknown, defaulting to 1000 [ 908.527760][T31756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6998'. [ 908.648293][T31759] openvswitch: netlink: Multiple metadata blocks provided [ 908.687312][T31761] openvswitch: netlink: Multiple metadata blocks provided [ 908.745557][T31763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7000'. [ 909.069867][T31783] Cannot find add_set index 3 as target [ 909.165326][T31785] IPVS: Scheduler module ip_vs_ not found [ 909.514972][T31810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7012'. [ 910.008938][T31823] IPVS: Scheduler module ip_vs_ not found [ 910.190308][T31837] hsr0: entered promiscuous mode [ 910.556179][T31855] netlink: 'syz.3.7029': attribute type 1 has an invalid length. [ 910.564441][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7029'. [ 910.576253][T31855] netlink: 'syz.3.7029': attribute type 1 has an invalid length. [ 910.731961][T31865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7031'. [ 910.760857][T31865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7031'. [ 910.765400][T31871] netlink: 364 bytes leftover after parsing attributes in process `syz.0.7030'. [ 910.797225][T31873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7031'. [ 910.880842][T31869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7032'. [ 911.022951][T31878] IPVS: Scheduler module ip_vs_ not found [ 911.181033][T31891] tipc: Enabled bearer , priority 0 [ 911.255750][T31891] tipc: Resetting bearer [ 911.451761][T31898] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 911.484804][T31898] syzkaller1: linktype set to 0 [ 911.714600][T31918] ipt_rpfilter: unknown options [ 911.725805][T31912] lo speed is unknown, defaulting to 1000 [ 911.762841][T31918] netlink: 'syz.5.7048': attribute type 1 has an invalid length. [ 911.794181][T31923] FAULT_INJECTION: forcing a failure. [ 911.794181][T31923] name failslab, interval 1, probability 0, space 0, times 0 [ 911.820385][T31923] CPU: 0 UID: 0 PID: 31923 Comm: syz.4.7049 Not tainted syzkaller #0 PREEMPT(full) [ 911.820410][T31923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 911.820422][T31923] Call Trace: [ 911.820429][T31923] [ 911.820437][T31923] dump_stack_lvl+0xe8/0x150 [ 911.820465][T31923] should_fail_ex+0x412/0x560 [ 911.820494][T31923] should_failslab+0xa8/0x100 [ 911.820523][T31923] __kmalloc_cache_noprof+0x88/0x660 [ 911.820550][T31923] ? sctp_add_bind_addr+0x8c/0x370 [ 911.820577][T31923] sctp_add_bind_addr+0x8c/0x370 [ 911.820600][T31923] sctp_copy_local_addr_list+0x314/0x4f0 [ 911.820626][T31923] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 911.820648][T31923] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 911.820671][T31923] ? sctp_v6_is_any+0x64/0x80 [ 911.820696][T31923] ? sctp_copy_one_addr+0x93/0x360 [ 911.820719][T31923] sctp_bind_addr_copy+0xb3/0x3c0 [ 911.820742][T31923] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 911.820773][T31923] sctp_connect_new_asoc+0x2ff/0x6b0 [ 911.820808][T31923] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 911.820839][T31923] ? sctp_get_af_specific+0x29/0x80 [ 911.820859][T31923] ? sctp_inet6_send_verify+0x80/0x300 [ 911.820879][T31923] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 911.820907][T31923] __sctp_connect+0x5cb/0xdc0 [ 911.820944][T31923] ? __pfx___sctp_connect+0x10/0x10 [ 911.820968][T31923] ? security_sctp_bind_connect+0x7e/0x2c0 [ 911.820991][T31923] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 911.821015][T31923] sctp_getsockopt_connectx3+0x227/0x360 [ 911.821035][T31923] ? lock_sock_nested+0x6a/0x100 [ 911.821064][T31923] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 911.821090][T31923] ? sctp_getsockopt+0x12f/0xb90 [ 911.821116][T31923] ? __local_bh_enable_ip+0xd0/0x130 [ 911.821140][T31923] sctp_getsockopt+0x984/0xb90 [ 911.821165][T31923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 911.821185][T31923] do_sock_getsockopt+0x51d/0x7e0 [ 911.821214][T31923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 911.821253][T31923] ? __fget_files+0x3a0/0x420 [ 911.821274][T31923] ? __fget_files+0x2a/0x420 [ 911.821302][T31923] __x64_sys_getsockopt+0x1a4/0x240 [ 911.821331][T31923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.821352][T31923] do_syscall_64+0x15f/0xf80 [ 911.821371][T31923] ? trace_irq_disable+0x3b/0x140 [ 911.821397][T31923] ? clear_bhb_loop+0x40/0x90 [ 911.821421][T31923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.821439][T31923] RIP: 