last executing test programs: 2m35.422851248s ago: executing program 0 (id=4019): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611000000000000063000200000000009500000000000000ee5368e40d7ee4ea82ffb58122edbc6595f74eda8a485d6e6692cef15ce7a5115c727c7128cc36c423bd20ab3f193159d180753b534a14a8e631679ba430f07132eccf02e311e297d24107ae450439aea1c888d2fb8e1041317a7ebd458ea9910665224ecb795fe941f49b71d8d883fe1cad"], &(0x7f0000000100)='GPL\x00', 0x3, 0xd2, &(0x7f0000000200)=""/225, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 2m35.286937705s ago: executing program 0 (id=4024): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0xfffffffa}, 0x28) (fail_nth: 25) 2m35.067525621s ago: executing program 0 (id=4027): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r4, r1, 0x2f, 0x0, 0x0, @void, @value=r4}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7], 0x48}}, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="2f0000001000000004000000", @ANYRES32=r1, @ANYBLOB="cf974676f63eaac702dcbaf670138b4dac93ad15570fbed6d35ddb1687a98d8a1254b3ce81c0550100416a0ab0f1443c864de23f05f5903d57469b92ecda9c1c261b4edc58317684e992ba2f91b9c12e886a8e000000", @ANYRES64=0x0], 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1000000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f0000000140), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r13 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000380)={0x1d, r14, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$alg(r13, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0, 0x42}, {&(0x7f00000003c0)="3ef20329721db69177a9b1c2dd08c122d5408d1580131b5e2ce5dd6b3098e6e19d", 0x21}], 0x2, 0x0, 0x0, 0x810}, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x6}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f00000003c0)={r15, 0x5, 0x7, 0x8, 0x9, 0x3}, 0x14) 2m34.294647993s ago: executing program 3 (id=4036): r0 = socket$inet(0x2, 0xa, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x12da40, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x1, 0x0) socket(0x10, 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000100)="1b0000001e005f0014f9f407faac47", 0xf) (async) write(r2, &(0x7f0000000100)="1b0000001e005f0014f9f407faac47", 0xf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400000004"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400000004"], 0x48) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000540)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x53c4f6ef, 0x8, 0x1}, 0x3c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000580)={0x1, 'vlan0\x00', 0x3}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000580)={0x1, 'vlan0\x00', 0x3}, 0x18) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000cc0)="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", 0x101}, {&(0x7f0000000840)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000680)="4462ba8e6e1d182b1410d2bf121e3aee1f73494aa42604b2", 0x18}], 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x360, 0x20040080}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 2m34.293389121s ago: executing program 0 (id=4037): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60002754842cde23", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60002754842cde23", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2m34.156918092s ago: executing program 3 (id=4038): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000e16a000b2c00fe80e50fcaaca88be99ff02b00000000000000000000000000bb19800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/cgroup\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) unshare(0x20000600) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400"], 0x20, 0x6044}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x202000, 0x800, 0x4, 0x6}, 0x20) unshare(0x6a040000) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x10a, &(0x7f0000000800)=""/266, 0xb6df4c32c1d5c814, 0x4a}, 0x94) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="30000000100000402300000000000000001080d42612912f49fe2b6443a86fbc7c9b2692e9f40000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) socket(0x8, 0x3, 0x0) epoll_create1(0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x54, r6, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e60}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) 2m34.135897604s ago: executing program 0 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a"], 0x0}, 0x94) pipe(&(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e64000000001000028004001f"], 0x40}}, 0x40000c0) 2m33.954936242s ago: executing program 0 (id=4041): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 2m33.855030116s ago: executing program 3 (id=4042): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x80000, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x4, 0x1, 0x3}, 0x50) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) recvfrom$l2tp(r1, &(0x7f0000000fc0)=""/4096, 0x1000, 0x4060, &(0x7f0000000180)={0x2, 0x0, @private}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000f80)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001000}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 2m33.727372151s ago: executing program 3 (id=4044): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x50, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}, @extra_flags={0x8, 0x18, 0x3}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m33.663660459s ago: executing program 3 (id=4047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x2, [{}, {}]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0xca) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300), 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet(0x2, 0x80001, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x2, [{}, {}]}, 0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xca) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300), 0x10) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async) 2m33.51099077s ago: executing program 3 (id=4050): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 2m23.817596775s ago: executing program 4 (id=4164): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000008000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0xa, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001045}, 0x4004800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000010003c0002030000ff3f0000000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r4 = socket(0x15, 0x6, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r5, 0x1b, 0x0, @void}, 0x10) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 2m23.658768396s ago: executing program 4 (id=4166): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) 2m23.56907526s ago: executing program 4 (id=4167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x13000000}}, 0xd4}}, 0x0) 2m23.403212025s ago: executing program 4 (id=4170): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async, rerun: 32) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5}, 0x94) (async) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async, rerun: 64) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x2c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x4c}}, @NHA_ID={0xfc40, 0x1, 0x1}]}, 0x2c}}, 0x0) 2m22.215901209s ago: executing program 4 (id=4185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a320000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r6, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x301a0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4094, 0xffe}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400a5286dc75ff4f1000008000000ec", @ANYRES32, @ANYBLOB="148a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r10}, 0x4) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r9, @ANYRES32=r8], 0x1c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000040)={0x0, 0x7, 0x3, 0x1db10e53, 0x0, [0x400, 0xffffff81, 0x4, 0x2]}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2m22.041896327s ago: executing program 4 (id=4186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 2m20.878759861s ago: executing program 2 (id=4195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) unshare(0x280) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8f5, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'gretap0\x00'}) (rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'nicvf0\x00', {0xb5}, 0x4}) (async) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, &(0x7f0000000400)={0x9}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r8}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r7], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="3700000000202000000800001ab9a3ae0ea6a48a45b2010986fbc5bc6e69", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r11], 0x20) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff0000040000000500000000100000", @ANYRES32=0x1, @ANYBLOB="792dffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002400000002000000ed00"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r13, @ANYRES32=r7, @ANYBLOB="2400e702002000", @ANYRES32=r7, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r6, 0x25, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r11}}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r15) (async) write$cgroup_type(r15, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r14, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00', @ANYRES32=r15, @ANYBLOB, @ANYRES64=r11], 0x20) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) 2m20.797358418s ago: executing program 2 (id=4196): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x20000000, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) r6 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 2m20.701376086s ago: executing program 2 (id=4197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a002e9ff9e1308c7959f618054b83831849f84552e75d49bd2a68caf882e43f33810b0f8cc25a71188d697d2911c9c63b7acf2fa5fbf0430c8b4967b9991d5e2015ce796fcbb448e35a72e849679f3c8bbc91e9b0d354d43b2382e8ee4e70df634e", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 2m20.527053947s ago: executing program 2 (id=4198): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313e, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xb7}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\t'], 0xa) 2m20.524004077s ago: executing program 2 (id=4199): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x2012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000740)={r1, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0xf7, 0x8, [0xf942, 0x9, 0xa, 0x8, 0x2, 0x9]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd8, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r2, r2, r2, r2, r2], &(0x7f0000000640)=[{0x5, 0x5, 0xe, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3fd}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m20.485406013s ago: executing program 2 (id=4200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "0e3f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES64=r1, @ANYBLOB="3208db8002516f3d2a5974115bcf04e7907ff5f7fe93d0b8e963afa187e44a87561c4528d1bcc0c404b3743707ab8373b054d94f27ae1ea2f24bcdf08352acb1b15bff814da2550910052ae0f1dd1305d0a66068683ded21dc9637", @ANYRESHEX=r4, @ANYRES32=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 2m18.46847087s ago: executing program 32 (id=4041): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 2m18.432216544s ago: executing program 33 (id=4050): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 2m8.975416058s ago: executing program 5 (id=4274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0xfffffffa}, 0x28) 2m8.823086901s ago: executing program 5 (id=4277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x198, 0xffffff7a, 0xffffffff, 0x198, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @null, 0xffffffff}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r4, &(0x7f0000000180)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000200)=0xffffffa4, 0x4) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x5, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x20048040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f00000001c0)={0x20000000}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) 2m7.902125448s ago: executing program 5 (id=4280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1000}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000007bc0)={0x0, 0x0, &(0x7f0000007b80)={&(0x7f0000007b00)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010334bd7002ffdbdf25010000000400ae80"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r11, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r12, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) 2m7.692767554s ago: executing program 5 (id=4282): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000001800000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0xfffffffa}, 0x28) 2m7.633921622s ago: executing program 5 (id=4283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) socket(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) close(0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r7, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 2m7.538656573s ago: executing program 5 (id=4284): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) (fail_nth: 9) 2m6.980354921s ago: executing program 34 (id=4186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 2m5.344398165s ago: executing program 35 (id=4200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "0e3f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES64=r1, @ANYBLOB="3208db8002516f3d2a5974115bcf04e7907ff5f7fe93d0b8e963afa187e44a87561c4528d1bcc0c404b3743707ab8373b054d94f27ae1ea2f24bcdf08352acb1b15bff814da2550910052ae0f1dd1305d0a66068683ded21dc9637", @ANYRESHEX=r4, @ANYRES32=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) 1m52.478597351s ago: executing program 36 (id=4284): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4008000) (fail_nth: 9) 9.082777064s ago: executing program 7 (id=4988): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x0, 0x10005, 0x204e}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f00000003c0)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x20, 0x8e7b0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYBLOB="200029bd7000fddbdf250400000005000400010000001400020076657468305f746f5f6272a8018157bbeb88f51d172035d27c6964676500090003007379"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8004) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x30006041) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r7, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f0000000140)=[{r7, 0x404}, {r0, 0x48}, {r6, 0x808}, {r1, 0x10}, {0xffffffffffffffff, 0x20}, {r1, 0x224}], 0x6, 0x0, 0x0, 0x0) close(r6) 7.865660065s ago: executing program 7 (id=4992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="8d9c9ad5dab1fab6e2e759c6b10fb5a927496ab9d18954021d8697a36db4d615d576253d189ebfb6d0c70949cae6f5c28d93d6b7594306f1faf55bd7fcdfffebf93f8e7361", @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002ec0)=@delchain={0x2c, 0x2e, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0x6, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x2, 0x1, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x3}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x30}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r10, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r10, 0x820a0bdb248eaf37, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb37}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c39203100400000000008900000008f52e859ca4cde5f14bcfb4b5512209000300", @ANYRES32=r12, @ANYBLOB="1c001d8018000080060005000e00000004000d8005000c0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.551090568s ago: executing program 7 (id=4997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x20000220, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f00000003c0)=[{0x15, 0x1, 0x3, 0x6000}, {0x60, 0x8, 0xff}, {}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x6a}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a01041b000000000000000a0000040900020073797a32000000002c000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a310000000014000000060a0102000000000000000003000006140000001100010000000000000000000e00000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = epoll_create(0x0) epoll_pwait(r7, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000040)={[0x7fff]}, 0x8) getsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000500)={@multicast2, @rand_addr, @remote}, &(0x7f0000000540)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 6.450042838s ago: executing program 7 (id=5006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0xd94b000) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x8040) accept$phonet_pipe(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe713c538a1ea8eea, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x261, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00'}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x50) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'pim6reg1\x00', 0x1}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000040)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, &(0x7f0000002280)={'lo\x00', {0x2, 0x4e25, @local}}) 3.091641362s ago: executing program 6 (id=5012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xce160210}, 0xfffffffffffffd84, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x30}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x28700}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2.677857533s ago: executing program 6 (id=5014): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000480)={0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff, 0x2}, 0x20) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) recvmmsg(r4, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0xd4}], 0x2}, 0xa}], 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) (async) sendto$inet6(r6, &(0x7f0000000280)='0', 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x217}, 0x1c) 2.609661812s ago: executing program 7 (id=5016): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @loopback}, {0x6, @remote}, 0x2, {0x2, 0x4e20, @loopback}, 'veth0_vlan\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @private=0xa010102}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x34, {0x2, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1\x00'}) r1 = socket(0x2c, 0x3fce297b3ab545c8, 0x3) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x8c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0x8001, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf62, 0x80}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x30}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x10001}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x10}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xa43e}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x24000006) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000480)='veth1\x00') setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x4e23, 0x9, @loopback, 0x4}, {0xa, 0x4e21, 0x9, @private2, 0xf06}, 0x0, {[0x10, 0x800, 0x1d, 0xab7f, 0x401, 0x2, 0x3ff, 0x7]}}, 0x5c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}}, 0x6d23, 0xb6}, &(0x7f0000000600)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000640)={r5, 0x9, 0x7, 0x7, 0x80, 0x6}, &(0x7f0000000680)=0x14) accept$alg(r1, 0x0, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r7, 0x0, 0xbc, 0x1e, &(0x7f0000000700)="f803c3c207e5c63f8e5e7e72f7de87fdc62adfaccc0ddc2c2f86c9902f28896f5d0b917d2ce747482307f11aee7face5ec74ea159aa0c7675c66a5f28a46fb5db89b87a9bb0915731100e6be710ebad3d8de25bcf836a8b2e772c9cb5251e5df801ca26cec1a44795bc8e8882496f269878ee8774d7e02e3e1840898c90daf8cedf6f86693dfe85158263e4e6b90f4d7f68a0ef5911508d2c42aa8b247895c6b63d9060f57265c7ee76ac9f1e31fcc6dfd99ceef52cfee10364b5814", &(0x7f00000007c0)=""/30, 0x6, 0x0, 0x17, 0x1000, &(0x7f0000000800)="95f765e080d69cca5437fb1eb4d583b6487f413f9fbdd0", &(0x7f0000000840)="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", 0x1}, 0x50) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000018c0)={r6, 0x0, 0xb0, 0x4, 0x0, 0x2}, &(0x7f0000001900)=0x14) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000001940), &(0x7f0000001980)=0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x101000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x40000, 0x0) socket$inet(0x2, 0x5, 0x9) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000001b80)) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000001bc0)={'pimreg0\x00', {0x2, 0x0, @empty}}) sendmsg$NFC_CMD_GET_SE(r9, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x4048010) socket$inet6_sctp(0xa, 0x5, 0x84) 2.454618632s ago: executing program 6 (id=5018): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$igmp(0x2, 0x3, 0x2) 2.351463999s ago: executing program 6 (id=5020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9f0342fe40b7fe9d}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x48009) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000002200000081e81cf99d110c000000000095000000d4e876a76cd03413a34bc1b50cbe9dc9b66b9da0c74a649ab7a764a1f9e1cd6d797c0ba5f1aba307ee6008b0419dab1a26bd4af07ab761ebdcd007245d93c09e9dfa8061e8465d4dec212ce9b1cf05488b50990aa02c937064ca10ae85e6c291abf60a29f5d5ad396419a851441a547c0b5fefed3c7b17a0d0341e0c61d8d00221bcdec33c0ff895217495c23fc22e01e9d7b3191dd092107c45dd252f76f9b9239bb4d1680b93c81e3d22fb9556ba7d"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 2.289190325s ago: executing program 9 (id=5021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000000008000100000000000daa5ba1aeff209112ec7e06839a7fae53479099680da2da03ddeeb3d950da3ae00513ba9542a05cff27f972e13ea2ad7c1cae34c1283047761a12120e8c02f98ddf27c220561e4d4a3b47a677b9c4831dcbb1e035e821bb496729bf838adaee214ba677ca2dda2d42a8ada75db2d887608468bcc9ac0e51b4ba7e6e4c92e2c02689c7517306ee7d"], 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000000008000100000000000daa5ba1aeff209112ec7e06839a7fae53479099680da2da03ddeeb3d950da3ae00513ba9542a05cff27f972e13ea2ad7c1cae34c1283047761a12120e8c02f98ddf27c220561e4d4a3b47a677b9c4831dcbb1e035e821bb496729bf838adaee214ba677ca2dda2d42a8ada75db2d887608468bcc9ac0e51b4ba7e6e4c92e2c02689c7517306ee7d"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911016000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.057665498s ago: executing program 7 (id=5023): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x100000000, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001600010094638bd49cc4a8d29c4b25c9"], 0x14}}, 0x0) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000440), 0x0, 0xf6, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x67, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="00032dbd7000fcdbdf250500000064000180140002006261746164765f736c6176655f3000001400020069703667720800010047e063e65fea71f0d5573afc", @ANYRES32=r9, @ANYBLOB="140002006d6163766c616e31000000000000000014000200726f736530000000000000000000000008000300000000002c0001801400020070696d72656700000000000000000000140002007663616e3000"/92], 0xa4}, 0x1, 0x0, 0x0, 0x4810}, 0x24008c51) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwrite64(r10, 0x0, 0x0, 0x8) setsockopt$inet6_int(r2, 0x29, 0x34, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)={0x74, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x19, 0x34, @random="912c452ae204ef2e90783a8cf58aa98f8e9ee745f9"}, @NL80211_ATTR_SSID={0xf, 0x34, @random="ab5d66011b107032bf55a4"}, @NL80211_ATTR_SSID={0x11, 0x34, @random="925f0cdef9bfc66edd88c84625"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x74}}, 0x880) 2.057382508s ago: executing program 9 (id=5024): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000040)={0x8ad9, 0x0, 0x4, 0xd, 0x0, 0x4, 0x1, 0x800}, &(0x7f0000000080)={0xe05, 0x4f, 0x4, 0x9, 0xffff, 0xa, 0xb, 0x83f2}, &(0x7f00000000c0)={0x3, 0x3, 0x40, 0x2, 0x7ff, 0x100, 0x65a4d677, 0x4}, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xffffffffffffffc7]}, 0x8}) r4 = openat$cgroup_ro(r1, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000480)=""/133, 0x85}], 0x1, 0x4, 0x6) 2.055835953s ago: executing program 6 (id=5026): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x4c, r5, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x4) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r6, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0xfffffffd) r8 = socket$inet(0xa, 0x801, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) listen(r8, 0x8) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x8) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) r12 = socket$netlink(0x10, 0x3, 0x4) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r13, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r12) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.846191406s ago: executing program 9 (id=5028): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) r1 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x85, "6c5472f1499a74de6a581331c494fbf52d708e39fa27a22bce67a8d3b5a7f95e7874d872d2cf955540a592b3af672ce862478839979b5cca4b03efcf90d3cbf3afb5d68906471025049ec6e34417da41eaba33ff8de36f6f97a35af09823e8f043eddbcf696bd09a8a1eb0c77b216b158b691669a5659b3927bee939ea43fbf5d05fdfff8d"}, &(0x7f0000000140)=0x8d) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0xffff}, 0x8) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x7c02}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) close(r3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000993e0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e00ff01000005"], 0x2c}}, 0x0) 1.801734753s ago: executing program 8 (id=5029): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 1.642809038s ago: executing program 8 (id=5030): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) 1.309513315s ago: executing program 8 (id=5031): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x502c3, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01000001000027000000270000004600fd5e00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x7, 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0x300, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xffe0}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x5d, 0xb, 0x9}]}}]}, 0x38}}, 0x800) 1.230621755s ago: executing program 9 (id=5032): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg$unix(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendto$inet(r5, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x800) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6}, 0x38) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) accept$netrom(r3, &(0x7f0000000380)={{0x3, @bcast}, [@netrom, @bcast, @default, @bcast, @netrom, @default, @netrom, @null]}, &(0x7f0000000440)=0x48) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x5, 0x449) write(r0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.076886356s ago: executing program 6 (id=5033): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x8) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="150000000000000084"], 0x18, 0x4855}, 0x24000052) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x900, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r7, 0x400261f2, &(0x7f0000000000)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000340)={{r5, &(0x7f0000000040)='ns/ipc\x00', 0x4000, &(0x7f0000000100)={@align=0x2, {0xfff, 0x5c, 0x2, 0x6}}, 0xffff, &(0x7f0000000140), &(0x7f0000000180)=0x7}, 0x0, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 950.971652ms ago: executing program 1 (id=5034): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) (rerun: 32) 876.038499ms ago: executing program 1 (id=5035): r0 = socket$inet6(0xa, 0x3, 0x76) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r0) (async) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 766.704757ms ago: executing program 8 (id=5036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000001200000000010000000100000506000000000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000000ffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000002e00000085000000110000005f04c27f00393d64"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 695.292164ms ago: executing program 1 (id=5037): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0600150008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9b8c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x40800) vmsplice(r1, &(0x7f00000024c0)=[{&(0x7f0000001480)="dc", 0x1}], 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000011008af26ca6823a45b8f3ef47b9daff4270dff3beac799e87bd711ac353", 0xd8}], 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xd8, 0x1403, 0x500, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8018}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x20024014}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a310000000038000480340001800900010068617368000000002400028008001640000000040800024000000014080007400000000108000440000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = accept4(r4, 0x0, &(0x7f0000000140), 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x1, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r11 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r11, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c536e36faed7a8003e1090f000060000000a2bc5603ca00000f7f8999177858000000000000000000000000000003000000000000000000", 0x48}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000300)=0x800, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 545.087925ms ago: executing program 1 (id=5038): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000630000000000000040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xc, &(0x7f0000000240)=""/206, 0x41100, 0x29, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x50, 0x10, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 537.621569ms ago: executing program 8 (id=5039): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0xb) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000103000000010000000000000c02000000000000000200000d0000000000000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r3, 0x4, 0x82, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x80c0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x40003, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xffff0001}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b0040000000000000030000edff00000008000a00010000000800010001"], 0x28}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$alg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="520d62ea1c2495344c1502ad02378c34c8fb5e24c35fa6f42c47dfc77eb2fc345cf03f592fc74e6b16cc3d2e3140c50a0e0962cb7470ceaf19b6fd6b3ad6e5c836", 0x41}, {&(0x7f00000004c0)="99f60885042778aabb08c68118bbf933f0971fea4d065204630388e3acde03f11fcf32807bc13dd128054db0143b3d17d56b43da4cda81ae596753f2d6b98fa789367267b7c677b61148ee3417921fc0f5d80f9935fc901ccc98beff7c5f1fcdaf9c5460f1b3033e8157e7928dd614176a60d19eba9105b6de16d4f607cc601774bbbafe31785332008f1bc8b12ec1b1d455db7b443302e8a5", 0x99}, {&(0x7f0000000400)="0828324413e9e8dc604c3d9a63999457efad884027fc9fe1f6d7e804c7c8af0dabac5b6455a6f6801123e7d628a6aa263fb8524a8a73cd787858cfe1e61756251bc923170494f4ec3b6952994b1619ab8a09", 0x52}], 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x140, 0x4}, 0x20024000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 302.418694ms ago: executing program 1 (id=5040): close(0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {0xa, 0xffff}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000070900010073797a3100000000080002400000000328000000000a030000000000000000000200000008000240000000020900010073797a3100000000149100001100010000000000000000000300000a"], 0x78}}, 0x0) sendmsg(r1, &(0x7f0000000780)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x4, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="89e5a76c84b7d839ee5e2979b865d0a50589ed07e9b4f0a80585319b9c3af3aac50e942e64683baf3e17ed29d6b0176a01a82dffdd7125d91b5dc66b694d5076581e4729b34edb7b3b8df6980dcdcf83e20338257119db6378da94892e626e815cd13e8f4075f8bb4eaba3c9a53751246f3c827c0122c8b814e865716d2a8a68d959a981d6e28f82c7c545b2e7e28cf702ae8ebfb2204324d987d10b98ea1d", 0x9f}, {&(0x7f00000004c0)="8795b16a2bbb13b34148a69edec1cbb9e21cf7fbc875db487a06662e610d41f81389d62f6c7697a44c91ef8403d3587649d70f8f0189751f20d8fddcce3d312ec11cbbaf237f689c0809b2dfc28f4207376363db078781715275b82bf35a26c9716555e6c55c29b6272b6a8d9050cef5d447f95c3d65f7d03368629a14", 0x7d}, {&(0x7f0000000540)="4a04718be701f83413189d0f21d6c427433dfd63a56bcb90ddcc930f505137f4eb623e3d0f5d89", 0x27}, {&(0x7f0000000580)="0ea8300a5b275d77fb2fe31bdbc4fef4acdc41c6549ec573203f", 0x1a}, {&(0x7f00000005c0)="d67a4343dc", 0x5}, {&(0x7f0000000940)="4a0477b7d85df00a97e5fc99b6b97c4b18e2663ece7b3d1e0ccd05061ae98586f823082bb5a90331d2034f5474b1c676b65e6f4ca877f85cb03422523f1c5c77003d8c50986dd56b523158e4338aeedd6b9abcd51b0c3d9b5e24e2e84438f3a611bd343f10ae6fcc3fc5cd6698bcb24e611d4ebe90dbb338c51e36783d54781a45323b5356621a610a8fc4c1bf1b1841af467c0fe659043369496f2a662747558419229f948f62a7317d67d3ad22245feb0f93bc7756c5c51b4384a741dfd9298968c07cfaf3492de839a544b2e1b9b4c908718da08f0dc9d45580e4f19f36dfdae9ce97eb527e28ed27b246ae48baf00394e12ed468d279043db75a7c82465042a6af2810e7cc673772177d37872a62a27969dff2889b07f8c0bcadb021bb247818c0d764a8979ae4773752579141a3ce21d7570731e590276b111d24f893c9aedcd088270bf0d2f13a6285c0c0792eb5907d024854bc800e1bd7903657fa2a60e89bdf9dd3212601d0920d73ad124c50939417ce93753412f2acaff290bf61dc20cf6f01b5b53b09d1b6219669c9f5a2dae3a67f1276cda25335629f81e7d223cc3d78d75b354dad6fb09d8c74693f680eef520c0b2606f4c26cebd6817a9ba9c21f23be00cce4e5f34161767e1008eba524709f7a5be536f2eb85074223c0eb2d6b4d9428117e1c4a0eabd74bc5ff503f3eb45c477c355019913fd6ff17afc44a8d3e6c3960a2ad6c9f516e6eae6e9a46173a0f11e0017a5010269f0e4c51a5df76cc855e532ce4c453cbfd0258af0fdb56fee7c131f134ff86e08361ed6900461d063a220ca98f1b17ee5eeb4c328f22fc0f4f0911c74d347d3fea14cec3322d47565f385f53660bb48e4ab2a3130dc6266a5adaf22ef306d6acf6f8340a7058bf49c0d1c4483762472161b80675bf4c6c78e7f911656f2c23f53ef2e0c9322e2b7c14547dc8fffb3869ed8e5f526de0a1588415f794718f58f5d67f1b7bfd9d4d00007bd866cbc12804a789cfdbb8f881b0fe723991021b6c7fb6ee99563a27f97ad3badb6675fab3aba11f84d306673c52a7995b7bc88b7475d31ea14a1973dfd343beefadb3b7ec3f62fb5e02bf5806059431ff7be63214e031479838d65bc2122e583fc83a2094c30858c21559176d175c9228288165a8456a33e13398de72425065ea1f18e74635283e52f0fde274f16e0c9c11e647759370a53b8fd83f4a0df71b71483965b1b4c61476703c9b0c3adefa40571423b864af05d71c2bce9d8a12f174d7a62a592d3e389b022b47afc67ba661ebb3497f6b19f481b5528fd49483d7cc029fd2b1e4b6b7219559b03174d1d0d58ce4d68c6ec0e7b8bf3a08bf3f2ca63bf964039ccba2e8cc6b0f91b41c9375afeb5878711a9566eaacfc88678265b3ad4262b93c02e87fe33c311ecd798c4a887eb9aa5c532c88f2a89f44df14aedde608ea792800e93d5e0a5908c5ebdf69c5e46f1fa2c3c0dc9708c4de7cc4056016e46f27938a5f424f83ddfbcb628c893e76bb26a69b052b19ad42c565013f6e1144728f10809130333272d692ce89cc9b3a38aa261d343fed173a8b21e12bcfaf497e8699e4011f13d5d6f07a5a1fd71cec984a8c50c212651c4fb36892983226251b68eeb66708b4e7f781cc844c44e2a9d72c0add8f2ba19c48484deae8884ff107ca37dd56662711d74e9f249e949f1a361c129cf8847a53c3a10690ad30243b989864d62164fac68661731a191ed42f003ab093c4d6f23dc4cedb75ee58bee74d9f9ad2d39bdcaaf969004f7c76181d6f86ae7af5c849166b5c9ae2cd0a12877af21449e18bdb5f88409c6429a6715898436efe8004b85ba7a709c566b8d091a59824494c90b85000458f7a363ef21800dca64978f9988aaad7759e1c68f0b3716ed147bb89fe20157f170c9b9aeadacfe704e49f327b4ca652aad58d79794ef125e989189341ad6f4190b5122b4b957b9267ca2c9957ea319802a8b35fa0570c2d0d94a98428bf34bdcac525c05aa88ac4ad59ea483b4cc56ac31cea3763fb901d62331be11c9f7fbd3abcf7849936387d5da88291f50050225c963f0fddd87fe8d1d8b06ff4b7efcfdbe58bed87385e51fd14dbf980259423ec850c8ef57a5a5967efcb60d91e847494561b50437130cc0ab3c755502e3acefe84264979b8f0216a6431165ea3c79cd06cb2a397f65e0661d4319a4b1568487fc80a659fd55c350e11e74c70c7ed5cc39d3b16a3280917b3b9b0373cb5d967c8f42ee48155d23dde8fc95c35c9a8785002e8a4e6aa5ecdc2fecfad319d64f593c5ea82a3d553f8e7ee21fe3cd4556b3d893f535de96e94e8a965b09c068bec069616290fbabc0f1dc60d7c1d35e5fcfb8f32f1d55b7db2c913bfc2326b8599be09343705cd379b453e8a1d7bae2357394de986719ca5b73a967209f8562aa09f668ba6ce18bcd1625fc79667cbf0ca7c7b6d5bfc75220b3994eb168c446a57627417b112a3a04d07641c8fe077a761a838c9ef37cca76436f71a6dfc2266d25e7dde6b414b3c68aa611aee66287dd9f29c19c663afd502bd63e9ac6a2144ce2d7d9cd6de2f8fc3dc82382c60d177db6299e7df949f0f0cc8d3e7d9893596c8d2b1f5f9fdf0c7a3e986558ce1361ed9b7446b4702f1dc80b8d4571273a026435a1e0dfb2c619c7217a38aaa0dbade015abd6b5bda3b18c2f767f3da5ae47b5f31a4420fe4038193de34391e009c4c1a663dd509421096635896c0a506c80c5b9b18f722a546ca4ffa859dbde348ea9ca65aa41e11d5b43c80e471056a2100cd2dc6c762d563c28e40532ab4b66898bb56b191d63b4aab239c8ef91e809864f37330db0db208a330a0e21914d6c001351d883572599d674ea7f1ad57dca5e16b7e93702deac7ea099852d8360c7be0a18e560278a179c99a102cf310eeb64bd96f31acf69ee398a6db6ed3dd6459f120b3b86b230f3d818dd7b87bb951f5f563616e28dc5aeff977fc9433c1f70ea92b1fed01396b2ebdd257b0dba6ba1b041c5dde8de4fff21346e5eaebb5b53a3df6af0dc1a5f28a67fd47493dd5c075025ec965220b30377127d3deb463a147403efc6dbae538ee1a354d8e6b76d3d904150f9522565f144d75f222f3f66faf415d5e84bcdecc04148c4ec932ce5b473d7e6290dd48f365cd9b2aa1e3addabf8d3e576c19254c44f8aa38a504c6bb41549e526cdba191f859c8eaa90a175366956082a522b06930bb6c435fa54b7f5b5ac03f51bf3a3f9139ad8c320f2905fffd1bb96719e1ca907f25a00b5bd18d371c7f071afcd0905e4a2bf9d7c35adcdf81c755dd8da86cc1eed13bc7845f22cfb15494cb697ec7af8b88f2f4475c30f9569d9c2b5d5fa901532f6f16012fe35ee008a8fe594284a7966733729f42cf38f4f6b977a4f193d5f5d1aace9755d7fa086a744be4a0d5824e448080759ea7375065f7b044b7ab404439fabbb83e98381012f0f167b7d6ff9204bca31a4dacf1b3bb5a7adc24483b9406494a34679795f29c7b6b80e93f68772c2fd8743f893948973bceebb7830b28c5031d7b3d92551ebfe2997cfe29ced7d6df72c40563085cbbdc27761db1285cb25fab4e11df60c1317879c7c8f73380b5f1e01d88936af7001be36fd10ff3cdb992fe37794a06cd2ae180c9ef458c1fbf78cbbf113925f3723198f0381b3b82e7b9f2f644f341d2f5f830eb3fb10ff28fb454db5a202304cedcc93dc31c2ffd337a9f4b24021264d5310c584827940bec81484d0dabc3ff6f5eab76fbbc4d42a79426828df91a116427666d43d42b7bd13f7dacfbafc81abc22e06ff3de560f26fcfc39c7949c9bb1d3208d9ea6a4b840ce2d7caf4c42632f00f12ad2e693d2e9b59749d568b00e1199e75edc175b827af03500eaa1d48ca2a93d117374a666bf756dae35b58b9712fd5dd91ceff532fba3b8811d85d3941b2c9d7fb4ec440325644be997df671d6b50fe7ed531ff9d4fd452a1bdc121bd1fb6355794cc0cbfce7f24af78d0d1e85a91f82b6237dd8ff85b75ab1139d8442597fba616333d3757657d927b538ec445df0c39823174046d90c40a4aaa89a1549a1ae155706c7b35ee59a05ab57ae4431f9c047d5555dc8a6589c85124ff2d1e3c4aee23d8a6b9abf7dd19db45c84306895b7c075907783b7f57815f6c7be26742b40ed905c3fdb798c4dccfca611dae878c5e37a269de011a44586ac0eb3a37dc317f37a0fad42757cf5d600d2d4a0c2d5a34af7a7cfb055c54d9180d5da7c7883dd9f2b10c2c2c49878bd7e5aa3f01ee8edde6f5c2ebe63feb0c556d05f08fc34115855d332e2cb75bf61a5695e6840d935556b47e48bfc87e989689922277e62d22c610c605e79909b93852b4bd398b361e97fd4438efa7f36438b2196923287db0af6e5fa29316d7b23e67589727bf14facfe40a1417ca2982f584b049a06d5529ebaa8e276318ded6e9aa6bbb1acd62e2d888f1226d150ce233c5ad7bff278f6d1471220f6e889d031357f22a0f9e063934aff7663277b7ee5301383a749f79949743dcee322e759b75a03f70da972df4c0e8f752b10b731ffcf2cf30f978c5507a66a09d59a165685a7d25c06b44357aa7ccabe6556fa4dd09240d9ca9b8a455f1fdbc238f2cdee2d3331fc1ce2df680ad1e2ddd6baaf6833ba0ff6661e15e81bb3c05e8e7e279b2a0f208b7c4af51e0bb291573fc5a340b435cb9c4e77638663bea8668fd571154014797a4bc5f440939229340f61d99f35b0cdf5667769da9923e6303ae5d562919c44a2b6680029a9fa4a05b464b97f53711fc73c3c43fc8e614e72f7862b3c1615ca11b9a9eeb2b5aea48ddfcb6b99c970b688b714f25f7afe548bfa192c584b305ad080cf753f1a4f1011b6be434af3deb9c17c10b451c6c72e74fccaf093241e1c67e1980d8fcc50c48497ef638bf45fe41930bf47982652d642c400babced577d7134f957c43a5d0432b02e26ab78c59aa43fcb63258524e8657dd33898022d16714250534acaff876f8a3e6ae3d4e4e158603833ccf85701be4763087c54d9cbdaeeeee3f9524251b06032b3be3738b2d4094f62f8880b6fd3dcaccb7941970a7c6f141abe7e1b8e58cc452312a625eee5e2dfa3836bb464ebf897da871d9054be044f554839f55294a439a69ac961fb5d9eea79587f7d2d3cd12a241b24bcdf78180561a957d655ca7f7f7fb494af47f1901c7c1b23c20f030770570f1ef4bc8a217a86ebdf4f31d386795f7fd37cc6ed0318aa8025f04939431429772169582c3d6d60515007786fe19f532feb6f22a66eb6faac4a65334ab615dcd226ab1b95c616ed6520b564fd2424ceedf9382f2d63bde0390b4c8e0b1b39fe67d0f7e84bae202f066084ab5b8ce9421dc815b0bdbb39f99ccef8ce7a926188223de8ebef01e3178fdb87dc2ccf0e94f84b71dccb726b43ebafcc5c274a869939560984b9884ca70d7552b9c53ad6fa9c0b9260d517e96979ce59edc75b8a334045d8120bc8c237ae654e824ba697f00e312d86cadc1a37610c0a43e102dbd4c099e9fd77a89408851b10d45d02746ad850f0591def7b9bd557f03ce5afe094bfc90e1983b7846d0fbd4cf61e74d10f9cbfecea13018b45200fb58f7cc95bdbf11c281f8d451332447a7005fd9dfc937cf8412094688169eec29e7a7fe61cdb6935b580dc405d69b04afee3130621bfa642dd23d2bab876585375416f16407d1a1e4408affce8ed0a882b5e34b96e84f2469ab9646c6281e5dd8f09a8168d8c763bd47d9", 0x1000}, {&(0x7f0000000600)="9b5fd937d5659f5fd7c8222021c9e497b4dd2a1ca903d89cb824fb8f311c4da3f8e48b3ff0c557132020ef0bdc484eb622c325db837a8636efcb91213a3356b34246955b967f5c66e1835273072340c9f2005770cd9aebf0454e7fd0875b9c01399b35dbab413b68a1c095cbe06c70b9c90807ae4a109cdfdbc6f6b7cb8320a3a09e0d658f93ac2f34ad5b7e", 0x8c}, {&(0x7f00000006c0)="b17c8c42238feb65f582d2d14aaee6256d38f15624a23b66fe695531785be77ce7bb1b197bce727b217c839c7b938a9da3ab1c5286", 0x35}], 0x8}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x1d, 0x1, 0x1, 0x7ffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0x2, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) socket$nl_rdma(0x10, 0x3, 0x14) close(0x3) socket$can_raw(0x1d, 0x3, 0x1) 216.054439ms ago: executing program 9 (id=5041): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffe, {0x1, 0xff}}, 0x18) sendmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000040)=@can={0x1d, r1}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001500)='\x00\x00', 