last executing test programs: 3m51.739439309s ago: executing program 3 (id=977): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="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", 0x109}], 0x1}}], 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)={0x14, r1, 0x10}, 0x14}}, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0598000007d4c100"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) r3 = socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$inet6(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x43, 0x0, 0x1, 0x0, 0x0, 0x4044089}, 0x20000010) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x40000, @mcast2}, 0x1c) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x3, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) (async, rerun: 32) r6 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) write(r3, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000080)=""/30, 0x228000, 0x1000, 0x1, 0x7}, 0x20) 3m49.253380403s ago: executing program 3 (id=985): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xf7, 0x1, 0x4}]}}}], 0x38}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="102a05000010000034001a800800028004000180100002800c0001800800"], 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910480000000000c3004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) 3m49.04990373s ago: executing program 3 (id=989): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'macvlan0\x00', 0x2000}) 3m48.880881815s ago: executing program 3 (id=992): socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @empty, 0x9}, 0x1c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0x401) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) accept4(r7, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) 3m48.637556998s ago: executing program 3 (id=994): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0xff0}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)={0x34, 0x10, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x18, 0x125, 0x0, 0x1, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000001780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xa0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080014}, 0x8010) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r13) (async) close(r13) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) shutdown(r12, 0x1) 3m48.26017613s ago: executing program 3 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x1, 0x8, 0x0, 0x400}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x32d7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0xff7, &(0x7f0000001cc0)=""/4087, 0x41100, 0xd}, 0x94) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r11, 0x313}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r11, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9f}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0xc0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000500)={0x4, &(0x7f0000000480)=[{0x9, 0x1, 0x5, 0x1}, {0x4, 0x3, 0x9, 0x6fcc}, {0x2, 0x3, 0x3, 0x2}, {0x1, 0x5, 0x9, 0x7}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x440b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000780)={r5, &(0x7f0000000680)='SEG6\x00', 0x101000, &(0x7f00000006c0)={@_ha_fsid={[0x9, 0xfffffff6]}, {0x9, 0xc, 0x24, 0x3}}, 0x4, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x2}) sendmsg$IPSET_CMD_FLUSH(r13, 0xfffffffffffffffd, 0x4000801) r14 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@local, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000008c0)=0xe8) getsockopt$inet_int(r14, 0x0, 0x31, &(0x7f0000000080), &(0x7f0000000040)=0x1) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x800) 3m32.848015117s ago: executing program 32 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x1, 0x8, 0x0, 0x400}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x32d7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0xff7, &(0x7f0000001cc0)=""/4087, 0x41100, 0xd}, 0x94) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r11, 0x313}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r11, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9f}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0xc0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000500)={0x4, &(0x7f0000000480)=[{0x9, 0x1, 0x5, 0x1}, {0x4, 0x3, 0x9, 0x6fcc}, {0x2, 0x3, 0x3, 0x2}, {0x1, 0x5, 0x9, 0x7}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x440b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000780)={r5, &(0x7f0000000680)='SEG6\x00', 0x101000, &(0x7f00000006c0)={@_ha_fsid={[0x9, 0xfffffff6]}, {0x9, 0xc, 0x24, 0x3}}, 0x4, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x2}) sendmsg$IPSET_CMD_FLUSH(r13, 0xfffffffffffffffd, 0x4000801) r14 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@local, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000008c0)=0xe8) getsockopt$inet_int(r14, 0x0, 0x31, &(0x7f0000000080), &(0x7f0000000040)=0x1) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x800) 2m30.809898061s ago: executing program 1 (id=1572): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8000038, 0x3, 0x2b0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xd0, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x6, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@loopback, @private1, [0x0, 0xffffffff, 0xffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'pptp\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x34a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m29.856304118s ago: executing program 1 (id=1577): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000000, 0xc3072, 0xffffffffffffffff, 0x3000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket(0x28, 0x5, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) getpeername$packet(r1, 0x0, &(0x7f00000006c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) 2m29.565925998s ago: executing program 1 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_a, @device_b, @from_mac=@broadcast, {0x8, 0x1}}, @void, @val={0x1, 0x6, [{0x73}, {0xc, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x49}, {0x4, 0x1}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x9c, "da9ac56ba9d401c06dec14a4006ccbe7d7d42bb21c863010fc04bfcc58fb22ccf78ae78badc079e4b814901dd95a8d979e162eedd21f8cd61e25ebeb0ebde17e6c1dcc0aca76c2a0378085d23db318645fd7fb09a3e6902f9e87b51d39cfba311aa7eeec796e2aab273561552d056e000c81d08e2cf965168f4f861478ae06912136da906ff024a3954ce64c6044ef87cada7f2922266e30a3358672"}, {0xdd, 0x69, "41b11f2058cd8805032e93094705be62adf4a54e7815befbbcd77dbfe01b2110803ec95f3cba4946d38f194790e0d6119414e691d568c11e095dfb8af8c4b32f585a890b4503e0e0d743be468d08c9b7f6e0c6cd8f9349b686c593d1416275613751973f2ebe7fcbd2"}, {0xdd, 0xe, "7b851db86d823824fad907d755da"}, {0xdd, 0x10, "f0ba9c2670c01fd20fe4ed5a425936b4"}, {0xdd, 0x6b, "143685c7368b7a2495be845829ff629bf08bdc9cef224f63b814b4549b7fc7077e7fd1df75d6edceac5b7aeed4d9c80c11f14861fd9e131a7cc2eb5e257e4b1cdff58daaecbe3c3ac3d02786c0250c5e0dd88ab19632a13e875623dd506bc24edac1b2bdd85cafd00e87ae"}]}, 0x1c0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000025bd7000fcdbdf2507000000180001801400020070696d72656700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x6d910ecc17ad1f08}, 0x40000) 2m29.080349616s ago: executing program 1 (id=1586): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000280)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000480)={r1, &(0x7f0000000040)='memory.events\x00', 0x402100, &(0x7f00000003c0)={@align=0x8, {0x8, 0x8, 0x40, 0x3d}}, 0x2, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x8}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xedc623580215bdcd, 0x40010, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002e0001002abd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="ecff08000000001a8dba11be6230cc5a915d90db26419c17ea0ac3ec5974bf9dda4c187816c18b887543eee3ccf04c17bb9b0a7d48a35782292e06ffa92687f044f6855338c054170c2d910c6edaf1d7ef4b2c2d5fca2a638c1454954a117c9279a31cb7616279eaf1d4cb096fca4c35fca7fe72e8b1f84e5106f6b962a0a081cd5f642ba54aa8a2fbe368d28cfa5fd7a8df2befe83981b37872f930501500", @ANYRES32=0x0, @ANYBLOB], 0x24}], 0x1}, 0x44010) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0) write(r4, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) 2m28.089416598s ago: executing program 1 (id=1595): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x84) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) (async) pipe(&(0x7f0000000600)) close(0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="44000000000000001400030073697430000000000000000000000000d188030fc97e1491114dbedd11"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) (async) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000080)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x24) 2m27.868271163s ago: executing program 1 (id=1597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x10000, @mcast1, 0x6}, 0x0, {[0xf, 0x5, 0x7, 0x2, 0x7, 0x7fff, 0xfff, 0x581]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m12.778107991s ago: executing program 33 (id=1597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x10000, @mcast1, 0x6}, 0x0, {[0xf, 0x5, 0x7, 0x2, 0x7, 0x7fff, 0xfff, 0x581]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m19.133215702s ago: executing program 4 (id=2095): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x3b}, {@in=@multicast1, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x10000000373a, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x3b}, {@in=@multicast1, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x10000000373a, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x128, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, {0x0, 0x4, 0x3}, {0x20, 0x1, 0x80ec}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, 0x5, 0x5}, [@lifetime_val={0x24, 0x9, {0x5, 0x916, 0x9, 0x9}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x128, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, {0x0, 0x4, 0x3}, {0x20, 0x1, 0x80ec}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, 0x5, 0x5}, [@lifetime_val={0x24, 0x9, {0x5, 0x916, 0x9, 0x9}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@enum={0x2, 0x8, 0x0, 0x13, 0x4, [{0xc, 0xf5c}, {0x3, 0x6}, {0xb, 0x6}, {0x6, 0xfffffe01}, {0xf, 0x9f71}, {0x9}, {0xc, 0x7}, {0x9, 0xda3c}]}]}}, 0x0, 0x66}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@enum={0x2, 0x8, 0x0, 0x13, 0x4, [{0xc, 0xf5c}, {0x3, 0x6}, {0xb, 0x6}, {0x6, 0xfffffe01}, {0xf, 0x9f71}, {0x9}, {0xc, 0x7}, {0x9, 0xda3c}]}]}}, 0x0, 0x66}, 0x28) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000350e000085000000970000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x81}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) unshare(0x20400) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41100, 0x40}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 1m18.65060422s ago: executing program 4 (id=2102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000380)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de", 0x0, 0xfffbffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m17.633448406s ago: executing program 4 (id=2105): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001800356a00000000000000000a8000811d"], 0x30}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'pimreg0\x00'}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r4, r2, 0x4, r0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) sendfile(r6, r4, 0x0, 0x10000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0xdfa}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x1}, 0x28) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0xb68}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r8) 1m15.722650143s ago: executing program 4 (id=2111): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m15.489052691s ago: executing program 4 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20040844) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x8, &(0x7f0000003480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x16c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x7, 0x4, 0x0, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x7f, 0x80, 0xfffd, 0x0, 0x2, 0x7fff, 0x6837}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x8e, 0x2, 0x0, 0x1, 0x8, 0x8, 0x6}}, {0x10, 0x2, [0xe, 0x3ce, 0x830, 0x5, 0x0, 0x5]}}, {{0x1c, 0x1, {0x2, 0x6b, 0xfffd, 0x20, 0x0, 0xc000000, 0x8, 0x2}}, {0x8, 0x2, [0x401, 0x10]}}, {{0x1c, 0x1, {0x7, 0x7, 0xff7f, 0xcf09, 0x1, 0x0, 0x8001, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x4, 0xa1, 0x6, 0x3, 0x1, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0xf1db, 0x0, 0x4]}}, {{0x1c, 0x1, {0x8, 0x9, 0x5, 0xfff, 0x1, 0x5, 0x5, 0xa}}, {0x18, 0x2, [0xd, 0x8, 0x5, 0x800, 0xf1a, 0x1, 0x0, 0x81, 0x3e, 0xffff]}}, {{0x1c, 0x1, {0x6, 0x1, 0x2, 0x80000001, 0x1, 0x80000000, 0x2}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xef}]}, 0x16c}}, 0x0) r5 = socket(0x2b, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000280)=""/15, &(0x7f00000002c0)=0xf) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x92aa842669e14d00]}}, {@mac=@random="f135419f37d9", {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @empty, 0x0, 0x0, 0x0, 0xd, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000030008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000006000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r10) socket(0x10, 0x3, 0x4) 1m15.048296283s ago: executing program 4 (id=2119): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7, 0xff07}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, &(0x7f0000000040)=0xfffffffffffffffe, r8, 0x0, 0xb, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x1, 'syz_tun\x00', {}, 0x1}) 59.993735965s ago: executing program 34 (id=2119): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7, 0xff07}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, &(0x7f0000000040)=0xfffffffffffffffe, r8, 0x0, 0xb, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x1, 'syz_tun\x00', {}, 0x1}) 10.078816256s ago: executing program 7 (id=2337): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x1, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x5, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 9.928353305s ago: executing program 7 (id=2339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x230, 0x0, 0x404, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xfc00}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xffffff00}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xf}, {0x5}, {0x6, 0x11, 0xfffd}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xda}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0x101}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}]}, 0x230}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000380)='ns/pid_for_children\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "772a903ca10bded1", "fb70ac62f06b9dad7c1acd82fba92bf8", "f2ef4e3e", "84255074fde1d081"}, 0x28) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x0, 'macvtap0\x00', {0x3}, 0x9e92}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-5lx \x00'}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001640)={0x0}, &(0x7f0000001680)=0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000016c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000001740)=""/75, 0x4b, 0x0, &(0x7f00000017c0)=""/220, 0xdc}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x1b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x38}, @ringbuf_query, @generic={0x6, 0x3, 0x0, 0x200, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @generic={0x3, 0x5, 0x8, 0x7, 0xffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000640)=""/4096, 0x41000, 0x4, '\x00', r4, @fallback=0x32, r5, 0x8, &(0x7f0000001700)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)=[0xffffffffffffffff, r7, r8], 0x0, 0x10, 0xfffffffc}, 0x94) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xbc, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8845}, 0x400c0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, r10, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x20004004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r11, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x44, r12, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa48e}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000002040), r11) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, r12, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000021c0), r11) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x3c, r13, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c050) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x50, 0x5, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044840}, 0x8802) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000002680)) 9.614617143s ago: executing program 7 (id=2343): unshare(0x22020600) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000f40)=""/250, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0xd16}], 0x1, 0x2000000022, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="00000000004aae2f5c03000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffdfffe, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x40000c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x498, 0x2c, 0xd2f, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x6, 0x1}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x468, 0x2, [@TCA_BASIC_ACT={0x344, 0x3, [@m_tunnel_key={0x11c, 0x20, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x6, 0xffffffffffffffff, 0x5, 0x101}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0xc5, 0x6, "fde995091975cc71740cc950b4577854c0cfca26dd04fb695818f47eef04304fe3511a84ba27a0bb84bb6cc4eb86cb0e6b7b36fb92c69d16ae34a983cd6ca82b2a7e3767250c7ecc35b124658428a73839083908c9f9aae3856dc8d01fa6ec0336bf5722a21b1cfd5c634951444c134570df80693b4b38a806c4f60c0b31ce60e4416ee128bb74e9aa03f610e255ec2e025d2e74345fcc4ba129c1597f4525032d3e8b1d379ee50b7dd3b90c528d09ea90fd15b5dffdcf1800f1b53a1c3e691c77"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x174, 0x10, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15b0, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x7, 0x1, 0x7fff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8, 0x4, 0xac, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0xffffffffffffffff, 0x8, 0xdb5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x1, 0x7, 0x5, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x20ce, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x251b, 0x10000000}}]}, {0xc3, 0x6, "6d0b98375879c6131ec07fae71229f363a0c2595af49ae622ccd61562289551dc29bf8d16fbe00aeb32b16fa8891533eca686297b9972b9f76e0287b97f2464cf2a6c0fcb3de27efae8b242badffecd64f8cb4528b66886d13f1eab27d64a1e730447e1c0e66a2dcfe02ef36382fbe7162a512dbf508dc35034b2bd087efae1dd8755900c9aa1e5fde04c2f8e6d6f70738ea547974aa3e5ece6cdd222d60112a9778cefae0410f34a73e29788d0a32a4e3aa005c035afb3c8e1800de7f95f3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xb0, 0xf, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'bond\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xfffffffc, 0x10000000, 0x1, 0x8}}]}, {0x5d, 0x6, "0ed3a0d734b50db9e4fa76deca00356785dc4b42bd8e3b81cbcc567ef521bb8051720b9edc9f806ef3b12859eb8a090eed71bfcf5e1f94bfa1fbd5437a7957c72e13961dff1cdcf83c6b0bad814b151b04410280bba10b4ca6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x1}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x114, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0x0, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x3}, {0x4, 0x4, 0xb, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfff8}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0xfff8, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0xffff, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0xfff, 0x9, 0x1, "abc00e12181f78fbda"}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x2}, {0x2f4, 0xa, 0x1, "8671730d5b435e703ec1"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x363}, {0x101, 0x3ff, 0x7, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x497, 0x3, 0x37f}, {0x7, 0x2, 0x7, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x498}}, 0x2000c880) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000070a8cac000000000000000001efff074eb943e350b668c72759faacf89271256d82755bf21bd99dcdc72206f6d4d8dc54f9b77e5d15df94cfcf4a158d6bb98726d24ea6a341a9961b33c2228abb741868d309972d"], 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x80) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 8.733011376s ago: executing program 7 (id=2349): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x4e, 0x1, 0x0, 0x0, {0x16, 0x0, 0x6e80}}, 0x14}}, 0x0) unshare(0x20000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc0000010000000000000000000000000000000000000009000000000000000100000003"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500050007ffffffbd2001000000000095002000000000006916630000000000bf670000000000000407000072c960354607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 4.779800348s ago: executing program 7 (id=2353): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r9}, 0xc) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) 4.304585235s ago: executing program 5 (id=2360): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x81}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x5, @empty, 0x6}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x230}, 0x2, 0x0, 0x0, 0x40000}, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) (async) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) (async) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000e00)="b9ff0200000028eeb5845591b318a044ea61", 0x0, 0xe02, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.258056644s ago: executing program 7 (id=2361): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12020, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000440)="5959d4534fe31c04fa146fdc651efd060dd62be607000000950ef604b7fd52a2d859f1e56b422407d8937e13697b9be3ef41b074878d79e79423a7b248ce157fd358284957d0fcb1be314f99f684f4b51823fa55cbf44ca7213573e8244d8046c9e9e453609afd739d3a3f5e0479fa9589dea1e9487ce3f38ffa1f090c40de3a8c8aedbe070315aec35d5ff08042a1b282d6c5db644181be23c1a87dccaed6cd", 