last executing test programs: 3m46.779375014s ago: executing program 3 (id=5381): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x0) r2 = socket(0xa, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'bond_slave_1\x00', 0x400}) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{&(0x7f0000000380)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="6c1ccdde4c6dd41b320fe7b944e1b94a065dff5ed8db8b7531a0cb", 0x1b}, {&(0x7f0000000440)="572ead2c68718e16cd803cd9e1934d4e82b06b21aa9a432e8426d3cc2e87149fb5bd4573f2f9841ff3b181990675679778711ff4117106492d7b8005a6a199468a13572bd0c7b242ada01b5230eba08cbeee65ea8072062c7a7bc6521651b8d820fe239f755b698ea876fc688e239533ddc63761a041a03f0a806e06ecdb6a622748b89c4616e159c4", 0x89}, {&(0x7f0000000500)="af8191f64bdf581c", 0x8}, {&(0x7f0000000740)="5b0241cc0755111f3c7e2dbbaf9252b54e49ea19133bb74985d30ae1c4dcf88dd81b4a9e58cad5cffd4500573ffc4cf9130f34e0662121ebf47e2abc7412840916dfacb416c5148601f858d4a46c070d651a7c4e41cf0f779cb6916926ce489a85e45d8fb50a7f3b5f2bf90424e545c2038190715399bc59b7c1375350a7ec109e6a264e8f6f86a45a2400a21348bb5b037a7da0aee55a7bde254db20cf6c95b45e6715e7d40b7896f3b009cb86ba2db3b952ef1afcdc1089f2464bb0cd40f3fbbb9f1803b802107ae05ac753a94932b4123fa11bc16879ede4075caefd26b6f3431eab2bc017752bce185f697c277075f94e1496243e96a0eb1", 0xfa}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000000540)="f254a73a6a0cdbf2da1d3e260d66712fd9ae11ab8d43f7fb82d4df74dd8f9f493efa582a5651a727c6bc4f4f2f3e0c9a53f89fe0853e2722b2a40aa40f826709124f2df1b53d8bf4d85bbd9c9370bdb13286758e5df795d7aa524788772d", 0x5e}, {&(0x7f0000000840)="93f104d173acdf87ef611f49ce2c23ab7589f0e5b79be9f679d8b02414541f7f5e84654470b40336425e27baedb7e71f134e55aab0f3c35c245af86bfd24b51a393c9e6f56963d736f15e85d74974082159e2f75432a7223ba5137a0f9fceba6c0e03e982389e6320b27a4bcdefdc084bc12241f12d2155eccc49f30b8a3ce2cda87d0411034893d0c8ac7be2e02af03f918824ba6a8625b60d07623eb2db1de3e17738b6783e46c6fc0d997a4c4c755ddcaa0a287b27c5f2ba512d923c09cde36dc14deab31955a0b30b99b14619b5b6b45c93d66741af38c8a1ec094", 0xdd}], 0x7, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xaf05}}], 0x78}}], 0x1, 0x40880) getsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x23}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @remote, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000600)="9584171791", 0x5}], 0x1, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @init={0x18, 0x84, 0x0, {0xb7f, 0x29, 0x7, 0x100}}], 0x30, 0x4855}, 0x24000052) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x421, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000700)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @remote}, &(0x7f0000000100)=0xc) 3m46.513609796s ago: executing program 3 (id=5384): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/211, 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/194, 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000b40)=""/57, 0x39}, {0x0}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x3}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000032c0)=""/36, 0x24}, {&(0x7f0000003340)=""/206, 0xce}, {&(0x7f00000034c0)=""/110, 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/234, 0xea}], 0x1}}], 0x5, 0x400123a0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r3, 0x5452, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x3b6, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1e00000000000000008020000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ad07846540ef50bd9bd990dec8293a99116b5b6cbc6740d6f397653dac1cfa0a955ba6767a295df07027f93495cb963ab885817a48383b7471c0a3a8fd00590bdc713d88d92534a5ced6309f04e07920de0fbd633a8e9786fdfc64b3399b28f580b268ce48f36091", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r7, &(0x7f0000000380)={@val={0x0, 0x8864}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @multicast, @private=0xa0100ff, @broadcast, @private=0xa010103}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000004300000126bd7000fcdbdf250a0000000800040002000000060001001a000000050001000000000008000300040000000c00080008000000000000002800068008000800080000000800090000000100080009000d0000000c000700ef2e27110000000005000100000000000c000880020000000000000008000200f8f7ffff08000400db0b0000"], 0x8c}}, 0x20000880) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 3m45.745464381s ago: executing program 3 (id=5388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850020001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m45.645713955s ago: executing program 3 (id=5389): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000, 0x20000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6a9}, &(0x7f0000000280), 0x0) splice(r1, 0x0, r4, 0x0, 0x8d, 0x5) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r5, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xfff2}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4008400}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m45.530095491s ago: executing program 3 (id=5390): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x2b, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'nq\x00', 0x1, 0x400, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0x0, 0x4e7, 0x9, 0x9]}, &(0x7f0000000100)=0x78) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xf1d, @bcast, @rose={'rose', 0x0}, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xf1d, @bcast, @rose={'rose', 0x0}, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m45.405913539s ago: executing program 3 (id=5392): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4e}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0x3, 0x4) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b61}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r9 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r12, 0x0, 0x0, 0x48810, &(0x7f00000005c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x190, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xc4a5cfb8749a4cfa}, {}, 0x6c, 0x2, 0x44}, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7f, 0x2, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x101, [0x1, 0x6, 0x4, 0x5, 0x2, 0x4], 0x2}, {0x1, [0x1, 0x2, 0x4, 0x1, 0x2, 0x5], 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x2f, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x858ffe184dbe216e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 3m30.392165264s ago: executing program 32 (id=5392): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4e}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0x3, 0x4) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b61}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r9 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r12, 0x0, 0x0, 0x48810, &(0x7f00000005c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x190, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xc4a5cfb8749a4cfa}, {}, 0x6c, 0x2, 0x44}, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7f, 0x2, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x101, [0x1, 0x6, 0x4, 0x5, 0x2, 0x4], 0x2}, {0x1, [0x1, 0x2, 0x4, 0x1, 0x2, 0x5], 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x2f, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x858ffe184dbe216e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 2m29.793286446s ago: executing program 5 (id=6181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@generic="e7"]}, 0x18}}, 0x40) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x8, 0x12, "219f29fe56a2cc163629b0943983262327ad"}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x1411, 0x20, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x54716c5868425f0a}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x24004004) 2m29.44481145s ago: executing program 5 (id=6185): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffff79}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x4}]}}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x69}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x579, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x20, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "0400dfbef9bf6ec0", "dc6900a6ac00a486000000000900", '\x00', "895b1181db5600"}, 0x28) 2m28.294449277s ago: executing program 5 (id=6198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4011) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) 2m28.065461169s ago: executing program 5 (id=6200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0xfffffffe, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x400000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 2m27.7014813s ago: executing program 5 (id=6203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000000)=0x8cf, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000100)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000b0a060000000000000000000a000004140000001100010000000000000000000300000a000000000000"], 0x80}}, 0x4000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x46}, 0x1, 0x0, 0x0, 0x4e110}, 0x20000844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x20}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000200)=0x8) poll(&(0x7f0000000640)=[{r0, 0x4001}], 0x1, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 2m27.393069086s ago: executing program 5 (id=6205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16, @ANYRESOCT=r0], 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801000000000000ff03000001"], 0x128}, 0x8000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) unshare(0x2c020400) (async) accept4(r2, 0x0, 0x0, 0x800) (async) getpid() (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9a3249dc6158f63c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) 2m12.330254058s ago: executing program 33 (id=6205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16, @ANYRESOCT=r0], 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801000000000000ff03000001"], 0x128}, 0x8000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) unshare(0x2c020400) (async) accept4(r2, 0x0, 0x0, 0x800) (async) getpid() (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9a3249dc6158f63c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) 2m10.817515508s ago: executing program 0 (id=6344): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000024b7a3c259da05f08aa525af932affde8cc54981dad188d9c0dd8ce9fd5331b1039d04459cf0b75e0a589dadf78dbb9a5aa9c0bf4239f9eeada90a2cdccd600100c55e3ec34a267b164ef2ec04263a7a556236e2c641dc0440", @ANYRES16=r1, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048010) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 2m10.60952723s ago: executing program 0 (id=6346): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@generic={0x63, 0x1, 0x1, 0x9a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 2m10.507303866s ago: executing program 0 (id=6347): unshare(0x26020480) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x90) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0xa27}], 0x1, 0x0, 0xb8}, 0x20000005) (async) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f00000007c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async) connect$qrtr(r0, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) getsockopt$inet6_int(r8, 0x29, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) r9 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (rerun: 32) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESHEX=r8], 0xd) (async) openat$cgroup_ro(r7, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 2m10.373738556s ago: executing program 0 (id=6348): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'hugetlb'}, {0x2d, 'cpu'}, {0x0, 'hugetlb'}, {0x2b, 'cpuset'}, {0x2d, 'blkio'}, {0x0, 'rdma'}]}, 0x2c) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@default, @remote, @default, @remote, @remote, @bcast, @default, @null]}, &(0x7f0000000100)=0x48, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000140)=0x7fffffff, &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{r0}, 0x7, &(0x7f00000001c0)=[0x3, 0x2, 0x933, 0xdbc9, 0x40, 0x3, 0x6], 0x7fffffff, 0xc, 0x1}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="5929e7c20c6ad6d5cebea33700cc54c1f36bfbcfa55eac66057b41127695c8ccca7068548d3d6d5118f7f793250fe1489f7102526e4098362f6b463d38f7907a0f09c7d78f0da018aaa1df84a0aad0222ec2a7732024c177107aeac69745ef411d985d179c1addcd19711cb3866d389f0fd7aa585fccf3e5f93d3af5050f4c4afd480e739571", 0x86}], 0x1) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, &(0x7f00000003c0), {[{{@ip={@rand_addr=0x64010101, @remote, 0xff, 0xffffffff, 'vlan0\x00', 'vlan1\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x6}, {0xffffffffffffffff, 0x5, 0xa}, 0x2d1, 0xea06}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000680)=@full={0xb, @dev, @remote, 0x0, [@remote, @default, @remote, @default, @null, @bcast]}, &(0x7f00000006c0)=0x40, 0x0) sendto$rose(r3, &(0x7f0000000700)="5c67dbd650089dc7686c51e0ed096b4d9e0b50afc188b5d086d12000396dac5500650aa92dd39aab600a30ddface5ce25b54193e718e42562b54e43bd485fb7f2cc09364acef79124f", 0x49, 0x0, &(0x7f0000000780)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000007c0), &(0x7f0000000800)=0x40) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000840)={{0x2, 0x4e22, @broadcast}, {0x6, @multicast}, 0x10, {0x2, 0x4e23, @empty}, 'pim6reg1\x00'}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000008c0)=0x5, 0x8) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_dgram(r5, &(0x7f0000000940)={0x24, @none={0x0, 0xffff}}, 0x14) openat$cgroup_procs(r5, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) connect$ax25(r7, &(0x7f00000009c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r6, 0x0, 0x5a, 0xc0, &(0x7f0000000a40)="631c751e0b5496dcdc92d9aa6472c9b499b1b0c3a38a5cf69f6ca5233f2429e00885a672375f6edb8c76a1651ae53764a2969e03a54d2d9d6d3bde07861e72b3ec78e2cce27255b969fdd1dfc7991d5059288abb8b8b649fea56", &(0x7f0000000ac0)=""/192, 0x10001, 0x0, 0x6d, 0xc1, &(0x7f0000000b80)="61521f6970dc2e9cad3adc4135e9aaa5baec9027e9c0780e9f7c04c157ec7774411f2bc0bac2edb0b416ba16f6575400126b0e56ca45be942d47680214a4cde295615fca15bb6f86f6df3445d57d105eaee6fc31d9cbf07c475999b08a7744edd74a06039cf3aeb063470a5d98", &(0x7f0000000c00)="d6fb5c2c091b08fce76c947133015f6a2bf67042bfd203b5e3f71cda0e110319ef89acef1f159adeb1adba456ece2c221e0c76fccb5990c942e42f5c04958f783aade55e7bfe2d0ac7db3732b91366ba5d9ec8195e4abd71581317c392f75bc9d43d6e5b8e92692e744b4b2ca51a1678d0c463315817444e5d7f48c2e4c5606ce0a7fadd31d7633ffad870a2bd0b50ab9bc4a3f4eafbb01c69f039b8275c8772d9b3330c72dc29cca8fee99ec9ebb93077dbedca9495167973aa253195f197d87e", 0x0, 0x0, 0x6}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000d80)=0x0) syz_open_procfs$namespace(r8, &(0x7f0000000dc0)='ns/pid\x00') ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000e00)={@loopback, 0x80}) sendmmsg$inet(r2, &(0x7f00000015c0)=[{{&(0x7f0000000e40)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000e80)="f30fa194f77c2c5a28d84ad66153561a784b7341f6d08417d436544c90c41a36511aa1f1943c4a70691eaffbda8dcaa34092b24029ef6bac90abfeaf5578f4fa817e0791a0e19896478d487aa8c19bbee1ef1af648bd39d38896492df3948921666196ada13a314817291fd9fc7175e02b5fbcf64d6629d5718dc160314b9487a26e39e7cee416cbd11bb4882d602208fd7763ed91e86fcf0656b0c3995ff7e0e730c3121f3f4d1f499bc7da4dbce06bd6fcfb1970af62ec42a482596150c45d9a2126c15ebdc85f822c435bf605e20c4d72cc0df6bd3fee9bc46a6d85579143f057ac46817c5bc664a6fd63d0aa", 0xee}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="c941d06bc10b39b6c7f502c5d8c4e0ffccd65f637ad6bf00121049b46638fc79dffe7fc94ed789ad1d6cb0ef6c990c4a3c53fd8e32dc333bb825354e38b184cce7057f", 0x43}, {&(0x7f0000001040)="d492f3f767d9b543aca2cad6de8ac22b8ab05c10be63c9aea0259d16dd63efd8578b5ed71da053706754a42e1cb4d2b5a111082ac64335cc1cf34b6a548f93d59a78ed143507d787299133bcc1b867dbbb36ac7c7739a2b8e709ab32166ee3166a1207752206cd5ee344948b", 0x6c}], 0x4, &(0x7f0000001100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xca}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}], 0x30}}, {{&(0x7f0000001140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001180)="8d4854529d9c4b875df598a5b7051c3677fde54b4b7ff4e4ce05400d703cda83367b9ed7013e2860378c299051247cbf4d386aea1d3c45a846506c32ad3aefa77a45df360ca0439913993650c020c772440c320f8ef913d65683074625296a06b39ba0af7b503871e5f7686574944d3434f8e61866d23d0a1bbc0354954fe2521b5a052a86d15485c3cd7ae4014985ffb1726b4298a2ca71053c3aaeb9deb5f296ebc7b15e252845f0eb260131d52261175dd6beb03095dbbdae43d07505b8b8759a8ac753809e685164668a11afa177f9b8a94987ea44c85efc2c9013d3a23303f6e8552c02cd5f4e37f196893f25", 0xef}, {&(0x7f0000001280)="82e57d99080c4b623ad3b4a34168a0678553bc3af678", 0x16}, {&(0x7f00000012c0)="cca275ecd291fc813c2181b2175979aa21d317272434ee61d3dc34efc3ea25b603a6cf33bb6b673eb0f6408c47a9d25403de0e05e8964933835acd9e31eaead2c693fdfe4d419b6ba095c969a31c40dc9146c502d3c0b7d940064c3902711aed74cb7cbaadf70b47e731f8acffd58bf5cb361eeff7e7018429e2a8a3a8cb27f5ba1c8b52a72adf3a05f7", 0x8a}, {&(0x7f0000001380)="ff998d7af611923965e96ee522972193bfddc5e8cb258fa55f2ff712eeb122b677cd1e62b9570a7099c8e2a2a5b5b09f1e2a82d5c36c6d916db9472c91295f292a7cef16e6216d0441a759cfe79ec8a7b83653b7eeebf14387735d3cf95a1e823104d8029eb406686135327630e7ed979f20fdb2c0c9d8493f2790168778fbaee0091ec0791eec26744ae48be7539721fa6fe3bd2848392ef293d2a66768fa906b53ba629fb0d2e7a7a3439d87b973c462a38a86cf66830d", 0xb8}, {&(0x7f0000001440)="0750fe8974f9565bfd1edeed8c9596ee083ce151c699b5e6939663fc79d1a50224c0fa300708b2275eb0a6fff12995e248255958e38bfe1c46f0b3de3d3052eca1662750e9f9385aa2f40c32cced0a1646a63bf6445135e94d9bbe84d64698f8fdde356d7816c623ea11362c4340ffde7362262307aedf3292f6078b3f687fe14975e2c0cc5b227f1825a6bf89eb73e4cefde5ae23f7a561f05f6c211e76aceaf171b10fcee3f3e40c96a4dd872e4f25bc6221a00f6d5806", 0xb8}], 0x5, &(0x7f0000001580)}}], 0x2, 0x24000010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x58, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x7, 0x0, 0x1d}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x73}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x4804) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000001780), &(0x7f00000017c0)=0x4) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001900)={'gretap0\x00', &(0x7f0000001840)={'sit0\x00', 0x0, 0xf7c8, 0x8000, 0x1, 0x5, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x65, 0x0, 0x40, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end, @ssrr={0x89, 0x13, 0x85, [@local, @multicast1, @multicast1, @empty]}, @end, @rr={0x7, 0x23, 0xbb, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x17, 0x3e, [@multicast2, @multicast2, @broadcast, @remote, @local]}, @timestamp={0x44, 0x24, 0x58, 0x0, 0x4, [0xb1, 0x8, 0x6, 0x81, 0x4, 0xff, 0x5, 0x3ff]}, @generic={0x7, 0x6, "bf083d53"}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000002d40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002d00)={&(0x7f0000001940)={0x13b8, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0x29, 0xa6, 0x2, 0xfd, {0x4e20, 0x4e23, [0x2, 0xfff, 0x6, 0x10001], [0x7f, 0x1000, 0x8, 0x1], r9, [0x2, 0x200]}, 0x1ff, 0x200}, [@INET_DIAG_REQ_BYTECODE={0x41, 0x1, "d839e9e4f5cf8b099e5525b3b6b24511445dd918e57f172f1a1b1991ca7e201155ac3a8115109d0986582bc3195c3ac932965c3b5e58bb9da01c8190e2"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "ae6dbcb04fd5b52c3c287d0d0a06dc66ead7870e15bc9e246b1a1c40809663709d48b8954bff478991d0f7d01574ff095abd0ac5a992faaa3f90ba04ab939c73fd14437ed752c23c95c5034bab949e2b7e2ef635f81ca9d7e558a8ca570bf7002d887ad59e61d1bdf9b9ca81b71222a404d3608a202aa378cf97c7606287d98ce56907e41713dff18455aa88181cdcc824230369d6ccd183f5ae8df9047b1683b2f272e9b860a3c0b19addfcbf64b5e9adfddc12b1"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "bead9c51fcac9ee64ca5360185752ebb7a5967cfb9f6da45db550bfbd07790d58ad24932d8e456b95444a1f90afb13d983d1946c8e9447cd09ebaae4e1246b469baafad250055f86bd9bc0ef548a923b3f467cd17fa2ec631472441952489c5ba3d778a896ca0ce87a2938be9d264e079604bb6f43b8f188e20332"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "340d6aebf9cc0b1892086cebfec2b9f58d9510061cdf082345f25502f486b9e0046efd63dd066bf4700bb4e84f90faa8a7ba6659c4be535f76d73ae8e32f0dc8c71281cf143e965fbbf7268f15e877286c8da86408b1"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "89fce04797f24c7c9e8c997b777a18055e86c6a9fdce7f87f390a60f03673854fe7a243e8a620ac0d0bddbfb3816ed758fa27804c1a94ffa16dfe113ddb1de4660c41fb1f38d8c80feb7b7e98b6b0f4a739205fe63711c541f6e9eba1c17d7a7d3e5918e1df35b3f56192b33323a120e0d19d0702ef4066c57f70615e378177f65b57571786db2c86acc09fbe16ce83452c07c4a241895"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "18ecb0f5f159c88e92685b5ee3b665cb6633740db52cf412d1ae876d89af3c14098c1da0ac3075a6dd6ac633590886314ff83269df5d40ef192b9b8748218734f0a21759edd8b33df2baade3558e4b2f8b4c39f13ded178d70a47c7a54cf5064668ac20313fdbba744df6aa09d769e"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "cced368918b58954483c210a9ec7dc4a2d53acc4ad20c86735a174c0aeb8e80274a178ce0dd6b66700e0972cad10"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "6cf8644b2bb1e55b6155e0a26843e30c6639052f53b1f75af03df04dfb33d514f91ee9f2268e6c1c5d643ddb2d14b17f2cfe4bea93c4dbc3405012f1021e"}]}, 0x13b8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 2m10.260168482s ago: executing program 0 (id=6349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000005df0bc110000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030a000000320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db2ab9040a1d080211000000040000a118000280ff05af6800000e1231d478ab98d5d80fdb310808000f0100810401a80016ea1f00084004a17386b89788112e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ef38000a0e408e8d8ef075c0100000000000000cb09003e001fb791643a5e835913b06218a07445d6d904000000000000009fd6877509000000683f52ebbe4edbb57a5025ccca9e00360d8bcc004000400d00000000000000000000f96080849b1c3c78bf93f75d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(0x3) 2m9.84790979s ago: executing program 0 (id=6351): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200"/28], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000002418110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "17f78a4231c724fb", "91f4de83e53c642c05b4749fd769714a", "e2dfe93c", "9ba50c63d5d9556c"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) splice(r3, &(0x7f0000000140), r4, &(0x7f0000000380)=0x7fffffff, 0x9, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xffffffff}, 0x10, r10}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r0, &(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10) r12 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r12, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r12, 0x1, 0x44, &(0x7f0000000800), 0x4) 1m54.823509117s ago: executing program 34 (id=6351): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200"/28], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000002418110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "17f78a4231c724fb", "91f4de83e53c642c05b4749fd769714a", "e2dfe93c", "9ba50c63d5d9556c"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) splice(r3, &(0x7f0000000140), r4, &(0x7f0000000380)=0x7fffffff, 0x9, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xffffffff}, 0x10, r10}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r0, &(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10) r12 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r12, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r12, 0x1, 0x44, &(0x7f0000000800), 0x4) 2.296272123s ago: executing program 4 (id=7987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r9, &(0x7f0000001000), 0x0}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000000, 0x31, 0xffffffffffffffff, 0xffffd000) r10 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r10, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r2, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c000280060001"], 0x90}, 0x1, 0xba01}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071c177097a0000008510000002000000850000008a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 2.070293272s ago: executing program 7 (id=7989): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) unshare(0x24020400) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0xe, 0x7f, 0x6, 0x1a3}, {0x8, 0x4, 0x2, 0xff}, {0x2, 0x5b, 0x1, 0x5}, {0x6, 0x7, 0x3, 0x9}, {0x2, 0x5c, 0xec, 0x4}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x12, 0x0, 0x0, 0x400}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="80004a060a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x2, 0x28) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) connect$phonet_pipe(r7, &(0x7f0000000300)={0x23, 0xc, 0xf7, 0x6}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0x1d, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x14) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x1}, {0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x10) 2.068361878s ago: executing program 6 (id=7991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2788a24c6588a81e0ee27b4483", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000ffff2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c0001006d616376555f67aa7566c6955ec85e2ba9488e4b6c616e0004", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="0500110002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 1.891507252s ago: executing program 4 (id=7992): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010000000000000000000c001800018014a875b4ca500f29ae22ac00020076657468300000000000000000000000140ef41b217fd7009b61000380040003800400058c71cf2b457a29c23b8af0f83ee6a6a345470a59cd796e0d1e759cda2cb8b687e2bef591ec"], 0x40}}, 0x400c084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x66a13a32743e7d81) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7ffffff8, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, 0x0, 0x0, 0x24000000, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x200}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000) recvmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}], 0x1}, 0x10182) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a00016000feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e0000000535000002"], 0x138}}, 0x844) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES8=r7, @ANYRES64=r3, @ANYRESDEC, @ANYRES16=r9, @ANYRES64=r6, @ANYRES32, @ANYRESDEC=r3, @ANYRES8=r9], 0xfc}}, 0x801) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x13, r10, 0x54c5a000) write$tun(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) 1.794156793s ago: executing program 7 (id=7994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000001010001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.549836152s ago: executing program 6 (id=7998): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, 0x0) socket$packet(0x11, 0x3, 0x300) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaa2aaaabb86dd6000000800303afffe8000000000000000000eff0200000000000000000000000000018700907800000000fe8000000000000000020000000000aa0e0200000000000000000000000000010e012025b07f3c58ff4a30d7218337c265b9159147c9ce9f5248baefafea55ba0f6dc14cba983ae5f7beed06eb903f1168ca89ca64b79d5ccb616bedbbabae9b1a236793ba3f867c3cae811828790edf884e1cc3aa0cd5e6be3363dbdbfc90ffff662227a4a1de96bce3341d570b5d420f985dddd0c8a5760ea9fb1fe5eb364bb6d8e6275b38fed81d02a3e5327c4252a83e50c29f3603dfb8edab5129b1d851771b298ef4bf5b11270000000000"], 0x0) 1.481403088s ago: executing program 6 (id=7999): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)=""/12, &(0x7f0000000040)=0xc) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={0x0, 0x7f}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000480)={r1, 0xa, 0x3, 0x1}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000880)={'veth0_to_batadv\x00', {0x2, 0x0, @initdev}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000008c0)=@req3={0x3, 0x8, 0xb, 0x4, 0x6, 0x8000, 0xf}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r0, 0xff79000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000cc0)={&(0x7f0000000940), 0xc, &(0x7f0000000c80)={&(0x7f0000000980)={0x2d8, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x50, 0x3, "496fd49cd4cd40124fb058355d69bf57e33ddf3a7215a94b44aeffe7b27fbf0254a99b4348cc698e4a66479a6b50eeced567c24e07c692f7b8ea280cfd03f562a68edb86becf6733f7141560"}, @TIPC_NLA_NODE_ID={0xe2, 0x3, "9ab520501630cb2c93efea37814b273f887eec0e78fc35bf55c42128dfc60b4f3664ef8ccde9813677dcdf0a0637b16dde7f05a33a462728206cbb2750c10c42c4306373a3b37f2fb46fc56b970089ba9bd33b1b1653517495c2f2f4bff60091cf70d2a03e6a77c9045d340a8071e75cc7518fff99e1151f4b3fa9728eb1997b0d0b549f74103fd5db0e6af5bb156f8bb255ad2f849cc1bb3a5f9a8a6eaf742a6739ed3586458c87d714b905eb71dc3aa51bc6ba29520107f51f286bd8fa8f766f06ea9be7dbd21f48f5f946777cc6dde87cbdce0c2190dde4f7db867d13"}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x268}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff43e}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40084}, 0x4010080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r3, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r5 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000001540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f0000001080)=@getsadinfo={0x46c, 0x23, 0x2, 0x70bd2c, 0x25dfdbfb, 0x0, [@algo_aead={0x12b, 0x12, {{'aegis128\x00'}, 0x6f8, 0x380, "1d75619dae2104cd44e55aba27b7ba43f44ab41d47aad1ca904863c1de568121bfe0428032e09ed3fd0934e559e061ae334d99a0d3700647f2991e2b7a45aebe03f896417ab9ee0f08c3771e84b22a7c8df5de429b258d41238e0346105fa7a569391da394b33c7d74aaf5ec3344881f8c0c13efd9bbc3d6acba837fb1e24676e3b44abd977db577b1317ec9701b64cc22baa0e34ac36234ac9020aeac5b72b232029882bfd8f53f5607d1a270a8b9fcf6c7c80b00579f5ccc1886e9f7e952838be0c7b6a8fe16d0148b9d921457efb3b1867184e8646844dbe4c51b225b0b"}}, @algo_auth_trunc={0x131, 0x14, {{'blake2b-256\x00'}, 0x728, 0x80, "a39973481b5123287655733182773871b894692e9365b57f141f6a5ddbac38ffea8e45578acf5ee199354f9b6510d3fcd8fc9949acf49732ca62a4e5c743845530a61ea90eb81449a4828ab6cd6313004bb54dc50c2a519f36ee19bfc3b9732032dfed5ad96983cd6c9c30f4ad5fd501f83a19d1a6e262396ae8d5fb3f0ca088384f47c0372b1f98dcfda8869b25671a5a63c02fde5aab208ae481106f8719c9cad3735a77b459cf81d5270ac4beb4701ca6853c332f432b6890ea47596860dde77a6be0e9712bbad09095ea4b983f2411aa5395a64fa0deb6e9e8fc303a9857d022b8f006"}}, @algo_auth_trunc={0x106, 0x14, {{'sha384-arm\x00'}, 0x5d0, 0x100, "cb74cef64638c515e92b2bb6702173e0678dd1492922f559389c063a2990ce206f06aa45cb17bfbc2edcf4c859d4f0d87c3f274e9fb968631add756e9c0f856525a9187983dfdb3079edc65730ad7d22d33a9cfa6c66ebb5f7f9f381ab765ce5526e66ce81e1517471495d06f34535b93b82b6375f969b54bd910c4639f6dfe46a1bbe35c2f1442fbc20f1d3149b2c1656b192a7c6d054044a16a6c8e2f70b62190edd465a982f9b00b44322dd11a844c05d548857612037f545"}}, @mark={0xc, 0x15, {0x35075b, 0x8}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x4e21, 0x100, 0x2, 0x80, 0x60, 0x2c, r4, r5}, {0x9, 0x7, 0xae28, 0x10000, 0xfffffffffffffffc, 0x9, 0x2, 0x6}, {0x100, 0x7, 0x6db, 0x5}, 0x10000, 0x0, 0x2, 0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x40}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e20, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @extra_flags={0x8, 0x18, 0x9}, @lastused={0xc, 0xf, 0x9}]}, 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r6 = accept4(0xffffffffffffffff, &(0x7f0000001580)=@tipc, &(0x7f0000001600)=0x80, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r2) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r9, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x400c810) getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000001780), &(0x7f00000017c0)=0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001800)=0x2, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000001840)=0x7fff, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001880)={0x0, @in6={{0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1}}}, &(0x7f0000001940)=0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001980)={r10, 0x8}, &(0x7f00000019c0)=0x8) sendmsg$nl_xfrm(r7, &(0x7f0000001d00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001a40)=@flushpolicy={0x270, 0x1d, 0x600, 0x70bd2d, 0x25dfdbfc, "", [@replay_thresh={0x8, 0xb, 0x7}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xa, 0x2, 0x5}}, @tfcpad={0x8, 0x16, 0x40}, @algo_auth_trunc={0xfa, 0x14, {{'streebog512-generic\x00'}, 0x570, 0x200, "45eeb77b130f65c73d13348e52f1e097bd92d43c92e80a30b3f299c6c2110453c3e8cc074b3aa0bd041f4c0b654f87bfacbd39cab11758bd34b901de06ede53ca0c01559ccc192427bf61445630341cdba3f70c0e39a6bea6ebc491dd54ae002f6433267b6ab4cd7f6d510eb5fd9b7040db49148f9eca85bcff6b411a1bc28cc2c40828ebcd7ee610519c3f8a73b7fa2faf9903f793b0d4dcf3a6855cfbc75cbe776a03bc00abe75c4850f13c0a0"}}, @migrate={0xe8, 0x11, [{@in=@loopback, @in6=@loopback, @in=@multicast1, @in=@remote, 0x6c, 0x3, 0x0, 0x3501, 0x2, 0xa}, {@in=@loopback, @in=@remote, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xff, 0x3, 0x0, 0x0, 0xa, 0x8}]}, @sec_ctx={0x41, 0x8, {0x3d, 0x8, 0x0, 0xb1, 0x35, "bf7760edeb880e661c969a55c086c2c54310f6c65cb25361db6ebd06cc9f2471dd0f85df3c8d9c43890008e8c142dbb6ac1009dd77"}}]}, 0x270}, 0x1, 0x0, 0x0, 0x4400}, 0x20000004) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001d80)={0x8, &(0x7f0000001d40)=[{0x8, 0x2, 0x9, 0x6da6}, {0xfffb, 0xf7, 0x7b, 0x2}, {0x6, 0x10, 0x10, 0x7ff}, {0x6, 0xe, 0x2, 0x910}, {0x1, 0x86, 0x7, 0xcae}, {0x4, 0x4, 0x59, 0x7f}, {0xc4, 0x7, 0x2}, {0x101, 0x80, 0x0, 0x8001}]}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000005}, 0x880) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 1.397173305s ago: executing program 7 (id=8002): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0xe, [{0x2, 0x0, 0x8}]}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x35, 0x0, 0x1, 0x4}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f00000002c0)="4cf7", 0x2) (async) write(r3, &(0x7f00000002c0)="4cf7", 0x2) splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0) readv(r1, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@netrom, @remote, @null, @bcast, @rose, @netrom, @remote, @default]}, &(0x7f0000000180)=0x48) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000002c0), 0x0, 0x1) close(r5) (async) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x7, '\x00', 0x0, r0, 0x2, 0x4}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x7, '\x00', 0x0, r0, 0x2, 0x4}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x90, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @loopback}, {0x0, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @rand_addr=0x64010100}, {0x0, 0x2, @private=0xa010100}}}]}, @CTA_PROTOINFO]}, 0x90}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000000000000000000f3ffff0014000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000000000000000000f3ffff0014000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) epoll_wait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0x200) 1.368557505s ago: executing program 6 (id=8003): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xfffffffffffffef9) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000000c0)={0x1100, 0x1, 0x8, 0x1}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pread64(r3, &(0x7f0000000100)=""/4096, 0x1000, 0xfffffffffffffff9) 1.262071089s ago: executing program 2 (id=8005): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x2007}}}}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "5eb95d332554a486fef9a435c07eed823733a0bdd7c32ce4568f9cd83d926c956495cd34c8cf77cf881acf418672f5e52af248404413ce564b92cec00e0349a9"}, 0x48}, 0x1, 0x0, 0x0, 0x20008814}, 0x40) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) 1.259719393s ago: executing program 7 (id=8006): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906a7238872c4000000000000005000", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4000011}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[], 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="61ee7e40c101a1913bb830ca9cdb16df2c7a65b363962b33a092142c34f27c352bec550b4ef5fb24f7afc714cc28ddb8f9cc1f086a526bdd588f651129b0c909e10c92063057025c8c0173df5c0fbf015c562356e898ffcb4152ef901daf9397e1b0a27f3495e9dba07c28b38c1387e468ba67fda69aee451a0a08", 0x7b}, {&(0x7f0000000200)="b138353eb89cddcfd48fc3b77a1fc32ad3d5d2389e9085a45599bbff1880a15100939d102574029c72783ac58c99b6bcd4c5d719ebc5b42ec2cb3c1dd615158ba713d3532794790e015290efad5e245f76e4b09ada28f20e74613b3b218e70664b97fb349b1ac94307019d026a7fe692793856d27686bc60a3deca13f8b366d58d66211590e60012c6645c1e25fd30651b1bb981f097dc20ff44a38343c1d0cb3f86430c9f1771ecbb87fcb6920ac0306f7e6c2d01006b011e76e30b5a052d68c8caf20523ecd962f44f8cb129162997a6783b7e1ec0790d3eeec0a5a33f83f86eecc24c455367340fd50f3cb8", 0xed}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x430}, 0x4000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xd2}, &(0x7f0000000340)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x6a, 0x2, 0x0, &(0x7f0000000300)) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000940)={0x1, 0x4, 0x0, &(0x7f0000000900)}) 1.25876842s ago: executing program 6 (id=8007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x54, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1000}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x54, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "d8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.116208686s ago: executing program 6 (id=8009): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d0001002bbd7000fbdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="010007f60a0001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000014c0)=r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)={0x1068, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1044, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x5, 0x3]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x15a, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0x70, 0x4}}, @preq={0x82, 0x4c, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x4, 0xca, 0x70, @broadcast, 0xc7, @value, 0x6, 0x80000001, 0x4, [{{0x0, 0x0, 0x1}, @device_a, 0xa}, {{0x1, 0x0, 0x1}, @device_b, 0x314}, {{}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @device_a, 0x3}]}}, @tim={0x5, 0xd, {0x62, 0x92, 0x3, "d8ffce4d0fcfafd92864"}}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x1, 0x0, {0x80000001, 0x1ffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x4, 0x5}}, @random_vendor={0xdd, 0xb8, "6933569ab2dffd1c4c6e92f4cd5707d23dc254e0641938a936aec8adc563d2228bccd3336976be805797c68b3c55f1aa706079b273483b04dc7df471048d5ab181abd3aef5405b12ee58b27561c369681db8090e8041e358fe4f4d8fac9d9c9b601d135e986de9bd70732f17087fc81d352fc251fb552d74a5d155c064f843b59ad8c2ec428c00b1af00a9eda2ddace7c78ddb8083092ad8c76a8f165dd6ea8a0b621acd84fa6a2f8acf3f484af626114c77ae79a4df938e"}, @mic={0x8c, 0x18, {0xff9, "7bde65448b81", @long="450a310a8ee79743504b0bcd35f5a85e"}}, @ibss={0x6, 0x2, 0x8001}]}, @NL80211_ATTR_BEACON_TAIL={0x94, 0xf, [@chsw_timing={0x68, 0x4, {0x5, 0x1}}, @mesh_chsw={0x76, 0x6, {0xff, 0x1, 0x2b, 0x7}}, @challenge={0x10, 0x1, 0xc3}, @fast_bss_trans={0x37, 0x61, {0x2, 0x1, "e6619168dac668d0ddb7b1dcaf33face", "14fbaefd328ccbfd360ee1959bb129dd6a89fba4ae3b882f20ce56ec1df8b7dd", "3f5a0d124fccc733422a4a6afdf27c093c3483d81ff10996431554c7d5779615", [{0x4, 0xd, "c53069ef77913b0dd8e2c7a4c5"}]}}, @link_id={0x65, 0x12}, @sec_chan_ofs={0x3e, 0x1}, @channel_switch={0x25, 0x3, {0x0, 0x38, 0x81}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x376, 0x2, 0x3, 0x8000]}, @beacon_params=[@NL80211_ATTR_IE={0x48, 0x2a, [@mic={0x8c, 0x10, {0x199, "31f1c4ea61ab", @short="5317f0b04efaa84f"}}, @chsw_timing={0x68, 0x4, {0x4, 0xb4}}, @ibss={0x6, 0x2, 0x2}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x9bc7, 0xdfe}}, @mesh_chsw={0x76, 0x6, {0x40, 0x5, 0x17, 0x4}}, @cf={0x4, 0x6, {0x70, 0xff, 0x2, 0x8}}, @supported_rates={0x1, 0x5, [{0xb, 0x1}, {0x24}, {0x4, 0x1}, {0x18}, {0x24}]}, @supported_rates={0x1, 0x6, [{0xc, 0x1}, {0x6c}, {0x1, 0x1}, {0x6, 0x1}, {0xb, 0x1}, {}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x28, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x24, 0x2, "39371eb15ff8724b4808218983d102a142f588a0dfd9dc458e59900d2dd21f64"}]}, @NL80211_ATTR_IE={0xd8, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @broadcast}}, @perr={0x84, 0x48, {0xb, 0x4, [{{0x0, 0x1}, @broadcast, 0x100, @value=@device_b, 0x18}, {{}, @broadcast, 0x7, @void, 0x3c}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x33}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x29}]}}, @ibss={0x6, 0x2, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xfc, 0x38, 0x10}}, @fast_bss_trans={0x37, 0x62, {0x9, 0x1, "1f90e46cad912a3b938f5318ec04215c", "c25dd7bff1d300d62c30ad58bc4285344a99b2f766134da8131c621f24b63a40", "806dcaf81688e747eb2cab60c6c27ada54d0001bf2bd17c5c29b603a0e50770a", [{0x3, 0xe, "3d1b05fd12cf0979811e2bb427ee"}]}}, @cf={0x4, 0x6, {0xfc, 0x81, 0x4, 0x3}}]}, @NL80211_ATTR_IE={0x81, 0x2a, [@challenge={0x10, 0x1, 0x12}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x6, 0x0, {0x3, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x8, 0x21}}, @random={0x0, 0x51, "b297e2e21d51089389c9aaab20f7c6fc4ecc09f86fb7eca2ea713d6ed7d2d48e824892d2409b2fd573bc632c45955ee543cad072afb72fef0a0aa7b78ebf08012d4773e398d721fbde0ae855e30359d250"}, @mesh_chsw={0x76, 0x6, {0xd, 0x4, 0x8, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x18b, 0x91, "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"}, @NL80211_ATTR_IE={0x4e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xf22dc114b227f79a, 0x7}}, @prep={0x83, 0x1f, {{}, 0xe8, 0x5, @device_b, 0x5, @void, 0x8, 0xa, @device_a, 0x1}}, @dsss={0x3, 0x1, 0xb9}, @peer_mgmt={0x75, 0x4, {0x1, 0x8, @void, @void, @void}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xe, 0x60}}, @chsw_timing={0x68, 0x4, {0x6, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x1, 0x400}}]}, @NL80211_ATTR_PROBE_RESP={0x372, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1, 0x80]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x15e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @from_mac, {0x4}}, 0x5, @random=0x2, 0x1205, @val={0x0, 0x9, @random="bc0f7b2fefc99ae063"}, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x87, {0x9, 0x75, 0x2, "753b37ce74a414349c36b08eb79cb9d051863dd9ec74b9f5d43ab7d2cd53ee4e4fdc33a0cb24bf99af403fea793eb084727fea79572fd0e791e8d81b8e4a0b265bac659f461bfdaaf699e969670c097af0f719ed3289d18674477346356713ff1e09aeddd63a9adfb9ef98d8eab7d4c558791df5f0684d264f29cceb5728a63f22da84ea"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x1, 0xad, 0x4a}}, @void, @void, @void, @val={0x76, 0x6, {0x8, 0xff, 0x16, 0x7}}, [{0xdd, 