last executing test programs: 2m47.7480112s ago: executing program 0 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x8000) 2m47.178220837s ago: executing program 0 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xb4}}, 0x4000044) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="00000000000000003c0880ff0000000018000000000000000000000000000000950000000000000095000000000000006d2df7c797eac6fe006ab7eb4ffb06bb3b0625eedae31bf6b95e6e6f25030fb083c4f22b40d855b8fa68aab42db48ad42aa6b0008a3a2fed058d3bbd46dda98a537ace82de7da0357236e89c376313d96e21515c28610787fe2d51b4c37e0e5ec433e57d519e472549382ed0e7e12bfd4f12c294551141142fe52eeec2e26f1cc5f1a836c16c1043e307b3ce40aaa0bff411e0dc59d99a5e5d6f7254dc5c47387d58674beca4a7b2c7cef6ae21a8484d1f22a1"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="200100001600010000000000ffdbdf2500000000000000000000000000000000ff01000000000000000000000000000100000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) unshare(0x62040200) mmap(&(0x7f000020a000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x3261e) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000680)={0x1000000, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 2m46.37133306s ago: executing program 0 (id=3108): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000001c80)="0a188e99a95d021342ef734186dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x8009}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r3) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0) 2m46.145190007s ago: executing program 0 (id=3111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611865000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000d40), 0x0}, 0x20) close(r4) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0xffe0}, {0x2, 0x9}, {0xd, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x7fff}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x24}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xfffff825}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x74}, 0x1, 0x0, 0x0, 0x91}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m45.71026962s ago: executing program 0 (id=3116): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB="000000fbabff0300253600000000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="14dc4a7a0000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001020000006765740000480002802c0003009ac420000461afb9fdd672bad09dfb78c76991a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32000000001d00000011000100000000000000000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc1000002b000b000000000000000000070000000800030004000100a01001"], 0x10bc}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r9], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f0000000600), &(0x7f0000000600), 0x80, r5, 0x0, 0x7}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) r10 = socket$isdn(0x22, 0x3, 0x24) sendto$isdn(r10, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0xc3, 0x4c000, &(0x7f0000000000)={0x22, 0x4, 0x4, 0x8, 0x2}, 0x6) socket$inet6(0x10, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) socketpair(0x21, 0x80000, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r12, 0x114, 0x6, &(0x7f0000000180), 0x4) 2m41.801668652s ago: executing program 2 (id=3159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x2c}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r9, 0x4) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r12, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r10, 0x4) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000850000f0af28840018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.38248757s ago: executing program 4 (id=3163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x14}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fc0200000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7"], 0x120}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r11 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10000004}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f00000004c0)={0xe0000012}) pwrite64(r7, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693) setsockopt$inet6_mreq(r9, 0x29, 0x6, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a02", @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) 2m41.301617841s ago: executing program 2 (id=3164): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}, 0x1, 0x0, 0x0, 0x404c040}, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)=ANY=[@ANYBLOB="640000000000002000010000000000000000040064b96801fe420f103df808771f3690a4f5c47e6fe8a2e544035e0da5d7530ab34d83e18a8713c8ae65c4f6bfc3d6cac938355411bf77bec2d0d61ac7e63059e4f486300cd14315041c779c496bbf7ac8307e3d039515ce1090", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 2m40.430173647s ago: executing program 2 (id=3170): r0 = socket$inet6(0xa, 0x7, 0x1) connect$inet6(r0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x60, "8a36132bec8bdc39e49299c5a8d6026dae5657fd94a7804530fbb461f34f3cda7c34ab7bcbd5f17ceab4e017d87d377e712f6f61364574157253fdf7c6466e81961cbec9038861a33d881de8a57782ed7f0b8586f52989d6d6af40df3de5970b"}, &(0x7f0000000000)=0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='rxrpc_conn\x00', r2}, 0x18) unshare(0x6a040000) socket$inet6(0xa, 0x7, 0x1) (async) connect$inet6(r0, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x60, "8a36132bec8bdc39e49299c5a8d6026dae5657fd94a7804530fbb461f34f3cda7c34ab7bcbd5f17ceab4e017d87d377e712f6f61364574157253fdf7c6466e81961cbec9038861a33d881de8a57782ed7f0b8586f52989d6d6af40df3de5970b"}, &(0x7f0000000000)=0x84) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='rxrpc_conn\x00', r2}, 0x18) (async) unshare(0x6a040000) (async) 2m40.34766821s ago: executing program 4 (id=3172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x4}}}}]}, 0x38}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4b1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r8}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000400)={r7, r5}) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2m40.282514042s ago: executing program 1 (id=3173): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x600, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m40.06729241s ago: executing program 1 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x38}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xcc, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x62, 0x8, "d92a3de07dc45cd1c60be78035ba0d481522ec7f48524cf8aa143c8cd3958854027077b03fc2b35165a5b9ec59bb24288d38f93e5683d6aad9a83efe69281aa498d2d37c2dd840d34ff66accaca953f6d30b374e265ee40354f636e7f540"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0xffffffffffffff99, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x170}, 0x1, 0x0, 0x0, 0x40881}, 0x4004011) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b020007e03dd65193", 0xa}, {&(0x7f0000000200)="b700000006000000000000f1", 0xc}], 0x2) 2m39.778337257s ago: executing program 1 (id=3175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001540)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r2, 0xf879e54589666b47, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m39.666920839s ago: executing program 4 (id=3177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x850) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x850) (async) 2m39.571215224s ago: executing program 2 (id=3178): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005d00)={0x20, r1, 0x2c05a01cbc0d9249, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000000}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x321, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) 2m39.569750607s ago: executing program 1 (id=3179): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2045000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfa77}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000000}, 0x8040) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x210, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x11f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5e, 0x3, "7ce6fed17fdc833e1de1c05faffbe05aef50ef77a80b4685098d2c4b16f1a6731a54fdeaf791e09851991eba5c527d13c9c5d78ab80523884da20c619424a9467cc1b26922a0b06b71d4baef974c0306c79516e3057878b5805f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4}, 0x44080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7fa9, 0x40, 0x40, 0xee, {{0x10, 0x4, 0x1, 0x1d, 0x40, 0x67, 0x0, 0x4, 0x2f, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x23, 0x7b, [@local, @loopback, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @remote, @empty]}, @rr={0x7, 0x7, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2b, 0xba, 0x7b, 0x2, 0x10, @remote, @mcast1, 0x1, 0x20, 0x7, 0x800}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x890}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88}, 0x20000012) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) unshare(0x200) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000900)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', r4, 0x29, 0xd, 0x4, 0xffff0000, 0x13, @loopback, @mcast2, 0x80, 0x40, 0xb20d, 0x8}}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@ipmr_newroute={0x48, 0x18, 0x500, 0x70bd2c, 0x25dfdbfe, {0x80, 0x80ba19920db6cc64, 0x0, 0x0, 0xfe, 0x4, 0x2b3ee615795dd086, 0x8, 0xb00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x9, 0x80, r10}}, @RTA_ENCAP_TYPE={0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040d1}, 0x40c1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000b40)={@mcast2, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x21, 0x9, 0x500, 0x4, 0x4400000, r3}) 2m39.461173928s ago: executing program 4 (id=3180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0x2004}, 0x50) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m39.176648635s ago: executing program 1 (id=3181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050007"], 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2m39.127286536s ago: executing program 4 (id=3182): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfb, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0x2}, 0x38) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) recvfrom(r4, &(0x7f0000000380)=""/245, 0xf5, 0x2003, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m39.080239923s ago: executing program 2 (id=3183): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0xe4ff, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m38.719421008s ago: executing program 4 (id=3185): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 2m38.717651804s ago: executing program 1 (id=3186): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xa) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)={0x80000004}) splice(r0, 0x0, r3, 0x0, 0xb11, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48581, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffa39f769e000000000000000000"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00'}, 0x94) 2m38.717072626s ago: executing program 2 (id=3187): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x5, 0xb, 0x20025, 0x1, 0x3, '\x00', r2, r1, 0x2, 0x1, 0x4, 0x8}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd6d, 0x2, {{0x23, 0x4, 0x3, 0x26, 0x8c, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@noop, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x0, [{@local, 0xcc}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xad, 0x1, 0x1, [{@private=0xa010101, 0x1}, {@empty, 0x94}, {@empty, 0x9}, {@broadcast, 0x7ff}, {@private=0xa010102, 0x7ff}]}, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0xf, [{@broadcast, 0x8000}, {@multicast2, 0xc}]}, @timestamp={0x44, 0x20, 0x42, 0x0, 0x0, [0x3, 0x4, 0x3, 0x1, 0x9, 0x7, 0x2]}]}}}}}) 2m38.327000946s ago: executing program 32 (id=3186): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xa) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)={0x80000004}) splice(r0, 0x0, r3, 0x0, 0xb11, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48581, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffa39f769e000000000000000000"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00'}, 0x94) 2m38.30313567s ago: executing program 0 (id=3127): r0 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x400000013) 2m38.044621805s ago: executing program 33 (id=3127): r0 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x400000013) 2m38.023658259s ago: executing program 34 (id=3187): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x5, 0xb, 0x20025, 0x1, 0x3, '\x00', r2, r1, 0x2, 0x1, 0x4, 0x8}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd6d, 0x2, {{0x23, 0x4, 0x3, 0x26, 0x8c, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@noop, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x0, [{@local, 0xcc}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xad, 0x1, 0x1, [{@private=0xa010101, 0x1}, {@empty, 0x94}, {@empty, 0x9}, {@broadcast, 0x7ff}, {@private=0xa010102, 0x7ff}]}, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0xf, [{@broadcast, 0x8000}, {@multicast2, 0xc}]}, @timestamp={0x44, 0x20, 0x42, 0x0, 0x0, [0x3, 0x4, 0x3, 0x1, 0x9, 0x7, 0x2]}]}}}}}) 2m37.99484335s ago: executing program 35 (id=3185): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 4.342893235s ago: executing program 7 (id=4771): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008040) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x65a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x97, 0x7ff, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7f0f, 0x849f, 0x10001}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x2c, 0x64, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xd}, {0x8}, {0x10, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x84) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8d, 0x1, 0x649, 0x4}, {0x4000cab5, 0xffffff00, 0x5, 0x2, 0x9, 0x3fd}]}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005404c3bfd466c"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3.502094348s ago: executing program 8 (id=4784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x8}, 0x1c) shutdown(r0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xd, "f42a97b96d025891dd3f75fdda"}}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x18}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0xfffffffe, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000030000008510000003000000181100007fef534ace762b906f2e75b85208210fb100620446300dac1af6ebdac88a322bd5b9f3ba365de0c526c3d72f52d994f85fcf0dd960776d5782e4cb5a27bf549e390fed741bafd024f7302aecbf20979a6cf1df0fc8fa6aab654f6678eaeece339cb14eab912dd95c42dba3c7c75d8309def8e54b2f241f5873f4c4d643949a59861d23a0572a29027e2b524ce2dbe2f58ae6e903a8a0d45e695cf3f63a092e4a894c39726695aa8c95e1bc", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003daa0000f0ffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.396267617s ago: executing program 7 (id=4787): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x9545, 0x7, 0xa}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x26}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000ff95000000000000000000ffe1ff00"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r9, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x7}, 0xc) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x16, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, r5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xe, &(0x7f0000000100)=""/14, 0x41000, 0x20, '\x00', r7, @fallback=0x2e, r8, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, r11, r0, 0x4, &(0x7f0000000500)=[r0, r12, r13, r14, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x2, 0xe, 0x1}, {0x0, 0x4, 0xe, 0xb}, {0x2, 0x3, 0x5, 0xc}, {0x5, 0x2, 0x5, 0x5}], 0x10, 0x70ba00}, 0x94) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r14) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)={0x2b0, r17, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "1b79ded352ea6ed64aed4a4f5fe57dd15b982d831174c807238314ddd02ce608516fa7c2bbdbbc04e4377ed4d5c519f0451953f6f6e8a9df3c046a45de8f6654f5ee13e085a1dcd010574f9f980c0996dd649356f5636810fbd78a63125959a191b1"}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa389}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xb7#-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ',-\x19.!^[\\-(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r16, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x4b) 3.283781246s ago: executing program 6 (id=4789): close(0x3) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002340000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socket$inet(0x2, 0x2, 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 3.142615773s ago: executing program 5 (id=4790): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008690ff0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffa}}}}}}, 0x0) 3.141855712s ago: executing program 6 (id=4791): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x51) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.02337598s ago: executing program 5 (id=4792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff30, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYBLOB="eab45d011790ccaf56d4206f622bc6d232761e44e37d49e136f56687775ce86a7c6d", @ANYRES16=r2, @ANYBLOB="a1ab0000000002000000320000000800010060000000"], 0x30}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f0000000140)="41000200010001", 0x7) r7 = socket$kcm(0x2d, 0x2, 0x0) (async) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) (async, rerun: 32) close(r0) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c789fb086fa450adb60c6277f639f8300f48c", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3, 0xb}, {0x20}, {}, {0x0, 0x2}, {0x6}]}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e3, &(0x7f0000000180)={r7, r9}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x6}, 0x94) 2.80916892s ago: executing program 5 (id=4793): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000bc22d88736910849e0bdaa0207ba91385ce9ca087549af5db652b32cf539689d2e706405ad230d3322b8d46af9d0a67920b7212dda00e573da22b0454d6773f3e570c60d93", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRESOCT=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) r5 = socket(0x8, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000200000000000000fb709a45bff5bb06a514a6f7c3593e9500000000", @ANYRESHEX=r1, @ANYRESDEC=r0], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x8000}], 0x1, 0x40000000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2}}, 0x2e) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg(r5, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000019c0)="2b4e9fdeca94462c81d9f1d5a27b545a41b7f88fa2b6ff3d90c6358ebc6ab69585f45661ad8ad20fea34c4ad1df31f6b123375130a2ac45c0347d4e3008569cc53e0abb8809ecf129887c87bf54e117f6b75db57eb330aba53c06e9e3ab7c358a35188a6c948b96e66031af16ac45936a69ba69ec393d39f892a17cfcb9b5871db316cd694e1e3b052059a43d1d6dc4238430d18789143", 0x97}, {&(0x7f0000000280)="3ea7a234c2303a3b7a3028ada0f8532228281482bd018a0904652b95d9", 0x1d}, {&(0x7f0000000300)="c76acc8afc704eaaf3ab5e4c39d325ee9dc57c5fc9b4ce13013b215ee109cf6658928b", 0x23}, {&(0x7f0000000600)="e0bcf7f78c34513c589dd278104114cb5061768c84d3d660ff60c804bed3f1ed590a5c2a7dd70402281a7dda23d365be8d238e350a33ffe1079020c9ed6bae28b6b33721a6cd308fe9c393cdf641adbe6985181ff28be3c64f4747142fded5b2bc12aa8cf7ab530231cff4073c81820e7a3cc0be0a23bf2d6cc272b70a4a46af23de69b5482e5f9aa486b183cb6fa8735b8d5cd815fb654b306936091ad40809165e5b502bdf330162e62b0a1e2f4a47a8871312aea8e741065d18d41a916b9689c6e5b7c4269a", 0xc7}, {&(0x7f0000000700)="c2665aea6f5412f1331e433d42ddb9a30ba71f36e52468cf067cef001f1b8b97e17ad639bd879cae3ab50f4e8d042f36f38436e7f46574289d0f447db43e91e7f7", 0x41}, {&(0x7f0000000800)="7060a46ec6f93542c5b1cde774dee41c8499f07858ec0eec41fefbfee1afce309ade7f069f093dc719675230f989c3ce52b5377c17fce70d5b1fdf444da51a56cc251fe3cb475a223a6ef5b599809b2ff1f32dab4ad4edf84637093d15326f297f21115b95679c4889dddd8545a1616e18ad5d1a1b8a52514f40065d9714335ea488671b6d0c6b486cef60d9156ded82042d67b2ee0a63e70b4f7ff51754fd39401a3d8b71657bf03b374937c92b9087fc9d27544093b17dbb80c9ced90e232c", 0xc0}], 0x7, &(0x7f0000004280)=[{0x30, 0x3a, 0x60c, "4312a69b97fd67fdaca9e0d395766b796c8cc00f6eca10c2a0a945a266ac"}, {0x1020, 0x10a, 0x7, "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"/4107}, {0x88, 0x193, 0x4, "9866fb544f564170b9f9836806f9201b41546657a786b0f62aa9b7ba3b85f0c20b87288dac922fc7e14e85fbe8c62d6425f906a3abdbe38b7dfda67eb118ffc7d7dc824c0624a3bd72b61ba987259d8a4f22c5c89e5af0cfa2acb9bf704b29f3727f100bb7be3416a1ee8993467cf1b4ae238d74c9"}, {0xb0, 0x101, 