0033:0x7fbfc859cdd9 [ 911.821457][T31923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.821473][T31923] RSP: 002b:00007fbfc9407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 911.821493][T31923] RAX: ffffffffffffffda RBX: 00007fbfc8815fa0 RCX: 00007fbfc859cdd9 [ 911.821507][T31923] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 911.821517][T31923] RBP: 00007fbfc9407090 R08: 0000200000000500 R09: 0000000000000000 [ 911.821530][T31923] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 911.821541][T31923] R13: 00007fbfc8816038 R14: 00007fbfc8815fa0 R15: 00007ffcfdfa2318 [ 911.821571][T31923] [ 912.616707][T31942] xt_hashlimit: size too large, truncated to 1048576 [ 912.817877][T31950] lo speed is unknown, defaulting to 1000 [ 912.882612][T31959] netlink: 'syz.3.7060': attribute type 1 has an invalid length. [ 912.903543][T31959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.981248][T31963] FAULT_INJECTION: forcing a failure. [ 912.981248][T31963] name failslab, interval 1, probability 0, space 0, times 0 [ 912.994549][T31963] CPU: 1 UID: 0 PID: 31963 Comm: syz.4.7062 Not tainted syzkaller #0 PREEMPT(full) [ 912.994573][T31963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 912.994584][T31963] Call Trace: [ 912.994592][T31963] [ 912.994601][T31963] dump_stack_lvl+0xe8/0x150 [ 912.994628][T31963] should_fail_ex+0x412/0x560 [ 912.994657][T31963] should_failslab+0xa8/0x100 [ 912.994694][T31963] __kmalloc_cache_noprof+0x88/0x660 [ 912.994721][T31963] ? sctp_add_bind_addr+0x8c/0x370 [ 912.994749][T31963] sctp_add_bind_addr+0x8c/0x370 [ 912.994775][T31963] sctp_copy_local_addr_list+0x314/0x4f0 [ 912.994801][T31963] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 912.994822][T31963] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 912.994846][T31963] ? sctp_v6_is_any+0x64/0x80 [ 912.994874][T31963] ? sctp_copy_one_addr+0x93/0x360 [ 912.994899][T31963] sctp_bind_addr_copy+0xb3/0x3c0 [ 912.994921][T31963] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 912.994953][T31963] sctp_connect_new_asoc+0x2ff/0x6b0 [ 912.994982][T31963] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 912.995013][T31963] ? sctp_get_af_specific+0x29/0x80 [ 912.995033][T31963] ? sctp_inet6_send_verify+0x80/0x300 [ 912.995053][T31963] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 912.995080][T31963] __sctp_connect+0x5cb/0xdc0 [ 912.995117][T31963] ? __pfx___sctp_connect+0x10/0x10 [ 912.995141][T31963] ? security_sctp_bind_connect+0x7e/0x2c0 [ 912.995165][T31963] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 912.995188][T31963] sctp_getsockopt_connectx3+0x227/0x360 [ 912.995209][T31963] ? lock_sock_nested+0x6a/0x100 [ 912.995238][T31963] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 912.995265][T31963] ? sctp_getsockopt+0x12f/0xb90 [ 912.995291][T31963] ? __local_bh_enable_ip+0xd0/0x130 [ 912.995316][T31963] sctp_getsockopt+0x984/0xb90 [ 912.995340][T31963] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 912.995360][T31963] do_sock_getsockopt+0x51d/0x7e0 [ 912.995388][T31963] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 912.995427][T31963] ? __fget_files+0x3a0/0x420 [ 912.995449][T31963] ? __fget_files+0x2a/0x420 [ 912.995477][T31963] __x64_sys_getsockopt+0x1a4/0x240 [ 912.995506][T31963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.995528][T31963] do_syscall_64+0x15f/0xf80 [ 912.995547][T31963] ? trace_irq_disable+0x3b/0x140 [ 912.995573][T31963] ? clear_bhb_loop+0x40/0x90 [ 912.995596][T31963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.995614][T31963] RIP: 0033:0x7fbfc859cdd9 [ 912.995631][T31963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.995647][T31963] RSP: 002b:00007fbfc9407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 912.995667][T31963] RAX: ffffffffffffffda RBX: 00007fbfc8815fa0 RCX: 00007fbfc859cdd9 [ 912.995681][T31963] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 912.995698][T31963] RBP: 00007fbfc9407090 R08: 0000200000000500 R09: 0000000000000000 [ 912.995710][T31963] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 912.995722][T31963] R13: 00007fbfc8816038 R14: 00007fbfc8815fa0 R15: 00007ffcfdfa2318 [ 912.995754][T31963] [ 913.897122][T31983] tipc: Invalid UDP bearer configuration [ 913.897176][T31983] tipc: Enabling of bearer rejected, failed to enable media [ 913.929986][T31983] __nla_validate_parse: 4 callbacks suppressed [ 