0x8e, "30cef518cf88632a63d3de4809d1219839f1968a8bafe017f1c7dd309706beffc7c94a26574589f75e3dd06f3e54a48a2146b74816404a8670854a36134153a753d6c707f7ca17e7de66f1fbcebc0f86106a0ec59b292dddcc26f9f22d6151d4c7edb1cbd9015254561896a9d52af1a80dcd793d8b3c0d096e4eb9d0bc9fdcec559b8d60d2ab31990daf49eaaa66"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xec, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfffffff1, 0x3, "8ff45ab0f00094d5f61ecda9ac23122bc608ed6a2c599d76e87df59f8698134e26716f76dcc9becbe0e91a5691981435eeb21a8e65ac25aa8b81845aac59f864a08b4392a80ece618eaf9b01ba2e31ab6a056b954f678998c5c606e399b304ad92f6b83c67c5d61afb0ba785831d6d9a258da1469d6bb0dd0f9bdd35621cae607f034ed1b6642653fa31815e087d22435b6e50dac14daf90fa6ca49df110edc6df7e5252d2025009f4b032c9921751053f926dec0cd61a778e0d6a07250b0d237a397a9ad45ddb459d459bd9bbe82d8882c74098b42d42ec2d03fd373032bf70ed0f64d2"}]}, @NL80211_ATTR_FTM_RESPONDER={0x7c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x33, 0x3, "07825def6bde16d5328aa1493a346b271138d98455187565b508aa9fc16c184bf1718795cfeb27cf097a0a526ae05d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x42, 0x3, "f16a3389eba273c9da3d6be1a215c0be5310698aefa082c997d1838d749e368d0d50257dd95c691642857486afabb19e3e0ead147c8c59919aa39798b774"}]}, @NL80211_ATTR_BEACON_HEAD={0x2ec, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5f}, @device_b, @device_a, @from_mac=@broadcast, {0x5, 0x8}}, 0x7fffffff, @default, 0x2014, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x7, 0x0, {0x101, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7, 0xfffeffff}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xaf, "f86fec06667a78ea1064798e0faf4676443b1029697cb527814e7f77b8b6fb662acc74f6da69047b0a5ca29fd2e4a3324a3606b5acce5ea1a4deadb52adf3c391737d2133e5c20ac831cd3a103e184956fec7df98951e40a6c89b9a6e565ed23c9b76e865693a890cbb7ec7f7a9cdd3c41344bbcf186a9cfdb49dd3b8b0889436a0b0d9044d92c388025158e20655c1588c7f3288af832d872305369c2a3bec917f43e7ccd5512749dafc3be083229"}, {0xdd, 0x89, "40b08689f37cf14e506b78dd2e6e9192bd594c4e57c8b99f1f379290cfc72df62e00e5c4640bfbdfef0fbb69e63645e59c1b4f4fb07873b014d42d2bcfbbd8f1d097b491c44010d662bc0506b624db792836f5294c1483efe1f65a369f79634318d0356efdd6da7b428f644239e7bf7f707b517ab58facd766f5dd6dbea506eb398c42ccda8b11da48"}, {0xdd, 0x72, "5eae85b41663667695dd7ae3d017e8b3cadeace011107f1ffe366c4170e30a8dd0241839834e7d17c58341f99709cc633f4a8ce0faf3fbdd4354426af6fb2c8f196996d3cfee548a3e1d4f38d6468f482a2090e5361b897eedd22f586a2b31cdbaf101e93d0f1ee24a2d2c6cf00eca63e81c"}, {0xdd, 0x54, "6c84d3dd38b80e5bff0d95d85dbfedf61bef4ffaa70ac550c02ff64155e26ed1eaf38e16407681e96a989c71113837138c0d30954ec0f8f1b5bfeaa3a512a60591aebf9e8e85cc93f3032a09a7f30a55162fc331"}, {0xdd, 0x8c, "9fafef06f2aaf124d8b0ad3e909861b83168d17131cc154cd7d7f5aefcf0b9131d34e78d1d185fcfc19cb19073cccf22294c2652aad7bab57241cebb9b1839a09c625290b9a0a689e9cfc26b95b376eaca97ab0de5c34d98e7778bf70a0e9ae6d080935104155f2862edcb323f47d1c1714fc0c7c96a1600d7d45cff584db1e40ac9dfd0c2649f9d887bbdb2"}]}}, @NL80211_ATTR_BEACON_TAIL={0x145, 0xf, [@peer_mgmt={0x75, 0x8, {0x1, 0x8, @val=0x5, @val=0x3, @void}}, @random_vendor={0xdd, 0xe5, "87b2d3f9caa8002c63a9efa48ed59bead21a910aa9e7a2981fd6f0e801dcc8b93aab60f0fe15c320c696668b1009cff4b2fad82b5f9d844009077f1461b3587eb4ba995123d3e6c0343c3d488b9b252d5868dd33bbdba0233f2386209a178c1d74843cae7d24fe04074a3781f0c4f8a0385ec2444dbd9b5abaf8cfa823d99dcdc363fdfceb10ec6108e67de4f75678f60d82c98a4d27d292fcabee9c5ca16808b4951acfbfdef90e7f18a357e024ce4a87480766691de688cde58adc7634c3cc39c395cfa3b46780c1eb1e37b64fbd7e6ccf55508d19a0378b6a28f9ae7aa53e7e4718b500"}, @random={0x8, 0x4e, "f0ab2e226973789475e096b35fe504fbddd97b6262cd5fde26852fb04defde39b4011392cdecc6854380a613e6a0bb64b55368ee61f9fd72e0b66f0ec62f9124f3d9cb90970b8894b1f2f5efd1b7"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x10, 0x80, [@cf={0x4, 0x6, {0x79, 0x3, 0x3e, 0x5}}, @ibss={0x6, 0x2, 0x3ff}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x1ff, 0xff, 0x0, 0x4]}]}]}, 0x1068}, 0x1, 0x0, 0x0, 0x20004090}, 0x8855) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r10, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'veth1_to_team\x00'}) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2889404}, 0xc, &(0x7f0000001300)={&(0x7f0000000200)={0x24, r8, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c044}, 0x8004) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r11) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r12, 0x5, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000013c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r12, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.065447838s ago: executing program 2 (id=8010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r4, 0x25, 0x4, @val=@iter={0x0}}, 0x20) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x104, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x193}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 770.164668ms ago: executing program 4 (id=8013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}, {0x4e23, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}}}}}}}}, 0x36) socket$nl_route(0x10, 0x3, 0x0) 711.688285ms ago: executing program 2 (id=8014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x20, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}]}]}}}}}}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket(0x15, 0x5, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x114, 0x21, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r8, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r10, 0x3d}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000740)={r10, @in6={{0xa, 0x4e23, 0x8d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, &(0x7f0000000340)=0x84) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r1, 0x1000000}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x1dc, r13, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x1ac, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x198076ea}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa0000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa556}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2256eb93}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2642}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40440c0}, 0xc000) 559.447141ms ago: executing program 2 (id=8016): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0xfffffffe, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x400000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1400}, 0x40002000) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20000084}, 0x40880) 494.187846ms ago: executing program 1 (id=8017): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10, 0x800) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x2, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 459.325687ms ago: executing program 1 (id=8018): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa89aaaaaa00000000000008004500003000000000000190780a010101ac1414aa030590780300060045f700000000000000890000ffffffffe0000002"], 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x5, 0xffffffffffffffff, &(0x7f0000000000)) (async) r4 = socket$kcm(0x1e, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) (async) close(r5) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000080)={0x80000002}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) (async) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) 407.554928ms ago: executing program 1 (id=8019): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) write$cgroup_pressure(r0, &(0x7f0000000100)={'full', 0x20, 0x3, 0x20, 0xfffffffffffffffc}, 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x7fffffff, 0x20, 0x53ac}, 0x2f) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r1, 0x8a842000) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x2, @link_local, 'pimreg\x00'}}) r3 = accept$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "5c0129dc3ba8826f", "b89136085c7199ba605f781d7af28761", '@vj|', "677c849bccbcdafb"}, 0x28) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="3548525dc43acdb655703c01bbc031eeade39d7868541e3234ff64d70a521de85fcd8d2d67acb06e6b33888bc72da4c1991c9b0a24dc17662ca9630759d83a5c638bf1cbfa05e2946a67067789a69ba728e1527a263ef724ef17bc86e7c75d761093c1de67c23a9f986030fcfde649c68036919215fd8409a887eaf971379055a2d9ab20e747bfe9442696485cc6a433df86313e953eb24f268f1b111a363e8c27d4b7aa", 0xa4}, {&(0x7f0000000400)="f4add4b52d138895a0c06c29aa941e9d446f4ad1eda61da8d0739b2b31c7640de30df4d9b1c475e0a097fa6bdad031", 0x2f}], 0x2) r4 = accept4$alg(r2, 0x0, 0x0, 0x800) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x3, 0xfffffff9, 0x814, 0x8, 0x7, 0x80000001}, {0x8, 0x7, 0x2, 0x3, 0x3, 0xec}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x3, 0xfffffff9, 0x814, 0x8, 0x7, 0x80000001}, {0x8, 0x7, 0x2, 0x3, 0x3, 0xec}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r2, &(0x7f00000006c0)="5b7bf0a46df300382964e07138f0f993371179a1a5fbec6ee34f92b1fa596f588f9ca6c5ca5c4e4ce7a5cb47505da9fa71cb7a363fa126acf188d95a2a74e56efca0d72daf250f5165ec7b4758a3b9f34ba006f1060d021c06b08df2ddb881540ec9a3175cce7deef08ed161fa125f44a0c675f4c7f10f78bda4b9e888a37448509d6f05c012b0ce2bdea537ce79df3e40b0bed5f626fe032fe530d76f088c4013553bfe82b4cf99e1ee0de9b415a67e1b64f7d817fec04db90866bcf0701957109afb9003d134d6e157cc9b51d3341a6503bed3", &(0x7f00000007c0)=@tcp=r5, 0x1}, 0x20) connect$inet(r1, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r2) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000900)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000900)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x885) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x885) r8 = openat$cgroup_ro(r2, &(0x7f0000000a00)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000a80)='blkio.bfq.sectors\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r8) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1a0, r11, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x27}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc010}, 0x4008000) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1a0, r11, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x27}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc010}, 0x4008000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x8c, r12, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x61}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040090}, 0x10) preadv(r10, &(0x7f00000012c0)=[{&(0x7f0000000f40)=""/44, 0x2c}, {&(0x7f0000000f80)=""/135, 0x87}, {&(0x7f0000001040)=""/42, 0x2a}, {&(0x7f0000001080)=""/198, 0xc6}, {&(0x7f0000001180)=""/107, 0x6b}, {&(0x7f0000001200)=""/192, 0xc0}], 0x6, 0x8, 0x7ff) (async) preadv(r10, &(0x7f00000012c0)=[{&(0x7f0000000f40)=""/44, 0x2c}, {&(0x7f0000000f80)=""/135, 0x87}, {&(0x7f0000001040)=""/42, 0x2a}, {&(0x7f0000001080)=""/198, 0xc6}, {&(0x7f0000001180)=""/107, 0x6b}, {&(0x7f0000001200)=""/192, 0xc0}], 0x6, 0x8, 0x7ff) 342.314404ms ago: executing program 4 (id=8020): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x10001, 0x3, {{0x11, 0x4, 0x1, 0x2, 0x44, 0x64, 0x0, 0xb2, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x94, 0xc, "3225db93109d99628cb5"}, @cipso={0x86, 0x14, 0x2, [{0x1, 0xe, "0a89b83a50f954172017f9c2"}]}, @noop, @generic={0x89, 0x4, "d75b"}, @timestamp={0x44, 0x8, 0xcd, 0x0, 0x3, [0x1]}, @end]}}}}}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000180)=0x99c5, 0x2) (async) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0xf5, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0xffffff50}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf2501000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c0005004fc31bfd000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) close(r0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f00000001c0)={0x10000000}) (async) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000200)=0x4, 0x4) 340.690919ms ago: executing program 7 (id=8021): socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 286.148114ms ago: executing program 2 (id=8022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x2000c890}, 0x20040810) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001900)=0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) (async) pipe(&(0x7f00000001c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async, rerun: 64) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (rerun: 64) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0x5, &(0x7f00000014c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001500), &(0x7f00000016c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r8, 0x0, 0x0, 0x40001, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x1) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file0\x00', 0x0, 0x18, r0}, 0x18) 285.600516ms ago: executing program 4 (id=8023): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x500, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="c505a875e404c281000000dd18d05d000000004000000000080000000000851e1e0011d619e2f7b7e0df3f57f25feb2fd281632ef22405c93d256fff79dcc8b447508212699d1bb99672c329b9480d327ec1c0d1039a9d520da2be26ac24e5ccbc95afc7956c5399119e7ffbbb55f2ece804dbe46523c8618dca57100e94df39fd"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0xffff776b}, {{&(0x7f0000000380)=@nl=@unspec, 0x80, 0x0}, 0x606}, {{&(0x7f0000001640)=@isdn, 0x80, &(0x7f00000019c0)}, 0x4}, {{0x0, 0x0, &(0x7f0000001d40)=[{0x0}], 0x1, &(0x7f0000001d80)=""/241, 0xf1}, 0x8}], 0x4, 0x20, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000040)="25222d8230b1f874", 0xfffffffffffffcc9) r4 = socket(0xb, 0x4, 0x9) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x4a, 0xe11, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x800) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r4) (async) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdf250000002c"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x4010) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x3}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xc9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) shutdown(r1, 0x2) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000e4ad1569ba3c3ead0095000000b6000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0xfffffffffffffe9c, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5ac1e20a90d7f0956eb1bc06e08687d9", 0x10}], 0x1}}], 0x1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x8, &(0x7f00000002c0)="f019161cab209f5b", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 221.168833ms ago: executing program 1 (id=8024): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100000000000a77768021f061bb9c25e9831eafd5a6df513a4e348f71a8feb288e821a97009b2f5aa2354ce5393fb49bbe9cd3ffebb0e80000000000000001c270affccd2e0022bf16e06cc7b699c3c955019c090e20452e1908", @ANYRES16, @ANYBLOB="21000000000000002c001280080001006774700020000280"], 0x4c}}, 0x40) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) accept$alg(r3, 0x0, 0x0) (async) accept$alg(r3, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd) sendto$inet(r6, 0x0, 0x0, 0x1a38200298d57ae4, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 136.758256ms ago: executing program 1 (id=8025): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="04010000210001000000000000000000ffffffff000000000000000000000000ac1e010100000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000500500011007f00000100009840ec30e65cad710000fe8000000000000000000000000000bb0a010100000001000000000000000000640101000000000000000000000000003c00000000000000020002001c0004"], 0x104}}, 0x0) 16.657684ms ago: executing program 1 (id=8026): socket$netlink(0x10, 0x3, 0xb) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x14, 0x603, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001700000000000000"], 0x50) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00000000c0)={@initdev, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 13.019384ms ago: executing program 7 (id=8027): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000780)=0x2, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0xa, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6805}, 0x4004040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) 435.758µs ago: executing program 2 (id=8028): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101600000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff9f, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40085}, 0x4000) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) unshare(0x6a040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0xb9, 0x70bd26, 0x40000000, {}, [{0x4}]}, 0x18}}, 0x481d5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x20084800}, 0xc010) r7 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x8, 0x802, 0x10, @mcast2, @loopback, 0x10, 0x0, 0xe7, 0x2}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x100010, r5, 0x7247b000) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x10}}, 0x8005) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x7, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x9, 0x4006, 0x80, 0x2, 0x0, 0x3769, 0x80000804, 0x1, 0x9, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB="591b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r6], 0x50) 0s ago: executing program 4 (id=8029): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x4810) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd6f0500dbdf25050000001c000380080001000200000008000502009900090000030004000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044014}, 0x2000c004) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001480)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001c80)={'gre0\x00', &(0x7f0000001bc0)={'gretap0\x00', 0x0, 0x7800, 0x800f, 0x9662, 0x0, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast2, @remote, {[@noop, @timestamp={0x44, 0x8, 0x5e, 0x0, 0x7, [0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0xc, [0xfe, 0x2, 0xfff, 0xc, 0x8, 0x81, 0xc5c2, 0x3]}, @generic={0x86, 0x10, "eeaa421badb73e6c095b1f1cf4f7"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004d00)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000001c0)={@loopback}, &(0x7f0000006700)=0x14) sendmmsg$inet(r0, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xfe}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb9c9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)}, {&(0x7f0000004d80)="dc2e36baa3ab3424452bc2c4a7528b93e168a10a741ab49a211764528511e5f313cebab507bb34bae02b601156402f8b2200bb8890d6acef2f6d2100449c2d4cf4e1295267a8bd0d1797a991c1fd90731fe22271a4ddcf05c8fe4427f4cbc3b62e681164789a9b68d4ea61bdd0de955c029c49aa7748ab7ac0b34e10c7578400000000", 0x83}], 0x2, &(0x7f00000014c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @remote}}}], 0x20}}, {{&(0x7f0000001500)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001540)="c30d60ffcbf09c78ba11458db9af1167275d5a050e763ca1692dc8778568ec2bd39ab323a7e2c3ca0247f0a54ef10b6603995e8e59f242ff9f9ed345b22ebf431196e0290c27e1ad95ad760a02bcd5d1bc3fef769f054089d0223aab167915734f69eaf6c14fdb027b82806dfbedad749e71cb4dd8617754b5187b5010310bdb278d9c40de3552031d6b0e527793f46dcf03b10b5864c014964b55545d7d0dd21a99a46daca95ae48077e0eea5aa7813961626178dc175ef6e30776e41853811f6975d811557265eb798aacf5e", 0xcd}, {&(0x7f0000001640)="19bf052ac245d9767b5489f6518ae8c36b6b9036490dba5c668588e15d830d0d70722b35db18eec73429d74250f4af391bb8be0da48c6befbd8e6bcf47c697f688757094ab", 0x45}, {&(0x7f0000001380)="6f0d0e0000000000005e003cbd405b1ff56a8a760e98f98b2c052c480942a305004bb5bbbf3bbb307c3b00000000000000", 0x31}, {&(0x7f0000001700)="6f7a50a30c8ff0dacea9b11cc4172030165a6a46b7fff854c6929ef247b5f7e352c7e3526d39d086bbdfab2480204efd938325de02069c86e7a8a935c6c66a3bb7b29441bc27bf463d49a18814c294ff00beeb06feb5b6b97f17cf9d76d2a4674c74cf1381304079cfcb9f2af88fb897368fa409518ed2940b49f7eaab2c3cca5fe2927278d6f5908991a62b15465a4d68d93104e4", 0x95}, {&(0x7f0000000380)="7c920e2988328c9c2a144331817c8ba40d909e6b9aa5b7023301c64f37d4002282ed4bce34d65206056bb09a825846454f2a08d3d2850000003993f33fd876edb351d3406dd9e73851c32e028de4431b7c1fa41b3c3152796c3720be59ac12b8f6dbce44a0763f9a2a1bef343ffe7aea521a6148eae24efce2eeba0fa2e3bee295d4317529984244609bd24b3c320668861c368e64840a30dcc0c785ca919ab86a643e1480097a931db79f76a22d18ac56cb05ca81c3a994d37815deb5cd8bf3b48b46383e07c9860822bec482b247a7fdbaae3d8a664c5c3169ab3309178ef2f705e0bed575b0a9921b382f30b8", 0xee}, {&(0x7f0000001800)="d0fa3bcbbd9ee9fdc11b687b0f2afd6f52cb5a2f1bd0b6a548b7779b2c5e24aff9ecf2c5188584e76456017ac6df5280f4218c3fc89172f4a9e017298c9630c63e0142f5070b21d28e5dd17f8733be3c68e57f992c5115ef98baae540ed3f7bc2adcedbf7909b3d91390fd3321f823b4355bc9f83f895ed2ed4be94d5f0a4cbee49517fa8991ffb4c8d588d1e025b2142ecc2dcf80ba9437217f69c8889912b8f95eddef3c6b77d1f130eceba81f5962c0de6f32d6942a8a628fce7c4da0c4f06aeafe589557366eab1a62fe25875841ddb113d4ef89d95c", 0xd8}, {&(0x7f0000001900)="f472fd92db177f31bcde19c1c23b3ea50161140f394a67b345dbc4c2e1f7b8736cabf16591b1f5b4425e700894047e4f260e106163b9bea6364dd5320a7b78ce00970b5bf360d9cba11f0692bd377facc503a075a3a8260e7ed7922974d045bf0931ae99478c1815b539261dc5de1b86c21dbbb0405770d016ac48de13ea7cc6ea3b7a49b2767d792558574137a1fc51e4611e5a565e60ef7f4008ac7bde1785e0d1aedf73b016fa6b6742a2715cc639f06c9a", 0xb3}, {&(0x7f0000006740)="3fc8174da91fe4de2ff3179825aa69f55ecbc1c7708b1b74464c1af6d2e33fb53d1714bd8cc6cf84b312c9ab26f5e8a88719679d5a94c51a418436a733a0e1aa1acb6dac584e05233c0ffb5dc8e372c8b4ac9bd0542af68671655b7dc422c59458b17eaefc2ce21e5bb46dd259f9cbe2af52f0e7a344945e9df007018d41da4ae5e581e6f61a429cdf58a5ca56fcdeb0530b6eb4a31e0ea313e67939c93df80addedc8a9c68d0691cdd521cce1", 