0x6, "51af0dc77b4f8a253351d074493841de8330123933f6c814be30c288ae35f97babe8bc0cde038d11dfdfd4d1a900a4bffeb238d291ce85639394ef85a00fe3978c8c5dd8463d764ecc2d506c4d0cf40048725b30b679fa9d8bdfd9d33715f6539ada539d2e1949f35fa71fcfc9c2b939a8c8d37dda5f2e06402b5799033c1a9629567f90ec9223214e6eeedff587600eae060000000000000021b6b0"}, {0x138, 0x10e, 0x9, "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"}, {0x98, 0x116, 0xde1f, "aeba56caca0c974c05337be8ecd61678db6460c8e9fb50217b64bc3ac7dc7ca8bd37de1af7d3410bc0ce93ffad4744c0d8bce5a548a32923b78d64cbda6bf72cbbe0d8ea8ce6f0a0095f51a2240ff99e40d2ee25fd35689ad156ffcfb371229fb15c6e5fdcecb29d4c10b4cc938903289de1c5d0ed849ea5ef21752937296371fb"}, {0x68, 0x107, 0x8, "76965013790021bda8b74d58a594f218f76f28e9ef967f012a4aeffe2aac3623d971ea2e0b53523805fb1ae837ec312ae2cc9ea9dfc9b78d42367a32656890fe3f2fb4be7e14438ae18329f157dbe49cae"}], 0x13c0}, 0x4040040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x20, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc80c0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008041) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x50e, 0x4) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x1, @broadcast}, 0x10) 2.719978116s ago: executing program 6 (id=4794): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) listen(r0, 0x2) sendmmsg(r0, &(0x7f0000000a00), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_vlan={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb5c}]}, {0xc, 0x6, "eb0cc4a17fe2f339"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="1efdb9fe080000000000000000f0", 0x0, 0x8000009e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[], 0x26}, 0x1, 0x0, 0x0, 0xd0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = socket$alg(0x26, 0x5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}], 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xebb}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x73, 0x1}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000740)=""/94, 0x38, 0x5e, 0x0, 0x9}, 0x28) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2.611715647s ago: executing program 7 (id=4795): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x14}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fc020000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7"], 0x120}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r11 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10000004}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f00000004c0)={0xe0000012}) pwrite64(r7, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693) setsockopt$inet6_mreq(r9, 0x29, 0x6, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a02", @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) 1.598117081s ago: executing program 6 (id=4797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) r3 = accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000180)=0x10, 0xb3f475d1bc8f45c1) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 1.588540033s ago: executing program 7 (id=4798): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000010a01030000000000000000030000040900010073797831000000000900010073797a31000000000900010073797a3100000000080002400000000108000240000000020c00044000000000000000050c0004400000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.477308291s ago: executing program 7 (id=4800): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd700003dcdf250e0000002c0002b63200000000000000060002004e210000080006000401dfc0e4ae5ab291fc2849000005000d000000"], 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x4044042) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async, rerun: 64) r1 = socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) (async) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000bc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000c40)={0x0, 0x10, "30ae624b82de0d5f1b5fc2110a11e7cd"}, &(0x7f0000001c80)=0x18) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000201000010400"/20, @ANYRES8=r4, @ANYRES8=r4, @ANYRESOCT=r4, @ANYRES8=r4, @ANYRES8=r4], 0x48}}, 0x40040) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.391158892s ago: executing program 6 (id=4801): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) accept(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000005000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000006ec600000000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000854000008300000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000950000000000135bcfbe426621b9e3d6b55f08c11a757ee52218a16ec4b90e71437e653f8f221914b6a88b8825327548de04b51a7d48b8e775b81dfb82dd2b7643b24686621969f9594701d2c09e9cff1a353b0eac73114cec7104fe0fcb5392607c6ed76d38300392974c142b588e28b39a6b290dae71e96dafbcae286bbb8cc8e3b7e0b8234900a9180a712a2a5e514aacf6e55104525bc3822508e7"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="24defdfb0fb3780c04e25bda97aedc65c1437c567f7e55a1aeffcd4eea2873999aa2c3f9a2c811fccf7978eba59997f8754d574bb7ea1b75b6b8a77d3f08fba808b877a0980382846e3ead50d5dfa7198640c0fc1470002a03c21819926ccf01a47a074608f505839f7319b07a44d4538fe4ca9fc1e234bce0a23a12fdde88d587382227bdf0c279f91173b6e55edf72bff15d0bec3f8abf34a3efbe1e2032b3dbe0471428809df3aea1418f1719badb26943a438acede4fef2dbb81a59035d8d0e4c803b605a6633865dd7c8ef4", 0xce}], 0x1}}], 0x1, 0x80) sendmsg$inet6(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1}, 0x2404c140) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000040)=@udp=r8, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.277319061s ago: executing program 7 (id=4802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x558}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x68cd4a7e7e5d268b, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4000000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x5}]}]}, 0x23c}}, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2000042, 0x0, 0x3}, 0x10) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xa, @local, 0x7fff}}, 0x24) tee(r1, r5, 0x8f5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdbe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x2000c0c0) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a4400000000", 0x18}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x28, 0x0, &(0x7f0000000080)="f4b84de4115d64204a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.2172091s ago: executing program 3 (id=4803): socketpair(0x1a, 0x6, 0xb2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) socket$inet(0x2, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b80000050000000080919356c39e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) recvmsg$can_bcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/53, 0x35}], 0x3, &(0x7f0000000780)=""/117, 0x75}, 0x2100) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x2) syz_emit_ethernet(0x283, &(0x7f0000001e80)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x24d, 0x2f, 0x0, @remote, @local, {[@fragment={0x3b, 0x0, 0x40, 0x0, 0x0, 0xf, 0x67}, @fragment={0xc, 0x0, 0x5, 0x0, 0x0, 0xd, 0x67}, @routing={0x8, 0x4, 0x1, 0x2, 0x0, [@remote, @mcast1]}, @hopopts={0x3a, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0xcf}, @jumbo={0xc2, 0x4, 0x800}, @enc_lim={0x4, 0x1, 0x9}]}, @hopopts={0x16, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}]}, @srh={0x2, 0x8, 0x4, 0x4, 0x1, 0x40, 0x4, [@rand_addr=' \x01\x00', @loopback, @mcast2, @private2]}, @hopopts={0x89, 0x5, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc8}, @hao={0xc9, 0x10, @remote}, @jumbo, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x89}]}, @routing={0x89, 0xa, 0x1, 0x1, 0x0, [@private1, @loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @loopback]}, @fragment={0x6, 0x0, 0xb, 0x0, 0x0, 0x1a, 0x65}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0xb9, 0x0, [], "73db49de3c7e2a1c05b9aa584e69f9daabe8a1c87b9e2224c4665d67084b2de78f33768a50d56cc0feb278992ec13513fecec4101dde3242cd807a9e4de8293f65240501c44791169b17e41bffeeeebddddf71c28fc2de4423c75f6287749ca109e218595dbdf1b4d94419e70086e2624fcac69ccd5308b26689571de36c627ee34e53fdd1caf2aa7d65fd0dd2430194ef990c88b9c5ad9d13eb3de4d91998fe43d1d948b1067bd24100"/185}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2, {0x0, 0x3}}}}}}}}}, 0x0) write(r3, &(0x7f0000000000)="3f000000010000", 0x7) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={0xffffffffffffffff, r3, 0x2, 0x83, &(0x7f0000000040)="137d60acca842c36110713ee9c1a837f51d6df32997591d6cab8e447f5e41f1f9faa3748b57bbeda8623e2f86c9a76c6caec16a45d0bd222f989e412c2ad44976d2d004d5c8221c489a27a70f00d03edb28710395076a1d0af612536961b8babc15fd17842f8ebc8693bc1ab13fb9347659c7b612d5f945bfd4f4f58295c53739a7940", 0x80, 0x9, 0x8000, 0x2, 0x8, 0x3, 0x3ff, 'syz1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x4, 0x70, 0x0, 0x7}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0xc, 0x915c, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x80, 0x9, 0x1}}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv4_getnetconf={0x44, 0x52, 0x400, 0x70bd2a, 0x25dfdc00, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x40}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_IFINDEX={0x8, 0x1, r11}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4a004}, 0x44050) 927.314623ms ago: executing program 3 (id=4804): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x2, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x703d25, 0x2, {0x0, 0x0, 0x0, r7, {0x10, 0xf}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xb}}]}}]}, 0x3c}}, 0xd4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', r7}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40f6aab6ce38d424}, 0x8000) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r4) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd554082879945460}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6962c09b4cbb2e49}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x23}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x800) 886.721957ms ago: executing program 3 (id=4805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800110007"], 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 825.626607ms ago: executing program 3 (id=4806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001040)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$FS_IOC_SETFLAGS(r1, 0x401c5820, 0x0) 719.438008ms ago: executing program 3 (id=4807): socket$inet_sctp(0x2, 0x5, 0x84) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="e8020000110001002cbd700000dcdf2500000000", @ANYRES32=r5, @ANYBLOB="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"], 0x2e8}, 0x1, 0x0, 0x0, 0x240000c0}, 0x2000e844) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x468, 0x180, 0x398, 0x398, 0x468, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, &(0x7f0000000300), {[{{@ipv6={@remote, @private1, [0xff0000ff, 0xffffff00, 0x0, 0xff], [0xff, 0xff, 0xffffff00, 0xff000000], 'ip6_vti0\x00', 'caif0\x00', {0xff}, {0xff}, 0x32, 0x8, 0x0, 0x55}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x8, 0x57, 0x0, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0={0xfc, 0x0, '\x00', 0x3}, [0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0xff000000, 0x70937fdb6710d6e9], [0xff, 0xff000000, 0xffffffff, 0xffffff00], 0x2, 0x800}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv6=@mcast2, 0x17, 0xa, 0x8d8}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x8, 0x9, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@private1, 0x11, 0x28, 0xa1f3}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'vxcan1\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x83}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'dummy0\x00', 'wlan1\x00', {0xff}, {}, 0x2c, 0x5, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xff], 'macvtap0\x00', 'hsr0\x00', {0xff}, {}, 0x1d, 0x2, 0x5, 0x10}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}, {0x5c, 0x1, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010101, @ipv6=@local, 0x2b, 0x37, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) getuid() ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000400000007111b600000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r9 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0xa6) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) write$tun(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042022eb"], 0x7a) 472.046022ms ago: executing program 6 (id=4808): r0 = socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="2cac3ac0e949d8dacb439449bad26c0000008db9cb08e1f81681466639b8e4611cdfba74588bc661e37656222805af645536dd5385f280d709a389ea83d63d79c184093691480954c7b1caa0560795356f88bfd4579276c6cbf096b95f088bf1ae16fb9b31211d7125682e2a9f3cb7b2ad32078fc54d31dfe21a03292d26b7bbda143e7bac7f4ad1a529af23380a9187d6cf2633689de8d4b8da442f6e7e91f8ac41fac855e3753a262a284e6e168951553fcaa838902f7d56637c3e536843461fb63f30dbead8054157b41e6f830aac4397b42830662fc02f43a76ee4c671f712ae4ff79199cbcfb5a8bb5b82cd2a5bfbce35947d130db55cac08bfb7b65d14d262b14f38883477005fb64874eb22df7a646d4de2b6c08ab0cfd263b2f088091d", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250300000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="060001004e230000"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89fe, &(0x7f0000000380)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0xa, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x18, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) epoll_wait(r9, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'wlc\x00', 0x26, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x2, 0xcb, 0x12d5c, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r10, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x8001, 0x1}}, 0x44) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 471.068783ms ago: executing program 8 (id=4809): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="549f7ba8d6e402580cce0319f136956ad7762ad86df99201fa344e22486fac6120745b1a1bf5fb0819d9b67197a874ff4b0a83f34bc0afd7ed94b1ec7d34486748c9c6298b5c422b9a78e33bc57b7cf3818db9b8872b25fb1b5176ac02bc51e7612eff8d91d7aa55922c2c0bdd2be0ffc64effecb17f99a3654dd21d63bb103337866ac5df34b44c4fa59d8d62aed89a1b23d53f57d248f0448d0d46f6edc1686a09818dcc5794199d6b2f9ada3667ee2f1e986a8545e8e9f91154b3ba2b03f013d13fb68f", 0xc5}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/157, 0x9d}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000004c00)=""/4047, 0xfcf}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000500)=""/98, 0x62}], 0x6}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "5c000002010400", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080), 0x1000000000000203) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async, rerun: 64) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async, rerun: 64) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 390.73006ms ago: executing program 3 (id=4810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x14}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fc020000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7"], 0x120}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r11 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10000004}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f00000004c0)={0xe0000012}) pwrite64(r7, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693) setsockopt$inet6_mreq(r9, 0x29, 0x6, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a02", @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) 303.19894ms ago: executing program 8 (id=4811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x10, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) 302.108429ms ago: executing program 5 (id=4812): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(r0, &(0x7f0000000140)="8eb72d777e5609e80641b80052c9a7b478ca8dd096a9afe9a18170170bc252e15c767ab4177cf1393841aefdba8b1264ad3a8e1d68d7fa0d90a01b34ae31db92f3379488951a456ccf35cc02d7c78cff06cc7bb345f1e712d3668cce1707e4bb4c34fb3f2a0c95c6ba60e0b7ff499739e610109ffe1865e9d464d606b2a024612d", 0x81) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002201c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2, @ANYBLOB="0a000100ff00"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 227.626138ms ago: executing program 8 (id=4813): syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x2, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a82"}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x38, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20000001}]}, 0x38}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000ea7a00000100d66f9b00000000007b00000018e27dd36a55c05752d02fec1d3032000004000000000000009d649823d240000000000000000000fd6f323cd23b0a42fb113bc436e34c06409a6a41a1fc97f2b228309735709763d7980e29585f969b3760ddbf0993cfc8104edd0869bc9f7accec7db0855cf8ca23af1be1230433c26b0f83e68ffffd2024338f620ac3bc10e2e8d431e303ade2d0df", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000354bb4fe040000000d300104b50c0000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x76, &(0x7f0000000140)=""/118, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x0, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x3, 0x6, 0xa}, {0x0, 0x1, 0x4, 0x6}], 0x10, 0x3}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) 187.138808ms ago: executing program 5 (id=4814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf255300000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000600000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r8, @ANYBLOB="08000500060000001000790a0000020004000100040002000c00178004000200040006001c001780040004000400030004000600040005"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x24, r7, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x60000}]}, 0x24}, 0x1, 0x0, 0x0, 0xc011}, 0x42001) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x88, 0xf, 0x8000ff, 0xf7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x8, 0x11, 0x2080}}) recvfrom(r5, 0x0, 0x0, 0x40002062, 0x0, 0x0) 99.473849ms ago: executing program 8 (id=4815): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRESDEC=r0, @ANYBLOB="200001", @ANYRES64=r1], 0x38}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 75.558536ms ago: executing program 5 (id=4816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x56835}}, 0x20}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x2004c010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000140)={0x1d, r9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4951}, 0x1) 0s ago: executing program 8 (id=4817): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYRES32, @ANYBLOB, @ANYRES64=r2], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000600020001000000080005"], 0x54}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): devsim0: renamed from eth0 [ 396.672738][T18189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 396.715880][T18189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 396.736939][T18189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 396.755502][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.762593][T18149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.805370][T18174] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.812526][T18174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.867761][T18333] tipc: Resetting bearer [ 396.910308][T18341] x_tables: duplicate underflow at hook 1 [ 396.989591][T18203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.002779][T18201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.035926][ T52] Bluetooth: hci3: command tx timeout [ 397.035939][T18207] Bluetooth: hci2: command tx timeout [ 397.105361][T18201] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.116107][T18207] Bluetooth: hci4: command tx timeout [ 397.150544][T18189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.176359][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.183514][T18149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.209392][T18172] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.216524][T18172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.231543][T18203] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.285690][T18173] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.292843][T18173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.316896][T18173] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.324088][T18173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.367649][T18189] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.411632][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.418852][T18149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.454366][T18158] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.461486][T18158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.558691][T18199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.989518][T18201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.049094][T18203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.086522][T18178] : left