913.930007][T31983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7069'. [ 914.028065][T31983] batman_adv: batadv0: Adding interface: dummy0 [ 914.042743][T31983] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.150730][T31983] batman_adv: batadv0: Interface activated: dummy0 [ 914.189530][T31992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7072'. [ 914.232291][T31997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7073'. [ 914.512068][T32012] netlink: 'syz.3.7078': attribute type 1 has an invalid length. [ 914.530353][T32012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.609930][T32016] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 915.035969][T32018] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.043655][T32018] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.227244][T32018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.242284][T32018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.262026][T32045] netlink: 'syz.4.7086': attribute type 7 has an invalid length. [ 915.284083][T32045] netlink: 'syz.4.7086': attribute type 8 has an invalid length. [ 915.400090][T32021] bridge_slave_0 (unregistering): left allmulticast mode [ 915.441578][T32021] bridge_slave_0 (unregistering): left promiscuous mode [ 915.464333][T32021] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.514034][ T6428] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.536764][ T6428] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.558201][ T6428] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.583349][ T93] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.789476][T32068] batadv_slave_1: entered promiscuous mode [ 915.850418][T32068] batadv_slave_1: left promiscuous mode [ 916.024579][T32080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7096'. [ 916.106129][T32084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7097'. [ 916.320677][T32090] tipc: Started in network mode [ 916.325786][T32090] tipc: Node identity 1e35e41f6512, cluster identity 4711 [ 916.335138][T32090] tipc: Enabled bearer , priority 0 [ 916.345212][T32090] syzkaller0: entered promiscuous mode [ 916.351341][T32090] syzkaller0: entered allmulticast mode [ 916.367185][T32090] tipc: Resetting bearer [ 916.376861][T32089] tipc: Resetting bearer [ 916.429523][T32089] tipc: Disabling bearer [ 916.487922][T32094] netlink: 'syz.2.7101': attribute type 1 has an invalid length. [ 916.496727][T32094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.530351][T32097] netlink: 'syz.3.7102': attribute type 10 has an invalid length. [ 916.561447][T32097] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7102'. [ 916.772481][T32106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7105'. [ 917.609150][T32150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7121'. [ 917.626351][T32156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7122'. [ 917.639925][ T30] audit: type=1107 audit(1777291726.916:16): pid=32149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='©çƒqãy÷’¿ýúû5£å¶' [ 917.947064][T32173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7126'. [ 918.038239][ T5623] block nbd8: Receive control failed (result -1) [ 918.314938][T32194] ip6gre1: entered promiscuous mode [ 918.329400][T32194] ip6gre1: entered allmulticast mode [ 918.539143][T32204] syzkaller0: entered promiscuous mode [ 918.556427][T32204] syzkaller0: entered allmulticast mode [ 918.883951][T32221] erspan1: entered allmulticast mode [ 919.008956][T32229] __nla_validate_parse: 8 callbacks suppressed [ 919.008977][T32229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7143'. [ 919.112431][T32229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7143'. [ 919.129139][T32229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7143'. [ 919.426180][T32252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7147'. [ 919.435382][T32252] netlink: 'syz.4.7147': attribute type 1 has an invalid length. [ 919.870223][T32260] netlink: 16158 bytes leftover after parsing attributes in process `syz.5.7150'. [ 920.090854][T32250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 920.097691][T32250] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 920.124351][T32250] tipc: Resetting bearer [ 920.139527][T32250] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 920.148867][T32250] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 920.163261][T32250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 