0x2}, {0x0}], 0x2}}], 0x1, 0xf5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa000100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2b}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 86.428694ms ago: executing program 8 (id=5042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) (async) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async, rerun: 64) recvmmsg$unix(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaa438100020008004500fdea4000e000032b"], 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) sendmsg$rds(r3, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x3, 0xc, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) (async) listen(r4, 0xfff) (async, rerun: 64) accept4(r4, 0x0, 0x0, 0x800) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) (async) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 30.817248ms ago: executing program 1 (id=5043): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) close(r6) close(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x40}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/19, 0x13}, 0x2}], 0x400000000000300, 0x10002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffffffffffff25, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 9 (id=5044): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000080000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b6e070026ba4f75cf8fc1de2800800000000000000000000080000000000000ba25d578e5fe4fcc23eb1fff9537f972d3005a202f986ccff730e91dc71bbf4a0be63708732dc04aba46e8e4c995005433c79116f84e7e124baafee26cdf09a14a2c2a00", @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES16, @ANYRES32, @ANYRES64=0x0], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611881000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000ac0)={&(0x7f0000000900)="2569ee55ce56a79f9791d4036961e67101a7e3822da1ef9b901505ceff77d5c03c05506f9b5517a170dc6f65a67473318ce2862d7618c0ae213fe1122677d87d7a8363dd5765f0989c4012544833c724b38df34cd6acd2a1105993bebc9e833c3cd55424c2e4e86fa2f0034264418d09272ceb65e25cb2bfed23235e408d61c3b76aff388b0abfe9a145a061a9c06062569509c2536d1aa51db7a5b3c6f8cabe9d268b3b211d792d055b110514a45bb971d646dce765c371bae09a3d0549abe1c8e6ed19898da87539fbbebcb9b4b42b7b69c91be29a7263c28fad5c0ec71266ed178ae45bcb96fa27b3c1ad786343fa113341fac5ef", &(0x7f0000000a00)=""/142, &(0x7f00000007c0)="946ecf7868b62ddd4714ca7759d865a982e6098163dc65d36f76794a16978248577724566ab14e0125bbc42e55d05b2f53bc87b8ffdef9a7959f4eb82f94388842cd96d2f31c649690222adceb6b97af8af2e61e9e3016fe99edd74e5ca3e4", &(0x7f0000000880)="b29ae4f02208814d19310ce36b829983640c9b1fae896166ee86fe", 0x80000000, r0, 0x4}, 0x38) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x54, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0x32, 0x1, 0x0, 0x1, [@generic="cef79ed5d38e07da298208ef214e92a90c0f132084bd065e770b87afa2ecef40e819d4faf20428d8b85552ebc78c"]}, @nested={0x9, 0x2, 0x0, 0x1, [@typed={0x4, 0x71, 0x0, 0x0, @binary}, @generic='\x00']}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x64, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x84}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x40080) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r8, 0x20, &(0x7f00000006c0)={&(0x7f00000005c0)=""/105, 0x69, 0x0, &(0x7f0000000640)=""/85, 0x55}}, 0x10) kernel console output (not intermixed with test programs): as a backup interface with a down link [ 700.005764][T21882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 700.013440][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 700.131663][T21905] netlink: 'syz.2.4165': attribute type 1 has an invalid length. [ 700.146571][ T1150] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 700.166393][T21905] 8021q: adding VLAN 0 to HW filter on device bond6 [ 700.201196][T21906] vlan1: entered promiscuous mode [ 700.207959][T21906] bond6: entered promiscuous mode [ 700.227229][T21906] vlan1: entered allmulticast mode [ 700.232385][T21906] bond6: entered allmulticast mode [ 700.241951][T21912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4166'. [ 700.443345][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4169'. [ 700.462096][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4169'. [ 700.530079][T21926] lo speed is unknown, defaulting to 1000 [ 700.737520][T21933] vlan2: entered promiscuous mode [ 700.856006][T21943] netlink: 'syz.2.4174': attribute type 3 has an invalid length. [ 700.864138][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4174'. [ 701.297140][T21961] netlink: 'syz.2.4179': attribute type 32 has an invalid length. [ 701.311542][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 701.399079][T21961] bond7: Setting coupled_control to off (0) [ 701.552644][T21971] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4181'. [ 701.565343][T21971] wlan1: mtu less than device minimum [ 702.154097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 702.162461][ C0] lec:lec_tx_timeout: lec0 [ 702.167353][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 702.412081][T21991] netlink: 860 bytes leftover after parsing attributes in process `syz.2.4187'. [ 702.610990][T21999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4189'. [ 702.702494][T22001] ip6t_REJECT: ECHOREPLY is not supported [ 702.857136][T22014] ip6erspan0: entered allmulticast mode [ 702.999995][T22021] siw: device registration error -23 [ 703.188416][T22034] 8021q: adding VLAN 0 to HW filter on device bond8 [ 703.208794][T22034] veth5: entered promiscuous mode [ 705.522230][T16688] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 705.533769][T16688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 705.546135][T16688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 705.554905][T16688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 705.564828][T16688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 705.605536][T16688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 705.617592][T16688] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 705.628004][T16688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 705.635779][T22047] lo speed is unknown, defaulting to 1000 [ 705.641488][T16688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 705.650660][T16688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 705.706861][T22050] lo speed is unknown, defaulting to 1000 [ 705.785451][T22054] __nla_validate_parse: 2 callbacks suppressed [ 705.785471][T22054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4203'. [ 705.921187][T22062] validate_nla: 3 callbacks suppressed [ 705.921205][T22062] netlink: 'syz.1.4205': attribute type 62 has an invalid length. [ 706.087685][T22047] chnl_net:caif_netlink_parms(): no params data found [ 706.310512][T22047] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.319689][T22047] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.327832][T22047] bridge_slave_0: entered allmulticast mode [ 706.335481][T22047] bridge_slave_0: entered promiscuous mode [ 706.346766][T22047] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.354579][T22047] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.362580][T22047] bridge_slave_1: entered allmulticast mode [ 706.371126][T22047] bridge_slave_1: entered promiscuous mode [ 706.412277][T22047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.427489][T22047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.464706][T22047] team0: Port device team_slave_0 added [ 706.472633][T22047] team0: Port device team_slave_1 added [ 706.519630][T22047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.527189][T22047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.555736][T22047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.573488][T22047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.581379][T22047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.609082][T22047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.689941][T22047] hsr_slave_0: entered promiscuous mode [ 706.697536][T22047] hsr_slave_1: entered promiscuous mode [ 706.705016][T22047] debugfs: 'hsr0' already exists in 'hsr' [ 706.711474][T22047] Cannot create hsr debugfs directory [ 706.717958][T22050] chnl_net:caif_netlink_parms(): no params data found [ 706.838010][T22050] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.845538][T22050] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.853665][T22050] bridge_slave_0: entered allmulticast mode [ 706.861584][T22050] bridge_slave_0: entered promiscuous mode [ 706.876538][T22050] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.884337][T22050] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.892837][T22050] bridge_slave_1: entered allmulticast mode [ 706.901134][T22050] bridge_slave_1: entered promiscuous mode [ 706.952403][T22050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.973081][T22050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.022904][T22050] team0: Port device team_slave_0 added [ 707.033385][T22050] team0: Port device team_slave_1 added [ 707.072577][T22050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.081114][T22050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.108849][T22050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.165218][T22050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.172395][T22050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.202379][T22050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.213807][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 707.213840][ C0] lec:lec_tx_timeout: lec0 [ 707.227783][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 707.290362][T22047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 707.311533][T22047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.328340][T22050] hsr_slave_0: entered promiscuous mode [ 707.336102][T22050] hsr_slave_1: entered promiscuous mode [ 707.342842][T22050] debugfs: 'hsr0' already exists in 'hsr' [ 707.351165][T22050] Cannot create hsr debugfs directory [ 707.357451][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4209'. [ 707.376277][T22047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 707.409441][T22047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 707.419402][T22091] lo speed is unknown, defaulting to 1000 [ 707.656262][ T5824] Bluetooth: hci4: command tx timeout [ 707.700206][T22050] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 707.716067][T22050] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 707.727926][T22050] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 707.742528][T22050] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 707.750229][ T5824] Bluetooth: hci6: command tx timeout [ 707.805483][T22047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.858276][T22047] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.932993][T22109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4210'. [ 707.945169][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.952895][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.966210][T22110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4210'. [ 707.973003][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.983300][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.137643][T22047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.199515][T22050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.245406][T22050] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.288425][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.295804][T10273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.377427][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.384783][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.561103][T22047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.787917][T22050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.006372][T22047] veth0_vlan: entered promiscuous mode [ 709.045515][T22047] veth1_vlan: entered promiscuous mode [ 709.106898][T22047] veth0_macvtap: entered promiscuous mode [ 709.121607][T22047] veth1_macvtap: entered promiscuous mode [ 709.169231][T22047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.213710][T22047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.247704][ T104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.269814][ T104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.285805][ T104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.312867][ T104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.346208][T22050] veth0_vlan: entered promiscuous mode [ 709.385373][T22050] veth1_vlan: entered promiscuous mode [ 709.461394][T10275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.485831][T10275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.542134][T10273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.547612][T22050] veth0_macvtap: entered promiscuous mode [ 709.574942][T10273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.592716][T22050] veth1_macvtap: entered promiscuous mode [ 709.652638][T22050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.691484][T22050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.734403][ T5824] Bluetooth: hci4: command tx timeout [ 709.755106][T22151] FAULT_INJECTION: forcing a failure. [ 709.755106][T22151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.763004][T10276] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.769774][T22151] CPU: 0 UID: 0 PID: 22151 Comm: syz.1.4216 Not tainted syzkaller #0 PREEMPT(full) [ 709.769800][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.769811][T22151] Call Trace: [ 709.769818][T22151] [ 709.769826][T22151] dump_stack_lvl+0xe8/0x150 [ 709.769855][T22151] should_fail_ex+0x412/0x560 [ 709.769880][T22151] _copy_from_user+0x2d/0xb0 [ 709.769905][T22151] __sys_bpf+0x229/0x950 [ 709.769937][T22151] ? __pfx___sys_bpf+0x10/0x10 [ 709.769975][T22151] ? ksys_write+0x242/0x270 [ 709.769998][T22151] ? __pfx_ksys_write+0x10/0x10 [ 709.770022][T22151] __x64_sys_bpf+0x7c/0x90 [ 709.770046][T22151] do_syscall_64+0x14d/0xf80 [ 709.770069][T22151] ? trace_irq_disable+0x3b/0x150 [ 709.770092][T22151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.770108][T22151] ? clear_bhb_loop+0x40/0x90 [ 709.770130][T22151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.770147][T22151] RIP: 0033:0x7fbd1499c799 [ 709.770163][T22151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.770178][T22151] RSP: 002b:00007fbd158f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.770197][T22151] RAX: ffffffffffffffda RBX: 00007fbd14c15fa0 RCX: 00007fbd1499c799 [ 709.770210][T22151] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 709.770220][T22151] RBP: 00007fbd158f0090 R08: 0000000000000000 R09: 0000000000000000 [ 709.770231][T22151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.770241][T22151] R13: 00007fbd14c16038 R14: 00007fbd14c15fa0 R15: 00007ffc8fe141f8 [ 709.770269][T22151] [ 709.904693][ T5824] Bluetooth: hci6: command tx timeout [ 709.980144][T10276] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.992445][T10276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.025894][T10276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.203012][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.228214][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.271728][T10276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.286038][T10276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.421374][T22170] netlink: 'syz.6.4202': attribute type 1 has an invalid length. [ 710.440617][T22170] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4202'. [ 710.461733][T22170] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4202'. [ 710.477754][T22170] netlink: 'syz.6.4202': attribute type 1 has an invalid length. [ 710.486304][T22170] netlink: 634 bytes leftover after parsing attributes in process `syz.6.4202'. [ 710.531477][T22179] netlink: 'syz.1.4222': attribute type 1 has an invalid length. [ 710.542630][T22179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4222'. [ 710.591694][T22181] netlink: 'syz.5.4223': attribute type 3 has an invalid length. [ 710.596983][T22182] netlink: 'syz.1.4222': attribute type 1 has an invalid length. [ 710.624175][T22182] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4222'. [ 710.646485][T22186] syzkaller0: entered promiscuous mode [ 710.652280][T22186] syzkaller0: entered allmulticast mode [ 710.661093][T22181] block nbd5: NBD_DISCONNECT [ 710.722738][T22181] siw: device registration error -23 [ 710.747893][T22181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.955710][T22196] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4228'. [ 711.296189][T22223] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4234'. [ 711.446223][T22229] ip6gre1: entered allmulticast mode [ 711.570576][T22238] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4238'. [ 711.668255][T22244] openvswitch: netlink: IP tunnel TTL not specified. [ 711.817234][ T5824] Bluetooth: hci4: command tx timeout [ 711.986025][ T5824] Bluetooth: hci6: command tx timeout [ 712.005847][T22257] netem: incorrect gi model size [ 712.011029][T22257] netem: change failed [ 712.177489][T22265] nftables ruleset with unbound chain [ 712.539004][T22283] netlink: 424 bytes leftover after parsing attributes in process `syz.1.4247'. [ 712.568891][T22283] netlink: 'syz.1.4247': attribute type 1 has an invalid length. [ 713.108589][T22298] netlink: 'syz.5.4250': attribute type 10 has an invalid length. [ 713.155615][T22298] veth0_vlan: left promiscuous mode [ 713.191049][T22298] veth0_vlan: entered promiscuous mode [ 713.227660][T22298] team0: Device veth0_vlan failed to register rx_handler [ 713.413986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6190 ms [ 713.422311][ C0] lec:lec_tx_timeout: lec0 [ 713.431804][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 713.476799][T22319] bond5: option mode: unable to set because the bond device is up [ 713.521330][T22319] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 713.594295][T22319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.665130][T22328] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4255'. [ 713.819062][T22335] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 713.839375][T22335] netlink: 'syz.1.4257': attribute type 2 has an invalid length. [ 713.849417][T22335] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 713.896737][T16688] Bluetooth: hci4: command tx timeout [ 713.973809][ T5824] block nbd3: Receive control failed (result -32) [ 713.995269][T22347] netlink: 'syz.1.4260': attribute type 1 has an invalid length. [ 714.064105][ T5824] Bluetooth: hci6: command tx timeout [ 714.167828][T22353] Bluetooth: MGMT ver 1.23 [ 714.323552][T22364] smc: net device wlan0 applied user defined pnetid SYZ0 [ 714.350294][T22362] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4266'. [ 714.486159][T22374] netlink: 'syz.5.4269': attribute type 11 has an invalid length. [ 714.507954][T22374] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4269'. [ 714.542454][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 714.553758][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 715.132473][T22404] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.145940][T22404] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 715.158702][T22404] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.251175][T22404] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.262467][T22404] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 715.275694][T22404] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.348319][T22404] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.358874][T22404] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 715.370751][T22404] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.401145][T22404] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.412057][T22404] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 715.424285][T22404] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.502981][T10273] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.512935][T10273] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 715.523700][T10273] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.542037][T10273] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.551158][T10273] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 715.559823][T10273] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.584953][ T58] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.593573][ T58] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 715.602629][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.617664][ T58] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.626950][ T58] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 715.636149][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.768642][T22417] dvmrp0: entered allmulticast mode [ 715.779509][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4279'. [ 