promiscuous mode [ 398.200873][T18373] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3216'. [ 398.236441][T18189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.249759][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 398.313412][T18178] tipc: Left network mode [ 398.393277][T18178] tipc: Left network mode [ 398.434814][T18199] veth0_vlan: entered promiscuous mode [ 398.483179][T18199] veth1_vlan: entered promiscuous mode [ 398.566323][T18386] RDS: rds_bind could not find a transport for ::ffff:172.30.2.4, load rds_tcp or rds_rdma? [ 398.667576][T18199] veth0_macvtap: entered promiscuous mode [ 398.727559][T18392] veth0: entered promiscuous mode [ 398.745969][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 398.772250][T18199] veth1_macvtap: entered promiscuous mode [ 398.799607][T18392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3217'. [ 398.915344][T18199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.961508][T18199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.994315][T18203] veth0_vlan: entered promiscuous mode [ 399.006118][T18153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.015331][T18175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.035228][T18175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.044233][T18175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.070060][T18203] veth1_vlan: entered promiscuous mode [ 399.092393][T18201] veth0_vlan: entered promiscuous mode [ 399.130681][T18201] veth1_vlan: entered promiscuous mode [ 399.156698][T18189] veth0_vlan: entered promiscuous mode [ 399.255891][T18203] veth0_macvtap: entered promiscuous mode [ 399.276325][T18189] veth1_vlan: entered promiscuous mode [ 399.290387][T18203] veth1_macvtap: entered promiscuous mode [ 399.333899][T18172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.341734][T18172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.394182][T18201] veth0_macvtap: entered promiscuous mode [ 399.413402][T18178] hsr_slave_0: left promiscuous mode [ 399.421076][T18178] hsr_slave_1: left promiscuous mode [ 399.431474][T18178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.440962][T18178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.457490][T18178] hsr_slave_0: left promiscuous mode [ 399.464798][T18178] hsr_slave_1: left promiscuous mode [ 399.470935][T18178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.480031][T18178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.493007][T18178] hsr_slave_0: left promiscuous mode [ 399.495657][T18398] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3218'. [ 399.507428][T18178] hsr_slave_1: left promiscuous mode [ 399.781513][T18178] team0 (unregistering): Port device team_slave_1 removed [ 399.791337][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3219'. [ 399.823238][T18403] netlink: 'syz.3.3219': attribute type 1 has an invalid length. [ 399.845492][T18178] team0 (unregistering): Port device team_slave_0 removed [ 400.509101][T18178] team0 (unregistering): Port device team_slave_1 removed [ 400.517701][T18405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3220'. [ 400.550427][T18178] team0 (unregistering): Port device team_slave_0 removed [ 401.505820][T18173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.518242][T18203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.535754][T18173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.547120][T18201] veth1_macvtap: entered promiscuous mode [ 401.579583][T18203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.589493][T18189] veth0_macvtap: entered promiscuous mode [ 401.613239][T18407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3221'. [ 401.647600][T18173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.656669][T18173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.682145][T18201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.703133][T18173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.726537][T18189] veth1_macvtap: entered promiscuous mode [ 401.736570][T18173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.761020][T18201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.844293][T18173] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.886150][T18173] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.895597][T18173] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.958863][T18189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.970683][T18173] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.148777][T18189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.186697][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3223'. [ 402.212645][T18172] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.233285][T18153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.233498][T18172] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.247707][T18153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.261816][T18172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.271308][T18153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.302164][T18423] netlink: 'syz.3.3224': attribute type 13 has an invalid length. [ 402.355131][T18423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.405550][T18426] batadv1: entered promiscuous mode [ 402.475506][T18149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.531732][T18149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.609481][T18153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.623674][T18153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.702954][T18172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.759467][T18172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.768993][T18149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.787226][T18149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.882344][T18153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.896226][T18153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.086997][T18439] netlink: 'syz.7.3227': attribute type 21 has an invalid length. [ 403.099322][T18439] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.117552][T18439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.124818][T18439] IPv6: NLM_F_CREATE should be set when creating new route [ 403.132115][T18439] IPv6: NLM_F_CREATE should be set when creating new route [ 403.139385][T18439] IPv6: NLM_F_CREATE should be set when creating new route [ 403.243329][T18178] IPVS: stop unused estimator thread 0... [ 403.345092][T18453] batadv1: entered promiscuous mode [ 403.401159][T18455] netlink: 'syz.8.3230': attribute type 1 has an invalid length. [ 403.659364][T18464] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 403.669477][T18464] macvtap1: entered allmulticast mode [ 403.675225][T18464] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 403.705924][T18464] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 403.712919][T18464] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 404.093529][T18470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3235'. [ 404.203283][T18477] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3237'. [ 404.992609][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3248'. [ 405.016316][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3248'. [ 405.155503][T18517] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 405.170831][T18517] bridge3: entered allmulticast mode [ 405.249003][T18521] syzkaller1: entered promiscuous mode [ 405.269797][T18521] syzkaller1: entered allmulticast mode [ 405.313938][T18521] syzkaller1: left promiscuous mode [ 405.344404][T18521] syzkaller1: left allmulticast mode [ 405.354101][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.508177][T18535] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3944. macoff=96 [ 405.642582][T18542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3258'. [ 405.677423][T18545] netlink: 'syz.5.3260': attribute type 1 has an invalid length. [ 405.686128][T18545] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3260'. [ 405.760732][T18548] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3259'. [ 405.809914][T18548] vlan2: entered allmulticast mode [ 405.834402][T18548] erspan0: entered allmulticast mode [ 405.932992][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3263'. [ 405.958780][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3263'. [ 406.045449][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3264'. [ 406.642866][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3275'. [ 406.662995][T18594] tipc: Started in network mode [ 406.668260][T18594] tipc: Node identity aa12a558abd5, cluster identity 4711 [ 406.677121][T18594] tipc: Enabled bearer , priority 0 [ 406.690281][T18594] syzkaller0: entered promiscuous mode [ 406.694446][T18602] sctp: [Deprecated]: syz.8.3274 (pid 18602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.694446][T18602] Use struct sctp_sack_info instead [ 406.696219][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3275'. [ 406.718548][T18594] syzkaller0: entered allmulticast mode [ 406.763565][T18594] tipc: Resetting bearer [ 406.818443][T18593] tipc: Resetting bearer [ 406.840098][T18593] tipc: Disabling bearer [ 407.268921][T18625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.312530][T18631] netlink: 'syz.5.3284': attribute type 3 has an invalid length. [ 409.018568][T18675] 8021q: VLANs not supported on ipvlan1 [ 409.406119][T18688] netlink: 'syz.8.3296': attribute type 1 has an invalid length. [ 409.822831][T18702] netlink: 'syz.6.3301': attribute type 1 has an invalid length. [ 410.145864][T18717] netlink: 'syz.5.3307': attribute type 15 has an invalid length. [ 410.301953][T18723] __nla_validate_parse: 5 callbacks suppressed [ 410.301973][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 410.352618][T18723] bridge0: entered promiscuous mode [ 410.364642][T18725] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3310'. [ 410.386279][T18723] bridge0: left promiscuous mode [ 410.984323][T18758] sctp: [Deprecated]: syz.7.3319 (pid 18758) Use of int in maxseg socket option. [ 410.984323][T18758] Use struct sctp_assoc_value instead [ 411.009450][T18325] IPVS: starting estimator thread 0... [ 411.016297][T18758] Cannot find add_set index 0 as target [ 411.026191][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3319'. [ 411.105785][T18760] IPVS: using max 35 ests per chain, 84000 per kthread [ 411.153186][T18764] netlink: 'syz.8.3322': attribute type 1 has an invalid length. [ 411.210415][T18764] bridge4: port 1(ip6gretap1) entered blocking state [ 411.233841][T18764] bridge4: port 1(ip6gretap1) entered disabled state [ 411.250984][T18764] ip6gretap1: entered allmulticast mode [ 411.282471][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3325'. [ 411.286609][T18764] ip6gretap1: entered promiscuous mode [ 411.304688][T18776] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3325'. [ 411.397388][T18773] veth3: entered promiscuous mode [ 411.402810][T18773] bridge4: port 2(veth3) entered blocking state [ 411.453694][T18773] bridge4: port 2(veth3) entered disabled state [ 411.460204][T18773] veth3: entered allmulticast mode [ 411.618364][T18764] bridge4: port 3(erspan0) entered blocking state [ 411.633716][T18764] bridge4: port 3(erspan0) entered disabled state [ 411.642476][T18764] erspan0: entered promiscuous mode [ 411.939117][T18811] erspan0: entered promiscuous mode [ 412.040217][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3334'. [ 412.049807][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3334'. [ 412.060028][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3334'. [ 412.069442][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3334'. [ 412.081162][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3334'. [ 412.171089][T18819] netlink: 'syz.6.3335': attribute type 2 has an invalid length. [ 413.092687][T18844] syzkaller0: entered promiscuous mode [ 413.104860][T18844] syzkaller0: entered allmulticast mode [ 413.189634][T18847] batadv1: entered promiscuous mode [ 413.238368][T18844] tipc: Started in network mode [ 413.243296][T18844] tipc: Node identity 46a228b1efc1, cluster identity 4711 [ 413.254241][T18844] tipc: Enabled bearer , priority 0 [ 413.267362][T18843] tipc: Resetting bearer [ 413.298981][T18843] tipc: Disabling bearer [ 413.740898][T18861] syz_tun: entered allmulticast mode [ 413.777239][T18861] netlink: 'syz.6.3345': attribute type 1 has an invalid length. [ 413.942343][T18864] dvmrp6: entered allmulticast mode [ 414.057376][T18866] dummy0: entered promiscuous mode [ 414.066125][T18866] macvtap1: entered promiscuous mode [ 414.072274][T18875] netlink: 'syz.5.3350': attribute type 1 has an invalid length. [ 414.081647][T18866] macvtap1: entered allmulticast mode [ 414.087276][T18866] dummy0: entered allmulticast mode [ 414.094785][T18867] IPVS: Unknown mcast interface: vetN1_macvtap [ 414.131110][T18876] netlink: 'syz.3.3349': attribute type 1 has an invalid length. [ 414.222372][T18857] syz_tun: left allmulticast mode [ 414.246140][T18882] bond1: (slave bridge1): making interface the new active one [ 414.256005][T18882] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 414.294858][T18884] bridge4: entered promiscuous mode [ 414.312743][T18884] bridge4: entered allmulticast mode [ 414.370950][T18888] netlink: 'syz.8.3353': attribute type 1 has an invalid length. [ 414.755172][T18916] netlink: 'syz.3.3360': attribute type 6 has an invalid length. [ 414.961325][T18920] tipc: Started in network mode [ 414.971778][T18920] tipc: Node identity eefea09e73af, cluster identity 4711 [ 414.979649][T18920] tipc: Enabled bearer , priority 0 [ 415.086588][T18922] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.094464][T18922] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.316038][T18922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.336218][T18922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.459106][T18934] __nla_validate_parse: 73 callbacks suppressed [ 415.459125][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3360'. [ 415.551944][T18925] syzkaller0: entered promiscuous mode [ 415.560073][T18925] syzkaller0: entered allmulticast mode [ 415.588255][T18932] tipc: Resetting bearer [ 415.609150][T18153] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.618900][T18153] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.660471][T18153] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.671332][T18153] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.682315][T18918] tipc: Resetting bearer [ 415.714255][T18918] tipc: Disabling bearer [ 415.826155][T18946] lo: Caught tx_queue_len zero misconfig [ 415.835163][T18946] netem: incorrect ge model size [ 415.840600][T18946] netem: change failed [ 416.098066][T18960] bridge4: entered promiscuous mode [ 416.115099][T18968] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 416.186419][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3370'. [ 416.340752][T18976] netlink: 'syz.3.3375': attribute type 5 has an invalid length. [ 416.348932][T18976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3375'. [ 416.408634][T18980] batadv1: entered promiscuous mode [ 416.526404][T18990] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3373'. [ 416.564458][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 416.884574][T18999] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3383'. [ 416.924967][T18999] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3383'. [ 416.955651][T19001] bond0: option all_slaves_active: invalid value (7) [ 417.119401][T19021] netlink: 'syz.5.3388': attribute type 4 has an invalid length. [ 417.246109][T19024] dvmrp1: entered allmulticast mode [ 417.251542][T19026] dvmrp1: left allmulticast mode [ 417.381881][T19034] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3390'. [ 417.388862][T19033] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3391'. [ 417.428347][T19027] batadv1: entered promiscuous mode [ 417.615849][T19029] batadv1: entered promiscuous mode [ 417.917108][T19057] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3394'. [ 417.929756][T19037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.941467][T19037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.094885][T19037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.105844][T19037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.219684][T19063] block nbd3: Unsupported socket: should be TCP or UNIX. [ 418.244986][T19037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.259110][T19037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.365553][T19037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.376287][T19037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.474373][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 418.561875][T18173] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.570587][T18173] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.702156][T18149] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.719664][T18149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.744785][T18149] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.763156][T18149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.816469][T18173] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.848507][T18173] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.055676][T19091] netlink: 'syz.3.3404': attribute type 2 has an invalid length. [ 419.070109][T19094] bridge_slave_0: left allmulticast mode [ 419.076141][T19094] bridge_slave_0: left promiscuous mode [ 419.082024][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.092291][T19094] bridge_slave_1: left allmulticast mode [ 419.103385][T19094] bridge_slave_1: left promiscuous mode [ 419.109978][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.131132][T19094] bond0: (slave bond_slave_0): Releasing backup interface [ 419.166783][T19094] bond0: (slave bond_slave_1): Releasing backup interface [ 419.184830][T19094] team0: Port device team_slave_0 removed [ 419.204153][T19094] team0: Port device team_slave_1 removed [ 419.221514][T19094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.241200][T19094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.273309][T19094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.395725][T19104] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 419.611450][T19116] erspan0: left promiscuous mode [ 419.621931][T19116] bridge4: port 3(erspan0) entered disabled state [ 419.705733][T19116] bridge_slave_0: left allmulticast mode [ 419.721008][T19116] bridge_slave_0: left promiscuous mode [ 419.729170][T19116] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.741478][T19116] bridge_slave_1: left allmulticast mode [ 419.749224][T19116] bridge_slave_1: left promiscuous mode [ 419.765370][T19116] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.787829][T19116] bond0: (slave bond_slave_0): Releasing backup interface [ 419.802459][T19116] bond0: (slave bond_slave_1): Releasing backup interface [ 419.828847][T19116] team0: Port device team_slave_0 removed [ 419.857452][T19116] team0: Port device team_slave_1 removed [ 419.866548][T19116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.875169][T19116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.904814][T19116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.912303][T19116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.923075][T19116] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.082414][ T56] block nbd0: Possible stuck request ffff888025147000: control (read@0,1024B). Runtime 330 seconds [ 420.094152][ T56] block nbd0: Possible stuck request ffff8880251471c0: control (read@1024,1024B). Runtime 330 seconds [ 420.105422][ T56] block nbd0: Possible stuck request ffff888025147380: control (read@2048,1024B). Runtime 330 seconds [ 420.117827][ T56] block nbd0: Possible stuck request ffff888025147540: control (read@3072,1024B). Runtime 330 seconds [ 420.248319][T19139] netlink: 'syz.7.3412': attribute type 8 has an invalid length. [ 420.276066][T19139] bond0: entered promiscuous mode [ 420.283003][T19139] gretap0: entered promiscuous mode [ 420.293338][T19139] veth0_to_batadv: entered promiscuous mode [ 420.301920][T19139] hsr1: entered promiscuous mode [ 420.602636][T19159] __nla_validate_parse: 6 callbacks suppressed [ 420.602655][T19159] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3416'. [ 