920.170425][T32250] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 920.187090][T32250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 920.193011][T32250] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 920.223312][T32250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 920.229866][T32250] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 920.248442][T32250] tipc: Resetting bearer [ 920.259974][T32250] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 920.265979][T32250] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 921.901195][T32224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.092421][T32267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7154'. [ 922.106621][T32275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7157'. [ 922.133772][T32275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7157'. [ 922.528344][T32288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.547382][T32288] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.583670][T32288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.640745][T32288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.650119][T32288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.661628][T32288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 922.672092][T32288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 922.686105][T32288] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 922.721247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.728385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.804715][T32304] tipc: Enabled bearer , priority 0 [ 922.812599][T32300] syzkaller0: entered promiscuous mode [ 922.822738][T32300] syzkaller0: entered allmulticast mode [ 922.846608][T32300] tipc: Resetting bearer [ 922.859065][T32299] tipc: Resetting bearer [ 922.898698][T32299] tipc: Disabling bearer [ 923.057868][T32312] netlink: 'syz.5.7167': attribute type 1 has an invalid length. [ 923.231075][T32319] bond3: (slave vxcan9): The slave device specified does not support setting the MAC address [ 923.259588][T32319] bond3: (slave vxcan9): Error -95 calling set_mac_address [ 923.328225][T32321] bond3: (slave gretap1): making interface the new active one [ 923.344951][T32321] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 923.380119][T32312] macvlan0: entered promiscuous mode [ 923.394941][T32312] macvlan0: entered allmulticast mode [ 923.410230][T32312] bond3: entered promiscuous mode [ 923.418639][T32312] gretap1: entered promiscuous mode [ 923.426032][T32312] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 923.442348][T32337] FAULT_INJECTION: forcing a failure. [ 923.442348][T32337] name failslab, interval 1, probability 0, space 0, times 0 [ 923.455855][T32337] CPU: 1 UID: 0 PID: 32337 Comm: syz.4.7173 Not tainted syzkaller #0 PREEMPT(full) [ 923.455871][T32337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 923.455878][T32337] Call Trace: [ 923.455883][T32337] [ 923.455887][T32337] dump_stack_lvl+0xe8/0x150 [ 923.455905][T32337] should_fail_ex+0x412/0x560 [ 923.455921][T32337] should_failslab+0xa8/0x100 [ 923.455937][T32337] __kmalloc_cache_noprof+0x88/0x660 [ 923.455952][T32337] ? sctp_add_bind_addr+0x8c/0x370 [ 923.455968][T32337] sctp_add_bind_addr+0x8c/0x370 [ 923.455981][T32337] sctp_copy_local_addr_list+0x314/0x4f0 [ 923.455995][T32337] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 923.456007][T32337] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 923.456020][T32337] ? sctp_v6_is_any+0x64/0x80 [ 923.456033][T32337] ? sctp_copy_one_addr+0x93/0x360 [ 923.456046][T32337] sctp_bind_addr_copy+0xb3/0x3c0 [ 923.456058][T32337] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 923.456076][T32337] sctp_connect_new_asoc+0x2ff/0x6b0 [ 923.456092][T32337] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 923.456109][T32337] ? sctp_get_af_specific+0x29/0x80 [ 923.456120][T32337] ? sctp_inet6_send_verify+0x80/0x300 [ 923.456136][T32337] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 923.456161][T32337] __sctp_connect+0x5cb/0xdc0 [ 923.456195][T32337] ? __pfx___sctp_connect+0x10/0x10 [ 923.456216][T32337] ? security_sctp_bind_connect+0x7e/0x2c0 [ 923.456236][T32337] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 923.456260][T32337] sctp_getsockopt_connectx3+0x227/0x360 [ 923.456279][T32337] ? lock_sock_nested+0x6a/0x100 [ 923.456304][T32337] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 923.456318][T32337] ? sctp_getsockopt+0x12f/0xb90 [ 923.456332][T32337] ? __local_bh_enable_ip+0xd0/0x130 [ 923.456346][T32337] sctp_getsockopt+0x984/0xb90 [ 923.456359][T32337] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 923.456370][T32337] do_sock_getsockopt+0x51d/0x7e0 [ 923.456386][T32337] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 923.456406][T32337] ? __fget_files+0x3a0/0x420 [ 923.456418][T32337] ? __fget_files+0x2a/0x420 [ 923.456434][T32337] __x64_sys_getsockopt+0x1a4/0x240 [ 923.456449][T32337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.456460][T32337] do_syscall_64+0x15f/0xf80 [ 923.456471][T32337] ? trace_irq_disable+0x3b/0x140 [ 923.456486][T32337] ? clear_bhb_loop+0x40/0x90 [ 923.456499][T32337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.456512][T32337] RIP: 0033:0x7fbfc859cdd9 [ 923.456523][T32337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.456532][T32337] RSP: 002b:00007fbfc9407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 923.456545][T32337] RAX: ffffffffffffffda RBX: 00007fbfc8815fa0 RCX: 00007fbfc859cdd9 [ 923.456553][T32337] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 923.456559][T32337] RBP: 00007fbfc9407090 R08: 0000200000000500 R09: 0000000000000000 [ 923.456565][T32337] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 923.456572][T32337] R13: 00007fbfc8816038 R14: 00007fbfc8815fa0 R15: 00007ffcfdfa2318 [ 923.456588][T32337] [ 923.461587][T32312] bond3: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 923.794390][T32312] bond3: left promiscuous mode [ 923.799237][T32312] gretap1: left promiscuous mode [ 923.845008][T32342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 923.872343][T32342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 923.981985][T32347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7178'. [ 924.175745][T32363] netlink: 'syz.2.7182': attribute type 1 has an invalid length. [ 924.203400][T32363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.207564][T32367] netlink: 'syz.5.7184': attribute type 49 has an invalid length. [ 924.242955][T32367] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7184'. [ 924.412166][T32367] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode [ 924.439613][T32367] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7184'. [ 925.141026][T32395] netlink: 'syz.2.7191': attribute type 17 has an invalid length. [ 925.149592][T32395] netlink: 'syz.2.7191': attribute type 49 has an invalid length. [ 925.185650][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7192'. [ 925.692794][T32423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7200'. [ 925.703966][T32423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7200'. [ 925.750354][T32426] netlink: 'syz.4.7201': attribute type 1 has an invalid length. [ 925.768976][T32426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.782009][T32429] netlink: 'syz.3.7203': attribute type 1 has an invalid length. [ 925.858166][T32433] netlink: 'syz.3.7204': attribute type 13 has an invalid length. [ 926.317359][T32452] netlink: 'syz.3.7210': attribute type 21 has an invalid length. [ 926.340377][T32452] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7210'. [ 926.356117][T32452] netlink: 'syz.3.7210': attribute type 5 has an invalid length. [ 926.365198][T32452] netlink: 'syz.3.7210': attribute type 6 has an invalid length. [ 926.373667][T32452] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7210'. [ 926.387739][T32454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7210'. [ 926.397118][T32453] lo speed is unknown, defaulting to 1000 [ 926.416241][T32452] block nbd9: Unsupported socket: should be TCP or UNIX. [ 926.797083][T32476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7216'. [ 926.863980][T32476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7216'. [ 927.040907][T32478] syzkaller1: entered promiscuous mode [ 927.054163][T32478] syzkaller1: entered allmulticast mode [ 927.618222][T32514] netlink: 'syz.2.7224': attribute type 1 has an invalid length. [ 927.714792][T32514] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 927.859318][T32521] erspan1: entered allmulticast mode [ 928.893870][T32580] FAULT_INJECTION: forcing a failure. [ 928.893870][T32580] name failslab, interval 1, probability 0, space 0, times 0 [ 928.923700][T32580] CPU: 0 UID: 0 PID: 32580 Comm: syz.4.7239 Not tainted syzkaller #0 PREEMPT(full) [ 928.923726][T32580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 