last executing test programs: 3m54.659744497s ago: executing program 2 (id=1835): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x36, &(0x7f0000000440)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x8, 0x0, &(0x7f0000000200)="0000000000000500", &(0x7f0000000700), 0x6105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x38}, 0x42090) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18f420324dcee60c4b5054183e853221e5a7500d22202d7291ce3e93bd0fdc0908edc4f2f3be16aa83f5086f46da54a1d8a6d59ef5f64be77f46578180f145ea48f13b2d935a95e2c9766cbf0c93a0408f77c14c58592a61669e59df1fa6b5d3dfedd58d230958e34d3e081e43bcfbb93e869f7bc04c3fcc9cfde55a0097ea1b3bd4a6fb3731689653", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 3m53.67092089s ago: executing program 2 (id=1845): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xec, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) 3m53.553209096s ago: executing program 2 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a047963817ba0af112187b35b1bf32219", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpeername$packet(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30000000002c000000080a01030000000000000000020000000c00064000000000000000040900010073797a3000000040140018001100010000000000000000000000000a"], 0xa0}}, 0x0) 3m53.440427435s ago: executing program 2 (id=1849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x9, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000002, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000e70000000000000000070500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m53.30156063s ago: executing program 2 (id=1850): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140008"], 0x34}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 3m53.240226854s ago: executing program 2 (id=1853): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x7a65, 0x4) unshare(0x20400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newlink={0x24, 0x10, 0x403, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x80}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) socket$inet(0xa, 0x801, 0x84) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000400)={0xc, 0x3, 0x80000001, 0x6f, 0x7, 0x201, 0xfffffffffffffff9}, 0x0, 0x0, &(0x7f0000000100)={r3, r4/1000+10000}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 3m38.077765651s ago: executing program 32 (id=1853): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x7a65, 0x4) unshare(0x20400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newlink={0x24, 0x10, 0x403, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x80}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) socket$inet(0xa, 0x801, 0x84) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000400)={0xc, 0x3, 0x80000001, 0x6f, 0x7, 0x201, 0xfffffffffffffff9}, 0x0, 0x0, &(0x7f0000000100)={r3, r4/1000+10000}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 2m40.774923112s ago: executing program 1 (id=2659): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$int_out(r0, 0x0, &(0x7f0000000080)) 2m40.659841876s ago: executing program 1 (id=2661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000090702000000000000800705", @ANYRES32=r3, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05", 0x18}, {&(0x7f0000000980)="bbeb0a3e44c97ea55c69cd181b4a5910956849ee8d43f7677554aa7f685176c1943d90ec3285cc611ae80abecb12a820165b4188c8506fbb8150ac8bad3218f01ec9a3c844e40b1fc86ffe8cc702ca5e7777956a0b8f45233673266fe27b199410c0f6ea3a57102ee83c04277d735891a1ea3175c8fa517b4e6f421d8b8b12c030823ec5a4f318438d6580e48906167831a1e9893dd052fedf5172e45a9aef6e99fd6cc43b0344224775e8aad56dad1cb7ce597f3b486422583e3026e9363488502e0bde17bcf0d7668075d88e9d87a6846331eb1f56bb7ee3b570", 0xdb}], 0x2}}, {{&(0x7f0000000ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @broadcast}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b40)="32ac2eb59b6f9516fcabf9beb9e2e334c7f4dd3e5e88fcf2689abb59d84bad3c224dd1d84105406de5c0a70d040ab8d7c06026c89384718b5aa0e7f44546bf9d0adfb437a86d11142e2d76f7313d135325102e023351f293424a235e550ba05fa20dfc5416f902", 0x67}, {&(0x7f0000001100)="24b8ecd9077aeef939592492f6800a0e9e8ce88768b13fb097a2c240dedc766deb6a93eaa1a2517d7a5e201fcaaf7ff4bee5a1b6a8d1042ec475dda85ed5a1ebee407f0e2d22a5802311990a9192527fe7cfcd3f5722f7d19635fbc142c864662bab72d9941eb2317e95827a97dfe7eac373b8aa247a407e23ffac1c0d51091789e778af0a2586486b8a080ada8909d9f585447382b69aef0bc9be181ae37cea7d0052ba00b8257d0b71999170c8c345ab0fb00e596b9dc3d3668042f0d827e22f70a6899b9b80b1336178651e", 0xcd}, {&(0x7f0000000d80)="e2030cfdf612bd16d3a84837fdeb554e3470443a7593db6d4c6ba8fcbec09cace267ac3d7c6e0b315a8a6d41129f79be84b42fc50b4efcd17ec1a05bb2219e6d68498a05067c3d3cba1ba4ea88ef89095388e9895681472e43bb839e4d9500ef01f4", 0x62}, {&(0x7f0000000e80)="f881e75ea2179839687cd19a8d7b27ddc7d4bd4bb42c1827a2ee1d549595986d349b4d48564e04231445d0db28842ba64f2fcdfd382a7516bb6bbe9ba0437025ce191b6c95b4f1d69a5b84c54cdcd2882b023e3b33d99f3dd3c9929064042412d02b310c5fa590c5cb705845559b510ff6209b0a7b6e3444f9e2954d3a579ea17cb84d8edfb3d51870049d444c48cee0a367668d7e7ea6a1ba87e90b6420366832f1b6732ec2c7d67e1300", 0xab}, {&(0x7f0000000f40)="6cc4afbcaddb386ff31eedf45b0731dbe5822e", 0x13}, {&(0x7f0000000f80)="b72702e9b95f5620e7073e5bd3bd5fb0e40d8157d139569eb753d0", 0x1b}, {&(0x7f0000000fc0)="171a631cab7922c25d3833275afe0eb1cb6a8d1119923db2e392fb81", 0x1c}], 0x7}}], 0x2, 0x20000000) r4 = socket(0x2b, 0x1, 0x1) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b, 0x0, 0xfffffffc}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x87, 0x6b, &(0x7f0000000640)="0ae460272ac9d8592ea687238ec30feca17b9661590f74cd6fff4b1e495f15480496973e7c7cc3696e6c8796c344e254e811eaa155210fe403d93d28928ae56f6e543db8adc0ba79aaf269374283cd40dff2c2b62fe4d19f49b0edb75a3b43c770c07fd4d8fad633d32bd878aa322ffcfb340d9614d7170780f5b5ccad46e1f6c423a0e21a1aca", &(0x7f0000000700)=""/107, 0x3, 0x0, 0x4e, 0xdc, &(0x7f0000000780)="e427a4bf9528c10394f4a6ace3093c66d04c306b39fb2f09d957c4f0e0f0192252544ab829eaf45eef0b3391f2c83d3b6ff816b32aee5831b9598a50864a9f928a03973e068e3fcd0b3b87f48b61", &(0x7f0000000800)="67e548c3bf71f5a785b165210d1f10389089aeae372a5bef567ed85dd7ae85dc818ef72f72a9ee45c66a25fed56528982da8bc28f9dfb54fe45feb3de71ff5b790ca15e124f19dfb50cc15163fbc4adbe15a25bc67b1318021d11fcbeeb692d4f41f20044fec0eef0c29d388b51289132d46568e0e5d9f59e59481b549b5df67a14106800043d26d42b3abe77da82e66779c8023f6135df343d296ddb8d79e9b7a30eefb4e99a6310864892a8f178682568367cecaf5419e2a2a4e76ee66bd85187f51b9f47f3931dcf94489bd4a5e43e4f50033ac49ff16f2557787", 0x1, 0x0, 0x40}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x4000840) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) close(0x4) 2m40.335025996s ago: executing program 1 (id=2663): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)={0x28, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x16, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000082000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xe0d9, r9}, &(0x7f0000000100)=0x10) 2m40.069302402s ago: executing program 1 (id=2665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000) 2m39.975268402s ago: executing program 1 (id=2667): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r0], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x931766f6319eed44) unshare(0x6a040000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r8) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="e20ff2d55707bc3613d3c9aa32baa2285943368c57ba6eb9abfaabb59b30816b5824c8d309e4e596c300fee3c296d8b3aa45c47a2b41c8c4d3edda2bdeeab0446bf84cddb2ce1624c7aa0ed76c31ba037c95068d8ccd58c5682bebe7fb12d67633ab3cea94", @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf25280000000a0001007770616e3100000005002b000300000005002e007e000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4094) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) recvmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/244, 0xf4}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m38.986980379s ago: executing program 1 (id=2682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x20400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x27, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000001cc0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x2a16, 0xce8248cce702d16c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000002) unshare(0xc000480) unshare(0x8040480) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r6, 0x952de000) 2m23.904545623s ago: executing program 33 (id=2682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x20400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x27, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000001cc0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x2a16, 0xce8248cce702d16c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000002) unshare(0xc000480) unshare(0x8040480) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r6, 0x952de000) 24.873171387s ago: executing program 4 (id=3564): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, 0x10}, 0xc) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x40000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000080)="ad62d54048244fd5ae56e20f68294e8294a1708f67776ea22af8f0610f61fa6c27cda06e13c4f327d61de79564278f58c1f587d19d6e888c5f82d90d5c7cefa7f7750183d6d8c910bbfeb74ff6112e4ad6bab4561f6cd8d0c88156053439a46d8bfa038f5b5fa958ec3e6598efc2647896340ebb681968debb424c6d308103", &(0x7f0000000180)=@udp=r2, 0xfdd306a33c7b0f13}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000200)={0x40000007}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000200)={0x40000007}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, r4, 0x12, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48004}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14c, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14c, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r3}, 0x8) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000b40)={0x0, 0x8c, "f6a35927f830edc150f62cf8b431211fd310a0c4204fb2db510d0132c908dea16a38fa532440a088316e440d148929120dc823bc5239ddf26ddf6f9a597df418953c031aa5324f4df984ed07e34a464081cd8cef5994639e50de5c94694dcef55a052512686b2c44c9a65424d94355809b219a69e6f633e88fb822c33574c175a7ba7c21a76534b7b09f58dc"}, &(0x7f0000000c00)=0x94) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000c40)={0x0, 0xcf, "efe0ce5bc3040b216033c79a7797d5880147edf11d7b935b82d99bb61f3973bdcd175d0f017afe52ab154dc0af8a20d645200881a90a99de6442944dbbc89cac6b697bda647755ce5a9eccc3a35e8ecc15f76e406b82a9763756cc52646ae347659709ca886a6753cdbb5be8d3d25c606c9b417e567a99e3d3301b605532aaf953b32630ce790ae60d9ec9aecf17289e32773dc019dbd3abe56b89c811de09760b225aa14933ea1f120cb3050e39d9d9e4c3613f5303167dcca1a3ee4ee628aa6f17fe0b4e701778f0f488fb7dd6d3"}, &(0x7f0000000d40)=0xd7) sendmmsg$inet_sctp(r2, &(0x7f0000000e40)=[{&(0x7f00000006c0)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000700)="9ecfcb83da6ceefb595c6b2123bcaacbb24af0a828b08727084e39cdf58b673fdb3e57175efa1bd0a08ef1a65beeeaa78d5199d46eb488190d29e4bc4eafbb0605f065b12d118e16f47ec06700494061ee3ca6bb3b6a2618582ac8c7edeb5df09017d3258d4eacdfaa576a17c7c55fdf8736673296f1304522cb3a37bd2e4e3ff06bb3aa633cb98b9429d5f7bb8e1fd7eef2bd7170bd5de2173c9fd7e53448b66eee4fda5d010ac9b9caf576dc139e65ef3fd881986203", 0xb7}, {&(0x7f00000007c0)="efeb4ae6f40af37a1f05b909f8511e5ee107c50826babc47210113d4afa57cd07c2ae423d4022c33dab36aaa9d003078be96504b56a6bdea45056e85279b019c7067470f4060bfb33c87f99739e5b58dea0c0c0f36c3b2ec2c1ab3ba6c04b82eeda1498fd94493f25567bf653c0a3fa698057d94e98423862d3f40b71144a5266c9c82fb85bf921b332f832d16b555b93cef0da43e28d71ca404ffba", 0x9c}, {&(0x7f0000000880)="eecb5f2a369762c23ea461bb92d506c999c0d1551f6a1f58017e573fda18610740f65a4a1f5ca04a10ce610659dfed510f50679cbeff0500350eca34ead4d8a3a33ee0d2848d9a193097f38acdad6e42006e48e76894df86586aada3c41cadd791fb6325f18e0c92501632bfbcfcc11da7d57a3df92e65013753dceeafae43b01b827ff5ba208913efbd1619073e", 0x8e}], 0x3, &(0x7f0000000980)=[@authinfo={0x18, 0x84, 0x6, {0xa}}, @init={0x18, 0x84, 0x0, {0x15, 0x8, 0x400, 0x5}}, @init={0x18, 0x84, 0x0, {0x7, 0x0, 0x2, 0xffff}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x60, 0x4004}, {&(0x7f0000000a00)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a40)="50c1207d6d6164e6cb7816265bbfb1c98a3f4f7091ca81f99d41ab84becb2ba966a27be15a00087af34e5bdcf7a29f7e71edb5b182f910ee1bd40249adb3e6cd1243bade550266b55cbc5e465eaf18dd515aaab8eff8e7524835c7eaf2e3e53d158e73ec1735cc9f1757c404f665e63bdcc200c957640b3e2a12e57cd7bfebd35eb1e60698", 0x85}], 0x1, &(0x7f0000000d80)=[@init={0x18, 0x84, 0x0, {0x3, 0x7, 0xd, 0x9}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xb0, 0x8204, 0x0, 0x3, 0x10, 0x8, 0x400, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x1ff, 0x6, 0x9, 0xed, 0x7, 0x2, 0x3, r7}}], 0xc0, 0x4000}], 0x2, 0x40050) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000fc0)={r3, &(0x7f0000000ec0)='netdevsim', 0x50000, &(0x7f0000000f00)={@align=0x7, {0xc, 0x1ff, 0xa, 0xfff}}, 0xe2a8, &(0x7f0000000f40), &(0x7f0000000f80)=0xfffffffb}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000fc0)={r3, &(0x7f0000000ec0)='netdevsim', 0x50000, &(0x7f0000000f00)={@align=0x7, {0xc, 0x1ff, 0xa, 0xfff}}, 0xe2a8, &(0x7f0000000f40), &(0x7f0000000f80)=0xfffffffb}) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001080)=r1, 0x4) connect$pppoe(r8, &(0x7f00000010c0)={0x18, 0x0, {0x3, @multicast, 'tunl0\x00'}}, 0x1e) sendto$inet6(r8, &(0x7f0000001100)="7c0e703d09f030c3b85829a3c3e7539d05f47b347c3c069fa52d7435e1314e295e104c648bad79550e1993187ce2d6c358413aacfb9bf91352b8c619c5da24218ed3220b472574477c83381997fabae9587f1a5ab1505199e766b5cdabfe37589bb41d05753c1173b99d5c429749add5c02b53b0cf2307221090c1316efa06285d526c4ed2038cd34d57549326d6153b8f964be4544465a54d97e7dd950b87092a5c43846090b9ef2b", 0xa9, 0x26989a41eacbcdbe, 0x0, 0x0) (async) sendto$inet6(r8, &(0x7f0000001100)="7c0e703d09f030c3b85829a3c3e7539d05f47b347c3c069fa52d7435e1314e295e104c648bad79550e1993187ce2d6c358413aacfb9bf91352b8c619c5da24218ed3220b472574477c83381997fabae9587f1a5ab1505199e766b5cdabfe37589bb41d05753c1173b99d5c429749add5c02b53b0cf2307221090c1316efa06285d526c4ed2038cd34d57549326d6153b8f964be4544465a54d97e7dd950b87092a5c43846090b9ef2b", 0xa9, 0x26989a41eacbcdbe, 0x0, 0x0) recvmsg(r0, &(0x7f0000003700)={&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000003600)=[{&(0x7f0000001240)=""/153, 0x99}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/220, 0xdc}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/7, 0x7}, {&(0x7f0000003440)=""/246, 0xf6}, {&(0x7f0000003540)=""/10, 0xa}, {&(0x7f0000003580)=""/105, 0x69}], 0x8, &(0x7f0000003680)=""/114, 0x72}, 0x10002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003900)=@bpf_tracing={0x1a, 0x2, &(0x7f0000003740)=@raw=[@jmp={0x5, 0x0, 0x0, 0x2, 0xb, 0x20, 0x18}, @exit], &(0x7f0000003780)='syzkaller\x00', 0x8, 0xab, &(0x7f00000037c0)=""/171, 0x41000, 0x74, '\x00', 0x0, 0x17, r8, 0x8, &(0x7f0000003880)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe875, r9, 0x0, &(0x7f00000038c0)=[r1, r1, r8], 0x0, 0x10, 0xd60}, 0x94) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003900)=@bpf_tracing={0x1a, 0x2, &(0x7f0000003740)=@raw=[@jmp={0x5, 0x0, 0x0, 0x2, 0xb, 0x20, 0x18}, @exit], &(0x7f0000003780)='syzkaller\x00', 0x8, 0xab, &(0x7f00000037c0)=""/171, 0x41000, 0x74, '\x00', 0x0, 0x17, r8, 0x8, &(0x7f0000003880)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe875, r9, 0x0, &(0x7f00000038c0)=[r1, r1, r8], 0x0, 0x10, 0xd60}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000039c0)={r10, r8}, 0xc) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000003a00)={r6, 0xb170}, &(0x7f0000003a40)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000003a80)={r12, 0x5}, &(0x7f0000003ac0)=0x8) setsockopt$llc_int(r10, 0x10c, 0x2, &(0x7f0000003b00)=0xffff, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000003b40)=0x2, 0x4) bind$netlink(r8, &(0x7f0000003b80)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) socket$inet6(0xa, 0x2, 0x338) (async) socket$inet6(0xa, 0x2, 0x338) 23.794090154s ago: executing program 4 (id=3574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@setlink={0x28, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x44080, 0x140}, [@IFLA_LINKMODE={0x5, 0x11, 0x5d}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3d0, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1b8, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0xd06, 0x2, 0x2, 0x0, 'syz0\x00', 0x4}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@getpolicy={0x184, 0x15, 0x200, 0x70bd2d, 0x25dfdbfe, {{@in=@private=0xa010105, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x80, 0x0, 0x4e24, 0x7, 0x2, 0x80, 0x80, 0x3c, r6, r1}}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e24, @in=@multicast1}}, @policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@multicast2, @in=@remote, 0x2, 0x40, 0xf2}}, @algo_auth={0x9b, 0x1, {{'nhpoly1305-generic\x00'}, 0x298, "4e748fa0a42e8d6f8d23d6992b71a76b5421f7b044497c0b432ce3cc4abc2690682e10f0ad9e98795782b3d3ee8229e57b6e37282ff918ad6e296a8b60f54163255c58275d6a06bc33ba185aa018450e05f350"}}, @migrate={0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0xf9a154176e4af2ec, 0x1, 0x4}}, @lastused={0xc, 0xf, 0x8e}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 23.564449289s ago: executing program 4 (id=3577): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) getpeername(r1, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="17000000a6c4b0b97af4c3813cdd299c4b873fed25cc05a271def95d9d5c534e8c1a729210576de05ec2986ade194b270f7171af386286fcc285a49ff1fc372cd95b4af9b05558f673de8f2c4cae7a1d09683a5661b01f5defe765fa60ca1a96ac2c790e7d127f14509d61937ddf2d3c9cf079a6d4728ea7f9a94151ebb2901300"/144, @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) (async) r4 = socket$phonet(0x23, 0x2, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) (async) listen(r4, 0x2) 23.173307728s ago: executing program 4 (id=3581): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x200000000000001a, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="ef2f90e66e932a0996b5581c4b57b1c84a6d6f11f3c72ff1c84f1c481361c39a062cf7156fd9dd64033546b671f45637a96e0fb550a4f1992a1bf8488c19c076f11918fd1dd87fc4552d1cad93ebec73c218e3a3286debf90fc7c88de511fc70010d18dc5835c8463c0462e8", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c010000100013072abd7000c1dbdf246401010200000000000000000000000020010000000000000000000000000001000000004e2101020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x800000, @mcast1, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x18}, 0x20008000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r10, &(0x7f0000000900), &(0x7f0000000a00)=""/182}, 0x20) sendto$packet(r3, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x5, 0x1b, 0x0, &(0x7f00000000c0)="469d23c05663272c9be0460ec2d342e2b7000091000000000bcf48", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000007000000000000000100000d0000000000000000030000dd85047d582647e70800000000010000000000000c0400000000712e5f306f00"], 0x0, 0x4b, 0x0, 0x1, 0x79a}, 0x28) 22.852791272s ago: executing program 4 (id=3583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x700, 0x1, 0x9, 0x8, {{0xd, 0x4, 0x0, 0xc, 0x34, 0x64, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp={0x44, 0x10, 0xc0, 0x0, 0x5, [0x4, 0x3, 0xc77]}, @ssrr={0x89, 0xf, 0xb4, [@loopback, @loopback, @rand_addr=0x2]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2, @loopback}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x13c, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24008051}, 0x40010) socket(0x18, 0x2, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x12fc, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x20, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x12c8, 0x2, 0x0, 0x1, [@generic="f93c863893513d2b8988d18c9b2b51d71c945106b7fd35360e296f7daf4c4420f27ae254d24a624597270990a0fc6bd115bc5e18229db9e5e408f811f0ba6b0c977c837f94e4efa0376c33de5fd318d420a93a43c133452e3631be03e0e589337db4a49b0a9fb015aa8139711bf54c733114e0d2b51e01e68174d301b18251579a28c5bf70da797f8be47534b26d947454169855a7c9bac448b07f9e55c15987cb603e5facf0c673c477f5adc967118a4f87774af9d03dcb9b11df5fa3c2c7a08c7d69670c2f1094e9f9e6774091134d2315f32cd50c8bd348ef557c02c4996e68ff4de61079f54bf66a764bba11b5b549125d02279d01895030b6903e951855f628f8f21668ffbad7b4182c184657818f417e7d196bff59d8b069865fc98c682d394a08d31282589a8fa01d5c296622deccb8e94223b285c255fff3af31b57f4a67540df68f56ba923bcada2e1e5f5e8cb74fddbe8edb1110c525ceaf7e52fceb8df7d2e74da728feb246780f999346bc0f38946ddfc67dcf51c27192c8c1ebcbbae43a5db32d2c2aeb8c6edd4555a40d3b4e5deb6282214e4b14adf2d59f9107be6148256558bd9c1d03fa0d8a128310aaf8cf674874da7ae4d542aacb3a80055a55627c08886a71ed154c01cb856d4f2ed4e3b177eb038a05d8c4fe82fb2536a93b1b586e72c9d5414838a968d6795350b0215ae8fc9ed87e0cd870ee2da3d54edbd04ef063cd2c47f9d180220e8e5b095c224934d6dbba6db6f7ae80ac527e301c3cc4f24a5418b0480c19f8cb383b4cf2bbecf67fa3c6929a1dc2907f09a22b7fc42be4f81d5b31914e5ea4be89589feaf603a9761381eb9e8bf62388599b12f0e32ffcba659ae251c0f901556e913c94aed01c84b5516d30f5c453ba85c19e640bdecf255da5d8e1636efe99d6a82ad307d81799123523fc7d284851ed2190bae341db03b98d812a74810ba9c03a4201237b6b948eef5b21e3df96bd8f37b446026f185e1f5cb356f137f73f6b94e52d0b817eee09df44eec7cf5322209614ee44be2bf777e8003a8a3292f64f3bcefee2e41233bb7a55e09ef903efa2d991af5c11205bc015ce2cd53f81787d2b4d99d4a08bbbffdf0ca79d9348c39b0cc570685259c8bfd4a0e5f688c1ced068715cf2484fc692436d2d4bd0b367333788330235e242760e3cde552f7746c81cff2ea6612d6e484d12c2cfe376fab5b25091005e03644dc89a18b7d24ea5189a19900a4e2f5593160368b089856982a8dc4567c152751e45f28a8d1f2b7699517988a62e9155e8b2a4cc9094237ee43efc37c9962ed12c4dfffd2a9b87a7dea5706e79721cec147eb250daf2d308944d3115e9702293934135d3307d72dc799f7049b3e235962e701f25e8b9f9e20b2579208abfaeab19f46bb2cb0c24f7305be571d9a7404c45c2fdae2d60d124fe0e9d1624483dd0d0d87d4fed280c86ff4cd16117a586fbd5a4eb10d6a179027ed781af15dd28f52dedf559a96819b512cae1a822e03d5c52c5ac64e37983e60479a48db561bb199bd48ba6d7b3a72cba84e7a98dea31801af41a154e435c1b1c17f8d07c97c5fb9a8f47e343f1f20556be0e73da3435de1eba7f91c6387fa12448b75554fd99836d435e1082a855bea5cf9a98315e41f63cb1df0f4c1d9e3518c5d03db48b26aeb01943f22a3553add68328f33b730d425318ec8bf34e24e042f096549e752c8287f6d07349db484299d0e2e0e506f4d8e500722b988438f79d18037b288307923b06528293e753cf8a35f881f8a258c1e03cf0e8da145e1218c116c8b3b4abfadac7ed71303809925f4010c0928fddccbf2bf9612f84e69bbdb493d4d03003a55889fadc48cde0e59664048c3193cb32d472dcbc28fc8b394c26b826674ed8b44553ff3797766fd322d3788772c8947693f1b42aa0daa349064c3444bbae46f295e920ef54d0bcd94769b0cd710853c5daa737e4778bb48d121b2f77c534fcf5b2bfa0751a87064f0995a5a99da3c32cc6db71aae0351088f52e029ccd13a0b7047990343ec464675217f3769ee1fa6ffcc3db13d6a030085f271529513ed75a0aed30a35e41f43d7b5c80a0a2cdcbbf988b5f80fccf45caea751549a2377b121dd88bff4ac4fad14916a0a9a9b9d9ef44e0d2e217b665380d876dc2172673850edf3a1b8462bc3cb889308f3bcfa1bf798c17c76404409ee09156f931b523700ef4ff2adea2605f3a2efd46b605c6311677aee39641b0eb0a10848f4be03ee5264025a8c84df3bc95319891cea89b1d7742022c97689a6ee1c0e99dcfb098654f1041a252ac60a296d8ad4ce942aa1c9680f9f791ced23ab1c819c6aa9afe80b3cf00e04d9040c657f3c4515802914fba5e2383ee9d6e0bc9ae235b0b58bc5f015281485e8862ca0dddd78f87ff93bbac1e8ede789be0807f4ae8700e64dc95ff44a61e04c9a686c76d9af05e861cf615897ff6dbdde3188632b1d59d3c503903f79be129518dea99850d47a7e42db8c4fde7d81de9f9129619545435d0688a0988d3fd186a633bbc367aa9352569c69dfa6b2e69a843ff2d4eddce05675228b549ff60a2ac47d96fc2713bff258d0971801f98ae169afe773ea925cabd98013868f942caea103b2103917c31a4a11f221728ffbd275f0c7dabfa4b4679a275e564b43265a1fbf9aff1817c2cac7c57904971702638481e5629ad7e7cede802a5915d41c571b3699fb6544b5a76ccd3f28f8c28dcd8ca8ced0f192c9f30b7d6a3ba96bbf95e7191de42359623a0cf4f50b67d212201d168164122933dcef129a4cd0ee2af347427ea301859796129b73c36291eaab956b8a2f6e55f245b7cceb5b6ff997ee22dedae2cdc4f786168171475a17c1639da83189b22db5a489c32315432269d82514b2a8990f336303f654de