0xa0, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) unshare(0x60600) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x3, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) accept(r6, &(0x7f0000000200)=@in={0x2, 0x0, @private}, &(0x7f0000000280)=0x80) getsockname$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x18, 0x6, 0x1, 0x4, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x7, 0x0, 0x7}]}, 0x20}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861}}, 0x38}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) 3.750211464s ago: executing program 6 (id=2365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000410007012dbd7000fedbdf25017c000004002d8004000180040008"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000400ffff14000780080012400000000505001500040000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000266ee93de3767a984e5858450b0a6c9732394c486bfc50cd6893df3e0e27fee2586bcd613c1f50e1fd676f6a61bb84ca8391fc294bfdc999b23a6eb8c1baadd06eb5c42b66d73eb1200ddb13ca7e3d561a976cef7996e81a6692deeb77fa7c38afab686447e96ed9f95f4189a340a779bedf78c21517231e0994d0a5acda39ca168c"], 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000001c0)={0x5, {0x3, 0x0, 0x2, 0xfff, 0x3}}) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x2, 0xf, {{0x3a, 0x4, 0x0, 0x36, 0xe8, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x23, 0x11, [@remote, @multicast2, @empty, @rand_addr=0x64010101, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @empty]}, @timestamp_addr={0x44, 0x34, 0x25, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast2, 0x418}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010102, 0x4}, {@multicast2, 0x6}, {@multicast2, 0xfffffff9}]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0x9, [{@broadcast, 0x5}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}, {@broadcast, 0x7f}]}, @timestamp_prespec={0x44, 0x24, 0x2b, 0x3, 0x4, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1ff}, {@broadcast, 0x1ff}, {@multicast2, 0x26b4}]}, @ssrr={0x89, 0x1f, 0x2d, [@rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @local, @broadcast]}, @noop, @timestamp={0x44, 0x14, 0xc0, 0x0, 0x4, [0xffffffff, 0x1, 0x8, 0x7]}]}}}}}) r4 = socket(0x2d, 0x2, 0x0) unshare(0x6020400) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x68, 0x4a, 0x300, 0x270bd26, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, r3, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="6ab964ac4223"], 0xfdef) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r9], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000ffdbdf250200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 2.850386356s ago: executing program 6 (id=2368): r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001740)={&(0x7f00000002c0)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x468}, 0x8010) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2.828724532s ago: executing program 5 (id=2369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xfd, 0x0, &(0x7f0000000a40)="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", 0x0, 0x0, 0x0, 0xad, 0x112, &(0x7f0000000240)="9cdc57e4a9c7fcb9b186c9bd43fa44b38bef6138ca1f6f08cdaacbcffe9a2ae0343debf4e6ce7818ec4261022c63c5174dbf51c34fd98db73c55431a897423936fe486079d14be4fdaa264f27421f79a60f4c7f8d297d74bc790de34386008fc17b9ca14491f71bbc7fd8367ce56a3fb28ba9d6d3b2c24568f8b891c71cab31229da7ca3687c49e4e9d44410b7fa88e3f5f4e437b5e143240b3bec30863d4b722b6ad3c8d882037a7daebcb362", &(0x7f0000000880)="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", 0x1, 0x0, 0x2}, 0x50) 2.82671865s ago: executing program 0 (id=2370): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) unshare(0x22020600) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000fe"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r2, 0x10040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x110, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, &(0x7f00000002c0)="66834efe1c04bd2b6b8518567eff95fde7db9fbedf5f1abbccbca11649fd6390d0cf1b0a831170527ee16ca88a3174834bd08b6ae52ec6db749f37ddc211cd73f8de35216362d104a9f94e6b1707fa93f79f5b2f1eeb9ef6eaa43a8265cf7d7bbfbce160d65702b05ff84b3df95b66110b9995fb02aaf8eb471db9a7247c8898b65762e570dcad8d7cc08092", 0x8c, 0x44804, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) 2.605946113s ago: executing program 5 (id=2371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2582000100000100120000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) pwritev(r3, 0x0, 0x0, 0xe5, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a001180"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2582000100000100120000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) (async) pwritev(r3, 0x0, 0x0, 0xe5, 0x1) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a001180"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) (async) 2.483985299s ago: executing program 0 (id=2372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x844) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="ebe3a0f939dcd27e671a28d8b95d7ad9c882e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x36}], 0x2, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/69, 0x45}, {&(0x7f0000000200)=""/49, 0x31}], 0x2}, 0x6cba602938adcbe6) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=ANY=[@ANYRES64], 0x24}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r1, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) 2.330443236s ago: executing program 5 (id=2373): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000080)=0x40000000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x140d, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r3 = socket(0x15, 0x5, 0x702) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0xa, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x1c, 0x0}, 0x20008b88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xde9}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb0266", 0x20}], 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.037120537s ago: executing program 6 (id=2375): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0xc8, 0x3, 0x18, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bb6, 0x4, {0x6, 0x6c, 0x4, 0x20, 0x0, 0x2, 0x0, @in=@multicast1, @in=@loopback}}, @sadb_lifetime={0x4, 0x3, 0x7, 0x1000, 0x5, 0x6}, @sadb_x_sec_ctx={0x8, 0x18, 0x8, 0xe, 0x38, "6e2b87c5c0a5b285d3d1bdfb07215337911accf898f7383cfc038856065555e9e5913d2172a8c619817ea090beb8e2e60acca77986342794"}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd26, 0x3507}]}, 0xc0}}, 0x4000000) 1.889394958s ago: executing program 0 (id=2376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 1.833981739s ago: executing program 2 (id=2377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000006000000000000000000ad0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x1, 0xff, 0x5, 0x39, 0x6}) 1.83054326s ago: executing program 6 (id=2378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x2, &(0x7f0000000140)=@raw=[@exit, @generic={0x8, 0x7, 0xe, 0x4, 0x5}], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41000, 0x4}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000008ebc, 0x4) splice(r1, 0x0, r3, 0x0, 0x80000025a5, 0x0) close(0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x428800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x8) 1.66829751s ago: executing program 2 (id=2379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wlan0\x00', 0x20}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r1, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5", 0xc}, {&(0x7f0000000200)="37a8a6c41ef7", 0x6}], 0x3) 1.660376383s ago: executing program 0 (id=2380): socket$inet_icmp(0x2, 0x2, 0x1) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffd, 0x4}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffd, 0x4}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00), 0x4) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00), 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x2000, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc0, 0x100, @void}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) (async) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x2, r10, 0x20000000}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_ext={0x1c, 0x2b, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@generic={0x8, 0xe, 0x7, 0x1000, 0x6}, @tail_call, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x8d}, @jmp={0x5, 0x0, 0x5, 0x6, 0x2, 0x40, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x7, 0x1, 0x5, 0x7ce3c08928febc94, 0x3, 0x10c, 0x8}]}, &(0x7f0000001300)='syzkaller\x00', 0xd, 0x86, &(0x7f0000001340)=""/134, 0x41100, 0x6, '\x00', r10, 0x0, r7, 0x8, &(0x7f0000001500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0x10, 0x6, 0x3}, 0x10, 0x120a, r2, 0x0, &(0x7f0000001580)=[r6, r11, r6, r6], 0x0, 0x10, 0xfffeffff}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_ext={0x1c, 0x2b, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@generic={0x8, 0xe, 0x7, 0x1000, 0x6}, @tail_call, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x8d}, @jmp={0x5, 0x0, 0x5, 0x6, 0x2, 0x40, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x7, 0x1, 0x5, 0x7ce3c08928febc94, 0x3, 0x10c, 0x8}]}, &(0x7f0000001300)='syzkaller\x00', 0xd, 0x86, &(0x7f0000001340)=""/134, 0x41100, 0x6, '\x00', r10, 0x0, r7, 0x8, &(0x7f0000001500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0x10, 0x6, 0x3}, 0x10, 0x120a, r2, 0x0, &(0x7f0000001580)=[r6, r11, r6, r6], 0x0, 0x10, 0xfffeffff}, 0x94) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0xfffffff3, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x7, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xab}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000ac0)='GPL\x00', 0x469, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000b40)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[r5, r11, r12, r13], &(0x7f0000000cc0)=[{0x3, 0x3, 0xc, 0x9}, {0x1, 0x2, 0xa, 0x11}], 0x10, 0xf17}, 0x94) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x8010) (async) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r14, &(0x7f0000000580)="2a130964b409c06d20722f656b46b3a7961b52bf36530b98bd6609b719d286b3350fcaef6fdeb0c232517e2b2d9204fa9a80a72f78320dc467c43e4efd1dc6d7553fee8863f020883408aec65abadea6b613764476af396d789cc8aae1649fc4391641b8849152b487ba2d70211414fb190ffb0514b7cf0b06005806d4a0daba57840dbbb7694479699f8c40e7a7c34071f254", &(0x7f0000000640)=""/28, 0x4}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x250, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1f0, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'ip6gretap0\x00', {0x6, 0x0, 0x0, 0x338, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x18}, {0x3}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0x6}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'snmp\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x250, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1f0, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'ip6gretap0\x00', {0x6, 0x0, 0x0, 0x338, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x18}, {0x3}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0x6}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'snmp\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) 1.088579924s ago: executing program 5 (id=2381): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) socketpair(0x23, 0x1, 0x3, &(0x7f0000000340)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x23c, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff83}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb78}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd08d}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5f9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x58, 0x3, "7b3ab00a19807320b50eb3cff4a156aacb65f3a9f03b019a328fe25637d6018ad2eeead42699166ebaaacfc443eb103652b5c5a3eeb69c38ba457b81ab3589419a5e64a5f3e8f75ccc8933ca7e7310833aa2f30e"}, @TIPC_NLA_NODE_ID={0x16, 0x3, "f6cfa4a6bb575fbf4c15ceb590fbdbfd6121"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x27, 0x3, "fafa0bc0420318e9913a989458a799e5febd1a90b7955eae1d888908540403cf091618"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a13ba79242cde0d96be5122d1cf36d320bace527deed4aa89522e74d6de80b6070002d42"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x80}, 0x40045) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000280)={r4, &(0x7f0000000080)='\\\x00', 0x200002, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0xfffffe00]}, {0x8, 0x6, 0x1, 0x1ff}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xbb7f}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) (async) socketpair(0x23, 0x1, 0x3, &(0x7f0000000340)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x23c, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff83}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb78}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd08d}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5f9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x58, 0x3, "7b3ab00a19807320b50eb3cff4a156aacb65f3a9f03b019a328fe25637d6018ad2eeead42699166ebaaacfc443eb103652b5c5a3eeb69c38ba457b81ab3589419a5e64a5f3e8f75ccc8933ca7e7310833aa2f30e"}, @TIPC_NLA_NODE_ID={0x16, 0x3, "f6cfa4a6bb575fbf4c15ceb590fbdbfd6121"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x27, 0x3, "fafa0bc0420318e9913a989458a799e5febd1a90b7955eae1d888908540403cf091618"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a13ba79242cde0d96be5122d1cf36d320bace527deed4aa89522e74d6de80b6070002d42"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x80}, 0x40045) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000280)={r4, &(0x7f0000000080)='\\\x00', 0x200002, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0xfffffe00]}, {0x8, 0x6, 0x1, 0x1ff}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xbb7f}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 966.564906ms ago: executing program 2 (id=2382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r2, 0x7, 0x70bd26, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1e, 0x2, 'Mok\xc7\xf0\xeb\x9f\x99I\xe7\xbc\x83l9\xed\xca_\xa4|\x99dz\xef$\xa8\xce'}]}]}]}]}, 0x58}}, 0x20000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4814}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r11, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000130005002cbd700000000000000000002541f963a7fe0053d9e7bd330e5c5474988d243db81081e227e39ffc941f163befb53ec77b8a6c485f5a1ceffb9d8a64e28c677b564c7effa0ff2f8c22378eb0e5c145b395436eddf5867d95e82ef9c01634fe6c802d5dc5639a9cefb8f099b05d25ef0914c09a68f2ae6573374727f8b4b075e0d15bb0e19d17d1bce3098b286d1ed716b7068595ee2f433831734a3f781c8e53d0b9b0379b7c611edaf36a266b8aed700c0df3dc28614e8573e49f4b2bf7e2f5c3", @ANYRES32=r10, @ANYBLOB="1203000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8d2) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000400)={@loopback, @loopback, 0x0}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000002200)={0x608, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @activeport={{}, {}, {0x0, 0x4, r12}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x39a0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r13}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0xffffffffffffff13, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x608}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791148000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x10}, 0x94) 924.673968ms ago: executing program 0 (id=2383): bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup=0xffffffffffffffff, 0xe, 0x3a, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000180), &(0x7f0000000280)=@udp, 0x2}, 0x20) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x4b, 0x30, "2627d0104b04ae495c1809900c67b1a9855e868e597d4375bc0387824900009ae57e72c657f87bd3c6"}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r7) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000080", @ANYRES16=r8, @ANYBLOB="210229bd7000fbdbdf25020000001c0004800900010073797a31000000000900010073797a3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40000c5) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000015c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)={0x5e8, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1a1fc826d14f1033cbcc105a83a0434ed7f206cb0f396b"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "420f31a2bea3923984ba716a413577677b4752f73172a818ef71cee6df12875223769aa9"}}, @TIPC_NLA_NODE_ID={0x57, 0x3, "6d4ea4bddf07857b9f255501bab8d419288a2fdb2e6dde89a0fec5f7c1de13644da0c6d100a40a28c3ecfbc6dace38b5ae0cf06cfe4291f5d0edd5b98ffeea7b5a7d7a6ef70dba6973dfe1416c025995df9a6d"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "b603c9cf84f33dc4f0e2f180d8f4f8b0594fe2a90c5209c567cd31abd40e447f2bfe"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "68963e466e96bfff649390e0f89d1b66c3e3c3fcff4a77fa21e4f208"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x46f06e9c}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd2c5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd409b6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @loopback, 0xd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x39, @rand_addr=' \x01\x00', 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @private2, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe05f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3857}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f0000000740)="f52f49cfcc", 0x5) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) 757.355819ms ago: executing program 5 (id=2384): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 557.9352ms ago: executing program 6 (id=2385): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 542.607392ms ago: executing program 6 (id=2386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1000800800f3d, 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x44, r4, 0x221, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8}]}, 0x44}}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000800)=ANY=[@ANYRES64=r5, @ANYRES64=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 541.889062ms ago: executing program 2 (id=2387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000005ce9e74a18313d9ee000000bfa200400000000007020000f8ffffff000008000000b7040000010000008500000082417397e679d6eb4d624b297800004c4ff7d78a0095000000000000001c7c7b5e8914314f211b51"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newroute={0x60, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x20, 0x2a, 0xff, 0x2, 0xc8, 0x4, 0x1600}, [@RTA_MARK={0x8, 0x10, 0x6}, @RTA_IIF={0x8, 0x3, r5}, @RTA_EXPIRES={0x8, 0x17, 0x3}, @RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x9, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x6}, {0x1ff, 0x0, 0x1}, {0xd}]}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_UID={0x8, 0x19, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x20008000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000500)={0x12c0, 0x12, 0x0, 0x70bd27, 0x25dfdbfb, {0x1, 0x5, 0x10, 0x81, {0x4e21, 0x4e23, [0x80000000, 0x5, 0x4, 0x5], [0x80, 0x101, 0x9, 0x6], r5, [0xfff, 0x6]}, 0x20, 0x4b2}, [@INET_DIAG_REQ_BYTECODE={0x90, 