928.923737][T32580] Call Trace: [ 928.923745][T32580] [ 928.923754][T32580] dump_stack_lvl+0xe8/0x150 [ 928.923781][T32580] should_fail_ex+0x412/0x560 [ 928.923810][T32580] should_failslab+0xa8/0x100 [ 928.923839][T32580] __kmalloc_cache_noprof+0x88/0x660 [ 928.923866][T32580] ? sctp_add_bind_addr+0x8c/0x370 [ 928.923893][T32580] sctp_add_bind_addr+0x8c/0x370 [ 928.923918][T32580] sctp_copy_local_addr_list+0x314/0x4f0 [ 928.923944][T32580] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 928.923966][T32580] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 928.923989][T32580] ? sctp_v6_is_any+0x64/0x80 [ 928.924014][T32580] ? sctp_copy_one_addr+0x93/0x360 [ 928.924045][T32580] sctp_bind_addr_copy+0xb3/0x3c0 [ 928.924068][T32580] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 928.924100][T32580] sctp_connect_new_asoc+0x2ff/0x6b0 [ 928.924129][T32580] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 928.924160][T32580] ? sctp_get_af_specific+0x29/0x80 [ 928.924180][T32580] ? sctp_inet6_send_verify+0x80/0x300 [ 928.924199][T32580] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 928.924228][T32580] __sctp_connect+0x5cb/0xdc0 [ 928.924264][T32580] ? __pfx___sctp_connect+0x10/0x10 [ 928.924287][T32580] ? security_sctp_bind_connect+0x7e/0x2c0 [ 928.924310][T32580] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 928.924334][T32580] sctp_getsockopt_connectx3+0x227/0x360 [ 928.924354][T32580] ? lock_sock_nested+0x6a/0x100 [ 928.924384][T32580] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 928.924409][T32580] ? sctp_getsockopt+0x12f/0xb90 [ 928.924436][T32580] ? __local_bh_enable_ip+0xd0/0x130 [ 928.924460][T32580] sctp_getsockopt+0x984/0xb90 [ 928.924484][T32580] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 928.924504][T32580] do_sock_getsockopt+0x51d/0x7e0 [ 928.924533][T32580] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 928.924572][T32580] ? __fget_files+0x3a0/0x420 [ 928.924593][T32580] ? __fget_files+0x2a/0x420 [ 928.924621][T32580] __x64_sys_getsockopt+0x1a4/0x240 [ 928.924649][T32580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.924670][T32580] do_syscall_64+0x15f/0xf80 [ 928.924690][T32580] ? trace_irq_disable+0x3b/0x140 [ 928.924716][T32580] ? clear_bhb_loop+0x40/0x90 [ 928.924743][T32580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.924761][T32580] RIP: 0033:0x7fbfc859cdd9 [ 928.924780][T32580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.924796][T32580] RSP: 002b:00007fbfc9407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 928.924817][T32580] RAX: ffffffffffffffda RBX: 00007fbfc8815fa0 RCX: 00007fbfc859cdd9 [ 928.924831][T32580] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 928.924842][T32580] RBP: 00007fbfc9407090 R08: 0000200000000500 R09: 0000000000000000 [ 928.924855][T32580] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 928.924867][T32580] R13: 00007fbfc8816038 R14: 00007fbfc8815fa0 R15: 00007ffcfdfa2318 [ 928.924898][T32580] [ 929.279202][T32583] __nla_validate_parse: 3 callbacks suppressed [ 929.279222][T32583] netlink: 364 bytes leftover after parsing attributes in process `syz.5.7242'. [ 929.399637][T32591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7243'. [ 929.454625][T32591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7243'. [ 929.708215][T32615] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 929.753614][T32615] batman_adv: batadv0: Adding interface: dummy0 [ 929.783458][T32615] batman_adv: batadv0: Interface activated: dummy0 [ 929.858669][T32615] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7251'. [ 930.157587][T32637] xt_TCPMSS: Only works on TCP SYN packets [ 930.476978][T32663] netlink: 'syz.4.7264': attribute type 32 has an invalid length. [ 930.494712][T32663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7264'. [ 930.587029][T32663] bond5: option coupled_control: invalid value (12) [ 930.598689][T32663] bond5 (unregistering): Released all slaves [ 930.851848][T32681] netlink: 'syz.5.7266': attribute type 1 has an invalid length. [ 930.982620][T32685] geneve1: entered allmulticast mode [ 931.139838][T32698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7272'. [ 931.341703][T32712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7277'. [ 931.370875][T32712] ip6gre1: entered promiscuous mode [ 931.376365][T32712] ip6gre1: entered allmulticast mode [ 