59caa9e4873c263d15fcce70d8074b4cd9dc96f5ee6be5baeef809cd127eab315c9fc30e876324f850b14737b38abe1fd7f6a5ca9e8e31518e752dea3addde10b4b10f92f221ec28ec6a9a3a529affe5c33ac6279631795ad3b351be7381c02fc2c1837a540db8a05eab231501d8a4b907350138798834c53706384421ffe795474f382755dbe792445a02b995bf21318385475cf945fbe86a0e7d43a4d2f19a6e62e2394cd5252c8df0546bb051e609158cfcd83a36741c48d0bd6e7ea88aa9dc49fb0816f26f004f7c2f377e2dc873c1676aeea80adab67483d62b6aa362dd939ee37ededf69bd187e7a735c06a6a95beff047804e761f02ba9dbee034850bf33aac17e03d09612fa9e5713c53ea9f404a07344cf3b30fdc2bd53040396fe34c479a653766cf10c838dbced0a2be14ff6f34ebdd210b75dccb3f8a133fca9c9d69d5355bb7efd696c1d22472db666b408637b5c6bde543d37fbce0d6cc7aa698a9d55a6799166737c409c6d10ed65025dcfc47e7faf9dfc40ead8bf5a8e0b6b282267ad860fc1f5793a211c44576673973fdd93b17ec10aa07744ccb87e0a3c17f57cd5dc120ab8d2e76077b03294cdd84cd01e8e7c44d4440cb2c2139668d2027f0815a1fa90ef420af8bee9901a07df891164eb0fdc444f5139bf4bd56c1364f24e78776dbcc593e76d1a8c4ef0c494334da97ecb38d068aa8777851020e7b6e100d5e11a2983846878cd18a7155ea2e2df36a6ed01af6b730081ca0174d212ae5ac9fd7231155de618cfd3b94cfece425cd3402498cd5cfcee25041ea182cb0d2d2940eaacd93827fb94d36551dbf0741fa4a1e6088d5ca34d62ac7b9c025ea6acef1fceb0b30a1f094e8121944832fafb3c64d43f55f31811c458c4032fff8db73bb0cf34a911b365106a3c8b8bd584cb4f919b28a94858decff92662b283906f00b1730d87b3441d6d7cb7da3de97a6fdfed71c045edeece9893b22fc0e510f110f919822f86755ccf4d5e26db221607a098ee4e0052c64d18bc63e58ffb62ff6e22643322e57aea95b25feda468dac2e3d735f45dad6722bb49a5f4d7f2b8c71afbd19318d6ae668d96e6a278b78464a43d23dfb78f5a4f6255c245dafe53644f5c97f1f8725eebe25e513e8a48c099da77a8d97a53bf9cc306019285ec063049cadbf620b50332ae8f6fb35f82cf863111a1dbd7831315fedd23248586b2f2227538f8022cb4b613a0556fa0a3d1ea7b2a50cb72715d230de4805559c2d94d71a956e1c2e3b0051cf03913f9224d4a894c672c005c0955990c1405612829da87cd8e0494c66b9f0c855fda6a15ffeddadf05b1458381518935272164da3f20e87053e53c868a5cdf86f9b48c90aa8e71bf9715c3195e34b75d58ca4ffd89c38db059e4c73b74e2916f23d67cced8f5b0ede46fd4992947a313bc9b059ae4af9ef5e2eec6440ddfd2eedd73cd23c2d7559740a5d82488717923feb8a5f8bf9a069fce1221c1881839f370ca24640fb7505e38db4049ab1e36b8ca64a27d97391048336e6c62c1da2912f7c526b93aafaf1503ac5eca3d7bb7bfaf566a4083a5684c3a245f3ffbe02ea6f382c76766e8990f76e864762d3580141428814ffd9be7ed5c6629598a2df7c6307e239c1ead8d9642233dbfd1d60a3a91bcde0750778a74f8416427589e28fe5ef0f6d547cd7c6dd61c613814cd4b8722613911c2ef0da98fb9bb648dd0d3aaca6f545fd67b85bdb0a9d855974fb4a38928b31947e53e40f44026767f6f9ff3e9e3a0d3c9d85528d9032c201a43dcb7d2d55a0d3dd9a724fa6b2218b697c45aedfa857f0ac39c10b527dbb513a673851e9e59dd15d3d16e196f2c4e8157bed849d9dbbbff6033f5edce65e70fa0d59cd8ffc586647dd9b4925ac1bb3441d095a56fcc7c3f7a11463d911bd4847d24cf06ceb8de8055ab80a91b820d31ca119d61280defa427e28b2bf1b4b98f5e36f0ebce801accb54530016f5ac3611093d2539f7042e8d81290c7d6b9e9f64d33f858b66b2acc6778698c62d941f1806579eef03eae8d82882c4fcfc4783d567c4b23e376a8c86a43b566d94915ee276da1f6c2040bfc3d1a5d75022b19889ab4530023322dac4724db9e728c895bb43fedb7834b0164d131a66cf49c30cb187bb4f94a0bc9ae50a6e32d6ec998bf26c93b923deb5afa18b8add540efa46a40cceb7b52d5c4a0f234eff5f2ad6511f32d6c3aaa2e036c86926884dc888b8238b516a398d7647f8d118dd9b50ad9caa00ff87255cd9e7c146abd2366f4ea02d7548d31aa0ab12cde70f33404d629b4576b0242d4f27bb6d6edeb2581400b7eaaed0f560721cd89abc6b09e4cb33cd2c852a6bb0f328fd11c147e0c42b906e198c85e37f51c087bf92046ff34397bc31f602abe7f6fa5d97b7d7b15eb2d16bca83f15d05930c153f5cec251af0fc0586bfd6fceea4bdd90617aba9dcb4f764b6f3c82c9781102a6e42b76c49e5cb5468061e5d124bf50db3ade66ffdc315e5f65eed0a9958a9b78ef462ae7d11cf4cff417daa4ef2053972bbe7cff8fa6de650baeeb9dcc4ead4907c1486791a57c743eeb965bcfb2ab4025b0e499ce4745b4c597b794eec476e9aac786a8ab5307fa222b9efa436ca03dd4b5ea9006d5241da658e2cecd620b7723396529467fab81c6314288b72a1475c8ee261a10b9eacf27dd89a09bb1084e8745065a52cfc1623c8337e931c2202ebca0b47f0334c2dca7642aa58196960cabd1a6d9cdfded47b22e6dce03725c838d3f5dd81a09bdf8e7ef66f9765ef0fa84fc269798f85ee1ce46a13ede48d5e93681fab405699e1e8e5ce83d4e041892d6927b29f7", @typed={0xc, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0x258, 0x6d, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x99}, @nested={0x23f, 0x52, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @ipv4=@local}, @generic="6f44d006dc4e11b61fa9bc094d60d0d8cdaaafa585451000920b5cc44111fc85c3331da6fa1e74f19db6d9ad121dbe583be6a0d3fc9488a9a3ffcf4f63d532c72d2235d3f8f2e16641a3a93c661293fcbcd337a3fb0d116ac7b60ac1a877e8bf91bfe885424c3474fc259934fe693f755a6428a6f340160ddeb41130199ef01eaee9d21671098d8e89839cd3a7061df637d4303c8a04c3ad937ecdd22675f989fe4b913469b9e46c97a7dad04667bacf033da9c7700f66977e2d", @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c9156c8d", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @nested={0x5e, 0x31cd, 0x0, 0x1, [@generic="e714d0ef9d983780a64bc210a43babb22b5a272f73129866f18c783668119c5e7817dafca0b4fedb85b538a5a54f63d0d47223aa14fdd47bd0a843fc04f72e9666e6654901523c7ab38eeab06a1c91b296ecce21af56b1a1ffac"]}]}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 22.682221798s ago: executing program 4 (id=3585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="380100001a000100feffffff00010000ac1e01010000000000d79059be05c987430000000000000000fc0100000000000000000001000107174e2300050a0000203a0000000572bc7bd08554ea35ce19e9e0fb90ca9e89c73c38c216e27a0665dd5a7d8ec17c544bb98736b78e1c7591acd9393dfc6e62661217b55c898f2e2f31ae44a8cde7695d5d4fb8500e9c9c54dd0a5198dbe3d57cb2d226c8313113bb707addbe12e60bdf972100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001006600000000000000480003006465666c61746500"/240], 0x138}}, 0x20000844) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f067", 0x14}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r8, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0300c600", @ANYRES16=r8, @ANYBLOB="100927bd7000fcdbdf25620000000c009900080000004a0000000600b4001f1300000600b300000000000600b300000000000600b400dc0a00000600b300000000000600b300010000000600b400c60500000600b300010000000600b400771200000600b4007c080000"], 0x70}}, 0x64044080) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000a00)="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", 0x155}, {&(0x7f0000000400)="69c062fed47198c46a924a48fd507c263ec0ccccf0f745a3780bb6", 0x1b}], 0x3, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x200400d5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r11, 0x4, 0x9, 0x6, 0x4, 0x9, @mcast1, @mcast2={0xff, 0x3}, 0x2000, 0x40, 0x0, 0xe}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x3c}}, 0x44811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa4"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000240)=r13, 0x4) 7.600819641s ago: executing program 34 (id=3585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="380100001a000100feffffff00010000ac1e01010000000000d79059be05c987430000000000000000fc0100000000000000000001000107174e2300050a0000203a0000000572bc7bd08554ea35ce19e9e0fb90ca9e89c73c38c216e27a0665dd5a7d8ec17c544bb98736b78e1c7591acd9393dfc6e62661217b55c898f2e2f31ae44a8cde7695d5d4fb8500e9c9c54dd0a5198dbe3d57cb2d226c8313113bb707addbe12e60bdf972100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001006600000000000000480003006465666c61746500"/240], 0x138}}, 0x20000844) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f067", 0x14}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r8, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0300c600", @ANYRES16=r8, @ANYBLOB="100927bd7000fcdbdf25620000000c009900080000004a0000000600b4001f1300000600b300000000000600b300000000000600b400dc0a00000600b300000000000600b300010000000600b400c60500000600b300010000000600b400771200000600b4007c080000"], 0x70}}, 0x64044080) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000a00)="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", 0x155}, {&(0x7f0000000400)="69c062fed47198c46a924a48fd507c263ec0ccccf0f745a3780bb6", 0x1b}], 0x3, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x200400d5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r11, 0x4, 0x9, 0x6, 0x4, 0x9, @mcast1, @mcast2={0xff, 0x3}, 0x2000, 0x40, 0x0, 0xe}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x3c}}, 0x44811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa4"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000240)=r13, 0x4) 3.130393941s ago: executing program 3 (id=3745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x4000, 0x0, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmmsg$inet(r6, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b00)="b3", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) sendmsg$nl_route(r2, 0x0, 0x880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1000010425bd7000fddbdf257100000000000000", @ANYRES32=r7, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 2.901506856s ago: executing program 3 (id=3748): unshare(0x2a020400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x80811501, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000640), 0x0, 0x24010854) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380), 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000005000000000000000600000000000000", @ANYRES32=r2, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5452efd3ce2b37d990525874b4460200000005000400040000000800"/42], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002800)={{r4, &(0x7f00000000c0)='[{:\x00', 0x74080, &(0x7f0000000100)={@_ha_fsid={[0x3, 0x5]}, {0x200, 0x54, 0xb2, 0x7}}, 0x4, &(0x7f0000000140), &(0x7f00000002c0)=0x10000}, 0x5, &(0x7f0000002740)=[{0x3, 0x7, &(0x7f0000000300)=':($:)(\x00', &(0x7f00000005c0)="c94400c2ebe5a5f409eddb781353c1a292f66224f05307a7f4853ab201be3dfe83f34f0c12028f805a3cd6abfba3ab0606f0f93a5922195f81c66020d79a452a8e88bd6576402aba4131bed9f92570784324991241ef52433093f131a3eac4e528a34650471b8f0f9651577dd6b771943e3bb660652a818a02adb5a324bb159e11ac8c3e6cb6a1e4ba50de3fc7c61b40ff3ccaf6755315eb9cac25d634d97d43d52e800b752eb8df5c00d62df0c2433a9cb1ee40ffe67224230067b5c3925a5025dbf228ed1a57dc1d567250b1c0367b9f630e65ac02d8f92c22a2c4f65f1b3a593fac010943f99668ec8d4731", 0xed, 0xa}, {0x1, 0x80000000, &(0x7f00000006c0)='GPL\x00', &(0x7f0000000700)="9782cb9392807f266ab2904625a0af3534773372153231c2d9083e1608c3761bb3b9901cd68d187693a45df4af967a060c4098919a7201667990395a1773f673f5", 0x41, 0x8}, {0x2, 0x7ff, &(0x7f0000000780)='*&@)@\x00', &(0x7f0000001580)="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", 0x1000, 0x20}, {0x2, 0x7ff, &(0x7f0000002580)='\x00', &(0x7f00000025c0)="e786eba8832c07bd42ea09804fd0842820f99264a36e6a1240a29f53703c11a8dd3be75f9cb05301246a9242b91173c98f556149537a2ff8e58df1fbfe85649eddd991817a9077ad76ab660b2bebd61bdb7279b85f459aeb7777a1301298252d227446a98d5abacc470a4050764614875d5983cdba02774ac191e4e267fd70cc07a149", 0x83, 0x22}, {0x2, 0x9, &(0x7f0000002680)='GPL\x00', &(0x7f00000026c0)="6d278a610ccb68e2b25d6becc3232cdf9ca21cf735ba8246e6c075a2291ddfee0901b8f639395df9df57066060dd6828c444558cec40fdd124949f27d7b398e87d6438597a495d119ef2b21f040116b2acc8a6d9eb04439260dd8a73ab16fc7b739ec3c251", 0x65, 0x12}]}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000002c80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c40)={&(0x7f0000000c80)={0x320, r6, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x304, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "65669631c96b2f0829db860000080900000000000000f0021ba5340178f5bf4268fbb6d295c0720839c6f390f1c9251b53154537d77a9d37d4529e97e2dd347c6071b5fd54e5fc240f00b7ec30f39baa40fb809d0e93c74ed54ebd9a5923a917384ef79af2f884ff43059e4309ede23dda358eb2a5d261b732634260eda7d949f9d092354e"}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xfffffffffffffff5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcdf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80d5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff55}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':]-#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'&^[]-\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8bea}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "9790f98e7f9a32bc17466617e3736527401ff53bcd417725f30bec267981e8598cd8a9d0cdba8a9c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3538}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "0f55143c62ae57fb3786de7cd11813a173ef44d6de455ca48bd1b0605e8f935c8fc4705716c9c4c43f3feba4d801b11b1f038778f3cb72047eba8571286b35a2798fc9aca16e487520887e2c34c02497ca"}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "89cacb869e72700c711a3500a618b191d535bd314cafdf37b91a4474adeb0817cb87716978e0f4acf2222ad4b17a70fba8c633c2fae606a9d00cf2efb623221412efd9b4dcb78e9654175a9bb90b70ff21a88be1f0b1dac6576cd9eea23c8123d86bccf47b843eed98e7707699e152460300faf2609a779e7f87816109878240ca5bdfdd3a764777b1d2034f71e0a33860560f6c9ce7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6166}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '\'&^[]-\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '*&@)@\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x87, 0x5, "5d735d33704a653fab627c3e4c4a86e35820f515a22ff93919dc354d941e95d803b18840759151fdb8a58f3e59fd4e4e6621449f5f3fdb6d54b20d75d76be2d21073a1b706590971605635cc63a58b504b8ae9c34e9cf0f22df8238f0ef18f8d932dafee4ad175666cecea033e938eb0e5343b2af739a78524cfe15470adc47f7490ad"}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x40085}, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto$inet6(r8, &(0x7f0000000140)="d0672f", 0x3, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000700000000000000018000009111a00000000000181b0000", @ANYRES32=r3, @ANYBLOB="0000080d1be3ff0018260000", @ANYRES32=r3, @ANYBLOB="000000000204000085200000030000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r10, 0x0, 0xd1, 0x0, 0x0) unshare(0x8040200) bpf$PROG_LOAD(0x25, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) unshare(0x14020180) setsockopt$inet6_tcp_int(r9, 0x6, 0x12, &(0x7f0000000180)=0x7, 0x4) 2.669432902s ago: executing program 6 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007756f516159298f43eb7862a404ee0da3d0dcd7366a222523b3d1d2bf34998fa6450c92067334f2320770c6d01f33fb48cc1a34418357ae086f78011b09e7e59cb3065463249da35ddecf86601ab0bf654219dcffb9f297ec6d4a51aa76c8780f83cc311cfecb6cb5b0743952ccaac01438274973041e94e18f393f3cb0be39b"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000580)={r0, &(0x7f0000000280)='.}@}-\x00', 0x22440, &(0x7f00000002c0)={@align=0x80, {0x2, 0x400, 0x3, 0x3ff}}, 0xffff, &(0x7f0000000300), &(0x7f0000000380)=0x2e}) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) 2.668951002s ago: executing program 3 (id=3752): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0xfffffff8, 0x5, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x65, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010102, {[@end]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@empty, r1}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0xc0189436, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000700, 0x800000000000000}}}, 0xb8}}, 0x0) 2.576982112s ago: executing program 0 (id=3753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000) 2.50894071s ago: executing program 3 (id=3754): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000440)='%pS \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x5, 0x7fff, 0x7ff, 0x1, 0x2000, 0x1, 0x99, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x800003, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_fd, @generic={0x84, 0x9, 0x2, 0x3, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x13, &(0x7f0000000400)=""/19, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x2, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000cc0)=[0xffffffffffffffff, r3, r4, r5, r6], &(0x7f0000000d00)=[{0x0, 0x4, 0xd, 0xb}, {0x1, 0x4, 0xd, 0x7}, {0x2, 0x5, 0x3, 0x7}, {0x0, 0x1, 0x6, 0x8}], 0x10, 0x10000}, 0x94) accept4(r2, 0x0, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x1, 'C'}], 0x18}, 0xfc40) syz_open_procfs$namespace(0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0, 0xfffffd85}}], 0x1, 0x20004814) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2001}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xffffffffffffff5a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="6c03000000000000d1300000000000c910fc020000fcffffffffffffff0000000081000000000080"], 0x28) (async) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x360, 0x450, 0x0, 0x0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 0x4000, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1300000000000000290000004300"], 0x18}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r9, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x2000) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) 2.340932694s ago: executing program 0 (id=3755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/21, 0x15}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4040804, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000004100021e5c90000000008000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00'], 0x3c}}, 0x0) 2.288224841s ago: executing program 3 (id=3756): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 2.230139473s ago: executing program 5 (id=3757): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000004240)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1a, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883782daa9e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2.123388055s ago: executing program 3 (id=3758): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) (async, rerun: 32) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) read$nci(r3, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.002966664s ago: executing program 5 (id=3759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xf8ff}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.894583052s ago: executing program 5 (id=3760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c473"], 0xfdef) 1.731239779s ago: executing program 6 (id=3761): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x11, 0x1, 0x200007f) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1, @le_set_ext_scan_params={{0x2041, 0x3}, {0x2, 0x9, 0x15}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) socket(0x10, 0x80002, 0x0) 1.641633123s ago: executing program 5 (id=3762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000dc0)={0x0, @in6={{0xa, 0x101, 0x3, @mcast1, 0xe}}, 0x3, 0x1, 0xffffffff, 0x8, 0x80, 0xffffff1f, 0x3}, &(0x7f0000000e80)=0x9c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000500)={r5, 0x5}, &(0x7f0000000540)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r8, 0x5}, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xc8b5, 0x100, 0x2, 0x3, 0x4, {0x0, @in6={{0xa, 0x4e24, 0x37, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}}, 0x2, 0x3, 0xbbde, 0x80000000, 0x8}}, &(0x7f0000000f80)=0xb0) sendmsg$inet_sctp(r1, &(0x7f00000010c0)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x7, @mcast1, 0x9}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000140)="fd61d912193c75dfcba3f0c736b7ec24aa6db8", 0x13}, {&(0x7f0000000240)="7f3c72b534c901372f2cebb34087f3fad63fd907b3a9bb10a41c3f50e3f2fc8fa108ccebba5ba56f1ec4fb8f91dd0e48e38800eb96f1d91684b206db2fe49af743fe4b56473072b3c48bade0234b2aa7a4077c799b089b2e78ee266b1cdebc82a9900827599e16f1249b65e27893ceda3db7c115b352187dfc4c6319b95fb198130179c8ffd67fee0fcf3965202b18c14b9b88deb8e3891733f273ba5624fa055881e4fcfa507ced3fc544ce026a23b6ed32d30a8ecf5b635bae42bd1e9509c731671683d4183f7ff7080b20", 0xcc}, {&(0x7f0000000540)="0c5673324605fbeaedc8bfdc344313fb76ff276e7546e3c70fdfc40cad11cb418458df79e3cfd99b0005810e7ee6bd3add4e8bbf3bb2f3ff3f2a74e43718efa46f5dd8dfcb586c5f61435bb246ba44db076cceeef8ecd2c5814702ee4b28a9ccb267144f621c33922826847b1a2870f393762d4c2b26886afe054e80c85d2da5848b745e0306bf6549896452ec43ff6ade1b740ed522925c8a4f6870a029791e0224af9bf01d12241b", 0xa9}, {&(0x7f0000000740)="2b6a7a8d15c41993d1c39c3b550d69b1ac866f00a80d305bbd0e435711610e4f9d9cce8e9392688836787f7c0db39b8d10a1396821aaf91134be25b7d59f60bd22e1a82e23e9bc23c18a95c1bb0c62e9f479cf39e80ba1d83c988467796ef1b751b690963cf4ffa2ea55f7b5d238d08fea7debead59cc9d53da55fba7a0a697a57", 0x81}, {&(0x7f0000000800)="6563cb705ef28f860d9dd664da504998b594094ea9f33de657f899ad43c431e17af1c18c8eb771fa5707c79231e25d4afd732b092896509080f92a7f731c7243a30d1a4361f74f724e3c23e5552c42ad687341d13df35c3f5623afbb38f52bfa24c0fe2a92cd08f795767517927337fa411df47bc27edea200a68fb853932608bf0af09a564cc28242dfd9ef130978c2", 0x90}, {&(0x7f00000008c0)="052ac29cb3c0081445e190206644a65887a3ed81f61b9d0eee73e9c676339b0ee1233e13adf4fcd907aaee5dbc11b1b2206ad2d517db70054335b6af836cdbabd2d613a313bd07707ba2542b684cea8469d71318737648a756d77cce52e2d77cdd5acede0fe9c5ac8be50e78f0425680c5d08e224cf9404e377dc15b007e9736d5ff2e4df2e2bcdf9482705a10c91dab8d23c132bcde5f03b935d76d3e37ee2308928aa15fc217e4fbd644ded34924e1a04f0b5e5f6f4506d7903f5ef79c8286fe133a924f", 0xc5}, {&(0x7f00000009c0)="a1cc13671ffbf4327c8331f29b69cb07e6d427999a57fd9fca83ff2c6a3af128bbd1d64f3f660f0bed6895445fea0395dbe0fd60d96fd45953b78adeeba8c65bf31884fc0c389eebf02cb2", 0x4b}, {&(0x7f0000000a40)="0e88dca20e36a4f2b9045c8e6253ca807feffa327353a491a7aae403b69b9efd5c6c7a30230c5fe0c04da23e7df6f0f43bf231adb044c548866f7c95734ff92127b91d021255d4767d4641781b6a2ad4849845f3a60b62e54a60b356d94aecc38453bc2c1f76999b3c68b584f646f8ec59fd711926ef7fe93bbaf76095ef08ff44a6d40d52a9431b6af6e726a728ab2acf165470c56da93236900e5d8940749893a6cf79c22eb37013fa1f46afc6d86ad9bf5d0edad0c35a", 0xb8}, {&(0x7f0000000b00)="f0a2c1a0ed4e3425f215ab1db40542dc70c0184a9302784aaa0608138c188a2e81f4f9847102835a9e2e204cb291193483b825c459148209f7534003e68a18bb4a06fc2d27ccacb0205a31657f7a6f29e388f183be68cac0d1cd085b64f0e3972a965ae840f597816e696e94c186236c63e1589c448c14c00d572ccc6ad15ba3ee00ff39d0ce2a053a2572b4640d8c993f32260f01366c9aae2279997acf04e92ff91186c7e2730c2eb91c3efef32b83f16a873ee89d8cfdab8adc884a4d5cd388590d2169f29c3328c9a95b5a950d910a04a9ad0f70c0482839bbf52da0d4cdfb3f1a9ef4", 0xe5}, {&(0x7f0000000c00)="d03f185081af14eadc3c992939441f8cddf1b27109f0d8caae69fbbf18b9103d1e6ada4e5a903cf3133d95a35dcde2b7954d25743a5f93669da27df6a997bcad2118444002b0201cb82354bc9c56fd599e7c026a7194326940e118950a5feb1348564bdc866c882bf5dd5674fd726e78c3887a2d59b2f7f35ad6245b4fc54f9fe86b68605803ba6696570095d969b16858bea8d4a4cd738b01a741429fda67f5bd6d309ba0c324132dcdeba8ff2bc243893732ab534ffeb84c6ccddf1e8a120fa9e5c66b537f2c924c82c49205b7dda580825eaee6a8d72f398d08849b5517bd21b8eabc4997f09b507e4a025c5b", 0xee}], 0xa, &(0x7f0000000fc0)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x5, 0x0, 0x8289, 0x1, 0x4, 0x1, 0x5, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8000}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x0, 0x0, 0x4, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8304, 0x3, 0x3, r8}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x6, 0x8004, 0x9, 0x2, 0x101, 0x2, 0x5, r9}}], 0xf0, 0x800}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 1.53372192s ago: executing program 6 (id=3763): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@setlink={0x28, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x44080, 0x140}, [@IFLA_LINKMODE={0x5, 0x11, 0x5d}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3d0, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1b8, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0xd06, 0x2, 0x2, 0x0, 'syz0\x00', 0x4}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@getpolicy={0x114c, 0x15, 0x200, 0x70bd2d, 0x25dfdbfe, {{@in=@private=0xa010105, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x80, 0x0, 0x4e24, 0x7, 0x2, 0x80, 0x80, 0x3c, r6, r1}}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e24, @in=@multicast1}}, @policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@multicast2, @in=@remote, 0x2, 0x40, 0xf2}}, @algo_comp={0xfc8, 0x3, {{'lzs\x00'}, 0x7c00, "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"}}, @algo_auth={0x9b, 0x1, {{'nhpoly1305-generic\x00'}, 