420.626292][T19153] batadv1: entered promiscuous mode [ 421.727728][T19193] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 422.111965][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 422.121680][T19201] macsec0: left allmulticast mode [ 422.127986][T19201] veth1_macvtap: left allmulticast mode [ 422.134845][T19201] macsec0: left promiscuous mode [ 422.140345][T19201] bridge0: port 3(macsec0) entered disabled state [ 422.149607][T19201] bridge_slave_1: left allmulticast mode [ 422.155877][T19201] bridge_slave_1: left promiscuous mode [ 422.161773][T19201] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.172894][T19201] bridge_slave_0: left allmulticast mode [ 422.180268][T19201] bridge_slave_0: left promiscuous mode [ 422.188928][T19201] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.253379][T19207] batadv1: entered promiscuous mode [ 422.351748][T19211] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3429'. [ 422.381894][T19210] netlink: 'syz.7.3430': attribute type 4 has an invalid length. [ 422.968582][T19228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3436'. [ 423.302603][T18153] tipc: Resetting bearer [ 423.312785][T19246] netlink: 'syz.7.3442': attribute type 4 has an invalid length. [ 423.509947][T19259] batadv1: entered promiscuous mode [ 423.617207][T19264] FAULT_INJECTION: forcing a failure. [ 423.617207][T19264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.644016][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3445'. [ 423.645895][T19264] CPU: 0 UID: 0 PID: 19264 Comm: syz.7.3447 Not tainted syzkaller #0 PREEMPT(full) [ 423.645919][T19264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.645930][T19264] Call Trace: [ 423.645937][T19264] [ 423.645944][T19264] dump_stack_lvl+0x189/0x250 [ 423.645970][T19264] ? __pfx____ratelimit+0x10/0x10 [ 423.645994][T19264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.646016][T19264] ? __pfx__printk+0x10/0x10 [ 423.646034][T19264] ? __might_fault+0xb0/0x130 [ 423.646066][T19264] should_fail_ex+0x414/0x560 [ 423.646095][T19264] _copy_from_iter+0x1de/0x1790 [ 423.646120][T19264] ? _copy_from_iter+0x24f/0x1790 [ 423.646144][T19264] ? __pfx__copy_from_iter+0x10/0x10 [ 423.646159][T19264] ? sock_alloc_send_pskb+0x86b/0x980 [ 423.646185][T19264] ? __pfx__copy_from_iter+0x10/0x10 [ 423.646206][T19264] ? page_copy_sane+0x16a/0x280 [ 423.646227][T19264] copy_page_from_iter+0xdd/0x170 [ 423.646251][T19264] skb_copy_datagram_from_iter+0x306/0x720 [ 423.646282][T19264] tun_get_user+0x1691/0x3e90 [ 423.646321][T19264] ? aa_file_perm+0x44d/0x1550 [ 423.646337][T19264] ? __pfx_tun_get_user+0x10/0x10 [ 423.646356][T19264] ? _parse_integer_limit+0x1ae/0x1f0 [ 423.646380][T19264] ? __lock_acquire+0xab9/0xd20 [ 423.646403][T19264] ? ref_tracker_alloc+0x318/0x460 [ 423.646418][T19264] ? __lock_acquire+0xab9/0xd20 [ 423.646436][T19264] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 423.646457][T19264] ? tun_get+0x1c/0x2f0 [ 423.646482][T19264] ? tun_get+0x1c/0x2f0 [ 423.646499][T19264] ? tun_get+0x1c/0x2f0 [ 423.646522][T19264] tun_chr_write_iter+0x113/0x200 [ 423.646545][T19264] vfs_write+0x5c9/0xb30 [ 423.646571][T19264] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 423.646591][T19264] ? __pfx_vfs_write+0x10/0x10 [ 423.646623][T19264] ? __fget_files+0x2a/0x420 [ 423.646647][T19264] ksys_write+0x145/0x250 [ 423.646671][T19264] ? __pfx_ksys_write+0x10/0x10 [ 423.646696][T19264] ? do_syscall_64+0xbe/0xfa0 [ 423.646717][T19264] do_syscall_64+0xfa/0xfa0 [ 423.646732][T19264] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.646748][T19264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.646772][T19264] ? clear_bhb_loop+0x60/0xb0 [ 423.646791][T19264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.646807][T19264] RIP: 0033:0x7fed9cb8f6c9 [ 423.646823][T19264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.646836][T19264] RSP: 002b:00007fed9adf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.646855][T19264] RAX: ffffffffffffffda RBX: 00007fed9cde5fa0 RCX: 00007fed9cb8f6c9 [ 423.646868][T19264] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000004 [ 423.646883][T19264] RBP: 00007fed9adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.646893][T19264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.646903][T19264] R13: 00007fed9cde6038 R14: 00007fed9cde5fa0 R15: 00007ffe6c337668 [ 423.646928][T19264] [ 424.143651][ T5874] IPVS: starting estimator thread 0... [ 424.236067][T19288] IPVS: using max 35 ests per chain, 84000 per kthread [ 424.626363][T19307] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3456'. [ 424.758024][T19309] netlink: 'syz.6.3457': attribute type 4 has an invalid length. [ 424.849016][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3458'. [ 425.000912][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3460'. [ 425.010483][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3460'. [ 425.019726][T19319] netlink: 'syz.6.3460': attribute type 12 has an invalid length. [ 425.207807][T19336] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 425.296676][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3460'. [ 425.348699][T19341] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 425.361113][T19341] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 425.415888][T19341] bond1: (slave vcan0): making interface the new active one [ 425.424793][T19341] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 425.453240][T19343] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 425.479012][T19343] bond1: (slave vcan1): Enslaving as a backup interface with an up link [ 425.489152][T19336] bond1: entered allmulticast mode [ 425.498730][T19336] vcan0: entered allmulticast mode [ 425.504857][T19336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.760961][T19361] netlink: 'syz.8.3471': attribute type 4 has an invalid length. [ 426.140372][T19394] syz.7.3479 uses old SIOCAX25GETINFO [ 426.229802][T19396] Can't find ip_set type hash:ip$mec [ 426.243980][T19400] __nla_validate_parse: 1 callbacks suppressed [ 426.244025][T19400] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3484'. [ 426.634103][T19413] netlink: 'syz.3.3487': attribute type 4 has an invalid length. [ 426.967366][T19425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.984614][T19425] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 427.040339][T19425] bond0: (slave gre0): Error -95 calling set_mac_address [ 427.375369][T19445] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3490'. [ 427.692585][T19455] batadv1: entered promiscuous mode [ 427.873951][T19455] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3496'. [ 427.985691][T19462] batadv1: entered promiscuous mode [ 428.095064][T19464] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3497'. [ 428.320075][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3498'. [ 428.685928][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3500'. [ 428.707409][T19480] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3500'. [ 428.759905][T19480] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3500'. [ 428.805909][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3500'. [ 429.413466][T19520] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 429.662710][T19529] x_tables: duplicate underflow at hook 2 [ 430.492858][T19556] batadv1: entered promiscuous mode [ 430.526832][T19560] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3514'. [ 431.282426][T19588] netlink: 'syz.7.3520': attribute type 1 has an invalid length. [ 431.319734][T19589] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 431.380574][T19589] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 431.446004][T19593] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 431.474785][T19593] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 431.760599][T19607] batadv1: entered promiscuous mode [ 431.792219][T19612] netlink: 'syz.5.3528': attribute type 1 has an invalid length. [ 431.809744][T19613] __nla_validate_parse: 1 callbacks suppressed [ 431.809760][T19613] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3527'. [ 431.930152][T19621] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 431.960575][T19621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.459526][T19645] tipc: Enabling of bearer rejected, already enabled [ 432.481075][T19645] netem: change failed [ 432.497135][T19646] netlink: 'syz.8.3538': attribute type 13 has an invalid length. [ 432.505061][T19646] netlink: 'syz.8.3538': attribute type 17 has an invalid length. [ 432.702774][T19646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.732736][T19649] tipc: Resetting bearer [ 433.003080][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3542'. [ 433.167580][T19669] syzkaller1: entered promiscuous mode [ 433.197556][T19669] syzkaller1: entered allmulticast mode [ 433.365652][T19690] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 433.391488][T19692] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3549'. [ 433.408004][T19690] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3550'. [ 433.427265][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3549'. [ 433.650230][T19698] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3552'. [ 434.413507][T19727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3558'. [ 434.513880][T19730] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 434.657118][T19732] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3562'. [ 434.673997][T19732] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3562'. [ 434.736599][T19734] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 434.750414][T19734] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3562'. [ 435.758840][T19742] IPVS: persistence engine module ip_vs_pe_@ not found [ 435.766631][T19745] batadv1: entered promiscuous mode [ 435.905917][T19749] syzkaller0: entered promiscuous mode [ 435.911424][T19749] syzkaller0: entered allmulticast mode [ 435.925022][T19749] tipc: Enabling of bearer rejected, failed to enable media [ 436.073973][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.164196][T19768] IPv6: NLM_F_REPLACE set, but no existing node found! [ 436.348804][T19779] tipc: Enabling of bearer rejected, already enabled [ 436.436413][T19783] macvtap0: entered promiscuous mode [ 436.441928][T19783] macvtap0: entered allmulticast mode [ 436.699906][ T30] audit: type=1800 audit(1763031242.878:9): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3577" name="memory.events" dev="tmpfs" ino=391 res=0 errno=0 [ 436.922161][T19807] rdma_op ffff88806fb651f0 conn xmit_rdma 0000000000000000 [ 436.930168][T19805] batadv_slave_1: entered promiscuous mode [ 436.950473][T19810] __nla_validate_parse: 15 callbacks suppressed [ 436.950491][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3584'. [ 436.984845][T19804] batadv_slave_1: left promiscuous mode [ 436.992587][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3584'. [ 437.116502][T19820] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3589'. [ 437.394329][T19831] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 437.412610][T19831] openvswitch: netlink: Message has 8 unknown bytes. [ 437.749079][T19857] netlink: 'syz.8.3601': attribute type 5 has an invalid length. [ 437.759988][T19857] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3601'. [ 437.882727][T19861] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3600'. [ 437.917072][T19863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.943554][T19861] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3600'. [ 437.953261][T19861] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3600'. [ 438.437078][T19891] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 438.445704][T19891] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 438.452979][T19891] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 438.456114][T19896] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3609'. [ 438.459977][T19891] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 438.476446][T19889] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 438.578184][T19903] netlink: 'syz.5.3612': attribute type 5 has an invalid length. [ 438.586095][T19903] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3612'. [ 438.606195][T19901] batadv1: entered promiscuous mode [ 438.652053][T19905] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 438.747510][T19905] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.763819][T19901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3611'. [ 438.819607][T19905] netlink: 'syz.8.3613': attribute type 10 has an invalid length. [ 438.923320][T19905] mac80211_hwsim hwsim47 wlan1: left allmulticast mode [ 438.940893][T19905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.961332][T19905] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 439.328740][T19928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.353305][T19926] netlink: 'syz.7.3617': attribute type 10 has an invalid length. [ 439.390303][T19926] team0: Device ipvlan1 failed to register rx_handler [ 439.624538][T19932] netlink: 'syz.8.3620': attribute type 46 has an invalid length. [ 439.690273][T19946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.702436][T19946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.712641][T19946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.725770][T19946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.736209][T19946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.919604][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.097443][T19993] bond2: entered promiscuous mode [ 441.102632][T19993] bond2: entered allmulticast mode [ 441.108734][T19993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.317291][T20005] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 441.536928][T20018] tipc: Cannot configure node identity twice [ 441.605979][T20016] sctp: [Deprecated]: syz.6.3643 (pid 20016) Use of int in maxseg socket option. [ 441.605979][T20016] Use struct sctp_assoc_value instead [ 441.827254][T20036] ip6_vti0: Caught tx_queue_len zero misconfig [ 442.022654][T20050] __nla_validate_parse: 10 callbacks suppressed [ 442.022671][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3657'. [ 442.565386][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'. [ 442.581424][T20063] batadv1: entered promiscuous mode [ 442.709562][T20069] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3660'. [ 443.163491][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3666'. [ 443.240542][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3666'. [ 443.291095][T20091] netlink: 'syz.8.3669': attribute type 153 has an invalid length. [ 443.309844][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3669'. [ 443.421856][T20094] batadv1: entered promiscuous mode [ 443.496926][T20103] netlink: 'syz.8.3672': attribute type 5 has an invalid length. [ 443.511666][T20103] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3672'. [ 443.542421][T20104] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3670'. [ 443.679744][T20113] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.698094][T20109] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.288852][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3681'. [ 444.304414][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3681'. [ 444.617474][T20151] net_ratelimit: 61 callbacks suppressed [ 444.617492][T20151] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 444.649301][T20153] netlink: 'syz.3.3685': attribute type 5 has an invalid length. [ 444.813173][T20169] netlink: 'syz.5.3690': attribute type 13 has an invalid length. [ 444.890737][T20174] netlink: 'syz.7.3689': attribute type 11 has an invalid length. [ 445.034158][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.056669][T20169] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.064433][T20169] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.287116][T20169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.302373][T20169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.542698][T18178] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.589259][T18178] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.615453][T18178] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.630875][T18178] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.669026][T20201] netlink: 'syz.8.3699': attribute type 13 has an invalid length. [ 445.686654][T20201] netlink: 'syz.8.3699': attribute type 17 has an invalid length. [ 445.717262][T20201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.778382][T20209] netlink: 'syz.6.3703': attribute type 1 has an invalid length. [ 445.898037][T20209] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 445.923683][T20209] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 445.978845][T20224] netlink: 'syz.5.3707': attribute type 1 has an invalid length. [ 446.004922][T20219] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 446.061485][T20224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.083037][T20225] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 446.100058][T18153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.132585][T18153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.162256][T20209] macvlan2: entered promiscuous mode [ 446.169026][T20209] macvlan2: entered allmulticast mode [ 446.175999][T20209] bond3: entered promiscuous mode [ 446.183345][T20209] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.194692][T20209] bond3: left promiscuous mode [ 446.552798][T20254] netlink: 'syz.6.3715': attribute type 1 has an invalid length. [ 446.563940][T20254] netlink: 'syz.6.3715': attribute type 2 has an invalid length. [ 446.591631][T20260] tipc: Enabled bearer , priority 0 [ 446.689507][T20260] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 446.699352][T20260] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 446.707752][T20260] tipc: Resetting bearer [ 446.753979][T20260] tipc: Resetting bearer [ 447.048042][T20278] __nla_validate_parse: 14 callbacks suppressed [ 447.048060][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3722'. [ 447.222563][T20286] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3724'. [ 447.231953][T20286] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3724'. [ 447.295661][T20286] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3724'. [ 447.401654][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 447.560628][T20306] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3733'. [ 447.602086][T18178] tipc: Resetting bearer [ 447.625917][T20312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'. [ 447.644296][T20312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'. [ 447.672054][T20314] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3736'. [ 447.743703][ T10] tipc: Node number set to 29861208 [ 447.921015][T20329] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3738'. [ 448.197330][T20342] bridge5: entered allmulticast mode [ 448.345684][T20351] batadv1: entered promiscuous mode [ 448.451253][T20356] bond2: entered promiscuous mode [ 448.457190][T20356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.785172][T20356] bond2 (unregistering): Released all slaves [ 448.854568][T20367] tipc: Started in network mode [ 448.859466][T20367] tipc: Node identity 080211000001, cluster identity 4711 [ 448.879510][T20367] tipc: Enabled bearer , priority 0 [ 448.919422][T20367] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 448.943902][T20367] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 448.949222][T20372] openvswitch: netlink: Message has -2 unknown bytes. [ 448.953334][T20367] tipc: Resetting bearer [ 448.969357][T20372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.025517][T20367] tipc: Resetting bearer [ 449.442470][T20398] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 449.525363][T20407] validate_nla: 3 callbacks suppressed [ 449.525380][T20407] netlink: 'syz.3.3763': attribute type 12 has an invalid length. [ 449.591370][T20407] netlink: 'syz.3.3763': attribute type 4 has an invalid length. [ 449.601514][T20409] x_tables: duplicate underflow at hook 1 [ 449.803618][T20421] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.895450][T18325] tipc: Node number set to 134418688 [ 449.919141][T18178] tipc: Resetting bearer [ 450.193788][ T56] block nbd0: Possible stuck request ffff888025147000: control (read@0,1024B). Runtime 360 seconds [ 450.205097][ T56] block nbd0: Possible stuck request ffff8880251471c0: control (read@1024,1024B). Runtime 360 seconds [ 450.216437][ T56] block nbd0: Possible stuck request ffff888025147380: control (read@2048,1024B). Runtime 360 seconds [ 450.227937][ T56] block nbd0: Possible stuck request ffff888025147540: control (read@3072,1024B). Runtime 360 seconds [ 450.678192][T20439] team0 (unregistering): Port device team_slave_0 removed [ 450.692272][T20439] team0 (unregistering): Port device team_slave_1 removed [ 450.946405][T20466] tipc: Enabling of bearer rejected, failed to enable media [ 451.056296][T20477] netlink: 'syz.7.3784': attribute type 7 has an invalid length. [ 451.198256][T20483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.236040][T20483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.382003][T20493] tipc: Enabling of bearer rejected, already enabled [ 451.486528][T20499] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.497437][T20499] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.111496][T20520] __nla_validate_parse: 20 callbacks suppressed [ 452.111514][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3799'. [ 452.191438][T20527] batadv1: entered promiscuous mode [ 452.197782][T20529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.220805][T20529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.232737][T20524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3799'. [ 452.240130][T20531] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3800'. [ 452.504118][T20543] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 452.579995][ T10] IPVS: starting estimator thread 0... [ 452.636267][T20542] bond4: up delay (1) is not a multiple of miimon (6), value rounded to 0 ms [ 452.683694][T20549] IPVS: using max 31 ests per chain, 74400 per kthread [ 452.810564][T20568] netlink: 584 bytes leftover after parsing attributes in process `syz.6.3805'. [ 453.057160][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3811'. [ 453.067671][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3811'. [ 453.174389][T20578] netlink: 'syz.5.3812': attribute type 1 has an invalid length. [ 453.187917][T20578] netlink: 'syz.5.3812': attribute type 1 has an invalid length. [ 453.427289][T20593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3819'. [ 453.529691][T20599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3818'. [ 453.539886][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3817'. [ 453.555849][T20602] tipc: Enabled bearer , priority 0 [ 453.591014][T20599] veth1: entered promiscuous mode [ 453.734440][T20602] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 453.742395][T20602] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 453.961571][T20604] tipc: Resetting bearer [ 454.246331][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3821'. [ 454.683714][ T43] tipc: Node number set to 2639372446 [ 455.753148][T20671] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 455.764346][T20671] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 455.772173][T20671] tipc: Resetting bearer [ 455.805368][T20673] netlink: 'syz.5.3838': attribute type 4 has an invalid length. [ 455.820814][T20673] netlink: 'syz.5.3838': attribute type 4 has an invalid length. [ 455.845783][T20673] netlink: 'syz.5.3838': attribute type 1 has an invalid length. [ 455.862446][T20671] syzkaller1: entered promiscuous mode [ 455.871482][T20671] syzkaller1: entered allmulticast mode [ 456.280787][T20686] bond4: entered allmulticast mode [ 456.298472][T20686] ip6gretap1: entered allmulticast mode [ 456.310448][T20686] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 456.742307][T20718] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 457.035596][T20731] netlink: 'syz.5.3858': attribute type 5 has an invalid length. [ 457.247292][T20737] xt_CT: No such helper "snmp" [ 457.460585][T20752] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.711729][T20763] netlink: 'syz.6.3870': attribute type 5 has an invalid length. [ 457.728586][T20763] __nla_validate_parse: 10 callbacks suppressed [ 457.728604][T20763] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3870'. [ 457.949527][T20779] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3873'. [ 458.283483][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3876'. [ 458.387394][T20792] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.881772][T20813] netlink: 'syz.5.3884': attribute type 5 has an invalid length. [ 458.891648][T20813] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3884'. [ 458.992993][T20816] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3885'. [ 459.038167][T20823] batadv1: entered promiscuous mode [ 459.145815][T20826] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3887'. [ 459.509325][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3892'. [ 459.940011][T20855] netlink: 'syz.5.3897': attribute type 5 has an invalid length. [ 459.947879][T20855] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3897'. [ 460.177372][T20865] netlink: 'syz.5.3900': attribute type 2 has an invalid length. [ 460.186519][T20865] netlink: 'syz.5.3900': attribute type 5 has an invalid length. [ 460.220665][T20867] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3901'. [ 460.397012][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 460.532604][T20878] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.771199][T20888] netlink: 'syz.5.3908': attribute type 1 has an invalid length. [ 460.793880][T18207] Bluetooth: hci4: command 0x0405 tx timeout [ 460.883176][T20891] bond5: entered promiscuous mode [ 460.924151][T20891] bond5: entered allmulticast mode [ 460.929726][T20891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.171702][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3913'. [ 461.269378][T20898] openvswitch: netlink: Message has 572 unknown bytes. [ 461.299503][T20898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.359401][T20898] netlink: 'syz.8.3911': attribute type 1 has an invalid length. [ 461.753197][T20925] netlink: 'syz.3.3919': attribute type 5 has an invalid length. [ 461.966636][T20932] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 461.977310][T20932] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 462.008681][T20932] tipc: Resetting bearer [ 462.443182][T20948] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 462.503199][T20953] FAULT_INJECTION: forcing a failure. [ 462.503199][T20953] name failslab, interval 1, probability 0, space 0, times 0 [ 462.542184][T20953] CPU: 1 UID: 0 PID: 20953 Comm: syz.8.3928 Not tainted syzkaller #0 PREEMPT(full) [ 462.542210][T20953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.542220][T20953] Call Trace: [ 462.542228][T20953] [ 462.542236][T20953] dump_stack_lvl+0x189/0x250 [ 462.542263][T20953] ? __pfx____ratelimit+0x10/0x10 [ 462.542286][T20953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.542308][T20953] ? __pfx__printk+0x10/0x10 [ 462.542330][T20953] ? __pfx___might_resched+0x10/0x10 [ 462.542346][T20953] ? fs_reclaim_acquire+0x7d/0x100 [ 462.542365][T20953] should_fail_ex+0x414/0x560 [ 462.542393][T20953] should_failslab+0xa8/0x100 [ 462.542410][T20953] kmem_cache_alloc_node_noprof+0x77/0x710 [ 462.542432][T20953] ? __alloc_skb+0x112/0x2d0 [ 462.542450][T20953] __alloc_skb+0x112/0x2d0 [ 462.542472][T20953] netlink_sendmsg+0x5c6/0xb30 [ 462.542500][T20953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.542521][T20953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 462.542543][T20953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.542559][T20953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.542576][T20953] __sock_sendmsg+0x21c/0x270 [ 462.542602][T20953] ____sys_sendmsg+0x505/0x830 [ 462.542626][T20953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.542652][T20953] ? import_iovec+0x74/0xa0 [ 462.542676][T20953] ___sys_sendmsg+0x21f/0x2a0 [ 462.542697][T20953] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.542762][T20953] ? __fget_files+0x2a/0x420 [ 462.542778][T20953] ? __fget_files+0x3a0/0x420 [ 462.542803][T20953] __x64_sys_sendmsg+0x19b/0x260 [ 462.542823][T20953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.542851][T20953] ? __pfx_ksys_write+0x10/0x10 [ 462.542877][T20953] ? do_syscall_64+0xbe/0xfa0 [ 462.542899][T20953] do_syscall_64+0xfa/0xfa0 [ 462.542914][T20953] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.542930][T20953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.542946][T20953] ? clear_bhb_loop+0x60/0xb0 [ 462.542967][T20953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.542984][T20953] RIP: 0033:0x7fc2a1b8f6c9 [ 462.543000][T20953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.543016][T20953] RSP: 002b:00007fc2a29db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.543036][T20953] RAX: ffffffffffffffda RBX: 00007fc2a1de6090 RCX: 00007fc2a1b8f6c9 [ 462.543049][T20953] RDX: 00000000000080c0 RSI: 0000200000000140 RDI: 0000000000000005 [ 462.543061][T20953] RBP: 00007fc2a29db090 R08: 0000000000000000 R09: 0000000000000000 [ 462.543072][T20953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.543083][T20953] R13: 00007fc2a1de6128 R14: 00007fc2a1de6090 R15: 00007ffd0785b128 [ 462.543113][T20953] [ 463.100899][T20970] netlink: 'syz.7.3933': attribute type 5 has an invalid length. [ 463.125295][T20970] __nla_validate_parse: 4 callbacks suppressed [ 463.125313][T20970] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3933'. [ 463.229555][T20983] xt_bpf: check failed: parse error [ 463.249525][T20986] xt_bpf: check failed: parse error [ 463.406946][T20995] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.699741][T21009] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3946'. [ 463.746684][T21012] netlink: 'syz.5.3947': attribute type 6 has an invalid length. [ 463.755415][T21012] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3947'. [ 463.755773][T21014] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3945'. [ 463.782354][T21009] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3946'. [ 463.808336][T21009] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3946'. [ 463.819507][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3946'. [ 463.927978][T21017] xt_l2tp: invalid flags combination: 8 [ 464.244068][T21038] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 464.259873][T21038] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 464.272626][T21038] tipc: Resetting bearer [ 464.391433][T21043] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3954'. [ 464.592250][T21052] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3958'. [ 464.612202][T21051] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.625619][T21051] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 464.635721][T21051] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 464.635880][T21054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3959'. [ 464.675688][T21054] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 464.686315][T21054] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 464.713236][T21054] tipc: Resetting bearer [ 464.850777][T21059] Cannot find add_set index 1 as target [ 465.406428][T21091] sctp: [Deprecated]: syz.7.3964 (pid 21091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.406428][T21091] Use struct sctp_sack_info instead [ 465.739382][T21068] infiniband syz0: set down [ 465.744609][T21068] infiniband syz0: added veth1_to_hsr [ 465.812191][T21068] RDS/IB: syz0: added [ 465.826048][T21068] smc: adding ib device syz0 with port count 1 [ 465.832314][T21068] smc: ib device syz0 port 1 has no pnetid [ 466.300175][T21105] tipc: Resetting bearer [ 466.327464][T21115] bond2: left promiscuous mode [ 466.332270][T21115] bond2: left allmulticast mode [ 466.340027][T21115] bond5: left promiscuous mode [ 466.345813][T21115] bond5: left allmulticast mode [ 466.874638][T21140] FAULT_INJECTION: forcing a failure. [ 466.874638][T21140] name failslab, interval 1, probability 0, space 0, times 0 [ 466.904699][T21140] CPU: 1 UID: 0 PID: 21140 Comm: syz.6.3981 Not tainted syzkaller #0 PREEMPT(full) [ 466.904724][T21140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.904734][T21140] Call Trace: [ 466.904746][T21140] [ 466.904754][T21140] dump_stack_lvl+0x189/0x250 [ 466.904781][T21140] ? __pfx____ratelimit+0x10/0x10 [ 466.904807][T21140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.904829][T21140] ? __pfx__printk+0x10/0x10 [ 466.904853][T21140] ? __lock_acquire+0xab9/0xd20 [ 466.904878][T21140] should_fail_ex+0x414/0x560 [ 466.904908][T21140] should_failslab+0xa8/0x100 [ 466.904927][T21140] kmem_cache_alloc_noprof+0x74/0x6e0 [ 466.904951][T21140] ? skb_clone+0x212/0x3a0 [ 466.904977][T21140] skb_clone+0x212/0x3a0 [ 466.905001][T21140] __netlink_deliver_tap+0x404/0x850 [ 466.905034][T21140] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.905054][T21140] netlink_deliver_tap+0x19c/0x1b0 [ 466.905071][T21140] netlink_unicast+0x7fa/0x9e0 [ 466.905104][T21140] ? __pfx_netlink_unicast+0x10/0x10 [ 466.905130][T21140] ? netlink_sendmsg+0x642/0xb30 [ 466.905146][T21140] ? skb_put+0x11b/0x210 [ 466.905167][T21140] netlink_sendmsg+0x805/0xb30 [ 466.905196][T21140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.905218][T21140] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.905244][T21140] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.905261][T21140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.905280][T21140] __sock_sendmsg+0x21c/0x270 [ 466.905312][T21140] sock_write_iter+0x279/0x360 [ 466.905337][T21140] ? __pfx_sock_write_iter+0x10/0x10 [ 466.905382][T21140] do_iter_readv_writev+0x623/0x8c0 [ 466.905414][T21140] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 466.905435][T21140] ? common_file_perm+0x1b5/0x230 [ 466.905462][T21140] ? bpf_lsm_file_permission+0x9/0x20 [ 466.905478][T21140] ? security_file_permission+0x75/0x290 [ 466.905499][T21140] ? rw_verify_area+0x255/0x4d0 [ 466.905525][T21140] vfs_writev+0x31a/0x960 [ 466.905547][T21140] ? __lock_acquire+0xab9/0xd20 [ 466.905565][T21140] ? __pfx_vfs_writev+0x10/0x10 [ 466.905601][T21140] ? __fget_files+0x2a/0x420 [ 466.905622][T21140] ? __fget_files+0x3a0/0x420 [ 466.905638][T21140] ? __fget_files+0x2a/0x420 [ 466.905663][T21140] do_writev+0x14d/0x2d0 [ 466.905682][T21140] ? __pfx_do_writev+0x10/0x10 [ 466.905703][T21140] ? do_syscall_64+0xbe/0xfa0 [ 466.905723][T21140] do_syscall_64+0xfa/0xfa0 [ 466.905737][T21140] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.905755][T21140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.905772][T21140] ? clear_bhb_loop+0x60/0xb0 [ 466.905792][T21140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.905809][T21140] RIP: 0033:0x7fe53f78f6c9 [ 466.905825][T21140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.905839][T21140] RSP: 002b:00007fe54055d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 466.905858][T21140] RAX: ffffffffffffffda RBX: 00007fe53f9e5fa0 RCX: 00007fe53f78f6c9 [ 466.905871][T21140] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 000000000000000c [ 466.905882][T21140] RBP: 00007fe54055d090 R08: 0000000000000000 R09: 0000000000000000 [ 466.905893][T21140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.905904][T21140] R13: 00007fe53f9e6038 R14: 00007fe53f9e5fa0 R15: 00007ffe44d3b4f8 [ 466.905936][T21140] [ 466.906030][T21140] netlink: 'syz.6.3981': attribute type 4 has an invalid length. [ 467.150157][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 467.272830][T21148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.909992][T21173] sit0: entered promiscuous mode [ 467.944584][T21174] tipc: Invalid UDP bearer configuration [ 467.944642][T21174] tipc: Enabling of bearer rejected, failed to enable media [ 468.324135][T21179] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.490468][T21184] netlink: 'syz.8.3995': attribute type 4 has an invalid length. [ 468.502603][T21184] FAULT_INJECTION: forcing a failure. [ 468.502603][T21184] name failslab, interval 1, probability 0, space 0, times 0 [ 468.519656][T21184] CPU: 0 UID: 0 PID: 21184 Comm: syz.8.3995 Not tainted syzkaller #0 PREEMPT(full) [ 468.519681][T21184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.519691][T21184] Call Trace: [ 468.519698][T21184] [ 468.519705][T21184] dump_stack_lvl+0x189/0x250 [ 468.519733][T21184] ? __pfx____ratelimit+0x10/0x10 [ 468.519759][T21184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.519781][T21184] ? __pfx__printk+0x10/0x10 [ 468.519814][T21184] should_fail_ex+0x414/0x560 [ 468.519844][T21184] should_failslab+0xa8/0x100 [ 468.519861][T21184] kmem_cache_alloc_node_noprof+0x77/0x710 [ 468.519884][T21184] ? __alloc_skb+0x112/0x2d0 [ 468.519898][T21184] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 468.519927][T21184] __alloc_skb+0x112/0x2d0 [ 468.519947][T21184] rtmsg_ifinfo_build_skb+0x84/0x260 [ 468.519969][T21184] ? netpoll_poll_enable+0xce/0xe0 [ 468.519994][T21184] rtmsg_ifinfo+0x8c/0x1a0 [ 468.520023][T21184] __dev_notify_flags+0xf4/0x2e0 [ 468.520045][T21184] ? __pfx___dev_notify_flags+0x10/0x10 [ 468.520062][T21184] ? __dev_change_flags+0x4cc/0x6d0 [ 468.520087][T21184] ? __pfx___dev_change_flags+0x10/0x10 [ 468.520106][T21184] ? __pfx_console_unlock+0x10/0x10 [ 468.520128][T21184] ? preempt_schedule_thunk+0x16/0x30 [ 468.520152][T21184] netif_change_flags+0xe8/0x1a0 [ 468.520176][T21184] do_setlink+0xc55/0x41c0 [ 468.520218][T21184] ? __pfx_do_setlink+0x10/0x10 [ 468.520238][T21184] ? _printk+0xcf/0x120 [ 468.520253][T21184] ? __pfx____ratelimit+0x10/0x10 [ 468.520284][T21184] ? __lock_acquire+0xab9/0xd20 [ 468.520311][T21184] ? __mutex_trylock_common+0x153/0x260 [ 468.520334][T21184] ? __pfx___mutex_trylock_common+0x10/0x10 [ 468.520360][T21184] ? rcu_is_watching+0x15/0xb0 [ 468.520379][T21184] ? trace_contention_end+0x39/0x120 [ 468.520400][T21184] ? __mutex_lock+0x335/0x1350 [ 468.520421][T21184] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.520439][T21184] ? finish_task_switch+0x266/0x950 [ 468.520468][T21184] ? rtnl_setlink+0x4f2/0x910 [ 468.520488][T21184] ? __pfx___mutex_lock+0x10/0x10 [ 468.520515][T21184] ? ns_capable+0x8a/0xf0 [ 468.520539][T21184] rtnl_setlink+0x60c/0x910 [ 468.520556][T21184] ? __pfx___schedule+0x10/0x10 [ 468.520581][T21184] ? __pfx_rtnl_setlink+0x10/0x10 [ 468.520609][T21184] ? preempt_schedule+0xae/0xc0 [ 468.520630][T21184] ? __dev_queue_xmit+0x284/0x3740 [ 468.520732][T21184] ? __pfx_rtnl_setlink+0x10/0x10 [ 468.520748][T21184] rtnetlink_rcv_msg+0x7cf/0xb70 [ 468.520768][T21184] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 468.520783][T21184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 468.520805][T21184] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 468.520838][T21184] netlink_rcv_skb+0x208/0x470 [ 468.520855][T21184] ? rcu_is_watching+0x15/0xb0 [ 468.520874][T21184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 468.520892][T21184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.520923][T21184] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.520949][T21184] netlink_unicast+0x82f/0x9e0 [ 468.520982][T21184] ? __pfx_netlink_unicast+0x10/0x10 [ 468.521008][T21184] ? netlink_sendmsg+0x642/0xb30 [ 468.521024][T21184] ? skb_put+0x11b/0x210 [ 468.521045][T21184] netlink_sendmsg+0x805/0xb30 [ 468.521072][T21184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.521093][T21184] ? aa_sock_msg_perm+0xf1/0x1d0 [ 468.521119][T21184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.521136][T21184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.521156][T21184] __sock_sendmsg+0x21c/0x270 [ 468.521189][T21184] sock_write_iter+0x279/0x360 [ 468.521219][T21184] ? __pfx_sock_write_iter+0x10/0x10 [ 468.521265][T21184] do_iter_readv_writev+0x623/0x8c0 [ 468.521297][T21184] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 468.521319][T21184] ? common_file_perm+0x1b5/0x230 [ 468.521345][T21184] ? bpf_lsm_file_permission+0x9/0x20 [ 468.521361][T21184] ? security_file_permission+0x75/0x290 [ 468.521382][T21184] ? rw_verify_area+0x255/0x4d0 [ 468.521408][T21184] vfs_writev+0x31a/0x960 [ 468.521432][T21184] ? __lock_acquire+0xab9/0xd20 [ 468.521450][T21184] ? __pfx_vfs_writev+0x10/0x10 [ 468.521481][T21184] ? __fget_files+0x2a/0x420 [ 468.521501][T21184] ? __fget_files+0x3a0/0x420 [ 468.521515][T21184] ? __fget_files+0x2a/0x420 [ 468.521539][T21184] do_writev+0x14d/0x2d0 [ 468.521559][T21184] ? __pfx_do_writev+0x10/0x10 [ 468.521581][T21184] ? do_syscall_64+0xbe/0xfa0 [ 468.521601][T21184] do_syscall_64+0xfa/0xfa0 [ 468.521615][T21184] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.521632][T21184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.521649][T21184] ? clear_bhb_loop+0x60/0xb0 [ 468.521670][T21184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.521686][T21184] RIP: 