0xad}, {0x0}], 0x9, &(0x7f0000001cc0)}}, {{&(0x7f0000001dc0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000007000000000000000000000000700000044143d230a010100f4fff801e0000001000000074414a443ffffffff00000001640101020000a59c7696010102000007ffac1414aa000000057f00000100000003ac14143d000000010a010100000000"], 0xa0}}, {{&(0x7f0000002280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002440), 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1c8}}, {{&(0x7f0000002680)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000039c0)}}, {{&(0x7f0000003a00)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000006880)=ANY=[@ANYBLOB="1400000000000000000000fa0200000001000000000000001100000000000000000002000100000009000000000000001c009a6df702b1ed5e0000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ac1414aaac1414aa0000000014000000000000000000000002000000a1000000000000001400000000000000000000000200000080000000000000001400000000000000000000000100000001000080000000001400000000000000000000000200000004000000000000007800000000"], 0x128}}, {{&(0x7f0000004e40)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000006000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb89}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x78}}, {{&(0x7f00000060c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000006400)=[{&(0x7f0000006100)="5edc727afaeb7919bb83e5e517328e2d4e43d9ef905303f0020d8143cd9672d3451a6495c91a4fc201d1a3d712bbc23e69e6ca9deebd7f0532ab077d2797d1e8ba438c67bc648403651fbcde1d2b093fe1e4526bf704b747e5a07532dec147dadc47b30b3074beefcd89e555bdf70114d52201469e3d374613964d0173fe322cee43db313b85ecc511674a1c6cfd35bf4cecfad5676ff69850254c70fc6eea98a525f496c831bfda63391102c6f0206703376186fe82bc69f51ddcbfbe25b9fb09c688421637ad80aa3827d1fd3aab7005db1be6", 0xd4}, {&(0x7f0000006200)="2081cad60d7ace69c29a2e8876050018dab781fd9341f17e8fcc288e634fd1dec4ead782d0683043f6041ad477c0727c054c485ec63551f6863137", 0x3b}, {&(0x7f0000006280)="aa395860bdac4a75902391f7779876727064d1d85900f37a63e478cc5398fe107725933d6d0eca9f35217f625d440eb1e7e41c4b5ed385fc005a0b7c380c19dc20f0ae33942c2891732c7005fe9188f648a370f8430a82626c54acc351b7b8cf700c58229ec96360f5ae5b315e9616d2bb8ae4f6c3792cd3a68bce3f19cb5341b6773ee47314cd7f368124759c7323d6d9f9de224a3cf1e530ebea5bb40f2bcab2c2c21d9368cb1b0c5d55b1", 0xac}, {&(0x7f00000008c0)="500335a8f6f1b3764a682457dbc140f26dff1a4dff50d2dd1b50629d0f46f1d1", 0x20}, {&(0x7f0000006380)="bc5f5b493d9555b0609e512859041f555c7b4d9b83945bfbda8628e3df6ad03380aa8ff658ea6e71af4a40894d4d5dae66167d6ab0aa2e16672ce215511980f054bdf686", 0x44}], 0x5}}], 0xa, 0x20000010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a00010003000000fd027f445d8bc0478100000000000000080019004218fd0ef9575909652a617d477a7486f1e090fb44448ec4479ebeb2e0efbd557af6305c48312a2cf5127125feb6fa7cad4f65ac585fafb11f7386e37a39361240f02be2c6ee7d479fd3219ddca0cae514a1f399d0e6db0c808ab8b09a9c21fa0b791e6713dba3bc866e5fa16e038194c946b3eb918cc3643efaaaef7e38bfa060fee8dd1963e8fd157dee557e6eb93bce428ee6532f15dc7e87bf42be3ed75c078215d64cea9455b796a6cd7587111f2ad23a6690e80a5fef14e23b1f7198", @ANYRES32, @ANYBLOB="05001b003a000000"], 0x2c}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0x0, 0x40010721, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) shutdown(r0, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1342, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000000040)) gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x40000020) close(0x3) kernel console output (not intermixed with test programs): 9752] syzkaller0: entered promiscuous mode [ 741.002138][T29752] syzkaller0: entered allmulticast mode [ 741.042102][T29752] tipc: Enabled bearer , priority 0 [ 741.050076][T29751] tipc: Resetting bearer [ 741.150306][T29751] tipc: Disabling bearer [ 741.450390][T29764] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6406'. [ 741.485444][T29766] openvswitch: netlink: IP tunnel dst address not specified [ 741.523491][T29768] xt_bpf: check failed: parse error [ 741.587621][T29772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6410'. [ 741.715929][T29780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6412'. [ 741.725685][T29780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6412'. [ 741.736460][T29780] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 741.823642][T29790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6414'. [ 742.076184][T29789] delete_channel: no stack [ 742.157269][T29798] netlink: 712 bytes leftover after parsing attributes in process `syz.2.6416'. [ 742.195589][T29798] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.6416'. [ 742.443892][T29813] ip6gretap0: entered promiscuous mode [ 742.453886][T29813] ip6gretap0: left promiscuous mode [ 742.514167][T29822] netlink: 'syz.1.6424': attribute type 6 has an invalid length. [ 742.570224][T29825] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.577422][T29825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.584946][T29825] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.592104][T29825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.607114][T29825] bridge0: left allmulticast mode [ 742.620301][T29825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 742.908400][T29845] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.915680][T29845] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.002799][T29845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.017966][T29845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.132481][T11302] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.141713][T11302] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.154761][T11302] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.164514][T11302] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.674213][T29875] vlan2: entered promiscuous mode [ 743.680576][T29875] batadv0: entered promiscuous mode [ 744.001875][T29888] netlink: 'syz.1.6444': attribute type 1 has an invalid length. [ 744.122542][T29895] lo speed is unknown, defaulting to 1000 [ 744.489497][ T30] audit: type=1107 audit(1770229378.307:12): pid=29914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù±Xâsi4ù˜ÝnËí¶ì¡îß²mª³`?' [ 744.531813][T29919] vlan2: entered promiscuous mode [ 744.610350][T29925] netlink: 'syz.6.6454': attribute type 10 has an invalid length. [ 745.130082][T29955] __nla_validate_parse: 29 callbacks suppressed [ 745.130101][T29955] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6464'. [ 745.186401][T29957] batadv_slave_1: entered promiscuous mode [ 745.278760][T29968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6468'. [ 745.307991][T29968] vlan2: entered promiscuous mode [ 745.315281][T29968] batadv0: entered promiscuous mode [ 746.003494][T29956] batadv_slave_1: left promiscuous mode [ 746.105399][T30003] tipc: Enabled bearer , priority 0 [ 746.112991][T30003] syzkaller0: entered promiscuous mode [ 746.119368][T30003] syzkaller0: entered allmulticast mode [ 746.141050][T30003] tipc: Resetting bearer [ 746.160080][T30002] tipc: Resetting bearer [ 746.187937][T30002] tipc: Disabling bearer [ 746.688250][T30026] batadv_slave_1: mtu greater than device maximum [ 747.103089][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.254299][T22275] block nbd8: Receive control failed (result -32) [ 747.626434][T30050] netlink: 'syz.6.6494': attribute type 2 has an invalid length. [ 747.638249][T30050] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 747.701675][T30054] syzkaller0: entered promiscuous mode [ 747.709276][T30054] syzkaller0: entered allmulticast mode [ 747.768922][T30054] tipc: Enabled bearer , priority 0 [ 747.780252][T30053] tipc: Resetting bearer [ 747.812520][T30053] tipc: Disabling bearer [ 748.159548][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.165622][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.174925][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.207144][T30082] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 748.222747][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6501'. [ 748.245000][T30086] xt_TCPMSS: Only works on TCP SYN packets [ 748.291389][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.304175][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.313720][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.321590][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.329396][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.343443][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.351887][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.359962][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.368988][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.386670][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.394194][T30082] wg1 speed is unknown, defaulting to 1000 [ 748.430395][T30092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6503'. [ 748.439916][T30092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6503'. [ 748.459180][T11302] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.468274][T11302] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.478245][T30092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6503'. [ 748.487634][T11302] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.497021][T30092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6503'. [ 748.498801][T11302] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.524856][T30094] syzkaller0: entered promiscuous mode [ 748.530448][T30094] syzkaller0: entered allmulticast mode [ 748.920284][T30120] netlink: 'syz.4.6514': attribute type 1 has an invalid length. [ 748.974540][T30120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.011609][T30120] bond1: (slave ip6gretap1): making interface the new active one [ 749.022660][T30120] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 749.061931][T30128] syzkaller0: entered promiscuous mode [ 749.062441][T30120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6514'. [ 749.071316][T30128] syzkaller0: entered allmulticast mode [ 749.127606][T30128] tipc: Enabled bearer , priority 0 [ 749.148168][T30127] tipc: Resetting bearer [ 749.214902][T30127] tipc: Disabling bearer [ 749.464004][T30156] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6526'. [ 749.493933][T30156] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6526'. [ 749.725935][T27768] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 749.735444][T27768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 749.739124][T30176] pim6reg: entered allmulticast mode [ 749.750349][T27768] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 749.758779][T27768] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 749.766950][T27768] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 749.781533][T30173] bond2: option ad_select: invalid value (34) [ 749.789978][T30173] bond2 (unregistering): Released all slaves [ 749.881962][T30174] lo speed is unknown, defaulting to 1000 [ 749.901792][T30183] syzkaller0: entered promiscuous mode [ 749.921006][T30183] syzkaller0: entered allmulticast mode [ 750.079594][T30185] ip6gre1: entered promiscuous mode [ 750.085012][T30185] ip6gre1: entered allmulticast mode [ 750.098165][T30174] wg1 speed is unknown, defaulting to 1000 [ 750.166509][T30191] __nla_validate_parse: 3 callbacks suppressed [ 750.166528][T30191] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6536'. [ 750.183378][T30191] sctp: [Deprecated]: syz.4.6536 (pid 30191) Use of int in max_burst socket option deprecated. [ 750.183378][T30191] Use struct sctp_assoc_value instead [ 750.272511][T30194] tipc: Enabled bearer , priority 10 [ 750.282599][T30193] syzkaller0: entered promiscuous mode [ 750.289274][T30193] syzkaller0: entered allmulticast mode [ 750.368697][T30193] tipc: Resetting bearer [ 750.383209][T30192] tipc: Resetting bearer [ 750.453807][T30192] tipc: Disabling bearer [ 750.469563][T30202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.558619][T30208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6540'. [ 750.841495][T30227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6544'. [ 750.854034][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 750.927665][T30227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.991000][T30227] macvlan2: entered promiscuous mode [ 750.996592][T30227] macvlan2: entered allmulticast mode [ 751.002384][T30227] bond1: entered allmulticast mode [ 751.020421][T30227] bond1: entered promiscuous mode [ 751.026513][T30227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 751.037609][T30227] team0: Port device macvlan2 added [ 751.048195][T30174] chnl_net:caif_netlink_parms(): no params data found [ 751.077728][T30238] syzkaller0: entered promiscuous mode [ 751.084423][T30238] syzkaller0: entered allmulticast mode [ 751.153536][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6547'. [ 751.178655][T30238] tipc: Enabled bearer , priority 0 [ 751.194164][T30241] vlan2: entered promiscuous mode [ 751.200805][T30241] batadv0: entered promiscuous mode [ 751.239420][T30237] tipc: Resetting bearer [ 751.259710][T30237] tipc: Disabling bearer [ 751.380398][T30174] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.393943][T30174] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.440290][T30174] bridge_slave_0: entered allmulticast mode [ 751.445112][T30256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6551'. [ 751.456990][T30174] bridge_slave_0: entered promiscuous mode [ 751.485771][T30174] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.503967][T30174] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.515080][T30174] bridge_slave_1: entered allmulticast mode [ 751.532220][T30174] bridge_slave_1: entered promiscuous mode [ 751.610238][T30174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.635006][T30174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.709849][T30174] team0: Port device team_slave_0 added [ 751.733152][T30174] team0: Port device team_slave_1 added [ 751.794761][T30174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.809706][T30174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.815873][T22275] Bluetooth: hci7: command tx timeout [ 751.849678][T30174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.862574][T30174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.891023][T30174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.948376][T30174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.001042][T30291] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6559'. [ 752.043686][T30291] vlan3: entered promiscuous mode [ 752.048875][T30291] batadv0: entered promiscuous mode [ 752.073046][T30292] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 752.079074][T30292] pim6reg0: persist disabled [ 752.088383][T30174] hsr_slave_0: entered promiscuous mode [ 752.094728][T30174] hsr_slave_1: entered promiscuous mode [ 752.101665][T30174] debugfs: 'hsr0' already exists in 'hsr' [ 752.107689][T30174] Cannot create hsr debugfs directory [ 752.231004][T30289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6560'. [ 752.299540][T30289] syzkaller0: entered promiscuous mode [ 752.312590][T30289] syzkaller0: entered allmulticast mode [ 752.336175][T30301] xt_bpf: check failed: parse error [ 752.627340][T30316] macsec1: entered promiscuous mode [ 752.636069][T30316] syzkaller0: entered promiscuous mode [ 752.641837][T30316] macsec1: entered allmulticast mode [ 752.657105][T30316] syzkaller0: entered allmulticast mode [ 752.672914][T30328] sctp: [Deprecated]: syz.4.6570 (pid 30328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 752.672914][T30328] Use struct sctp_sack_info instead [ 752.690436][T30316] syzkaller0: left allmulticast mode [ 752.695604][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.698956][T30321] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6567'. [ 752.703709][ C1] lec:lec_tx_timeout: lec0 [ 752.719793][T30316] syzkaller0: left promiscuous mode [ 752.752733][T30324] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6567'. [ 752.789349][T30174] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 752.819175][T30174] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 752.841997][T30174] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 752.910308][T30174] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 753.084536][T30352] xt_bpf: check failed: parse error [ 753.107140][T30174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.163338][T30174] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.181728][T11297] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.188929][T11297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.248823][T11287] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.255991][T11287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.437651][T30365] tipc: Enabled bearer , priority 0 [ 753.464602][T30365] syzkaller0: entered promiscuous mode [ 753.480741][T30365] syzkaller0: entered allmulticast mode [ 753.500533][T30367] syzkaller0: entered promiscuous mode [ 753.519683][T30367] syzkaller0: entered allmulticast mode [ 753.582903][T30365] lo speed is unknown, defaulting to 1000 [ 753.589223][T30372] tipc: Resetting bearer [ 753.642976][T30372] tipc: Disabling bearer [ 753.669218][T30378] netlink: 'syz.2.6584': attribute type 1 has an invalid length. [ 753.693397][T30374] tipc: Enabled bearer , priority 0 [ 753.708078][T30366] tipc: Resetting bearer [ 753.732121][T30366] tipc: Disabling bearer [ 753.749430][T30378] macvlan2: left promiscuous mode [ 753.755371][T30378] bond1: left promiscuous mode [ 753.778729][T30174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.897136][T22275] Bluetooth: hci7: command tx timeout [ 754.043265][T30365] wg1 speed is unknown, defaulting to 1000 [ 754.152360][T30392] bond1: left allmulticast mode [ 754.159295][T30392] macvlan2: left allmulticast mode [ 754.268332][T30402] sctp: [Deprecated]: syz.4.6589 (pid 30402) Use of int in max_burst socket option deprecated. [ 754.268332][T30402] Use struct sctp_assoc_value instead [ 754.368054][T30174] veth0_vlan: entered promiscuous mode [ 754.449983][T30174] veth1_vlan: entered promiscuous mode [ 754.629482][T30422] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 754.704202][T30174] veth0_macvtap: entered promiscuous mode [ 754.729910][T30174] veth1_macvtap: entered promiscuous mode [ 754.845060][T30174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.925071][T30174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.014653][T17682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.043739][T17682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.117607][T17682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.126719][T17682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.390374][T11297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.443969][T11297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.534374][T30464] __nla_validate_parse: 10 callbacks suppressed [ 755.534400][T30464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6602'. [ 755.621741][T11297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.630929][T11297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.641551][T30464] openvswitch: netlink: IP tunnel dst address not specified [ 755.770270][T30473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6604'. [ 755.825178][T30473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6604'. [ 755.864611][T30477] nft_compat: unsupported protocol 0 [ 755.874179][T30476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6605'. [ 755.893854][T30476] vlan2: entered promiscuous mode [ 755.975730][T22275] Bluetooth: hci7: command tx timeout [ 756.040481][T30484] xt_TPROXY: Can be used only with -p tcp or -p udp [ 756.077490][ T5484] veth0_vlan: left promiscuous mode [ 756.110432][ T5484] veth0_vlan: entered promiscuous mode [ 756.196366][T30493] ip6t_srh: unknown srh match flags 4000 [ 756.274430][T30498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'. [ 756.320377][T30495] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6610'. [ 756.374984][T30499] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6610'. [ 756.427815][T30495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6610'. [ 756.535148][T30517] netlink: 'syz.4.6614': attribute type 3 has an invalid length. [ 756.715105][T30526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6616'. [ 756.767002][T30529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6616'. [ 756.801526][T30479] delete_channel: no stack [ 757.071267][T30557] syz_tun: entered promiscuous mode [ 757.149978][T30557] syz_tun: refused to change device tx_queue_len [ 757.192949][T30562] netlink: 'syz.1.6625': attribute type 1 has an invalid length. [ 757.199395][T30557] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 757.292062][T30567] xt_nfacct: accounting object `syz0' does not exist [ 757.321093][T30562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.499012][T30572] bond1: option tlb_dynamic_lb: invalid value (5) [ 757.719390][T30572] bond1 (unregistering): Released all slaves [ 757.761276][T30587] batadv_slave_1: entered promiscuous mode [ 757.762734][T16764] lec:lec_start_xmit: lec0:No lecd attached [ 757.792107][T30576] batadv_slave_1: left promiscuous mode [ 758.055930][T22275] Bluetooth: hci7: command tx timeout [ 758.675718][T30635] netlink: 'syz.1.6647': attribute type 18 has an invalid length. [ 758.896969][T30646] xt_nfacct: accounting object `syz0' does not exist [ 758.934933][T30651] xt_nfacct: accounting object `syz0' does not exist [ 758.946451][T30642] lo speed is unknown, defaulting to 1000 [ 759.156447][T30659] macsec1: entered promiscuous mode [ 759.162592][T30659] dummy0: entered promiscuous mode [ 759.169308][T30659] macsec1: entered allmulticast mode [ 759.174738][T30659] dummy0: entered allmulticast mode [ 759.216658][T30659] dummy0: left allmulticast mode [ 759.221686][T30659] dummy0: left promiscuous mode [ 759.427710][T30672] netlink: 'syz.2.6657': attribute type 1 has an invalid length. [ 759.461065][T30672] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 759.525577][T30642] wg1 speed is unknown, defaulting to 1000 [ 759.847591][ T5894] IPVS: starting estimator thread 0... [ 759.960876][T30702] IPVS: using max 32 ests per chain, 76800 per kthread [ 760.262085][T30721] lo speed is unknown, defaulting to 1000 [ 760.320531][T30725] team0: entered promiscuous mode [ 760.325900][T30725] team_slave_0: entered promiscuous mode [ 760.331797][T30725] team_slave_1: entered promiscuous mode [ 760.363513][T30725] batadv_slave_1: entered promiscuous mode [ 760.436730][T30722] batadv_slave_1: left promiscuous mode [ 760.442476][T30722] team0: left promiscuous mode [ 760.468965][T30722] team_slave_0: left promiscuous mode [ 760.480629][T30722] team_slave_1: left promiscuous mode [ 760.620305][T30721] wg1 speed is unknown, defaulting to 1000 [ 760.624973][T30735] __nla_validate_parse: 143 callbacks suppressed [ 760.624993][T30735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6677'. [ 760.653839][T30737] FAULT_INJECTION: forcing a failure. [ 760.653839][T30737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.660532][T30735] vlan2: entered promiscuous mode [ 760.669303][T30737] CPU: 1 UID: 0 PID: 30737 Comm: syz.6.6676 Not tainted syzkaller #0 PREEMPT(full) [ 760.669328][T30737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 760.669340][T30737] Call Trace: [ 760.669347][T30737] [ 760.669355][T30737] dump_stack_lvl+0xe8/0x150 [ 760.669386][T30737] should_fail_ex+0x412/0x560 [ 760.669410][T30737] _copy_to_user+0x31/0xb0 [ 760.669436][T30737] simple_read_from_buffer+0xe1/0x170 [ 760.669459][T30737] proc_fail_nth_read+0x1bb/0x230 [ 760.669484][T30737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.669509][T30737] ? rw_verify_area+0x2a6/0x4d0 [ 760.669531][T30737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.669554][T30737] vfs_read+0x20c/0xa70 [ 760.669577][T30737] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 760.669602][T30737] ? __pfx_vfs_read+0x10/0x10 [ 760.669630][T30737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 760.669658][T30737] ? __pfx_aa_sk_perm+0x10/0x10 [ 760.669686][T30737] ksys_read+0x150/0x270 [ 760.669709][T30737] ? __pfx_ksys_read+0x10/0x10 [ 760.669740][T30737] do_syscall_64+0xe2/0xf80 [ 760.669761][T30737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.669777][T30737] ? trace_irq_disable+0x37/0x100 [ 760.669793][T30737] ? clear_bhb_loop+0x60/0xb0 [ 760.669812][T30737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.669829][T30737] RIP: 0033:0x7feeccb5b78e [ 760.669845][T30737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 760.669859][T30737] RSP: 002b:00007feecda7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.669877][T30737] RAX: ffffffffffffffda RBX: 00007feecda7b6c0 RCX: 00007feeccb5b78e [ 760.669890][T30737] RDX: 000000000000000f RSI: 00007feecda7b0a0 RDI: 0000000000000005 [ 760.669900][T30737] RBP: 00007feecda7b090 R08: 0000000000000000 R09: 0000000000000000 [ 760.669910][T30737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.669921][T30737] R13: 00007feecce16038 R14: 00007feecce15fa0 R15: 00007ffff0109c18 [ 760.669950][T30737] [ 761.174758][T30754] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6684'. [ 761.287889][T30761] netlink: 280 bytes leftover after parsing attributes in process `syz.6.6687'. [ 761.484076][T30769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'. [ 761.560455][T30773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6691'. [ 761.597592][T30773] sch_tbf: peakrate 9 is lower than or equals to rate 8632581028402788065 ! [ 761.641868][T30771] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6690'. [ 761.691281][T30771] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6690'. [ 761.787002][T30783] lo speed is unknown, defaulting to 1000 [ 761.818734][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6693'. [ 761.897933][T30797] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6697'. [ 762.096420][T30783] wg1 speed is unknown, defaulting to 1000 [ 762.304823][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6705'. [ 762.384113][T30819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.391408][T30819] IPv6: NLM_F_CREATE should be set when creating new route [ 762.407178][T30815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.414603][T30815] IPv6: NLM_F_CREATE should be set when creating new route [ 762.759346][T30827] vlan2: entered promiscuous mode [ 762.775927][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 762.783960][ C1] lec:lec_tx_timeout: lec0 [ 763.072050][T30840] netlink: 'syz.4.6711': attribute type 15 has an invalid length. [ 763.314771][T30851] lo speed is unknown, defaulting to 1000 [ 763.329296][T30852] lo speed is unknown, defaulting to 1000 [ 763.427108][T30868] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 763.528843][T30873] bond2: option broadcast_neighbor: invalid value (30) [ 763.550137][T30873] bond2 (unregistering): Released all slaves [ 763.658991][T30868] bond1: Unable to set down delay as MII monitoring is disabled [ 763.685648][T30881] netlink: set zone limit has 4 unknown bytes [ 763.718033][T30868] bond1 (unregistering): Released all slaves [ 763.831063][T30878] lo speed is unknown, defaulting to 1000 [ 763.846407][T30851] wg1 speed is unknown, defaulting to 1000 [ 764.006669][T30893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.052395][T30893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 764.223456][T30852] wg1 speed is unknown, defaulting to 1000 [ 764.987528][T30932] FAULT_INJECTION: forcing a failure. [ 764.987528][T30932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.023793][T30932] CPU: 1 UID: 0 PID: 30932 Comm: syz.4.6729 Not tainted syzkaller #0 PREEMPT(full) [ 765.023819][T30932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 765.023830][T30932] Call Trace: [ 765.023838][T30932] [ 765.023846][T30932] dump_stack_lvl+0xe8/0x150 [ 765.023874][T30932] should_fail_ex+0x412/0x560 [ 765.023900][T30932] _copy_from_user+0x2d/0xb0 [ 765.023923][T30932] do_arpt_set_ctl+0x6cd/0x1050 [ 765.023950][T30932] ? __mutex_trylock_common+0x158/0x260 [ 765.023972][T30932] ? __pfx___mutex_trylock_common+0x10/0x10 [ 765.023991][T30932] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 765.024013][T30932] ? rcu_is_watching+0x15/0xb0 [ 765.024031][T30932] ? trace_contention_end+0x39/0x100 [ 765.024065][T30932] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 765.024090][T30932] ? __pfx___mutex_lock+0x10/0x10 [ 765.024111][T30932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 765.024140][T30932] ? __pfx_aa_sk_perm+0x10/0x10 [ 765.024165][T30932] nf_setsockopt+0x26f/0x290 [ 765.024190][T30932] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 765.024211][T30932] do_sock_setsockopt+0x17c/0x1b0 [ 765.024238][T30932] __x64_sys_setsockopt+0x13d/0x1b0 [ 765.024264][T30932] do_syscall_64+0xe2/0xf80 [ 765.024284][T30932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.024300][T30932] ? trace_irq_disable+0x37/0x100 [ 765.024317][T30932] ? clear_bhb_loop+0x60/0xb0 [ 765.024338][T30932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.024355][T30932] RIP: 0033:0x7ff01a59aeb9 [ 765.024371][T30932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.024385][T30932] RSP: 002b:00007ff01b510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 765.024405][T30932] RAX: ffffffffffffffda RBX: 00007ff01a815fa0 RCX: 00007ff01a59aeb9 [ 765.024418][T30932] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 765.024429][T30932] RBP: 00007ff01b510090 R08: 0000000000000408 R09: 0000000000000000 [ 765.024441][T30932] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.024452][T30932] R13: 00007ff01a816038 R14: 00007ff01a815fa0 R15: 00007ffe14ce9a68 [ 765.024481][T30932] [ 765.036354][T30878] wg1 speed is unknown, defaulting to 1000 [ 765.529253][T30946] xt_hashlimit: max too large, truncated to 1048576 [ 765.540162][T30946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.674144][T30952] __nla_validate_parse: 8 callbacks suppressed [ 765.674163][T30952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6737'. [ 765.689923][T30950] tipc: Enabling of bearer rejected, media not registered [ 765.717261][T30950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6736'. [ 765.734040][T30950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6736'. [ 765.882917][T30957] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6739'. [ 766.081812][T30965] lo speed is unknown, defaulting to 1000 [ 766.098985][T30970] xt_bpf: check failed: parse error [ 766.103254][T30967] FAULT_INJECTION: forcing a failure. [ 766.103254][T30967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.123581][T30967] CPU: 0 UID: 0 PID: 30967 Comm: syz.2.6743 Not tainted syzkaller #0 PREEMPT(full) [ 766.123605][T30967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 766.123616][T30967] Call Trace: [ 766.123624][T30967] [ 766.123632][T30967] dump_stack_lvl+0xe8/0x150 [ 766.123658][T30967] should_fail_ex+0x412/0x560 [ 766.123683][T30967] _copy_to_user+0x31/0xb0 [ 766.123707][T30967] simple_read_from_buffer+0xe1/0x170 [ 766.123730][T30967] proc_fail_nth_read+0x1bb/0x230 [ 766.123755][T30967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 766.123781][T30967] ? rw_verify_area+0x2a6/0x4d0 [ 766.123803][T30967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 766.123826][T30967] vfs_read+0x20c/0xa70 [ 766.123851][T30967] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 766.123875][T30967] ? __pfx_vfs_read+0x10/0x10 [ 766.123897][T30967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 766.123925][T30967] ? __pfx_aa_sk_perm+0x10/0x10 [ 766.123954][T30967] ksys_read+0x150/0x270 [ 766.123977][T30967] ? __pfx_ksys_read+0x10/0x10 [ 766.124010][T30967] do_syscall_64+0xe2/0xf80 [ 766.124031][T30967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.124047][T30967] ? trace_irq_disable+0x37/0x100 [ 766.124064][T30967] ? clear_bhb_loop+0x60/0xb0 [ 766.124084][T30967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.124101][T30967] RIP: 0033:0x7fd423f5b78e [ 766.124118][T30967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 766.124133][T30967] RSP: 002b:00007fd424e12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 766.124152][T30967] RAX: ffffffffffffffda RBX: 00007fd424e136c0 RCX: 00007fd423f5b78e [ 766.124166][T30967] RDX: 000000000000000f RSI: 00007fd424e130a0 RDI: 0000000000000005 [ 766.124177][T30967] RBP: 00007fd424e13090 R08: 0000000000000000 R09: 0000000000000000 [ 766.124188][T30967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.124199][T30967] R13: 00007fd424216038 R14: 00007fd424215fa0 R15: 00007ffd1d876468 [ 766.124229][T30967] [ 766.574192][T30988] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6748'. [ 766.599839][T30986] syzkaller0: entered promiscuous mode [ 766.605344][T30986] syzkaller0: entered allmulticast mode [ 766.699393][T30986] tipc: Enabled bearer , priority 0 [ 766.742637][T30992] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6749'. [ 766.757469][T30982] tipc: Resetting bearer [ 766.793259][T30982] tipc: Disabling bearer [ 766.860720][T30992] veth0_macvtap: left promiscuous mode [ 766.879622][T30965] wg1 speed is unknown, defaulting to 1000 [ 767.045889][T31014] xt_bpf: check failed: parse error [ 767.158401][T31020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6758'. [ 767.291897][T31021] lo speed is unknown, defaulting to 1000 [ 767.501277][T31025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6760'. [ 767.531952][T31021] wg1 speed is unknown, defaulting to 1000 [ 767.754744][T31036] xt_policy: output policy not valid in PREROUTING and INPUT [ 767.911022][T31047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6763'. [ 767.984898][T31043] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.992638][T31043] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.162276][T31043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.181646][T31043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.383280][T17682] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.410794][T17682] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.426056][T17682] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.497496][T17682] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.587275][T31076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6774'. [ 768.657180][T31076] vlan2: entered promiscuous mode [ 768.722628][T31080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.751378][T31081] netlink: 'syz.1.6776': attribute type 1 has an invalid length. [ 768.767610][T31081] netlink: 'syz.1.6776': attribute type 11 has an invalid length. [ 768.792857][T31080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.800456][T31087] xt_bpf: check failed: parse error [ 768.802137][T31080] bond0: (slave bond1): Enslaving as an active interface with an up link [ 768.874427][T31090] netlink: 'syz.4.6780': attribute type 31 has an invalid length. [ 769.071804][T31100] Cannot find del_set index 2 as target [ 769.111244][T17682] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.136304][T17682] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.261409][T17682] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.278010][T17682] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.722848][T31126] bond2 (unregistering): Released all slaves [ 770.196529][T31167] tipc: Failed to remove unknown binding: 66,1,1/0:1081033304/1081033306 [ 770.258459][T31167] tipc: Failed to remove unknown binding: 66,1,1/0:1081033304/1081033306 [ 770.296303][T31178] batadv0: entered promiscuous mode [ 770.324446][T31167] tipc: Failed to remove unknown binding: 66,1,1/0:1081033304/1081033306 [ 770.341251][T31178] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 770.439085][T31191] netlink: 'syz.6.6800': attribute type 1 has an invalid length. [ 770.496385][T31191] netlink: 'syz.6.6800': attribute type 11 has an invalid length. [ 770.994691][T31214] __nla_validate_parse: 18 callbacks suppressed [ 770.994710][T31214] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6806'. [ 771.021113][T31216] xt_bpf: check failed: parse error [ 771.262982][T31221] syzkaller0: entered promiscuous mode [ 771.273510][T31221] syzkaller0: entered allmulticast mode [ 771.282783][T31221] TC_ACT_REPEAT abuse ? [ 771.288349][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6809'. [ 771.357918][T31234] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6813'. [ 771.634122][T31253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6820'. [ 771.648915][T31253] bridge_slave_1: left allmulticast mode [ 771.654893][T31253] bridge_slave_1: left promiscuous mode [ 771.672438][T31255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6819'. [ 771.689214][T31253] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.699334][T31253] bridge_slave_0: left allmulticast mode [ 771.705055][T31253] bridge_slave_0: left promiscuous mode [ 771.712594][T31253] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.762022][T31266] netlink: 'syz.7.6821': attribute type 1 has an invalid length. [ 771.769926][T31266] netlink: 'syz.7.6821': attribute type 11 has an invalid length. [ 771.778069][T31266] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6821'. [ 772.380257][T31282] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6825'. [ 772.559896][T31286] netlink: 'syz.1.6827': attribute type 21 has an invalid length. [ 772.879050][T31305] netlink: 'syz.4.6834': attribute type 29 has an invalid length. [ 772.922574][T31305] netlink: 'syz.4.6834': attribute type 29 has an invalid length. [ 772.967688][T31305] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6834'. [ 772.979268][T31310] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6836'. [ 772.990489][T31308] syzkaller0: entered promiscuous mode [ 773.007801][T31308] syzkaller0: entered allmulticast mode [ 773.066872][T31308] tipc: Enabled bearer , priority 0 [ 773.083599][T31307] tipc: Resetting bearer [ 773.112800][T31307] tipc: Disabling bearer [ 773.314390][T31328] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 773.342854][T31332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6844'. [ 773.468050][T31341] xt_hashlimit: size too large, truncated to 1048576 [ 773.474771][T31341] xt_hashlimit: invalid interval [ 773.712584][T31364] syzkaller0: entered promiscuous mode [ 773.718301][T31364] syzkaller0: entered allmulticast mode [ 773.886026][T31359] tipc: Enabled bearer , priority 0 [ 773.904236][T31358] tipc: Resetting bearer [ 773.968004][T31358] tipc: Disabling bearer [ 774.275416][T31394] xt_TCPMSS: Only works on TCP SYN packets [ 774.547104][T31423] syzkaller0: entered promiscuous mode [ 774.552626][T31423] syzkaller0: entered allmulticast mode [ 774.747082][T31438] tipc: Enabled bearer , priority 0 [ 774.800573][T31415] tipc: Resetting bearer [ 774.862616][T31415] tipc: Disabling bearer [ 775.061875][T31459] xt_CONNSECMARK: invalid mode: 0 [ 775.410840][T31482] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 775.561447][T27748] wg1 speed is unknown, defaulting to 1000 [ 775.596143][T27748] syz: Port: 1 Link ACTIVE [ 776.033577][T31529] __nla_validate_parse: 11 callbacks suppressed [ 776.033596][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6897'. [ 776.214324][T31536] netlink: 'syz.4.6900': attribute type 5 has an invalid length. [ 776.301121][T31547] netlink: 'syz.7.6899': attribute type 1 has an invalid length. [ 776.319198][T31547] netlink: 'syz.7.6899': attribute type 11 has an invalid length. [ 776.344959][ T30] audit: type=1800 audit(1770229410.157:13): pid=31542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6901" name="memory.events" dev="tmpfs" ino=928 res=0 errno=0 [ 776.400969][T31547] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6899'. [ 776.520075][T31556] syzkaller0: entered promiscuous mode [ 776.564528][T31556] syzkaller0: entered allmulticast mode [ 777.193347][ T1096] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.225696][ T1096] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.234610][ T1096] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.236625][T31586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6908'. [ 777.274105][ T1096] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.284148][T31586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6908'. [ 777.310585][T31588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6909'. [ 777.521586][T31594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6910'. [ 777.622585][T31594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 777.642013][T31607] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 777.693066][T31607] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 777.762526][T31609] syzkaller0: entered promiscuous mode [ 777.775736][T31609] syzkaller0: entered allmulticast mode [ 777.840972][T31607] netlink: 'syz.6.6910': attribute type 1 has an invalid length. [ 777.871226][T31609] tipc: Started in network mode [ 777.884177][T31623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.915597][T31609] tipc: Node identity 0a9566a6d7bf, cluster identity 4711 [ 777.923060][T31609] tipc: Enabled bearer , priority 0 [ 777.954265][T31606] tipc: Resetting bearer [ 778.080367][T31606] tipc: Disabling bearer [ 778.224525][T31648] xt_bpf: check failed: parse error [ 778.225094][T31647] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6923'. [ 778.290234][T31643] netlink: 'syz.6.6922': attribute type 1 has an invalid length. [ 778.298555][T31643] netlink: 'syz.6.6922': attribute type 11 has an invalid length. [ 778.311689][T31643] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6922'. [ 778.336786][T31647] bond_slave_0: mtu greater than device maximum [ 778.769946][T31676] netlink: 'syz.4.6932': attribute type 83 has an invalid length. [ 779.201240][T31693] syzkaller0: entered promiscuous mode [ 779.216538][T31693] syzkaller0: entered allmulticast mode [ 779.726622][T31727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6944'. [ 779.764379][T31734] netlink: 'syz.7.6943': attribute type 1 has an invalid length. [ 779.791981][T31734] netlink: 'syz.7.6943': attribute type 11 has an invalid length. [ 779.804345][T31734] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6943'. [ 780.008773][T31750] netlink: 'syz.4.6948': attribute type 1 has an invalid length. [ 780.381986][T31769] : entered promiscuous mode [ 780.420116][T31766] lo speed is unknown, defaulting to 1000 [ 780.905715][T31766] wg1 speed is unknown, defaulting to 1000 [ 