0x298, "4e748fa0a42e8d6f8d23d6992b71a76b5421f7b044497c0b432ce3cc4abc2690682e10f0ad9e98795782b3d3ee8229e57b6e37282ff918ad6e296a8b60f54163255c58275d6a06bc33ba185aa018450e05f350"}}, @migrate={0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0xf9a154176e4af2ec, 0x1, 0x4}}, @lastused={0xc, 0xf, 0x8e}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x114c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.397656913s ago: executing program 0 (id=3764): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000) 1.3239259s ago: executing program 6 (id=3765): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x420, 0x4) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (async) mmap(&(0x7f0000a6a000/0x4000)=nil, 0x4000, 0xd, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x2, 0x2, 0x3) connect$bt_rfcomm(r3, &(0x7f00000003c0), 0xa) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000001000000097080000000008448c5231ff00000000bfa200000000000007020004f8ffffffb703000008000000b70400e6ffffffff84000000c530c9d3ee22d74ae297a3ea59b621b02d2adff2eca9a3610100000095c769f45f656ef15b887b4c4e5261d058b728b22c79a268d542c971a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000012c0)={{0xffffffffffffffff, &(0x7f0000001140)='@-\x00', 0x400901, &(0x7f0000001180)={@align=0x2, {0x9, 0x49, 0xfffffffd, 0x407}}, 0xffffffff, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000001200)}, {[0xc, 0x3, 0x1000021, 0x100]}, 0x5, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000030c0049cf02b73942c1be00090806004000000f57"], 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x20000003) (async) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000480)="685c011a350673eaa2297b4964f0874c44f898b27d5a68f3c0c1be04421b4fcb3a123a65d928375d50a3b0c55bf7fa3d3c5b00be687eebfbb0988a2c14a001d8c564ad8cd0e54e435760a4871a4e921dff1bcc87806fb93c1b", 0x59}, {&(0x7f0000000780)="b83df99535801354782c99c7847d8e0f012c84e43b6d25ee26da612518958c6b53fe31f2d7e0e5fddd0065b1e2a928a62d66860eee5fe8e6c9a402f74d1546c11d8bc0ed7754537047a9637e86094e60bd9e5dcdfccb0245fce141e62e08e1e1dd6a5c673ea7a0cf9f01dfcd795c4ce4dea4", 0x72}], 0x2, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) (async) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x4000010, r7, 0x80000000) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 1.242050553s ago: executing program 0 (id=3766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000090702000000000000800705", @ANYRES32=r3, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05", 0x18}, {&(0x7f0000000980)="bbeb0a3e44c97ea55c69cd181b4a5910956849ee8d43f7677554aa7f685176c1943d90ec3285cc611ae80abecb12a820165b4188c8506fbb8150ac8bad3218f01ec9a3c844e40b1fc86ffe8cc702ca5e7777956a0b8f45233673266fe27b199410c0f6ea3a57102ee83c04277d735891a1ea3175c8fa517b4e6f421d8b8b12c030823ec5a4f318438d6580e48906167831a1e9893dd052fedf5172e45a9aef6e99fd6cc43b0344224775e8aad56dad1cb7ce597f3b486422583e3026e9363488502e0bde17bcf0d7668075d88e9d87a6846331eb1f", 0xd5}], 0x2}}, {{&(0x7f0000000ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @broadcast}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001100)="24b8ecd9077aeef939592492f6800a0e9e8ce88768b13fb097a2c240dedc766deb6a93eaa1a2517d7a5e201fcaaf7ff4bee5a1b6a8d1042ec475dda85ed5a1ebee407f0e2d22a5802311990a9192527fe7cfcd3f5722f7d19635fbc142c864662bab72d9941eb2317e95827a97dfe7eac373b8aa247a407e23ffac1c0d51091789e778af0a2586486b8a080ada8909d9f585447382b69aef0bc9be181ae37cea7d0052ba00b8257d0b71999170c8c345ab0fb00e596b9dc3d3668042f0d827e22f70a6899b9b80b1336178651e", 0xcd}, {&(0x7f0000000d80)="e2030cfdf612bd16d3a84837fdeb554e3470443a7593db6d4c6ba8fcbec09cace267ac3d7c6e0b315a8a6d41129f79be84b42fc50b4efcd17ec1a05bb2219e6d68498a05067c3d3cba1ba4ea88ef89095388e9895681472e43bb839e4d9500ef01f4bf85d7fe6ebcdd527af1a080cb808863bad433a40142eaaeaa6a3dc1172611276a145c0c303926b02fb8a631a2dc95a4ca63f59c6a39fdd04877ceb9dbe4ec4f79f543ef3833ab05f08726dc86ffc6e298f023c8d62adb1a7caed915", 0xbe}, {&(0x7f0000000e80)="f881e75ea2179839687cd19a8d7b27ddc7d4bd4bb42c1827a2ee1d549595986d349b4d48564e04231445d0db28842ba64f2fcdfd382a7516bb6bbe9ba0437025ce191b6c95b4f1d69a5b84c54cdcd2882b023e3b33d99f3dd3c9929064042412d02b310c5fa590c5cb705845559b510ff6209b0a7b6e3444f9e2954d3a579ea17cb84d8edfb3d51870049d444c48cee0a367668d7e7ea6a1ba87e90b6420366832f1b6732ec2c7d67e1300", 0xab}, {&(0x7f0000000f40)="6cc4afbcaddb386ff31eedf45b0731dbe5822e", 0x13}, {&(0x7f0000000f80)="b72702e9b95f5620e7073e5bd3bd5fb0e40d8157d139569eb753d0", 0x1b}, {&(0x7f0000000fc0)="171a631cab7922c25d3833275afe0eb1cb6a8d1119923db2e392fb81", 0x1c}], 0x6}}], 0x2, 0x20000000) r4 = socket(0x2b, 0x1, 0x1) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b, 0x0, 0xfffffffc}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x87, 0x6b, &(0x7f0000000640)="0ae460272ac9d8592ea687238ec30feca17b9661590f74cd6fff4b1e495f15480496973e7c7cc3696e6c8796c344e254e811eaa155210fe403d93d28928ae56f6e543db8adc0ba79aaf269374283cd40dff2c2b62fe4d19f49b0edb75a3b43c770c07fd4d8fad633d32bd878aa322ffcfb340d9614d7170780f5b5ccad46e1f6c423a0e21a1aca", &(0x7f0000000700)=""/107, 0x3, 0x0, 0x4e, 0xdc, &(0x7f0000000780)="e427a4bf9528c10394f4a6ace3093c66d04c306b39fb2f09d957c4f0e0f0192252544ab829eaf45eef0b3391f2c83d3b6ff816b32aee5831b9598a50864a9f928a03973e068e3fcd0b3b87f48b61", &(0x7f0000000800)="67e548c3bf71f5a785b165210d1f10389089aeae372a5bef567ed85dd7ae85dc818ef72f72a9ee45c66a25fed56528982da8bc28f9dfb54fe45feb3de71ff5b790ca15e124f19dfb50cc15163fbc4adbe15a25bc67b1318021d11fcbeeb692d4f41f20044fec0eef0c29d388b51289132d46568e0e5d9f59e59481b549b5df67a14106800043d26d42b3abe77da82e66779c8023f6135df343d296ddb8d79e9b7a30eefb4e99a6310864892a8f178682568367cecaf5419e2a2a4e76ee66bd85187f51b9f47f3931dcf94489bd4a5e43e4f50033ac49ff16f2557787", 0x1, 0x0, 0x40}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x4000840) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) close(0x4) 1.059013179s ago: executing program 6 (id=3767): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 787.104881ms ago: executing program 6 (id=3768): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) getpeername$inet6(r0, &(0x7f0000000100), &(0x7f0000000200)=0x1c) shutdown(r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000004c0)="a4", 0x1, 0x44, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r3, r5, 0x0, 0xe) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="e90300000000000000000000080045000024080000000011907800000000000000004e210000001090786204000000000000ef310a71440576bbd32f536ec2b184e0da03888f4e59b5de57799f2bb846ce1a9fd37f10eea793bfe4caf9c12394bc38a76a60eb28d59e6468e68d3429"], 0x0) 784.850715ms ago: executing program 0 (id=3769): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x2010000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 557.995231ms ago: executing program 0 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007756f516159298f43eb7862a404ee0da3d0dcd7366a222523b3d1d2bf34998fa6450c92067334f2320770c6d01f33fb48cc1a34418357ae086f78011b09e7e59cb3065463249da35ddecf86601ab0bf654219dcffb9f297ec6d4a51aa76c8780f83cc311cfecb6cb5b0743952ccaac01438274973041e94e18f393f3cb0be39b"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000580)={r0, &(0x7f0000000280)='.}@}-\x00', 0x22440, &(0x7f00000002c0)={@align=0x80, {0x2, 0x400, 0x3, 0x3ff}}, 0xffff, &(0x7f0000000300), &(0x7f0000000380)=0x2e}) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) 241.45879ms ago: executing program 5 (id=3771): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0xfffffff8, 0x5, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x65, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010102, {[@end]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@empty, r1}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0xc0189436, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x408000000080ff, 0x800000000000000}}}, 0xb8}}, 0x0) 0s ago: executing program 5 (id=3772): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000580)="bf0b7555b3d14932612953c9ec2a7651f2887a16c637905457ca6b39d48d74b14ce9f60bef3aae877d38d13850a6db78b854c6685e70d9b473039dbfb275dffad25e18d5781a0905c0a4631540530e385e2e9b27a94cf908e61ec99e47e68124bb71ef37a047ecd3ee535f083a12a40cbfd744d081ca2c3b5e795806c99ac2712be94892e3ae7d1d84acf04dbf7a1c7814a65e6d248d5dbe29739cbf876d2ec37c156c7b50c84df2dbe0de08bca5170c89db3efc4e077b3b0551c15644c4d21488a58bdf52cc679d96415378a853a84330b4f91f599e8172cb4b3c9304e428d98ac27fcc5a4b3311f1948470e67ec526b9e4d5968a1b2be4aa99a9126f09d121d86f526f52e335824f57d71a264400c84d4f961c33b6712b4374920cd78f79a902c326f61c0c639e5fdae8ed93beb905ae8d4d5177b88608e40083a31681aa5f0cc546772b558f911976f3f252bc8ba2b1eef8b4033c69e9e56569d206626d3162d21a9059d940df0fd12114182c476416f6fd4782ba15d5a29b69ffdbe6a7a02eed77b551bdd8b9b0514f29b14ddf06661a1be3690c8f2a557319557c9abfb915490356910ceeab00ee4e1b4b0f3785925a70a9c1201f53a4ef672983af0527e582d5faa1c6cfb80a15fd3b3fa09492c7b794a02cede03d1075727f5a3a7535eecb4e4e6ce9ce3fc4a1dada9137ccb6a11d00f979c29ea7e13d03e69fe23349680d1eb60e11cd70bbf59eea0b748031cb50ba83472dc3cfcfd5627835f5acfad8b549b3cbf5548942734aba35859447ae551a796fae965ddc3f7ecdb8d6c40fe564bf0c3b0017ad4669e690626459515ae98b99ffc00910d022f01feda0174bae2744ac854c6ecb12382e55fc7db460badce8e0c7e92d98aa7a0af5a28dde944d0d01ec823142920e73d3baa6b75f60f4f556d6252b724cbc4d10029f9147b2647ff094fe721150cfb9895aa98bd21de8b070ada38b14d5caca8d9501cd34f3f7819210f1adf40da703f7a23c27bbc4ff2a5257c4cd012e32621cc7d60111bf7b104a784ea90b64ea01c332f977b28adc4c3872dbc9a8f8b361616148c0fb48cb0d9851c1c7b57988c046c08cb7efbc25a60a6dbd8a4dd2c27d4ce2afdd8909d7572f0c50afca5911224d0acbdd39dcafd2d5a2514d671fd57f064e9e5e5e1e0a2d2175c5a2bf87f161af654b7dfd7ef4bafb492767e5c146ef7c5599348531c1ad58de7d35425967a73c1664ed68649b44447762f778b240a54506e57627b623e0d305ec2b878d7292679db45b938d229b5f78a4083926929117e93b50176c253a6c812bb5bd8bc3b04063be2a34f9a05c33f3d0685cf6b5388c90bd17bd34ef0240c986e46a24a7ebdea5c249314be9f4c914ca068396a81002d389e3c7eab177dfa4149d87b280818cce15b60778da97f3b384ded461d8045640ccb931c8d3dfa3ca7eca74a8e6017dad7180468da23cb75a72e01b5968f0e9c96f91ded53efba1ab348d4357e8c0b88b82436f51c16cf75bfa31eddbcf83a1a745411327a8fd20418c208c2cc1af5a98866a15ff3c0a269b37644aa0c5f5484f487fc7658c12700a5bf5d8a1b7e5da87ca1a6651827b30a00b4105112eca20720c10e7401ae4f80f6db680bb258a5f7b8b79bdd50b3e5942b3838864cdf15f2074796a78f1e1a89a79bcb6809079217a4d95a17155b1d46b4135c58eadb3d02d03d676e221e509b93f3f336f2fe48e890d71777710d7e308b3b47c149fb2e18133a1de7f58eae04c450c98920a7ccba88be944bcdf084d05d086ea43ff90842b5f5d686bf7ca2bf226962ea31b625f00cb9ed61a79448d4655939f3f7373977e7aa6733d0f344ca80866eec25d609325f12b55deff9152667935bc75ba05878e8c9402eb610be446050695d8dc92b59b1ff7cbf074e170fc0b34193f8d2210a25981b3e10cd45ce762edddd3600bb6d406373bec0c96802e94a8c89a1e03c8896453233da8b1888150d69b16347bd5eb4f45ed9612ef874a5dd4d6553a2cd9fedae998c7032db31ee5720a7ac57c56ab9e71f75e33ed2bd0015e7dfd6f0ccebbaed3c7631eae8f52a1848e2d36eaca341b6b3a1127655d6cb1b8f2741575ea73ff34279b57e3dcd0333b42efa6075096dcc62e001bb86385557f332b24226606f8a2556af64b8979bb8e12aef440f44256945609c82bbdfc5b838ce4dba7f21c1888d2c51cba0d132bc0b8472a521959c8abf15d32d94916ae8cfd97d35f341d09b9150755df35670400e73cf746d49c45930cdc8255be6825d9686edc33d2815450c09fd017abefc680ddff400acf81229f0f551dc32ecec87e4746c44ad42565e40d7ae8ae42b4bcd7ffb05bd78f4bcdd4a4e4aa9f0c83b23db26a99d5231a2c636d95943331136ae901970594c55f69efe8d4d229c9ea823013cf6f0dcb9f2a65d78371a4f786c5d90035e24a9498d5152449df4f4f9b93a695bdf7565cd74403ac54f61f75ca23327317fe74f076edbd0a32d9b0268f53bc9f0fe00627c40f463f20e1c352dc420bffc4a4469cb39b9a13aa1bcbb7cbae811dc061c46ef718cd7678eed1e5fd3c8ff2bcc86930008d8fffe39d00c2c1c7a7d457f90cd34cfaa62b4a4813258f23471e07139e08bf064e75f50fa2e506edef44e7cd7b7233f9adfe04a7ae47e5ff547d83d03b349e202b6a39e35d5e018266bf5073d7894a2796dd1f8a696c3634b640a4a75770c651bac30d0b3a15bcea784dbab6e2661bdfcfbf05ef8ee5128a48168ffd4f704212f854e177042f3c4883298eba15371ee11cd0f5a92e112cd8600374db25e1d1d66552e41af2d38b2e8d741e39aad3f9ebf952ccfa68d19f722fbcca38cd42ac1c3299bf447d69d29ff988ad44d872ca5f85850d608dcf0c025d36658b37b1c63606a5730d0c93543bbf086fd073014b8662fe3259ab1d594f3dae53aa2cf9896353df9ddd4b3e96b52e030731b2dd2f35b52b57c77ad0f6fc0a977b5e49a3af1329a64602ab987a0f567242297aa401615bb86b41981ca095009d3927c1bec8c850b6c72f64aaa2688c38582ac3584c26f2f087f3f17089c13badeaa38d3152f619f30ff8d4801ac2314e1304db75797f67c118ec41a11abdd2b544008a7fabafecac415aaef70aebf2b7f2c3d0d0c593d29724f823f4f6bc25836a9989975abef172eeb9d8fcd9aa1fa7c8beaf4b47b6e4e03a925da78f632e3ecff6c8f5a0cd90ddfc6c07eb83dd249a569f5ce76e108ac82ef27590d4bca0918d420937dbba485a57362978523c152da67257d6db2c0d8a17170493582e3bf5ebb9650bd660ababdd82a847b0ffe5faa6aa07033e8c0fa8d5bd521561c82845017c2228caec3fe80508ee0a23b39c197781860eb2f6524988095587da860f1a1788c62d409c7506d436f864ca22b2c0fffe96b9d7963ec8a5991462e7315b4800c25bc4e6dc26d68e88b6b238309692a7f776da2cf821643c221e63a361e13962b20d9b7bc8f45cd1bbd2488f0901b982bf73be7959aef053f0a294f65e6876882ef76ef1f0fe0b7b815625775d7b76f74223d4bef09c10fc57250e3190ebc34f1f2f759d017af1eb75a7199108b0e8f5b25ce3d5708d95cd8b511976ccf3b397a5109ffa67646b3f3322b2d958e52f4ba2792819f88a3d0386485550b3408a08cc5429ad417ef1a409eb90c1e6a2592e968d5ef7d0b377a6455348b9dfbcaf3373ecb4207026cfec522725b55b51d68ad9efed8850714c4892d8fa0c81e901a5af324c44b99cc556959ca9c29a8f7eeb8a8a11b4a29aa85f805351b307d0056b2bf71f1d2a75dca6f0d7ab181534637ab3a08af99b077d9e0858acae42c712f1f09a26ed559f6766e7bb9972fad42463dc560efdd780609d6ad773dd8fa73ae1447d3c86c90f7520b89b45fc8297c1a14b864495e3e186ff6cf2dfe6b20b6619847375cad8e4ab09d0d83fd163deffc82a94a9f504c392de2d16c2d663bef4e97f310793c21dcff07c825c056983e6776876d633ccfe88646227196efedb4fc8d539d4e60a6a78f7db8321ff6f5a0848b8189bdf9121b98402b17af3ef24724ff78c2d2b87adb0e3ad31d625de79124e8f5b5ac4aa3854c262e3fbe155ecde199411cba7d0aac983720a2a3722af9074fc860e795243b4dd5a28f5d7fd907a3850966171604e772a08c70451980276af732f35ab2dd24a9af8063974405b36e09cdc6a7738830c868c127c604a5b3f9377ff4c1c409f2870bc6f961f8115ebad290a96aa72dd559696cea2958f50a63877fd54d2c592b40e351a827758cb9784fc0f6d20bbba6f0eb51e2a107d44b25d905ea06eeb3c20ce27347ca1b39d41b1d5c61071e961944eb075a6cbd81d40b35c3eaa6041b270bf931079bb6ddf0b146ed667c631d8790abb879e76ea75d392eba9f8c4831b67d01ceab4b2eb33aa28782eb59d5a830d2e2c1c4283a3d81924acdb629db91d7b3b35c6a7a3199211b85f2f55c128167788e414bc54c684378192bc2bc3310ead4fcbc75add77acb85dc825334ff743e8bec8ebeadb7a57bf10c5ae8d3124d8f4bd7d5080e40d4835ea9b274fa5d2fcbf9dc11dbb94c517e510cf8964bbe985cc9f5e871ffe4a4b00efc6c44305b906f5bd0d653131ae000176373bbf39451b3dd5eae881aa6595bcd230971a7f47a138a5e6e03397acbc454b24870908283959786662cd6dd88f36a3f7b64cf60e53a3088ac0a67776d7001d07e3c3e7f249fffe262452367313fe843198c47470b6d3295ad90dfb522f80579bb26b4ba8b7d8e5fc9b6e5081508f58056174d1a92e2438a85cbc1891eafbd4bd2123ba61ec613a45eef3a54198c19956b46e24bb880ef7be92cb1026ff09792f356221c0b17bdaaffd83bb30164d0dba66a3362eaa0589d3edc7ca3880f570756405c571b1c7eb6f43deda00eda7b69df3da15dfd5bca1ee54765f5e2096c545f6ebfade26be2281bdff1181a33079229b313566b3083ea988be41addabffd75d43d95496de350e6033d2fc22938520c98ac1f87bd45469def391aacdc442f0165424752913b31ac1f5573f3e39ce2278fff418c35bfe58ae3c217c91823ada243d28c9536c45f7721e0288c62842a289e8e36c447e095cdc8b9e286194c7682866a890625c50944dd5065c7e9b47d6708d3270618c58d0427abec9534ad1fb7a6cf600dc9fd4b6c25fe6fb5d29bd09bcd920d1bf63b12afebbacbc2824c1dd70014afd72b47a107384d39ef3214775097fc93fa3abc36624e746d3103a839b6b32b2651957b2273879fb2fde2a96d9f2b025f487ee0f407b1c782b21a115491ff9193325a10f16895f890f16fd9f6f49ab8141156afa2363e11c695b924c3364d5f63441403d305046636ed65378823a92435d9322bac3bd0dfb887813afd019acad1f77b7ac3961dd34762e2c6e056510b1443122ffd4e68b31a8bd8f36c6c8c4ae8c658d41e6da9e10d63ca07e972e6498c928bf4d2c5a9538e288ed8bc65e7d7d351021dca7e4e731f7742ec7c0d9c06b12b3ecbabe97775fc220c35d8047011fb615f902cf0d194847bcbd7a4d6039dddb3b1d2880c139c7447b6f0a3b45eb584561bf5613602212ddfc1077db59c758565aa55a27b14339f69708ab02abce3a44bd220b9d1d19ef5bdc15bae9a2b84d55575ce247e2fa0309cf8b7668ec3e5644caab926e2fa57081a73b36808ff234c1c4151cf8334a61e90fae9092c57bc79c68c315ea0b9fa41dce3c6df2ad9838d0d4a9dd6c1cdce9fb7e3d6aded286f96e7a11d9a", 0x1000}, {&(0x7f0000001580)="dfa52f37d7f1dbafa9a6b31d69180d7d3167f9a80cd7424bea3b0234b0ba4d7935bebc5215079dc2b09bcf967ea72ceb8ee723c77dbeaf7b93f976dcdad503d815b861e0e55412065f919748babab76820fcbb71eee250e45843676f77ca3eeb68dfbeee5c6703b29d3021451b0fb3e95e9d9e797ae8a9903213771049a9ec3c29d6cbe01841439479cc36b0c22af0e4a8472b3889041f267baa2bb39a7fcb7afb891deef1b9fde4eabd", 0xaa}, {&(0x7f0000001640)="e07dbd342a6be11255698b929f52c13b497c9f550238c9523421d0015a87bc69129cc61a", 0x24}, {&(0x7f0000001680)="8a691caffa7863e35907d16d9651a4723aa128eab7b382c293ad14272b44851c7d935600d523896c105d6080cb82605076d8f088b815c795254bb69c5cf9b783c9d6826fe203b7a586ff109e6ea141ef9da790575c40eaa56beecc130feee37f8963660006c49ea39c820e63d8f41facea27e2e555c6242217aab4bc6096f25ee17f1fe3feda0b5adfd88dffcb03c39c", 0x90}, {&(0x7f0000001740)="65286a7265bee07e597741d32b5be9b2ec78f5053fb3c5f1c04c28a488ec60323523be084ad6f2fc7b64b7af8745ff1917e67cea012e119d105bea33a746260ad152ba76d69d11f4c89c07bef5f362caf945494d3d50f6750139000110b715f2473e4371dacd4ee5f1e60bf2db7db1e9a6271c50e9f36b34caa6dc92e44627dea214a5cd065e6d3b71d707db559df684cd3689d43b94654b0ae5eda034b7a8182b554af1adea40fd911dc43ac7df39be54d462ceed771fa3bfb6cfac1f8bc8face8b23558729baa52f2e698b4a1bf464091de971494525e80df0f2b4c2aa62e7f40e516275646a50ae1bbccbcc", 0xed}, {&(0x7f0000001840)="79ccf6e3bf12315594628fcec94fbc2ec88ab1f87573ed55bf67c4abd0740a8bd8a02a9f221f0c59b3173394e932f8ab6388478b83e6dfb07fa870ef22469bdcc62e999ae21fdacb1233c59794dc580678a87dc4a4bce67abe0d175c2289960a6214b92aeea1dcfd5da85bf61b5df6146729668f694d04dfd39ed77a7bf860a6255bb654ba84ba8a0fc7b1ec0b1cc04663735ecd1214", 0x96}], 0x6, &(0x7f0000000280)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9a}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x17, 0xab, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @empty]}, @lsrr={0x83, 0x2b, 0x28, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1, @loopback, @loopback, @loopback]}, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0x2, [{@remote, 0x7}, {@broadcast, 0xffff0000}, {@loopback, 0x4}]}, @cipso={0x86, 0x28, 0x3, [{0x7, 0x3, "88"}, {0x7, 0xc, "29b518264e970ed9aa74"}, {0x2, 0x4, "1412"}, {0x1, 0x8, 'tg\"Q1}'}, {0x1, 0x2}, {0x2, 0x5, "b07224"}]}]}}}], 0x118}}], 0x1, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x6, 0x0, 0x9, 0xc, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x0, 0x4bfffffe}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3381}}]}, 0x60}}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002b80)=@base={0x3, 0x4, 0x3, 0xb7, 0x9008, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r3) (async) close(r3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002c00)={&(0x7f0000000180)="8dd4962ba826247814fb3b0453b4d8a47c49e645c1d0b4246177fb32cd871fe9ce2036749e7b86510410e38d5d2ea6422e3ec42cfc436066dc2b95c9e363002bac8136efc67739320a36d72cdf5d60fc23b2f4abc745795a41f2379f15c316f7797bf2853eb9eae82fd99420b9d8853aef92135b80366085c87c6872ee3b83d97bdd58c65f86300b3fe5a732dcff4612a333de8c99dd01a65f674b8c9b14f6641cca6bff425c2879bc711115a591dc3f6a42", &(0x7f0000000240)=""/1, &(0x7f0000001a80)="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", &(0x7f0000002a80)="33bc58fe4d1f3dd0900c91d46f53aad2ab09d35bbf9fd83565e2a3525d42edafdf003805550b0eeb421cd814c9a85b5c230f4c9c0ec65a19163709acc922be11af0044343ab42afb150100f0a3167aeede0a89d4cfab17e032bba19b01163f363ba693b5cda801d4a0f0487382aef9ac3c1a0520d2d68937e1d29aef93c6cd91af64a22e73311c41ca9b51db5ff75ce680902b4bfec3ea029190b7e00e218bbb70a3305718560a8d6bd67471c46785b6fe6fe35df2cef2af532077f3c5fbb2ede45de41cfc1a389b51b3e83674e2ab7460cdbb4ace72e9", 0x20080, r2, 0x4}, 0x38) kernel console output (not intermixed with test programs): e type 1 has an invalid length. [ 321.260369][T13950] __nla_validate_parse: 1 callbacks suppressed [ 321.260387][T13950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2616'. [ 321.419398][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2620'. [ 321.501481][T13961] xt_TCPMSS: Only works on TCP SYN packets [ 321.631436][T13969] netlink: 'syz.1.2622': attribute type 27 has an invalid length. [ 322.096182][T13959] tipc: Enabled bearer , priority 0 [ 322.154928][T13973] syzkaller0: entered promiscuous mode [ 322.217521][T13973] syzkaller0: entered allmulticast mode [ 322.490949][T13973] tipc: Resetting bearer [ 322.693895][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2633'. [ 322.713854][T14003] Bluetooth: MGMT ver 1.23 [ 322.833159][T14007] syzkaller0: entered promiscuous mode [ 322.863882][T14007] syzkaller0: entered allmulticast mode [ 323.011933][T13957] tipc: Resetting bearer [ 323.087333][T13957] tipc: Disabling bearer [ 323.247988][T14012] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 324.034650][T14031] netlink: 'syz.5.2642': attribute type 2 has an invalid length. [ 324.043338][T14031] netlink: 'syz.5.2642': attribute type 8 has an invalid length. [ 324.056072][T14031] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2642'. [ 324.099333][T14028] batadv_slave_0: Caught tx_queue_len zero misconfig [ 324.148388][T14035] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 324.360849][T14042] syzkaller0: entered promiscuous mode [ 324.378226][T14042] syzkaller0: entered allmulticast mode [ 324.395608][T14042] tipc: Started in network mode [ 324.414861][T14042] tipc: Node identity b2db119f0242, cluster identity 4711 [ 324.439928][T14042] tipc: Enabled bearer , priority 0 [ 324.537107][T14048] tipc: Resetting bearer [ 324.613402][T14048] tipc: Disabling bearer [ 324.676831][T14062] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 324.987542][T14072] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.2654'. [ 325.138806][T14076] netlink: 'syz.5.2654': attribute type 1 has an invalid length. [ 325.518726][T14093] macvlan2: entered promiscuous mode [ 325.524849][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'. [ 325.539368][T14093] batadv0: entered promiscuous mode [ 325.553385][T14093] macvlan2: entered allmulticast mode [ 325.574198][T14093] batadv0: entered allmulticast mode [ 325.591974][T14093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.612437][T14093] batadv0: left allmulticast mode [ 325.625543][T14093] batadv0: left promiscuous mode [ 325.823030][T14100] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 325.832808][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 325.946700][T14103] tipc: Can't bind to reserved service type 0 [ 326.026249][T14103] bond1 (unregistering): Released all slaves [ 326.172291][T14111] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 326.194999][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2668'. [ 326.301674][T14117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.462908][T14117] lo speed is unknown, defaulting to 1000 [ 326.512364][T14117] wlan0 speed is unknown, defaulting to 1000 [ 326.773916][T14137] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 327.058754][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2680'. [ 327.418274][ T29] audit: type=1800 audit(1785338716.041:8): pid=14162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2682" name="r" dev="tmpfs" ino=2975 res=0 errno=0 [ 327.429131][T14160] netlink: 'syz.0.2685': attribute type 4 has an invalid length. [ 327.494166][T14161] team0: Device vlan2 is already an upper device of the team interface [ 327.624695][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 327.897234][T14177] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 328.034257][T14145] netlink: 'syz.3.2678': attribute type 28 has an invalid length. [ 328.083626][T14145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2678'. [ 328.261536][T14188] lo speed is unknown, defaulting to 1000 [ 328.287621][T14188] wlan0 speed is unknown, defaulting to 1000 [ 328.677665][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2698'. [ 