0x1, "ec3ccb8a0bc9b3783ab895440f9a7a2758cf25903a58d13ff406fbcffb6fd2595fe0bfa0fb84170f360f472040314d18abd347c962cf75d8e55d61fc02aaa5073eab6fa25326b7fe066ab5650d124de0262076cb06a724fba46d1c885b0f7877aab67ad41313c3b4104ce1d30b3ee915e1ab9599d734798e1721d6cac755ebfcf2188b47755803091d427c8c"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "e00c8d9a9b4ab397ff2bbd572a1f5925f501262e061e959f6bc79cb3e88e0368777277b49d36aea0c1b80a20340d3b68a0c4016bd82d99a9bdf73f88c3063e4cd0da"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "12ee9560078e03ad7e198ef349b9c2bc7abac0f23a281e592165a3ce49db4598ce90182f19633d9dc1a5d7dba35d4d53c0c2d6917f0ff6b180c8f76b9e239d4e84a0b8a469108b0d174a5a19c8382052eab2b2004189824f05f3581cc6844242b69c1ee43c5f640b9696642b8594b9af16f1908dbedc30280b4dd538ea1af59a8b8fa9e77558114afbe32fa3fcabf6d66e624a0d3c13e0e80bdcb2ebf45a1fba38fa0b0e6742dc0aebccfd03d967328c7169676f70a0d791f15779a8c0ac9e059facc7d7ec397f050c93d6f4bd8e9f279fe1c81895d00dd5034b655568ae3d56322c84f88ac22cbebecc66c6"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "95a8cba09aaf2da8ab7c9b72aef19e7b0d6e5f828008c0e92a506ac632c81ce9c80cce6b975a4cb555ecb6f98613fd27a72c6544fbfdce38160f231f14b5de29a2aced52cc618c432c14e9a284267c9a3da233c816fb92c9dfec15265c07f5d386886a8816972f0f18d70d4164dfcd44e771f235ec7e73cc93fb2e79e6c75222bf6a14b2722d6e92542faaec40b2052bb7c01aab18fbb3171688b024d38adf9b2a230ecd"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "e3f1b1f2a56ad11c679bf49f890660c9fb2a6a66da792c5926121524d44e9c73dcbfc4938974140d76ae4b4734457e30a7c616546aacbe15b8135af6d1123afbf062fbbbaffaf0408f408788aa175f290978fb1e2a3e6b6d0d6c6ec1589500e05413706774d7f981a5beb826f7a300ae85b8b52a7d182eeb3e83c460144d84c59b1d5d32f4da41f32b27908d5c72e35b0b4c98f2db99db90bb69ac726f45ecb445d1c0d66de84ad6ba29bb6d268daf0542834b411ebc2300a97115e7d621b2e5a36f126ef58b348d176e3695b1bd036291d0fedf9a8d37219a118f0ee4179bdcd67412b4576b51d8ce524f33d2466ef78cf7400075dcbd37cf105c99c3ab82b5ab4d72572a973f943499db3f80354e043903439ca4586b13a6e9ebfa92e122274e3e6d2002f95d68b88a1eacba38792208956fdb841902d2e9a7d65794097d684b9c61a2e31394336dc95d55d901b636a7e6396a1efa082c546f2992645c03538328333419354cd2b0ea77598e5699d94786a0e1d0db4669217c50aa7d704cc05b24bd54d745f01b25bd89d0f3eb4242533a45fd13bcf2d7c439fd93d8c2c84c0a49a3cb1e60916653e7276b3ed60be802d67bd07a0391167655d9e815d2094a77f174eabc2b2b8282297ad5d100721cabd5382f58be9702f9aec9834a06a9b95b18e4fb0742ba9d65950e5d46fa26befceb29f0defa173f2b9ab3dc77ff5b5899111ebc9bb27ff0ffe60cef63a39798dc0854682bb120a91d4a310a4e990d5c459de310e18bc95d4893685ec626dd51a13405bf42c164721a2ab88d3f0f68240e484874063cd91c7d01a28a6eab912d8d1e26403d0e37a20196ff388b1502992858d8ded5f0166fc8480fb298c425fe7eed8e0ead458e73e5c60e4ba72ac975990b1a2956e4e8bd186dc384f0fca0f38771782801955aa82e7fb35be32ee732a44ff6f5f704fc82184bc1a7aa37ebd1c50568cd098ace9fd2c1a880003fb660fb723eefa8748436d42f7bd08b16818f032d1cf102eb176905478a8f2355c60e3a09072c0a9ab1c32a893c25f62e61b506f40abf94e3d3750612087ea333ae6c90bcc196d928d1d269e708da6a26049ddbe5533c79beb3286215cee21115883a08ee774af35f3e371854e0e2c752fb9e2c437d7e9e18ad646fd8a14c766202b4c6b3e95d2a949a32c46a5e8bd3ad06f51b4e48bd50c373a92dda9b6535f1603d7bff7651d77ca26b3cdcd5806dd9193b9d6bf57c374003bc59b343a294bbec733deb0d91070bad47fd0472c984214cd10b08e69f4258b6d264efc5588d6d65ec8fe8135b3b95c9c7718cd58d5c99658e18ddba15ef003150f142de2503ae8a6ffaf8398103565d7e894a1b36d69a18fde79b540ecaefdea6b324daf940d8d7dcb3c181f337f3073c268f177d7a65971a487f061be8fc7276fc271d14e7be7b6cfeaabf291f2649265c2e7d4754af1bb1430b8d3b9a6a3e472742d01ead74717c8f50cf1068a4413652ddea9fe383313410401ed0088a6137e6e1d72be8710c57b6103e85c059b513fa7d36e8479c21fe9fefa4c75842d4c6cd7846d58a2f06a0063a0be370d0b472903acafe09cd893d46cf67a102f726c0b66de624197a365fd9817cd608009e4c4fc2120ac8720d8da843ab50536c7dc872b691b1d8ec465b19537ceddb1c7534d4067933041f9bf20bb628516a7238ca5e71c460a25f338de7f0bc90050570f99901f577ea28ac085d8906e7c691c943449895c3619f10b20901c4aaf3b3acf61377a8caf5e1cb5f4e2be98388919b36bbdaeafaac61973c693f75fe20e57e8bc1bdcec84bd39040716677c9b3edc51ce805ae7d860b0f162381fa35b01ea11277a2125c352e0375a9ab42d2fc7f0d477ddc6c0df4a9916c3d186c296bba4e8bc12207cd5a4a26124cc1d0d36893cebb2502fcda1bf508b1bb60867eef29153dadd553b0fc8ecce185597685a223f817875e1ddb139107912cbd1a5a01412f3e149650ae76151963a357ff1beeb6650d24f00e886cca26d34091a0d6e4ee9e4132d041655fdee261aa6211cdb04ec6a30f6f6caf25655d16f1810700cd0ddd75a633f2323abc9bd0f8dc6df3d108c2caaddca38933d69ceaf46a1b0ef374d9c747b7611ae5ad701bbaf0a00703aa8611e5d8d036385acd5a486287251952580dc29067479411f0b01a245464ff513670ce9fe3d276d6428a38abe77a20116b4f66033c84189f09f7b27790c5248ec45537529b53340d0bb7362b9e79c503bb34d6945ae7738cc4daec44335525dd304ab3df36ee8cd5b625bc0ceaeffab1b92beaa249518937a64cbd489c20e92e713c7f7ef400256e0b5b32546ade29e3594bf472fd015f45c617d24a8d22e56279151febc2391f826dd073e2dcbf74a4c95f8b5ad955258dc9c6c3e558f919b8b56cba79a6cb94657fe89cb645819d65c157ddd96e767cafa2a3e659230af8f3cd93e28d580cad701c755175b376f46f54118cc0e66bfc4063442d9fbb6f7a703d4b7dd8693a062b098a6e37dd7b2378de5a185f0cd456d44cd91071b3f297521cb77e87f10aa6c79ed7a1d6b45a6a6f4bd071c317cefa23de9f143e93ae0ce954b0e7fbc79d24285113f876228379d184d8ccdf1c9135ff6c5ae320ae270a613a770ec08f07490bc82d1a6142543aa469f20881a782c21c15288b34d59eddc0cda2319820d05c994ecacdb87d4c3e8a41e8df92da292f28e4b4077427665d372ad6286180f2abf1b1042f3e73f8dd34ee3b3826b91c834695b99144b54552435fee618735f44b2e3e8426496348222ef562420d2aa35a60470442123be8a5967c49b5fbb581088440ce6000b4254b2732e12a333bcf21c7d3bfcd5090a12c597d79029a4953362214a4d6ce769f5d19b26f1cbe3dc819e88db3ec80058ecaea1beeca850e3139b3eb3e5a177181ff75c7c3ea71ba2bc7429897b30eca85622d3af9ad154d4aa5970dd20a2f4c8623e5b09b674915ad4b95430b03987e252dffe26ab19c1655ec0359b4bd6a45c879636efc087607241839bbe2526fc641a571153792ec531d5804a74dd473aef5af490f34a56d1d3870669000425d7da2da03df783a7be60e363be01ae0a5eeec69196b016b8349f37e6fcc9e48639499d60d7fa11a6f1545f23a6b52c57b33b0f70c6f4a91abd9be2cf27afccdc3694c76936b75e0360d4f1165bc7959acf165ccfee271bbb3fc15c7ce9c1319ee239987c53d51ccec6c5b518e9747a1aa100545f6b809d4dbf06ee000e8d78a2ec78f5812856ce9c38ad12e98d129693201a3f48b41f9c838fb8be1dc56d1977e226974cc09aa50437d689be3b8e90c6785bef5b63fc6b99380498a09db3a72c59ec7f660312e73d0831cd8541fb243e114a29e0c5afbc9bd716c2939dc6a25705cdd1a951aed84f980aeebb6115cb906c931b1f14187faa9bb4e4136a4bb8c6721bbdf04f9f7306d0b4261c179897764e1f7735fdcac58570c1b0da295c33b8fcdf84da3907ac1fb8a93fe469ce7ff8bb7cf3e40008823c1f1d7610763f7869b191170c4aea0e2b17c35587abc48b44a0fa8d7b77c4a07bb5f3d78f51ac4ee80124e9cf6d50ad33ba5a70679d3cb518de600ce760075788509f0a2e748288b57ef6248a5e51a9109d03b9d1f850f20ed77e9be4e75c87a1366e432769c143ca41aa63970d4f7f47dba031022aab7d24ca36e91a6ae34dd8c129e2f6fa3853a9d08b218732f426102e7b76c9fadb208e865fce0a9d04eedb1989c0566070c324870de8cbafa2480d8efab201577378296f15c53e159055e3f2448f0834ec56b838c2b5febeaee9c48f360e54e09aeebd9ed45a1909f6041461a56d7a4cd7c22f58a0ef756c98d486eadf81e6757522e8157465bbca098f0c81fa2cdba29ef56c6cd5d405477927476df49dc0855376a3591c95a80f9540d00eaec9be87bfea532ede9abb730b7c5edc995785810fa69dc6d7c6808f7408e1c2f2416d3171b2fe627bd0e4d171ae48ecbfb2a0e390ea4bf07e66fb7f076c66ac7fc2d171b52d2893aee7d29c356fe8863774aefeff5c12d09e6a51ce290aaf19381d2ac35c4a5f5e62b33cff87b2149e8632dc7b7442f4aa24ea8d17c031e5271c8b8547737e0cf78bd0f6516b9117882c734d790713e34eb6469ceb3c35d7c64d08777e60fb5a40066285d8ba948dba7c02ba86d5a2cf14282e29eb2a3821d917e69c1897c748aa0e4a5d2be1330c462f3abf757105e3697281b5151924bb9dbd731fad17cc38b5f72dc76a9259271760a59de16e2f520f77f4e82db723c2fc5208080c4e29e8cf070cd537729c219424cad1471f263872960488863880ed208d7380d1b4c8937d4bb20f882b93c18b02e6bb3ba16a7e7b566fd0ed53adcd6652c028e05c0a9bed078ab1d57d32842a01f77ea60d09de13112a6f973ca115ec5db6d65b3de76d47ca6dd7a27b5cc50989afaa57787518cf5b4a1344471012a398a4b76f0429c1fadeaf48deb0d0dee8d0ee73d64972558b9360b842d90cc785cb53dd1eccc1559db25d53ec5a841178074f3322eb85b5912920dd79169365a79d730ce2ea7f835a35bf512e013a66ad4fd1e17739164d986808e7521acc4c9616859b3038a59ce1524e21676d26b3b64fbeca9325313b5e7b253367b0764b6b9678ea7a38266824c566b397177bb2f90ab6f8a2eafbb8cd191016db3b96fdc701af17b9193e8ed9520b61215acf6bccb273f8f604acde17e3077c09172825bbb7de894a211dd7544f6ba75a04ab1bb1f423558c570f63b872af8a47265d3132e3c08f2e806028acbddc9d6b039b8dbf33d347d5f1dbae350e4aed5bbb5d2fb75af6d11c1a76d794a0401b94f29ffcc25649984849402a4061ca2e404b278d4ebbb260390362160463660cfdb2c1930efa7a42dc7adfa1f408041b7ce709ad498522028f6d4ae418546610652b2b21ebea79ee7135ef29a834b2c7116ff6517328c52954e5461dd9795e6a42e332447919640e92442bf44327ff296d9d34ecf0bec72d3b9e8f8141b100fdfe0c3e20c77e510fb02cf73a8042ff51ddcf3944caef96cf806a3395c717764bf80e47ed2d01b12488cefca8015b17108a46066d193fc22100c23d52c535ba720e523e3f866155bff779832d5f4937895e8dd7977dca0c2f93a64fde6ac557e70ce347f165fdc5079e54b8d2beb14652d5ebf0bc1b22c4b50c9e9548f9e70dd308ef7ce8329e0622828688e23df4712d7f42bff64f828f29f452e52d31cb13afab72cf418f463a586d32e185372ed2fd499ed8ade0b5d0c570b3d8176c51dfb686d9ac0326e92f898af4860a4f5277aa67753ddeca9091d8e2aaf7d9f8578d9187f23edf3261acab62c74ad1b13a31a1435fbab81fcce682cb63a9b9a6907bdb83f1aeace43fe1ea18c14410ba629e7a149161e5ce3a7b43ea3fa041603f941d631835d694acc10e08a6a7cc0ddffec866c45aedf3b29cf15d3e5bedfa4f8c7e8da0f9bcbcd80a654641fd8bcdea79123274ad99d60f4bdff82dd1b7e2b5fcce90ca30c0a224c2af1a9f6f1cf78adc231293d11ef315057e20dce39224ca1267bd9557bd6e8f1bbab9a97cad2c016316ea3105389001274053a05ddd31999bdb321a6e71fa72d81b80f3b69dafd1456ac608b402254fc568e8cd6b8e4303cc3e00d52c87e1b40da6c74c621d25b73f3b71d409635e1dca4b93f1cc1aaa8f7e0c9cf761f0351438ea2232d5383bc275dddcaf7f8d9af4c1d5bed4ed4f4527472f6404e2c9b29a0fb2fd9b0"}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x20008840}, 0x50) 540.787779ms ago: executing program 0 (id=2388): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000200)={@void, @void, @eth={@random="7de102ec8729", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x18, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xfffffffc, 0x5}}}}}}}}, 0x52) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000020000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61146800000000001d430000000000007a0a00fe00581c1f6114520000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r13 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r14, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 317.639057ms ago: executing program 2 (id=2389): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r5 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) 0s ago: executing program 2 (id=2390): r0 = socket$netlink(0x10, 0x3, 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x31, 0x107, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r5 = socket(0x6, 0x4, 0x50) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9fff548600d698ceb5819570163", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x1}, 0xac) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00@\x00', @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf250900000020000680060001000a00000014000400fc00"/46], 0x34}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0xb, 0x0, 0x1, 0x7}, 0x50) bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r10, 0x0, 0x32, &(0x7f00000003c0)=0xa0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 85] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'. [ 227.432726][ T9982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.450919][ T9982] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.483403][ T9982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.533786][ T9982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.545554][ T9982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.558892][ T9982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.569865][ T9982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.589984][ T9982] veth1_vlan: left promiscuous mode [ 227.600732][ T9982] veth1_vlan: entered promiscuous mode [ 227.616463][ T9982] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 227.624044][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.635199][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.644253][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.653450][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.664692][ T9982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.679783][ T9982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.688400][ T9982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.696141][ T9982] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 227.709731][ T9982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.718341][ T9982] bond5: left allmulticast mode [ 227.723260][ T9982] dummy0: left allmulticast mode [ 227.729540][ T9982] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.737328][ T9982] erspan0: entered promiscuous mode [ 227.744199][ T9982] erspan0: entered allmulticast mode [ 227.750089][ T9982] macvtap0: left promiscuous mode [ 227.755255][ T9982] macvtap0: left allmulticast mode [ 227.760661][ T9982] erspan0: left allmulticast mode [ 227.770491][ T9982] ip6gre2: left allmulticast mode [ 227.789515][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.796805][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.806642][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.813830][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.842971][ T196] bridge0: port 3(team0) entered blocking state [ 227.849390][ T196] bridge0: port 3(team0) entered forwarding state [ 227.862028][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.870647][ T3249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.880122][ T3249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.899580][ T3249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.924737][ T3249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.030918][ T9992] syzkaller0: entered promiscuous mode [ 228.036753][ T9992] syzkaller0: entered allmulticast mode [ 228.690292][T10013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.405394][T10032] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 229.893728][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 229.903241][T10046] tipc: Enabled bearer , priority 0 [ 229.911826][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 229.913849][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 229.930851][T10046] syzkaller0: entered promiscuous mode [ 229.941277][T10046] syzkaller0: entered allmulticast mode [ 229.949344][T10047] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 229.957391][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 230.033080][T10047] tipc: Resetting bearer [ 230.065667][T10047] tipc: Disabling bearer [ 230.184636][T10057] syzkaller0: entered promiscuous mode [ 230.202267][T10057] syzkaller0: entered allmulticast mode [ 230.278104][T10061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1034'. [ 230.405660][T10065] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.413007][T10066] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 230.519900][T10066] bond6: entered promiscuous mode [ 230.534657][T10066] bond6: entered allmulticast mode [ 230.554881][T10066] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.781573][T10087] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1042'. [ 230.951046][T10095] syzkaller0: entered promiscuous mode [ 230.960521][T10095] syzkaller0: entered allmulticast mode [ 230.985210][T10099] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 230.992409][T10099] syzkaller1: linktype set to 778 [ 231.148267][T10101] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 231.189078][T10101] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.241947][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 231.252707][T10101] netlink: 'syz.0.1046': attribute type 30 has an invalid length. [ 231.261582][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 231.285008][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 231.307466][T10101] netlink: 'syz.0.1046': attribute type 30 has an invalid length. [ 231.316217][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 231.519157][T10119] syzkaller0: entered promiscuous mode [ 231.533309][T10119] syzkaller0: entered allmulticast mode [ 232.800106][T10161] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 233.521201][T10190] : renamed from bond_slave_0 [ 233.758086][T10197] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 234.037782][T10209] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 234.046451][T10208] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 234.166019][T10209] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.191317][T10216] tipc: Enabling of bearer rejected, failed to enable media [ 235.182288][T10254] erspan0: entered promiscuous mode [ 235.212427][T10257] __nla_validate_parse: 6 callbacks suppressed [ 235.212448][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 235.247360][T10254] erspan0: entered allmulticast mode [ 236.008644][T10271] veth1_macvtap: left promiscuous mode [ 236.024264][T10271] macsec0: entered allmulticast mode [ 236.044717][T10271] veth1_macvtap: entered promiscuous mode [ 236.055104][T10271] veth1_macvtap: entered allmulticast mode [ 236.071915][T10271] macsec0: left allmulticast mode [ 236.077231][T10271] veth1_macvtap: left allmulticast mode [ 236.443434][T10278] erspan1: entered allmulticast mode [ 236.623318][T10281] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.995685][T10297] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.1107'. [ 237.750522][T10306] netlink: 'syz.1.1109': attribute type 11 has an invalid length. [ 237.759014][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 238.225261][T10310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1111'. [ 238.466117][T10319] xt_CT: No such helper "syz0" [ 238.831605][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 238.928166][T10335] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 239.076187][T10341] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 239.713069][T10245] Set syz1 is full, maxelem 65536 reached [ 239.736835][T10350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1120'. [ 239.800303][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.813467][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.828587][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.839344][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.849676][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.266755][T10372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1126'. [ 240.298142][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'. [ 240.345798][T10372] netlink: 'syz.2.1126': attribute type 30 has an invalid length. [ 240.386127][T10373] netlink: 'syz.2.1126': attribute type 30 has an invalid length. [ 240.691241][T10397] "syz.4.1131" (10397) uses obsolete ecb(arc4) skcipher [ 241.555473][T10441] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 241.729439][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'. [ 241.781944][T10447] bond4 (unregistering): Released all slaves [ 241.782700][T10455] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'. [ 241.835442][T10454] gretap2: entered allmulticast mode [ 241.836919][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'. [ 241.892576][T10450] netlink: 'syz.0.1144': attribute type 21 has an invalid length. [ 241.934580][T10450] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1144'. [ 241.947280][ T5630] Bluetooth: hci5: command tx timeout [ 242.253952][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1151'. [ 242.267987][T10479] xt_hashlimit: size too large, truncated to 1048576 [ 242.346666][T10478] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1151'. [ 242.662190][T10493] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 242.688168][T10493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.721465][T10493] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.946227][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.954028][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.961625][T10352] bridge_slave_0: entered allmulticast mode [ 242.991320][T10352] bridge_slave_0: entered promiscuous mode [ 243.059798][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.088479][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.110988][T10352] bridge_slave_1: entered allmulticast mode [ 243.129358][T10352] bridge_slave_1: entered promiscuous mode [ 243.197176][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.229292][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.504183][T10352] team0: Port device team_slave_0 added [ 243.581790][T10352] team0: Port device team_slave_1 added [ 243.803294][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.827087][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.865676][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 243.901682][T10541] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1164'. [ 243.934933][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.018408][ T5630] Bluetooth: hci5: command tx timeout [ 244.046769][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.224760][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.262939][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.279744][T10541] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 244.525460][T10352] hsr_slave_0: entered promiscuous mode [ 244.553555][T10352] hsr_slave_1: entered promiscuous mode [ 244.565922][T10352] debugfs: 'hsr0' already exists in 'hsr' [ 244.572259][T10352] Cannot create hsr debugfs directory [ 245.646066][T10604] __nla_validate_parse: 2 callbacks suppressed [ 245.646089][T10604] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1178'. [ 246.011738][T10615] tap0: tun_chr_ioctl cmd 2148553947 [ 246.331132][T10625] syzkaller1: entered promiscuous mode [ 246.345483][T10625] syzkaller1: entered allmulticast mode [ 246.365028][T10352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.400615][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.464656][T10352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.486953][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.526880][T10352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.570263][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.590732][T10352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.643327][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.646303][T10633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1182'. [ 247.148956][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.585458][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.619727][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.627000][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.672357][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.679674][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.314065][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.241607][T10352] veth0_vlan: entered promiscuous mode [ 250.279462][T10352] veth1_vlan: entered promiscuous mode [ 250.400458][T10352] veth0_macvtap: entered promiscuous mode [ 250.432511][T10352] veth1_macvtap: entered promiscuous mode [ 250.494387][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.560834][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.624062][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.643061][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.654415][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.698289][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.905054][T10699] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 250.939376][T10699] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 250.972277][T10699] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 251.093928][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.120646][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.411324][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.451090][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.126753][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1119'. [ 252.158951][T10755] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 252.177607][T10753] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1119'. [ 252.558879][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 252.957770][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 252.969441][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 253.003943][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 253.033272][T10792] netlink: 'syz.5.1210': attribute type 39 has an invalid length. [ 253.037192][T10783] netlink: 'syz.0.1207': attribute type 11 has an invalid length. [ 253.434323][T10806] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1214'. [ 253.645340][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 253.656435][T10809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.989477][T10823] xt_hashlimit: max too large, truncated to 1048576 [ 254.065103][T10825] tipc: Enabled bearer , priority 30 [ 254.159936][T10832] veth1_to_hsr: entered promiscuous mode [ 254.180918][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 254.218015][T10832] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1219'. [ 254.253634][T10832] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 