931.415276][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.424107][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.486479][T32716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7279'. [ 931.496085][T32716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7279'. [ 931.511406][T32716] erspan0: entered promiscuous mode [ 931.517927][T32716] gretap0: entered promiscuous mode [ 931.553617][ T5743] [ 931.555969][ T5743] ====================================================== [ 931.562970][ T5743] WARNING: possible circular locking dependency detected [ 931.569979][ T5743] syzkaller #0 Not tainted [ 931.574374][ T5743] ------------------------------------------------------ [ 931.581370][ T5743] kworker/0:5/5743 is trying to acquire lock: [ 931.587417][ T5743] ffff888069c30558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 931.597238][ T5743] [ 931.597238][ T5743] but task is already holding lock: [ 931.604581][ T5743] ffff8880aebc4ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 931.613618][ T5743] [ 931.613618][ T5743] which lock already depends on the new lock. [ 931.613618][ T5743] [ 931.624002][ T5743] [ 931.624002][ T5743] the existing dependency chain (in reverse order) is: [ 931.632994][ T5743] [ 931.632994][ T5743] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 931.640718][ T5743] _raw_spin_lock_bh+0x36/0x50 [ 931.645987][ T5743] hsr_dev_xmit+0x237/0x360 [ 931.650998][ T5743] dev_hard_start_xmit+0x2cd/0x830 [ 931.656615][ T5743] __dev_queue_xmit+0x14d9/0x3950 [ 931.662137][ T5743] NF_HOOK+0x33a/0x3c0 [ 931.666702][ T5743] arp_xmit+0x16c/0x270 [ 931.671358][ T5743] arp_solicit+0xbe0/0xe40 [ 931.676273][ T5743] __neigh_event_send+0xf05/0x14d0 [ 931.681881][ T5743] neigh_resolve_output+0x198/0x750 [ 931.687577][ T5743] ip_finish_output2+0xca9/0x1070 [ 931.693101][ T5743] ip_output+0x29f/0x450 [ 931.697847][ T5743] iptunnel_xmit+0x621/0xd10 [ 931.702935][ T5743] ip_tunnel_xmit+0x193a/0x1f20 [ 931.708280][ T5743] __gre_xmit+0x19e/0x240 [ 931.713110][ T5743] erspan_xmit+0xa41/0x14d0 [ 931.718117][ T5743] dev_hard_start_xmit+0x2cd/0x830 [ 931.723728][ T5743] sch_direct_xmit+0x251/0x4c0 [ 931.728995][ T5743] __dev_queue_xmit+0x180f/0x3950 [ 931.734517][ T5743] alb_send_lp_vid+0x348/0x550 [ 931.739779][ T5743] alb_send_learning_packets+0x12c/0x300 [ 931.745906][ T5743] bond_alb_monitor+0x3d5/0x17e0 [ 931.751342][ T5743] process_scheduled_works+0xb5d/0x1860 [ 931.757381][ T5743] worker_thread+0xa53/0xfc0 [ 931.762468][ T5743] kthread+0x388/0x470 [ 931.767034][ T5743] ret_from_fork+0x514/0xb70 [ 931.772121][ T5743] ret_from_fork_asm+0x1a/0x30 [ 931.777382][ T5743] [ 931.777382][ T5743] -> #0 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 931.785608][ T5743] __lock_acquire+0x15a5/0x2cf0 [ 931.790953][ T5743] lock_acquire+0x106/0x350 [ 931.795951][ T5743] _raw_spin_lock+0x2e/0x40 [ 931.800954][ T5743] sch_direct_xmit+0x15f/0x4c0 [ 931.806213][ T5743] __dev_queue_xmit+0x180f/0x3950 [ 931.811734][ T5743] hsr_forward_skb+0x167e/0x2a80 [ 931.817164][ T5743] hsr_dev_xmit+0x242/0x360 [ 931.822165][ T5743] dev_hard_start_xmit+0x2cd/0x830 [ 931.827775][ T5743] __dev_queue_xmit+0x14d9/0x3950 [ 931.833296][ T5743] ip6_output+0x340/0x550 [ 931.838126][ T5743] NF_HOOK+0x177/0x4f0 [ 931.842689][ T5743] mld_sendpack+0x8b4/0xe40 [ 931.847693][ T5743] mld_ifc_work+0x835/0xe70 [ 931.852688][ T5743] process_scheduled_works+0xb5d/0x1860 [ 931.858730][ T5743] worker_thread+0xa53/0xfc0 [ 931.863820][ T5743] kthread+0x388/0x470 [ 931.868394][ T5743] ret_from_fork+0x514/0xb70 [ 931.873480][ T5743] ret_from_fork_asm+0x1a/0x30 [ 931.878748][ T5743] [ 931.878748][ T5743] other info that might help us debug this: [ 931.878748][ T5743] [ 931.888950][ T5743] Possible unsafe locking scenario: [ 931.888950][ T5743] [ 931.896374][ T5743] CPU0 CPU1 [ 931.901713][ T5743] ---- ---- [ 931.907052][ T5743] lock(&hsr->seqnr_lock); [ 931.911530][ T5743] lock(&qdisc_xmit_lock_key#4); [ 931.919051][ T5743] lock(&hsr->seqnr_lock); [ 931.926049][ T5743] lock(&qdisc_xmit_lock_key#4); [ 931.931051][ T5743] [ 931.931051][ T5743] *** DEADLOCK *** [ 931.931051][ T5743] [ 931.939172][ T5743] 11 locks held by kworker/0:5/5743: [ 931.944428][ T5743] #0: ffff8880320ef540 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 931.955094][ T5743] #1: ffffc90004f5fc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 931.968187][ T5743] #2: ffff888034614530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 931.977375][ T5743] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 