329.069696][T14217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.231581][T14224] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 329.278809][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 329.621307][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2709'. [ 329.731089][T14243] syzkaller0: entered promiscuous mode [ 329.736793][T14243] syzkaller0: entered allmulticast mode [ 329.905944][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2712'. [ 330.066764][T14226] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 330.318223][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2717'. [ 330.369430][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'. [ 330.415552][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'. [ 331.389910][ T5626] Bluetooth: hci0: command 0x080f tx timeout [ 331.682635][T14303] netlink: 'syz.5.2732': attribute type 12 has an invalid length. [ 331.925037][T14320] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 331.956780][T14321] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 332.083002][T14331] __nla_validate_parse: 5 callbacks suppressed [ 332.083021][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 332.103218][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2740'. [ 332.117629][T14331] netlink: 'syz.3.2740': attribute type 12 has an invalid length. [ 332.127743][T14331] netlink: 'syz.3.2740': attribute type 13 has an invalid length. [ 332.579103][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 332.588320][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2743'. [ 332.601395][T14346] netlink: 'syz.5.2743': attribute type 14 has an invalid length. [ 332.656013][T14352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2746'. [ 332.845082][T14360] TC_ACT_REPEAT abuse ? [ 333.078021][T14371] netlink: 'syz.3.2752': attribute type 13 has an invalid length. [ 333.100785][T14371] netlink: 'syz.3.2752': attribute type 27 has an invalid length. [ 333.255997][T14371] batadv1: entered promiscuous mode [ 333.274055][T14371] batadv1: entered allmulticast mode [ 333.386772][T14384] lo speed is unknown, defaulting to 1000 [ 333.394086][T14384] wlan0 speed is unknown, defaulting to 1000 [ 333.558673][T14389] syzkaller0: entered promiscuous mode [ 333.564270][T14389] syzkaller0: entered allmulticast mode [ 333.578077][T14389] tipc: Enabled bearer , priority 0 [ 333.640080][T14388] tipc: Resetting bearer [ 333.654541][T14394] x_tables: duplicate underflow at hook 1 [ 333.664982][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2757'. [ 333.697227][T14388] tipc: Disabling bearer [ 333.730046][T14392] sock: sock_set_timeout: `syz.3.2756' (pid 14392) tries to set negative timeout [ 333.756867][T14392] pimreg: tun_chr_ioctl cmd 1074025677 [ 333.768056][T14392] pimreg: linktype set to 270 [ 334.117169][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 334.401354][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2768'. [ 334.545236][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'. [ 334.902085][T14452] syzkaller1: entered promiscuous mode [ 334.908414][T14452] syzkaller1: entered allmulticast mode [ 334.920965][T14452] openvswitch: netlink: IPv4 tun info is not correct [ 335.385206][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 335.549813][T14480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.694941][T14489] rdma_rxe: Failed to create IPv4 UDP tunnel [ 335.805538][T14499] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 336.234363][T14492] infiniband syz1: set down [ 336.240739][T14492] infiniband syz1: added syz_tun [ 336.249806][T14492] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 336.253780][T14492] infiniband syz1: Couldn't open port 1 [ 336.276987][T14492] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 336.319547][T14492] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 336.361079][T14492] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 336.497871][T14492] RDS/IB: syz1: added [ 336.506700][T14492] smc: adding ib device syz1 with port count 1 [ 336.521456][T14492] smc: ib device syz1 port 1 has no pnetid [ 336.609257][T14521] syzkaller0: entered promiscuous mode [ 336.619057][T14521] syzkaller0: entered allmulticast mode [ 338.521478][T14571] ip6erspan0: entered allmulticast mode [ 338.688290][T14579] __nla_validate_parse: 7 callbacks suppressed [ 338.688309][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2818'. [ 338.733293][T14579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2818'. [ 339.373279][T14600] tipc: Enabled bearer , priority 0 [ 339.381202][T14600] syzkaller0: entered promiscuous mode [ 339.386975][T14600] syzkaller0: entered allmulticast mode [ 339.418338][T14600] tipc: Resetting bearer [ 339.441877][T14599] tipc: Resetting bearer [ 339.493417][T14599] tipc: Disabling bearer [ 340.496063][T14636] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2837'. [ 340.771802][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 340.937123][T14656] netlink: 420 bytes leftover after parsing attributes in process `syz.3.2842'. [ 341.387924][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2848'. [ 342.474745][ T9739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.475278][T14710] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2858'. [ 342.496448][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2859'. [ 342.507993][ T9739] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.518756][ T9739] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.527426][ T9739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.536382][ T9739] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.536399][T14713] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 342.767516][T14725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2860'. [ 343.086681][T14709] lo speed is unknown, defaulting to 1000 [ 343.112342][T14709] wlan0 speed is unknown, defaulting to 1000 [ 343.266426][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2863'. [ 343.482330][T14742] ip6gre2: entered promiscuous mode [ 343.487617][T14742] ip6gre2: entered allmulticast mode [ 343.495763][T14742] sctp: [Deprecated]: syz.3.2865 (pid 14742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.495763][T14742] Use struct sctp_sack_info instead [ 343.512624][T14744] sctp: [Deprecated]: syz.3.2865 (pid 14744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.512624][T14744] Use struct sctp_sack_info instead [ 343.731347][T14760] __nla_validate_parse: 1 callbacks suppressed [ 343.731367][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 343.785713][T14709] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.794196][T14709] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.801556][T14709] bridge_slave_0: entered allmulticast mode [ 343.810128][T14709] bridge_slave_0: entered promiscuous mode [ 343.819177][T14709] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.826375][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.834384][T14709] bridge_slave_1: entered allmulticast mode [ 343.842138][T14709] bridge_slave_1: entered promiscuous mode [ 343.877392][T14709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.890487][T14709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.925867][T14709] team0: Port device team_slave_0 added [ 343.933856][T14709] team0: Port device team_slave_1 added [ 343.962930][T14709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.970397][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.997213][T14709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.010734][ T1129] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.020591][ T1129] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.029144][T14709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.036319][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.062757][ T995] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.071998][T14709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.120218][T14709] hsr_slave_0: entered promiscuous mode [ 344.126636][T14709] hsr_slave_1: entered promiscuous mode [ 344.132978][T14709] debugfs: 'hsr0' already exists in 'hsr' [ 344.138826][T14709] Cannot create hsr debugfs directory [ 344.588966][ T5626] Bluetooth: hci6: command tx timeout [ 344.749423][ T7507] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.804863][T14690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.918885][T14709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.942443][T14762] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2867'. [ 344.957019][T14709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.980143][T14709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.999191][ T995] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.009254][T14709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.027018][T14709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.047847][T14709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.071314][T14709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.112760][T14709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.143149][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2870'. [ 345.153994][T14766] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.218426][T14781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2870'. [ 345.232732][T14769] syzkaller0: entered promiscuous mode [ 345.257654][T14769] syzkaller0: entered allmulticast mode [ 345.280924][T14784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2870'. [ 345.363141][T14767] bridge0: entered allmulticast mode [ 345.373281][T14767] vlan2: left allmulticast mode [ 345.382771][T14767] geneve0: left allmulticast mode [ 345.395697][T14767] bridge0: port 3(vlan2) entered disabled state [ 345.501675][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'. [ 345.754274][T14709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.795896][T14709] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.812310][T12805] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.819529][T12805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.857163][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 345.868952][T12805] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.876149][T12805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.887998][T14806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.905166][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 345.940504][T14807] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2876'. [ 346.200578][T14821] syzkaller0: entered promiscuous mode [ 346.213667][T14821] syzkaller0: entered allmulticast mode [ 346.434476][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2883'. [ 346.669537][ T5626] Bluetooth: hci6: command tx timeout [ 346.698491][ T29] audit: type=1800 audit(1785338735.321:9): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2885" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2887 res=0 errno=0 [ 346.757776][T14709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.053923][T14855] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 347.122027][T14709] veth0_vlan: entered promiscuous mode [ 347.156597][T14709] veth1_vlan: entered promiscuous mode [ 347.183791][T14857] SET target dimension over the limit! [ 347.214577][T14709] veth0_macvtap: entered promiscuous mode [ 347.225079][T14709] veth1_macvtap: entered promiscuous mode [ 347.249701][T14709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.282357][T14709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.313831][T12805] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.332476][T12805] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.345545][T12805] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.356446][T12805] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.632486][T14864] macsec2: entered promiscuous mode [ 347.637855][T14864] macsec0: entered promiscuous mode [ 347.644899][T14864] macsec0: left promiscuous mode [ 348.428710][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.748710][ T5626] Bluetooth: hci6: command tx timeout [ 348.957788][T14810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.104968][T12805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.129782][T12805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.215660][T12805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.243177][T12805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.332883][T14881] syzkaller1: entered promiscuous mode [ 349.349380][T14881] syzkaller1: entered allmulticast mode [ 349.397908][T14881] macvlan0: entered allmulticast mode [ 349.415697][T14881] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 349.465969][T14890] __nla_validate_parse: 3 callbacks suppressed [ 349.465987][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'. [ 349.535866][T14890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2897'. [ 349.600040][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2897'. [ 349.658702][T14885] syzkaller1: entered promiscuous mode [ 349.676931][T14885] syzkaller1: entered allmulticast mode [ 349.907701][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 349.947760][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 349.978904][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 350.167729][ T5626] block nbd0: Receive control failed (result -1) [ 350.411357][T14923] netlink: 'syz.6.2908': attribute type 1 has an invalid length. [ 350.422298][T14923] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 350.435533][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 350.876681][ T5626] Bluetooth: hci6: command tx timeout [ 351.073164][T14933] syzkaller0: entered promiscuous mode [ 351.089726][T14933] syzkaller0: entered allmulticast mode [ 351.277544][T14952] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 351.329114][T14954] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 351.386478][T14960] netlink: 'syz.0.2921': attribute type 1 has an invalid length. [ 351.399268][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2919'. [ 351.473161][T14956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2920'. [ 351.537772][T14968] netlink: 'syz.4.2920': attribute type 1 has an invalid length. [ 351.596291][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 353.212305][T14954] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 353.322865][T14961] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.338908][T14961] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.497938][T14961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.515722][T14961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.702623][T14968] bond4: entered promiscuous mode [ 353.711137][T14968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.723302][T14970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.751601][ T5778] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.768945][ T5778] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.789719][ T5778] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.818903][ T5778] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.877900][T14979] lo speed is unknown, defaulting to 1000 [ 353.894916][T14979] wlan0 speed is unknown, defaulting to 1000 [ 354.143290][ T5626] block nbd3: Receive control failed (result -32) [ 354.284114][T15014] team0 (unregistering): Port device team_slave_0 removed [ 354.324643][T15014] team0 (unregistering): Port device team_slave_1 removed [ 354.589439][T15030] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:65533 [ 354.613761][T15030] __nla_validate_parse: 7 callbacks suppressed [ 354.613780][T15030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2939'. [ 354.814471][T15035] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 354.871793][T15039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2941'. [ 354.902541][T15035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 354.931921][T15039] bond5: entered allmulticast mode [ 355.257502][T15043] x_tables: duplicate underflow at hook 2 [ 355.641985][T15050] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2947'. [ 355.825458][T15068] netlink: 'syz.5.2948': attribute type 1 has an invalid length. [ 356.101490][T15072] bond1: (slave geneve2): making interface the new active one [ 356.111628][T15072] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 356.121720][ T5778] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 356.148248][ T5778] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 356.176867][ T5778] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 356.356090][T15091] lo speed is unknown, defaulting to 1000 [ 356.375825][T15091] wlan0 speed is unknown, defaulting to 1000 [ 357.043647][T15122] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.220416][T15135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2972'. [ 357.311286][T15136] 0: reclassify loop, rule prio 0, protocol 03 [ 357.374653][T15142] netlink: 'syz.6.2972': attribute type 1 has an invalid length. [ 357.546659][T15145] lo speed is unknown, defaulting to 1000 [ 357.552762][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 357.567379][T15146] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 357.589886][T15145] wlan0 speed is unknown, defaulting to 1000 [ 358.853731][T15177] netlink: 'syz.6.2982': attribute type 3 has an invalid length. [ 359.414029][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2987'. [ 360.221980][T15223] syzkaller1: entered promiscuous mode [ 360.244425][T15223] syzkaller1: entered allmulticast mode [ 360.316256][T15223] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2997'. [ 360.351185][ T9739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.364920][ T9739] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.377068][ T9739] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.387041][ T9739] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.395613][ T9739] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.643204][T15231] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2998'. [ 360.668714][T15234] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2998'. [ 360.685839][T15231] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2998'. [ 360.703928][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2998'. [ 360.826692][T15231] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2998'. [ 361.118226][T15245] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 361.136856][T15245] tap0: tun_chr_ioctl cmd 1074025677 [ 361.157759][T15245] tap0: linktype set to 6 [ 361.314676][T15225] lo speed is unknown, defaulting to 1000 [ 361.337052][T15225] wlan0 speed is unknown, defaulting to 1000 [ 361.479927][T15252] xt_hashlimit: size too large, truncated to 1048576 [ 361.936718][T15270] bond1: invalid ARP target 0.0.0.0 specified for addition [ 361.955714][T15270] bond1: option arp_ip_target: invalid value (0) [ 361.988357][T15270] bond1 (unregistering): Released all slaves [ 362.056287][T15274] bridge_slave_1: Caught tx_queue_len zero misconfig [ 362.428823][ T5626] Bluetooth: hci7: command tx timeout [ 362.507280][T15295] netlink: 'syz.3.3015': attribute type 1 has an invalid length. [ 362.711998][T15304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3017'. [ 362.956320][T15225] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.965164][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.973987][T15225] bridge_slave_0: entered allmulticast mode [ 362.984471][T15225] bridge_slave_0: entered promiscuous mode [ 362.993719][T15225] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.005360][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.013594][T15225] bridge_slave_1: entered allmulticast mode [ 363.024674][T15225] bridge_slave_1: entered promiscuous mode [ 363.087316][T15225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.106371][T15225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.206057][T15225] team0: Port device team_slave_0 added [ 363.233374][T15225] team0: Port device team_slave_1 added [ 363.374945][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3026'. [ 363.412817][T15225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.420507][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.475685][T15225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.505964][T15225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.522431][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.549116][T15225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.567254][T15349] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3026'. [ 363.622442][T15337] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3026'. [ 363.667068][T15346] netlink: 'syz.5.3031': attribute type 1 has an invalid length. [ 363.701061][T15225] hsr_slave_0: entered promiscuous mode [ 363.708020][T15225] hsr_slave_1: entered promiscuous mode [ 363.714939][T15225] debugfs: 'hsr0' already exists in 'hsr' [ 363.721809][T15225] Cannot create hsr debugfs directory [ 363.727689][T15341] : renamed from bond0 [ 364.494076][T15371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.509025][ T5626] Bluetooth: hci7: command tx timeout [ 364.848733][T15225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.892130][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.919620][T15225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.958867][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.971745][T15225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.997895][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.034706][T15225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.055364][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.313189][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.384276][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.397615][T15413] __nla_validate_parse: 5 callbacks suppressed [ 365.397633][T15413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3051'. [ 365.434326][T12805] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.441551][T12805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.462470][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.469721][ T5778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.617812][T15425] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3055'. [ 365.641160][T15425]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.676128][T15425]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.700433][T15425]  (unregistering): Released all slaves [ 365.837885][T15428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3056'. [ 365.861660][T15428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3056'. [ 366.286748][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.450993][T15225] veth0_vlan: entered promiscuous mode [ 366.473620][T15225] veth1_vlan: entered promiscuous mode [ 366.557363][T15225] veth0_macvtap: entered promiscuous mode [ 366.579889][T15225] veth1_macvtap: entered promiscuous mode [ 366.589066][ T5626] Bluetooth: hci7: command tx timeout [ 366.634479][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.683806][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.688720][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3066'. [ 366.714892][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.721378][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3067'. [ 366.751161][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.789035][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.807361][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.861680][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 367.154529][ T5778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.185904][ T5778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.272662][T15489] macsec1: entered promiscuous mode [ 367.304711][T15489] bridge0: entered promiscuous mode [ 367.386499][T12805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.425400][T12805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.475762][T15498] tipc: Started in network mode [ 367.488507][T15498] tipc: Node identity ac14140f, cluster identity 4711 [ 367.508748][T15498] tipc: New replicast peer: 255.255.255.255 [ 367.519585][T15498] tipc: Enabled bearer , priority 10 [ 367.677166][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3078'. [ 367.700626][T12637] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.713756][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'. [ 367.859563][T12637] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.939572][T15520] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.159341][T12637] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.519304][ T9] tipc: Node number set to 2886997007 [ 368.540027][T15550] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 368.669625][ T9739] Bluetooth: hci7: command tx timeout [ 368.857184][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'. [ 369.491852][T15595] netlink: 'syz.0.3104': attribute type 13 has an invalid length. [ 369.913039][T15624] netlink: 'syz.6.3113': attribute type 1 has an invalid length. [ 370.503353][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.510742][ T4937] Bluetooth: hci4: command 0x0405 tx timeout [ 370.534395][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.542685][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.555250][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.567277][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.665216][T15660] sctp: [Deprecated]: syz.6.3123 (pid 15660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.665216][T15660] Use struct sctp_sack_info instead [ 370.773313][ T1129] smc: removing ib device syz1 [ 370.818254][ T1129] smbdirect: ib_dev[syz1] removed [ 371.283546][T15651] lo speed is unknown, defaulting to 1000 [ 371.329826][T15651] wlan0 speed is unknown, defaulting to 1000 [ 371.478765][T15676] __nla_validate_parse: 6 callbacks suppressed [ 371.478783][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 372.462968][T15602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.669196][ T5626] Bluetooth: hci3: command tx timeout [ 372.713774][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.723586][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.732352][T15651] bridge_slave_0: entered allmulticast mode [ 372.760863][T15651] bridge_slave_0: entered promiscuous mode [ 372.775299][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.791804][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.809613][T15651] bridge_slave_1: entered allmulticast mode [ 372.840699][T15651] bridge_slave_1: entered promiscuous mode [ 372.867167][T15700] netlink: 'syz.3.3130': attribute type 1 has an invalid length. [ 373.087942][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.129333][T15692] lo speed is unknown, defaulting to 1000 [ 373.144616][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.218776][T15692] wlan0 speed is unknown, defaulting to 1000 [ 373.311217][T15651] team0: Port device team_slave_0 added [ 373.366693][T15651] team0: Port device team_slave_1 added [ 373.418579][T15709] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20003 [ 373.459852][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3134'. [ 373.622081][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.631200][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.657883][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.699057][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.706206][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.733078][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.775001][T15719] syzkaller0: entered promiscuous mode [ 373.800031][T15719] syzkaller0: entered allmulticast mode [ 373.992813][T15651] hsr_slave_0: entered promiscuous mode [ 374.021258][T15651] hsr_slave_1: entered promiscuous mode [ 374.042848][T15651] debugfs: 'hsr0' already exists in 'hsr' [ 374.066477][T15651] Cannot create hsr debugfs directory [ 374.077571][T15729] raw_sendmsg: syz.6.3139 forgot to set AF_INET. Fix it! [ 374.096017][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 374.492409][T15751] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3148'. [ 374.749237][ T5626] Bluetooth: hci3: command tx timeout [ 376.109755][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 376.523312][T15777] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 376.538729][T15777] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3154'. [ 376.605749][T15775] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 376.622261][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'. [ 376.669911][T15788] netlink: 'syz.3.3154': attribute type 2 has an invalid length. [ 376.712284][T15788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3154'. [ 376.829834][ T5626] Bluetooth: hci3: command tx timeout [ 376.869073][T15788] : entered promiscuous mode [ 376.988039][T15807] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 377.051742][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3162'. [ 377.073749][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3162'. [ 377.092435][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 377.117941][T15806] macvtap2: entered promiscuous mode [ 377.123842][T15806] bond0: entered promiscuous mode [ 377.129295][T15806] bond_slave_0: entered promiscuous mode [ 377.135268][T15806] bond_slave_1: entered promiscuous mode [ 377.141764][T15806] macvtap2: entered allmulticast mode [ 377.147361][T15806] bond0: entered allmulticast mode [ 377.165500][T15806] bond_slave_0: entered allmulticast mode [ 377.172802][T15806] bond_slave_1: entered allmulticast mode [ 377.186845][T15806] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 377.238179][T15810] macvtap3: entered promiscuous mode [ 377.260066][T15810] macvtap3: entered allmulticast mode [ 377.267415][T15810] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 377.343083][T15651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.354787][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.373294][T15651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.412639][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.421906][T15651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.440421][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.456985][T15651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.495353][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.666569][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.713888][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.737002][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.744302][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.761317][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.768536][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.192786][T15857] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3175'. [ 378.425040][T15868] syzkaller0: entered promiscuous mode [ 378.431387][T15868] syzkaller0: entered allmulticast mode [ 378.468895][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.689064][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.695508][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.768988][T15651] veth0_vlan: entered promiscuous mode [ 378.781917][T15651] veth1_vlan: entered promiscuous mode [ 378.812539][T15651] veth0_macvtap: entered promiscuous mode [ 378.823179][T15651] veth1_macvtap: entered promiscuous mode [ 378.842242][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.856889][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.872327][T12810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.882034][T12810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.893786][T12810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.903958][T12810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.913145][ T5626] Bluetooth: hci3: command tx timeout [ 379.928172][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3181'. [ 379.937772][T15880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3181'. [ 379.948036][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3181'. [ 379.962983][T15880] netlink: 'syz.6.3181': attribute type 6 has an invalid length. [ 380.793387][T15835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.903006][ T5778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.943814][ T5778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.032275][T15898] FAULT_INJECTION: forcing a failure. [ 381.032275][T15898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.050523][T12810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.067181][T15898] CPU: 1 UID: 0 PID: 15898 Comm: syz.0.3187 Not tainted syzkaller #0 PREEMPT(full) [ 381.067210][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.067232][T15898] Call Trace: [ 381.067241][T15898] [ 381.067250][T15898] dump_stack_lvl+0xe8/0x150 [ 381.067289][T15898] should_fail_ex+0x40c/0x560 [ 381.067323][T15898] _copy_to_user+0x31/0xb0 [ 381.067347][T15898] simple_read_from_buffer+0xe1/0x170 [ 381.067382][T15898] proc_fail_nth_read+0x1bb/0x230 [ 381.067418][T15898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.067453][T15898] ? rw_verify_area+0x24a/0x4c0 [ 381.067489][T15898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.067519][T15898] vfs_read+0x213/0xa80 [ 381.067546][T15898] ? __pfx___mutex_lock+0x10/0x10 [ 381.067576][T15898] ? __pfx_vfs_read+0x10/0x10 [ 381.067600][T15898] ? __fget_files+0x2a/0x420 [ 381.067634][T15898] ? __fget_files+0x3a2/0x420 [ 381.067663][T15898] ? __fget_files+0x2a/0x420 [ 381.067703][T15898] ksys_read+0x150/0x270 [ 381.067727][T15898] ? __pfx_ksys_read+0x10/0x10 [ 381.067768][T15898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.067792][T15898] do_syscall_64+0x174/0x580 [ 381.067819][T15898] ? trace_irq_disable+0x3b/0x140 [ 381.067848][T15898] ? clear_bhb_loop+0x40/0x90 [ 381.067875][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.067897][T15898] RIP: 0033:0x7fb12475e6ce [ 381.067917][T15898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.067936][T15898] RSP: 002b:00007fb125638fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.067964][T15898] RAX: ffffffffffffffda RBX: 00007fb1256396c0 RCX: 00007fb12475e6ce [ 381.067980][T15898] RDX: 000000000000000f RSI: 00007fb1256390a0 RDI: 000000000000000d [ 381.068000][T15898] RBP: 00007fb125639090 R08: 0000000000000000 R09: 0000000000000000 [ 381.068014][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.068026][T15898] R13: 00007fb124a26038 R14: 00007fb124a25fa0 R15: 00007fff1279d3d8 [ 381.068064][T15898] [ 381.076026][T12810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.380353][T15904] netlink: 'syz.5.3190': attribute type 1 has an invalid length. [ 381.511505][T15904] bond2: entered promiscuous mode [ 381.518140][T15904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.560313][T15924] xt_connbytes: Forcing CT accounting to be enabled [ 381.723804][T15908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.770504][T15908] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 381.792361][T15908] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 381.856780][T15908] bond2: (slave gre1): making interface the new active one [ 381.885271][T15908] gre1: entered promiscuous mode [ 381.932377][T15908] bond2: (slave gre1): Enslaving as an active interface with an up link [ 382.053765][T15935] __nla_validate_parse: 1 callbacks suppressed [ 382.053780][T15935] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3194'. [ 382.186407][T15939] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 382.241117][T15939] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 382.283148][ T9739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.297257][ T9739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.310896][ T9739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.321863][ T9739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.333369][ T9739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.433808][T15950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3198'. [ 382.648021][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 382.682469][T15956] ipvlan1: entered promiscuous mode [ 382.705277][T15956] ipvlan1: entered allmulticast mode [ 382.712084][T15956] veth0_vlan: entered allmulticast mode [ 382.735486][T15955] tc action pedit 'at' offset 6 out of bounds [ 382.739842][T15952] tipc: Enabled bearer , priority 0 [ 382.840974][T15952] tipc: Disabling bearer [ 382.934540][T15955] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 382.942090][T12805] IPVS: starting estimator thread 0... [ 383.038557][T15965] IPVS: using max 28 ests per chain, 67200 per kthread [ 383.053557][T15944] lo speed is unknown, defaulting to 1000 [ 383.072057][T15944] wlan0 speed is unknown, defaulting to 1000 [ 383.297702][T15944] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.305091][T15944] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.312771][T15944] bridge_slave_0: entered allmulticast mode [ 383.321321][T15944] bridge_slave_0: entered promiscuous mode [ 383.329903][T15944] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.337308][T15944] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.345127][T15944] bridge_slave_1: entered allmulticast mode [ 383.352784][T15944] bridge_slave_1: entered promiscuous mode [ 383.382665][T15944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.396213][T15944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.428342][T15944] team0: Port device team_slave_0 added [ 383.436665][T15944] team0: Port device team_slave_1 added [ 383.463350][T15944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.470524][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.497018][T15944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.510878][T15944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.517863][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.544672][T15944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.589653][T15944] hsr_slave_0: entered promiscuous mode [ 383.596043][T15944] hsr_slave_1: entered promiscuous mode [ 383.602372][T15944] debugfs: 'hsr0' already exists in 'hsr' [ 383.608131][T15944] Cannot create hsr debugfs directory [ 384.027378][T15944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.040506][T15944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.052098][T15944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.064749][T15944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.073538][T15944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.083379][T15944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.091656][T15944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.102304][T15944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.175447][T15944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.199598][T15944] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.212930][T12804] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.220077][T12804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.234294][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.241472][ T5778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.351049][ T5626] Bluetooth: hci2: command tx timeout [ 384.597446][T15944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.641693][T15944] veth0_vlan: entered promiscuous mode [ 384.655023][T15944] veth1_vlan: entered promiscuous mode [ 384.688754][T15944] veth0_macvtap: entered promiscuous mode [ 384.699087][T15944] veth1_macvtap: entered promiscuous mode [ 384.719521][T15944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.731582][T15944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.751944][T12804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.761860][T12804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.773871][T12804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.783052][T12804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.875126][ T5778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.884618][ T5778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.918133][T12805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.926671][T12805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.429781][ T5626] Bluetooth: hci2: command tx timeout [ 388.508648][ T5626] Bluetooth: hci2: command tx timeout [ 390.589119][ T5626] Bluetooth: hci2: command tx timeout [ 413.870738][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 421.620271][T16001] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3202'. [ 421.708739][ T9739] Bluetooth: hci5: command 0x0405 tx timeout [ 421.795099][T15996] lo speed is unknown, defaulting to 1000 [ 421.814372][T16013] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3206'. [ 421.880957][T16018] netlink: 'syz.6.3208': attribute type 1 has an invalid length. [ 421.893991][T16014] bond3: entered allmulticast mode [ 421.902696][T15996] wlan0 speed is unknown, defaulting to 1000 [ 421.955023][T16017] macvlan5: entered promiscuous mode [ 422.001438][T16017] macvlan5: entered allmulticast mode [ 422.023642][T16017] bond3: (slave macvlan5): Opening slave failed [ 422.270066][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3212'. [ 422.311205][T16046] netlink: 'syz.5.3215': attribute type 1 has an invalid length. [ 422.440509][T16046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.560632][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3219'. [ 422.721220][T16053] bond4: (slave geneve3): making interface the new active one [ 422.731229][T16053] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 422.752885][T16053] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 422.766939][ T1129] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 422.794618][ T1129] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 422.848678][ T1129] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.555336][T16111] netlink: 'syz.0.3235': attribute type 21 has an invalid length. [ 423.564189][T16111] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3235'. [ 423.574020][T16111] netlink: 'syz.0.3235': attribute type 4 has an invalid length. [ 423.589537][T16111] netlink: 'syz.0.3235': attribute type 5 has an invalid length. [ 423.597438][T16111] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3235'. [ 423.698966][T16115] syzkaller0: entered promiscuous mode [ 423.705599][T16115] syzkaller0: entered allmulticast mode [ 423.721933][T16115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3236'. [ 423.731940][T16115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3236'. [ 423.774733][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3238'. [ 424.391823][T16152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3246'. [ 425.121567][T16167] netlink: 'syz.3.3251': attribute type 7 has an invalid length. [ 425.131401][T16167] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 426.091684][T16090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.675477][T16197] __nla_validate_parse: 1 callbacks suppressed [ 426.675497][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3254'. [ 426.936526][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3262'. [ 426.966752][T16197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.064625][T16199] vlan2: entered allmulticast mode [ 427.101567][T16199] erspan0: entered allmulticast mode [ 427.122027][T16199] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 427.551258][T16223] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3265'. [ 427.595419][T16225] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3266'. [ 427.641484][T16228] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3267'. [ 428.025740][T16249] netlink: 'syz.6.3274': attribute type 1 has an invalid length. [ 428.046017][T16249] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3274'. [ 428.072191][T16248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3275'. [ 428.244011][T16259] netlink: 'syz.6.3277': attribute type 1 has an invalid length. [ 428.319626][T16259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.393228][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3277'. [ 428.484344][T16265] vlan2: entered promiscuous mode [ 428.508537][T16265] bond1: entered promiscuous mode [ 428.524496][T16265] vlan2: entered allmulticast mode [ 428.546509][T16265] bond1: entered allmulticast mode [ 428.622991][T16273] tc_dump_action: action bad kind [ 428.792603][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3281'. [ 428.835770][T16279] netlink: 'syz.6.3281': attribute type 3 has an invalid length. [ 429.095031][T16287] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3285'. [ 429.143415][T16289] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 429.688334][T16318] FAULT_INJECTION: forcing a failure. [ 429.688334][T16318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.716930][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.6.3293 Not tainted syzkaller #0 PREEMPT(full) [ 429.716959][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 429.716971][T16318] Call Trace: [ 429.716980][T16318] [ 429.716997][T16318] dump_stack_lvl+0xe8/0x150 [ 429.717045][T16318] should_fail_ex+0x40c/0x560 [ 429.717082][T16318] _copy_from_user+0x2d/0xb0 [ 429.717123][T16318] copy_from_sockptr_offset+0x66/0xa0 [ 429.717160][T16318] tls_setsockopt+0xf73/0x1710 [ 429.717201][T16318] ? __pfx_tls_setsockopt+0x10/0x10 [ 429.717244][T16318] ? __fget_files+0x2a/0x420 [ 429.717271][T16318] ? aa_sock_opt_perm+0xff/0x1a0 [ 429.717298][T16318] ? sock_common_setsockopt+0x36/0xc0 [ 429.717331][T16318] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 429.717366][T16318] do_sock_setsockopt+0x17c/0x1b0 [ 429.717397][T16318] __x64_sys_setsockopt+0x13d/0x1b0 [ 429.717424][T16318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.717448][T16318] do_syscall_64+0x174/0x580 [ 429.717474][T16318] ? trace_irq_disable+0x3b/0x140 [ 429.717503][T16318] ? clear_bhb_loop+0x40/0x90 [ 429.717531][T16318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.717553][T16318] RIP: 0033:0x7febab59de99 [ 429.717574][T16318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.717592][T16318] RSP: 002b:00007febac509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.717615][T16318] RAX: ffffffffffffffda RBX: 00007febab825fa0 RCX: 00007febab59de99 [ 429.717632][T16318] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 429.717644][T16318] RBP: 00007febac509090 R08: 0000000000000038 R09: 0000000000000000 [ 429.717657][T16318] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.717671][T16318] R13: 00007febab826038 R14: 00007febab825fa0 R15: 00007fff8a2c3278 [ 429.717728][T16318] [ 430.243303][T16334] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 430.291564][T16334] bond1: entered promiscuous mode [ 430.298318][T16334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.373557][T16334] bond1: (slave veth3): making interface the new active one [ 430.382905][T16334] veth3: entered promiscuous mode [ 430.390966][T16334] bond1: (slave veth3): Enslaving as an active interface with an up link [ 430.422112][T16337] netlink: 'syz.3.3299': attribute type 7 has an invalid length. [ 430.716542][T16358] netlink: 'syz.5.3305': attribute type 1 has an invalid length. [ 430.747722][T16365] netlink: 'syz.3.3306': attribute type 1 has an invalid length. [ 430.933370][T16367] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 430.966165][T16370] xfrm1: entered promiscuous mode [ 431.002204][T16372] 8021q: adding VLAN 0 to HW filter on device bond5 [ 431.002569][T12804] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.132650][T12804] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.532714][T16401] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 433.315321][T16401] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 433.611715][T16435] __nla_validate_parse: 10 callbacks suppressed [ 433.611735][T16435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3320'. [ 