254.804561][T10846] syzkaller0: entered promiscuous mode [ 254.835960][T10846] syzkaller0: entered allmulticast mode [ 254.922854][T10844] syzkaller1: entered promiscuous mode [ 254.938003][T10844] syzkaller1: entered allmulticast mode [ 256.355681][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.927768][T10891] syzkaller0: entered promiscuous mode [ 257.934114][T10891] syzkaller0: entered allmulticast mode [ 258.172953][T10904] __nla_validate_parse: 2 callbacks suppressed [ 258.172976][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 261.106116][T10913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1226'. [ 261.361718][T10944] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 261.729921][T10936] 8021q: VLANs not supported on wg2 [ 261.745231][T10936] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1233'. [ 261.786717][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1233'. [ 262.001604][T10967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.095820][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1243'. [ 262.640141][T10990] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20003 [ 262.716602][T10993] FAULT_INJECTION: forcing a failure. [ 262.716602][T10993] name failslab, interval 1, probability 0, space 0, times 1 [ 262.746636][T10993] CPU: 0 UID: 0 PID: 10993 Comm: syz.1.1248 Not tainted syzkaller #0 PREEMPT(full) [ 262.746663][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.746673][T10993] Call Trace: [ 262.746681][T10993] [ 262.746689][T10993] dump_stack_lvl+0xe8/0x150 [ 262.746724][T10993] should_fail_ex+0x40c/0x560 [ 262.746767][T10993] should_failslab+0xa8/0x100 [ 262.746798][T10993] __kmalloc_noprof+0xfe/0x720 [ 262.746825][T10993] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 262.746852][T10993] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 262.746886][T10993] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 262.746921][T10993] genl_family_rcv_msg_doit+0xda/0x340 [ 262.746955][T10993] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 262.746987][T10993] ? apparmor_capable+0x126/0x170 [ 262.747015][T10993] ? bpf_lsm_capable+0x9/0x20 [ 262.747037][T10993] ? security_capable+0x7e/0x2c0 [ 262.747072][T10993] genl_rcv_msg+0x614/0x7a0 [ 262.747102][T10993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.747125][T10993] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 262.747147][T10993] ? __pfx_ref_tracker_free+0x10/0x10 [ 262.747171][T10993] ? __asan_memcpy+0x40/0x70 [ 262.747192][T10993] ? __skb_clone+0x5c/0x6c0 [ 262.747228][T10993] netlink_rcv_skb+0x226/0x4a0 [ 262.747259][T10993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.747284][T10993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.747332][T10993] ? down_read+0x2be/0x330 [ 262.747355][T10993] genl_rcv+0x28/0x40 [ 262.747376][T10993] netlink_unicast+0x7bb/0x940 [ 262.747415][T10993] netlink_sendmsg+0x813/0xb40 [ 262.747444][T10993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.747468][T10993] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.747492][T10993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.747509][T10993] sock_sendmsg_nosec+0x13a/0x180 [ 262.747535][T10993] ____sys_sendmsg+0x54e/0x850 [ 262.747570][T10993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.747609][T10993] ? import_iovec+0x73/0xa0 [ 262.747640][T10993] ___sys_sendmsg+0x2a5/0x360 [ 262.747667][T10993] ? __lock_acquire+0x683/0x2cf0 [ 262.747698][T10993] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.747772][T10993] ? __fget_files+0x2a/0x420 [ 262.747797][T10993] ? __fget_files+0x3a2/0x420 [ 262.747833][T10993] __x64_sys_sendmsg+0x1b1/0x290 [ 262.747865][T10993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.747914][T10993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.747935][T10993] do_syscall_64+0x174/0x580 [ 262.747961][T10993] ? trace_irq_disable+0x3b/0x140 [ 262.747985][T10993] ? clear_bhb_loop+0x40/0x90 [ 262.748009][T10993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.748027][T10993] RIP: 0033:0x7f25b339de59 [ 262.748046][T10993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.748061][T10993] RSP: 002b:00007f25b41f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.748082][T10993] RAX: ffffffffffffffda RBX: 00007f25b3625fa0 RCX: 00007f25b339de59 [ 262.748096][T10993] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000005 [ 262.748108][T10993] RBP: 00007f25b41f2090 R08: 0000000000000000 R09: 0000000000000000 [ 262.748119][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.748130][T10993] R13: 00007f25b3626038 R14: 00007f25b3625fa0 R15: 00007ffcb36fdfd8 [ 262.748163][T10993] [ 263.227957][T11002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1251'. [ 263.238106][T11002] openvswitch: netlink: Flow key attr not present in new flow. [ 263.401337][T11005] dvmrp0: entered allmulticast mode [ 263.454460][T11013] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1256'. [ 263.512670][T11013] netlink: 'syz.4.1256': attribute type 1 has an invalid length. [ 263.524710][T11013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1256'. [ 263.613900][T11011] smc: removing ib device syz0 [ 263.668904][T11013] syzkaller0: entered promiscuous mode [ 263.706061][T11013] syzkaller0: entered allmulticast mode [ 263.751129][T11011] smbdirect: ib_dev[syz0] removed [ 263.935663][T11036] ipt_ECN: cannot use operation on non-tcp rule [ 264.041792][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 264.111895][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1262'. [ 264.519887][T11057] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1266'. [ 264.543083][T11057] openvswitch: netlink: Flow key attr not present in new flow. [ 264.816741][T11056] FAULT_INJECTION: forcing a failure. [ 264.816741][T11056] name failslab, interval 1, probability 0, space 0, times 0 [ 264.831382][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.4.1265 Not tainted syzkaller #0 PREEMPT(full) [ 264.831410][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.831423][T11056] Call Trace: [ 264.831431][T11056] [ 264.831440][T11056] dump_stack_lvl+0xe8/0x150 [ 264.831478][T11056] should_fail_ex+0x40c/0x560 [ 264.831509][T11056] should_failslab+0xa8/0x100 [ 264.831540][T11056] __kmalloc_cache_noprof+0xa8/0x660 [ 264.831566][T11056] ? __pfx_tipc_node_find_by_id+0x10/0x10 [ 264.831596][T11056] ? tipc_node_create+0x365/0x1d90 [ 264.831626][T11056] ? tipc_node_create+0x365/0x1d90 [ 264.831661][T11056] tipc_node_create+0x365/0x1d90 [ 264.831697][T11056] ? crypto_has_alg+0x15c/0x190 [ 264.831729][T11056] ? tipc_nl_node_set_key+0x61f/0xa20 [ 264.831753][T11056] tipc_nl_node_set_key+0x71b/0xa20 [ 264.831781][T11056] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 264.831810][T11056] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 264.831835][T11056] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 264.831870][T11056] genl_family_rcv_msg_doit+0x233/0x340 [ 264.831905][T11056] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 264.831946][T11056] ? bpf_lsm_capable+0x9/0x20 [ 264.831970][T11056] ? security_capable+0x7e/0x2c0 [ 264.832009][T11056] genl_rcv_msg+0x614/0x7a0 [ 264.832042][T11056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.832066][T11056] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 264.832105][T11056] netlink_rcv_skb+0x226/0x4a0 [ 264.832137][T11056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.832164][T11056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.832221][T11056] ? down_read+0x2be/0x330 [ 264.832247][T11056] genl_rcv+0x28/0x40 [ 264.832270][T11056] netlink_unicast+0x7bb/0x940 [ 264.832313][T11056] netlink_sendmsg+0x813/0xb40 [ 264.832344][T11056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.832370][T11056] ? aa_sock_msg_perm+0xf1/0x1b0 [ 264.832397][T11056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.832416][T11056] sock_sendmsg_nosec+0x13a/0x180 [ 264.832444][T11056] ____sys_sendmsg+0x54e/0x850 [ 264.832483][T11056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.832525][T11056] ? import_iovec+0x73/0xa0 [ 264.832558][T11056] ___sys_sendmsg+0x2a5/0x360 [ 264.832587][T11056] ? __lock_acquire+0x683/0x2cf0 [ 264.832620][T11056] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.832690][T11056] ? __fget_files+0x2a/0x420 [ 264.832715][T11056] ? __fget_files+0x3a2/0x420 [ 264.832753][T11056] __x64_sys_sendmsg+0x1b1/0x290 [ 264.832787][T11056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.832841][T11056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.832864][T11056] do_syscall_64+0x174/0x580 [ 264.832892][T11056] ? trace_irq_disable+0x3b/0x140 [ 264.832916][T11056] ? clear_bhb_loop+0x40/0x90 [ 264.832940][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.832960][T11056] RIP: 0033:0x7f45d8d9de59 [ 264.832981][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.832996][T11056] RSP: 002b:00007f45d6ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.833019][T11056] RAX: ffffffffffffffda RBX: 00007f45d9025fa0 RCX: 00007f45d8d9de59 [ 264.833033][T11056] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000005 [ 264.833046][T11056] RBP: 00007f45d6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 264.833058][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.833069][T11056] R13: 00007f45d9026038 R14: 00007f45d9025fa0 R15: 00007fff4abc0aa8 [ 264.833105][T11056] [ 264.833136][T11056] tipc: Node creation failed, no memory [ 265.466391][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1270'. [ 265.653050][T11073] netlink: 'syz.0.1273': attribute type 12 has an invalid length. [ 265.659425][T11068] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 265.692016][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1274'. [ 265.878850][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 265.962034][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 265.978828][T11084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.061380][T11080] vlan2: entered promiscuous mode [ 266.082780][T11080] gretap0: entered promiscuous mode [ 266.506217][T11079] bond9: entered allmulticast mode [ 266.914890][T11112] FAULT_INJECTION: forcing a failure. [ 266.914890][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 266.928084][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.2.1279 Not tainted syzkaller #0 PREEMPT(full) [ 266.928112][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.928124][T11112] Call Trace: [ 266.928133][T11112] [ 266.928141][T11112] dump_stack_lvl+0xe8/0x150 [ 266.928179][T11112] should_fail_ex+0x40c/0x560 [ 266.928209][T11112] should_failslab+0xa8/0x100 [ 266.928240][T11112] __kmalloc_cache_noprof+0xa8/0x660 [ 266.928264][T11112] ? __pfx_tipc_node_find_by_id+0x10/0x10 [ 266.928294][T11112] ? tipc_node_create+0x365/0x1d90 [ 266.928328][T11112] ? tipc_node_create+0x365/0x1d90 [ 266.928364][T11112] tipc_node_create+0x365/0x1d90 [ 266.928401][T11112] ? crypto_has_alg+0x15c/0x190 [ 266.928433][T11112] ? tipc_nl_node_set_key+0x61f/0xa20 [ 266.928458][T11112] tipc_nl_node_set_key+0x71b/0xa20 [ 266.928486][T11112] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 266.928514][T11112] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 266.928541][T11112] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 266.928576][T11112] genl_family_rcv_msg_doit+0x233/0x340 [ 266.928610][T11112] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 266.928652][T11112] ? bpf_lsm_capable+0x9/0x20 [ 266.928676][T11112] ? security_capable+0x7e/0x2c0 [ 266.928714][T11112] genl_rcv_msg+0x614/0x7a0 [ 266.928747][T11112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.928771][T11112] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 266.928795][T11112] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.928819][T11112] ? __asan_memcpy+0x40/0x70 [ 266.928839][T11112] ? __skb_clone+0x5c/0x6c0 [ 266.928877][T11112] netlink_rcv_skb+0x226/0x4a0 [ 266.928912][T11112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.928938][T11112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.928989][T11112] ? down_read+0x2be/0x330 [ 266.929015][T11112] genl_rcv+0x28/0x40 [ 266.929038][T11112] netlink_unicast+0x7bb/0x940 [ 266.929080][T11112] netlink_sendmsg+0x813/0xb40 [ 266.929113][T11112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.929139][T11112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.929166][T11112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.929184][T11112] sock_sendmsg_nosec+0x13a/0x180 [ 266.929218][T11112] ____sys_sendmsg+0x54e/0x850 [ 266.929256][T11112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.929297][T11112] ? import_iovec+0x73/0xa0 [ 266.929332][T11112] ___sys_sendmsg+0x2a5/0x360 [ 266.929359][T11112] ? __lock_acquire+0x683/0x2cf0 [ 266.929389][T11112] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.929458][T11112] ? __fget_files+0x2a/0x420 [ 266.929489][T11112] ? __fget_files+0x3a2/0x420 [ 266.929525][T11112] __x64_sys_sendmsg+0x1b1/0x290 [ 266.929558][T11112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.929611][T11112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.929633][T11112] do_syscall_64+0x174/0x580 [ 266.929662][T11112] ? trace_irq_disable+0x3b/0x140 [ 266.929685][T11112] ? clear_bhb_loop+0x40/0x90 [ 266.929709][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.929728][T11112] RIP: 0033:0x7f3ddc59de59 [ 266.929747][T11112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.929764][T11112] RSP: 002b:00007f3ddd4c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.929786][T11112] RAX: ffffffffffffffda RBX: 00007f3ddc825fa0 RCX: 00007f3ddc59de59 [ 266.929800][T11112] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000005 [ 266.929812][T11112] RBP: 00007f3ddd4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 266.929824][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.929835][T11112] R13: 00007f3ddc826038 R14: 00007f3ddc825fa0 R15: 00007ffedc0ee498 [ 266.929870][T11112] [ 266.929907][T11112] tipc: Node creation failed, no memory [ 267.801430][T11123] ip6erspan0: entered allmulticast mode [ 267.907267][T11134] dummy0: entered promiscuous mode [ 267.965592][T11134] bond5: (slave dummy0): Releasing active interface [ 268.028174][ T5630] block nbd0: Receive control failed (result -32) [ 268.043452][T11134] dummy0 (unregistering): left promiscuous mode [ 268.613187][T11164] __nla_validate_parse: 6 callbacks suppressed [ 268.613209][T11164] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1295'. [ 268.636367][T11164] openvswitch: netlink: Message has 512 unknown bytes. [ 268.682952][T11165] FAULT_INJECTION: forcing a failure. [ 268.682952][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 268.728604][T11165] CPU: 0 UID: 0 PID: 11165 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(full) [ 268.728634][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.728646][T11165] Call Trace: [ 268.728654][T11165] [ 268.728663][T11165] dump_stack_lvl+0xe8/0x150 [ 268.728702][T11165] should_fail_ex+0x40c/0x560 [ 268.728732][T11165] should_failslab+0xa8/0x100 [ 268.728765][T11165] __kmalloc_cache_noprof+0xa8/0x660 [ 268.728790][T11165] ? tipc_node_create+0x109a/0x1d90 [ 268.728818][T11165] ? preempt_schedule_thunk+0x16/0x40 [ 268.728842][T11165] ? tipc_crypto_key_init+0x6a/0x820 [ 268.728864][T11165] ? tipc_crypto_key_init+0x6a/0x820 [ 268.728895][T11165] tipc_crypto_key_init+0x6a/0x820 [ 268.728938][T11165] tipc_nl_node_set_key+0x76a/0xa20 [ 268.728967][T11165] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 268.728997][T11165] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 268.729024][T11165] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 268.729061][T11165] genl_family_rcv_msg_doit+0x233/0x340 [ 268.729099][T11165] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 268.729141][T11165] ? bpf_lsm_capable+0x9/0x20 [ 268.729167][T11165] ? security_capable+0x7e/0x2c0 [ 268.729216][T11165] genl_rcv_msg+0x614/0x7a0 [ 268.729251][T11165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.729275][T11165] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 268.729322][T11165] netlink_rcv_skb+0x226/0x4a0 [ 268.729354][T11165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.729382][T11165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.729430][T11165] ? down_read+0x2be/0x330 [ 268.729455][T11165] genl_rcv+0x28/0x40 [ 268.729475][T11165] netlink_unicast+0x7bb/0x940 [ 268.729513][T11165] netlink_sendmsg+0x813/0xb40 [ 268.729543][T11165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.729566][T11165] ? aa_sock_msg_perm+0xf1/0x1b0 [ 268.729592][T11165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.729609][T11165] sock_sendmsg_nosec+0x13a/0x180 [ 268.729636][T11165] ____sys_sendmsg+0x54e/0x850 [ 268.729673][T11165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.729713][T11165] ? import_iovec+0x73/0xa0 [ 268.729743][T11165] ___sys_sendmsg+0x2a5/0x360 [ 268.729771][T11165] ? __lock_acquire+0x683/0x2cf0 [ 268.729802][T11165] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.729870][T11165] ? __fget_files+0x2a/0x420 [ 268.729895][T11165] ? __fget_files+0x3a2/0x420 [ 268.729933][T11165] __x64_sys_sendmsg+0x1b1/0x290 [ 268.729966][T11165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.730018][T11165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.730041][T11165] do_syscall_64+0x174/0x580 [ 268.730070][T11165] ? trace_irq_disable+0x3b/0x140 [ 268.730095][T11165] ? clear_bhb_loop+0x40/0x90 [ 268.730121][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.730141][T11165] RIP: 0033:0x7f45d8d9de59 [ 268.730162][T11165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.730180][T11165] RSP: 002b:00007f45d6ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.730201][T11165] RAX: ffffffffffffffda RBX: 00007f45d9025fa0 RCX: 00007f45d8d9de59 [ 268.730214][T11165] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000005 [ 268.730227][T11165] RBP: 00007f45d6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 268.730238][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.730251][T11165] R13: 00007f45d9026038 R14: 00007f45d9025fa0 R15: 00007fff4abc0aa8 [ 268.730287][T11165] [ 269.298551][T11164] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.323308][T11169] block nbd1: server does not support multiple connections per device. [ 269.350444][T11169] block nbd1: shutting down sockets [ 269.500192][T11171] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.656463][T11158] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 269.919444][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 269.936423][T11203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1305'. [ 269.952636][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 269.979252][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 269.990258][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 270.023667][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 270.074275][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 270.110208][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 270.130278][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 270.192059][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 270.212954][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 270.231135][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.244652][T11199] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 270.335829][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 270.360461][T11225] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 270.479166][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 270.503690][T11225] bond4: entered promiscuous mode [ 270.509687][T11225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.549638][T11228] bond4: entered allmulticast mode [ 270.681598][ T30] audit: type=1800 audit(1783881951.149:3): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1310" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1329 res=0 errno=0 [ 270.720836][T11225] bond4: (slave bridge0): making interface the new active one [ 270.731777][T11225] bridge0: entered promiscuous mode [ 270.745440][T11225] bridge0: entered allmulticast mode [ 270.758206][T11225] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 270.874861][T11241] 8021q: adding VLAN 0 to HW filter on device bond10 [ 270.914649][T11243] vlan3: entered allmulticast mode [ 270.921488][T11243] bond10: entered allmulticast mode [ 270.949686][T11247] bond10: (slave geneve2): making interface the new active one [ 270.967112][T11247] geneve2: entered allmulticast mode [ 270.995122][T11247] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 271.005914][T11234] syzkaller0: entered promiscuous mode [ 271.016225][T11234] syzkaller0: entered allmulticast mode [ 271.193094][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.245505][T11262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.462193][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 271.676292][T11271] bond5: entered promiscuous mode [ 271.682633][T11271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.699992][T11280] FAULT_INJECTION: forcing a failure. [ 271.699992][T11280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.745256][T11276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1320'. [ 271.782116][T11280] CPU: 1 UID: 0 PID: 11280 Comm: syz.5.1321 Not tainted syzkaller #0 PREEMPT(full) [ 271.782146][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.782158][T11280] Call Trace: [ 271.782167][T11280] [ 271.782177][T11280] dump_stack_lvl+0xe8/0x150 [ 271.782229][T11280] should_fail_ex+0x40c/0x560 [ 271.782258][T11280] _copy_to_user+0x31/0xb0 [ 271.782299][T11280] simple_read_from_buffer+0xe1/0x170 [ 271.782333][T11280] proc_fail_nth_read+0x1bb/0x230 [ 271.782365][T11280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.782396][T11280] ? rw_verify_area+0x24a/0x4c0 [ 271.782426][T11280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.782450][T11280] vfs_read+0x213/0xa80 [ 271.782483][T11280] ? __pfx___mutex_lock+0x10/0x10 [ 271.782514][T11280] ? __pfx_vfs_read+0x10/0x10 [ 271.782543][T11280] ? __fget_files+0x2a/0x420 [ 271.782573][T11280] ? __fget_files+0x3a2/0x420 [ 