781.068041][T31793] __nla_validate_parse: 5 callbacks suppressed [ 781.068060][T31793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6960'. [ 781.217423][T31801] xt_HMARK: spi-set and port-set can't be combined [ 781.579830][T31812] validate_nla: 1 callbacks suppressed [ 781.579852][T31812] netlink: 'syz.6.6967': attribute type 25 has an invalid length. [ 781.594826][T31812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6967'. [ 781.660136][T31812] netlink: 'syz.6.6967': attribute type 25 has an invalid length. [ 781.673780][T31812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6967'. [ 781.766899][T31816] syzkaller0: entered promiscuous mode [ 781.777270][T31816] syzkaller0: entered allmulticast mode [ 781.788969][T31817] netlink: 'syz.6.6967': attribute type 3 has an invalid length. [ 781.842535][T31816] tipc: Enabled bearer , priority 0 [ 781.898575][T31815] tipc: Resetting bearer [ 781.931453][T31825] netlink: 'syz.4.6969': attribute type 1 has an invalid length. [ 781.939737][T31825] netlink: 'syz.4.6969': attribute type 11 has an invalid length. [ 781.950345][T31825] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6969'. [ 782.069514][T31815] tipc: Disabling bearer [ 782.390531][T31842] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 782.569898][T31857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.674613][T31867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6980'. [ 782.819265][T31876] lo speed is unknown, defaulting to 1000 [ 782.904174][T31879] syzkaller0: entered promiscuous mode [ 782.932940][T31879] syzkaller0: entered allmulticast mode [ 783.130496][T31876] wg1 speed is unknown, defaulting to 1000 [ 783.133420][T31893] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6989'. [ 783.496697][T31900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6991'. [ 783.509464][T31914] netlink: 'syz.2.6994': attribute type 1 has an invalid length. [ 783.526559][T31914] netlink: 'syz.2.6994': attribute type 11 has an invalid length. [ 783.552658][T31914] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6994'. [ 783.640946][T31898] team0: No ports can be present during mode change [ 783.837964][T31916] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6991'. [ 783.883943][T31924] lo speed is unknown, defaulting to 1000 [ 784.284775][T31938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.394070][T31940] syzkaller0: entered promiscuous mode [ 784.410397][T31940] syzkaller0: entered allmulticast mode [ 784.424396][T31924] wg1 speed is unknown, defaulting to 1000 [ 784.514752][T31940] tipc: Enabled bearer , priority 0 [ 784.540130][T31939] tipc: Resetting bearer [ 784.552822][T31950] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7007'. [ 784.657954][T31939] tipc: Disabling bearer [ 784.844356][T31955] syz_tun: entered promiscuous mode [ 784.850704][T31955] macvtap1: entered promiscuous mode [ 784.862166][T31967] sctp: [Deprecated]: syz.7.7012 (pid 31967) Use of int in max_burst socket option deprecated. [ 784.862166][T31967] Use struct sctp_assoc_value instead [ 784.889850][T31969] netlink: 'syz.1.7013': attribute type 11 has an invalid length. [ 784.936894][T31970] netlink: 'syz.1.7013': attribute type 11 has an invalid length. [ 785.018583][T27768] Bluetooth: hci3: command 0x0406 tx timeout [ 785.246368][T31983] vlan3: entered promiscuous mode [ 785.261892][T31982] netlink: 'syz.4.7016': attribute type 1 has an invalid length. [ 785.522825][T32001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.921044][T32020] lo speed is unknown, defaulting to 1000 [ 786.197940][T32020] wg1 speed is unknown, defaulting to 1000 [ 786.248692][T32036] x_tables: duplicate underflow at hook 1 [ 786.412863][T32040] __nla_validate_parse: 4 callbacks suppressed [ 786.412885][T32040] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7036'. [ 786.439977][T32043] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7038'. [ 786.513911][T32040] vlan2: entered promiscuous mode [ 786.710938][T32041] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7037'. [ 786.769148][T32058] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7037'. [ 786.780425][T32058] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7037'. [ 786.835940][T32053] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7037'. [ 786.845286][T32063] validate_nla: 2 callbacks suppressed [ 786.845303][T32063] netlink: 'syz.1.7044': attribute type 1 has an invalid length. [ 786.860453][T32053] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7037'. [ 786.870686][T32063] netlink: 'syz.1.7044': attribute type 11 has an invalid length. [ 786.883432][T32063] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7044'. [ 786.997238][T32071] netlink: 'syz.4.7047': attribute type 1 has an invalid length. [ 787.137386][T32071] bond2: entered promiscuous mode [ 787.177452][T32071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 787.252275][T32071] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 787.296236][T32071] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 787.325889][T32071] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 787.352542][T32093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7051'. [ 787.405257][T32078] bond2: (slave bridge1): making interface the new active one [ 787.415080][T32078] bridge1: entered promiscuous mode [ 787.438261][T32078] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 787.616667][T32104] sctp: [Deprecated]: syz.6.7052 (pid 32104) Use of int in max_burst socket option deprecated. [ 787.616667][T32104] Use struct sctp_assoc_value instead [ 787.916450][T32123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.387450][T29274] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 788.421183][T32174] netlink: 'syz.4.7073': attribute type 61 has an invalid length. [ 789.030556][T32215] siw: device registration error -23 [ 789.039682][T32204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7083'. [ 789.134826][T32225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.266298][T32227] siw: device registration error -23 [ 789.303059][T32229] netlink: 'syz.1.7093': attribute type 1 has an invalid length. [ 789.409307][T32237] veth0_to_team: entered promiscuous mode [ 789.455632][T32237] veth0_to_team: left promiscuous mode [ 789.533605][T32243] veth0_to_team: entered promiscuous mode [ 789.585617][T32243] veth0_to_team: left promiscuous mode [ 789.660213][T32252] dvmrp0: entered allmulticast mode [ 789.894828][T32273] vlan2: entered promiscuous mode [ 789.934648][T32276] netlink: 'syz.2.7107': attribute type 1 has an invalid length. [ 789.949088][T32277] FAULT_INJECTION: forcing a failure. [ 789.949088][T32277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.980040][T32277] CPU: 0 UID: 0 PID: 32277 Comm: syz.6.7106 Not tainted syzkaller #0 PREEMPT(full) [ 789.980072][T32277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 789.980082][T32277] Call Trace: [ 789.980090][T32277] [ 789.980097][T32277] dump_stack_lvl+0xe8/0x150 [ 789.980123][T32277] should_fail_ex+0x412/0x560 [ 789.980147][T32277] _copy_to_user+0x31/0xb0 [ 789.980169][T32277] simple_read_from_buffer+0xe1/0x170 [ 789.980191][T32277] proc_fail_nth_read+0x1bb/0x230 [ 789.980212][T32277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.980233][T32277] ? rw_verify_area+0x2a6/0x4d0 [ 789.980252][T32277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.980275][T32277] vfs_read+0x20c/0xa70 [ 789.980299][T32277] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 789.980325][T32277] ? __pfx_vfs_read+0x10/0x10 [ 789.980346][T32277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 789.980374][T32277] ? __pfx_aa_sk_perm+0x10/0x10 [ 789.980399][T32277] ksys_read+0x150/0x270 [ 789.980421][T32277] ? __pfx_ksys_read+0x10/0x10 [ 789.980455][T32277] do_syscall_64+0xe2/0xf80 [ 789.980474][T32277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.980491][T32277] ? trace_irq_disable+0x37/0x100 [ 789.980507][T32277] ? clear_bhb_loop+0x60/0xb0 [ 789.980529][T32277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.980544][T32277] RIP: 0033:0x7feeccb5b78e [ 789.980559][T32277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 789.980571][T32277] RSP: 002b:00007feecda7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.980589][T32277] RAX: ffffffffffffffda RBX: 00007feecda7b6c0 RCX: 00007feeccb5b78e [ 789.980602][T32277] RDX: 000000000000000f RSI: 00007feecda7b0a0 RDI: 0000000000000005 [ 789.980613][T32277] RBP: 00007feecda7b090 R08: 0000000000000000 R09: 0000000000000000 [ 789.980623][T32277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.980632][T32277] R13: 00007feecce16038 R14: 00007feecce15fa0 R15: 00007ffff0109c18 [ 789.980659][T32277] [ 791.393176][T32361] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 791.423286][T32367] __nla_validate_parse: 10 callbacks suppressed [ 791.423326][T32367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7129'. [ 791.447314][T32361] bond2 (unregistering): Released all slaves [ 791.461215][T32367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7129'. [ 792.081278][T32370] syzkaller0: entered promiscuous mode [ 792.088005][T32370] syzkaller0: entered allmulticast mode [ 793.753789][T32319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.974570][T32385] xt_bpf: check failed: parse error [ 794.011195][T32387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7134'. [ 794.075740][T32387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7134'. [ 794.136153][T32399] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7139'. [ 794.145228][T32399] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7139'. [ 794.400981][T32417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7144'. [ 794.438788][T32417] vlan2: entered promiscuous mode [ 794.791394][T32431] xt_hashlimit: size too large, truncated to 1048576 [ 794.836850][T32433] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7150'. [ 795.197988][T32454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7159'. [ 795.234485][T32454] vlan2: entered promiscuous mode [ 795.327266][T32459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7161'. [ 795.366959][T32459] netlink: 'syz.7.7161': attribute type 2 has an invalid length. [ 795.386526][T32459] bridge_slave_1: left allmulticast mode [ 795.392213][T32459] bridge_slave_1: left promiscuous mode [ 795.406682][T32459] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.424810][T32459] bridge_slave_0: left allmulticast mode [ 795.435573][T32459] bridge_slave_0: left promiscuous mode [ 795.444974][T32459] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.699268][T32469] syzkaller0: entered promiscuous mode [ 795.704821][T32469] syzkaller0: entered allmulticast mode [ 795.744338][T32475] pim6reg1: entered allmulticast mode [ 796.194227][T32506] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 797.649414][T32509] __nla_validate_parse: 3 callbacks suppressed [ 797.649434][T32509] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7174'. [ 798.110841][T32546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7186'. [ 798.215250][T32546] hsr_slave_0: left promiscuous mode [ 798.223129][T32546] hsr_slave_1: left promiscuous mode [ 798.718402][T32583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7199'. [ 798.774751][T32588] xt_bpf: check failed: parse error [ 798.780438][T32590] netlink: 'syz.4.7203': attribute type 2 has an invalid length. [ 798.796355][T32590] Cannot find set identified by id 3 to match [ 798.890494][T32596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7206'. [ 799.033225][T32604] netlink: 'syz.4.7212': attribute type 1 has an invalid length. [ 799.041179][T32604] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7212'. [ 799.065371][ T5879] IPVS: starting estimator thread 0... [ 799.080234][T32607] openvswitch: netlink: Multiple metadata blocks provided [ 799.107335][T32607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7211'. [ 799.158046][T32609] IPVS: using max 36 ests per chain, 86400 per kthread [ 799.280411][ T5879] wg1 speed is unknown, defaulting to 1000 [ 799.287404][ T5879] syz: Port: 1 Link DOWN [ 799.484178][T32634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7224'. [ 799.511721][T32634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7224'. [ 799.589911][T32643] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 799.620976][T32643] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 799.714701][T32652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7227'. [ 799.744688][T32652] netlink: 'syz.2.7227': attribute type 1 has an invalid length. [ 799.830018][T32658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7227'. [ 799.869245][T32658] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 800.129241][T32672] netlink: 'syz.1.7233': attribute type 23 has an invalid length. [ 800.165224][T32673] vlan2: entered promiscuous mode [ 800.384905][T32682] lo speed is unknown, defaulting to 1000 [ 800.875836][T32715] bond2 (unregistering): Released all slaves [ 800.992517][T32682] wg1 speed is unknown, defaulting to 1000 [ 801.340331][T32749] geneve2: entered promiscuous mode [ 801.363096][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.381991][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.405151][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.435311][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.528328][T32749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.545269][T32682] netlink: 'syz.7.7238': attribute type 6 has an invalid length. [ 801.664012][T32749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.802319][T32749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.971641][T32749] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.029048][ T315] sctp: [Deprecated]: syz.6.7267 (pid 315) Use of int in max_burst socket option deprecated. [ 802.029048][ T315] Use struct sctp_assoc_value instead [ 802.244381][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.374240][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.559297][T11302] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.610850][T11302] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.661378][ T340] syzkaller0: entered promiscuous mode [ 802.670557][ T340] syzkaller0: entered allmulticast mode [ 802.709715][ T340] tipc: Enabled bearer , priority 0 [ 802.735987][ T339] tipc: Resetting bearer [ 802.757957][ T339] tipc: Disabling bearer [ 802.772453][ T354] netlink: 'syz.6.7280': attribute type 4 has an invalid length. [ 802.781164][ T353] netlink: 'syz.1.7281': attribute type 21 has an invalid length. [ 803.015020][ T366] __nla_validate_parse: 10 callbacks suppressed [ 803.015039][ T366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7283'. [ 803.336986][ T375] netlink: 'syz.6.7286': attribute type 10 has an invalid length. [ 803.375641][ T375] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7286'. [ 804.153723][ T422] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7303'. [ 804.207621][ T426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7304'. [ 804.258348][ T422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.281656][ T422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.308151][ T422] bond0 (unregistering): Released all slaves [ 804.351813][ T426] vlan2: entered promiscuous mode [ 804.608344][ T446] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7313'. [ 804.671243][ T428] lo speed is unknown, defaulting to 1000 [ 804.753242][ T455] FAULT_INJECTION: forcing a failure. [ 804.753242][ T455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.784158][ T458] bond2: left promiscuous mode [ 804.814522][ T455] CPU: 1 UID: 0 PID: 455 Comm: syz.1.7314 Not tainted syzkaller #0 PREEMPT(full) [ 804.814548][ T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 804.814558][ T455] Call Trace: [ 804.814565][ T455] [ 804.814572][ T455] dump_stack_lvl+0xe8/0x150 [ 804.814599][ T455] should_fail_ex+0x412/0x560 [ 804.814625][ T455] _copy_from_user+0x2d/0xb0 [ 804.814648][ T455] __sys_bpf+0x229/0x920 [ 804.814668][ T455] ? __pfx___sys_bpf+0x10/0x10 [ 804.814699][ T455] ? ksys_write+0x242/0x270 [ 804.814724][ T455] ? __pfx_ksys_write+0x10/0x10 [ 804.814752][ T455] __x64_sys_bpf+0x7c/0x90 [ 804.814787][ T455] do_syscall_64+0xe2/0xf80 [ 804.814809][ T455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.814825][ T455] ? trace_irq_disable+0x37/0x100 [ 804.814841][ T455] ? clear_bhb_loop+0x60/0xb0 [ 804.814862][ T455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.814879][ T455] RIP: 0033:0x7fed0539aeb9 [ 804.814895][ T455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.814910][ T455] RSP: 002b:00007fed06226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 804.814929][ T455] RAX: ffffffffffffffda RBX: 00007fed05615fa0 RCX: 00007fed0539aeb9 [ 804.814942][ T455] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 804.814953][ T455] RBP: 00007fed06226090 R08: 0000000000000000 R09: 0000000000000000 [ 804.814963][ T455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.814974][ T455] R13: 00007fed05616038 R14: 00007fed05615fa0 R15: 00007fff11c89fc8 [ 804.815003][ T455] [ 804.981150][ T458] bridge1: left promiscuous mode [ 805.173377][ T458] geneve2: left promiscuous mode [ 805.189426][ T432] lo speed is unknown, defaulting to 1000 [ 805.206904][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.215377][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.266949][ T467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7319'. [ 805.282183][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.295693][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.475441][ T486] tipc: Enabling of bearer rejected, failed to enable media [ 805.713516][ T428] wg1 speed is unknown, defaulting to 1000 [ 806.204324][ T432] wg1 speed is unknown, defaulting to 1000 [ 806.233523][ T524] sctp: [Deprecated]: syz.1.7333 (pid 524) Use of int in max_burst socket option deprecated. [ 806.233523][ T524] Use struct sctp_assoc_value instead [ 806.659476][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7338'. [ 806.739071][ T543] syzkaller0: entered promiscuous mode [ 806.744784][ T543] syzkaller0: entered allmulticast mode [ 806.971212][ T548] lo speed is unknown, defaulting to 1000 [ 807.074364][ T553] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7342'. [ 807.228020][ T559] netlink: 'syz.7.7345': attribute type 4 has an invalid length. [ 807.239466][ T559] netlink: 'syz.7.7345': attribute type 1 has an invalid length. [ 807.254597][ T559] netlink: 228 bytes leftover after parsing attributes in process `syz.7.7345'. [ 807.327236][ T561] lo speed is unknown, defaulting to 1000 [ 807.473980][ T572] sctp: [Deprecated]: syz.2.7347 (pid 572) Use of int in max_burst socket option deprecated. [ 807.473980][ T572] Use struct sctp_assoc_value instead [ 807.474339][ T548] wg1 speed is unknown, defaulting to 1000 [ 807.509705][ T573] openvswitch: netlink: IP tunnel dst address not specified [ 807.911245][ T561] wg1 speed is unknown, defaulting to 1000 [ 807.972780][ T592] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7355'. [ 808.235208][ T604] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7359'. [ 808.248112][ T604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7359'. [ 808.352224][ T608] sctp: [Deprecated]: syz.2.7361 (pid 608) Use of int in max_burst socket option deprecated. [ 808.352224][ T608] Use struct sctp_assoc_value instead [ 808.548868][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 808.738479][ T621] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7366'. [ 808.873096][ T625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7367'. [ 808.973981][ T625] vlan2: entered promiscuous mode [ 809.551742][ T645] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7372'. [ 809.561894][ T645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7372'. [ 809.595862][ T645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7372'. [ 809.639688][ T647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7377'. [ 809.684892][ T647] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7377'. [ 809.696675][ T653] bridge0: entered allmulticast mode [ 809.798310][ T659] bridge0: port 3(veth1_to_hsr) entered blocking state [ 809.817184][ T659] bridge0: port 3(veth1_to_hsr) entered disabled state [ 809.842383][ T659] veth1_to_hsr: entered allmulticast mode [ 809.855142][ T659] veth1_to_hsr: entered promiscuous mode [ 809.861576][ T659] bridge0: port 3(veth1_to_hsr) entered blocking state [ 809.868606][ T659] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 809.904146][ T665] syzkaller0: entered promiscuous mode [ 809.909922][ T665] syzkaller0: entered allmulticast mode [ 809.939214][ T667] tipc: Enabled bearer , priority 0 [ 809.946794][ T667] syzkaller0: entered promiscuous mode [ 809.952548][ T667] syzkaller0: entered allmulticast mode [ 809.959738][ T665] tipc: Enabled bearer , priority 0 [ 809.968655][ T664] tipc: Resetting bearer [ 809.998713][ T664] tipc: Disabling bearer [ 810.010152][ T666] tipc: Resetting bearer [ 810.034097][ T666] tipc: Disabling bearer [ 810.073019][ T671] netlink: 'syz.6.7384': attribute type 2 has an invalid length. [ 810.081431][ T671] netlink: 'syz.6.7384': attribute type 8 has an invalid length. [ 810.099714][ T671] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7384'. [ 