433.689009][T16435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.707832][T16440] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 434.149744][T16462] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3329'. [ 434.397320][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3336'. [ 434.658031][T16496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3341'. [ 434.674496][T16496] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3341'. [ 434.723504][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3341'. [ 435.560279][T16530] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.565923][T12802] IPVS: starting estimator thread 0... [ 435.668714][T16534] IPVS: using max 28 ests per chain, 67200 per kthread [ 435.841736][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3357'. [ 435.900612][T16540] lo speed is unknown, defaulting to 1000 [ 435.937167][T16540] wlan0 speed is unknown, defaulting to 1000 [ 435.948295][T16543] lo speed is unknown, defaulting to 1000 [ 436.005812][T16543] wlan0 speed is unknown, defaulting to 1000 [ 436.172171][T16550] ipvlan1: left promiscuous mode [ 436.184584][T16550] ipvlan1: left allmulticast mode [ 436.198952][T16550] veth0_vlan: left allmulticast mode [ 436.246617][T16550] vlan2: left promiscuous mode [ 436.257974][T16550] bond1: left promiscuous mode [ 436.270531][T16550] vlan2: left allmulticast mode [ 436.284064][T16550] bond1: left allmulticast mode [ 436.802379][T16557] bond3: option downdelay: invalid value (18446744073709551487) [ 436.810548][T16557] bond3: option downdelay: allowed values 0 - 2147483647 [ 436.820760][T16557] bond3 (unregistering): Released all slaves [ 436.932511][T16559] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 437.154418][T16565] block nbd4: server does not support multiple connections per device. [ 437.222739][T16565] block nbd4: shutting down sockets [ 437.310710][T16574] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3366'. [ 437.816415][T16601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3373'. [ 437.833692][T16600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3373'. [ 438.357052][T16631] FAULT_INJECTION: forcing a failure. [ 438.357052][T16631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.393852][T16631] CPU: 1 UID: 0 PID: 16631 Comm: syz.5.3385 Not tainted syzkaller #0 PREEMPT(full) [ 438.393880][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 438.393892][T16631] Call Trace: [ 438.393900][T16631] [ 438.393909][T16631] dump_stack_lvl+0xe8/0x150 [ 438.393946][T16631] should_fail_ex+0x40c/0x560 [ 438.393978][T16631] _copy_to_user+0x31/0xb0 [ 438.394001][T16631] simple_read_from_buffer+0xe1/0x170 [ 438.394037][T16631] proc_fail_nth_read+0x1bb/0x230 [ 438.394071][T16631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.394105][T16631] ? rw_verify_area+0x24a/0x4c0 [ 438.394140][T16631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.394174][T16631] vfs_read+0x213/0xa80 [ 438.394200][T16631] ? __pfx___mutex_lock+0x10/0x10 [ 438.394228][T16631] ? __pfx_vfs_read+0x10/0x10 [ 438.394251][T16631] ? __fget_files+0x2a/0x420 [ 438.394285][T16631] ? __fget_files+0x3a2/0x420 [ 438.394313][T16631] ? __fget_files+0x2a/0x420 [ 438.394360][T16631] ksys_read+0x150/0x270 [ 438.394384][T16631] ? __pfx_ksys_read+0x10/0x10 [ 438.394415][T16631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.394438][T16631] do_syscall_64+0x174/0x580 [ 438.394464][T16631] ? trace_irq_disable+0x3b/0x140 [ 438.394492][T16631] ? clear_bhb_loop+0x40/0x90 [ 438.394518][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.394539][T16631] RIP: 0033:0x7f208bf5e6ce [ 438.394559][T16631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.394577][T16631] RSP: 002b:00007f208ce7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.394600][T16631] RAX: ffffffffffffffda RBX: 00007f208ce7b6c0 RCX: 00007f208bf5e6ce [ 438.394615][T16631] RDX: 000000000000000f RSI: 00007f208ce7b0a0 RDI: 0000000000000004 [ 438.394628][T16631] RBP: 00007f208ce7b090 R08: 0000000000000000 R09: 0000000000000000 [ 438.394641][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.394654][T16631] R13: 00007f208c226038 R14: 00007f208c225fa0 R15: 00007fffe8df4c08 [ 438.394689][T16631] [ 438.736499][T16641] __nla_validate_parse: 2 callbacks suppressed [ 438.736518][T16641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3387'. [ 438.908317][T16646] lo speed is unknown, defaulting to 1000 [ 438.992056][T16646] wlan0 speed is unknown, defaulting to 1000 [ 439.055488][T16656] xt_ipcomp: unknown flags 1D [ 439.712614][T16682] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 440.049054][T16695] netlink: 'syz.5.3403': attribute type 5 has an invalid length. [ 440.083952][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3403'. [ 440.112730][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.122892][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.273057][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3408'. [ 440.440490][T16708] block nbd4: server does not support multiple connections per device. [ 440.465352][T16708] block nbd4: shutting down sockets [ 440.657532][T16728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3414'. [ 440.845005][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 441.265326][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 441.288360][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 441.323728][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 441.333862][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 441.344836][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 441.622411][T16772] netlink: 'syz.6.3425': attribute type 9 has an invalid length. [ 441.721835][T16772] macvlan2: entered promiscuous mode [ 441.739154][T16772] ip6gretap0: entered promiscuous mode [ 441.757572][T16772] macvlan2: entered allmulticast mode [ 441.782287][T16772] ip6gretap0: entered allmulticast mode [ 441.841022][T15944] cgroup: fork rejected by pids controller in /syz3 [ 442.190337][T16807] xt_hashlimit: max too large, truncated to 1048576 [ 442.257301][T16806] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 442.885712][T16827] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.245462][T16829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.417808][T16829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.455202][T16829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.512641][T16829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 443.542712][T16829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.603799][T16829] veth1_vlan: left promiscuous mode [ 443.629429][T16829] veth0_vlan: left promiscuous mode [ 443.648097][T16829] veth0_vlan: entered promiscuous mode [ 443.680514][T16829] veth1_vlan: entered promiscuous mode [ 443.743095][T16829] veth1_macvtap: left promiscuous mode [ 443.764529][T16829] veth0_macvtap: left promiscuous mode [ 443.793349][T16829] veth0_macvtap: entered promiscuous mode [ 443.812672][T16829] veth1_macvtap: entered promiscuous mode [ 443.839174][ T9739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.847255][T16829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.859479][ T9739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.867387][ T9739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.880068][ T9739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.892353][T16829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.900456][ T9739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.911353][T16829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.927654][T16829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.962111][T16829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.980009][T16829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.992653][T16829] macvlan2: left promiscuous mode [ 444.070641][T16833] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 444.084379][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.100007][T12802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.141043][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.148340][T12802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.261062][ T5933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.279877][ T5933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.453267][T16852] __nla_validate_parse: 64 callbacks suppressed [ 444.453285][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 444.480263][T12804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.502341][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 444.552195][T16856] netlink: 'syz.0.3453': attribute type 1 has an invalid length. [ 444.603982][ T5933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.632122][ T5933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.790679][T16856] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 444.916388][T12804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.040480][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3454'. [ 445.052691][T16869] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3455'. [ 445.254011][T12804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.573239][T12804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.612169][T16886] FAULT_INJECTION: forcing a failure. [ 445.612169][T16886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.644694][T16886] CPU: 1 UID: 0 PID: 16886 Comm: syz.6.3459 Not tainted syzkaller #0 PREEMPT(full) [ 445.644723][T16886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 445.644735][T16886] Call Trace: [ 445.644743][T16886] [ 445.644755][T16886] dump_stack_lvl+0xe8/0x150 [ 445.644791][T16886] should_fail_ex+0x40c/0x560 [ 445.644821][T16886] _copy_from_user+0x2d/0xb0 [ 445.644842][T16886] ___sys_sendmsg+0x1c6/0x360 [ 445.644864][T16886] ? __lock_acquire+0x683/0x2cf0 [ 445.644897][T16886] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.644959][T16886] ? __fget_files+0x2a/0x420 [ 445.644987][T16886] ? __fget_files+0x3a2/0x420 [ 445.645034][T16886] __x64_sys_sendmsg+0x1b1/0x290 [ 445.645059][T16886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.645098][T16886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.645118][T16886] do_syscall_64+0x174/0x580 [ 445.645140][T16886] ? trace_irq_disable+0x3b/0x140 [ 445.645164][T16886] ? clear_bhb_loop+0x40/0x90 [ 445.645187][T16886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.645205][T16886] RIP: 0033:0x7febab59de99 [ 445.645221][T16886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.645238][T16886] RSP: 002b:00007febac509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.645257][T16886] RAX: ffffffffffffffda RBX: 00007febab825fa0 RCX: 00007febab59de99 [ 445.645269][T16886] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 445.645280][T16886] RBP: 00007febac509090 R08: 0000000000000000 R09: 0000000000000000 [ 445.645290][T16886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.645301][T16886] R13: 00007febab826038 R14: 00007febab825fa0 R15: 00007fff8a2c3278 [ 445.645330][T16886] [ 445.698702][T16838] lo speed is unknown, defaulting to 1000 [ 445.885768][T16838] wlan0 speed is unknown, defaulting to 1000 [ 445.952209][ T9739] Bluetooth: hci0: command tx timeout [ 446.474014][T16898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3463'. [ 446.506561][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3465'. [ 446.795332][T12804] bridge_slave_1: left allmulticast mode [ 446.815256][T12804] bridge_slave_1: left promiscuous mode [ 446.832108][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.878104][T16921] FAULT_INJECTION: forcing a failure. [ 446.878104][T16921] name failslab, interval 1, probability 0, space 0, times 0 [ 446.894816][T12804] bridge_slave_0: left allmulticast mode [ 446.913985][T16924] openvswitch: netlink: IP tunnel TTL not specified. [ 446.914387][T12804] bridge_slave_0: left promiscuous mode [ 446.928375][T16921] CPU: 0 UID: 0 PID: 16921 Comm: syz.6.3470 Not tainted syzkaller #0 PREEMPT(full) [ 446.928404][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 446.928416][T16921] Call Trace: [ 446.928424][T16921] [ 446.928432][T16921] dump_stack_lvl+0xe8/0x150 [ 446.928465][T16921] should_fail_ex+0x40c/0x560 [ 446.928495][T16921] should_failslab+0xa8/0x100 [ 446.928526][T16921] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 446.928551][T16921] ? local_lock_release+0x9c/0x160 [ 446.928582][T16921] ? __alloc_skb+0x1d7/0x7a0 [ 446.928600][T16921] ? __alloc_skb+0x1d7/0x7a0 [ 446.928624][T16921] __alloc_skb+0x1d7/0x7a0 [ 446.928660][T16921] netlink_sendmsg+0x5d4/0xb40 [ 446.928695][T16921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.928724][T16921] ? aa_sock_msg_perm+0xf1/0x1b0 [ 446.928751][T16921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.928774][T16921] sock_sendmsg_nosec+0x13a/0x180 [ 446.928807][T16921] ____sys_sendmsg+0x54e/0x850 [ 446.928835][T16921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.928867][T16921] ? import_iovec+0x73/0xa0 [ 446.928901][T16921] ___sys_sendmsg+0x2a5/0x360 [ 446.928923][T16921] ? __lock_acquire+0x683/0x2cf0 [ 446.928955][T16921] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.929015][T16921] ? __fget_files+0x2a/0x420 [ 446.929041][T16921] ? __fget_files+0x3a2/0x420 [ 446.929078][T16921] __x64_sys_sendmsg+0x1b1/0x290 [ 446.929105][T16921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.929147][T16921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.929170][T16921] do_syscall_64+0x174/0x580 [ 446.929193][T16921] ? trace_irq_disable+0x3b/0x140 [ 446.929220][T16921] ? clear_bhb_loop+0x40/0x90 [ 446.929244][T16921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.929263][T16921] RIP: 0033:0x7febab59de99 [ 446.929281][T16921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.929297][T16921] RSP: 002b:00007febac509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.929318][T16921] RAX: ffffffffffffffda RBX: 00007febab825fa0 RCX: 00007febab59de99 [ 446.929332][T16921] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 446.929344][T16921] RBP: 00007febac509090 R08: 0000000000000000 R09: 0000000000000000 [ 446.929356][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.929368][T16921] R13: 00007febab826038 R14: 00007febab825fa0 R15: 00007fff8a2c3278 [ 446.929400][T16921] [ 446.944671][T12804] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.687793][T12804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.701724][T16942] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.716500][T12804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.731734][T12804] bond0 (unregistering): Released all slaves [ 447.774142][T16917] bond1: option packets_per_slave: invalid value (3237751) [ 447.781836][T16917] bond1: option packets_per_slave: allowed values 0 - 65535 [ 447.797038][T16917] bond1 (unregistering): Released all slaves [ 447.879632][T16929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3472'. [ 448.024396][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 448.038598][ T9739] Bluetooth: hci0: command tx timeout [ 448.617278][T16978] FAULT_INJECTION: forcing a failure. [ 448.617278][T16978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.663799][T16973] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 448.679779][T16978] CPU: 1 UID: 0 PID: 16978 Comm: syz.6.3482 Not tainted syzkaller #0 PREEMPT(full) [ 448.679807][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.679819][T16978] Call Trace: [ 448.679828][T16978] [ 448.679836][T16978] dump_stack_lvl+0xe8/0x150 [ 448.679873][T16978] should_fail_ex+0x40c/0x560 [ 448.679905][T16978] _copy_from_iter+0x1d3/0x1660 [ 448.679933][T16978] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 448.679962][T16978] ? rcu_is_watching+0x15/0xb0 [ 448.679984][T16978] ? trace_kmem_cache_alloc+0x29/0xe0 [ 448.680020][T16978] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 448.680047][T16978] ? __pfx__copy_from_iter+0x10/0x10 [ 448.680075][T16978] ? __alloc_skb+0x276/0x7a0 [ 448.680094][T16978] ? __alloc_skb+0x276/0x7a0 [ 448.680121][T16978] ? netlink_sendmsg+0x650/0xb40 [ 448.680145][T16978] ? skb_put+0x112/0x210 [ 448.680189][T16978] netlink_sendmsg+0x6c0/0xb40 [ 448.680244][T16978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.680275][T16978] ? aa_sock_msg_perm+0xf1/0x1b0 [ 448.680304][T16978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.680328][T16978] sock_sendmsg_nosec+0x13a/0x180 [ 448.680362][T16978] ____sys_sendmsg+0x54e/0x850 [ 448.680392][T16978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.680426][T16978] ? import_iovec+0x73/0xa0 [ 448.680460][T16978] ___sys_sendmsg+0x2a5/0x360 [ 448.680483][T16978] ? __lock_acquire+0x683/0x2cf0 [ 448.680516][T16978] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.680575][T16978] ? __fget_files+0x2a/0x420 [ 448.680604][T16978] ? __fget_files+0x3a2/0x420 [ 448.680641][T16978] __x64_sys_sendmsg+0x1b1/0x290 [ 448.680669][T16978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.680711][T16978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.680734][T16978] do_syscall_64+0x174/0x580 [ 448.680759][T16978] ? trace_irq_disable+0x3b/0x140 [ 448.680786][T16978] ? clear_bhb_loop+0x40/0x90 [ 448.680812][T16978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.680832][T16978] RIP: 0033:0x7febab59de99 [ 448.680852][T16978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.680868][T16978] RSP: 002b:00007febac509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.680888][T16978] RAX: ffffffffffffffda RBX: 00007febab825fa0 RCX: 00007febab59de99 [ 448.680902][T16978] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 448.680914][T16978] RBP: 00007febac509090 R08: 0000000000000000 R09: 0000000000000000 [ 448.680926][T16978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.680938][T16978] R13: 00007febab826038 R14: 00007febab825fa0 R15: 00007fff8a2c3278 [ 448.680971][T16978] [ 448.688426][T16982] FAULT_INJECTION: forcing a failure. [ 448.688426][T16982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.870708][T16973] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 448.949973][T16982] CPU: 0 UID: 0 PID: 16982 Comm: syz.5.3483 Not tainted syzkaller #0 PREEMPT(full) [ 448.950054][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.950085][T16982] Call Trace: [ 448.950104][T16982] [ 448.950124][T16982] dump_stack_lvl+0xe8/0x150 [ 448.950211][T16982] should_fail_ex+0x40c/0x560 [ 448.950287][T16982] _copy_from_user+0x2d/0xb0 [ 448.950335][T16982] ___sys_sendmsg+0x1c6/0x360 [ 448.950393][T16982] ? __lock_acquire+0x683/0x2cf0 [ 448.950512][T16982] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.950676][T16982] ? __fget_files+0x2a/0x420 [ 448.950758][T16982] ? __fget_files+0x3a2/0x420 [ 448.950887][T16982] __x64_sys_sendmsg+0x1b1/0x290 [ 448.950956][T16982] ? sched_clock+0x3f/0x60 [ 448.951035][T16982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.951150][T16982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.951212][T16982] do_syscall_64+0x174/0x580 [ 448.951285][T16982] ? clear_bhb_loop+0x40/0x90 [ 448.951358][T16982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.951409][T16982] RIP: 0033:0x7f208bf9de99 [ 448.951471][T16982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.951515][T16982] RSP: 002b:00007f208ce7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.951575][T16982] RAX: ffffffffffffffda RBX: 00007f208c225fa0 RCX: 00007f208bf9de99 [ 448.951603][T16982] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 448.951643][T16982] RBP: 00007f208ce7b090 R08: 0000000000000000 R09: 0000000000000000 [ 448.951685][T16982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.951714][T16982] R13: 00007f208c226038 R14: 00007f208c225fa0 R15: 00007fffe8df4c08 [ 448.951803][T16982] [ 449.178822][T16973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 449.680938][T16838] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.705944][T16838] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.736789][T16838] bridge_slave_0: entered allmulticast mode [ 449.764219][T16838] bridge_slave_0: entered promiscuous mode [ 449.796096][T16838] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.816337][T16838] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.832721][T16838] bridge_slave_1: entered allmulticast mode [ 449.859855][T16838] bridge_slave_1: entered promiscuous mode [ 449.995247][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 450.017607][T17021] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 450.056734][T12804] hsr_slave_0: left promiscuous mode [ 450.093771][T12804] hsr_slave_1: left promiscuous mode [ 450.113806][T12804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.121755][ T9739] Bluetooth: hci0: command tx timeout [ 450.145564][T12804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.160348][T12804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.167982][T12804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.206056][T12804] veth1_macvtap: left promiscuous mode [ 450.213400][T12804] veth0_macvtap: left promiscuous mode [ 450.219777][T12804] veth1_vlan: left promiscuous mode [ 450.225349][T12804] veth0_vlan: left promiscuous mode [ 450.565642][T17037] netlink: 'syz.5.3494': attribute type 1 has an invalid length. [ 450.647171][T12804] team0 (unregistering): Port device team_slave_1 removed [ 450.669877][T12804] team0 (unregistering): Port device team_slave_0 removed [ 450.865337][T16838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.894133][T16838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.012524][T17032] syzkaller0: entered promiscuous mode [ 451.018380][T17032] syzkaller0: entered allmulticast mode [ 451.089881][T17047] FAULT_INJECTION: forcing a failure. [ 451.089881][T17047] name failslab, interval 1, probability 0, space 0, times 0 [ 451.135994][T17047] CPU: 0 UID: 0 PID: 17047 Comm: syz.4.3498 Not tainted syzkaller #0 PREEMPT(full) [ 451.136019][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 451.136029][T17047] Call Trace: [ 451.136052][T17047] [ 451.136062][T17047] dump_stack_lvl+0xe8/0x150 [ 451.136114][T17047] should_fail_ex+0x40c/0x560 [ 451.136147][T17047] should_failslab+0xa8/0x100 [ 451.136182][T17047] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 451.136209][T17047] ? local_lock_release+0x9c/0x160 [ 451.136231][T17047] ? __alloc_skb+0x1d7/0x7a0 [ 451.136250][T17047] ? __alloc_skb+0x1d7/0x7a0 [ 451.136277][T17047] __alloc_skb+0x1d7/0x7a0 [ 451.136303][T17047] netlink_sendmsg+0x5d4/0xb40 [ 451.136328][T17047] ? lockdep_hardirqs_on+0x7a/0x110 [ 451.136363][T17047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.136395][T17047] ? aa_sock_msg_perm+0xf1/0x1b0 [ 451.136425][T17047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.136449][T17047] sock_sendmsg_nosec+0x13a/0x180 [ 451.136484][T17047] ____sys_sendmsg+0x54e/0x850 [ 451.136514][T17047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.136550][T17047] ? import_iovec+0x73/0xa0 [ 451.136587][T17047] ___sys_sendmsg+0x2a5/0x360 [ 451.136610][T17047] ? __lock_acquire+0x683/0x2cf0 [ 451.136646][T17047] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.136711][T17047] ? __fget_files+0x2a/0x420 [ 451.136740][T17047] ? __fget_files+0x3a2/0x420 [ 451.136780][T17047] __x64_sys_sendmsg+0x1b1/0x290 [ 451.136808][T17047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.136864][T17047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.136888][T17047] do_syscall_64+0x174/0x580 [ 451.136914][T17047] ? trace_irq_disable+0x3b/0x140 [ 451.136942][T17047] ? clear_bhb_loop+0x40/0x90 [ 451.136969][T17047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.136991][T17047] RIP: 0033:0x7fe15099de99 [ 451.137011][T17047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.137029][T17047] RSP: 002b:00007fe151837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.137052][T17047] RAX: ffffffffffffffda RBX: 00007fe150c25fa0 RCX: 00007fe15099de99 [ 451.137066][T17047] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 451.137081][T17047] RBP: 