271.782594][T11280] ? __fget_files+0x2a/0x420 [ 271.782628][T11280] ksys_read+0x150/0x270 [ 271.782658][T11280] ? __pfx_ksys_read+0x10/0x10 [ 271.782693][T11280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.782715][T11280] do_syscall_64+0x174/0x580 [ 271.782739][T11280] ? trace_irq_disable+0x3b/0x140 [ 271.782763][T11280] ? clear_bhb_loop+0x40/0x90 [ 271.782786][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.782805][T11280] RIP: 0033:0x7f269d95e68e [ 271.782824][T11280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.782841][T11280] RSP: 002b:00007f269e7ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.782864][T11280] RAX: ffffffffffffffda RBX: 00007f269e7cd6c0 RCX: 00007f269d95e68e [ 271.782878][T11280] RDX: 000000000000000f RSI: 00007f269e7cd0a0 RDI: 0000000000000006 [ 271.782890][T11280] RBP: 00007f269e7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 271.782903][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.782915][T11280] R13: 00007f269dc26038 R14: 00007f269dc25fa0 R15: 00007ffd232a4288 [ 271.782948][T11280] [ 271.997241][T11276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1320'. [ 272.084047][T11276] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1320'. [ 272.318242][T11296] batadv_slave_1: entered promiscuous mode [ 272.344488][T11295] can: request_module (can-proto-0) failed. [ 272.387926][T11292] batadv_slave_1: left promiscuous mode [ 272.585471][T11307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.659225][T11355] __nla_validate_parse: 8 callbacks suppressed [ 273.659249][T11355] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1342'. [ 273.906702][T11359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.952835][T11362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1346'. [ 274.252440][T11376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 274.502938][T11385] block nbd1: Unsupported socket: should be TCP or UNIX. [ 274.780322][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'. [ 275.166491][T11408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.585720][T11465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.660648][T11469] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 277.240035][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1384'. [ 277.329114][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 277.398371][T11457] infiniband syz0: set down [ 277.410714][T11457] infiniband syz0: added bond_slave_0 [ 277.432382][T11457] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 277.456984][T11457] infiniband syz0: Couldn't open port 1 [ 277.495105][T11457] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 277.523425][T11457] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 277.548291][T11457] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 277.812118][T11457] RDS/IB: syz0: added [ 277.822637][T11457] smc: adding ib device syz0 with port count 1 [ 277.834050][T11457] smc: ib device syz0 port 1 has no pnetid [ 277.924812][T11530] validate_nla: 26 callbacks suppressed [ 277.924835][T11530] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 277.968274][T11530] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 278.281468][T11542] nbd: must specify an index to disconnect [ 278.296040][T11542] netlink: 'syz.2.1395': attribute type 3 has an invalid length. [ 278.332077][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1395'. [ 278.561007][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 278.728523][T11557] Cannot find set identified by id 0 to match [ 278.767638][T11559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1398'. [ 278.871098][T11562] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1399'. [ 278.884276][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 279.185776][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1402'. [ 279.246567][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1403'. [ 279.261096][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.441403][T11570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.605566][T11575] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 279.634954][T11570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1403'. [ 279.656704][T11575] bond4 (unregistering): Released all slaves [ 280.862134][T11593] syzkaller0: entered promiscuous mode [ 280.875400][T11593] syzkaller0: entered allmulticast mode [ 280.910601][T11599] netlink: 'syz.2.1410': attribute type 5 has an invalid length. [ 283.716372][T11599] ip6erspan0: entered allmulticast mode [ 283.739666][T11596] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1410'. [ 284.086911][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1414'. [ 284.319054][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1414'. [ 284.518856][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'. [ 284.533726][T11644] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1416'. [ 284.564395][T11644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1416'. [ 284.825078][T11639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1417'. [ 284.870487][T11643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.088404][T11664] netlink: 'syz.5.1419': attribute type 1 has an invalid length. [ 285.868755][T11696] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 285.878547][T11696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.204097][ T3271] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 286.441819][T11713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.755328][T11713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.906124][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 286.915891][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 289.059689][T11701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.071624][T11719] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.1430'. [ 289.094961][T11719] netlink: 'syz.0.1430': attribute type 2 has an invalid length. [ 289.213231][T11742] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 289.238056][T11742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.484812][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1442'. [ 289.555830][T11753] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.888282][T11770] netlink: 'syz.4.1446': attribute type 2 has an invalid length. [ 289.919351][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 289.994623][T11776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1447'. [ 290.335174][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 290.454444][T11791] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 290.486608][T11795] netlink: 'syz.5.1453': attribute type 1 has an invalid length. [ 290.517322][T11795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.520997][T11791] bond6 (unregistering): Released all slaves [ 290.882726][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1456'. [ 291.252218][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1464'. [ 291.673062][T11848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.382731][T11879] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1476'. [ 292.567929][T11881] netlink: 'syz.2.1477': attribute type 4 has an invalid length. [ 292.601901][T11881] netlink: 'syz.2.1477': attribute type 4 has an invalid length. [ 292.663402][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 292.697215][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 292.700777][T11890] bridge0: port 1(syz_tun) entered blocking state [ 292.754416][T11890] bridge0: port 1(syz_tun) entered disabled state [ 292.766016][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 292.799513][T11890] syz_tun: entered allmulticast mode [ 292.829074][T11890] syz_tun: entered promiscuous mode [ 292.835405][T11890] bridge0: port 1(syz_tun) entered blocking state [ 292.842074][T11890] bridge0: port 1(syz_tun) entered forwarding state [ 293.314237][T11920] openvswitch: netlink: IP tunnel dst address not specified [ 293.569327][T11924] sctp: [Deprecated]: syz.4.1488 (pid 11924) Use of int in maxseg socket option. [ 293.569327][T11924] Use struct sctp_assoc_value instead [ 294.259077][T11962] sctp: [Deprecated]: syz.2.1499 (pid 11962) Use of int in max_burst socket option. [ 294.259077][T11962] Use struct sctp_assoc_value instead [ 294.711314][T11982] __nla_validate_parse: 1 callbacks suppressed [ 294.711339][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 294.775571][T11982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.615402][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1517'. [ 295.677163][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 296.650000][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 296.659643][T12040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.925640][T12046] FAULT_INJECTION: forcing a failure. [ 296.925640][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 296.940273][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.2.1523 Not tainted syzkaller #0 PREEMPT(full) [ 296.940293][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.940302][T12046] Call Trace: [ 296.940308][T12046] [ 296.940315][T12046] dump_stack_lvl+0xe8/0x150 [ 296.940339][T12046] should_fail_ex+0x40c/0x560 [ 296.940356][T12046] should_failslab+0xa8/0x100 [ 296.940375][T12046] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 296.940390][T12046] ? skb_clone+0x212/0x3a0 [ 296.940401][T12046] ? skb_clone+0x212/0x3a0 [ 296.940415][T12046] skb_clone+0x212/0x3a0 [ 296.940426][T12046] ? dev_queue_xmit_nit+0x25c/0xac0 [ 296.940444][T12046] dev_queue_xmit_nit+0x28d/0xac0 [ 296.940461][T12046] ? dev_queue_xmit_nit+0x2d/0xac0 [ 296.940481][T12046] dev_hard_start_xmit+0x1c1/0x830 [ 296.940502][T12046] __dev_queue_xmit+0x1435/0x37f0 [ 296.940514][T12046] ? do_syscall_64+0x174/0x580 [ 296.940530][T12046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.940549][T12046] ? __dev_queue_xmit+0x29b/0x37f0 [ 296.940567][T12046] ? __pfx___dev_queue_xmit+0x10/0x10 [ 296.940585][T12046] ? __copy_skb_header+0xa3/0x4a0 [ 296.940604][T12046] ? __asan_memcpy+0x40/0x70 [ 296.940616][T12046] ? __skb_clone+0x5c/0x6c0 [ 296.940636][T12046] ? __skb_clone+0x449/0x6c0 [ 296.940657][T12046] ? skb_clone+0x246/0x3a0 [ 296.940670][T12046] __netlink_deliver_tap+0x5b4/0x860 [ 296.940689][T12046] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.940701][T12046] netlink_deliver_tap+0x19c/0x1b0 [ 296.940713][T12046] netlink_unicast+0x77f/0x940 [ 296.940736][T12046] netlink_sendmsg+0x813/0xb40 [ 296.940754][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.940773][T12046] ? aa_sock_msg_perm+0xf1/0x1b0 [ 296.940794][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.940809][T12046] sock_sendmsg_nosec+0x13a/0x180 [ 296.940830][T12046] ____sys_sendmsg+0x54e/0x850 [ 296.940852][T12046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.940875][T12046] ? import_iovec+0x73/0xa0 [ 296.940894][T12046] ___sys_sendmsg+0x2a5/0x360 [ 296.940911][T12046] ? __lock_acquire+0x683/0x2cf0 [ 296.940929][T12046] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.940967][T12046] ? __fget_files+0x2a/0x420 [ 296.940982][T12046] ? __fget_files+0x3a2/0x420 [ 296.941002][T12046] __x64_sys_sendmsg+0x1b1/0x290 [ 296.941022][T12046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.941050][T12046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.941063][T12046] do_syscall_64+0x174/0x580 [ 296.941079][T12046] ? trace_irq_disable+0x3b/0x140 [ 296.941095][T12046] ? clear_bhb_loop+0x40/0x90 [ 296.941109][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.941121][T12046] RIP: 0033:0x7f3ddc59de59 [ 296.941134][T12046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.941144][T12046] RSP: 002b:00007f3ddd4c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.941158][T12046] RAX: ffffffffffffffda RBX: 00007f3ddc825fa0 RCX: 00007f3ddc59de59 [ 296.941167][T12046] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000015 [ 296.941175][T12046] RBP: 00007f3ddd4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 296.941183][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.941190][T12046] R13: 00007f3ddc826038 R14: 00007f3ddc825fa0 R15: 00007ffedc0ee498 [ 296.941208][T12046] [ 296.943727][T12046] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 297.293146][T12046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.448838][ T5753] bridge0: entered promiscuous mode [ 298.108379][T12003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.308146][T12056] netlink: ct family unspecified [ 298.313672][T12056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.332860][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 298.385287][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 298.432338][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 298.613312][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 298.687694][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 298.733761][T12080] FAULT_INJECTION: forcing a failure. [ 298.733761][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 298.754472][T12072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.766851][T12080] CPU: 1 UID: 0 PID: 12080 Comm: syz.4.1535 Not tainted syzkaller #0 PREEMPT(full) [ 298.766880][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.766893][T12080] Call Trace: [ 298.766901][T12080] [ 298.766909][T12080] dump_stack_lvl+0xe8/0x150 [ 298.766946][T12080] should_fail_ex+0x40c/0x560 [ 298.766977][T12080] should_failslab+0xa8/0x100 [ 298.767012][T12080] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 298.767036][T12080] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 298.767059][T12080] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 298.767079][T12080] ? ovs_flow_alloc+0x103/0x1f0 [ 298.767099][T12080] ? ovs_flow_alloc+0x103/0x1f0 [ 298.767128][T12080] ovs_flow_alloc+0x103/0x1f0 [ 298.767154][T12080] ovs_flow_cmd_new+0x2b9/0xe80 [ 298.767181][T12080] ? __kmalloc_noprof+0x1ad/0x720 [ 298.767207][T12080] ? kasan_save_track+0x3e/0x80 [ 298.767238][T12080] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 298.767324][T12080] ? __kmalloc_noprof+0x396/0x720 [ 298.767352][T12080] ? __nla_parse+0x40/0x60 [ 298.767381][T12080] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 298.767406][T12080] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 298.767440][T12080] genl_family_rcv_msg_doit+0x233/0x340 [ 298.767472][T12080] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 298.767511][T12080] ? bpf_lsm_capable+0x9/0x20 [ 298.767534][T12080] ? security_capable+0x7e/0x2c0 [ 298.767568][T12080] genl_rcv_msg+0x614/0x7a0 [ 298.767597][T12080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.767618][T12080] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 298.767658][T12080] netlink_rcv_skb+0x226/0x4a0 [ 298.767692][T12080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.767728][T12080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.767774][T12080] ? down_read+0x2be/0x330 [ 298.767800][T12080] genl_rcv+0x28/0x40 [ 298.767822][T12080] netlink_unicast+0x7bb/0x940 [ 298.767863][T12080] netlink_sendmsg+0x813/0xb40 [ 298.767894][T12080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.767918][T12080] ? aa_sock_msg_perm+0xf1/0x1b0 [ 298.767945][T12080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.767965][T12080] sock_sendmsg_nosec+0x13a/0x180 [ 298.767993][T12080] ____sys_sendmsg+0x54e/0x850 [ 298.768030][T12080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.768070][T12080] ? import_iovec+0x73/0xa0 [ 298.768103][T12080] ___sys_sendmsg+0x2a5/0x360 [ 298.768133][T12080] ? __lock_acquire+0x683/0x2cf0 [ 298.768165][T12080] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.768232][T12080] ? __fget_files+0x2a/0x420 [ 298.768255][T12080] ? __fget_files+0x3a2/0x420 [ 298.768285][T12080] __x64_sys_sendmsg+0x1b1/0x290 [ 298.768313][T12080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.768355][T12080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.768373][T12080] do_syscall_64+0x174/0x580 [ 298.768395][T12080] ? trace_irq_disable+0x3b/0x140 [ 298.768414][T12080] ? clear_bhb_loop+0x40/0x90 [ 298.768434][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.768450][T12080] RIP: 0033:0x7f45d8d9de59 [ 298.768468][T12080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.768482][T12080] RSP: 002b:00007f45d6ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.768502][T12080] RAX: ffffffffffffffda RBX: 00007f45d9025fa0 RCX: 00007f45d8d9de59 [ 298.768514][T12080] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000015 [ 298.768525][T12080] RBP: 00007f45d6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 298.768535][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.768544][T12080] R13: 00007f45d9026038 R14: 00007f45d9025fa0 R15: 00007fff4abc0aa8 [ 298.768574][T12080] [ 298.799314][T12066] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 299.163462][T12066] bond12 (unregistering): Released all slaves [ 299.620591][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1542'. [ 299.901246][T12105] team0: mtu less than device minimum [ 299.960667][T12122] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 300.168195][T12124] block nbd1: server does not support multiple connections per device. [ 300.170952][T12134] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1551'. [ 300.187599][T12124] block nbd1: shutting down sockets [ 300.501173][T12146] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1554'. [ 300.652175][T12151] bond6: option downdelay: invalid value (18446744073709551487) [ 300.672875][T12151] bond6: option downdelay: allowed values 0 - 2147483647 [ 300.698941][T12151] bond6 (unregistering): Released all slaves [ 300.823190][T12160] syzkaller0: entered promiscuous mode [ 300.846054][T12160] syzkaller0: entered allmulticast mode [ 300.952366][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 300.991540][T12172] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 301.011121][T12172] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1563'. [ 301.012563][T12176] IPVS: Error connecting to the multicast addr [ 301.066624][T12172] pim6reg1: entered promiscuous mode [ 301.091963][T12172] pim6reg1: entered allmulticast mode [ 301.272916][T12187] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 301.320350][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 301.485401][T12201] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 301.672436][T12198] vlan2: entered allmulticast mode [ 301.678031][T12198] bond6: entered allmulticast mode [ 302.763966][T12229] netlink: 'syz.0.1580': attribute type 11 has an invalid length. [ 303.008152][T12240] netlink: 'syz.5.1583': attribute type 1 has an invalid length. [ 303.307815][T12247] netlink: 'syz.5.1585': attribute type 1 has an invalid length. [ 303.339114][T12247] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1585'. [ 303.349481][T12247] netlink: 'syz.5.1585': attribute type 1 has an invalid length. [ 303.522489][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 303.631470][T12255] syzkaller1: entered promiscuous mode [ 303.649190][T12262] netlink: 'syz.5.1590': attribute type 33 has an invalid length. [ 303.666178][T12255] syzkaller1: entered allmulticast mode [ 304.061222][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 304.662609][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 305.234925][T12310] bond2: entered promiscuous mode [ 305.240932][T12310] bond2: entered allmulticast mode [ 305.247388][T12310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.613851][T12322] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 305.615526][T12329] SET target dimension over the limit! [ 306.570359][T12352] FAULT_INJECTION: forcing a failure. [ 306.570359][T12352] name failslab, interval 1, probability 0, space 0, times 0 [ 306.586282][T12352] CPU: 1 UID: 0 PID: 12352 Comm: syz.5.1614 Not tainted syzkaller #0 PREEMPT(full) [ 306.586312][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.586324][T12352] Call Trace: [ 306.586332][T12352] [ 306.586341][T12352] dump_stack_lvl+0xe8/0x150 [ 306.586386][T12352] should_fail_ex+0x40c/0x560 [ 306.586415][T12352] should_failslab+0xa8/0x100 [ 306.586446][T12352] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 306.586475][T12352] ? ovs_nla_get_match+0x3b1/0x1840 [ 306.586503][T12352] ? ovs_nla_get_match+0x3b1/0x1840 [ 306.586540][T12352] kmemdup_noprof+0x2b/0x70 [ 306.586571][T12352] ovs_nla_get_match+0x3b1/0x1840 [ 306.586617][T12352] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 306.586677][T12352] ? __kmalloc_cache_noprof+0x32d/0x660 [ 306.586706][T12352] ? __asan_memset+0x22/0x50 [ 306.586740][T12352] ovs_flow_cmd_new+0x3f9/0xe80 [ 306.586766][T12352] ? __kmalloc_noprof+0x1ad/0x720 [ 306.586798][T12352] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 306.586898][T12352] ? __kmalloc_noprof+0x396/0x720 [ 306.586928][T12352] ? __nla_parse+0x40/0x60 [ 306.586959][T12352] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 306.586985][T12352] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 306.587022][T12352] genl_family_rcv_msg_doit+0x233/0x340 [ 306.587054][T12352] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 306.587092][T12352] ? bpf_lsm_capable+0x9/0x20 [ 306.587116][T12352] ? security_capable+0x7e/0x2c0 [ 306.587151][T12352] genl_rcv_msg+0x614/0x7a0 [ 306.587184][T12352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.587208][T12352] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 306.587236][T12352] ? __pfx_ref_tracker_free+0x10/0x10 [ 306.587261][T12352] ? __asan_memcpy+0x40/0x70 [ 306.587283][T12352] ? __skb_clone+0x5c/0x6c0 [ 306.587322][T12352] netlink_rcv_skb+0x226/0x4a0 [ 306.587355][T12352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.587381][T12352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.587430][T12352] ? down_read+0x2be/0x330 [ 306.587455][T12352] genl_rcv+0x28/0x40 [ 306.587477][T12352] netlink_unicast+0x7bb/0x940 [ 306.587516][T12352] netlink_sendmsg+0x813/0xb40 [ 306.587548][T12352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.587574][T12352] ? aa_sock_msg_perm+0xf1/0x1b0 [ 306.587602][T12352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.587621][T12352] sock_sendmsg_nosec+0x13a/0x180 [ 306.587651][T12352] ____sys_sendmsg+0x54e/0x850 [ 306.587688][T12352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.587735][T12352] ? import_iovec+0x73/0xa0 [ 306.587767][T12352] ___sys_sendmsg+0x2a5/0x360 [ 306.587795][T12352] ? __lock_acquire+0x683/0x2cf0 [ 306.587826][T12352] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.587891][T12352] ? __fget_files+0x2a/0x420 [ 306.587915][T12352] ? __fget_files+0x3a2/0x420 [ 306.587951][T12352] __x64_sys_sendmsg+0x1b1/0x290 [ 306.587987][T12352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.588038][T12352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.588061][T12352] do_syscall_64+0x174/0x580 [ 306.588089][T12352] ? trace_irq_disable+0x3b/0x140 [ 306.588114][T12352] ? clear_bhb_loop+0x40/0x90 [ 306.588139][T12352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.588158][T12352] RIP: 0033:0x7f269d99de59 [ 306.588178][T12352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.588204][T12352] RSP: 002b:00007f269e7cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.588236][T12352] RAX: ffffffffffffffda RBX: 00007f269dc25fa0 RCX: 00007f269d99de59 [ 306.588251][T12352] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000015 [ 306.588263][T12352] RBP: 00007f269e7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 306.588275][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.588287][T12352] R13: 00007f269dc26038 R14: 00007f269dc25fa0 R15: 00007ffd232a4288 [ 306.588322][T12352] [ 307.426566][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1618'. [ 307.603050][T12375] Bluetooth: MGMT ver 1.23 [ 307.903440][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 307.971608][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'. [ 307.990149][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1625'. [ 308.017981][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1625'. [ 308.091641][T12394] team0: Port device team_slave_0 removed [ 308.396350][T12406] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1629'. [ 308.480186][T12413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1629'. [ 309.445808][T12434] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1635'. [ 309.716716][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1632'. [ 309.763662][T12428] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 309.804936][T12428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1632'. [ 311.572791][T12472] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 311.600888][T12472] bond13: (slave lo): Enslaving as an active interface with an up link [ 311.618434][T12472] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 312.432381][T12493] __nla_validate_parse: 2 callbacks suppressed [ 312.432402][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1648'. [ 312.455414][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1648'. [ 312.725197][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'. [ 312.765301][T12501] bridge0: port 3(vlan2) entered blocking state [ 312.777644][T12501] bridge0: port 3(vlan2) entered disabled state [ 312.795352][T12501] vlan2: entered allmulticast mode [ 312.812609][T12501] geneve0: entered allmulticast mode [ 312.826426][T12501] vlan2: entered promiscuous mode [ 312.832482][T12501] geneve0: entered promiscuous mode [ 312.970928][T12509] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 313.430521][T12526] syzkaller1: entered promiscuous mode [ 313.447160][T12526] syzkaller1: entered allmulticast mode [ 313.836229][T12534] bond6: entered promiscuous mode [ 314.265606][T12554] syzkaller0: entered promiscuous mode [ 314.271822][T12554] syzkaller0: entered allmulticast mode [ 314.296346][T12557] tipc: Enabled bearer , priority 0 [ 314.328321][T12557] syzkaller0: entered promiscuous mode [ 314.357448][T12557] syzkaller0: entered allmulticast mode [ 314.413534][T12566] openvswitch: netlink: Message has 8 unknown bytes. [ 314.421093][T12566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.481110][T12557] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1663'. [ 314.505714][T12561] tipc: Resetting bearer [ 314.550026][T12555] tipc: Resetting bearer [ 314.644732][T12555] tipc: Disabling bearer [ 315.361637][T12609] openvswitch: netlink: Message has 4 unknown bytes. [ 315.370052][T12609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.536739][T12617] gretap0: entered promiscuous mode [ 315.538094][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 315.590591][T12617] syzkaller0: entered promiscuous mode [ 315.596672][T12617] syzkaller0: entered allmulticast mode [ 316.276793][T12621] netlink: 'syz.5.1682': attribute type 1 has an invalid length. [ 317.179008][T12673] Bluetooth: MGMT ver 1.23 [ 317.592971][T12688] netlink: 'syz.5.1698': attribute type 12 has an invalid length. [ 317.618287][T12689] netlink: 'syz.5.1698': attribute type 12 has an invalid length. [ 317.783599][ T1314] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.797810][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.913886][T12702] netlink: 'syz.5.1703': attribute type 1 has an invalid length. [ 317.928585][T12702] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1703'. [ 317.990077][T12682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1696'. [ 318.001180][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1696'. [ 318.010963][T12682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1696'. [ 318.029093][T12707] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 318.260337][T12715] openvswitch: netlink: Duplicate or invalid key (type 0). [ 318.277308][T12715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.571180][T12727] xt_connbytes: Forcing CT accounting to be enabled [ 318.612545][T12727] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 318.669730][T12731] syzkaller0: entered promiscuous mode [ 318.689987][T12731] syzkaller0: entered allmulticast mode [ 319.032541][ T5753] hid-generic 0005:15C2:0009.0002: unknown main item tag 0x0 [ 319.058283][ T5753] hid-generic 0005:15C2:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 319.166893][T12747] netlink: 'syz.0.1717': attribute type 13 has an invalid length. [ 319.184539][T12747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1717'. [ 319.761422][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.782124][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.794594][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.804565][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.812989][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.882684][T12769] netlink: 'syz.4.1725': attribute type 6 has an invalid length. [ 319.933781][T12769] netlink: 'syz.4.1725': attribute type 7 has an invalid length. [ 319.959219][T12769] netlink: 'syz.4.1725': attribute type 8 has an invalid length. [ 320.142469][T12785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 320.259052][T12792] xt_hashlimit: size too large, truncated to 1048576 [ 320.485506][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 321.007759][T12820] syzkaller1: entered promiscuous mode [ 321.025694][T12820] syzkaller1: entered allmulticast mode [ 321.105036][T12822] pimreg9: entered allmulticast mode [ 321.506827][T12834] xt_hashlimit: max too large, truncated to 1048576 [ 321.859297][ T50] Bluetooth: hci6: command tx timeout [ 321.861281][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1739'. [ 322.015846][T12837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.136911][T12837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.231691][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1743'. [ 322.599313][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.618239][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.657678][T12770] bridge_slave_0: entered allmulticast mode [ 322.686557][T12770] bridge_slave_0: entered promiscuous mode [ 322.697484][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.705364][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.713781][T12770] bridge_slave_1: entered allmulticast mode [ 322.724582][T12770] bridge_slave_1: entered promiscuous mode [ 323.214374][T12770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.285494][T12770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.437832][T12875] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 323.458455][T12875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.471163][T12770] team0: Port device team_slave_0 added [ 323.501343][T12770] team0: Port device team_slave_1 added [ 323.604115][T12770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.625732][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.653422][T12770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.679453][T12770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.681180][T12884] x_tables: duplicate underflow at hook 2 [ 323.703962][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.763798][T12770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.903214][T12770] hsr_slave_0: entered promiscuous mode [ 323.914547][T12770] hsr_slave_1: entered promiscuous mode [ 323.921608][T12770] debugfs: 'hsr0' already exists in 'hsr' [ 323.928244][T12770] Cannot create hsr debugfs directory [ 323.937997][ T50] Bluetooth: hci6: command tx timeout [ 324.101529][T12895] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 324.154412][T12894] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 324.681261][T12901] xt_hashlimit: max too large, truncated to 1048576 [ 324.927577][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 325.048234][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1756'. [ 325.088632][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1756'. [ 325.341316][T12919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.555210][T12770] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 325.564691][T12770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.595770][T12770] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 325.610318][T12770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.620012][T12770] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 325.641216][T12770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.649542][T12770] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.683048][T12770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.021227][ T50] Bluetooth: hci6: command tx timeout [ 326.180941][T12947] gretap1: entered promiscuous mode [ 326.184674][T12946] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 326.195344][T12946] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1762'. [ 326.234163][T12946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.355341][T12770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.446618][T12951] pimreg9: entered allmulticast mode [ 326.475680][T12950] netlink: 'syz.5.1763': attribute type 1 has an invalid length. [ 326.492261][T12770] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.568240][T12959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'. [ 326.627899][T12950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.635932][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 326.732273][T12957] bond3: (slave ip6gretap1): making interface the new active one [ 326.762515][T12957] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 326.834724][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.842811][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.890828][T12962] bridge_slave_0: entered promiscuous mode [ 326.930228][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.937558][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.141904][T12982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1773'. [ 327.375175][ T5760] IPVS: starting estimator thread 0... [ 327.478322][T12994] IPVS: using max 26 ests per chain, 62400 per kthread [ 327.999789][T13011] openvswitch: netlink: Missing valid actions attribute. [ 328.028391][T13011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.097747][ T50] Bluetooth: hci6: command tx timeout [ 328.460466][T12770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.582429][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1787'. [ 328.862774][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1790'. [ 329.114244][T13060] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 329.532312][T12770] veth0_vlan: entered promiscuous mode [ 329.559847][T13056] SET target dimension over the limit! [ 329.566259][T12770] veth1_vlan: entered promiscuous mode [ 329.783671][T12770] veth0_macvtap: entered promiscuous mode [ 329.833867][T12770] veth1_macvtap: entered promiscuous mode [ 329.891302][T12770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.918659][T12770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.001617][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 330.015824][T13082] bond7: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 330.029222][T13082] bond7 (unregistering): Released all slaves [ 330.070743][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.088416][ T6689] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.130281][ T6689] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.149874][ T6689] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.401915][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1800'. [ 330.470371][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.484734][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.511626][T13096] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1801'. [ 330.551645][T13096] openvswitch: netlink: Message has 512 unknown bytes. [ 330.600954][ T6689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.616216][ T6689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.283516][T13126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.528932][T13134] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 331.853447][T13150] netlink: 'syz.6.1814': attribute type 13 has an invalid length. [ 331.905506][T13152] netlink: 'syz.0.1816': attribute type 11 has an invalid length. [ 331.917940][T13152] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1816'. [ 331.930444][ T6514] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.953265][ T6514] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.969760][ T6514] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.993156][ T6514] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.441930][T13179] netlink: 'syz.0.1821': attribute type 4 has an invalid length. [ 332.493663][T13179] netlink: 'syz.0.1821': attribute type 4 has an invalid length. [ 332.601790][T13146] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 332.719909][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 333.052757][T13201] ip6erspan1: entered allmulticast mode [ 333.087978][T13206] x_tables: duplicate entry at hook 1 [ 333.387544][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1830'. [ 333.401730][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1830'. [ 333.925040][T13236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.444699][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'. [ 335.757370][T13324] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 335.770248][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 336.098668][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 336.116764][T13339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 336.146625][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 336.160256][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 336.200314][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 336.656735][T13361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1860'. [ 336.772529][T13366] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 337.852878][T13396] bond4: entered promiscuous mode [ 337.896526][T13396] bond4: entered allmulticast mode [ 337.924308][T13396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.622651][T13432] bond7: Removing last arp target with arp_interval on [ 338.701068][T13435] pimreg: entered allmulticast mode [ 338.724985][T13435] pimreg: left allmulticast mode [ 338.854967][T13448] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1877'. [ 339.529626][T13468] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 339.763361][T13468] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.823600][T13486] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1883'. [ 340.029787][T13491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 340.566952][T13511] netlink: 'syz.5.1890': attribute type 21 has an invalid length. [ 340.595891][T13511] __nla_validate_parse: 1 callbacks suppressed [ 340.595927][T13511] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1890'. [ 340.670040][ T30] audit: type=1107 audit(1783882021.139:4): pid=13510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 340.719017][T13511] dummy0: entered allmulticast mode [ 340.798755][T13517] erspan0: entered promiscuous mode [ 340.856361][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1893'. [ 340.939190][T13517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.977281][T13517] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.150288][T13517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.177083][T13517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.212012][T13517] veth1_vlan: left promiscuous mode [ 341.232460][T13517] veth0_vlan: left promiscuous mode [ 341.249854][T13517] veth0_vlan: entered promiscuous mode [ 341.288617][T13517] veth1_vlan: entered promiscuous mode [ 341.308757][ T5627] block nbd1: Receive control failed (result -32) [ 341.321797][ T50] block nbd1: Receive control failed (result -32) [ 341.334716][ T5630] block nbd1: Receive control failed (result -32) [ 341.365114][T13517] veth1_macvtap: left promiscuous mode [ 341.401440][T13517] veth0_macvtap: left promiscuous mode [ 341.439417][T13517] veth0_macvtap: entered promiscuous mode [ 341.483151][T13517] veth1_macvtap: entered promiscuous mode [ 341.638810][T13517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.670637][T13517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.713575][T13517] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.733702][T13517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.749813][T13517] netdevsim netdevsim4 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 341.765480][T13517] 8021q: adding VLAN 0 to HW filter on device eth0 [ 341.792437][T13517] 8021q: adding VLAN 0 to HW filter on device eth1 [ 341.814748][T13517] 8021q: adding VLAN 0 to HW filter on device eth2 [ 341.953093][T13517] 8021q: adding VLAN 0 to HW filter on device eth3 [ 342.016796][T13510] dummy0: left allmulticast mode [ 342.221865][ T6687] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.303161][T13539] bond5: option miimon: invalid value (18446744073709551615) [ 342.312216][T13539] bond5: option miimon: allowed values 0 - 2147483647 [ 342.323978][T13539] bond5 (unregistering): Released all slaves [ 342.457889][ T6687] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.490583][ T6687] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.541574][ T6687] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.574898][ T70] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 342.627808][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1899'. [ 342.815807][T13552] netlink: 'syz.6.1899': attribute type 83 has an invalid length. [ 343.136243][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1904'. [ 343.211465][T13578] netlink: 'syz.5.1904': attribute type 1 has an invalid length. [ 343.242800][T13578] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1904'. [ 343.268548][T13572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.442550][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'. [ 343.486485][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1911'. [ 343.514508][T13590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1909'. [ 343.597892][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1911'. [ 343.638180][T13594] 8021q: adding VLAN 0 to HW filter on device bond9 [ 343.666719][T13595] bond9: (slave macvlan1): Enslaving as an active interface with an up link [ 343.887242][T13608] netlink: 504 bytes leftover after parsing attributes in process `syz.6.1915'. [ 344.187757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.198424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.754909][T13641] syzkaller1: entered promiscuous mode [ 344.771290][T13641] syzkaller1: entered allmulticast mode [ 345.242713][T13665] gre1: entered promiscuous mode [ 345.286291][T13671] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 345.520984][T13668] bond6 (unregistering): Released all slaves [ 345.873267][T13690] 8021q: VLANs not supported on ip6gre0 [ 346.657400][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 348.228999][T13677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.470107][T13726] __nla_validate_parse: 2 callbacks suppressed [ 348.470251][T13726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1941'. [ 348.520591][T13730] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1940'. [ 348.801936][T13743] netlink: 'syz.0.1944': attribute type 19 has an invalid length. [ 348.866653][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1947'. [ 349.040342][T13754] gretap3: entered allmulticast mode [ 349.113542][T13754] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1949'. [ 349.197430][T13763] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1950'. [ 349.275712][T13763] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1950'. [ 349.339222][T13763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1950'. [ 349.697755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.706199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.819142][T13791] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1956'. [ 350.577445][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 352.330556][T13768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.882051][T13822] xt_TCPMSS: Only works on TCP SYN packets [ 352.938311][T13823] netlink: 'syz.6.1965': attribute type 10 has an invalid length. [ 352.947827][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 352.970400][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 