931.986561][ T5743] #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 931.995594][ T5743] #5: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 932.005481][ T5743] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 932.014588][ T5743] #7: ffff8880aebc4ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 932.024038][ T5743] #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 932.033488][ T5743] #9: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 932.043392][ T5743] #10: ffff88805330c228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 932.056076][ T5743] [ 932.056076][ T5743] stack backtrace: [ 932.061938][ T5743] CPU: 0 UID: 0 PID: 5743 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 932.061950][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 932.061959][ T5743] Workqueue: mld mld_ifc_work [ 932.061970][ T5743] Call Trace: [ 932.061976][ T5743] [ 932.061982][ T5743] dump_stack_lvl+0xe8/0x150 [ 932.061994][ T5743] print_circular_bug+0x2e1/0x300 [ 932.062008][ T5743] check_noncircular+0x12e/0x150 [ 932.062022][ T5743] __lock_acquire+0x15a5/0x2cf0 [ 932.062036][ T5743] ? sch_direct_xmit+0x15f/0x4c0 [ 932.062046][ T5743] lock_acquire+0x106/0x350 [ 932.062056][ T5743] ? sch_direct_xmit+0x15f/0x4c0 [ 932.062065][ T5743] ? hsr_create_tagged_frame+0x24e/0xe10 [ 932.062080][ T5743] ? hsr_forward_skb+0x112b/0x2a80 [ 932.062090][ T5743] _raw_spin_lock+0x2e/0x40 [ 932.062105][ T5743] ? sch_direct_xmit+0x15f/0x4c0 [ 932.062114][ T5743] sch_direct_xmit+0x15f/0x4c0 [ 932.062125][ T5743] ? __pfx_sch_direct_xmit+0x10/0x10 [ 932.062137][ T5743] __dev_queue_xmit+0x180f/0x3950 [ 932.062151][ T5743] ? __dev_queue_xmit+0x2b6/0x3950 [ 932.062163][ T5743] ? trace_kmem_cache_alloc+0x29/0xe0 [ 932.062176][ T5743] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 932.062190][ T5743] ? __pfx___dev_queue_xmit+0x10/0x10 [ 932.062202][ T5743] ? __pskb_copy_fclone+0xb1a/0x1120 [ 932.062215][ T5743] ? __asan_memcpy+0x40/0x70 [ 932.062227][ T5743] ? __pskb_copy_fclone+0xb1a/0x1120 [ 932.062242][ T5743] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 932.062255][ T5743] ? hsr_addr_subst_dest+0x30d/0xa90 [ 932.062269][ T5743] hsr_forward_skb+0x167e/0x2a80 [ 932.062278][ T5743] ? ret_from_fork_asm+0x1a/0x30 [ 932.062291][ T5743] ? hsr_forward_skb+0xbb/0x2a80 [ 932.062300][ T5743] ? __pfx_hsr_forward_skb+0x10/0x10 [ 932.062308][ T5743] ? do_raw_spin_lock+0x12b/0x2f0 [ 932.062322][ T5743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 932.062335][ T5743] ? __pfx_netif_skb_features+0x10/0x10 [ 932.062347][ T5743] ? hsr_dev_xmit+0x237/0x360 [ 932.062360][ T5743] hsr_dev_xmit+0x242/0x360 [ 932.062372][ T5743] ? hsr_dev_xmit+0x2d/0x360 [ 932.062385][ T5743] dev_hard_start_xmit+0x2cd/0x830 [ 932.062400][ T5743] __dev_queue_xmit+0x14d9/0x3950 [ 932.062414][ T5743] ? __dev_queue_xmit+0x2b6/0x3950 [ 932.062429][ T5743] ? __pfx___dev_queue_xmit+0x10/0x10 [ 932.062441][ T5743] ? neigh_connected_output+0x1ea/0x460 [ 932.062452][ T5743] ? eth_header+0x11b/0x200 [ 932.062464][ T5743] ? __asan_memcpy+0x40/0x70 [ 932.062479][ T5743] ? ip6_output+0x126/0x550 [ 932.062489][ T5743] ip6_output+0x340/0x550 [ 932.062499][ T5743] ? __pfx_ip6_output+0x10/0x10 [ 932.062508][ T5743] NF_HOOK+0x177/0x4f0 [ 932.062518][ T5743] ? __pfx_NF_HOOK+0x10/0x10 [ 932.062528][ T5743] ? __pfx_dst_output+0x10/0x10 [ 932.062537][ T5743] ? lockdep_hardirqs_on+0x7a/0x110 [ 932.062548][ T5743] ? __local_bh_enable_ip+0xd0/0x130 [ 932.062558][ T5743] ? icmp6_dst_alloc+0x3a6/0x440 [ 932.062569][ T5743] mld_sendpack+0x8b4/0xe40 [ 932.062582][ T5743] ? mld_sendpack+0x213/0xe40 [ 932.062591][ T5743] ? __pfx_mld_sendpack+0x10/0x10 [ 932.062604][ T5743] mld_ifc_work+0x835/0xe70 [ 932.062614][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 932.062624][ T5743] process_scheduled_works+0xb5d/0x1860 [ 932.062640][ T5743] ? __pfx_process_scheduled_works+0x10/0x10 [ 932.062651][ T5743] ? assign_work+0x3d5/0x5e0 [ 932.062661][ T5743] worker_thread+0xa53/0xfc0 [ 932.062681][ T5743] kthread+0x388/0x470 [ 932.062693][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 932.062703][ T5743] ? __pfx_kthread+0x10/0x10 [ 932.062715][ T5743] ret_from_fork+0x514/0xb70 [ 932.062726][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 932.062736][ T5743] ? __switch_to+0xc79/0x1410 [ 932.062750][ T5743] ? __pfx_kthread+0x10/0x10 [ 932.062762][ T5743] ret_from_fork_asm+0x1a/0x30 [ 932.062776][ T5743]