715.991190][T22420] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4280'. [ 717.029974][T16688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 717.042012][T16688] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 717.051146][T16688] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 717.061285][T16688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 717.069484][T16688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 717.133651][T22443] lo speed is unknown, defaulting to 1000 [ 717.483340][T22443] chnl_net:caif_netlink_parms(): no params data found [ 717.613055][T22443] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.620698][T22443] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.629291][T22443] bridge_slave_0: entered allmulticast mode [ 717.637035][T22443] bridge_slave_0: entered promiscuous mode [ 717.646273][T22443] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.653596][T22443] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.661529][T22443] bridge_slave_1: entered allmulticast mode [ 717.670000][T22443] bridge_slave_1: entered promiscuous mode [ 717.697029][T22443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.710123][T22443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.741677][T22443] team0: Port device team_slave_0 added [ 717.749554][T22443] team0: Port device team_slave_1 added [ 717.775974][T22443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.783047][T22443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.809775][T22443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.822393][T22443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.830793][T22443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.858179][T22443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.904876][T22443] hsr_slave_0: entered promiscuous mode [ 717.912124][T22443] hsr_slave_1: entered promiscuous mode [ 717.918817][T22443] debugfs: 'hsr0' already exists in 'hsr' [ 717.924676][T22443] Cannot create hsr debugfs directory [ 718.080810][T22443] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 718.090947][T22443] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 718.101323][T22443] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 718.111567][T22443] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 718.142279][T22443] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.149540][T22443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.157039][T22443] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.164583][T22443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.218426][T22443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.237764][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.246561][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.261718][T22443] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.276350][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.283622][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.301095][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.308376][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.539545][T22443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.595390][T22472] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.603071][T22472] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.720770][T16688] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 718.734554][T16688] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 718.749379][T16688] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 718.761049][T16688] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 718.777191][T16688] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 718.860313][T22476] lo speed is unknown, defaulting to 1000 [ 719.020408][T22443] veth0_vlan: entered promiscuous mode [ 719.074946][T22443] veth1_vlan: entered promiscuous mode [ 719.121240][T22443] veth0_macvtap: entered promiscuous mode [ 719.139567][T22443] veth1_macvtap: entered promiscuous mode [ 719.168318][T22443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.180661][T22486] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4293'. [ 719.186294][T22443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.189854][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 719.205697][ C0] lec:lec_tx_timeout: lec0 [ 719.211017][ T5824] Bluetooth: hci7: command tx timeout [ 719.211456][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 719.229031][T22486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4293'. [ 719.238846][ T1150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.250474][ T1150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.262487][ T1150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.271958][ T1150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.513503][T10276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.537590][T10276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.607509][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.628954][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.723036][T22476] chnl_net:caif_netlink_parms(): no params data found [ 719.797732][T22503] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4286'. [ 719.976032][T22476] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.988451][T22476] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.001499][T22476] bridge_slave_0: entered allmulticast mode [ 720.010424][T22476] bridge_slave_0: entered promiscuous mode [ 720.025036][T22476] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.042696][T22476] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.062503][T22476] bridge_slave_1: entered allmulticast mode [ 720.080288][T22476] bridge_slave_1: entered promiscuous mode [ 720.168277][T22476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.207931][T22476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.280661][T22523] pim6reg: entered allmulticast mode [ 720.302915][T22525] pim6reg: left allmulticast mode [ 720.333551][T22476] team0: Port device team_slave_0 added [ 720.383028][T22476] team0: Port device team_slave_1 added [ 720.439073][T22476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.447382][T22476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.481978][T22476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.505344][T22476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.512407][T22476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.584400][T22476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.703142][T22476] hsr_slave_0: entered promiscuous mode [ 720.716640][T22476] hsr_slave_1: entered promiscuous mode [ 720.728831][T22476] debugfs: 'hsr0' already exists in 'hsr' [ 720.744451][T22476] Cannot create hsr debugfs directory [ 720.808819][T22518] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 720.868817][ T5824] Bluetooth: hci8: command tx timeout [ 720.949248][T22535] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 721.146976][T22537] IPVS: Scheduler module ip_vs_sip not found [ 721.175271][T22476] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 721.213875][T22476] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 721.254524][ T5824] Bluetooth: hci7: command tx timeout [ 721.263375][T22476] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 721.295839][T22476] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 721.379463][T22546] IPVS: Scheduler module ip_vs_sip not found [ 721.490571][T22476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.539400][T22560] syzkaller0: entered promiscuous mode [ 721.545331][T22560] syzkaller0: entered allmulticast mode [ 721.565371][T22562] FAULT_INJECTION: forcing a failure. [ 721.565371][T22562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.569436][T22476] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.613193][T22562] CPU: 0 UID: 0 PID: 22562 Comm: syz.6.4310 Not tainted syzkaller #0 PREEMPT(full) [ 721.613220][T22562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.613231][T22562] Call Trace: [ 721.613238][T22562] [ 721.613246][T22562] dump_stack_lvl+0xe8/0x150 [ 721.613275][T22562] should_fail_ex+0x412/0x560 [ 721.613302][T22562] _copy_to_user+0x31/0xb0 [ 721.613329][T22562] bpf_verifier_vlog+0x48c/0x8f0 [ 721.613360][T22562] __btf_verifier_log+0xe2/0x140 [ 721.613387][T22562] ? __pfx___btf_verifier_log+0x10/0x10 [ 721.613415][T22562] ? btf_parse_hdr+0x1e2/0x760 [ 721.613446][T22562] btf_parse_hdr+0x366/0x760 [ 721.613477][T22562] btf_new_fd+0x385/0xd10 [ 721.613505][T22562] ? __pfx_btf_new_fd+0x10/0x10 [ 721.613523][T22562] ? bpf_token_put+0x143/0x160 [ 721.613544][T22562] ? bpf_btf_load+0x126/0x190 [ 721.613561][T22562] __sys_bpf+0x4e5/0x950 [ 721.613588][T22562] ? __pfx___sys_bpf+0x10/0x10 [ 721.613624][T22562] ? ksys_write+0x242/0x270 [ 721.613643][T22562] ? __pfx_ksys_write+0x10/0x10 [ 721.613666][T22562] __x64_sys_bpf+0x7c/0x90 [ 721.613688][T22562] do_syscall_64+0x14d/0xf80 [ 721.613710][T22562] ? trace_irq_disable+0x3b/0x150 [ 721.613734][T22562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.613751][T22562] ? clear_bhb_loop+0x40/0x90 [ 721.613773][T22562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.613790][T22562] RIP: 0033:0x7f44c0b9c799 [ 721.613807][T22562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.613823][T22562] RSP: 002b:00007f44c19bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 721.613842][T22562] RAX: ffffffffffffffda RBX: 00007f44c0e15fa0 RCX: 00007f44c0b9c799 [ 721.613855][T22562] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 721.613867][T22562] RBP: 00007f44c19bd090 R08: 0000000000000000 R09: 0000000000000000 [ 721.613881][T22562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.613892][T22562] R13: 00007f44c0e16038 R14: 00007f44c0e15fa0 R15: 00007fffa5beef58 [ 721.613922][T22562] [ 721.920277][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.927572][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.055326][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.063025][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.218411][T22476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 722.319574][T22578] netlink: 'syz.6.4315': attribute type 1 has an invalid length. [ 722.397327][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4315'. [ 722.418117][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4315'. [ 722.538445][T22476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.814609][T22596] syzkaller1: tun_chr_ioctl cmd 21731 [ 722.877723][T22600] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4320'. [ 722.936651][ T5824] Bluetooth: hci8: command tx timeout [ 723.085376][T22476] veth0_vlan: entered promiscuous mode [ 723.126485][T22476] veth1_vlan: entered promiscuous mode [ 723.179349][T22476] veth0_macvtap: entered promiscuous mode [ 723.204280][T22476] veth1_macvtap: entered promiscuous mode [ 723.256544][T22476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.285216][T22476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.335275][ T5824] Bluetooth: hci7: command tx timeout [ 723.346320][T10276] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.363446][T10276] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.392764][T10276] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.422259][T10276] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.564430][T10276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.573159][T10276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.601636][T22616] dummy0: entered allmulticast mode [ 723.611370][T22615] dummy0: left allmulticast mode [ 723.668074][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.686595][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.911595][T22631] netlink: 'syz.6.4325': attribute type 3 has an invalid length. [ 723.921358][T22631] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4325'. [ 723.924134][T22628] netlink: 'syz.8.4289': attribute type 10 has an invalid length. [ 723.995368][T22630] netlink: 'syz.8.4289': attribute type 10 has an invalid length. [ 724.032464][T22636] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4327'. [ 724.038123][T22628] team0: Port device dummy0 added [ 724.106813][T22630] team0: Port device dummy0 removed [ 724.137457][T22630] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 724.320764][ T7064] IPVS: starting estimator thread 0... [ 724.424426][T22648] IPVS: using max 38 ests per chain, 91200 per kthread [ 724.654679][T22656] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 724.684216][T22656] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 724.727231][T22656] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 725.020746][ T5824] Bluetooth: hci8: command tx timeout [ 725.384062][T22692] IPv6: addrconf: prefix option has invalid lifetime [ 725.414929][ T5824] Bluetooth: hci7: command tx timeout [ 725.428663][T22692] IPv6: addrconf: prefix option has invalid lifetime [ 725.485004][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4343'. [ 725.497439][T22698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4343'. [ 725.514791][T22697] netlink: zone id is out of range [ 725.520097][T22697] netlink: zone id is out of range [ 725.534313][T22697] netlink: zone id is out of range [ 725.540057][T22697] netlink: zone id is out of range [ 725.552590][T22697] netlink: zone id is out of range [ 725.571437][T22697] netlink: zone id is out of range [ 725.576847][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6360 ms [ 725.576872][ C0] lec:lec_tx_timeout: lec0 [ 725.586958][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 725.631427][T22697] netlink: zone id is out of range [ 725.637846][T22697] netlink: zone id is out of range [ 725.778792][T22704] ip6erspan0: entered allmulticast mode [ 725.891947][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4347'. [ 725.901758][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4347'. [ 725.943255][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4347'. [ 725.943567][T10275] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.978673][T10275] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.007263][T10275] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.020566][T10275] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.339230][T22732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.358944][T22733] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 726.370373][T22733] team0: Port device macvlan2 added [ 726.391703][T22732] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 726.401633][T22732] team0: Port device macvlan3 added [ 727.094293][T16688] Bluetooth: hci8: command tx timeout [ 727.259403][T22783] netlink: 'syz.1.4368': attribute type 1 has an invalid length. [ 727.695873][T22793] netlink: 'syz.8.4371': attribute type 10 has an invalid length. [ 727.697034][T22794] netlink: 'syz.8.4371': attribute type 10 has an invalid length. [ 727.794768][T22791] __nla_validate_parse: 6 callbacks suppressed [ 727.794784][T22791] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4373'. [ 727.932068][T22804] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4375'. [ 728.005046][T22804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.071839][T22802] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 728.085615][T22802] bond1 (unregistering): Released all slaves [ 728.125228][T22810] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4377'. [ 728.140896][T22810] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4377'. [ 728.170539][T22810] netlink: 'syz.7.4377': attribute type 4 has an invalid length. [ 728.211881][T22817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4380'. [ 728.266872][T22819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4381'. [ 728.386494][T22824] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4382'. [ 728.416420][T22830] netlink: 'syz.6.4384': attribute type 1 has an invalid length. [ 728.436374][T22830] sctp: [Deprecated]: syz.6.4384 (pid 22830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 728.436374][T22830] Use struct sctp_sack_info instead [ 728.608610][T22841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4387'. [ 728.941894][T16688] Bluetooth: hci2: command 0x0406 tx timeout [ 729.173907][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4391'. [ 729.496763][T22871] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4395'. [ 729.601131][T22871] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.608956][T22871] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.721242][ T30] audit: type=1800 audit(1772244878.753:13): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4397" name="memory.events" dev="tmpfs" ino=365 res=0 errno=0 [ 729.915981][T22884] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 730.226093][T22904] tipc: Enabling of bearer rejected, failed to enable media [ 731.095041][T22936] sch_tbf: burst 88 is lower than device wlan1 mtu (1514) ! [ 731.334070][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 731.342157][ C0] lec:lec_tx_timeout: lec0 [ 731.348207][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 731.403046][T22949] vlan2: entered allmulticast mode [ 731.454809][T22949] dummy0: entered allmulticast mode [ 731.526111][T22953] net_ratelimit: 47 callbacks suppressed [ 731.526131][T22953] openvswitch: netlink: Missing valid actions attribute. [ 731.564589][T22953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.739822][ T5824] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 731.777523][ T5824] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 731.804536][ T5824] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 731.839542][ T5824] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 731.860091][ T5824] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 732.449360][ T30] audit: type=1800 audit(1772244881.473:14): pid=22991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4430" name="3" dev="tmpfs" ino=413 res=0 errno=0 [ 732.492520][T22995] FAULT_INJECTION: forcing a failure. [ 732.492520][T22995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.518962][T22995] CPU: 0 UID: 0 PID: 22995 Comm: syz.8.4431 Not tainted syzkaller #0 PREEMPT(full) [ 732.518988][T22995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.518999][T22995] Call Trace: [ 732.519007][T22995] [ 732.519016][T22995] dump_stack_lvl+0xe8/0x150 [ 732.519047][T22995] should_fail_ex+0x412/0x560 [ 732.519074][T22995] _copy_to_user+0x31/0xb0 [ 732.519101][T22995] bpf_verifier_vlog+0x48c/0x8f0 [ 732.519128][T22995] btf_verifier_log+0x11d/0x1a0 [ 732.519163][T22995] ? __pfx_btf_verifier_log+0x10/0x10 [ 732.519184][T22995] ? __btf_verifier_log+0xe2/0x140 [ 732.519210][T22995] ? __pfx___btf_verifier_log+0x10/0x10 [ 732.519230][T22995] btf_func_proto_log+0x64e/0x850 [ 732.519260][T22995] __btf_verifier_log_type+0x45b/0x690 [ 732.519290][T22995] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 732.519313][T22995] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 732.519329][T22995] ? sort+0xb0/0x100 [ 732.519355][T22995] btf_func_proto_check_meta+0xed/0x160 [ 732.519381][T22995] btf_parse_type_sec+0x446/0x24f0 [ 732.519411][T22995] ? __pfx_btf_check_sec_info+0x10/0x10 [ 732.519431][T22995] ? btf_parse_str_sec+0x212/0x2a0 [ 732.519456][T22995] btf_new_fd+0x426/0xd10 [ 732.519481][T22995] ? __pfx_btf_new_fd+0x10/0x10 [ 732.519499][T22995] ? bpf_token_put+0x143/0x160 [ 732.519519][T22995] ? bpf_btf_load+0x126/0x190 [ 732.519539][T22995] __sys_bpf+0x4e5/0x950 [ 732.519566][T22995] ? __pfx___sys_bpf+0x10/0x10 [ 732.519604][T22995] ? ksys_write+0x242/0x270 [ 732.519624][T22995] ? __pfx_ksys_write+0x10/0x10 [ 732.519648][T22995] __x64_sys_bpf+0x7c/0x90 [ 732.519670][T22995] do_syscall_64+0x14d/0xf80 [ 732.519692][T22995] ? trace_irq_disable+0x3b/0x150 [ 732.519716][T22995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.519734][T22995] ? clear_bhb_loop+0x40/0x90 [ 732.519754][T22995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.519771][T22995] RIP: 0033:0x7fb77ed9c799 [ 732.519789][T22995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.519804][T22995] RSP: 002b:00007fb77cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 732.519823][T22995] RAX: ffffffffffffffda RBX: 00007fb77f015fa0 RCX: 00007fb77ed9c799 [ 732.519835][T22995] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 732.519845][T22995] RBP: 00007fb77cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 732.519853][T22995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.519862][T22995] R13: 00007fb77f016038 R14: 00007fb77f015fa0 R15: 00007ffdc5b16738 [ 732.519890][T22995] [ 732.796421][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.805238][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.260571][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.379087][T23013] netlink: 'syz.8.4438': attribute type 1 has an invalid length. [ 733.402583][T23013] __nla_validate_parse: 9 callbacks suppressed [ 733.402601][T23013] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4438'. [ 