353.041730][T13836] netlink: 'syz.5.1960': attribute type 3 has an invalid length. [ 353.048109][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.074511][T13823] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 353.159059][T13831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.179442][T13831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.202946][T13831] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 353.250452][T13831] bond0 (unregistering): Released all slaves [ 353.387810][T13822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.421346][T13822] 8021q: adding VLAN 0 to HW filter on device bond8 [ 353.452401][T13822] 8021q: adding VLAN 0 to HW filter on device bond9 [ 353.529548][T13822] 8021q: adding VLAN 0 to HW filter on device bond11 [ 353.570478][T13822] 8021q: adding VLAN 0 to HW filter on device bond12 [ 353.615674][T13822] 8021q: adding VLAN 0 to HW filter on device bond13 [ 353.646579][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.654014][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.296346][T13872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1975'. [ 354.541151][T13877] "syz.4.1976" (13877) uses obsolete ecb(arc4) skcipher [ 354.897202][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 355.474375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.483692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.756821][T13868] netlink: 'syz.5.1974': attribute type 5 has an invalid length. [ 357.872149][ T6514] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 358.016813][T13891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1978'. [ 358.059003][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 358.070728][T13891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1978'. [ 358.156175][T13893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 358.302729][T13897] syzkaller0: entered promiscuous mode [ 358.333527][T13897] syzkaller0: entered allmulticast mode [ 358.746816][T13929] sctp: [Deprecated]: syz.6.1986 (pid 13929) Use of int in max_burst socket option. [ 358.746816][T13929] Use struct sctp_assoc_value instead [ 358.875553][T13932] raw_sendmsg: syz.6.1986 forgot to set AF_INET. Fix it! [ 358.906734][T13922] pim6reg99999999: entered allmulticast mode [ 359.190217][T13944] netlink: 16170 bytes leftover after parsing attributes in process `syz.6.1988'. [ 359.272303][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1991'. [ 360.016905][T13945] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 360.195353][T13973] syzkaller0: entered promiscuous mode [ 360.212238][T13973] syzkaller0: entered allmulticast mode [ 360.245023][T13973] tipc: Enabling of bearer rejected, failed to enable media [ 360.338238][T13980] netlink: 'syz.0.1998': attribute type 4 has an invalid length. [ 360.570444][T13990] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 360.695408][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 360.789877][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2002'. [ 361.048375][T13999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2004'. [ 361.217422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.228870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.379265][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 361.399417][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2006'. [ 361.683467][T14013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.937378][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 362.340543][T14038] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 362.488508][T14038] bond7: entered promiscuous mode [ 362.505757][T14038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.527880][T14037] syzkaller0: entered promiscuous mode [ 362.535187][T14037] syzkaller0: entered allmulticast mode [ 362.635871][T14050] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.659780][T14050] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 362.706464][T14050] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 362.750569][T14050] bond7: (slave xfrm1): making interface the new active one [ 362.782207][T14050] xfrm1: entered promiscuous mode [ 362.822484][T14050] xfrm1: left promiscuous mode [ 363.066889][T14061] sctp: [Deprecated]: syz.0.2011 (pid 14061) Use of int in max_burst socket option. [ 363.066889][T14061] Use struct sctp_assoc_value instead [ 363.372311][T14073] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2025'. [ 363.497768][T14077] SET target dimension over the limit! [ 363.506190][T14073] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2025'. [ 363.716395][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 363.732339][T14084] netlink: 'syz.2.2026': attribute type 30 has an invalid length. [ 363.755779][ T6689] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.779289][ T6689] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.803619][ T6689] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.825659][ T6689] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.839085][T14125] veth0_to_bond: entered promiscuous mode [ 364.856513][T14125] veth0_to_bond: entered allmulticast mode [ 364.936695][T14129] --map-set only usable from mangle table [ 365.047722][T14132] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 365.114542][T14134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2041'. [ 366.190285][T14157] bond3: left allmulticast mode [ 366.338981][T14161] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2050'. [ 366.359168][T14186] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.380208][ T48] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.580950][T14199] xt_hashlimit: size too large, truncated to 1048576 [ 366.606941][T14199] xt_hashlimit: invalid interval [ 366.622282][ T48] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.628839][T14201] xt_hashlimit: size too large, truncated to 1048576 [ 366.650187][ T48] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.688672][T14201] xt_hashlimit: invalid interval [ 367.186419][T14223] x_tables: duplicate underflow at hook 3 [ 367.200437][T14221] netlink: 4412 bytes leftover after parsing attributes in process `syz.6.2059'. [ 367.706627][T14241] netlink: 'syz.6.2066': attribute type 1 has an invalid length. [ 367.792481][T14241] bond0: entered promiscuous mode [ 367.798739][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.817237][T14240] vlan2: entered allmulticast mode [ 367.823107][T14240] bond0: entered allmulticast mode [ 367.909909][T14240] bond0: (slave bridge1): making interface the new active one [ 367.937342][T14240] bridge1: entered promiscuous mode [ 367.948704][T14240] bridge1: entered allmulticast mode [ 367.977622][T14240] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 368.376834][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2072'. [ 369.410124][T14308] netlink: 'syz.5.2081': attribute type 58 has an invalid length. [ 369.419973][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2081'. [ 370.897592][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 372.115534][T14294] ip6tnl6: entered allmulticast mode [ 372.328660][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2083'. [ 372.384086][T14314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2083'. [ 372.384769][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2083'. [ 372.703000][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2088'. [ 372.966374][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2090'. [ 373.238782][T14358] netlink: 'syz.5.2094': attribute type 1 has an invalid length. [ 373.242399][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 373.274242][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 373.318786][T14358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.599965][T14374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2098'. [ 373.664836][T14377] tipc: Started in network mode [ 373.687166][T14377] tipc: Node identity 06d7b33f2133, cluster identity 4711 [ 373.707333][T14377] tipc: Enabled bearer , priority 0 [ 373.768002][T14385] syzkaller0: entered promiscuous mode [ 373.783544][T14385] syzkaller0: entered allmulticast mode [ 373.814623][T14377] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 374.051277][T14400] netlink: 'syz.0.2104': attribute type 8 has an invalid length. [ 374.765478][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 374.866914][T14417] netlink: 'syz.4.2105': attribute type 13 has an invalid length. [ 374.896434][T14417] netlink: 'syz.4.2105': attribute type 17 has an invalid length. [ 374.941044][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 374.986144][T14422] netlink: 'syz.5.2106': attribute type 9 has an invalid length. [ 375.166877][ T5630] Bluetooth: hci6: link tx timeout [ 375.175168][ T5630] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.300088][T14394] tipc: Resetting bearer [ 375.423976][T14375] tipc: Resetting bearer [ 375.522740][T14375] tipc: Disabling bearer [ 375.595148][ T5760] tipc: Node number set to 669299519 [ 375.678723][T14417] erspan0: left promiscuous mode [ 375.792533][T14417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.824309][T14417] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.016512][T14417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.034538][T14417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.053590][T14417] veth1_vlan: left promiscuous mode [ 376.063110][T14417] veth0_vlan: left promiscuous mode [ 376.074177][T14417] veth0_vlan: entered promiscuous mode [ 376.084050][T14417] veth1_vlan: entered promiscuous mode [ 376.099649][T14417] veth1_macvtap: left promiscuous mode [ 376.107911][T14417] veth0_macvtap: left promiscuous mode [ 376.115926][T14417] veth0_macvtap: entered promiscuous mode [ 376.132357][T14417] veth1_macvtap: entered promiscuous mode [ 376.174537][T14417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.190425][T14417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.206518][T14417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.262006][T14417] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 376.276696][T14417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.289520][T14417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.322592][T14417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.332366][T14417] 8021q: adding VLAN 0 to HW filter on device eth0 [ 376.341755][T14417] 8021q: adding VLAN 0 to HW filter on device eth1 [ 376.355584][T14417] 8021q: adding VLAN 0 to HW filter on device eth2 [ 376.372071][T14417] 8021q: adding VLAN 0 to HW filter on device eth3 [ 376.386619][T14417] erspan0: entered promiscuous mode [ 376.411164][T14417] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.532921][T14435] bond2: left promiscuous mode [ 376.558772][T14435] bond4: left promiscuous mode [ 376.595602][ T6514] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.617755][ T6514] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.646604][ T6514] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.668485][ T6514] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.906159][T14454] IPVS: length: 15 != 199688 [ 376.969209][T14454] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 376.979351][ T48] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 377.074293][T14460] netlink: 'syz.5.2115': attribute type 11 has an invalid length. [ 377.158693][T14460] netlink: 'syz.5.2115': attribute type 11 has an invalid length. [ 377.166881][ T196] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.197071][ T196] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.216840][ T196] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.227381][ T5630] Bluetooth: hci6: command 0x0405 tx timeout [ 377.251988][ T196] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.381268][T14471] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 377.435216][T14472] __nla_validate_parse: 7 callbacks suppressed [ 377.435238][T14472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2120'. [ 377.458001][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 377.492507][T14472] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2120'. [ 378.827620][T14504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2128'. [ 379.221316][ T1314] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 380.111990][T14531] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2133'. [ 380.136118][T14531] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2133'. [ 380.483573][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2139'. [ 380.519173][T14551] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 380.529713][T14551] batman_adv: batadv0: Interface deactivated: dummy0 [ 380.544118][T14551] batman_adv: batadv0: Removing interface: dummy0 [ 380.565463][T14551] team0: Port device dummy0 added [ 380.583843][T14553] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 380.643978][T14553] team0: Port device dummy0 removed [ 380.691914][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'. [ 380.717337][T14557] veth1_macvtap: left promiscuous mode [ 381.385928][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 381.937289][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2147'. [ 382.194990][T14584] netlink: 'syz.0.2148': attribute type 1 has an invalid length. [ 382.374359][T14600] x_tables: duplicate entry at hook 1 [ 382.456562][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2153'. [ 382.489705][T14600] netlink: 'syz.5.2153': attribute type 1 has an invalid length. [ 382.629628][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 382.655583][T14604] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 382.675047][T14604] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 382.686366][T14604] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 383.528240][T14637] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 383.978370][T14636] smc: removing ib device syz0 [ 383.985414][T14637] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 384.040306][T14637] bond7 (unregistering): Released all slaves [ 384.049535][T14636] smbdirect: ib_dev[syz0] removed [ 384.660663][T14668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 384.684546][T14668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 384.709902][T14668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 384.822125][T14674] netlink: 'syz.5.2170': attribute type 10 has an invalid length. [ 384.876937][T14671] syzkaller0: entered promiscuous mode [ 384.883981][T14671] syzkaller0: entered allmulticast mode [ 385.812931][T14683] syzkaller0: entered promiscuous mode [ 385.826774][T14683] syzkaller0: entered allmulticast mode [ 387.330843][T14709] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2180'. [ 388.180178][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 389.244604][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2182'. [ 389.582496][T14716] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 389.949341][T14719] syzkaller0: entered promiscuous mode [ 389.979545][T14719] syzkaller0: entered allmulticast mode [ 390.018432][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 390.151378][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2187'. [ 390.163961][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2187'. [ 390.405820][T14741] batadv_slave_0: entered promiscuous mode [ 390.711878][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'. [ 390.728345][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 390.738093][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 390.774466][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'. [ 390.809025][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 390.996793][T14758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2190'. [ 391.218774][T14739] batadv_slave_0: left promiscuous mode [ 391.543880][T14779] syzkaller1: entered promiscuous mode [ 391.549671][T14779] syzkaller1: entered allmulticast mode [ 391.647606][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2200'. [ 391.935815][T14790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.974817][T14790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.701306][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 392.715207][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 392.725038][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 392.738781][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 392.750199][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 394.298971][T14891] hsr_slave_0: left promiscuous mode [ 394.308348][T14891] hsr_slave_1: left promiscuous mode [ 394.516781][T14901] __nla_validate_parse: 12 callbacks suppressed [ 394.516805][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2232'. [ 394.755178][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 394.769753][T14911] sctp: [Deprecated]: syz.2.2236 (pid 14911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.769753][T14911] Use struct sctp_sack_info instead [ 394.817470][ T50] Bluetooth: hci7: command tx timeout [ 394.908533][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2237'. [ 395.203045][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2240'. [ 395.226890][T14930] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2240'. [ 395.246394][T14928] sctp: [Deprecated]: syz.5.2242 (pid 14928) Use of int in maxseg socket option. [ 395.246394][T14928] Use struct sctp_assoc_value instead [ 395.461919][T14925] netlink: 'syz.0.2241': attribute type 13 has an invalid length. [ 395.532480][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'. [ 395.541438][T14925] netlink: 'syz.0.2241': attribute type 17 has an invalid length. [ 395.608890][T14925] erspan0: left promiscuous mode [ 395.614875][T14925] erspan0: left allmulticast mode [ 395.821959][T14925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.854730][T14925] veth0_to_bond: left promiscuous mode [ 395.862237][T14925] veth0_to_bond: left allmulticast mode [ 395.900399][T14925] veth1_to_hsr: left promiscuous mode [ 395.951526][T14925] geneve1: left promiscuous mode [ 395.964510][T14925] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 395.978551][T14925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.001283][T14925] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 396.011133][T14925] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 396.027904][T14925] bridge2: left promiscuous mode [ 396.044679][T14925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.053379][T14925] bond2: left promiscuous mode [ 396.063089][T14925] vxlan0: left promiscuous mode [ 396.068731][T14925] vxlan0: left allmulticast mode [ 396.082051][T14925] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 396.137843][T14954] tipc: Enabling not permitted [ 396.163220][T14954] tipc: Enabling of bearer rejected, failed to enable media [ 396.211436][T14179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.253263][T14179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.327997][T14179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.338657][T14966] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2246'. [ 396.369122][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2246'. [ 396.450626][T14179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.476913][T14819] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.480076][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 396.496809][T14819] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.509767][T14819] bridge_slave_0: entered allmulticast mode [ 396.526522][T14819] bridge_slave_0: entered promiscuous mode [ 396.541004][T14964] syzkaller1: entered promiscuous mode [ 396.549213][T14964] syzkaller1: entered allmulticast mode [ 396.580653][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2249'. [ 396.897428][ T50] Bluetooth: hci7: command tx timeout [ 397.098517][T14972] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 397.105923][T14972] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 397.118423][T14819] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.128957][T14819] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.136515][T14819] bridge_slave_1: entered allmulticast mode [ 397.151856][T14819] bridge_slave_1: entered promiscuous mode [ 397.334007][T14819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.351904][T14819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.396878][T14819] team0: Port device team_slave_0 added [ 397.405374][T14819] team0: Port device team_slave_1 added [ 397.431423][T14819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.439052][T14819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.466235][T14819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.481212][T14819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.489032][T14819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.516745][T14819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.561925][T14819] hsr_slave_0: entered promiscuous mode [ 397.568813][T14819] hsr_slave_1: entered promiscuous mode [ 397.575031][T14819] debugfs: 'hsr0' already exists in 'hsr' [ 397.580899][T14819] Cannot create hsr debugfs directory [ 397.738011][T14819] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.749124][T14819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.757632][T14819] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.768124][T14819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.780813][T14819] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 397.791999][T14819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.800610][T14819] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.810604][T14819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.889683][T14819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.917229][T14819] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.931777][T14183] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.939717][T14183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.956704][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.963994][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.320610][T14819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.530322][T14819] veth0_vlan: entered promiscuous mode [ 398.544687][T14819] veth1_vlan: entered promiscuous mode [ 398.578540][T14819] veth0_macvtap: entered promiscuous mode [ 398.589157][T14819] veth1_macvtap: entered promiscuous mode [ 398.611647][T14819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.629376][T14819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.643833][ T6514] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.655798][ T6514] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.667524][ T6514] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.676548][ T6514] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.790534][T14187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.807547][T14187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.835123][T14187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.844035][T14187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.978808][ T50] Bluetooth: hci7: command tx timeout [ 401.057334][ T50] Bluetooth: hci7: command tx timeout [ 408.657647][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 422.737474][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 433.854839][T15009] __nla_validate_parse: 1 callbacks suppressed [ 433.854868][T15009] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2250'. [ 433.878974][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 433.888516][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2250'. [ 433.933810][T15015] syzkaller0: entered promiscuous mode [ 433.940906][T14183] tipc: Subscription rejected, illegal request [ 433.949935][T15015] syzkaller0: entered allmulticast mode [ 434.061279][T15021] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 434.149619][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 434.400859][T15024] netlink: 'syz.6.2256': attribute type 4 has an invalid length. [ 434.565609][T15024] netlink: 'syz.6.2256': attribute type 4 has an invalid length. [ 434.766740][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2257'. [ 434.827118][T15046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.251223][T15066] netlink: 'syz.7.2261': attribute type 13 has an invalid length. [ 435.280477][T15066] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2261'. [ 435.484485][T15081] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 435.587381][T15081] 8021q: adding VLAN 0 to HW filter on device bond10 [ 435.956283][T15113] netlink: 'syz.5.2273': attribute type 11 has an invalid length. [ 435.984005][ T10] IPVS: starting estimator thread 0... [ 435.990174][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2274'. [ 436.107351][T15115] IPVS: using max 25 ests per chain, 60000 per kthread [ 436.153832][T15125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2275'. [ 436.201564][T15114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.209497][T15128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.252637][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'. [ 436.290877][T15123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.315367][T15131] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2277'. [ 436.774546][T15142] netlink: 'syz.7.2281': attribute type 1 has an invalid length. [ 437.738363][T15196] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 437.862271][T15198] bridge2: entered promiscuous mode [ 437.878435][T15198] bridge2: entered allmulticast mode [ 438.194407][T15222] xfrm0: entered allmulticast mode [ 438.203602][T15222] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 438.448048][T15185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.625056][T15237] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 438.785635][T15239] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 439.023181][T15246] netlink: 'syz.5.2316': attribute type 1 has an invalid length. [ 439.040782][T15247] netlink: 'syz.5.2316': attribute type 1 has an invalid length. [ 439.082800][T15249] x_tables: duplicate entry at hook 1 [ 439.185097][T15246] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.326231][T15251] bond8: (slave veth3): Enslaving as an active interface with a down link [ 439.386159][T15255] __nla_validate_parse: 2 callbacks suppressed [ 439.386180][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2306'. [ 439.544140][T15265] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2308'. [ 439.569849][T15249] netlink: 'syz.7.2306': attribute type 1 has an invalid length. [ 439.612272][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 439.681572][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2310'. [ 440.361761][T15294] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2318'. [ 440.606557][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2320'. [ 440.662401][ T1314] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 441.164590][T15318] syzkaller1: entered promiscuous mode [ 441.177378][T15318] syzkaller1: entered allmulticast mode [ 441.205684][T15321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2323'. [ 441.206369][T15318] netlink: 'syz.7.2326': attribute type 12 has an invalid length. [ 441.274604][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'. [ 441.294039][T15326] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2323'. [ 441.450954][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 441.508548][T15335] openvswitch: netlink: Missing valid actions attribute. [ 441.516373][T15335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.755213][T15340] veth1_macvtap: left promiscuous mode [ 441.765654][T15340] macsec0: entered promiscuous mode [ 442.435132][T15374] x_tables: duplicate entry at hook 3 [ 442.570691][T15378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.577422][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 442.738315][ T5630] Bluetooth: hci5: command 0x0419 tx timeout [ 444.178390][T15431] netlink: 'syz.2.2351': attribute type 4 has an invalid length. [ 444.245446][T15432] netlink: 'syz.2.2351': attribute type 4 has an invalid length. [ 444.819228][ T50] Bluetooth: hci5: command 0x0419 tx timeout [ 446.917558][ T50] Bluetooth: hci5: command 0x0419 tx timeout [ 447.413599][T15396] syzkaller0: entered promiscuous mode [ 447.419374][T15396] syzkaller0: entered allmulticast mode [ 447.629727][T15441] --map-set only usable from mangle table [ 448.606769][T15472] __nla_validate_parse: 2 callbacks suppressed [ 448.606802][T15472] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2363'. [ 450.193099][T15512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.668287][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2378'. [ 450.775198][T15534] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2380'. [ 450.784428][T15530] vlan3: entered allmulticast mode [ 450.784456][T15530] bridge2: entered allmulticast mode [ 450.802482][T15530] bridge2: port 1(erspan0) entered blocking state [ 450.835400][T15530] bridge2: port 1(erspan0) entered disabled state [ 450.867630][T15530] erspan0: entered allmulticast mode [ 450.888992][T15530] erspan0: entered promiscuous mode [ 450.908695][T15530] bridge2: port 1(erspan0) entered blocking state [ 450.915655][T15530] bridge2: port 1(erspan0) entered forwarding state [ 450.973127][T15538] bridge2: port 1(erspan0) entered disabled state [ 451.047429][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.072048][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.394353][T15553] block nbd2: not configured, cannot reconfigure [ 451.440031][T15553] 8021q: adding VLAN 0 to HW filter on device bond14 [ 451.466259][T15553] bond14: (slave ip6gretap0): Enslaving as an active interface with an up link [ 451.713076][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'. [ 451.738456][T15565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.757199][T15565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.443547][T15582] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 452.838860][ T31] INFO: task syz.1.1597:12287 blocked for more than 143 seconds. [ 452.858234][ T31] Not tainted syzkaller #0 [ 452.863399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.874267][ T31] task:syz.1.1597 state:D stack:27200 pid:12287 tgid:12286 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 452.888996][ T31] Call Trace: [ 452.892441][ T31] [ 452.895500][ T31] __schedule+0x17d9/0x56c0 [ 452.901881][ T31] ? __lock_acquire+0x683/0x2cf0 [ 452.907553][ T31] ? __lock_acquire+0x683/0x2cf0 [ 452.912827][ T31] ? __pfx___schedule+0x10/0x10 [ 452.917913][ T31] ? schedule+0x90/0x2b0 [ 452.922579][ T31] schedule+0x164/0x2b0 [ 452.927321][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.932939][ T31] __mutex_lock+0x7bf/0x1550 [ 452.938625][ T31] ? __mutex_lock+0x5d4/0x1550 [ 452.944233][ T31] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 452.951262][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.956742][ T31] ? net_generic+0x1e/0x240 [ 452.962986][ T31] ? net_generic+0x1e/0x240 [ 452.968890][ T31] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 452.975675][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 452.983470][ T31] ? rcu_is_watching+0x15/0xb0 [ 452.990145][ T31] ? trace_kmalloc+0x2a/0xf0 [ 452.994948][ T31] ? __kmalloc_noprof+0x396/0x720 [ 453.002491][ T31] ? __nla_parse+0x40/0x60 [ 453.008390][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 453.015193][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 453.022147][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 453.029429][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 453.035856][ T31] ? bpf_lsm_capable+0x9/0x20 [ 453.041372][ T31] ? security_capable+0x7e/0x2c0 [ 453.046661][ T31] genl_rcv_msg+0x614/0x7a0 [ 453.051921][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.058318][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 453.065208][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.073542][ T31] ? __asan_memcpy+0x40/0x70 [ 453.080092][ T31] ? __skb_clone+0x5c/0x6c0 [ 453.085016][ T31] netlink_rcv_skb+0x226/0x4a0 [ 453.093764][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.099218][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.104959][ T31] ? down_read+0x2be/0x330 [ 453.112266][ T31] genl_rcv+0x28/0x40 [ 453.116638][ T31] netlink_unicast+0x7bb/0x940 [ 453.123185][ T31] netlink_sendmsg+0x813/0xb40 [ 453.128612][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.134023][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.140065][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.145493][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 453.150938][ T31] ____sys_sendmsg+0x54e/0x850 [ 453.158482][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.164041][ T31] ? import_iovec+0x73/0xa0 [ 453.168900][ T31] ___sys_sendmsg+0x2a5/0x360 [ 453.173756][ T31] ? __lock_acquire+0x683/0x2cf0 [ 453.181152][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.186709][ T31] ? futex_wait+0x2a2/0x390 [ 453.193082][ T31] ? __fget_files+0x2a/0x420 [ 453.198995][ T31] ? __fget_files+0x3a2/0x420 [ 453.203920][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 453.209201][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.215008][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.222901][ T31] do_syscall_64+0x174/0x580 [ 453.228039][ T31] ? trace_irq_disable+0x3b/0x140 [ 453.233352][ T31] ? clear_bhb_loop+0x40/0x90 [ 453.238532][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.244496][ T31] RIP: 0033:0x7f25b339de59 [ 453.249345][ T31] RSP: 002b:00007f25b41f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.258684][ T31] RAX: ffffffffffffffda RBX: 00007f25b3625fa0 RCX: 00007f25b339de59 [ 453.267640][ T31] RDX: 0000000020040080 RSI: 0000200000000100 RDI: 0000000000000005 [ 453.276388][ T31] RBP: 00007f25b3433e6f R08: 0000000000000000 R09: 0000000000000000 [ 453.285752][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.294143][ T31] R13: 00007f25b3626038 R14: 00007f25b3625fa0 R15: 00007ffcb36fdfd8 [ 453.303121][ T31] [ 453.326137][ T31] [ 453.326137][ T31] Showing all locks held in the system: [ 453.334339][ T31] 1 lock held by khungtaskd/31: [ 453.343314][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 453.356290][ T31] 3 locks held by kworker/u8:3/48: [ 453.363365][ T31] #0: ffff88803222e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 453.375519][ T31] #1: ffffc90000b87c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 453.393562][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 453.403485][ T31] 2 locks held by getty/5378: [ 453.409072][ T31] #0: ffff888035c880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 453.419405][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 453.429882][ T31] 3 locks held by kworker/u8:12/6514: [ 453.435472][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 453.449419][ T31] #1: ffffc900035afc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 453.462980][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 453.473847][ T31] 2 locks held by syz.3.1000/9921: [ 453.479038][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 453.488228][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 453.498919][ T31] 2 locks held by syz.1.1597/12287: [ 453.504177][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 453.513410][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 453.524245][ T31] 2 locks held by kworker/u8:30/14180: [ 453.529957][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 453.540287][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 453.549294][ T31] 2 locks held by syz.4.2119/14471: [ 453.554603][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 453.563248][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 453.573751][ T31] 1 lock held by syz.5.2384/15559: [ 453.579175][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 453.589472][ T31] 1 lock held by syz.6.2386/15560: [ 453.594653][ T31] #0: ffff8880318b4c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 453.604424][ T31] 1 lock held by syz.6.2386/15562: [ 453.609908][ T31] #0: ffff8880318b4c60 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x6b0 [ 453.620621][ T31] 2 locks held by syz.0.2388/15568: [ 453.626236][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 453.635759][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 453.647355][ T31] 2 locks held by syz.2.2390/15582: [ 453.652736][ T31] #0: ffffffff9057afc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 453.663060][ T31] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 453.672508][ T31] [ 453.675168][ T31] ============================================= [ 453.675168][ T31] [ 453.683684][ T31] NMI backtrace for cpu 0 [ 453.683707][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 453.683728][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.683748][ T31] Call Trace: [ 453.683758][ T31] [ 453.683768][ T31] dump_stack_lvl+0xe8/0x150 [ 453.683827][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 453.683922][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 453.683957][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 453.683982][ T31] sys_info+0x135/0x170 [ 453.684002][ T31] watchdog+0xfd7/0x1030 [ 453.684039][ T31] ? watchdog+0x1c7/0x1030 [ 453.684068][ T31] kthread+0x388/0x470 [ 453.684093][ T31] ? __pfx_watchdog+0x10/0x10 [ 453.684112][ T31] ? __pfx_kthread+0x10/0x10 [ 453.684137][ T31] ret_from_fork+0x514/0xb70 [ 453.684183][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 453.684207][ T31] ? __switch_to+0xc89/0x1420 [ 453.684231][ T31] ? __pfx_kthread+0x10/0x10 [ 453.684256][ T31] ret_from_fork_asm+0x1a/0x30 [ 453.684292][ T31] [ 453.684300][ T31] Sending NMI from CPU 0 to CPUs 1: [ 453.801507][ C1] NMI backtrace for cpu 1 [ 453.801527][ C1] CPU: 1 UID: 0 PID: 14179 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT(full) [ 453.801546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.801556][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 453.801674][ C1] RIP: 0010:__lock_acquire+0x3ab/0x2cf0 [ 453.801699][ C1] Code: 0e 48 c7 c6 64 35 35 8e 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 57 ba d1 12 73 17 <48> 69 c0 c8 00 00 00 48 8d 88 10 e5 14 94 84 db 75 3f e9 13 02 00 [ 453.801713][ C1] RSP: 0018:ffffc9000d386738 EFLAGS: 00000003 [ 453.801727][ C1] RAX: 0000000000000007 RBX: 0000000000000003 RCX: 0000000000000007 [ 453.801737][ C1] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.801748][ C1] RBP: 0000000000000000 R08: ffffffff8176f27f R09: 0000000000000000 [ 453.801759][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000007 [ 453.801777][ C1] R13: ffff888028e2ab40 R14: ffff888028e29f00 R15: ffff888028e2aaa0 [ 453.801789][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 453.801802][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.801814][ C1] CR2: 00007fea73ded2f8 CR3: 000000007bcfe000 CR4: 00000000003526f0 [ 453.801829][ C1] Call Trace: [ 453.801836][ C1] [ 453.801847][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 453.801905][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 453.801925][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 453.801947][ C1] ? unwind_next_frame+0x8f/0x2550 [ 453.801970][ C1] ? lock_acquire+0x106/0x350 [ 453.801991][ C1] ? unwind_next_frame+0x8f/0x2550 [ 453.802005][ C1] lock_acquire+0x106/0x350 [ 453.802024][ C1] ? unwind_next_frame+0x8f/0x2550 [ 453.802042][ C1] ? unwind_next_frame+0x8f/0x2550 [ 453.802056][ C1] ? kasan_save_track+0x3e/0x80 [ 453.802075][ C1] ? unwind_next_frame+0x8f/0x2550 [ 453.802090][ C1] unwind_next_frame+0xac/0x2550 [ 453.802105][ C1] ? unwind_next_frame+0x8f/0x2550 [ 453.802122][ C1] ? stack_trace_save+0xa9/0x100 [ 453.802142][ C1] ? unwind_next_frame+0x8f/0x2550 [ 453.802159][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 453.802177][ C1] arch_stack_walk+0x11b/0x150 [ 453.802195][ C1] ? kasan_save_track+0x3e/0x80 [ 453.802215][ C1] stack_trace_save+0xa9/0x100 [ 453.802233][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 453.802253][ C1] ? __lock_acquire+0x683/0x2cf0 [ 453.802274][ C1] kasan_save_track+0x3e/0x80 [ 453.802293][ C1] ? kasan_save_track+0x3e/0x80 [ 453.802331][ C1] kasan_save_free_info+0x40/0x50 [ 453.802348][ C1] __kasan_slab_free+0x5c/0x80 [ 453.802367][ C1] kfree+0x1c5/0x640 [ 453.802383][ C1] ? ieee80211_inform_bss+0xbda/0x10d0 [ 453.802422][ C1] ieee80211_inform_bss+0xbda/0x10d0 [ 453.802443][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 453.802485][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 453.802506][ C1] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 453.802551][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 453.802575][ C1] cfg80211_inform_single_bss_data+0xd9c/0x1be0 [ 453.802599][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 453.802629][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 453.802648][ C1] ? cfg80211_inform_bss_data+0x245/0x3c40 [ 453.802669][ C1] cfg80211_inform_bss_data+0x258/0x3c40 [ 453.802700][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 453.802733][ C1] ? __lock_acquire+0x683/0x2cf0 [ 453.802760][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 453.802789][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 453.802807][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 453.802829][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 453.802847][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 453.802866][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 453.802882][ C1] ? sta_info_get+0x4f/0x300 [ 453.802904][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf16/0x2be0 [ 453.802949][ C1] ieee80211_ibss_rx_queued_mgmt+0x1c8b/0x2be0 [ 453.802978][ C1] ? ret_from_fork+0x514/0xb70 [ 453.803001][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf16/0x2be0 [ 453.803025][ C1] ? __lock_acquire+0x683/0x2cf0 [ 453.803046][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 453.803071][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 453.803089][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 453.803107][ C1] ? __lock_acquire+0x683/0x2cf0 [ 453.803130][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 453.803152][ C1] ? kcov_remote_start+0x181/0x790 [ 453.803175][ C1] ieee80211_iface_work+0x78a/0x1010 [ 453.803197][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 453.803219][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 453.803237][ C1] process_scheduled_works+0xa8e/0x14e0 [ 453.803266][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 453.803299][ C1] ? assign_work+0x3cf/0x5d0 [ 453.803318][ C1] worker_thread+0xa47/0xfb0 [ 453.803346][ C1] kthread+0x388/0x470 [ 453.803368][ C1] ? __pfx_worker_thread+0x10/0x10 [ 453.803386][ C1] ? __pfx_kthread+0x10/0x10 [ 453.803407][ C1] ret_from_fork+0x514/0xb70 [ 453.803430][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 453.803451][ C1] ? __switch_to+0xc89/0x1420 [ 453.803471][ C1] ? __pfx_kthread+0x10/0x10 [ 453.803492][ C1] ret_from_fork_asm+0x1a/0x30 [ 453.803515][ C1] [ 454.343912][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 454.350819][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 454.360522][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.370600][ T31] Call Trace: [ 454.373881][ T31] [ 454.376900][ T31] vpanic+0x56c/0xa60 [ 454.381086][ T31] ? __pfx___schedule+0x10/0x10 [ 454.385966][ T31] ? __pfx_vpanic+0x10/0x10 [ 454.390509][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 454.396689][ T31] panic+0xc5/0xd0 [ 454.400434][ T31] ? __pfx_panic+0x10/0x10 [ 454.404958][ T31] ? preempt_schedule_common+0x82/0xd0 [ 454.410520][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 454.415905][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 454.422075][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 454.428245][ T31] watchdog+0x1030/0x1030 [ 454.432590][ T31] ? watchdog+0x1c7/0x1030 [ 454.437134][ T31] kthread+0x388/0x470 [ 454.441215][ T31] ? __pfx_watchdog+0x10/0x10 [ 454.446156][ T31] ? __pfx_kthread+0x10/0x10 [ 454.450956][ T31] ret_from_fork+0x514/0xb70 [ 454.455874][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 454.461276][ T31] ? __switch_to+0xc89/0x1420 [ 454.465978][ T31] ? __pfx_kthread+0x10/0x10 [ 454.470587][ T31] ret_from_fork_asm+0x1a/0x30 [ 454.475892][ T31] [ 454.479101][ T31] Kernel Offset: disabled [ 454.483435][ T31] Rebooting in 86400 seconds..