00007fe151837090 R08: 0000000000000000 R09: 0000000000000000 [ 451.137094][T17047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.137106][T17047] R13: 00007fe150c26038 R14: 00007fe150c25fa0 R15: 00007ffd029daa48 [ 451.137141][T17047] [ 451.580523][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3502'. [ 452.191302][ T9739] Bluetooth: hci0: command tx timeout [ 453.530499][T16838] team0: Port device team_slave_0 added [ 453.536307][T17055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3502'. [ 453.567297][T17062] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 453.597744][T16838] team0: Port device team_slave_1 added [ 453.831440][T17081] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 453.855094][T16838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.882985][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.980806][T16838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.011292][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3505'. [ 454.036765][T16838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.073605][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.139802][T16838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.295285][T17088] bridge2: entered promiscuous mode [ 454.307188][T17088] bond3: (slave bridge2): making interface the new active one [ 454.318078][T17088] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 454.349765][T12804] IPVS: stop unused estimator thread 0... [ 454.512244][T17106] bridge1: entered promiscuous mode [ 454.521741][ T5933] IPVS: starting estimator thread 0... [ 454.538585][T17106] bridge1: entered allmulticast mode [ 454.574385][T17106] team0: Port device bridge1 added [ 454.619505][T17114] IPVS: using max 30 ests per chain, 72000 per kthread [ 454.728368][T16838] hsr_slave_0: entered promiscuous mode [ 454.759549][T16838] hsr_slave_1: entered promiscuous mode [ 454.770244][T16838] debugfs: 'hsr0' already exists in 'hsr' [ 454.785165][T16838] Cannot create hsr debugfs directory [ 454.804828][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3514'. [ 454.857339][T17128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3514'. [ 454.942715][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3514'. [ 455.053081][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.060901][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.110371][T17128] bridge0: entered allmulticast mode [ 455.174948][T17124] bridge_slave_1: left allmulticast mode [ 455.183703][T17124] bridge_slave_1: left promiscuous mode [ 455.191663][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.207575][T17124] bridge_slave_0: left allmulticast mode [ 455.214669][T17124] bridge_slave_0: left promiscuous mode [ 455.235529][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.312380][T17149] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 455.316510][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 455.530196][T17151] tipc: Enabling of bearer rejected, already enabled [ 456.133868][T17183] netlink: 'syz.5.3528': attribute type 6 has an invalid length. [ 456.163139][T17179] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 456.171605][T17181] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 456.186096][T17179] pim6reg0: persist disabled [ 456.311608][T17179] Cannot find add_set index 0 as target [ 456.629115][T17193] netlink: 'syz.5.3529': attribute type 29 has an invalid length. [ 456.655716][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3529'. [ 456.685628][T17195] xt_hashlimit: size too large, truncated to 1048576 [ 457.149935][T17208] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.371575][T16838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.402025][T16838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.420000][T17221] netlink: 'syz.5.3536': attribute type 15 has an invalid length. [ 457.432594][T16838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.459965][T16838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.594323][T17221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.655247][T17221] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.874997][T17221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.886670][T17221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.906593][T17221] veth1_vlan: left promiscuous mode [ 457.915497][T17221] veth0_vlan: left promiscuous mode [ 457.923092][T17221] veth0_vlan: entered promiscuous mode [ 457.931866][T17221] veth1_vlan: entered promiscuous mode [ 457.946983][T17221] veth1_macvtap: left promiscuous mode [ 457.956428][T17221] veth0_macvtap: left promiscuous mode [ 457.963690][T17221] veth0_macvtap: entered promiscuous mode [ 457.972089][T17221] veth1_macvtap: entered promiscuous mode [ 457.980064][T17221] geneve0: entered promiscuous mode [ 457.995574][T17221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.004836][T17221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.015074][T17221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.025958][T17221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.045000][T17221] veth0_to_team: entered promiscuous mode [ 458.064323][T17221] batadv_slave_1: entered promiscuous mode [ 458.083178][T17221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.093388][T17221] macsec1: left promiscuous mode [ 458.100241][T17221] macvtap2: left promiscuous mode [ 458.107602][T17221] macvtap3: left promiscuous mode [ 458.118849][T17221] bond0: left promiscuous mode [ 458.140024][T17221] bond2: left promiscuous mode [ 458.147786][T17221] gre1: left promiscuous mode [ 458.157689][T17221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.177934][T16838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.190282][T16838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.214305][T12803] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.221592][T12803] bridge0: port 1(bridge_slave_0) entered listening state [ 458.236458][T12803] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.243694][T12803] bridge0: port 2(bridge_slave_1) entered listening state [ 458.280642][T12804] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.328649][T12810] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.350252][ T5933] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.360773][ T5933] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.369997][T12803] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.377877][T16838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.389086][T12803] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.400128][T16838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.437326][ T5933] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.441753][T12802] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.499731][ T5933] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.530415][T12810] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.544951][ T5778] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 458.579072][T12802] bond5: (slave ip6gretap2): link status up again after 0 ms [ 458.786475][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3544'. [ 458.810573][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3544'. [ 458.853124][T16838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.928565][T16838] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.968752][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.975967][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.043976][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.051311][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.642589][T16838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.874586][T16838] veth0_vlan: entered promiscuous mode [ 460.934474][T16838] veth1_vlan: entered promiscuous mode [ 461.062397][T16838] veth0_macvtap: entered promiscuous mode [ 461.092381][T16838] veth1_macvtap: entered promiscuous mode [ 461.154223][T16838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.242605][T16838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.317388][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.340363][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.361473][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.382854][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.432936][ T5933] net_ratelimit: 19 callbacks suppressed [ 461.432975][ T5933] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 461.672135][T12803] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 461.716255][T12803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.740789][T12803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.858164][T12803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.867783][T12802] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 461.900424][T12803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.010759][ T5933] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 462.032505][T17385] netlink: 'syz.6.3570': attribute type 1 has an invalid length. [ 462.140218][T12803] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 462.225144][T17396] Bluetooth: MGMT ver 1.23 [ 462.275060][T17401] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 462.285486][T12802] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 462.350292][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 462.419271][T12803] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 462.549130][ T5933] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 462.684688][T17417] bridge0: entered promiscuous mode [ 462.703959][T17417] bridge0: entered allmulticast mode [ 462.738555][T17417] team0: Port device bridge0 added [ 462.788716][ T5933] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 462.872441][T17425] FAULT_INJECTION: forcing a failure. [ 462.872441][T17425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.928707][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 462.954598][T17425] CPU: 0 UID: 0 PID: 17425 Comm: syz.3.3580 Not tainted syzkaller #0 PREEMPT(full) [ 462.954627][T17425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 462.954642][T17425] Call Trace: [ 462.954650][T17425] [ 462.954660][T17425] dump_stack_lvl+0xe8/0x150 [ 462.954698][T17425] should_fail_ex+0x40c/0x560 [ 462.954731][T17425] _copy_from_user+0x2d/0xb0 [ 462.954753][T17425] ___sys_sendmsg+0x1c6/0x360 [ 462.954779][T17425] ? __lock_acquire+0x683/0x2cf0 [ 462.954814][T17425] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.954879][T17425] ? __fget_files+0x2a/0x420 [ 462.954909][T17425] ? __fget_files+0x3a2/0x420 [ 462.954959][T17425] __x64_sys_sendmsg+0x1b1/0x290 [ 462.954988][T17425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.955034][T17425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.955058][T17425] do_syscall_64+0x174/0x580 [ 462.955084][T17425] ? trace_irq_disable+0x3b/0x140 [ 462.955112][T17425] ? clear_bhb_loop+0x40/0x90 [ 462.955160][T17425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.955182][T17425] RIP: 0033:0x7f1df799de99 [ 462.955220][T17425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.955240][T17425] RSP: 002b:00007f1df890d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.955264][T17425] RAX: ffffffffffffffda RBX: 00007f1df7c25fa0 RCX: 00007f1df799de99 [ 462.955280][T17425] RDX: 0000000020008000 RSI: 0000200000000400 RDI: 0000000000000003 [ 462.955297][T17425] RBP: 00007f1df890d090 R08: 0000000000000000 R09: 0000000000000000 [ 462.955311][T17425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.955324][T17425] R13: 00007f1df7c26038 R14: 00007f1df7c25fa0 R15: 00007ffd8c5b65d8 [ 462.955361][T17425] [ 463.142693][T17427] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3581'. [ 463.347893][T17433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3582'. [ 463.406643][T17433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3582'. [ 463.505032][T17440] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3585'. [ 463.516600][T17435] xt_CT: No such helper "syz0" [ 463.845457][T17458] syzkaller0: entered promiscuous mode [ 463.869577][T17458] syzkaller0: entered allmulticast mode [ 464.133097][T17469] FAULT_INJECTION: forcing a failure. [ 464.133097][T17469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.186265][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.3.3592 Not tainted syzkaller #0 PREEMPT(full) [ 464.186295][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 464.186309][T17469] Call Trace: [ 464.186318][T17469] [ 464.186328][T17469] dump_stack_lvl+0xe8/0x150 [ 464.186370][T17469] should_fail_ex+0x40c/0x560 [ 464.186422][T17469] _copy_from_user+0x2d/0xb0 [ 464.186445][T17469] __copy_msghdr+0x390/0x590 [ 464.186478][T17469] ___sys_sendmsg+0x213/0x360 [ 464.186503][T17469] ? __lock_acquire+0x683/0x2cf0 [ 464.186539][T17469] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.186605][T17469] ? __fget_files+0x2a/0x420 [ 464.186636][T17469] ? __fget_files+0x3a2/0x420 [ 464.186678][T17469] __x64_sys_sendmsg+0x1b1/0x290 [ 464.186708][T17469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.186756][T17469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.186781][T17469] do_syscall_64+0x174/0x580 [ 464.186809][T17469] ? trace_irq_disable+0x3b/0x140 [ 464.186839][T17469] ? clear_bhb_loop+0x40/0x90 [ 464.186867][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.186889][T17469] RIP: 0033:0x7f1df799de99 [ 464.186911][T17469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.186930][T17469] RSP: 002b:00007f1df890d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.186953][T17469] RAX: ffffffffffffffda RBX: 00007f1df7c25fa0 RCX: 00007f1df799de99 [ 464.186969][T17469] RDX: 0000000020008000 RSI: 0000200000000400 RDI: 0000000000000003 [ 464.186984][T17469] RBP: 00007f1df890d090 R08: 0000000000000000 R09: 0000000000000000 [ 464.186998][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.187011][T17469] R13: 00007f1df7c26038 R14: 00007f1df7c25fa0 R15: 00007ffd8c5b65d8 [ 464.187048][T17469] [ 464.381371][T17471] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3593'. [ 464.545675][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3594'. [ 464.560242][T17476] tipc: Enabled bearer , priority 0 [ 464.576009][T17485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3597'. [ 464.586227][T17476] syzkaller0: entered promiscuous mode [ 464.599625][T17476] syzkaller0: entered allmulticast mode [ 464.636527][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 464.639142][T17476] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 464.687727][T17486] tc action pedit 'at' offset 6 out of bounds [ 464.709593][T17476] tipc: Resetting bearer [ 464.718822][ T1129] IPVS: starting estimator thread 0... [ 464.735741][T17476] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3595'. [ 464.789044][T17476] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3595'. [ 464.809424][T17493] IPVS: using max 27 ests per chain, 64800 per kthread [ 464.823828][T17476] xt_cgroup: invalid path, errno=-2 [ 464.846892][T17475] tipc: Resetting bearer [ 464.893296][T17475] tipc: Disabling bearer [ 464.946570][T17500] netlink: 'syz.3.3601': attribute type 1 has an invalid length. [ 464.955993][T17500] netlink: 'syz.3.3601': attribute type 1 has an invalid length. [ 465.208307][T17503] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 465.340783][T17518] syzkaller0: entered promiscuous mode [ 465.353340][T17518] syzkaller0: entered allmulticast mode [ 466.206442][T17547] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.217201][T17547] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.703604][T17566] syz_tun: entered allmulticast mode [ 466.711726][T12803] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.721378][T12803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.731275][T12803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.749962][T12802] net_ratelimit: 29 callbacks suppressed [ 466.749995][T12802] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 466.777300][T12803] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.803423][T17569] syzkaller0: entered promiscuous mode [ 466.820594][T17569] syzkaller0: entered allmulticast mode [ 466.889829][T17565] syz_tun: left allmulticast mode [ 466.920471][T12802] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 467.038834][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 467.151098][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 467.665710][T17587] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.673437][T17587] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.790335][ T5626] Bluetooth: hci6: command 0x0406 tx timeout [ 468.186674][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.248054][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.714355][T17587] ip6gretap0: left allmulticast mode [ 468.725968][T17587] macvlan2: left allmulticast mode [ 468.826606][ T5933] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.868489][ T5933] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.880678][T17612] __nla_validate_parse: 11 callbacks suppressed [ 468.880696][T17612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3629'. [ 468.896557][ T5933] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.906867][T17591] lo speed is unknown, defaulting to 1000 [ 468.920812][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3629'. [ 468.933820][T17591] wlan0 speed is unknown, defaulting to 1000 [ 468.941181][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 468.968602][ T5933] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.083668][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3632'. [ 469.108800][T17623] netlink: 'syz.5.3632': attribute type 29 has an invalid length. [ 469.122626][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3632'. [ 469.162650][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 469.244843][ T5778] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 469.288659][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 469.321764][T17637] syzkaller0: entered promiscuous mode [ 469.361202][T17637] syzkaller0: entered allmulticast mode [ 469.421607][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 469.549822][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 469.681159][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 470.166006][T17665] bridge_slave_0: left allmulticast mode [ 470.173925][T17665] bridge_slave_0: left promiscuous mode [ 470.182120][T17665] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.189585][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 470.220099][T17665] bridge_slave_1: left allmulticast mode [ 470.229871][T17665] bridge_slave_1: left promiscuous mode [ 470.235794][T17665] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.262499][T17665] bond0: (slave bond_slave_0): Releasing backup interface [ 470.297652][T17665] bond0: (slave bond_slave_1): Releasing backup interface [ 470.349227][T17665] team0: Port device team_slave_0 removed [ 470.378234][T17665] team0: Port device team_slave_1 removed [ 470.400369][T17665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.415160][T17665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.428110][T17665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.440766][T17665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.695612][T17692] syzkaller0: entered promiscuous mode [ 470.711026][T17692] syzkaller0: entered allmulticast mode [ 470.883034][ T1129] IPVS: starting estimator thread 0... [ 470.995172][T17700] IPVS: using max 25 ests per chain, 60000 per kthread [ 471.031360][T17707] syzkaller0: entered promiscuous mode [ 471.037190][T17707] syzkaller0: entered allmulticast mode [ 471.656473][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3666'. [ 471.716756][T17735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3666'. [ 471.795649][T17735] bond1: entered promiscuous mode [ 471.803697][T17735] bond1: entered allmulticast mode [ 471.811060][T17735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.828570][T12804] net_ratelimit: 17 callbacks suppressed [ 471.828590][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 471.950297][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 471.974276][ T29] audit: type=1800 audit(1785338860.601:10): pid=17744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3671" name="blkio.bfq.time_recursive" dev="tmpfs" ino=165 res=0 errno=0 [ 471.982681][T17744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3671'. [ 472.111185][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 472.217997][T17759] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3675'. [ 472.240339][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 472.307520][T17765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.369211][T12803] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 472.395679][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3676'. [ 472.406358][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3678'. [ 472.488745][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 472.521779][T17772] lo speed is unknown, defaulting to 1000 [ 472.541564][T17772] wlan0 speed is unknown, defaulting to 1000 [ 472.628556][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 472.682181][T17776] syzkaller0: entered promiscuous mode [ 472.691300][T17776] syzkaller0: entered allmulticast mode [ 472.815892][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 472.961302][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 473.015138][T17792] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 473.139814][T17772] syzkaller0: entered promiscuous mode [ 473.159077][T17772] syzkaller0: entered allmulticast mode [ 473.177541][T17772] tipc: Enabled bearer , priority 0 [ 473.206485][T17771] tipc: Resetting bearer [ 473.267371][T17771] tipc: Disabling bearer [ 473.390533][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 473.399302][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 474.396548][T17797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.425458][T17797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.743718][T12804] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.753478][T12804] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.763794][T12804] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.808789][T12804] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.833432][T12804] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.847506][T12804] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.858107][T12804] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.867834][T12804] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.040847][T17835] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20003 [ 475.154322][T17844] lo speed is unknown, defaulting to 1000 [ 475.162134][T17844] wlan0 speed is unknown, defaulting to 1000 [ 475.236729][T17849] syzkaller0: entered promiscuous mode [ 475.242972][T17849] syzkaller0: entered allmulticast mode [ 476.929087][T17811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.971326][T12810] net_ratelimit: 20 callbacks suppressed [ 476.971346][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 477.116885][T17864] netlink: 'syz.0.3703': attribute type 1 has an invalid length. [ 477.127590][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 477.172685][T17868] __nla_validate_parse: 6 callbacks suppressed [ 477.172717][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'. [ 477.191323][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'. [ 477.219234][T17864] bond1: entered promiscuous mode [ 477.224908][T17864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.250658][T17870] lo: entered allmulticast mode [ 477.289577][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 477.319760][T17870] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3704'. [ 477.368113][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3704'. [ 477.444020][T17865] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 