0033:0x7fc2a1b8f6c9 [ 468.521701][T21184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.521714][T21184] RSP: 002b:00007fc2a29fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 468.521734][T21184] RAX: ffffffffffffffda RBX: 00007fc2a1de5fa0 RCX: 00007fc2a1b8f6c9 [ 468.521746][T21184] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 000000000000000c [ 468.521758][T21184] RBP: 00007fc2a29fc090 R08: 0000000000000000 R09: 0000000000000000 [ 468.521768][T21184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.521776][T21184] R13: 00007fc2a1de6038 R14: 00007fc2a1de5fa0 R15: 00007ffd0785b128 [ 468.521805][T21184] [ 469.126171][T21192] FAULT_INJECTION: forcing a failure. [ 469.126171][T21192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.144602][T21192] CPU: 0 UID: 0 PID: 21192 Comm: syz.6.3997 Not tainted syzkaller #0 PREEMPT(full) [ 469.144628][T21192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.144639][T21192] Call Trace: [ 469.144646][T21192] [ 469.144654][T21192] dump_stack_lvl+0x189/0x250 [ 469.144681][T21192] ? __pfx____ratelimit+0x10/0x10 [ 469.144706][T21192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.144729][T21192] ? __pfx__printk+0x10/0x10 [ 469.144749][T21192] ? __asan_memcpy+0x40/0x70 [ 469.144778][T21192] should_fail_ex+0x414/0x560 [ 469.144808][T21192] _copy_to_user+0x31/0xb0 [ 469.144830][T21192] bpf_verifier_vlog+0x48c/0x900 [ 469.144860][T21192] __btf_verifier_log+0xd4/0x120 [ 469.144888][T21192] ? __pfx___btf_verifier_log+0x10/0x10 [ 469.144906][T21192] ? __might_fault+0xb0/0x130 [ 469.144942][T21192] ? btf_parse_hdr+0x1e2/0x6d0 [ 469.144971][T21192] btf_parse_hdr+0x32c/0x6d0 [ 469.145001][T21192] btf_new_fd+0x372/0xc90 [ 469.145017][T21192] ? apparmor_capable+0x137/0x1b0 [ 469.145045][T21192] ? __pfx_btf_new_fd+0x10/0x10 [ 469.145064][T21192] ? bpf_token_put+0x143/0x160 [ 469.145083][T21192] ? bpf_btf_load+0x126/0x190 [ 469.145104][T21192] __sys_bpf+0x3ed/0x860 [ 469.145123][T21192] ? __pfx___sys_bpf+0x10/0x10 [ 469.145157][T21192] ? ksys_write+0x22a/0x250 [ 469.145181][T21192] ? __pfx_ksys_write+0x10/0x10 [ 469.145211][T21192] __x64_sys_bpf+0x7c/0x90 [ 469.145235][T21192] do_syscall_64+0xfa/0xfa0 [ 469.145251][T21192] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.145268][T21192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.145286][T21192] ? clear_bhb_loop+0x60/0xb0 [ 469.145307][T21192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.145324][T21192] RIP: 0033:0x7fe53f78f6c9 [ 469.145339][T21192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.145353][T21192] RSP: 002b:00007fe54055d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.145372][T21192] RAX: ffffffffffffffda RBX: 00007fe53f9e5fa0 RCX: 00007fe53f78f6c9 [ 469.145385][T21192] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 469.145397][T21192] RBP: 00007fe54055d090 R08: 0000000000000000 R09: 0000000000000000 [ 469.145408][T21192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.145418][T21192] R13: 00007fe53f9e6038 R14: 00007fe53f9e5fa0 R15: 00007ffe44d3b4f8 [ 469.145449][T21192] [ 469.725947][T21201] batadv1: entered promiscuous mode [ 469.750669][T21206] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 469.779859][T21204] __nla_validate_parse: 6 callbacks suppressed [ 469.779876][T21204] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4002'. [ 470.052951][T21217] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4006'. [ 470.197802][T21222] netlink: 'syz.7.4007': attribute type 1 has an invalid length. [ 471.603802][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4010'. [ 471.896722][T21243] netlink: 'syz.6.4013': attribute type 4 has an invalid length. [ 472.089413][T21246] netlink: 'syz.6.4015': attribute type 21 has an invalid length. [ 472.113809][T21246] netlink: 'syz.6.4015': attribute type 22 has an invalid length. [ 472.132021][T21246] netlink: 'syz.6.4015': attribute type 23 has an invalid length. [ 472.151056][T21246] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4015'. [ 472.413322][T21256] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4017'. [ 472.465302][T21258] batadv1: entered promiscuous mode [ 472.512834][T21259] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4016'. [ 472.964804][T21279] FAULT_INJECTION: forcing a failure. [ 472.964804][T21279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.004110][T21279] CPU: 0 UID: 0 PID: 21279 Comm: syz.5.4024 Not tainted syzkaller #0 PREEMPT(full) [ 473.004152][T21279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.004174][T21279] Call Trace: [ 473.004182][T21279] [ 473.004189][T21279] dump_stack_lvl+0x189/0x250 [ 473.004218][T21279] ? __pfx____ratelimit+0x10/0x10 [ 473.004242][T21279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.004264][T21279] ? __pfx__printk+0x10/0x10 [ 473.004284][T21279] ? __asan_memcpy+0x40/0x70 [ 473.004317][T21279] should_fail_ex+0x414/0x560 [ 473.004346][T21279] _copy_to_user+0x31/0xb0 [ 473.004365][T21279] bpf_verifier_vlog+0x48c/0x900 [ 473.004389][T21279] __btf_verifier_log+0xd4/0x120 [ 473.004415][T21279] ? __pfx___btf_verifier_log+0x10/0x10 [ 473.004433][T21279] ? __might_fault+0xb0/0x130 [ 473.004469][T21279] ? btf_parse_hdr+0x1e2/0x6d0 [ 473.004497][T21279] btf_parse_hdr+0x3aa/0x6d0 [ 473.004526][T21279] btf_new_fd+0x372/0xc90 [ 473.004542][T21279] ? apparmor_capable+0x137/0x1b0 [ 473.004570][T21279] ? __pfx_btf_new_fd+0x10/0x10 [ 473.004587][T21279] ? bpf_token_put+0x143/0x160 [ 473.004607][T21279] ? bpf_btf_load+0x126/0x190 [ 473.004628][T21279] __sys_bpf+0x3ed/0x860 [ 473.004646][T21279] ? __pfx___sys_bpf+0x10/0x10 [ 473.004679][T21279] ? ksys_write+0x22a/0x250 [ 473.004703][T21279] ? __pfx_ksys_write+0x10/0x10 [ 473.004732][T21279] __x64_sys_bpf+0x7c/0x90 [ 473.004757][T21279] do_syscall_64+0xfa/0xfa0 [ 473.004773][T21279] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.004789][T21279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.004806][T21279] ? clear_bhb_loop+0x60/0xb0 [ 473.004826][T21279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.004842][T21279] RIP: 0033:0x7f2fd418f6c9 [ 473.004858][T21279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.004871][T21279] RSP: 002b:00007f2fd4f6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.004889][T21279] RAX: ffffffffffffffda RBX: 00007f2fd43e5fa0 RCX: 00007f2fd418f6c9 [ 473.004902][T21279] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 473.004913][T21279] RBP: 00007f2fd4f6e090 R08: 0000000000000000 R09: 0000000000000000 [ 473.004925][T21279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.004935][T21279] R13: 00007f2fd43e6038 R14: 00007f2fd43e5fa0 R15: 00007ffc099963f8 [ 473.004966][T21279] [ 473.457985][T21282] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4023'. [ 473.533357][T21277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 473.543087][T21277] bond0: (slave bond5): Enslaving as an active interface with an up link [ 473.658975][T21292] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 473.668513][T21292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.758766][T21299] netlink: 'syz.3.4026': attribute type 4 has an invalid length. [ 473.879768][T21282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.899877][T21282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.919523][T21282] bond0 (unregistering): (slave bond5): Releasing backup interface [ 473.953253][T21282] bond0 (unregistering): Released all slaves [ 474.431356][T21320] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.443926][T21320] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.673277][T21320] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.677555][T21326] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4034'. [ 474.694080][T21320] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.806125][T21320] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.817110][T21320] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.901198][T21320] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.911223][T21320] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.929476][T21335] FAULT_INJECTION: forcing a failure. [ 474.929476][T21335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.960135][T21335] CPU: 1 UID: 0 PID: 21335 Comm: syz.5.4037 Not tainted syzkaller #0 PREEMPT(full) [ 474.960161][T21335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.960172][T21335] Call Trace: [ 474.960179][T21335] [ 474.960187][T21335] dump_stack_lvl+0x189/0x250 [ 474.960215][T21335] ? __pfx____ratelimit+0x10/0x10 [ 474.960239][T21335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.960261][T21335] ? __pfx__printk+0x10/0x10 [ 474.960281][T21335] ? __asan_memcpy+0x40/0x70 [ 474.960310][T21335] should_fail_ex+0x414/0x560 [ 474.960340][T21335] _copy_to_user+0x31/0xb0 [ 474.960363][T21335] bpf_verifier_vlog+0x48c/0x900 [ 474.960393][T21335] __btf_verifier_log+0xd4/0x120 [ 474.960419][T21335] ? __pfx___btf_verifier_log+0x10/0x10 [ 474.960436][T21335] ? __might_fault+0xb0/0x130 [ 474.960464][T21335] ? btf_parse_hdr+0x1e2/0x6d0 [ 474.960493][T21335] btf_parse_hdr+0x3c1/0x6d0 [ 474.960522][T21335] btf_new_fd+0x372/0xc90 [ 474.960538][T21335] ? apparmor_capable+0x137/0x1b0 [ 474.960572][T21335] ? __pfx_btf_new_fd+0x10/0x10 [ 474.960591][T21335] ? bpf_token_put+0x143/0x160 [ 474.960610][T21335] ? bpf_btf_load+0x126/0x190 [ 474.960631][T21335] __sys_bpf+0x3ed/0x860 [ 474.960650][T21335] ? __pfx___sys_bpf+0x10/0x10 [ 474.960683][T21335] ? ksys_write+0x22a/0x250 [ 474.960709][T21335] ? __pfx_ksys_write+0x10/0x10 [ 474.960738][T21335] __x64_sys_bpf+0x7c/0x90 [ 474.960762][T21335] do_syscall_64+0xfa/0xfa0 [ 474.960778][T21335] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.960795][T21335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.960811][T21335] ? clear_bhb_loop+0x60/0xb0 [ 474.960832][T21335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.960849][T21335] RIP: 0033:0x7f2fd418f6c9 [ 474.960865][T21335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.960878][T21335] RSP: 002b:00007f2fd4f6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.960897][T21335] RAX: ffffffffffffffda RBX: 00007f2fd43e5fa0 RCX: 00007f2fd418f6c9 [ 474.960910][T21335] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 474.960921][T21335] RBP: 00007f2fd4f6e090 R08: 0000000000000000 R09: 0000000000000000 [ 474.960933][T21335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.960943][T21335] R13: 00007f2fd43e6038 R14: 00007f2fd43e5fa0 R15: 00007ffc099963f8 [ 474.960974][T21335] [ 475.618566][T18175] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.635783][T18175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.651004][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4042'. [ 475.724850][T18175] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.733059][T18175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.762184][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4043'. [ 475.968183][T21357] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.989483][T18175] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.003474][T18175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.236687][T18172] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.246684][T18172] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.292793][T21373] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 476.306675][T21373] bond1 (unregistering): Released all slaves [ 476.388679][T21357] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.410964][T21377] tipc: Enabling of bearer rejected, failed to enable media [ 476.488981][T21357] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.586583][T21357] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.750282][T18175] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.759418][T21394] team0: Caught tx_queue_len zero misconfig [ 476.770611][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4054'. [ 476.846842][T18174] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.931248][T18175] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.008808][T18175] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.027565][T21405] netlink: 'syz.3.4056': attribute type 4 has an invalid length. [ 477.195645][T21416] FAULT_INJECTION: forcing a failure. [ 477.195645][T21416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.218185][T21416] CPU: 0 UID: 0 PID: 21416 Comm: syz.3.4059 Not tainted syzkaller #0 PREEMPT(full) [ 477.218210][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.218221][T21416] Call Trace: [ 477.218227][T21416] [ 477.218234][T21416] dump_stack_lvl+0x189/0x250 [ 477.218263][T21416] ? __pfx____ratelimit+0x10/0x10 [ 477.218294][T21416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.218317][T21416] ? __pfx__printk+0x10/0x10 [ 477.218346][T21416] should_fail_ex+0x414/0x560 [ 477.218376][T21416] _copy_to_user+0x31/0xb0 [ 477.218399][T21416] bpf_verifier_vlog+0x48c/0x900 [ 477.218429][T21416] btf_verifier_log+0x10a/0x180 [ 477.218456][T21416] ? __pfx_btf_verifier_log+0x10/0x10 [ 477.218490][T21416] __btf_verifier_log_type+0x3f5/0x630 [ 477.218524][T21416] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 477.218553][T21416] ? sort+0xa4/0xf0 [ 477.218578][T21416] btf_array_check_meta+0x1d9/0x2b0 [ 477.218602][T21416] btf_parse_type_sec+0x462/0x2530 [ 477.218625][T21416] ? btf_parse_hdr+0x1e2/0x6d0 [ 477.218649][T21416] ? __pfx_btf_check_sec_info+0x10/0x10 [ 477.218670][T21416] ? btf_parse_str_sec+0x212/0x2a0 [ 477.218689][T21416] btf_new_fd+0x413/0xc90 [ 477.218705][T21416] ? apparmor_capable+0x137/0x1b0 [ 477.218732][T21416] ? __pfx_btf_new_fd+0x10/0x10 [ 477.218750][T21416] ? bpf_token_put+0x143/0x160 [ 477.218769][T21416] ? bpf_btf_load+0x126/0x190 [ 477.218790][T21416] __sys_bpf+0x3ed/0x860 [ 477.218808][T21416] ? __pfx___sys_bpf+0x10/0x10 [ 477.218841][T21416] ? ksys_write+0x22a/0x250 [ 477.218866][T21416] ? __pfx_ksys_write+0x10/0x10 [ 477.218894][T21416] __x64_sys_bpf+0x7c/0x90 [ 477.218918][T21416] do_syscall_64+0xfa/0xfa0 [ 477.218933][T21416] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.218950][T21416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.218964][T21416] ? clear_bhb_loop+0x60/0xb0 [ 477.218984][T21416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.218998][T21416] RIP: 0033:0x7f459938f6c9 [ 477.219011][T21416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.219022][T21416] RSP: 002b:00007f459a19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.219038][T21416] RAX: ffffffffffffffda RBX: 00007f45995e5fa0 RCX: 00007f459938f6c9 [ 477.219050][T21416] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 477.219061][T21416] RBP: 00007f459a19f090 R08: 0000000000000000 R09: 0000000000000000 [ 477.219071][T21416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.219080][T21416] R13: 00007f45995e6038 R14: 00007f45995e5fa0 R15: 00007ffd7c0a5368 [ 477.219109][T21416] [ 477.524202][T21417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4058'. [ 477.535670][T21417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4058'. [ 477.661063][T21422] pim6reg1: entered promiscuous mode [ 477.666686][T21422] pim6reg1: entered allmulticast mode [ 477.710387][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4063'. [ 477.742442][T21432] netlink: 'syz.8.4063': attribute type 1 has an invalid length. [ 477.750388][T17859] IPVS: starting estimator thread 0... [ 477.863726][T21435] IPVS: using max 28 ests per chain, 67200 per kthread [ 477.972974][T21447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4066'. [ 478.019109][T21436] bond1: (slave gretap2): making interface the new active one [ 478.049046][T21436] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 478.121384][T21442] vlan3: entered allmulticast mode [ 478.127084][T21442] bond1: entered allmulticast mode [ 478.132290][T21442] gretap2: entered allmulticast mode [ 478.140314][T21442] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 478.284712][T21462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.350881][T21466] syzkaller1: entered promiscuous mode [ 478.357958][T21466] syzkaller1: entered allmulticast mode [ 478.520523][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4073'. [ 478.800620][T21479] netlink: 'syz.8.4075': attribute type 1 has an invalid length. [ 478.825337][T21479] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4075'. [ 478.847116][T21478] netlink: 'syz.8.4075': attribute type 1 has an invalid length. [ 478.868588][T21478] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4075'. [ 478.938300][T21484] netlink: 'syz.3.4077': attribute type 4 has an invalid length. [ 479.113528][T21493] Bluetooth: MGMT ver 1.23 [ 479.317942][T21505] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 479.384748][T21505] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 479.546170][T21524] netlink: 'syz.7.4091': attribute type 21 has an invalid length. [ 479.708295][T21531] sock: sock_timestamping_bind_phc: sock not bind to device [ 480.234990][ T56] block nbd0: Possible stuck request ffff888025147000: control (read@0,1024B). Runtime 390 seconds [ 480.246244][ T56] block nbd0: Possible stuck request ffff8880251471c0: control (read@1024,1024B). Runtime 390 seconds [ 480.257468][ T56] block nbd0: Possible stuck request ffff888025147380: control (read@2048,1024B). Runtime 390 seconds [ 480.268553][ T56] block nbd0: Possible stuck request ffff888025147540: control (read@3072,1024B). Runtime 390 seconds [ 480.400063][T21526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.776186][T21574] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 480.797393][T21574] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 480.850603][T21577] __nla_validate_parse: 6 callbacks suppressed [ 480.850620][T21577] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4105'. [ 481.080409][T21590] netlink: 'syz.5.4108': attribute type 4 has an invalid length. [ 481.259364][T21594] syzkaller1: entered promiscuous mode [ 481.265078][T21594] syzkaller1: entered allmulticast mode [ 481.511117][T21598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4110'. [ 481.533949][T21598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4110'. [ 481.705713][T21606] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4113'. [ 481.760263][T21606] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4113'. [ 481.853342][T21615] netlink: 'syz.7.4116': attribute type 13 has an invalid length. [ 481.864152][T21615] netlink: 'syz.7.4116': attribute type 17 has an invalid length. [ 481.871991][T21615] netlink: 'syz.7.4116': attribute type 27 has an invalid length. [ 481.963017][T21615] gretap0: refused to change device tx_queue_len [ 481.972982][T21615] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 482.117749][T21621] delete_channel: no stack [ 482.352893][T21625] netlink: 'syz.8.4120': attribute type 4 has an invalid length. [ 482.405223][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4119'. [ 482.583528][T21641] tipc: Enabling of bearer rejected, already enabled [ 482.610084][T21639] tipc: Enabling of bearer rejected, already enabled [ 482.647244][T21641] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 482.703792][T21641] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 482.776399][T21641] tipc: Resetting bearer [ 482.993326][T21665] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4131'. [ 483.112438][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4131'. [ 483.304907][T21681] netlink: 'syz.8.4134': attribute type 4 has an invalid length. [ 483.318759][T21684] FAULT_INJECTION: forcing a failure. [ 483.318759][T21684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.344860][T21685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.368830][T21684] CPU: 0 UID: 0 PID: 21684 Comm: syz.6.4133 Not tainted syzkaller #0 PREEMPT(full) [ 483.368864][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.368875][T21684] Call Trace: [ 483.368882][T21684] [ 483.368890][T21684] dump_stack_lvl+0x189/0x250 [ 483.368917][T21684] ? __pfx____ratelimit+0x10/0x10 [ 483.368942][T21684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.368964][T21684] ? __pfx__printk+0x10/0x10 [ 483.368992][T21684] should_fail_ex+0x414/0x560 [ 483.369020][T21684] _copy_to_user+0x31/0xb0 [ 483.369040][T21684] simple_read_from_buffer+0xe1/0x170 [ 483.369066][T21684] proc_fail_nth_read+0x1b3/0x220 [ 483.369088][T21684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.369110][T21684] ? rw_verify_area+0x2a6/0x4d0 [ 483.369131][T21684] ? __lock_acquire+0xab9/0xd20 [ 483.369146][T21684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.369169][T21684] vfs_read+0x200/0xa30 [ 483.369188][T21684] ? fdget_pos+0x247/0x320 [ 483.369208][T21684] ? __pfx___mutex_lock+0x10/0x10 [ 483.369228][T21684] ? __pfx_vfs_read+0x10/0x10 [ 483.369251][T21684] ? __fget_files+0x2a/0x420 [ 483.369271][T21684] ? __fget_files+0x3a0/0x420 [ 483.369283][T21684] ? __fget_files+0x2a/0x420 [ 483.369307][T21684] ksys_read+0x145/0x250 [ 483.369330][T21684] ? __pfx_ksys_read+0x10/0x10 [ 483.369354][T21684] ? do_syscall_64+0xbe/0xfa0 [ 483.369381][T21684] do_syscall_64+0xfa/0xfa0 [ 483.369395][T21684] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.369410][T21684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.369427][T21684] ? clear_bhb_loop+0x60/0xb0 [ 483.369447][T21684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.369461][T21684] RIP: 0033:0x7fe53f78e0dc [ 483.369476][T21684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 483.369493][T21684] RSP: 002b:00007fe53d9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.369511][T21684] RAX: ffffffffffffffda RBX: 00007fe53f9e6090 RCX: 00007fe53f78e0dc [ 483.369525][T21684] RDX: 000000000000000f RSI: 00007fe53d9f60a0 RDI: 0000000000000004 [ 483.369536][T21684] RBP: 00007fe53d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 483.369546][T21684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.369556][T21684] R13: 00007fe53f9e6128 R14: 00007fe53f9e6090 R15: 00007ffe44d3b4f8 [ 483.369588][T21684] [ 484.038071][T21722] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4142'. [ 484.143930][T21729] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4143'. [ 484.180993][T21729] netlink: 'syz.7.4143': attribute type 1 has an invalid length. [ 484.394924][T21747] sctp: [Deprecated]: syz.7.4149 (pid 21747) Use of int in maxseg socket option. [ 484.394924][T21747] Use struct sctp_assoc_value instead [ 484.401506][T21750] bond0: (slave rose0): Error: Device can not be enslaved while up [ 484.431404][T21756] xt_HMARK: spi-set and port-set can't be combined [ 484.530088][T21760] netlink: 'syz.5.4154': attribute type 4 has an invalid length. [ 485.192597][T21789] tipc: Enabling of bearer rejected, already enabled [ 486.111000][T21836] gretap1: entered promiscuous mode [ 486.465356][T21861] netlink: 'syz.5.4183': attribute type 4 has an invalid length. [ 486.542763][T21866] netlink: 'syz.7.4185': attribute type 63 has an invalid length. [ 487.124988][T21887] __nla_validate_parse: 11 callbacks suppressed [ 487.125008][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4192'. [ 487.625329][T21904] team0: No ports can be present during mode change [ 487.839918][T21914] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 487.867325][T21914] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 488.357312][T21941] netlink: 'syz.5.4208': attribute type 4 has an invalid length. [ 488.455599][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4210'. [ 488.508812][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4210'. [ 488.593381][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4212'. [ 488.630751][T21949] netlink: 'syz.5.4212': attribute type 158 has an invalid length. [ 488.858942][T21964] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 488.880297][T21964] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 489.190332][T21982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4219'. [ 489.263386][T21982] veth1: entered promiscuous mode [ 489.680333][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4221'. [ 489.903177][T21995] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4222'. [ 489.969368][T21992] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 490.143708][T22001] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4225'. [ 490.156303][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4225'. [ 490.497238][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4226'. [ 490.940117][T22018] netlink: 'syz.7.4230': attribute type 4 has an invalid length. [ 491.165230][T22029] xt_TCPMSS: Only works on TCP SYN packets [ 492.195535][T22048] __nla_validate_parse: 1 callbacks suppressed [ 492.195551][T22048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 492.219632][T22048] netlink: 'syz.3.4236': attribute type 12 has an invalid length. [ 492.480831][T22056] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4238'. [ 493.375996][T22078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.225870][T22094] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4249'. [ 494.336074][T22101] pimreg3: entered allmulticast mode [ 494.702676][T22118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4259'. [ 494.844307][T22127] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4262'. [ 494.967657][T22136] netlink: 'syz.5.4264': attribute type 2 has an invalid length. [ 495.085432][T22136] !: entered promiscuous mode [ 495.086036][T22141] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20000 [ 495.263961][T22146] netlink: 'syz.6.4266': attribute type 2 has an invalid length. [ 495.719337][T22160] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4271'. [ 495.897714][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4273'. [ 496.064406][T22179] netlink: 'syz.5.4274': attribute type 10 has an invalid length. [ 496.233947][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.780542][T22194] netlink: 'syz.8.4280': attribute type 1 has an invalid length. [ 497.214281][T22215] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 497.397717][T22225] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4290'. [ 497.657914][T22238] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4293'. [ 497.667953][T22238] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4293'. [ 497.679074][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4293'. [ 497.832833][T22242] netlink: 211856 bytes leftover after parsing attributes in process `syz.6.4296'. [ 497.849140][T22244] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4297'. [ 497.865571][T22244] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4297'. [ 497.890874][T22246] tipc: Enabled bearer , priority 0 [ 497.898695][T22246] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 497.907673][T22246] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 497.918173][T22246] tipc: Resetting bearer [ 497.998201][T22253] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20001 [ 498.190992][T18172] tipc: Resetting bearer [ 498.203422][T22265] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.313223][T22265] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.346882][T22273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4304'. [ 498.403918][T22273] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.447888][T22265] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.480531][T22273] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 498.492476][T22273] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 498.500622][T22273] tipc: Resetting bearer [ 498.541936][T22265] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.820659][T18153] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.929703][T18429] tipc: Node number set to 2841847985 [ 498.942023][T18153] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.983303][T18153] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.048299][T18153] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.051523][T22295] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4310'. [ 499.160587][T22300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4313'. [ 499.171547][T22307] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.180024][T22307] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.257082][T22304] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 499.489071][T22319] x_tables: duplicate underflow at hook 1 [ 501.336782][T22347] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.358632][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.870074][T22383] @0Ù: renamed from bond_slave_1 [ 501.885571][T22383] netlink: 'syz.8.4343': attribute type 10 has an invalid length. [ 502.186123][T22386] sit0: left promiscuous mode [ 502.527781][T22386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.544661][T22386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.649265][T22402] netlink: 'syz.8.4347': attribute type 1 has an invalid length. [ 502.719287][T22405] __nla_validate_parse: 9 callbacks suppressed [ 502.719304][T22405] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4347'. [ 502.824647][T22386] tipc: Resetting bearer [ 502.847477][T22408] netlink: 'syz.7.4350': attribute type 1 has an invalid length. [ 502.875443][T22386] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 502.882825][T22386] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 502.898166][T22386] bridge3: left allmulticast mode [ 502.910668][T22386] bridge4: left promiscuous mode [ 502.922064][T22386] bond1: left allmulticast mode [ 502.927478][T22386] vcan0: left allmulticast mode [ 502.936460][T22386] veth1: left promiscuous mode [ 502.994673][T22402] bond3: entered promiscuous mode [ 502.999862][T22402] bond3: entered allmulticast mode [ 503.005595][T22402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.024074][T22415] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 503.025546][T18175] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.059649][T18175] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.070298][T18175] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.078807][T18175] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.087379][T22411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4351'. [ 503.119617][T18175] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.140977][T18175] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.169121][T18175] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.178081][T18175] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.180115][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4353'. [ 503.376709][T22422] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4353'. [ 503.587245][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4359'. [ 503.674785][T22443] tipc: Enabling of bearer rejected, already enabled [ 503.684547][T22443] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 503.692138][T22443] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 503.700317][T22443] tipc: Resetting bearer [ 503.872934][T22450] bridge0: port 1(batadv1) entered blocking state [ 503.888841][T22450] bridge0: port 1(batadv1) entered disabled state [ 503.912391][T22450] batadv1: entered allmulticast mode [ 503.925919][T22450] batadv1: entered promiscuous mode [ 503.959476][T22459] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4366'. [ 503.969518][T22459] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 504.353691][T18153] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 504.363420][T18153] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 504.479785][T22487] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4373'. [ 505.116601][T22497] batadv2: entered promiscuous mode [ 505.130783][T22499] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4377'. [ 505.144228][T22499] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4377'. [ 505.390235][T22511] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 506.898816][T22543] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20001 [ 507.056400][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4390'. [ 507.360027][T22551] netlink: 'syz.8.4390': attribute type 1 has an invalid length. [ 507.368174][T22551] netlink: 'syz.8.4390': attribute type 2 has an invalid length. [ 507.385816][T22552] netlink: 'syz.8.4390': attribute type 1 has an invalid length. [ 507.393965][T22552] netlink: 'syz.8.4390': attribute type 2 has an invalid length. [ 507.798594][T22575] syz.8.4396 (22575) used obsolete PPPIOCDETACH ioctl [ 507.812083][T22581] __nla_validate_parse: 2 callbacks suppressed [ 507.812100][T22581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4399'. [ 508.337840][T22593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4403'. [ 508.389861][T22594] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4403'. [ 508.449677][T22593] bridge9: port 1(veth0_to_bond) entered blocking state [ 508.474641][T22593] bridge9: port 1(veth0_to_bond) entered disabled state [ 508.482758][T22593] veth0_to_bond: entered allmulticast mode [ 508.491116][T22593] veth0_to_bond: entered promiscuous mode [ 508.521501][T22596] vlan2: entered allmulticast mode [ 508.530580][T22596] veth1: entered allmulticast mode [ 508.546068][T22596] bridge9: port 2(vlan2) entered blocking state [ 508.562599][T22596] bridge9: port 2(vlan2) entered disabled state [ 508.616136][T22596] vlan2: entered promiscuous mode [ 508.621331][T22596] veth1: entered promiscuous mode [ 508.725599][T22603] batadv1: entered promiscuous mode [ 509.986667][T22641] tipc: Enabling of bearer rejected, already enabled [ 509.996373][T22641] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 510.004696][T22641] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 510.012834][T22641] tipc: Resetting bearer [ 510.028025][T22648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4417'. [ 510.090306][T22641] tipc: Resetting bearer [ 510.137654][T22650] tipc: New replicast peer: 255.255.255.255 [ 510.146620][T22650] tipc: Enabled bearer , priority 10 [ 510.232437][T22654] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4420'. [ 510.246227][T22654] netlink: 'syz.5.4420': attribute type 29 has an invalid length. [ 510.314382][ T56] block nbd0: Possible stuck request ffff888025147000: control (read@0,1024B). Runtime 420 seconds [ 510.325913][ T56] block nbd0: Possible stuck request ffff8880251471c0: control (read@1024,1024B). Runtime 420 seconds [ 510.337414][ T56] block nbd0: Possible stuck request ffff888025147380: control (read@2048,1024B). Runtime 420 seconds [ 510.348842][ T56] block nbd0: Possible stuck request ffff888025147540: control (read@3072,1024B). Runtime 420 seconds [ 510.780445][T22674] geneve2: entered promiscuous mode [ 511.814572][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4439'. [ 512.644566][T22754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4453'. [ 512.698190][T22757] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4452'. [ 512.759031][T22753] batadv2: entered promiscuous mode [ 513.674553][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 513.674619][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 513.680734][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 513.693793][T22789] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4461'. [ 513.761785][T22789] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4461'. [ 513.846063][T22789] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4461'. [ 514.091791][T22800] xt_time: unknown flags 0xf4 [ 514.149402][T22807] netlink: 'syz.8.4468': attribute type 6 has an invalid length. [ 514.192426][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4469'. [ 514.331958][T22814] batadv1: entered promiscuous mode [ 514.437134][T22820] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4470'. [ 514.509916][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4472'. [ 515.215346][T22844] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4479'. [ 515.408635][T22851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4481'. [ 515.688436][T22867] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4485'. [ 515.933775][T22878] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 515.959801][T22878] team0: Port device syz_tun added [ 516.048065][T22890] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4492'. [ 517.732370][T22945] batadv1: entered promiscuous mode [ 517.908747][T22955] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 518.394140][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 519.062726][T22997] batadv2: entered promiscuous mode [ 519.113460][T22998] __nla_validate_parse: 37 callbacks suppressed [ 519.113478][T22998] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4520'. [ 519.396317][T23012] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4519'. [ 519.466736][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4526'. [ 519.486854][T23021] batadv1: entered promiscuous mode [ 519.545228][T23024] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4527'. [ 520.286548][T23055] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4535'. [ 520.474792][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 520.967262][T23079] IPVS: Error connecting to the multicast addr [ 521.192082][T23082] IPv6: sit2: Disabled Multicast RS [ 522.678372][T23123] bridge0: port 3(macvtap1) entered blocking state [ 522.686958][T23123] bridge0: port 3(macvtap1) entered disabled state [ 522.704030][T23123] macvtap1: entered allmulticast mode [ 522.715278][T23123] bridge0: entered allmulticast mode [ 522.738317][T23123] macvtap1: left allmulticast mode [ 522.743515][T23123] bridge0: left allmulticast mode [ 522.789675][T23127] batadv1: entered promiscuous mode [ 522.857760][T23128] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4551'. [ 522.867291][T23130] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4552'. [ 522.921452][T23128] nbd: socks must be embedded in a SOCK_ITEM attr [ 523.249025][T23142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4554'. [ 523.414637][T23142] bond6: option broadcast_neighbor: invalid value (5) [ 523.445141][T23142] bond6 (unregistering): Released all slaves [ 523.657417][T23152] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4557'. [ 523.730681][T23152] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4557'. [ 524.190544][T23170] batadv1: entered promiscuous mode [ 524.242140][T23172] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4563'. [ 524.649396][T23176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4564'. [ 524.940644][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4567'. [ 524.951386][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4567'. [ 524.975310][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4567'. [ 524.979562][T23187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4568'. [ 525.035296][T18149] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.044785][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4567'. [ 525.057051][T18149] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.081096][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4567'. [ 525.090993][T18149] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.100131][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4567'. [ 525.166279][T18149] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.373448][T23197] SET target dimension over the limit! [ 525.880442][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4574'. [ 526.810846][T23241] batadv1: entered promiscuous mode [ 526.928652][T23244] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 526.965678][T23244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.440560][T23266] sctp: [Deprecated]: syz.3.4590 (pid 23266) Use of int in max_burst socket option. [ 527.440560][T23266] Use struct sctp_assoc_value instead [ 527.899302][T23285] openvswitch: netlink: Flow actions attr not present in new flow. [ 529.015441][T23325] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 529.024676][T23325] tipc: Resetting bearer [ 529.230366][T23339] batadv1: entered promiscuous mode [ 529.269369][T23346] __nla_validate_parse: 13 callbacks suppressed [ 529.269388][T23346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4613'. [ 529.294632][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 529.608880][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 529.647254][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 529.658548][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4620'. [ 529.676210][T23361] netlink: 'syz.3.4619': attribute type 14 has an invalid length. [ 529.693336][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4620'. [ 529.699756][T23367] x_tables: duplicate underflow at hook 1 [ 529.715277][T23363] netlink: 'syz.7.4620': attribute type 15 has an invalid length. [ 530.039416][T23374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4624'. [ 530.063787][T23374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4624'. [ 530.762729][T23404] dummy0: mtu less than device minimum [ 530.779833][T23404] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4631'. [ 531.110255][T23422] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4637'. [ 531.550466][T23440] batadv2: entered promiscuous mode [ 531.641671][T23450] tipc: Resetting bearer [ 532.329851][T23476] netlink: 'syz.6.4650': attribute type 1 has