733.429143][T23017] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4439'. [ 733.574603][T23024] netlink: 'syz.7.4440': attribute type 2 has an invalid length. [ 733.609190][T23024] 9: entered promiscuous mode [ 733.626261][T22962] chnl_net:caif_netlink_parms(): no params data found [ 733.639107][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 733.729587][T23029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.738972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.803544][T23033] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4443'. [ 733.863607][T22962] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.872019][T22962] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.879683][T22962] bridge_slave_0: entered allmulticast mode [ 733.889593][T22962] bridge_slave_0: entered promiscuous mode [ 733.907491][T22962] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.915453][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.926050][T22962] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.933538][T22962] bridge_slave_1: entered allmulticast mode [ 733.941817][T22962] bridge_slave_1: entered promiscuous mode [ 733.965979][T23038] FAULT_INJECTION: forcing a failure. [ 733.965979][T23038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.988491][ T5824] Bluetooth: hci9: command tx timeout [ 733.994085][T23038] CPU: 0 UID: 0 PID: 23038 Comm: syz.7.4444 Not tainted syzkaller #0 PREEMPT(full) [ 733.994111][T23038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.994123][T23038] Call Trace: [ 733.994132][T23038] [ 733.994141][T23038] dump_stack_lvl+0xe8/0x150 [ 733.994165][T23038] should_fail_ex+0x412/0x560 [ 733.994185][T23038] _copy_to_user+0x31/0xb0 [ 733.994207][T23038] bpf_verifier_vlog+0x48c/0x8f0 [ 733.994232][T23038] btf_verifier_log+0x11d/0x1a0 [ 733.994254][T23038] ? __pfx_btf_verifier_log+0x10/0x10 [ 733.994282][T23038] ? btf_func_proto_log+0x64e/0x850 [ 733.994308][T23038] __btf_verifier_log_type+0x45b/0x690 [ 733.994339][T23038] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 733.994361][T23038] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 733.994379][T23038] ? sort+0xb0/0x100 [ 733.994403][T23038] btf_func_proto_check_meta+0xed/0x160 [ 733.994430][T23038] btf_parse_type_sec+0x446/0x24f0 [ 733.994466][T23038] ? __pfx_btf_check_sec_info+0x10/0x10 [ 733.994487][T23038] ? btf_parse_str_sec+0x212/0x2a0 [ 733.994514][T23038] btf_new_fd+0x426/0xd10 [ 733.994538][T23038] ? __pfx_btf_new_fd+0x10/0x10 [ 733.994556][T23038] ? bpf_token_put+0x143/0x160 [ 733.994576][T23038] ? bpf_btf_load+0x126/0x190 [ 733.994597][T23038] __sys_bpf+0x4e5/0x950 [ 733.994628][T23038] ? __pfx___sys_bpf+0x10/0x10 [ 733.994667][T23038] ? ksys_write+0x242/0x270 [ 733.994688][T23038] ? __pfx_ksys_write+0x10/0x10 [ 733.994713][T23038] __x64_sys_bpf+0x7c/0x90 [ 733.994737][T23038] do_syscall_64+0x14d/0xf80 [ 733.994759][T23038] ? trace_irq_disable+0x3b/0x150 [ 733.994784][T23038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.994803][T23038] ? clear_bhb_loop+0x40/0x90 [ 733.994825][T23038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.994842][T23038] RIP: 0033:0x7f819fb9c799 [ 733.994860][T23038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.994876][T23038] RSP: 002b:00007f81a0a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 733.994895][T23038] RAX: ffffffffffffffda RBX: 00007f819fe15fa0 RCX: 00007f819fb9c799 [ 733.994908][T23038] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 733.994920][T23038] RBP: 00007f81a0a36090 R08: 0000000000000000 R09: 0000000000000000 [ 733.994931][T23038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.994941][T23038] R13: 00007f819fe16038 R14: 00007f819fe15fa0 R15: 00007fff3d6138c8 [ 733.994970][T23038] [ 734.087668][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 734.230548][T22962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.297484][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.424641][T22962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.535768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.555998][T22962] team0: Port device team_slave_0 added [ 734.573145][T22962] team0: Port device team_slave_1 added [ 734.652922][T22962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.660348][T22962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.693060][T22962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.746741][T23059] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 734.755662][T22962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.773231][T22962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.776431][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4450'. [ 734.801170][T22962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.848976][T23062] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4449'. [ 734.886745][T23057] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4450'. [ 734.899664][T23056] netlink: 63 bytes leftover after parsing attributes in process `syz.8.4449'. [ 735.149866][T22962] hsr_slave_0: entered promiscuous mode [ 735.172099][T22962] hsr_slave_1: entered promiscuous mode [ 735.224674][T22962] debugfs: 'hsr0' already exists in 'hsr' [ 735.230615][T22962] Cannot create hsr debugfs directory [ 735.308355][T23080] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 735.333369][T23080] team0 (unregistering): Port device team_slave_0 removed [ 735.346089][T23080] team0 (unregistering): Failed to send options change via netlink (err -105) [ 735.355895][T23080] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 735.369482][T23080] team0 (unregistering): Port device team_slave_1 removed [ 735.381295][T23080] team0 (unregistering): Failed to send options change via netlink (err -105) [ 735.392105][T23080] team0 (unregistering): Failed to send port change of device macvlan2 via netlink (err -105) [ 735.403914][T23080] team0 (unregistering): Port device macvlan2 removed [ 735.436852][T23080] team0 (unregistering): Failed to send options change via netlink (err -105) [ 735.447592][T23080] team0 (unregistering): Failed to send port change of device macvlan3 via netlink (err -105) [ 735.459219][T23080] team0 (unregistering): Port device macvlan3 removed [ 735.621635][T23091] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4459'. [ 736.090150][T22962] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 736.135382][T16688] Bluetooth: hci9: command tx timeout [ 736.354914][T22962] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 736.441132][T22962] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 736.497627][T22962] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 736.934907][T16143] net_ratelimit: 15 callbacks suppressed [ 736.934927][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.967765][T22962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.023710][T22962] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.068926][T10276] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.076264][T10276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.110572][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 737.116616][T10276] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.118812][ C0] lec:lec_tx_timeout: lec0 [ 737.126107][T10276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.132861][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 737.198052][T23155] netlink: 'syz.6.4469': attribute type 1 has an invalid length. [ 737.233885][T23156] syzkaller0: entered allmulticast mode [ 737.253041][T23156] syzkaller0 (unregistering): left allmulticast mode [ 737.415937][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.462449][T23174] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 737.616903][T23181] x_tables: duplicate underflow at hook 2 [ 737.705528][T22962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.909573][T23193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.215091][T16688] Bluetooth: hci9: command tx timeout [ 738.246372][T22962] veth0_vlan: entered promiscuous mode [ 738.264090][T22962] veth1_vlan: entered promiscuous mode [ 738.314517][T22962] veth0_macvtap: entered promiscuous mode [ 738.329226][T22962] veth1_macvtap: entered promiscuous mode [ 738.356844][T22962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.437728][T22962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.455844][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.641858][T10277] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.695847][T10277] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.748816][T23217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4482'. [ 738.793712][T10277] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.826199][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 738.831076][T10277] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.858917][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 738.883687][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 738.901064][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 738.926797][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 738.977326][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 738.991232][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 739.002421][T23222] netlink: 'syz.8.4483': attribute type 2 has an invalid length. [ 739.002443][T23222] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4483'. [ 739.033306][T23225] pimreg: entered allmulticast mode [ 739.044839][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 739.105272][T23229] tipc: Started in network mode [ 739.110278][T23229] tipc: Node identity ac14140f, cluster identity 4711 [ 739.119446][T10273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.138000][T10273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.151224][T23229] tipc: New replicast peer: 255.255.255.255 [ 739.157658][T23231] netlink: 'syz.1.4486': attribute type 1 has an invalid length. [ 739.175565][T23229] tipc: Enabled bearer , priority 10 [ 739.220861][T23231] netlink: 'syz.1.4486': attribute type 2 has an invalid length. [ 739.438359][T10277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.447058][T10277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.496488][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.868312][T23269] atomic_op ffff88804fade198 conn xmit_atomic 0000000000000000 [ 739.977036][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.282116][T23282] syzkaller0: entered promiscuous mode [ 740.288423][T23282] syzkaller0: entered allmulticast mode [ 740.297974][T16688] Bluetooth: hci9: command tx timeout [ 740.371560][T23299] FAULT_INJECTION: forcing a failure. [ 740.371560][T23299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.392823][T23299] CPU: 0 UID: 0 PID: 23299 Comm: syz.7.4503 Not tainted syzkaller #0 PREEMPT(full) [ 740.392848][T23299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.392860][T23299] Call Trace: [ 740.392867][T23299] [ 740.392874][T23299] dump_stack_lvl+0xe8/0x150 [ 740.392911][T23299] should_fail_ex+0x412/0x560 [ 740.392937][T23299] _copy_to_user+0x31/0xb0 [ 740.392963][T23299] bpf_verifier_vlog+0x48c/0x8f0 [ 740.392990][T23299] __btf_verifier_log+0xe2/0x140 [ 740.393016][T23299] ? __pfx___btf_verifier_log+0x10/0x10 [ 740.393048][T23299] btf_verifier_log_member+0x43e/0x800 [ 740.393077][T23299] ? __pfx_btf_verifier_log_member+0x10/0x10 [ 740.393104][T23299] ? rcu_is_watching+0x15/0xb0 [ 740.393132][T23299] btf_struct_check_meta+0xbb8/0xcf0 [ 740.393167][T23299] btf_parse_type_sec+0x446/0x24f0 [ 740.393197][T23299] ? __pfx_btf_check_sec_info+0x10/0x10 [ 740.393215][T23299] ? btf_parse_str_sec+0x212/0x2a0 [ 740.393241][T23299] btf_new_fd+0x426/0xd10 [ 740.393269][T23299] ? __pfx_btf_new_fd+0x10/0x10 [ 740.393287][T23299] ? bpf_token_put+0x143/0x160 [ 740.393307][T23299] ? bpf_btf_load+0x126/0x190 [ 740.393328][T23299] __sys_bpf+0x4e5/0x950 [ 740.393357][T23299] ? __pfx___sys_bpf+0x10/0x10 [ 740.393399][T23299] ? ksys_write+0x242/0x270 [ 740.393421][T23299] ? __pfx_ksys_write+0x10/0x10 [ 740.393447][T23299] __x64_sys_bpf+0x7c/0x90 [ 740.393472][T23299] do_syscall_64+0x14d/0xf80 [ 740.393496][T23299] ? trace_irq_disable+0x3b/0x150 [ 740.393521][T23299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.393540][T23299] ? clear_bhb_loop+0x40/0x90 [ 740.393563][T23299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.393581][T23299] RIP: 0033:0x7f819fb9c799 [ 740.393598][T23299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.393615][T23299] RSP: 002b:00007f81a0a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 740.393653][T23299] RAX: ffffffffffffffda RBX: 00007f819fe15fa0 RCX: 00007f819fb9c799 [ 740.393666][T23299] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 740.393679][T23299] RBP: 00007f81a0a36090 R08: 0000000000000000 R09: 0000000000000000 [ 740.393690][T23299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.393701][T23299] R13: 00007f819fe16038 R14: 00007f819fe15fa0 R15: 00007fff3d6138c8 [ 740.393732][T23299] [ 740.393920][ T5956] tipc: Node number set to 2886997007 [ 740.540329][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.590507][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.598799][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.157933][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 742.166122][ C0] lec:lec_tx_timeout: lec0 [ 742.171261][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 742.619424][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.034208][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.660942][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.771677][T23332] lo speed is unknown, defaulting to 1000 [ 743.784504][T23332] lo speed is unknown, defaulting to 1000 [ 743.791494][T23332] lo speed is unknown, defaulting to 1000 [ 743.857667][T23332] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 744.004936][T23340] netlink: 'syz.6.4515': attribute type 12 has an invalid length. [ 744.050488][T23332] lo speed is unknown, defaulting to 1000 [ 744.078890][T23332] lo speed is unknown, defaulting to 1000 [ 744.116517][T23332] lo speed is unknown, defaulting to 1000 [ 744.171890][T23332] lo speed is unknown, defaulting to 1000 [ 744.182230][T23346] netlink: 'syz.6.4518': attribute type 4 has an invalid length. [ 744.236360][T23346] netlink: 'syz.6.4518': attribute type 4 has an invalid length. [ 744.256836][T23332] lo speed is unknown, defaulting to 1000 [ 744.266085][T23332] lo speed is unknown, defaulting to 1000 [ 744.301275][T23332] lo speed is unknown, defaulting to 1000 [ 744.346889][T23332] lo speed is unknown, defaulting to 1000 [ 744.363113][T23332] lo speed is unknown, defaulting to 1000 [ 744.377184][T23332] lo speed is unknown, defaulting to 1000 [ 744.393871][T23332] lo speed is unknown, defaulting to 1000 [ 744.402435][T23332] lo speed is unknown, defaulting to 1000 [ 744.415942][T23332] lo speed is unknown, defaulting to 1000 [ 744.429463][T23332] lo speed is unknown, defaulting to 1000 [ 744.690034][T23369] __nla_validate_parse: 33 callbacks suppressed [ 744.690054][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4523'. [ 744.707237][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.746808][T23369] netlink: 'syz.7.4523': attribute type 1 has an invalid length. [ 744.786615][T23369] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4523'. [ 744.799694][T23369] netlink: 658 bytes leftover after parsing attributes in process `syz.7.4523'. [ 744.811298][T23369] netlink: 'syz.7.4523': attribute type 1 has an invalid length. [ 744.868549][T23365] netlink: 'syz.1.4522': attribute type 9 has an invalid length. [ 744.915717][T23376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.924855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.441459][T23400] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 745.510756][T23372] lo speed is unknown, defaulting to 1000 [ 745.713716][T23415] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 745.742578][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.015791][T23432] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4542'. [ 746.065899][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.168533][T23434] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 746.399624][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4545'. [ 746.538781][T23455] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.4548'. [ 746.578060][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.965445][T23438] lo speed is unknown, defaulting to 1000 [ 747.027723][T23468] syzkaller0: entered promiscuous mode [ 747.033501][T23468] syzkaller0: entered allmulticast mode [ 747.188482][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 747.196657][ C0] lec:lec_tx_timeout: lec0 [ 747.201527][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.281156][T23479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4559'. [ 747.352156][T23484] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 747.392569][T23479] hsr0: entered promiscuous mode [ 747.398606][T23479] macvlan2: entered allmulticast mode [ 747.435909][T23479] hsr0: entered allmulticast mode [ 747.441364][T23479] hsr_slave_0: entered allmulticast mode [ 747.456413][T23479] hsr_slave_1: entered allmulticast mode [ 747.470467][T23488] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4561'. [ 747.480145][T23446] lo speed is unknown, defaulting to 1000 [ 747.505113][T23488] netlink: 'syz.7.4561': attribute type 7 has an invalid length. [ 747.513171][T23488] netlink: 'syz.7.4561': attribute type 8 has an invalid length. [ 747.526693][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4561'. [ 747.635654][T23488] erspan0: entered promiscuous mode [ 747.644854][T23488] gretap0: entered promiscuous mode [ 747.656418][T23488] erspan0: left promiscuous mode [ 747.678785][T23488] gretap0: left promiscuous mode [ 747.752906][T23495] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4562'. [ 747.807360][T23491] net_ratelimit: 4 callbacks suppressed [ 747.807375][T23491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.831896][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.339546][T23515] tipc: Started in network mode [ 748.388691][T23515] tipc: Node identity 222b7332ead6, cluster identity 4711 [ 748.416890][T23515] tipc: Enabled bearer , priority 10 [ 748.633392][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.856743][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.097012][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.172863][T23551] sctp: [Deprecated]: syz.9.4580 (pid 23551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.172863][T23551] Use struct sctp_sack_info instead [ 749.391242][T23561] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 749.494376][ T51] Bluetooth: hci9: command 0x0405 tx timeout [ 749.544131][T12382] tipc: Node number set to 3372053298 [ 749.901499][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.340381][T23608] IPVS: set_ctl: invalid protocol: 200 224.0.0.1:20004 [ 750.537118][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.644830][T23629] __nla_validate_parse: 7 callbacks suppressed [ 750.644850][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4594'. [ 750.674607][T23629] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4594'. [ 750.729436][T23630] veth1_macvtap: renamed from veth0_vlan [ 750.848711][T23638] sctp: [Deprecated]: syz.1.4600 (pid 23638) Use of int in max_burst socket option deprecated. [ 750.848711][T23638] Use struct sctp_assoc_value instead [ 750.936065][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.082103][T23650] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.4604'. [ 751.175718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.302444][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4605'. [ 751.345524][T23663] xt_TCPMSS: Only works on TCP SYN packets [ 751.371108][T23659] gtp0: entered promiscuous mode [ 751.402891][T23659] gtp0: entered allmulticast mode [ 751.446239][T23671] xt_l2tp: invalid flags combination: 8 [ 751.642557][T23687] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4610'. [ 751.673883][T23688] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4610'. [ 751.696882][T23685] vlan2: entered promiscuous mode [ 751.702171][T23685] bridge0: entered promiscuous mode [ 751.932981][ T5486] veth1_macvtap: left promiscuous mode [ 751.968099][ T5486] veth1_macvtap: entered promiscuous mode [ 751.981700][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.016253][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.094189][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5890 ms [ 753.095578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.102375][ C0] lec:lec_tx_timeout: lec0 [ 753.121424][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 