810.247448][ T681] xt_bpf: check failed: parse error [ 810.324477][ T677] bridge0: port 3(veth1_to_hsr) entered disabled state [ 810.331662][ T677] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.339300][ T677] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.484140][ T677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.499440][ T677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.569553][ T677] veth0_vlan: left promiscuous mode [ 810.615787][T22275] Bluetooth: hci6: command 0x0405 tx timeout [ 810.678014][ T677] ip6gre1: left promiscuous mode [ 810.683061][ T677] ip6gre1: left allmulticast mode [ 810.703910][ T677] macvtap1: left promiscuous mode [ 810.734226][ T1096] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.786244][ T1096] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.827097][T11302] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.868642][T11302] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.904544][ T711] FAULT_INJECTION: forcing a failure. [ 810.904544][ T711] name failslab, interval 1, probability 0, space 0, times 0 [ 810.921299][T11302] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.944608][T11302] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.955740][ T711] CPU: 1 UID: 0 PID: 711 Comm: syz.2.7398 Not tainted syzkaller #0 PREEMPT(full) [ 810.955764][ T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 810.955775][ T711] Call Trace: [ 810.955783][ T711] [ 810.955791][ T711] dump_stack_lvl+0xe8/0x150 [ 810.955817][ T711] should_fail_ex+0x412/0x560 [ 810.955842][ T711] should_failslab+0xa8/0x100 [ 810.955863][ T711] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 810.955886][ T711] ? __alloc_skb+0x186/0x7d0 [ 810.955905][ T711] ? __alloc_skb+0x1d0/0x7d0 [ 810.955921][ T711] ? __local_bh_enable_ip+0xd0/0x130 [ 810.955941][ T711] __alloc_skb+0x1d0/0x7d0 [ 810.955965][ T711] netlink_sendmsg+0x5d4/0xb40 [ 810.955994][ T711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.956017][ T711] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.956040][ T711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.956060][ T711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.956078][ T711] ____sys_sendmsg+0xa68/0xad0 [ 810.956100][ T711] ? __might_fault+0xaf/0x130 [ 810.956129][ T711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.956159][ T711] ? import_iovec+0x73/0xa0 [ 810.956190][ T711] ___sys_sendmsg+0x2a5/0x360 [ 810.956211][ T711] ? __lock_acquire+0x6b5/0x2cf0 [ 810.956237][ T711] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.956299][ T711] ? __fget_files+0x2a/0x420 [ 810.956318][ T711] ? __fget_files+0x3a0/0x420 [ 810.956343][ T711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 810.956367][ T711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.956399][ T711] ? __pfx_ksys_write+0x10/0x10 [ 810.956432][ T711] do_syscall_64+0xe2/0xf80 [ 810.956452][ T711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.956469][ T711] ? trace_irq_disable+0x37/0x100 [ 810.956486][ T711] ? clear_bhb_loop+0x60/0xb0 [ 810.956506][ T711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.956522][ T711] RIP: 0033:0x7fd423f9aeb9 [ 810.956538][ T711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.956552][ T711] RSP: 002b:00007fd424e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.956572][ T711] RAX: ffffffffffffffda RBX: 00007fd424215fa0 RCX: 00007fd423f9aeb9 [ 810.956585][ T711] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 810.956596][ T711] RBP: 00007fd424e13090 R08: 0000000000000000 R09: 0000000000000000 [ 810.956606][ T711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.956617][ T711] R13: 00007fd424216038 R14: 00007fd424215fa0 R15: 00007ffd1d876468 [ 810.956647][ T711] [ 811.076869][T11302] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.360249][ T731] xt_bpf: check failed: parse error [ 811.373891][T11302] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.410572][ T702] syzkaller1: entered promiscuous mode [ 811.434683][ T702] syzkaller1: entered allmulticast mode [ 811.460540][ T726] lo speed is unknown, defaulting to 1000 [ 811.552596][ T740] lo speed is unknown, defaulting to 1000 [ 811.560614][ T741] lo speed is unknown, defaulting to 1000 [ 811.815897][T27768] Bluetooth: hci7: command 0x0405 tx timeout [ 811.981975][ T726] wg1 speed is unknown, defaulting to 1000 [ 812.576093][ T792] FAULT_INJECTION: forcing a failure. [ 812.576093][ T792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.635673][ T792] CPU: 0 UID: 0 PID: 792 Comm: syz.7.7412 Not tainted syzkaller #0 PREEMPT(full) [ 812.635698][ T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 812.635709][ T792] Call Trace: [ 812.635716][ T792] [ 812.635724][ T792] dump_stack_lvl+0xe8/0x150 [ 812.635754][ T792] should_fail_ex+0x412/0x560 [ 812.635779][ T792] _copy_from_iter+0x1d3/0x1670 [ 812.635810][ T792] ? rcu_is_watching+0x15/0xb0 [ 812.635828][ T792] ? __pfx__copy_from_iter+0x10/0x10 [ 812.635847][ T792] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 812.635878][ T792] ? netlink_sendmsg+0x650/0xb40 [ 812.635895][ T792] ? skb_put+0x11b/0x210 [ 812.635918][ T792] netlink_sendmsg+0x6c0/0xb40 [ 812.635945][ T792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.635967][ T792] ? aa_sock_msg_perm+0xf1/0x1b0 [ 812.635989][ T792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.636009][ T792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.636026][ T792] ____sys_sendmsg+0xa68/0xad0 [ 812.636047][ T792] ? __might_fault+0xaf/0x130 [ 812.636088][ T792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.636119][ T792] ? import_iovec+0x73/0xa0 [ 812.636144][ T792] ___sys_sendmsg+0x2a5/0x360 [ 812.636164][ T792] ? __lock_acquire+0x6b5/0x2cf0 [ 812.636190][ T792] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.636245][ T792] ? __fget_files+0x2a/0x420 [ 812.636262][ T792] ? __fget_files+0x3a0/0x420 [ 812.636289][ T792] __x64_sys_sendmsg+0x1bd/0x2a0 [ 812.636313][ T792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.636342][ T792] ? __pfx_ksys_write+0x10/0x10 [ 812.636377][ T792] do_syscall_64+0xe2/0xf80 [ 812.636398][ T792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.636415][ T792] ? trace_irq_disable+0x37/0x100 [ 812.636430][ T792] ? clear_bhb_loop+0x60/0xb0 [ 812.636451][ T792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.636467][ T792] RIP: 0033:0x7f6d34b9aeb9 [ 812.636483][ T792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.636497][ T792] RSP: 002b:00007f6d3599b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.636517][ T792] RAX: ffffffffffffffda RBX: 00007f6d34e16090 RCX: 00007f6d34b9aeb9 [ 812.636530][ T792] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 812.636541][ T792] RBP: 00007f6d3599b090 R08: 0000000000000000 R09: 0000000000000000 [ 812.636553][ T792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.636563][ T792] R13: 00007f6d34e16128 R14: 00007f6d34e16090 R15: 00007ffc4bbc89d8 [ 812.636593][ T792] [ 813.058416][ T740] wg1 speed is unknown, defaulting to 1000 [ 813.142382][ T741] wg1 speed is unknown, defaulting to 1000 [ 813.584931][ T817] __nla_validate_parse: 4 callbacks suppressed [ 813.584950][ T817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7415'. [ 813.611552][ T817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7415'. [ 813.657387][ T5832] block nbd6: Receive control failed (result -110) [ 813.735491][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.743555][ C1] lec:lec_tx_timeout: lec0 [ 814.008332][ T830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7418'. [ 814.021535][ T830] vlan2: entered promiscuous mode [ 815.331636][ T783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.353730][ T819] netlink: 'syz.1.7416': attribute type 1 has an invalid length. [ 815.632755][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7426'. [ 815.713205][ T861] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7426'. [ 815.734488][ T864] syzkaller0: entered promiscuous mode [ 815.750279][ T864] syzkaller0: entered allmulticast mode [ 815.776945][ T871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7430'. [ 815.793014][ T871] vlan2: entered promiscuous mode [ 815.861824][ T874] FAULT_INJECTION: forcing a failure. [ 815.861824][ T874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.884725][ T874] CPU: 0 UID: 0 PID: 874 Comm: syz.1.7432 Not tainted syzkaller #0 PREEMPT(full) [ 815.884749][ T874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 815.884759][ T874] Call Trace: [ 815.884766][ T874] [ 815.884773][ T874] dump_stack_lvl+0xe8/0x150 [ 815.884797][ T874] should_fail_ex+0x412/0x560 [ 815.884820][ T874] _copy_from_iter+0x1d3/0x1670 [ 815.884848][ T874] ? rcu_is_watching+0x15/0xb0 [ 815.884863][ T874] ? __pfx__copy_from_iter+0x10/0x10 [ 815.884879][ T874] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 815.884909][ T874] ? netlink_sendmsg+0x650/0xb40 [ 815.884925][ T874] ? skb_put+0x11b/0x210 [ 815.884946][ T874] netlink_sendmsg+0x6c0/0xb40 [ 815.884971][ T874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.884991][ T874] ? aa_sock_msg_perm+0xf1/0x1b0 [ 815.885010][ T874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 815.885027][ T874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.885043][ T874] ____sys_sendmsg+0xa68/0xad0 [ 815.885071][ T874] ? __might_fault+0xaf/0x130 [ 815.885097][ T874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.885124][ T874] ? import_iovec+0x73/0xa0 [ 815.885147][ T874] ___sys_sendmsg+0x2a5/0x360 [ 815.885165][ T874] ? __lock_acquire+0x6b5/0x2cf0 [ 815.885190][ T874] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.885240][ T874] ? __fget_files+0x2a/0x420 [ 815.885256][ T874] ? __fget_files+0x3a0/0x420 [ 815.885281][ T874] __x64_sys_sendmsg+0x1bd/0x2a0 [ 815.885303][ T874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.885331][ T874] ? __pfx_ksys_write+0x10/0x10 [ 815.885362][ T874] do_syscall_64+0xe2/0xf80 [ 815.885380][ T874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.885395][ T874] ? trace_irq_disable+0x37/0x100 [ 815.885410][ T874] ? clear_bhb_loop+0x60/0xb0 [ 815.885428][ T874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.885446][ T874] RIP: 0033:0x7fed0539aeb9 [ 815.885462][ T874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.885475][ T874] RSP: 002b:00007fed06226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.885493][ T874] RAX: ffffffffffffffda RBX: 00007fed05615fa0 RCX: 00007fed0539aeb9 [ 815.885505][ T874] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 815.885515][ T874] RBP: 00007fed06226090 R08: 0000000000000000 R09: 0000000000000000 [ 815.885525][ T874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.885535][ T874] R13: 00007fed05616038 R14: 00007fed05615fa0 R15: 00007fff11c89fc8 [ 815.885562][ T874] [ 816.167550][ T864] tipc: Enabled bearer , priority 0 [ 816.175770][ T862] tipc: Resetting bearer [ 816.222753][ T862] tipc: Disabling bearer [ 816.483868][ T898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7435'. [ 816.520479][ T900] lo speed is unknown, defaulting to 1000 [ 816.787348][ T900] wg1 speed is unknown, defaulting to 1000 [ 816.953925][ T929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7444'. [ 817.328973][ T941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7447'. [ 817.361924][ T941] vlan2: entered promiscuous mode [ 817.599511][ T946] syzkaller0: entered promiscuous mode [ 817.605113][ T946] syzkaller0: entered allmulticast mode [ 817.701765][ T946] tipc: Enabled bearer , priority 0 [ 817.757635][ T944] tipc: Resetting bearer [ 817.781805][ T944] tipc: Disabling bearer [ 817.864926][ T963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7455'. [ 817.920756][ T964] netlink: 'syz.2.7452': attribute type 1 has an invalid length. [ 818.021938][ T970] xt_hashlimit: size too large, truncated to 1048576 [ 818.080987][ T975] vlan2: entered promiscuous mode [ 818.086363][ T975] bridge0: entered promiscuous mode [ 818.140362][ T981] netlink: 'syz.6.7461': attribute type 18 has an invalid length. [ 818.644270][ T1002] syzkaller0: entered promiscuous mode [ 818.652721][ T1002] syzkaller0: entered allmulticast mode [ 818.691618][ T1002] tipc: Enabled bearer , priority 0 [ 818.736815][ T1001] tipc: Resetting bearer [ 818.798753][ T1001] tipc: Disabling bearer [ 818.906161][ T1008] netlink: 'syz.1.7469': attribute type 13 has an invalid length. [ 818.982873][ T1022] x_tables: ip_tables: ah match: only valid for protocol 51 [ 819.016272][ T1022] sctp: [Deprecated]: syz.7.7474 (pid 1022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 819.016272][ T1022] Use struct sctp_sack_info instead [ 819.045093][ T1020] tc_dump_action: action bad kind [ 819.080269][ T1008] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 819.088325][ T1033] sctp: [Deprecated]: syz.7.7474 (pid 1033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 819.088325][ T1033] Use struct sctp_sack_info instead [ 819.102858][ T1008] syzkaller0: entered promiscuous mode [ 819.110354][ T1008] syzkaller0: entered allmulticast mode [ 819.131928][ T1008] tipc: Enabled bearer , priority 0 [ 819.197727][ T1007] tipc: Resetting bearer [ 819.241447][ T1007] tipc: Disabling bearer [ 819.629862][ T1070] __nla_validate_parse: 8 callbacks suppressed [ 819.629875][ T1070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7482'. [ 819.650556][ T1070] vlan2: entered promiscuous mode [ 819.741946][ T1078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7484'. [ 819.758267][ T1078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7484'. [ 819.854793][ T1081] netlink: 'syz.6.7486': attribute type 3 has an invalid length. [ 820.331836][ T1109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7496'. [ 820.352395][ T1109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7496'. [ 820.361654][ T1110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7495'. [ 820.380350][ T1110] vlan2: entered promiscuous mode [ 820.572827][ T1117] sock: sock_timestamping_bind_phc: sock not bind to device [ 820.660684][ T1127] bridge_slave_1: left allmulticast mode [ 820.675844][ T1127] bridge_slave_1: left promiscuous mode [ 820.682911][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.818261][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7502'. [ 820.948547][ T1134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7502'. [ 821.111810][ T1141] netlink: 'syz.2.7504': attribute type 66 has an invalid length. [ 821.220294][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7507'. [ 821.235196][ T1143] 8021q: VLANs not supported on ip_vti0 [ 821.247838][ T1145] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7507'. [ 821.375012][T16764] lec:lec_start_xmit: lec0:No lecd attached [ 821.458357][ T1150] vlan2: entered promiscuous mode [ 821.809609][ T1179] syzkaller0: entered promiscuous mode [ 821.815271][ T1179] syzkaller0: entered allmulticast mode [ 821.839787][ T1179] tipc: Enabled bearer , priority 0 [ 821.848520][ T1178] tipc: Resetting bearer [ 821.866972][ T1178] tipc: Disabling bearer [ 822.070306][ T1186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.451141][ T1219] syzkaller0: entered promiscuous mode [ 822.456964][ T1219] syzkaller0: entered allmulticast mode [ 822.549649][ T1224] tipc: Enabled bearer , priority 0 [ 822.562928][ T1218] tipc: Resetting bearer [ 822.613303][ T1218] tipc: Disabling bearer [ 823.092525][ T1261] lo speed is unknown, defaulting to 1000 [ 823.387550][ T1273] vlan2: entered promiscuous mode [ 823.421571][ T1261] wg1 speed is unknown, defaulting to 1000 [ 823.660485][ T1282] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 823.684256][ T1286] vlan2: entered promiscuous mode [ 823.695697][ T1286] bridge0: entered promiscuous mode [ 823.910641][T25370] NFSD: Failed to start, no listeners configured. [ 824.104967][ T1304] syzkaller0: entered promiscuous mode [ 824.110683][ T1304] syzkaller0: entered allmulticast mode [ 824.138834][ T1306] xt_recent: Unsupported userspace flags (000000b1) [ 824.152185][ T1304] tipc: Enabled bearer , priority 0 [ 824.175656][ T1303] tipc: Resetting bearer [ 824.201092][ T1303] tipc: Disabling bearer [ 824.222786][ T1308] syzkaller0: entered promiscuous mode [ 824.228422][ T1308] syzkaller0: entered allmulticast mode [ 824.291362][ T1310] syzkaller0: entered promiscuous mode [ 824.298542][ T1310] syzkaller0: entered allmulticast mode [ 824.318635][ T1310] tipc: Enabled bearer , priority 0 [ 824.326666][ T1309] tipc: Resetting bearer [ 824.343927][ T1309] tipc: Disabling bearer [ 824.492295][ T1318] xt_bpf: check failed: parse error [ 824.656812][ T1327] __nla_validate_parse: 13 callbacks suppressed [ 824.656828][ T1327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7571'. [ 824.682458][ T1325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7570'. [ 824.701171][ T1325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7570'. [ 825.072738][ T1351] xt_bpf: check failed: parse error [ 825.156639][ T1358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7583'. [ 825.204746][ T1358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7583'. [ 825.323387][ T1369] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7587'. [ 825.343419][ T1371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7588'. [ 825.354272][ T1371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7588'. [ 825.376886][ T1372] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7587'. [ 826.695701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5320 ms [ 826.703773][ C1] lec:lec_tx_timeout: lec0 [ 827.149232][ T1388] xt_bpf: check failed: parse error [ 827.226404][ T1390] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7594'. [ 827.474977][ T1412] vlan3: entered promiscuous mode [ 827.591348][ T1426] openvswitch: netlink: Flow key attribute not present in set flow. [ 827.608954][ T1425] openvswitch: netlink: Flow key attribute not present in set flow. [ 827.619931][ T1428] xt_bpf: check failed: parse error [ 827.701454][ T1433] team0: entered promiscuous mode [ 827.708632][ T1433] team_slave_0: entered promiscuous mode [ 827.714465][ T1433] team_slave_1: entered promiscuous mode [ 827.720991][ T1433] team0: entered allmulticast mode [ 827.726362][ T1433] team_slave_0: entered allmulticast mode [ 827.732113][ T1433] team_slave_1: entered allmulticast mode [ 827.739453][ T1433] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.891815][ T1446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.998519][ T1450] ipt_REJECT: ECHOREPLY no longer supported. [ 828.410692][ T1468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.533557][ T1432] delete_channel: no stack [ 830.813413][ T1440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.102486][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 831.213682][ T1497] netlink: 'syz.2.7633': attribute type 10 has an invalid length. [ 831.301859][ T1499] __nla_validate_parse: 11 callbacks suppressed [ 831.301871][ T1499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7634'. [ 831.515219][ T1499] vlan2: entered promiscuous mode [ 831.530264][ T1508] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7635'. [ 831.568854][ T1500] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 831.585826][ T1506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7635'. [ 831.758442][ T1520] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7639'. [ 832.048704][ T1536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7645'. [ 832.061756][ T1536] openvswitch: netlink: Flow actions attr not present in new flow. [ 833.558193][ T1520] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7639'. [ 834.388561][ T1598] netlink: 'syz.6.7664': attribute type 89 has an invalid length. [ 834.436313][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7664'. [ 834.461818][ T1598] bridge0: entered promiscuous mode [ 834.472070][ T1598] bridge0: left promiscuous mode [ 834.513758][ T1607] x_tables: duplicate underflow at hook 2 [ 834.803066][ T1615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7669'. [ 834.853704][ T1612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7669'. [ 834.951923][ T1626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7674'. [ 835.331783][ T1629] FAULT_INJECTION: forcing a failure. [ 835.331783][ T1629] name failslab, interval 1, probability 0, space 0, times 0 [ 835.344646][ T1629] CPU: 0 UID: 0 PID: 1629 Comm: syz.7.7675 Not tainted syzkaller #0 PREEMPT(full) [ 835.344668][ T1629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 835.344679][ T1629] Call Trace: [ 835.344687][ T1629] [ 835.344695][ T1629] dump_stack_lvl+0xe8/0x150 [ 835.344720][ T1629] should_fail_ex+0x412/0x560 [ 835.344742][ T1629] should_failslab+0xa8/0x100 [ 835.344762][ T1629] __kmalloc_cache_node_noprof+0x87/0x6d0 [ 835.344780][ T1629] ? page_pool_create_percpu+0x76/0xb80 [ 835.344807][ T1629] page_pool_create_percpu+0x76/0xb80 [ 835.344829][ T1629] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 835.344853][ T1629] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 835.344877][ T1629] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 835.344908][ T1629] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 835.344928][ T1629] ? __pfx_autoremove_wake_function+0x10/0x10 [ 835.344950][ T1629] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 835.344987][ T1629] ? 