an invalid length. [ 532.707398][T23479] tipc: Enabling of bearer rejected, already enabled [ 532.734487][T23479] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 532.752962][T23479] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 532.816387][T23479] tipc: Resetting bearer [ 532.988599][T23486] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 533.005779][T23484] bridge0: port 1(batadv1) entered blocking state [ 533.024853][T23484] bridge0: port 1(batadv1) entered disabled state [ 533.031508][T23484] batadv1: entered allmulticast mode [ 533.051288][T23484] batadv1: entered promiscuous mode [ 533.068113][T23505] batadv1: entered promiscuous mode [ 533.214018][T23512] veth7: entered promiscuous mode [ 533.505103][T18175] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 533.515433][T18175] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 534.036146][T23515] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 534.315724][T23552] __nla_validate_parse: 9 callbacks suppressed [ 534.315742][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4675'. [ 534.626416][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4683'. [ 534.658831][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4683'. [ 534.797218][T23582] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4685'. [ 535.296053][T23595] netlink: 'syz.6.4689': attribute type 10 has an invalid length. [ 535.305540][T23598] netlink: 'syz.6.4689': attribute type 10 has an invalid length. [ 535.313507][T23595] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4689'. [ 535.323224][T23598] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4689'. [ 535.326679][T23575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4680'. [ 535.348132][T23595] dummy0: entered promiscuous mode [ 535.359323][T23575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4680'. [ 535.369164][T23595] bridge0: port 3(dummy0) entered blocking state [ 535.370748][T23595] bridge0: port 3(dummy0) entered disabled state [ 535.392107][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 535.398203][T23595] dummy0: entered allmulticast mode [ 535.817629][T23622] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4695'. [ 536.414091][T23643] netlink: zone id is out of range [ 536.419241][T23643] netlink: zone id is out of range [ 536.457624][T23643] netlink: zone id is out of range [ 536.462776][T23643] netlink: zone id is out of range [ 536.504959][T23643] netlink: zone id is out of range [ 536.510151][T23643] netlink: zone id is out of range [ 536.584231][T23643] netlink: zone id is out of range [ 536.589388][T23643] netlink: zone id is out of range [ 536.626556][T23643] netlink: zone id is out of range [ 536.643893][T23643] netlink: zone id is out of range [ 537.046716][T23665] batadv1: entered promiscuous mode [ 537.852498][T23683] scsi_nl_rcv_msg: discarding partial skb [ 537.907178][T23689] vlan3: entered allmulticast mode [ 538.565141][T23713] netlink: 'syz.7.4723': attribute type 54 has an invalid length. [ 538.949295][T23729] vlan2: entered promiscuous mode [ 538.966488][T23729] team0: entered promiscuous mode [ 538.972077][T23729] team_slave_0: entered promiscuous mode [ 538.978826][T23729] team_slave_1: entered promiscuous mode [ 538.985663][T23729] geneve0: entered promiscuous mode [ 539.027557][T23732] netlink: 'syz.6.4728': attribute type 13 has an invalid length. [ 539.039419][T23731] netlink: 'syz.6.4728': attribute type 13 has an invalid length. [ 539.248617][T23739] xt_socket: unknown flags 0x50 [ 539.338952][T23732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.517889][T23749] __nla_validate_parse: 10 callbacks suppressed [ 539.517909][T23749] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4735'. [ 539.584216][T18173] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.597825][T18173] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.649367][T23759] batadv1: entered promiscuous mode [ 539.670743][T18173] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.702345][T18173] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.729301][T23764] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4738'. [ 539.835717][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4742'. [ 540.047396][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4742'. [ 540.247422][T23792] bond2: option resend_igmp: invalid value (2670) [ 540.261361][T23792] bond2: option resend_igmp: allowed values 0 - 255 [ 540.272303][T23792] bond2 (unregistering): Released all slaves [ 540.331913][T23797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.340197][T23809] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 540.414256][ T56] block nbd0: Possible stuck request ffff888025147000: control (read@0,1024B). Runtime 450 seconds [ 540.435615][ T56] block nbd0: Possible stuck request ffff8880251471c0: control (read@1024,1024B). Runtime 450 seconds [ 540.446840][ T56] block nbd0: Possible stuck request ffff888025147380: control (read@2048,1024B). Runtime 450 seconds [ 540.458164][ T56] block nbd0: Possible stuck request ffff888025147540: control (read@3072,1024B). Runtime 450 seconds [ 540.685666][T23830] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4751'. [ 540.923214][T23845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 541.076349][T23851] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 541.104241][T23851] tipc: Resetting bearer [ 541.235935][T23856] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4763'. [ 541.264885][T23856] nbd: couldn't find a device at index 458752 [ 541.716535][T23881] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4769'. [ 541.795687][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4773'. [ 541.990984][T23894] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4776'. [ 542.015856][T23894] nbd: couldn't find a device at index 458752 [ 542.125806][T23899] netlink: 'syz.8.4777': attribute type 4 has an invalid length. [ 542.914317][T23911] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001 [ 543.587246][T23963] netlink: 'syz.8.4784': attribute type 17 has an invalid length. [ 544.329657][T23963] net_ratelimit: 367 callbacks suppressed [ 544.329674][T23963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.436274][T23966] netlink: 'syz.7.4798': attribute type 4 has an invalid length. [ 544.448588][T23966] netlink: 'syz.7.4798': attribute type 4 has an invalid length. [ 544.806568][T23985] __nla_validate_parse: 7 callbacks suppressed [ 544.806586][T23985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4803'. [ 545.026951][T23993] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4804'. [ 545.117902][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4805'. [ 545.260499][T24001] team_slave_0 (unregistering): left promiscuous mode [ 545.294671][T24001] team0: Port device team_slave_0 removed [ 545.387480][T24002] x_tables: duplicate underflow at hook 1 [ 545.668473][T24018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4812'. [ 545.674339][T24016] nbd: device at index 8 is going down [ 545.679238][T24018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4812'. [ 545.697800][T24019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4810'. [ 545.712129][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4812'. [ 545.722042][T24020] netlink: 'syz.6.4808': attribute type 1 has an invalid length. [ 545.730223][T24020] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4808'. [ 545.750137][T24020] netlink: 'syz.6.4808': attribute type 1 has an invalid length. [ 545.771385][T24020] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4808'. [ 545.820164][T24024] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4814'. [ 545.958944][T24030] tipc: Resetting bearer [ 546.002940][T24030] tipc: Resetting bearer [ 546.026988][T24032] batadv2: entered promiscuous mode [ 546.036906][T24030] tipc: Resetting bearer [ 546.055699][T24030] ================================================================== [ 546.063778][T24030] BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.072698][T24030] Read of size 1 at addr ffff88806a8ffd50 by task syz.5.4816/24030 [ 546.080679][T24030] [ 546.082994][T24030] CPU: 1 UID: 0 PID: 24030 Comm: syz.5.4816 Not tainted syzkaller #0 PREEMPT(full) [ 546.083009][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.083017][T24030] Call Trace: [ 546.083022][T24030] [ 546.083027][T24030] dump_stack_lvl+0x189/0x250 [ 546.083044][T24030] ? __virt_addr_valid+0x1c8/0x5c0 [ 546.083058][T24030] ? rcu_is_watching+0x15/0xb0 [ 546.083069][T24030] ? __kasan_check_byte+0x12/0x40 [ 546.083079][T24030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.083091][T24030] ? rcu_is_watching+0x15/0xb0 [ 546.083102][T24030] ? lock_release+0x4b/0x3e0 [ 546.083113][T24030] ? __virt_addr_valid+0x1c8/0x5c0 [ 546.083125][T24030] ? __virt_addr_valid+0x4a5/0x5c0 [ 546.083138][T24030] print_report+0xca/0x240 [ 546.083149][T24030] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.083163][T24030] kasan_report+0x118/0x150 [ 546.083172][T24030] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.083190][T24030] ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.083218][T24030] ieee80211_do_stop+0x1786/0x1f60 [ 546.083248][T24030] ? __lock_acquire+0xab9/0xd20 [ 546.083271][T24030] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 546.083294][T24030] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 546.083320][T24030] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 546.083343][T24030] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.083363][T24030] ? wiphy_work_cancel+0x1eb/0x3c0 [ 546.083382][T24030] ieee80211_stop+0x1b1/0x240 [ 546.083398][T24030] ? __pfx_ieee80211_stop+0x10/0x10 [ 546.083412][T24030] __dev_close_many+0x364/0x6f0 [ 546.083427][T24030] ? __pfx___dev_close_many+0x10/0x10 [ 546.083440][T24030] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 546.083455][T24030] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.083464][T24030] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 546.083477][T24030] netif_close_many+0x225/0x410 [ 546.083492][T24030] ? __pfx_netif_close_many+0x10/0x10 [ 546.083504][T24030] ? __mutex_lock+0xd3b/0x1350 [ 546.083514][T24030] ? __lock_acquire+0xab9/0xd20 [ 546.083523][T24030] ? __mutex_lock+0x5bb/0x1350 [ 546.083533][T24030] netif_close+0x158/0x210 [ 546.083545][T24030] ? __pfx_netif_close+0x10/0x10 [ 546.083559][T24030] ? __pfx___mutex_lock+0x10/0x10 [ 546.083571][T24030] dev_close+0x10a/0x220 [ 546.083589][T24030] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 546.083613][T24030] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 546.083636][T24030] cfg80211_rfkill_set_block+0x2d/0x50 [ 546.083660][T24030] rfkill_set_block+0x1d2/0x440 [ 546.083680][T24030] rfkill_fop_write+0x44b/0x570 [ 546.083701][T24030] ? __pfx_rfkill_fop_write+0x10/0x10 [ 546.083721][T24030] ? security_file_permission+0x40/0x290 [ 546.083741][T24030] ? rw_verify_area+0x255/0x4d0 [ 546.083765][T24030] ? __lock_acquire+0xab9/0xd20 [ 546.083781][T24030] ? __pfx_rfkill_fop_write+0x10/0x10 [ 546.083800][T24030] vfs_write+0x27e/0xb30 [ 546.083829][T24030] ? __pfx_vfs_write+0x10/0x10 [ 546.083853][T24030] ? __fget_files+0x2a/0x420 [ 546.083872][T24030] ? __fget_files+0x2a/0x420 [ 546.083888][T24030] ? __fget_files+0x3a0/0x420 [ 546.083905][T24030] ? __fget_files+0x2a/0x420 [ 546.083926][T24030] ksys_write+0x145/0x250 [ 546.083951][T24030] ? __pfx_ksys_write+0x10/0x10 [ 546.083977][T24030] ? do_syscall_64+0xbe/0xfa0 [ 546.083996][T24030] do_syscall_64+0xfa/0xfa0 [ 546.084013][T24030] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.084029][T24030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.084046][T24030] ? clear_bhb_loop+0x60/0xb0 [ 546.084065][T24030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.084083][T24030] RIP: 0033:0x7f2fd418f6c9 [ 546.084099][T24030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.084114][T24030] RSP: 002b:00007f2fd4f6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.084133][T24030] RAX: ffffffffffffffda RBX: 00007f2fd43e5fa0 RCX: 00007f2fd418f6c9 [ 546.084148][T24030] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000c [ 546.084160][T24030] RBP: 00007f2fd4211f91 R08: 0000000000000000 R09: 0000000000000000 [ 546.084172][T24030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.084184][T24030] R13: 00007f2fd43e6038 R14: 00007f2fd43e5fa0 R15: 00007ffc099963f8 [ 546.084206][T24030] [ 546.084213][T24030] [ 546.495958][T24030] The buggy address belongs to the physical page: [ 546.502363][T24030] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806a8ffa80 pfn:0x6a8fc [ 546.512406][T24030] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 546.520898][T24030] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 546.528434][T24030] page_type: f8(unknown) [ 546.532659][T24030] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 546.541223][T24030] raw: ffff88806a8ffa80 0000000000000000 00000000f8000000 0000000000000000 [ 546.549792][T24030] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 546.558449][T24030] head: ffff88806a8ffa80 0000000000000000 00000000f8000000 0000000000000000 [ 546.567104][T24030] head: 00fff00000000002 ffffea0001aa3f01 00000000ffffffff 00000000ffffffff [ 546.575760][T24030] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 546.584415][T24030] page dumped because: kasan: bad access detected [ 546.590818][T24030] page_owner tracks the page as allocated [ 546.596511][T24030] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 18201, tgid 18201 (syz-executor), ts 402634827290, free_ts 402591961976 [ 546.618374][T24030] post_alloc_hook+0x240/0x2a0 [ 546.623245][T24030] get_page_from_freelist+0x2365/0x2440 [ 546.628788][T24030] __alloc_frozen_pages_noprof+0x181/0x370 [ 546.634588][T24030] alloc_pages_mpol+0x232/0x4a0 [ 546.639426][T24030] ___kmalloc_large_node+0x5f/0x1b0 [ 546.644610][T24030] __kmalloc_large_node_noprof+0x18/0x90 [ 546.650232][T24030] __kvmalloc_node_noprof+0x6e/0x910 [ 546.655506][T24030] alloc_netdev_mqs+0xa6/0x11b0 [ 546.660343][T24030] ieee80211_if_add+0x46c/0x1390 [ 546.665268][T24030] ieee80211_register_hw+0x35a5/0x40d0 [ 546.670711][T24030] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 546.676421][T24030] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 546.681512][T24030] genl_family_rcv_msg_doit+0x215/0x300 [ 546.687047][T24030] genl_rcv_msg+0x60e/0x790 [ 546.691536][T24030] netlink_rcv_skb+0x208/0x470 [ 546.696280][T24030] genl_rcv+0x28/0x40 [ 546.700249][T24030] page last free pid 18426 tgid 18425 stack trace: [ 546.706725][T24030] __free_frozen_pages+0xbc4/0xd30 [ 546.711824][T24030] __put_partials+0x146/0x170 [ 546.716487][T24030] put_cpu_partial+0x1f2/0x2e0 [ 546.721232][T24030] __slab_free+0x2b9/0x390 [ 546.725628][T24030] qlist_free_all+0x97/0x140 [ 546.730208][T24030] kasan_quarantine_reduce+0x148/0x160 [ 546.735652][T24030] __kasan_slab_alloc+0x22/0x80 [ 546.740488][T24030] kmem_cache_alloc_node_noprof+0x433/0x710 [ 546.746369][T24030] __alloc_skb+0x112/0x2d0 [ 546.750778][T24030] netlink_ack+0x146/0xa50 [ 546.755192][T24030] netlink_rcv_skb+0x28c/0x470 [ 546.759948][T24030] netlink_unicast+0x82f/0x9e0 [ 546.764706][T24030] netlink_sendmsg+0x805/0xb30 [ 546.769464][T24030] __sock_sendmsg+0x21c/0x270 [ 546.774148][T24030] ____sys_sendmsg+0x505/0x830 [ 546.778905][T24030] ___sys_sendmsg+0x21f/0x2a0 [ 546.783567][T24030] [ 546.785878][T24030] Memory state around the buggy address: [ 546.791492][T24030] ffff88806a8ffc00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 546.799539][T24030] ffff88806a8ffc80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 546.807586][T24030] >ffff88806a8ffd00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 546.815629][T24030] ^ [ 546.822282][T24030] ffff88806a8ffd80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 546.830335][T24030] ffff88806a8ffe00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 546.838388][T24030] ================================================================== [ 546.849529][T24030] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 546.856742][T24030] CPU: 0 UID: 0 PID: 24030 Comm: syz.5.4816 Not tainted syzkaller #0 PREEMPT(full) [ 546.866534][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.876585][T24030] Call Trace: [ 546.879861][T24030] [ 546.882783][T24030] dump_stack_lvl+0x99/0x250 [ 546.887369][T24030] ? __asan_memcpy+0x40/0x70 [ 546.891949][T24030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.897138][T24030] ? __pfx__printk+0x10/0x10 [ 546.901723][T24030] vpanic+0x237/0x6d0 [ 546.905742][T24030] ? __pfx_vpanic+0x10/0x10 [ 546.910234][T24030] ? preempt_schedule_common+0x83/0xd0 [ 546.915680][T24030] ? preempt_schedule+0xae/0xc0 [ 546.920521][T24030] panic+0xb9/0xc0 [ 546.924235][T24030] ? __pfx_panic+0x10/0x10 [ 546.928644][T24030] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 546.934967][T24030] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.941210][T24030] check_panic_on_warn+0x89/0xb0 [ 546.946155][T24030] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.952316][T24030] end_report+0x78/0x160 [ 546.956549][T24030] kasan_report+0x129/0x150 [ 546.961042][T24030] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.967192][T24030] ieee80211_add_virtual_monitor+0xa52/0xd00 [ 546.973171][T24030] ieee80211_do_stop+0x1786/0x1f60 [ 546.981796][T24030] ? __lock_acquire+0xab9/0xd20 [ 546.986665][T24030] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 546.992125][T24030] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 546.997590][T24030] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 547.003484][T24030] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.008673][T24030] ? wiphy_work_cancel+0x1eb/0x3c0 [ 547.014041][T24030] ieee80211_stop+0x1b1/0x240 [ 547.018728][T24030] ? __pfx_ieee80211_stop+0x10/0x10 [ 547.023921][T24030] __dev_close_many+0x364/0x6f0 [ 547.028776][T24030] ? __pfx___dev_close_many+0x10/0x10 [ 547.034140][T24030] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 547.040021][T24030] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.045223][T24030] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 547.051117][T24030] netif_close_many+0x225/0x410 [ 547.055963][T24030] ? __pfx_netif_close_many+0x10/0x10 [ 547.061331][T24030] ? __mutex_lock+0xd3b/0x1350 [ 547.066077][T24030] ? __lock_acquire+0xab9/0xd20 [ 547.071001][T24030] ? __mutex_lock+0x5bb/0x1350 [ 547.075771][T24030] netif_close+0x158/0x210 [ 547.080185][T24030] ? __pfx_netif_close+0x10/0x10 [ 547.085111][T24030] ? __pfx___mutex_lock+0x10/0x10 [ 547.090163][T24030] dev_close+0x10a/0x220 [ 547.094398][T24030] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 547.100543][T24030] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 547.106687][T24030] cfg80211_rfkill_set_block+0x2d/0x50 [ 547.112135][T24030] rfkill_set_block+0x1d2/0x440 [ 547.116973][T24030] rfkill_fop_write+0x44b/0x570 [ 547.121810][T24030] ? __pfx_rfkill_fop_write+0x10/0x10 [ 547.127164][T24030] ? security_file_permission+0x40/0x290 [ 547.132784][T24030] ? rw_verify_area+0x255/0x4d0 [ 547.137623][T24030] ? __lock_acquire+0xab9/0xd20 [ 547.142456][T24030] ? __pfx_rfkill_fop_write+0x10/0x10 [ 547.147818][T24030] vfs_write+0x27e/0xb30 [ 547.152066][T24030] ? __pfx_vfs_write+0x10/0x10 [ 547.156824][T24030] ? __fget_files+0x2a/0x420 [ 547.161401][T24030] ? __fget_files+0x2a/0x420 [ 547.165974][T24030] ? __fget_files+0x3a0/0x420 [ 547.170632][T24030] ? __fget_files+0x2a/0x420 [ 547.175215][T24030] ksys_write+0x145/0x250 [ 547.179535][T24030] ? __pfx_ksys_write+0x10/0x10 [ 547.184373][T24030] ? do_syscall_64+0xbe/0xfa0 [ 547.189035][T24030] do_syscall_64+0xfa/0xfa0 [ 547.193519][T24030] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.198703][T24030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.204756][T24030] ? clear_bhb_loop+0x60/0xb0 [ 547.209420][T24030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.215299][T24030] RIP: 0033:0x7f2fd418f6c9 [ 547.219700][T24030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.239292][T24030] RSP: 002b:00007f2fd4f6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 547.247693][T24030] RAX: ffffffffffffffda RBX: 00007f2fd43e5fa0 RCX: 00007f2fd418f6c9 [ 547.255651][T24030] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000c [ 547.263611][T24030] RBP: 00007f2fd4211f91 R08: 0000000000000000 R09: 0000000000000000 [ 547.271581][T24030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.279552][T24030] R13: 00007f2fd43e6038 R14: 00007f2fd43e5fa0 R15: 00007ffc099963f8 [ 547.287528][T24030] [ 547.290688][T24030] Kernel Offset: disabled [ 547.294996][T24030] Rebooting in 86400 seconds..