753.574662][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.055373][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.096050][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.135259][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.614357][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.175257][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.134096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 758.142234][ C0] lec:lec_tx_timeout: lec0 [ 758.146919][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 758.224324][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.232465][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.255361][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.658765][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.295376][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.776377][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.335516][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.374867][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.154071][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 763.162183][ C0] lec:lec_tx_timeout: lec0 [ 763.166942][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 763.414967][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.815707][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.455561][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.497088][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.536263][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.855040][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.575378][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.820128][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.174270][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 768.182350][ C0] lec:lec_tx_timeout: lec0 [ 768.187678][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 768.615105][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.655263][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.897041][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.696263][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.735292][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.775872][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.935181][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.815459][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.974032][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 773.982286][ C0] lec:lec_tx_timeout: lec0 [ 773.987143][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 774.855862][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.905141][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.974741][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.936421][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.416139][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.975228][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.014239][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 779.015250][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.022350][ C0] lec:lec_tx_timeout: lec0 [ 779.035606][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 779.041787][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.975067][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.055506][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.095205][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.054476][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.135515][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.537017][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.178712][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.814689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.044173][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 784.052702][ C0] lec:lec_tx_timeout: lec0 [ 784.057568][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 784.215413][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.097247][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.255190][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.736577][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.295941][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.014506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 787.335844][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.375498][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.785295][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.064109][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 789.072217][ C0] lec:lec_tx_timeout: lec0 [ 789.077134][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 789.415899][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.454698][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.495790][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.826274][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.137716][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.536918][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.576960][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.084193][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 794.092775][ C0] lec:lec_tx_timeout: lec0 [ 794.097469][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 794.614764][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.857508][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.655590][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.977352][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.695527][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.872163][T23765] netlink: 'syz.8.4615': attribute type 3 has an invalid length. [ 796.886325][T23765] netlink: 666 bytes leftover after parsing attributes in process `syz.8.4615'. [ 797.125642][T23786] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4621'. [ 797.349626][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4626'. [ 797.356158][T23801] syzkaller1: entered promiscuous mode [ 797.363672][T23804] netlink: 261 bytes leftover after parsing attributes in process `syz.7.4626'. [ 797.375141][T23801] syzkaller1: entered allmulticast mode [ 797.500970][T23809] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.508796][T23809] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.518162][T23809] bridge0: entered allmulticast mode [ 797.528080][T23809] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 797.734771][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.900959][T23821] netlink: 212340 bytes leftover after parsing attributes in process `syz.8.4632'. [ 797.914989][T23821] openvswitch: netlink: Message has 16 unknown bytes. [ 798.117952][T23832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.249366][T23832] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.446939][T23842] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4636'. [ 798.457087][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4640'. [ 798.482640][T23837] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.490342][T23837] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.580317][T23854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4636'. [ 798.650206][T23837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.662525][T23837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.683809][T23856] netlink: 'syz.8.4641': attribute type 2 has an invalid length. [ 798.707019][T23837] veth1_macvtap: left promiscuous mode [ 798.775602][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.795667][T23817] lo speed is unknown, defaulting to 1000 [ 798.839721][T23832] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.906083][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4641'. [ 798.950027][T10270] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.974940][T10270] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.104394][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 799.112743][ C0] lec:lec_tx_timeout: lec0 [ 799.118627][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 799.323415][T23879] netlink: 'syz.6.4644': attribute type 1 has an invalid length. [ 799.350633][T23879] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4644'. [ 799.814848][ T5925] net_ratelimit: 2 callbacks suppressed [ 799.814867][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.664495][T23942] netlink: 'syz.8.4658': attribute type 4 has an invalid length. [ 800.704978][T23942] netlink: 'syz.8.4658': attribute type 4 has an invalid length. [ 800.856773][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.093879][T23946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.117959][T23946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.476810][T10270] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.524235][ T36] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.549031][T23974] dvmrp0: left allmulticast mode [ 801.602357][ T36] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.662583][ T36] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.734603][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.735974][T23983] vlan0: entered allmulticast mode [ 801.775509][T23983] bond0: entered allmulticast mode [ 801.782848][T23983] bond_slave_0: entered allmulticast mode [ 801.792048][T23983] bond_slave_1: entered allmulticast mode [ 801.839688][T23985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.850026][T23985] bond_slave_0: left allmulticast mode [ 801.870567][T23985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.887447][T23985] bond_slave_1: left allmulticast mode [ 801.896081][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.909785][T23985] bond0 (unregistering): Released all slaves [ 802.064335][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.413068][T24009] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.420533][T24009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.428138][T24009] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.435606][T24009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.506908][T24012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.520053][T16146] lo speed is unknown, defaulting to 1000 [ 802.523325][T24012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.604355][T23996] macsec0: entered promiscuous mode [ 802.621750][T24001] __nla_validate_parse: 4 callbacks suppressed [ 802.621769][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4668'. [ 802.634519][T23996] macsec0: entered allmulticast mode [ 802.675284][T23996] veth1_macvtap: entered allmulticast mode [ 802.771535][T24001] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.821756][T24001] bridge_slave_1 (unregistering): left allmulticast mode [ 802.847168][T24001] bridge_slave_1 (unregistering): left promiscuous mode [ 802.866201][T24001] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.937723][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.056632][T24000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.085556][T24000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.352333][T24046] netlink: 'syz.9.4677': attribute type 1 has an invalid length. [ 803.473488][T24046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 803.553874][T24050] syzkaller0: entered promiscuous mode [ 803.575411][T24050] syzkaller0: entered allmulticast mode [ 803.641055][T24059] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4681'. [ 804.134569][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 804.143713][ C0] lec:lec_tx_timeout: lec0 [ 804.149116][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 804.317182][T24097] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.4686'. [ 804.512687][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4688'. [ 804.644503][T24103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.018251][ T5886] net_ratelimit: 1 callbacks suppressed [ 805.018272][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.104592][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.155008][T24137] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4695'. [ 805.189357][T24137] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4695'. [ 805.226054][T24135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.371427][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4696'. [ 805.387231][T24147] netem: invalid attributes len -24 [ 805.750678][T23039] Bluetooth: hci1: command 0x0406 tx timeout [ 805.761012][T24101] lo speed is unknown, defaulting to 1000 [ 805.914852][T24167] syzkaller0: entered promiscuous mode [ 805.940899][T24167] syzkaller0: entered allmulticast mode [ 806.057185][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.148102][T24173] netlink: 'syz.7.4702': attribute type 10 has an invalid length. [ 806.201413][T24173] team0: Port device syz_tun added [ 806.227196][T24153] lo speed is unknown, defaulting to 1000 [ 806.243397][T24178] netlink: 292 bytes leftover after parsing attributes in process `syz.9.4703'. [ 806.533308][T24188] pimreg: left allmulticast mode [ 806.702110][T24200] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4710'. [ 807.077425][T24217] netlink: 644 bytes leftover after parsing attributes in process `syz.6.4714'. [ 807.096145][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.740541][T24249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.749679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.069650][T24261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.080659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.121536][T24261] netlink: 'syz.7.4727': attribute type 3 has an invalid length. [ 808.136504][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.149964][T24261] netlink: 'syz.7.4727': attribute type 3 has an invalid length. [ 808.295641][T24243] __nla_validate_parse: 1 callbacks suppressed [ 808.295662][T24243] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4718'. [ 808.569818][T24285] netlink: 'syz.8.4732': attribute type 2 has an invalid length. [ 808.615165][T24247] lo speed is unknown, defaulting to 1000 [ 809.126165][T24307] gretap1: entered promiscuous mode [ 809.157552][T24307] batman_adv: batadv0: Adding interface: gretap1 [ 809.164647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 809.167940][T24307] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.172936][ C0] lec:lec_tx_timeout: lec0 [ 809.205609][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 809.256121][T24307] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 810.374739][T16146] net_ratelimit: 3 callbacks suppressed [ 810.374760][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.174822][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.337476][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.414448][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.552079][T24286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.562944][T24297] netlink: 'syz.8.4736': attribute type 1 has an invalid length. [ 811.571935][T24297] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4736'. [ 811.584158][T24301] netlink: 'syz.1.4734': attribute type 1 has an invalid length. [ 811.604200][T24301] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4734'. [ 811.613532][T24301] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4734'. [ 811.639448][T24301] netlink: 'syz.1.4734': attribute type 1 has an invalid length. [ 811.648504][T24301] netlink: 'syz.1.4734': attribute type 8 has an invalid length. [ 811.657630][T24301] netlink: 606 bytes leftover after parsing attributes in process `syz.1.4734'. [ 811.910907][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4743'. [ 811.920646][T24325] netlink: 'syz.9.4743': attribute type 20 has an invalid length. [ 811.929176][T24325] netlink: 'syz.9.4743': attribute type 21 has an invalid length. [ 812.086913][ T5956] IPVS: starting estimator thread 0... [ 812.132633][T24338] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4749'. [ 812.184644][T24334] IPVS: using max 27 ests per chain, 64800 per kthread [ 812.248432][T24345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.455227][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.655790][T24364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.690109][T24365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.933123][T24379] netlink: 'syz.7.4756': attribute type 1 has an invalid length. [ 813.316127][T24401] x_tables: unsorted underflow at hook 3 [ 813.418216][T24411] netlink: 112 bytes leftover after parsing attributes in process `syz.9.4765'. [ 813.432398][T24409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4764'. [ 813.494697][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.532515][T24409] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 813.653370][T24409] bond3 (unregistering): Released all slaves [ 813.889451][T24437] syzkaller0: entered promiscuous mode [ 813.898801][T24437] syzkaller0: entered allmulticast mode [ 814.224995][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.353134][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4774'. [ 814.568318][T24454] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4775'. [ 814.918500][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.928171][ T58] bond_slave_0: left promiscuous mode [ 814.945000][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.956560][ T58] bond_slave_1: left promiscuous mode [ 814.962645][ T58] bond0 (unregistering): Released all slaves [ 814.976979][ T58] bond1 (unregistering): Released all slaves [ 814.997042][ T58] bond2 (unregistering): Released all slaves [ 815.013979][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 815.021115][ T58] bond3 (unregistering): Released all slaves [ 815.022141][ C0] lec:lec_tx_timeout: lec0 [ 815.023337][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 815.042791][ T58] bond4 (unregistering): Released all slaves [ 815.069463][ T58] bond5 (unregistering): Released all slaves [ 815.101185][T24431] lo speed is unknown, defaulting to 1000 [ 815.311233][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4778'. [ 815.405581][ T58] : left promiscuous mode [ 815.572954][ T58] tipc: Disabling bearer [ 815.579049][ T7064] net_ratelimit: 1 callbacks suppressed [ 815.579067][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.603791][ T58] tipc: Left network mode [ 815.675103][T24481] sctp: [Deprecated]: syz.9.4784 (pid 24481) Use of int in maxseg socket option. [ 815.675103][T24481] Use struct sctp_assoc_value instead [ 815.844306][T24498] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4784'. [ 815.916463][T24499] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4784'. [ 816.021585][T24481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4784'. [ 816.614488][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.838961][T24527] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4794'. [ 816.873449][T24530] FAULT_INJECTION: forcing a failure. [ 816.873449][T24530] name failslab, interval 1, probability 0, space 0, times 0 [ 816.888144][T24530] CPU: 0 UID: 0 PID: 24530 Comm: syz.9.4796 Not tainted syzkaller #0 PREEMPT(full) [ 816.888170][T24530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.888181][T24530] Call Trace: [ 816.888188][T24530] [ 816.888196][T24530] dump_stack_lvl+0xe8/0x150 [ 816.888228][T24530] should_fail_ex+0x412/0x560 [ 816.888256][T24530] should_failslab+0xa8/0x100 [ 816.888280][T24530] __kmalloc_cache_noprof+0x88/0x660 [ 816.888298][T24530] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 816.888323][T24530] ? nft_trans_table_add+0x56/0x430 [ 816.888355][T24530] nft_trans_table_add+0x56/0x430 [ 816.888387][T24530] nf_tables_newtable+0xce3/0x1910 [ 816.888431][T24530] nfnetlink_rcv+0x1240/0x27b0 [ 816.888449][T24530] ? is_bpf_text_address+0x26/0x2b0 [ 816.888503][T24530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 816.888534][T24530] ? __lock_acquire+0x6b5/0x2cf0 [ 816.888593][T24530] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.888634][T24530] netlink_unicast+0x80f/0x9b0 [ 816.888670][T24530] ? __pfx_netlink_unicast+0x10/0x10 [ 816.888692][T24530] ? netlink_sendmsg+0x650/0xb40 [ 816.888713][T24530] ? skb_put+0x11b/0x210 [ 816.888741][T24530] netlink_sendmsg+0x813/0xb40 [ 816.888772][T24530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.888799][T24530] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.888823][T24530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.888844][T24530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.888865][T24530] ____sys_sendmsg+0xa68/0xad0 [ 816.888898][T24530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.888929][T24530] ? import_iovec+0x73/0xa0 [ 816.888956][T24530] ___sys_sendmsg+0x2a5/0x360 [ 816.888983][T24530] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.889041][T24530] ? __fget_files+0x2a/0x420 [ 816.889064][T24530] ? __fget_files+0x3a0/0x420 [ 816.889099][T24530] __x64_sys_sendmsg+0x1bd/0x2a0 [ 816.889128][T24530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.889164][T24530] ? __pfx_ksys_write+0x10/0x10 [ 816.889196][T24530] do_syscall_64+0x14d/0xf80 [ 816.889219][T24530] ? trace_irq_disable+0x3b/0x150 [ 816.889244][T24530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.889263][T24530] ? clear_bhb_loop+0x40/0x90 [ 