477.473046][T17865] bond6 (unregistering): Released all slaves [ 477.528592][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 477.592962][T17888] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 477.592962][T17888] Please contact the netfilter-devel mailing list or update your nftables rules. [ 477.614565][T17863] lo: left allmulticast mode [ 477.648705][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 477.701017][T17891] vlan3: entered promiscuous mode [ 477.722217][T17891] bridge0: entered promiscuous mode [ 477.769141][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 477.866047][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3713'. [ 477.889415][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 478.009250][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 478.023571][T17909] sctp: [Deprecated]: syz.0.3714 (pid 17909) Use of int in max_burst socket option deprecated. [ 478.023571][T17909] Use struct sctp_assoc_value instead [ 478.129140][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 478.248826][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 478.630392][T17925] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3719'. [ 478.675265][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.679236][T17925] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3719'. [ 478.700467][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.709944][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.731097][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.739032][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.092967][T17938] lo speed is unknown, defaulting to 1000 [ 479.139199][T17938] wlan0 speed is unknown, defaulting to 1000 [ 479.286051][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3724'. [ 479.533819][T17962] netlink: 'syz.5.3725': attribute type 16 has an invalid length. [ 479.551466][T17962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3725'. [ 479.732669][T17958] tipc: Enabled bearer , priority 0 [ 479.751585][T17926] lo speed is unknown, defaulting to 1000 [ 479.779624][T17926] wlan0 speed is unknown, defaulting to 1000 [ 479.871736][T17958] syzkaller0: entered promiscuous mode [ 479.877419][T17958] syzkaller0: entered allmulticast mode [ 480.012469][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3731'. [ 480.094916][T17990] FAULT_INJECTION: forcing a failure. [ 480.094916][T17990] name failslab, interval 1, probability 0, space 0, times 0 [ 480.120438][T17990] CPU: 0 UID: 0 PID: 17990 Comm: syz.3.3733 Not tainted syzkaller #0 PREEMPT(full) [ 480.120484][T17990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 480.120506][T17990] Call Trace: [ 480.120515][T17990] [ 480.120525][T17990] dump_stack_lvl+0xe8/0x150 [ 480.120564][T17990] should_fail_ex+0x40c/0x560 [ 480.120599][T17990] should_failslab+0xa8/0x100 [ 480.120634][T17990] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 480.120662][T17990] ? skb_clone+0x212/0x3a0 [ 480.120687][T17990] ? skb_clone+0x212/0x3a0 [ 480.120719][T17990] skb_clone+0x212/0x3a0 [ 480.120749][T17990] __netlink_deliver_tap+0x413/0x860 [ 480.120789][T17990] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.120817][T17990] netlink_deliver_tap+0x19c/0x1b0 [ 480.120845][T17990] netlink_unicast+0x77f/0x940 [ 480.120881][T17990] netlink_sendmsg+0x813/0xb40 [ 480.120918][T17990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.120950][T17990] ? aa_sock_msg_perm+0xf1/0x1b0 [ 480.120980][T17990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.121005][T17990] sock_sendmsg_nosec+0x13a/0x180 [ 480.121039][T17990] ____sys_sendmsg+0x54e/0x850 [ 480.121071][T17990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.121116][T17990] ? import_iovec+0x73/0xa0 [ 480.121154][T17990] ___sys_sendmsg+0x2a5/0x360 [ 480.121181][T17990] ? __lock_acquire+0x683/0x2cf0 [ 480.121218][T17990] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.121284][T17990] ? __fget_files+0x2a/0x420 [ 480.121313][T17990] ? __fget_files+0x3a2/0x420 [ 480.121365][T17990] __x64_sys_sendmsg+0x1b1/0x290 [ 480.121392][T17990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.121436][T17990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.121458][T17990] do_syscall_64+0x174/0x580 [ 480.121482][T17990] ? trace_irq_disable+0x3b/0x140 [ 480.121509][T17990] ? clear_bhb_loop+0x40/0x90 [ 480.121534][T17990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.121554][T17990] RIP: 0033:0x7f1df799de99 [ 480.121573][T17990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.121591][T17990] RSP: 002b:00007f1df890d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.121612][T17990] RAX: ffffffffffffffda RBX: 00007f1df7c25fa0 RCX: 00007f1df799de99 [ 480.121627][T17990] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 480.121641][T17990] RBP: 00007f1df890d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.121653][T17990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.121665][T17990] R13: 00007f1df7c26038 R14: 00007f1df7c25fa0 R15: 00007ffd8c5b65d8 [ 480.121698][T17990] [ 480.426209][T17957] tipc: Resetting bearer [ 480.829075][ T5626] Bluetooth: hci2: command tx timeout [ 482.487347][T17957] tipc: Disabling bearer [ 482.535087][ T5859] tipc: Node number set to 2962821535 [ 482.541491][ T1129] net_ratelimit: 12 callbacks suppressed [ 482.541510][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 482.690424][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 482.723428][T18015] netlink: 'syz.5.3738': attribute type 1 has an invalid length. [ 482.770312][T18015] __nla_validate_parse: 1 callbacks suppressed [ 482.770325][T18015] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3738'. [ 482.798620][T18015] netlink: 'syz.5.3738': attribute type 1 has an invalid length. [ 482.835881][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 482.919431][ T5622] Bluetooth: hci2: command tx timeout [ 483.004274][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'. [ 483.102133][T18033] netlink: 'syz.5.3744': attribute type 1 has an invalid length. [ 483.148657][ T5622] Bluetooth: hci7: command 0x0406 tx timeout [ 483.169438][T18040] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3746'. [ 483.243994][T17926] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.251489][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.259093][T17926] bridge_slave_0: entered allmulticast mode [ 483.273454][T17926] bridge_slave_0: entered promiscuous mode [ 483.318905][T17926] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.343230][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.359483][T17926] bridge_slave_1: entered allmulticast mode [ 483.375905][T18048] netlink: 'syz.5.3750': attribute type 1 has an invalid length. [ 483.379817][T17926] bridge_slave_1: entered promiscuous mode [ 483.431270][T18048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.517547][T18048] bond6: (slave veth5): Enslaving as an active interface with a down link [ 483.531294][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 483.590810][T17926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.600728][T18048] netlink: 'syz.5.3750': attribute type 10 has an invalid length. [ 483.610356][T18048] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3750'. [ 483.634818][T18058] bond6: (slave dummy0): making interface the new active one [ 483.650975][T18058] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 483.666602][T17926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.690524][T18048] dummy0: entered promiscuous mode [ 483.737576][T18048] bond6: (slave dummy0): Releasing active interface [ 483.870629][T17926] team0: Port device team_slave_0 added [ 483.876606][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3756'. [ 483.891437][T17926] team0: Port device team_slave_1 added [ 483.946612][T17926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.966513][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.000019][T17926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.024210][T17926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.035958][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.063615][T17926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.155523][T17926] hsr_slave_0: entered promiscuous mode [ 484.162702][T17926] hsr_slave_1: entered promiscuous mode [ 484.196637][T17926] debugfs: 'hsr0' already exists in 'hsr' [ 484.215735][T17926] Cannot create hsr debugfs directory [ 484.437827][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3761'. [ 484.464193][T18118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.642578][T12803] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 484.864814][T18168] netlink: 'syz.6.3765': attribute type 83 has an invalid length. [ 484.889374][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 484.898098][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3766'. [ 484.990342][ T5626] Bluetooth: hci2: command tx timeout [ 485.109866][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3767'. [ 485.199376][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 485.213843][T17926] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 485.237758][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.263245][T17926] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 485.337717][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.374032][T17926] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 485.412524][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.447385][T17926] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 485.494865][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.548685][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 485.668597][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 485.790494][T17926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.838973][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 485.904285][T17926] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.954565][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.961955][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.013306][T12810] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.020600][T12810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.068974][ T5778] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 486.191266][ T30] INFO: task syz.1.2682:14156 blocked for more than 143 seconds. [ 486.229739][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.250447][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.290503][ T30] task:syz.1.2682 state:D stack:24744 pid:14156 tgid:14155 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 486.307720][ T30] Call Trace: [ 486.314701][ T30] [ 486.317805][ T30] __schedule+0x17d9/0x56c0 [ 486.323447][ T30] ? __lock_acquire+0x683/0x2cf0 [ 486.329954][ T30] ? __lock_acquire+0x683/0x2cf0 [ 486.335070][ T30] ? __pfx___schedule+0x10/0x10 [ 486.347517][ T30] ? schedule+0x90/0x2b0 [ 486.357439][ T30] schedule+0x164/0x2b0 [ 486.376299][ T30] schedule_preempt_disabled+0x13/0x30 [ 486.392189][ T30] __mutex_lock+0x7bf/0x1550 [ 486.401533][ T30] ? kasan_save_track+0x3e/0x80 [ 486.412407][ T30] ? __mutex_lock+0x5d4/0x1550 [ 486.422549][ T30] ? nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 486.452674][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 486.479609][ T30] ? net_generic+0x1e/0x240 [ 486.484218][ T30] ? net_generic+0x1e/0x240 [ 486.507089][ T30] nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 486.589353][ T30] ? rcu_is_watching+0x15/0xb0 [ 486.617794][ T30] ? trace_kmalloc+0x2a/0xf0 [ 486.629928][ T30] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 486.653669][ T30] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 486.708694][ T30] ? netlink_dump+0x1e7/0xee0 [ 486.721119][ T30] ? netlink_dump+0x1e7/0xee0 [ 486.739217][ T30] genl_dumpit+0x10b/0x1b0 [ 486.743844][ T30] netlink_dump+0x711/0xee0 [ 486.751223][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 486.769451][ T30] ? genl_start+0x497/0x6d0 [ 486.774082][ T30] __netlink_dump_start+0x589/0x7b0 [ 486.788719][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 486.799486][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 486.817742][ T30] ? __pfx_genl_start+0x10/0x10 [ 486.838991][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 486.844040][ T30] ? __pfx_genl_done+0x10/0x10 [ 486.859252][ T30] ? bpf_lsm_capable+0x9/0x20 [ 486.864047][ T30] ? security_capable+0x7e/0x2c0 [ 486.889801][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 486.894441][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.912370][ T30] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 486.930124][ T30] netlink_rcv_skb+0x226/0x4a0 [ 486.937462][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.958461][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.973199][ T30] ? down_read+0x2be/0x330 [ 486.987788][ T30] genl_rcv+0x28/0x40 [ 487.004416][ T30] netlink_unicast+0x7bb/0x940 [ 487.029129][ T30] netlink_sendmsg+0x813/0xb40 [ 487.037817][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.056662][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 487.069152][ T5626] Bluetooth: hci2: command tx timeout [ 487.076274][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.100288][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 487.108496][ T30] ____sys_sendmsg+0x54e/0x850 [ 487.114327][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.120098][ T30] ? import_iovec+0x73/0xa0 [ 487.124689][ T30] ___sys_sendmsg+0x2a5/0x360 [ 487.129985][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.135265][ T30] ? futex_wake+0x51b/0x5f0 [ 487.140367][ T30] ? __pfx_do_futex+0x10/0x10 [ 487.145114][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 487.150592][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.156142][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.162753][ T30] do_syscall_64+0x174/0x580 [ 487.167894][ T30] ? trace_irq_disable+0x3b/0x140 [ 487.173640][ T30] ? clear_bhb_loop+0x40/0x90 [ 487.179222][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.185220][ T30] RIP: 0033:0x7f13c2f9de99 [ 487.190132][ T30] RSP: 002b:00007f13c3dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.199170][ T30] RAX: ffffffffffffffda RBX: 00007f13c3225fa0 RCX: 00007f13c2f9de99 [ 487.207245][ T30] RDX: 00000000040088c0 RSI: 0000200000000000 RDI: 0000000000000007 [ 487.215743][ T30] RBP: 00007f13c3033eaf R08: 0000000000000000 R09: 0000000000000000 [ 487.224143][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.232799][ T30] R13: 00007f13c3226038 R14: 00007f13c3225fa0 R15: 00007fff7ce081b8 [ 487.241364][ T30] [ 487.273975][ T30] [ 487.273975][ T30] Showing all locks held in the system: [ 487.298106][ T30] 1 lock held by ksoftirqd/1/23: [ 487.328553][ T30] 1 lock held by khungtaskd/30: [ 487.339495][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 487.368458][ T30] 2 locks held by getty/5373: [ 487.374846][ T30] #0: ffff8880366fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 487.408546][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 487.440082][ T30] 3 locks held by kworker/1:7/5859: [ 487.458822][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.488451][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 487.511852][ T30] #2: ffff8880665c7530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x35/0x480 [ 487.528728][ T30] 2 locks held by syz.2.1853/11433: [ 487.538448][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.560781][ T30] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 487.578910][T12804] net_ratelimit: 12 callbacks suppressed [ 487.578932][T12804] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 487.598641][ T30] 1 lock held by syz-executor/12015: [ 487.608974][ T30] #0: ffff88807b29cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 487.630899][ T30] 3 locks held by kworker/0:9/12642: [ 487.650321][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.689132][ T30] #1: ffffc9000348fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.728704][ T30] #2: ffff888034995250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 487.739466][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 487.758693][ T30] 2 locks held by kworker/1:17/12655: [ 487.789043][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.804075][ T30] #1: ffffc900030bfc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.815769][ T30] 7 locks held by kworker/u8:19/12810: [ 487.821938][ T30] 3 locks held by syz.1.2682/14156: [ 487.827202][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.835620][ T30] #1: ffff8880569516e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 487.846392][ T30] #2: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 487.857504][ T30] 1 lock held by syz-executor/15225: [ 487.871632][ T1129] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 487.889214][ T30] #0: ffff888036e44ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 487.909070][ T30] 2 locks held by syz-executor/16838: [ 487.920204][ T30] #0: ffff8880371acea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 487.940189][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 487.955339][ T30] 2 locks held by syz.4.3585/17440: [ 487.961367][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.973820][ T30] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 487.987754][ T30] 1 lock held by syz-executor/17926: [ 487.996046][T12810] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 488.004024][ T30] #0: ffff888040cb8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 488.024875][ T30] no locks held by syz.6.3768/18210. [ 488.034890][ T30] 1 lock held by dhcpcd/18229: [ 488.044787][ T30] #0: ffff8880594f69c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 488.077863][ T30] [ 488.086214][ T30] ============================================= [ 488.086214][ T30] [ 488.117446][ T30] NMI backtrace for cpu 1 [ 488.117467][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 488.117487][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 488.117499][ T30] Call Trace: [ 488.117506][ T30] [ 488.117515][ T30] dump_stack_lvl+0xe8/0x150 [ 488.117558][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 488.117579][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 488.117610][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 488.117636][ T30] sys_info+0x135/0x170 [ 488.117665][ T30] watchdog+0xfd7/0x1030 [ 488.117701][ T30] ? watchdog+0x1c7/0x1030 [ 488.117733][ T30] kthread+0x388/0x470 [ 488.117764][ T30] ? __pfx_watchdog+0x10/0x10 [ 488.117788][ T30] ? __pfx_kthread+0x10/0x10 [ 488.117820][ T30] ret_from_fork+0x514/0xb70 [ 488.117855][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 488.117887][ T30] ? __switch_to+0xc89/0x1420 [ 488.117918][ T30] ? __pfx_kthread+0x10/0x10 [ 488.117951][ T30] ret_from_fork_asm+0x1a/0x30 [ 488.117991][ T30] [ 488.118012][ T30] Sending NMI from CPU 1 to CPUs 0: [ 488.160688][T12803] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 488.161276][ C0] NMI backtrace for cpu 0 [ 488.161292][ C0] CPU: 0 UID: 0 PID: 12803 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 488.161312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 488.161324][ C0] Workqueue: bond5 bond_mii_monitor [ 488.161355][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 488.161378][ C0] Code: e8 be 5b 60 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f ee cd fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 488.161393][ C0] RSP: 0018:ffffc90006f271a8 EFLAGS: 00000002 [ 488.161408][ C0] RAX: 1ffffffff355b000 RBX: 00000000000003fd RCX: 0000000000000000 [ 488.161420][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 488.161431][ C0] RBP: dffffc0000000000 R08: ffff8880256c0237 R09: 1ffff11004ad8046 [ 488.161444][ C0] R10: dffffc0000000000 R11: ffffffff8566a570 R12: dffffc0000000000 [ 488.161457][ C0] R13: 0000000000000000 R14: ffffffff9aad80e0 R15: 0000000000000000 [ 488.161469][ C0] FS: 0000000000000000(0000) GS:ffff888124f53000(0000) knlGS:0000000000000000 [ 488.161484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.161496][ C0] CR2: 0000200000623030 CR3: 000000007f51c000 CR4: 00000000003526f0 [ 488.161511][ C0] Call Trace: [ 488.161518][ C0] [ 488.161527][ C0] wait_for_lsr+0x184/0x2f0 [ 488.161550][ C0] serial8250_console_write+0x12ef/0x1ba0 [ 488.161570][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 488.161599][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 488.161619][ C0] ? console_flush_all+0x123/0xaf0 [ 488.161642][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 488.161664][ C0] ? console_flush_all+0x123/0xaf0 [ 488.161683][ C0] console_flush_all+0x6ea/0xaf0 [ 488.161704][ C0] ? console_flush_all+0x123/0xaf0 [ 488.161726][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 488.161748][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 488.161772][ C0] console_unlock+0xd1/0x1c0 [ 488.161789][ C0] ? vprintk_emit+0x2cf/0x560 [ 488.161806][ C0] ? __pfx_console_unlock+0x10/0x10 [ 488.161822][ C0] ? vprintk_emit+0x2b0/0x560 [ 488.161839][ C0] ? vprintk_emit+0x455/0x560 [ 488.161855][ C0] ? vprintk_emit+0x2cf/0x560 [ 488.161870][ C0] ? vprintk_emit+0x2cf/0x560 [ 488.161888][ C0] vprintk_emit+0x485/0x560 [ 488.161906][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 488.161930][ C0] _printk+0xdd/0x130 [ 488.161948][ C0] ? __lock_acquire+0x683/0x2cf0 [ 488.161974][ C0] ? __pfx__printk+0x10/0x10 [ 488.161995][ C0] ? __netdev_printk+0x36f/0x480 [ 488.162023][ C0] netdev_warn+0x11e/0x180 [ 488.162051][ C0] ? __pfx_netdev_warn+0x10/0x10 [ 488.162072][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.162093][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 488.162112][ C0] ? ___ratelimit+0x584/0x8e0 [ 488.162134][ C0] bond_mii_monitor+0x1d2a/0x3260 [ 488.162178][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 488.162212][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 488.162233][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 488.162256][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.162276][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 488.162297][ C0] process_scheduled_works+0xa8e/0x14e0 [ 488.162334][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 488.162357][ C0] ? assign_work+0x3cf/0x5d0 [ 488.162380][ C0] worker_thread+0xa47/0xfb0 [ 488.162416][ C0] kthread+0x388/0x470 [ 488.162441][ C0] ? __pfx_worker_thread+0x10/0x10 [ 488.162460][ C0] ? __pfx_kthread+0x10/0x10 [ 488.162485][ C0] ret_from_fork+0x514/0xb70 [ 488.162525][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 488.162551][ C0] ? __switch_to+0xc89/0x1420 [ 488.162574][ C0] ? __pfx_kthread+0x10/0x10 [ 488.162617][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.162644][ C0] [ 488.170817][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 488.170874][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 488.170931][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 488.170968][ T30] Call Trace: [ 488.170988][ T30] [ 488.171016][ T30] vpanic+0x56c/0xa60 [ 488.171109][ T30] ? __pfx___schedule+0x10/0x10 [ 488.171174][ T30] ? __pfx_vpanic+0x10/0x10 [ 488.171276][ T30] panic+0xc5/0xd0 [ 488.171350][ T30] ? __pfx_panic+0x10/0x10 [ 488.171424][ T30] ? preempt_schedule_common+0x82/0xd0 [ 488.171484][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 488.171583][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 488.171661][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 488.171721][ T30] watchdog+0x1030/0x1030 [ 488.171824][ T30] ? watchdog+0x1c7/0x1030 [ 488.171903][ T30] kthread+0x388/0x470 [ 488.171974][ T30] ? __pfx_watchdog+0x10/0x10 [ 488.172027][ T30] ? __pfx_kthread+0x10/0x10 [ 488.172106][ T30] ret_from_fork+0x514/0xb70 [ 488.172186][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 488.172251][ T30] ? __switch_to+0xc89/0x1420 [ 488.172321][ T30] ? __pfx_kthread+0x10/0x10 [ 488.172401][ T30] ret_from_fork_asm+0x1a/0x30 [ 488.172482][ T30] [ 488.173859][ T30] Kernel Offset: disabled