816.889286][T24530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.889304][T24530] RIP: 0033:0x7fd8e299c799 [ 816.889323][T24530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.889339][T24530] RSP: 002b:00007fd8e3855028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.889360][T24530] RAX: ffffffffffffffda RBX: 00007fd8e2c15fa0 RCX: 00007fd8e299c799 [ 816.889389][T24530] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 816.889401][T24530] RBP: 00007fd8e3855090 R08: 0000000000000000 R09: 0000000000000000 [ 816.889413][T24530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.889424][T24530] R13: 00007fd8e2c16038 R14: 00007fd8e2c15fa0 R15: 00007ffdf80abc98 [ 816.889456][T24530] [ 817.268672][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.661142][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.837964][T24566] netlink: 'syz.7.4804': attribute type 10 has an invalid length. [ 817.891237][T24570] netlink: 'syz.7.4804': attribute type 10 has an invalid length. [ 817.931295][T24566] team0: Port device dummy0 added [ 817.976226][T24570] team0: Port device dummy0 removed [ 818.185392][T24579] FAULT_INJECTION: forcing a failure. [ 818.185392][T24579] name failslab, interval 1, probability 0, space 0, times 0 [ 818.211283][T24579] CPU: 0 UID: 0 PID: 24579 Comm: syz.6.4808 Not tainted syzkaller #0 PREEMPT(full) [ 818.211310][T24579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 818.211332][T24579] Call Trace: [ 818.211339][T24579] [ 818.211347][T24579] dump_stack_lvl+0xe8/0x150 [ 818.211376][T24579] should_fail_ex+0x412/0x560 [ 818.211402][T24579] should_failslab+0xa8/0x100 [ 818.211425][T24579] __kmalloc_cache_noprof+0x88/0x660 [ 818.211443][T24579] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 818.211467][T24579] ? nft_trans_table_add+0x56/0x430 [ 818.211495][T24579] nft_trans_table_add+0x56/0x430 [ 818.211527][T24579] nf_tables_newtable+0xce3/0x1910 [ 818.211569][T24579] nfnetlink_rcv+0x1240/0x27b0 [ 818.211620][T24579] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 818.211655][T24579] ? ref_tracker_free+0x693/0x840 [ 818.211703][T24579] ? __netlink_deliver_tap+0x807/0x850 [ 818.211724][T24579] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.211761][T24579] netlink_unicast+0x80f/0x9b0 [ 818.211788][T24579] ? __pfx_netlink_unicast+0x10/0x10 [ 818.211808][T24579] ? netlink_sendmsg+0x650/0xb40 [ 818.211828][T24579] ? skb_put+0x11b/0x210 [ 818.211854][T24579] netlink_sendmsg+0x813/0xb40 [ 818.211885][T24579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.211910][T24579] ? aa_sock_msg_perm+0xf1/0x1b0 [ 818.211932][T24579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 818.211953][T24579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.211973][T24579] ____sys_sendmsg+0xa68/0xad0 [ 818.212007][T24579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.212040][T24579] ? import_iovec+0x73/0xa0 [ 818.212065][T24579] ___sys_sendmsg+0x2a5/0x360 [ 818.212092][T24579] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.212147][T24579] ? __fget_files+0x2a/0x420 [ 818.212170][T24579] ? __fget_files+0x3a0/0x420 [ 818.212200][T24579] __x64_sys_sendmsg+0x1bd/0x2a0 [ 818.212226][T24579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 818.212258][T24579] ? __pfx_ksys_write+0x10/0x10 [ 818.212286][T24579] do_syscall_64+0x14d/0xf80 [ 818.212307][T24579] ? trace_irq_disable+0x3b/0x150 [ 818.212339][T24579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.212358][T24579] ? clear_bhb_loop+0x40/0x90 [ 818.212378][T24579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.212394][T24579] RIP: 0033:0x7f44c0b9c799 [ 818.212411][T24579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.212425][T24579] RSP: 002b:00007f44c19bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.212444][T24579] RAX: ffffffffffffffda RBX: 00007f44c0e15fa0 RCX: 00007f44c0b9c799 [ 818.212456][T24579] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 818.212468][T24579] RBP: 00007f44c19bd090 R08: 0000000000000000 R09: 0000000000000000 [ 818.212479][T24579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 818.212489][T24579] R13: 00007f44c0e16038 R14: 00007f44c0e15fa0 R15: 00007fffa5beef58 [ 818.212520][T24579] [ 818.570449][T24583] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4809'. [ 818.610650][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4810'. [ 818.630424][T24588] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4810'. [ 818.698786][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.760423][T24593] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4813'. [ 818.830567][ T58] hsr_slave_0: left promiscuous mode [ 818.842380][ T58] hsr_slave_1: left promiscuous mode [ 819.074723][ T58] team0 (unregistering): Port device team_slave_1 removed [ 819.115157][ T58] team0 (unregistering): Port device team_slave_0 removed [ 819.548903][T24617] netlink: 'syz.8.4820': attribute type 10 has an invalid length. [ 819.561172][T24617] bond0: (slave dummy0): Releasing backup interface [ 819.634479][T24620] netlink: 'syz.8.4820': attribute type 10 has an invalid length. [ 819.689851][T24617] team0: Port device dummy0 added [ 819.741649][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.806550][T24627] FAULT_INJECTION: forcing a failure. [ 819.806550][T24627] name failslab, interval 1, probability 0, space 0, times 0 [ 819.821066][T24627] CPU: 1 UID: 0 PID: 24627 Comm: syz.7.4822 Not tainted syzkaller #0 PREEMPT(full) [ 819.821092][T24627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.821104][T24627] Call Trace: [ 819.821112][T24627] [ 819.821120][T24627] dump_stack_lvl+0xe8/0x150 [ 819.821150][T24627] should_fail_ex+0x412/0x560 [ 819.821177][T24627] should_failslab+0xa8/0x100 [ 819.821201][T24627] __kmalloc_cache_noprof+0x88/0x660 [ 819.821222][T24627] ? nf_tables_newchain+0xf8a/0x2890 [ 819.821252][T24627] nf_tables_newchain+0xf8a/0x2890 [ 819.821292][T24627] ? __pfx_nf_tables_newchain+0x10/0x10 [ 819.821339][T24627] ? nft_trans_table_add+0x230/0x430 [ 819.821373][T24627] ? nfnl_pernet+0x23/0x240 [ 819.821402][T24627] ? __nla_parse+0x40/0x60 [ 819.821431][T24627] nfnetlink_rcv+0x1240/0x27b0 [ 819.821493][T24627] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 819.821529][T24627] ? ref_tracker_free+0x693/0x840 [ 819.821580][T24627] ? __netlink_deliver_tap+0x807/0x850 [ 819.821602][T24627] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.821642][T24627] netlink_unicast+0x80f/0x9b0 [ 819.821671][T24627] ? __pfx_netlink_unicast+0x10/0x10 [ 819.821693][T24627] ? netlink_sendmsg+0x650/0xb40 [ 819.821712][T24627] ? skb_put+0x11b/0x210 [ 819.821739][T24627] netlink_sendmsg+0x813/0xb40 [ 819.821770][T24627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.821796][T24627] ? aa_sock_msg_perm+0xf1/0x1b0 [ 819.821820][T24627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 819.821841][T24627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.821862][T24627] ____sys_sendmsg+0xa68/0xad0 [ 819.821897][T24627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.821932][T24627] ? import_iovec+0x73/0xa0 [ 819.821961][T24627] ___sys_sendmsg+0x2a5/0x360 [ 819.821991][T24627] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.822052][T24627] ? __fget_files+0x2a/0x420 [ 819.822076][T24627] ? __fget_files+0x3a0/0x420 [ 819.822110][T24627] __x64_sys_sendmsg+0x1bd/0x2a0 [ 819.822140][T24627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 819.822175][T24627] ? __pfx_ksys_write+0x10/0x10 [ 819.822205][T24627] do_syscall_64+0x14d/0xf80 [ 819.822228][T24627] ? trace_irq_disable+0x3b/0x150 [ 819.822250][T24627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.822268][T24627] ? clear_bhb_loop+0x40/0x90 [ 819.822291][T24627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.822309][T24627] RIP: 0033:0x7f819fb9c799 [ 819.822327][T24627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.822343][T24627] RSP: 002b:00007f81a0a36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.822363][T24627] RAX: ffffffffffffffda RBX: 00007f819fe15fa0 RCX: 00007f819fb9c799 [ 819.822377][T24627] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 819.822388][T24627] RBP: 00007f81a0a36090 R08: 0000000000000000 R09: 0000000000000000 [ 819.822400][T24627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.822412][T24627] R13: 00007f819fe16038 R14: 00007f819fe15fa0 R15: 00007fff3d6138c8 [ 819.822443][T24627] [ 820.161632][T24620] team0: Port device dummy0 removed [ 820.187069][T24620] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 820.202809][T24608] lec:lec_atm_close: lec0: Shut down! [ 820.305412][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.394536][T24626] lo speed is unknown, defaulting to 1000 [ 820.718906][T24646] netlink: 'syz.7.4826': attribute type 1 has an invalid length. [ 820.781287][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.936362][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.285425][T24667] netlink: 'syz.9.4834': attribute type 3 has an invalid length. [ 821.367013][T24674] FAULT_INJECTION: forcing a failure. [ 821.367013][T24674] name failslab, interval 1, probability 0, space 0, times 0 [ 821.402281][T24676] netlink: 'syz.1.4836': attribute type 6 has an invalid length. [ 821.422249][T24674] CPU: 1 UID: 0 PID: 24674 Comm: syz.8.4833 Not tainted syzkaller #0 PREEMPT(full) [ 821.422281][T24674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 821.422292][T24674] Call Trace: [ 821.422299][T24674] [ 821.422308][T24674] dump_stack_lvl+0xe8/0x150 [ 821.422337][T24674] should_fail_ex+0x412/0x560 [ 821.422374][T24674] should_failslab+0xa8/0x100 [ 821.422398][T24674] __kmalloc_cache_noprof+0x88/0x660 [ 821.422419][T24674] ? nf_tables_newchain+0x1df0/0x2890 [ 821.422451][T24674] nf_tables_newchain+0x1df0/0x2890 [ 821.422492][T24674] ? __pfx_nf_tables_newchain+0x10/0x10 [ 821.422538][T24674] ? nft_trans_table_add+0x230/0x430 [ 821.422570][T24674] ? nfnl_pernet+0x23/0x240 [ 821.422597][T24674] ? __nla_parse+0x40/0x60 [ 821.422625][T24674] nfnetlink_rcv+0x1240/0x27b0 [ 821.422643][T24674] ? is_bpf_text_address+0x26/0x2b0 [ 821.422695][T24674] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 821.422726][T24674] ? __lock_acquire+0x6b5/0x2cf0 [ 821.422785][T24674] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.422825][T24674] netlink_unicast+0x80f/0x9b0 [ 821.422853][T24674] ? __pfx_netlink_unicast+0x10/0x10 [ 821.422875][T24674] ? netlink_sendmsg+0x650/0xb40 [ 821.422893][T24674] ? skb_put+0x11b/0x210 [ 821.422921][T24674] netlink_sendmsg+0x813/0xb40 [ 821.422949][T24674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.422973][T24674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 821.422997][T24674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.423018][T24674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.423039][T24674] ____sys_sendmsg+0xa68/0xad0 [ 821.423071][T24674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.423106][T24674] ? import_iovec+0x73/0xa0 [ 821.423135][T24674] ___sys_sendmsg+0x2a5/0x360 [ 821.423165][T24674] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.423224][T24674] ? __fget_files+0x2a/0x420 [ 821.423250][T24674] ? __fget_files+0x3a0/0x420 [ 821.423283][T24674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 821.423312][T24674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.423346][T24674] ? __pfx_ksys_write+0x10/0x10 [ 821.423383][T24674] do_syscall_64+0x14d/0xf80 [ 821.423407][T24674] ? trace_irq_disable+0x3b/0x150 [ 821.423431][T24674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.423448][T24674] ? clear_bhb_loop+0x40/0x90 [ 821.423470][T24674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.423487][T24674] RIP: 0033:0x7fb77ed9c799 [ 821.423505][T24674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.423520][T24674] RSP: 002b:00007fb77cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.423540][T24674] RAX: ffffffffffffffda RBX: 00007fb77f015fa0 RCX: 00007fb77ed9c799 [ 821.423554][T24674] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 821.423566][T24674] RBP: 00007fb77cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 821.423575][T24674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 821.423583][T24674] R13: 00007fb77f016038 R14: 00007fb77f015fa0 R15: 00007ffdc5b16738 [ 821.423611][T24674] [ 821.500665][T24684] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4838'. [ 821.516022][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4835'. [ 821.816524][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.850260][T24694] bond0: Error: Cannot enslave bond to itself. [ 822.064920][T24702] netlink: 'syz.9.4844': attribute type 5 has an invalid length. [ 822.156316][T24708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4845'. [ 822.274834][T24712] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4846'. [ 822.398255][T24717] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4847'. [ 822.845742][T24739] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4853'. [ 822.868059][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.027715][T24747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input7 [ 823.203067][T24760] block nbd8: not configured, cannot reconfigure [ 823.213920][T24760] netlink: 'syz.8.4860': attribute type 1 has an invalid length. [ 823.280263][T24758] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.335850][T24767] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 823.346815][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.382943][T24760] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 823.396762][T24760] bond2 (unregistering): Released all slaves [ 823.427116][T24728] lo speed is unknown, defaulting to 1000 [ 823.718166][T24787] netlink: 'syz.1.4866': attribute type 21 has an invalid length. [ 823.749455][T24787] __nla_validate_parse: 3 callbacks suppressed [ 823.749474][T24787] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4866'. [ 823.785131][T24790] netlink: 220 bytes leftover after parsing attributes in process `syz.8.4868'. [ 823.896262][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.016942][T24790] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4868'. [ 824.090624][T24790] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4868'. [ 824.247573][T24792] syzkaller0: entered promiscuous mode [ 824.265572][T24792] syzkaller0: entered allmulticast mode [ 824.542986][T24831] Bluetooth: MGMT ver 1.23 [ 824.937355][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.974756][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.976861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 825.991059][ C0] lec:lec_tx_timeout: lec0 [ 825.996764][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 826.382754][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.015537][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.296917][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4878'. [ 827.308670][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4878'. [ 827.323539][T24848] syzkaller0: entered promiscuous mode [ 827.331338][T24848] syzkaller0: entered allmulticast mode [ 827.347832][T24846] sctp: [Deprecated]: syz.7.4877 (pid 24846) Use of int in maxseg socket option. [ 827.347832][T24846] Use struct sctp_assoc_value instead [ 827.435635][T24848] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4879'. [ 827.505715][T24861] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4881'. [ 827.550655][T24861] bridge_slave_1: left allmulticast mode [ 827.565693][T24861] bridge_slave_1: left promiscuous mode [ 827.576576][T24861] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.614917][T24856] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4881'. [ 827.618702][T24861] bridge_slave_0: left allmulticast mode [ 827.635511][T24856] netlink: 348 bytes leftover after parsing attributes in process `syz.8.4881'. [ 827.656635][T24861] bridge_slave_0: left promiscuous mode [ 827.672042][T24861] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.826913][T24872] macsec1: entered promiscuous mode [ 828.058392][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.182583][T24892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.191407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.406352][T24876] lo speed is unknown, defaulting to 1000 [ 828.575318][T24915] netlink: 'syz.9.4897': attribute type 2 has an invalid length. [ 828.629098][ T30] audit: type=1804 audit(1772244977.663:15): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4897" name="/newroot/69/memory.events" dev="tmpfs" ino=370 res=1 errno=0 [ 828.671082][ T30] audit: type=1800 audit(1772244977.663:16): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4897" name="memory.events" dev="tmpfs" ino=370 res=0 errno=0 [ 829.081876][T24932] __nla_validate_parse: 7 callbacks suppressed [ 829.081895][T24932] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4902'. [ 829.094459][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.118269][T24932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.335308][T24945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.344947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.364745][T24945] tipc: Started in network mode [ 829.369811][T24945] tipc: Node identity ff, cluster identity 4711 [ 829.389658][T24945] tipc: Enabling of bearer rejected, failed to enable media [ 829.426881][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.659164][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4912'. [ 830.272885][T25007] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4925'. [ 830.550662][T25010] syzkaller0: entered promiscuous mode [ 830.560164][T25010] syzkaller0: entered allmulticast mode [ 830.610204][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4930'. [ 830.912255][T25041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4934'. [ 830.950867][T25049] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4935'. [ 831.015023][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 831.023119][ C0] lec:lec_tx_timeout: lec0 [ 831.029026][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 831.040602][T25051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4937'. [ 831.067177][T25051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4937'. [ 831.076469][T25051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4937'. [ 831.162582][T25057] netlink: 'syz.6.4939': attribute type 11 has an invalid length. [ 831.175079][ T5886] net_ratelimit: 3 callbacks suppressed [ 831.175097][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.191734][T25059] netlink: 'syz.6.4939': attribute type 11 has an invalid length. [ 831.270806][T25053] wg1: entered promiscuous mode [ 831.276522][T25053] wg1: entered allmulticast mode [ 831.336074][T24943] Bluetooth: hci4: command 0x0406 tx timeout [ 831.342286][ T5824] Bluetooth: hci6: command 0x0406 tx timeout [ 831.396022][T25051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4937'. [ 831.416414][T25069] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 831.500032][T25070] syzkaller0: entered promiscuous mode [ 831.505959][T25070] syzkaller0: entered allmulticast mode [ 831.682083][T25085] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 831.912136][T25090] xt_CT: No such helper "netbios-ns" [ 831.920120][T25100] netlink: 'syz.8.4950': attribute type 10 has an invalid length. [ 832.002206][T25100] bond0: (slave dummy0): Releasing backup interface [ 832.027338][T25106] netlink: 'syz.8.4950': attribute type 10 has an invalid length. [ 832.030082][T25100] team0: Port device dummy0 added [ 832.035564][T25107] netlink: 'syz.8.4950': attribute type 10 has an invalid length. [ 832.076184][T25108] xt_bpf: check failed: parse error [ 832.106552][T25106] team0: Port device dummy0 removed [ 832.113510][T25111] netlink: 'syz.1.4952': attribute type 1 has an invalid length. [ 832.117294][T25106] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 832.218095][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.231230][T25111] 8021q: adding VLAN 0 to HW filter on device bond7 [ 832.454588][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.808232][T25119] lo speed is unknown, defaulting to 1000 [ 833.147535][T25168] netlink: 'syz.6.4967': attribute type 1 has an invalid length. [ 833.184490][T25168] netlink: 'syz.6.4967': attribute type 2 has an invalid length. [ 833.186892][T25170] netlink: 'syz.8.4968': attribute type 83 has an invalid length. [ 833.204638][T25168] netlink: 'syz.6.4967': attribute type 1 has an invalid length. [ 833.224131][T25168] netlink: 'syz.6.4967': attribute type 1 has an invalid length. [ 833.255253][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.787646][T25188] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 833.820893][T25188] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 834.024219][T25192] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 834.037837][T25186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 834.088232][T25204] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.095698][T25204] bridge0: port 1(bridge_slave_0) entered listening state [ 834.127298][T25204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.295321][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.425559][T25224] __nla_validate_parse: 9 callbacks suppressed [ 834.425576][T25224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4982'. [ 834.459714][T25222] bond5: entered allmulticast mode [ 834.488741][ T58] bond0: left allmulticast mode [ 834.493853][ T58] bond_slave_0: left allmulticast mode [ 834.508085][ T58] bond_slave_1: left allmulticast mode [ 834.533442][ T58] dummy0: left allmulticast mode [ 834.569379][ T58] bond0: left promiscuous mode [ 834.576930][ T58] bond_slave_0: left promiscuous mode [ 834.582621][ T58] bond_slave_1: left promiscuous mode [ 834.589525][ T58] bridge0: port 3(bond0) entered disabled state [ 834.608693][ T58] bridge_slave_1: left allmulticast mode [ 834.634783][ T58] bridge_slave_1: left promiscuous mode [ 834.640842][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.669330][ T58] bridge_slave_0: left allmulticast mode [ 834.684178][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.949789][ T7064] IPVS: starting estimator thread 0... [ 835.044509][T25246] IPVS: using max 56 ests per chain, 134400 per kthread [ 835.063437][ T58] bond5 (unregistering): (slave geneve2): Releasing active interface [ 835.218170][ T58] bond6 (unregistering): (slave bridge3): Releasing active interface [ 835.334938][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.495137][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.512978][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.523209][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.533683][ T58] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 835.543325][ T58] bond0 (unregistering): Released all slaves [ 835.559686][ T58] bond1 (unregistering): Released all slaves [ 835.572431][ T58] bond2 (unregistering): Released all slaves [ 835.589654][ T58] bond3 (unregistering): Released all slaves [ 835.603799][ T58] bond4 (unregistering): Released all slaves [ 835.619383][ T58] bond5 (unregistering): Released all slaves [ 835.641929][ T58] bond6 (unregistering): Released all slaves [ 835.657149][ T58] bond7 (unregistering): Released all slaves [ 835.671583][ T58] bond8 (unregistering): Released all slaves [ 835.689991][ T58] bond9 (unregistering): Released all slaves [ 835.705802][ T58] bond10 (unregistering): Released all slaves [ 835.720234][ T58] bond11 (unregistering): Released all slaves [ 835.741083][ T58] bond12 (unregistering): Released all slaves [ 835.755799][ T58] bond13 (unregistering): (slave wireguard0): Releasing backup interface [ 835.765275][ T58] wireguard0: left promiscuous mode [ 835.771477][ T58] bond13 (unregistering): Released all slaves [ 835.790362][ T58] bond14 (unregistering): Released all slaves [ 835.803583][ T58] bond15 (unregistering): Released all slaves [ 835.819442][ T58] bond16 (unregistering): Released all slaves [ 835.843701][ T58] bond17 (unregistering): (slave veth15): Releasing active interface [ 835.853872][ T58] bond17 (unregistering): (slave veth17): Releasing active interface [ 835.863812][ T58] bond17 (unregistering): Released all slaves [ 835.889193][T25216] lo speed is unknown, defaulting to 1000 [ 836.044512][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 836.052693][ C0] lec:lec_tx_timeout: lec0 [ 836.058579][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 836.069262][T25260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.160771][T25260] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4992'. [ 836.186573][ T58] tipc: Disabling bearer [ 836.228329][ T58] tipc: Left network mode [ 836.278779][T25267] validate_nla: 6 callbacks suppressed [ 836.278796][T25267] netlink: 'syz.9.4994': attribute type 1 has an invalid length. [ 836.356611][T25273] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4996'. [ 836.367005][T25273] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4996'. [ 836.378513][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.386877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.436765][T25267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 836.487923][T25272] bond3: (slave geneve2): making interface the new active one [ 836.497382][T25272] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 836.525063][T10270] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.580060][T25275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.591913][T25282] netlink: 'syz.8.4998': attribute type 1 has an invalid length. [ 836.624438][T25275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.640069][T25270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.650228][T25275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.658173][T25270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.671400][T25275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.680193][T25270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.688810][T25270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.729263][T25270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.739226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.748102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.756924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.978259][T10270] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.989342][T10270] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.094719][T10270] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.184785][T25299] netlink: 'syz.6.5002': attribute type 1 has an invalid length. [ 837.227988][T25299] netlink: 248 bytes leftover after parsing attributes in process `syz.6.5002'. [ 837.718008][T25274] lo speed is unknown, defaulting to 1000 [ 838.249834][T25329] lec:lec_atm_send: lec0: Unknown message type 65535 [ 840.716326][T25305] lec:lec_atm_close: lec0: Shut down! [ 840.718254][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.911797][ T58] team0 (unregistering): Port device team_slave_1 removed [ 840.927926][ T58] team0 (unregistering): Port device team_slave_0 removed [ 841.272131][T25344] netlink: 'syz.1.5013': attribute type 1 has an invalid length. [ 841.385071][T25344] bond8: entered promiscuous mode [ 841.412210][T25344] 8021q: adding VLAN 0 to HW filter on device bond8 [ 841.576222][ T5956] net_ratelimit: 387 callbacks suppressed [ 841.576239][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.593317][T23039] Bluetooth: hci7: command 0x0406 tx timeout [ 841.661958][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.670821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.855292][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5026'. [ 842.096002][ T58] IPVS: stop unused estimator thread 0... [ 842.202453][T25406] netlink: 'syz.8.5030': attribute type 1 has an invalid length. [ 842.331397][T25406] bond2: entered promiscuous mode [ 842.337411][T25406] bond2: entered allmulticast mode [ 842.343150][T25406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 842.391812][T25407] macvlan3: entered promiscuous mode [ 842.409116][T25407] macvlan3: entered allmulticast mode [ 842.422399][T25407] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 842.461299][T25409] syzkaller0: entered promiscuous mode [ 842.467585][T25409] syzkaller0: entered allmulticast mode [ 842.474979][T25391] lo speed is unknown, defaulting to 1000 [ 842.694911][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.704085][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.712785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.001477][T25429] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 843.019691][T25429] pim6reg1: linktype set to 805 [ 843.037521][T25431] IPv6: NLM_F_CREATE should be specified when creating new route [ 843.232768][T25439] netlink: 'syz.1.5037': attribute type 6 has an invalid length. [ 843.278234][T25439] SET target dimension over the limit! [ 843.582072][T25451] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5040'. [ 843.738734][T16146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.780103][T25456] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5041'. [ 843.935637][T25465] netlink: 'syz.9.5044': attribute type 1 has an invalid length. [ 843.949207][T25465] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5044'. [ 843.978831][ T31] INFO: task syz.3.4050:21455 blocked for more than 143 seconds. [ 843.995044][ T31] Not tainted syzkaller #0 [ 844.006229][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 844.008188][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 844.026083][ T31] task:syz.3.4050 state:D stack:26712 pid:21455 tgid:21454 ppid:18336 task_flags:0x400140 flags:0x00080002 [ 844.027325][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 844.052526][ T31] Call Trace: [ 844.059576][ T31] [ 844.062705][ T31] __schedule+0x1585/0x5340 [ 844.068650][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 844.079663][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 844.088358][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 844.100333][ T31] ? __pfx___schedule+0x10/0x10 [ 844.105818][ T31] ? schedule+0x90/0x360 [ 844.110464][ T31] schedule+0x164/0x360 [ 844.117541][ T31] schedule_preempt_disabled+0x13/0x30 [ 844.124208][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 844.133684][ T31] __mutex_lock+0x7fe/0x1300 [ 844.134888][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 844.139603][ T31] ? __mutex_lock+0x5ac/0x1300 [ 844.150101][T25466] sit0: left promiscuous mode [ 844.155058][ T31] ? nfsd_nl_listener_set_doit+0x141/0x16c0 [ 844.164714][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 844.170348][ T31] ? __asan_memset+0x22/0x50 [ 844.175858][ T31] nfsd_nl_listener_set_doit+0x141/0x16c0 [ 844.181767][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 844.189217][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 844.196387][ T31] ? __nla_parse+0x40/0x60 [ 844.201084][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 844.209565][T25466] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 844.209765][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 844.219486][T25466] caif:caif_disconnect_client(): nothing to disconnect [ 844.232834][ T31] ? __asan_memcpy+0x40/0x70 [ 844.238060][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 844.245024][ T31] ? bpf_lsm_capable+0x9/0x20 [ 844.249836][ T31] ? security_capable+0x7e/0x2c0 [ 844.255567][ T31] genl_rcv_msg+0x61c/0x7a0 [ 844.260265][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.267721][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 844.274886][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 844.280107][ T31] netlink_rcv_skb+0x232/0x4b0 [ 844.285539][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.290779][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 844.297201][ T31] ? down_read+0x272/0x2e0 [ 844.301634][ T31] ? genl_rcv+0xd/0x40 [ 844.306426][ T31] genl_rcv+0x28/0x40 [ 844.310423][ T31] netlink_unicast+0x80f/0x9b0 [ 844.315810][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 844.321219][ T31] ? netlink_sendmsg+0x650/0xb40 [ 844.326746][ T31] ? skb_put+0x11b/0x210 [ 844.331108][ T31] netlink_sendmsg+0x813/0xb40 [ 844.336572][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.342164][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 844.347883][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 844.353279][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.359310][ T31] ____sys_sendmsg+0xa68/0xad0 [ 844.364830][ T31] ? futex_unqueue+0x211/0x240 [ 844.369657][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.375812][ T31] ? import_iovec+0x73/0xa0 [ 844.380461][ T31] ___sys_sendmsg+0x2a5/0x360 [ 844.385843][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.391064][ T31] ? futex_wait+0x29a/0x380 [ 844.396191][ T31] ? __fget_files+0x2a/0x420 [ 844.401116][ T31] ? __fget_files+0x3a0/0x420 [ 844.406304][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 844.411339][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.416951][ T31] ? rcu_is_watching+0x15/0xb0 [ 844.422112][ T31] do_syscall_64+0x14d/0xf80 [ 844.427059][ T31] ? trace_irq_disable+0x3b/0x150 [ 844.432143][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.439253][ T31] ? clear_bhb_loop+0x40/0x90 [ 844.444698][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.450820][ T31] RIP: 0033:0x7f56a839c799 [ 844.456050][ T31] RSP: 002b:00007f56a9246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.465402][ T31] RAX: ffffffffffffffda RBX: 00007f56a8615fa0 RCX: 00007f56a839c799 [ 844.473557][ T31] RDX: 0000000004008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 844.482253][ T31] RBP: 00007f56a8432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 844.491319][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.500038][ T31] R13: 00007f56a8616038 R14: 00007f56a8615fa0 R15: 00007fff50b002c8 [ 844.508516][ T31] [ 844.511778][ T31] [ 844.511778][ T31] Showing all locks held in the system: [ 844.521114][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 844.521497][T25466] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 844.527303][ T31] 1 lock held by khungtaskd/31: [ 844.540053][T25466] chnl_net:chnl_net_open(): state disconnected [ 844.541768][ T31] #0: [ 844.556585][T25466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.574797][ T31] ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 844.594622][T25422] lo speed is unknown, defaulting to 1000 [ 844.631130][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.639802][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.657528][ T31] 3 locks held by kworker/u9:0/51: [ 844.662923][ T31] #0: ffff888060fa5948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 844.676711][ T31] #1: ffffc90000bb7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 844.692495][ T31] #2: ffff88802bf98ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 844.713226][ T31] 2 locks held by kworker/u8:5/104: [ 844.719013][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 844.731161][ T31] #1: ffffc900026f7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 844.744621][ T31] 2 locks held by getty/5582: [ 844.749769][ T31] #0: ffff8880376510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 844.760365][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 844.771576][ T31] 3 locks held by kworker/1:4/5886: [ 844.778175][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 844.790285][ T31] #1: ffffc90004467c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 844.803264][ T31] #2: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 844.815136][ T31] 3 locks held by kworker/0:6/5956: [ 844.820444][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 844.832436][ T31] #1: ffffc90004a27c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 844.843520][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 844.855448][ T31] 3 locks held by kworker/u8:9/10270: [ 844.861179][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 844.872051][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 844.881752][ T31] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 844.892534][ T31] 3 locks held by kworker/1:12/16146: [ 844.898553][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 844.910182][ T31] #1: ffffc90003f07c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 844.923756][ T31] #2: ffff888054bdf240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 844.934722][ T31] 2 locks held by syz.0.4041/21427: [ 844.940131][ T31] #0: ffffffff8fc3a4b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 844.949437][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 844.960905][ T31] 2 locks held by syz.3.4050/21455: [ 844.966819][ T31] #0: ffffffff8fc3a4b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 844.975939][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 844.986888][ T31] 2 locks held by syz.4.4186/21986: [ 844.992348][ T31] #0: ffffffff8fc3a4b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 845.001158][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 845.011889][ T31] 2 locks held by syz.2.4200/22043: [ 845.018181][ T31] #0: ffffffff8fc3a4b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 845.026998][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 845.038248][ T31] 2 locks held by syz.5.4284/22434: [ 845.043807][ T31] #0: ffffffff8fc3a4b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 845.052555][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 845.063281][ T31] 1 lock held by syz.6.5033/25422: [ 845.068811][ T31] #0: ffffffff8fbbe030 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 845.078996][ T31] 2 locks held by syz.8.5042/25459: [ 845.084759][ T31] #0: ffff88805b50ccc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 845.095806][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 845.107705][ T31] 1 lock held by syz.1.5043/25461: [ 845.112899][ T31] #0: ffff888065d9b008 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 845.123727][ T31] [ 845.132253][ T31] ============================================= [ 845.132253][ T31] [ 845.141783][ T31] NMI backtrace for cpu 0 [ 845.141818][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 845.141836][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 845.141848][ T31] Call Trace: [ 845.141855][ T31] [ 845.141863][ T31] dump_stack_lvl+0xe8/0x150 [ 845.141893][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 845.141914][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 845.141939][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 845.141962][ T31] sys_info+0x135/0x170 [ 845.141985][ T31] watchdog+0xfd9/0x1030 [ 845.142015][ T31] ? watchdog+0x21a/0x1030 [ 845.142046][ T31] kthread+0x388/0x470 [ 845.142063][ T31] ? __pfx_watchdog+0x10/0x10 [ 845.142086][ T31] ? __pfx_kthread+0x10/0x10 [ 845.142104][ T31] ret_from_fork+0x51e/0xb90 [ 845.142127][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 845.142147][ T31] ? __switch_to+0xc7d/0x1450 [ 845.142167][ T31] ? __pfx_kthread+0x10/0x10 [ 845.142185][ T31] ret_from_fork_asm+0x1a/0x30 [ 845.142223][ T31] [ 845.142230][ T31] Sending NMI from CPU 0 to CPUs 1: [ 845.259933][ C1] NMI backtrace for cpu 1 [ 845.259951][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 845.259969][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 845.259979][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 845.260005][ C1] Code: de 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 9d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 845.260019][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 845.260034][ C1] RAX: 00000000002c0847 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 845.260052][ C1] RDX: 0000000000000001 RSI: ffffffff8def165c RDI: ffffffff8c27aa00 [ 845.260063][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 845.260074][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901177b0 [ 845.260086][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 845.260096][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 845.260109][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 845.260120][ C1] CR2: 00007fbd14be82f8 CR3: 0000000029e84000 CR4: 00000000003526f0 [ 845.260133][ C1] Call Trace: [ 845.260142][ C1] [ 845.260148][ C1] default_idle+0x9/0x20 [ 845.260170][ C1] default_idle_call+0x72/0xb0 [ 845.260193][ C1] do_idle+0x1bd/0x500 [ 845.260214][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 845.260236][ C1] ? __pfx_do_idle+0x10/0x10 [ 845.260260][ C1] cpu_startup_entry+0x43/0x60 [ 845.260280][ C1] start_secondary+0x101/0x110 [ 845.260297][ C1] common_startup_64+0x13e/0x147 [ 845.260321][ C1] [ 845.435932][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 845.442951][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 845.452678][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 845.462852][ T31] Call Trace: [ 845.466231][ T31] [ 845.469263][ T31] vpanic+0x56c/0xa60 [ 845.473452][ T31] ? __pfx___schedule+0x10/0x10 [ 845.478427][ T31] ? __pfx_vpanic+0x10/0x10 [ 845.483135][ T31] ? __pfx_console_unlock+0x10/0x10 [ 845.488341][ T31] panic+0xc5/0xd0 [ 845.492070][ T31] ? __pfx_panic+0x10/0x10 [ 845.496490][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 845.501980][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 845.508238][ T31] watchdog+0x1023/0x1030 [ 845.512600][ T31] ? watchdog+0x21a/0x1030 [ 845.517014][ T31] kthread+0x388/0x470 [ 845.521174][ T31] ? __pfx_watchdog+0x10/0x10 [ 845.525939][ T31] ? __pfx_kthread+0x10/0x10 [ 845.530707][ T31] ret_from_fork+0x51e/0xb90 [ 845.535303][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 845.540490][ T31] ? __switch_to+0xc7d/0x1450 [ 845.545257][ T31] ? __pfx_kthread+0x10/0x10 [ 845.549875][ T31] ret_from_fork_asm+0x1a/0x30 [ 845.554924][ T31] [ 845.558389][ T31] Kernel Offset: disabled [ 845.562810][ T31] Rebooting in 86400 seconds..