0xffffffffa020168c [ 835.345000][ T1629] ? 0xffffffffa0201a54 [ 835.345013][ T1629] ? 0xffffffffa02028cc [ 835.345049][ T1629] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 835.345077][ T1629] ? _copy_from_user+0x94/0xb0 [ 835.345099][ T1629] ? bpf_test_init+0x113/0x150 [ 835.345114][ T1629] ? xdp_convert_md_to_buff+0x5b/0x330 [ 835.345134][ T1629] bpf_prog_test_run_xdp+0x81c/0x1160 [ 835.345179][ T1629] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 835.345201][ T1629] ? __fget_files+0x2a/0x420 [ 835.345224][ T1629] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 835.345242][ T1629] bpf_prog_test_run+0x2c7/0x340 [ 835.345262][ T1629] __sys_bpf+0x5cb/0x920 [ 835.345280][ T1629] ? __pfx___sys_bpf+0x10/0x10 [ 835.345308][ T1629] ? ksys_write+0x242/0x270 [ 835.345330][ T1629] ? __pfx_ksys_write+0x10/0x10 [ 835.345356][ T1629] __x64_sys_bpf+0x7c/0x90 [ 835.345378][ T1629] do_syscall_64+0xe2/0xf80 [ 835.345397][ T1629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.345412][ T1629] ? trace_irq_disable+0x37/0x100 [ 835.345426][ T1629] ? clear_bhb_loop+0x60/0xb0 [ 835.345447][ T1629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.345462][ T1629] RIP: 0033:0x7f6d34b9aeb9 [ 835.345476][ T1629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.345489][ T1629] RSP: 002b:00007f6d359bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 835.345507][ T1629] RAX: ffffffffffffffda RBX: 00007f6d34e15fa0 RCX: 00007f6d34b9aeb9 [ 835.345518][ T1629] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 835.345528][ T1629] RBP: 00007f6d359bc090 R08: 0000000000000000 R09: 0000000000000000 [ 835.345538][ T1629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.345547][ T1629] R13: 00007f6d34e16038 R14: 00007f6d34e15fa0 R15: 00007ffc4bbc89d8 [ 835.345574][ T1629] [ 836.725268][ T1626] vlan2: entered promiscuous mode [ 836.791391][T10776] IPVS: starting estimator thread 0... [ 836.885604][ T1634] IPVS: using max 29 ests per chain, 69600 per kthread [ 837.041687][ T1653] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7685'. [ 838.040163][ T1663] FAULT_INJECTION: forcing a failure. [ 838.040163][ T1663] name failslab, interval 1, probability 0, space 0, times 0 [ 838.057442][ T1663] CPU: 0 UID: 0 PID: 1663 Comm: syz.7.7686 Not tainted syzkaller #0 PREEMPT(full) [ 838.057467][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 838.057478][ T1663] Call Trace: [ 838.057485][ T1663] [ 838.057494][ T1663] dump_stack_lvl+0xe8/0x150 [ 838.057519][ T1663] should_fail_ex+0x412/0x560 [ 838.057545][ T1663] should_failslab+0xa8/0x100 [ 838.057566][ T1663] __kvmalloc_node_noprof+0x166/0x8d0 [ 838.057587][ T1663] ? page_pool_create_percpu+0x2dd/0xb80 [ 838.057609][ T1663] ? page_pool_create_percpu+0xaf/0xb80 [ 838.057637][ T1663] page_pool_create_percpu+0x2dd/0xb80 [ 838.057668][ T1663] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 838.057690][ T1663] ? preempt_schedule_common+0x82/0xd0 [ 838.057724][ T1663] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 838.057746][ T1663] ? __pfx_autoremove_wake_function+0x10/0x10 [ 838.057770][ T1663] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 838.057810][ T1663] ? 0xffffffffa0201690 [ 838.057825][ T1663] ? 0xffffffffa0201a54 [ 838.057839][ T1663] ? 0xffffffffa020285c [ 838.057853][ T1663] ? 0xffffffffa0202890 [ 838.057866][ T1663] ? 0xffffffffa02028cc [ 838.057902][ T1663] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 838.057932][ T1663] ? _copy_from_user+0x94/0xb0 [ 838.057954][ T1663] ? bpf_test_init+0x113/0x150 [ 838.057970][ T1663] ? xdp_convert_md_to_buff+0x5b/0x330 [ 838.057991][ T1663] bpf_prog_test_run_xdp+0x81c/0x1160 [ 838.058026][ T1663] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 838.058052][ T1663] ? __fget_files+0x2a/0x420 [ 838.058076][ T1663] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 838.058097][ T1663] bpf_prog_test_run+0x2c7/0x340 [ 838.058119][ T1663] __sys_bpf+0x5cb/0x920 [ 838.058139][ T1663] ? __pfx___sys_bpf+0x10/0x10 [ 838.058178][ T1663] ? ksys_write+0x242/0x270 [ 838.058204][ T1663] ? __pfx_ksys_write+0x10/0x10 [ 838.058233][ T1663] __x64_sys_bpf+0x7c/0x90 [ 838.058257][ T1663] do_syscall_64+0xe2/0xf80 [ 838.058278][ T1663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.058294][ T1663] ? trace_irq_disable+0x37/0x100 [ 838.058310][ T1663] ? clear_bhb_loop+0x60/0xb0 [ 838.058331][ T1663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.058348][ T1663] RIP: 0033:0x7f6d34b9aeb9 [ 838.058364][ T1663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.058379][ T1663] RSP: 002b:00007f6d3599b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 838.058399][ T1663] RAX: ffffffffffffffda RBX: 00007f6d34e16090 RCX: 00007f6d34b9aeb9 [ 838.058412][ T1663] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 838.058424][ T1663] RBP: 00007f6d3599b090 R08: 0000000000000000 R09: 0000000000000000 [ 838.058435][ T1663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.058446][ T1663] R13: 00007f6d34e16128 R14: 00007f6d34e16090 R15: 00007ffc4bbc89d8 [ 838.058476][ T1663] [ 838.058484][ T1663] page_pool_create_percpu() gave up with errno -12 [ 838.618647][ T1681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7691'. [ 838.645928][ T1685] x_tables: unsorted entry at hook 2 [ 838.665317][ T1681] vlan2: entered promiscuous mode [ 838.673489][ T1687] xt_bpf: check failed: parse error [ 839.023905][ T1711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7695'. [ 839.048452][ T1712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7696'. [ 839.183358][ T1715] team0: left promiscuous mode [ 839.206174][ T1715] team_slave_0: left promiscuous mode [ 839.216480][ T1704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7696'. [ 839.226137][ T1715] team_slave_1: left promiscuous mode [ 839.244864][ T1715] team0: left allmulticast mode [ 839.259885][ T1715] team_slave_0: left allmulticast mode [ 839.278842][ T1715] team_slave_1: left allmulticast mode [ 839.589733][ T1718] bond2 (unregistering): Released all slaves [ 839.785776][ T1732] xt_bpf: check failed: parse error [ 839.790010][ T1736] netlink: 'syz.6.7706': attribute type 1 has an invalid length. [ 839.801172][ T1736] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7706'. [ 839.982885][ T1748] xt_ecn: cannot match TCP bits for non-tcp packets [ 840.029358][ T1751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7704'. [ 840.185910][ T1752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7711'. [ 840.216684][ T1756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7708'. [ 840.220948][ T1747] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 840.236962][ T1750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7711'. [ 840.843299][ T1775] xt_bpf: check failed: parse error [ 840.859093][ T1773] netlink: 'syz.7.7717': attribute type 10 has an invalid length. [ 840.890491][ T1773] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 841.010306][ T1780] netlink: 'syz.4.7720': attribute type 1 has an invalid length. [ 841.097128][ T1784] bond3: (slave bridge0): making interface the new active one [ 841.155235][ T1784] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 841.174845][ T1785] : entered promiscuous mode [ 841.209067][ T1782] lo speed is unknown, defaulting to 1000 [ 841.461056][ T1804] veth1_to_hsr: left allmulticast mode [ 841.502222][ T1804] veth1_to_hsr: left promiscuous mode [ 841.515929][ T1804] bridge0: port 3(veth1_to_hsr) entered disabled state [ 841.579721][ T1804] bridge_slave_1: left allmulticast mode [ 841.611637][ T1804] bridge_slave_1: left promiscuous mode [ 841.635887][ T1804] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.789308][ T1804] bridge_slave_0: left allmulticast mode [ 841.805230][ T1804] bridge_slave_0: left promiscuous mode [ 841.827521][ T1804] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.351112][ T1851] tipc: Enabling of bearer rejected, failed to enable media [ 842.424941][ T1782] wg1 speed is unknown, defaulting to 1000 [ 842.437184][ T1854] netlink: 'syz.4.7731': attribute type 5 has an invalid length. [ 842.477275][ T1827] syzkaller0: entered promiscuous mode [ 842.482784][ T1827] syzkaller0: entered allmulticast mode [ 843.076593][ T1871] netlink: 'syz.2.7735': attribute type 3 has an invalid length. [ 843.084661][ T1871] __nla_validate_parse: 2 callbacks suppressed [ 843.084678][ T1871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7735'. [ 843.235195][ T1876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7738'. [ 843.259138][ T1878] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 843.281635][ T1876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7738'. [ 843.290995][ T1876] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7738'. [ 843.302177][ T1878] bridge0: entered allmulticast mode [ 843.323096][ T1876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7738'. [ 843.365613][ T1876] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7738'. [ 843.382850][ T1879] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 843.410232][ T1876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7738'. [ 843.415780][ T1879] bridge1: entered allmulticast mode [ 843.502581][ T1876] IPVS: Error connecting to the multicast addr [ 843.518277][ T1876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7738'. [ 843.561200][ T1876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 843.918377][ T1899] syzkaller0: entered promiscuous mode [ 843.924088][ T1899] syzkaller0: entered allmulticast mode [ 843.964090][ T1899] tipc: Enabled bearer , priority 0 [ 843.981321][ T1898] tipc: Resetting bearer [ 844.046455][ T1898] tipc: Disabling bearer [ 844.312865][ T1910] FAULT_INJECTION: forcing a failure. [ 844.312865][ T1910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.367933][ T1910] CPU: 1 UID: 0 PID: 1910 Comm: syz.6.7749 Not tainted syzkaller #0 PREEMPT(full) [ 844.367959][ T1910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 844.367971][ T1910] Call Trace: [ 844.367979][ T1910] [ 844.367987][ T1910] dump_stack_lvl+0xe8/0x150 [ 844.368015][ T1910] should_fail_ex+0x412/0x560 [ 844.368040][ T1910] _copy_from_iter+0x1d3/0x1670 [ 844.368072][ T1910] ? rcu_is_watching+0x15/0xb0 [ 844.368091][ T1910] ? __pfx__copy_from_iter+0x10/0x10 [ 844.368110][ T1910] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 844.368143][ T1910] ? netlink_sendmsg+0x650/0xb40 [ 844.368162][ T1910] ? skb_put+0x11b/0x210 [ 844.368187][ T1910] netlink_sendmsg+0x6c0/0xb40 [ 844.368216][ T1910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.368239][ T1910] ? aa_sock_msg_perm+0xf1/0x1b0 [ 844.368265][ T1910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 844.368285][ T1910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.368304][ T1910] ____sys_sendmsg+0xa68/0xad0 [ 844.368327][ T1910] ? __might_fault+0xaf/0x130 [ 844.368364][ T1910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.368396][ T1910] ? import_iovec+0x73/0xa0 [ 844.368422][ T1910] ___sys_sendmsg+0x2a5/0x360 [ 844.368443][ T1910] ? __lock_acquire+0x6b5/0x2cf0 [ 844.368469][ T1910] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.368525][ T1910] ? __fget_files+0x2a/0x420 [ 844.368543][ T1910] ? __fget_files+0x3a0/0x420 [ 844.368570][ T1910] __x64_sys_sendmsg+0x1bd/0x2a0 [ 844.368595][ T1910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.368627][ T1910] ? __pfx_ksys_write+0x10/0x10 [ 844.368661][ T1910] do_syscall_64+0xe2/0xf80 [ 844.368682][ T1910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.368698][ T1910] ? trace_irq_disable+0x37/0x100 [ 844.368715][ T1910] ? clear_bhb_loop+0x60/0xb0 [ 844.368736][ T1910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.368753][ T1910] RIP: 0033:0x7feeccb9aeb9 [ 844.368770][ T1910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.368784][ T1910] RSP: 002b:00007feecda7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.368804][ T1910] RAX: ffffffffffffffda RBX: 00007feecce15fa0 RCX: 00007feeccb9aeb9 [ 844.368817][ T1910] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 844.368829][ T1910] RBP: 00007feecda7b090 R08: 0000000000000000 R09: 0000000000000000 [ 844.368840][ T1910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.368850][ T1910] R13: 00007feecce16038 R14: 00007feecce15fa0 R15: 00007ffff0109c18 [ 844.368880][ T1910] [ 845.161814][ T1936] netlink: 'syz.6.7758': attribute type 39 has an invalid length. [ 845.522773][ T1964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7765'. [ 845.823579][ T1987] FAULT_INJECTION: forcing a failure. [ 845.823579][ T1987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.845599][ T1987] CPU: 0 UID: 0 PID: 1987 Comm: syz.6.7770 Not tainted syzkaller #0 PREEMPT(full) [ 845.845625][ T1987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 845.845636][ T1987] Call Trace: [ 845.845644][ T1987] [ 845.845653][ T1987] dump_stack_lvl+0xe8/0x150 [ 845.845681][ T1987] should_fail_ex+0x412/0x560 [ 845.845707][ T1987] _copy_from_user+0x2d/0xb0 [ 845.845732][ T1987] __sys_bpf+0x229/0x920 [ 845.845752][ T1987] ? __pfx___sys_bpf+0x10/0x10 [ 845.845786][ T1987] ? ksys_write+0x242/0x270 [ 845.845809][ T1987] ? __pfx_ksys_write+0x10/0x10 [ 845.845836][ T1987] __x64_sys_bpf+0x7c/0x90 [ 845.845857][ T1987] do_syscall_64+0xe2/0xf80 [ 845.845877][ T1987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.845893][ T1987] ? trace_irq_disable+0x37/0x100 [ 845.845908][ T1987] ? clear_bhb_loop+0x60/0xb0 [ 845.845927][ T1987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.845944][ T1987] RIP: 0033:0x7feeccb9aeb9 [ 845.845961][ T1987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.845976][ T1987] RSP: 002b:00007feecda5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 845.845994][ T1987] RAX: ffffffffffffffda RBX: 00007feecce16090 RCX: 00007feeccb9aeb9 [ 845.846007][ T1987] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 845.846018][ T1987] RBP: 00007feecda5a090 R08: 0000000000000000 R09: 0000000000000000 [ 845.846030][ T1987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.846041][ T1987] R13: 00007feecce16128 R14: 00007feecce16090 R15: 00007ffff0109c18 [ 845.846071][ T1987] [ 846.203256][ T1997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7771'. [ 846.219515][ T1991] syzkaller0: entered promiscuous mode [ 846.225337][ T1991] syzkaller0: entered allmulticast mode [ 846.559082][ T2051] FAULT_INJECTION: forcing a failure. [ 846.559082][ T2051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.572975][ T2051] CPU: 1 UID: 0 PID: 2051 Comm: syz.4.7776 Not tainted syzkaller #0 PREEMPT(full) [ 846.572999][ T2051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 846.573009][ T2051] Call Trace: [ 846.573017][ T2051] [ 846.573025][ T2051] dump_stack_lvl+0xe8/0x150 [ 846.573053][ T2051] should_fail_ex+0x412/0x560 [ 846.573078][ T2051] _copy_from_user+0x2d/0xb0 [ 846.573102][ T2051] kstrtouint_from_user+0xd6/0x180 [ 846.573125][ T2051] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 846.573159][ T2051] proc_fail_nth_write+0x8e/0x210 [ 846.573181][ T2051] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 846.573208][ T2051] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 846.573233][ T2051] vfs_write+0x29a/0xb90 [ 846.573263][ T2051] ? __pfx_vfs_write+0x10/0x10 [ 846.573286][ T2051] ? __fget_files+0x2a/0x420 [ 846.573309][ T2051] ? __fget_files+0x3a0/0x420 [ 846.573325][ T2051] ? __fget_files+0x2a/0x420 [ 846.573359][ T2051] ksys_write+0x150/0x270 [ 846.573383][ T2051] ? __pfx_ksys_write+0x10/0x10 [ 846.573417][ T2051] do_syscall_64+0xe2/0xf80 [ 846.573437][ T2051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.573454][ T2051] ? trace_irq_disable+0x37/0x100 [ 846.573471][ T2051] ? clear_bhb_loop+0x60/0xb0 [ 846.573492][ T2051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.573508][ T2051] RIP: 0033:0x7ff01a55b78e [ 846.573525][ T2051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 846.573540][ T2051] RSP: 002b:00007ff01b4eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 846.573560][ T2051] RAX: ffffffffffffffda RBX: 00007ff01b4ef6c0 RCX: 00007ff01a55b78e [ 846.573573][ T2051] RDX: 0000000000000001 RSI: 00007ff01b4ef0a0 RDI: 0000000000000003 [ 846.573584][ T2051] RBP: 00007ff01b4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 846.573595][ T2051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.573605][ T2051] R13: 00007ff01a816128 R14: 00007ff01a816090 R15: 00007ffe14ce9a68 [ 846.573636][ T2051] [ 846.781174][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 847.535049][ T2066] macsec1: entered promiscuous mode [ 847.720548][ T2075] bond2: option lacp_rate: invalid value (192) [ 847.728016][ T2075] bond2 (unregistering): Released all slaves [ 848.566146][ T2079] netlink: 'syz.1.7786': attribute type 21 has an invalid length. [ 848.573996][ T2079] __nla_validate_parse: 2 callbacks suppressed [ 848.574010][ T2079] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7786'. [ 848.590582][ T2079] netlink: 'syz.1.7786': attribute type 5 has an invalid length. [ 848.599542][ T2079] netlink: 'syz.1.7786': attribute type 6 has an invalid length. [ 848.607330][ T2079] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7786'. [ 848.678893][ T1978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.824041][ T2095] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7788'. [ 848.847004][ T2096] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7788'. [ 848.889809][ T2097] netlink: 280 bytes leftover after parsing attributes in process `syz.7.7789'. [ 848.909426][ T2099] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7791'. [ 848.919589][ T2099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7791'. [ 849.081173][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7787'. [ 849.143704][ T2116] FAULT_INJECTION: forcing a failure. [ 849.143704][ T2116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.158433][ T2116] CPU: 1 UID: 0 PID: 2116 Comm: syz.2.7794 Not tainted syzkaller #0 PREEMPT(full) [ 849.158458][ T2116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 849.158470][ T2116] Call Trace: [ 849.158478][ T2116] [ 849.158485][ T2116] dump_stack_lvl+0xe8/0x150 [ 849.158511][ T2116] should_fail_ex+0x412/0x560 [ 849.158534][ T2116] _copy_from_user+0x2d/0xb0 [ 849.158558][ T2116] bpf_test_init+0xd8/0x150 [ 849.158579][ T2116] bpf_prog_test_run_xdp+0x529/0x1160 [ 849.158611][ T2116] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 849.158635][ T2116] ? __fget_files+0x2a/0x420 [ 849.158659][ T2116] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 849.158678][ T2116] bpf_prog_test_run+0x2c7/0x340 [ 849.158700][ T2116] __sys_bpf+0x5cb/0x920 [ 849.158718][ T2116] ? __pfx___sys_bpf+0x10/0x10 [ 849.158750][ T2116] ? ksys_write+0x242/0x270 [ 849.158774][ T2116] ? __pfx_ksys_write+0x10/0x10 [ 849.158803][ T2116] __x64_sys_bpf+0x7c/0x90 [ 849.158826][ T2116] do_syscall_64+0xe2/0xf80 [ 849.158848][ T2116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.158864][ T2116] ? trace_irq_disable+0x37/0x100 [ 849.158880][ T2116] ? clear_bhb_loop+0x60/0xb0 [ 849.158901][ T2116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.158918][ T2116] RIP: 0033:0x7fd423f9aeb9 [ 849.158933][ T2116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.158946][ T2116] RSP: 002b:00007fd424e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 849.158964][ T2116] RAX: ffffffffffffffda RBX: 00007fd424215fa0 RCX: 00007fd423f9aeb9 [ 849.158976][ T2116] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 849.158988][ T2116] RBP: 00007fd424e13090 R08: 0000000000000000 R09: 0000000000000000 [ 849.158997][ T2116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.159007][ T2116] R13: 00007fd424216038 R14: 00007fd424215fa0 R15: 00007ffd1d876468 [ 849.159037][ T2116] [ 849.568964][ T2121] netlink: 'syz.7.7796': attribute type 1 has an invalid length. [ 849.612912][ T2121] bond2: entered promiscuous mode [ 849.618112][ T2121] bond2: entered allmulticast mode [ 849.623667][ T2121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 849.810693][ T2145] xt_bpf: check failed: parse error [ 849.938592][ T2152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.085618][ T2158] FAULT_INJECTION: forcing a failure. [ 850.085618][ T2158] name failslab, interval 1, probability 0, space 0, times 0 [ 850.108681][ T2158] CPU: 0 UID: 0 PID: 2158 Comm: syz.6.7807 Not tainted syzkaller #0 PREEMPT(full) [ 850.108706][ T2158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 850.108717][ T2158] Call Trace: [ 850.108724][ T2158] [ 850.108733][ T2158] dump_stack_lvl+0xe8/0x150 [ 850.108759][ T2158] should_fail_ex+0x412/0x560 [ 850.108785][ T2158] should_failslab+0xa8/0x100 [ 850.108806][ T2158] __kvmalloc_node_noprof+0x166/0x8d0 [ 850.108826][ T2158] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 850.108852][ T2158] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 850.108891][ T2158] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 850.108923][ T2158] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 850.108951][ T2158] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 850.108991][ T2158] ? 0xffffffffa020168c [ 850.109006][ T2158] ? 0xffffffffa0201a54 [ 850.109020][ T2158] ? 0xffffffffa02028cc [ 850.109058][ T2158] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 850.109087][ T2158] ? _copy_from_user+0x94/0xb0 [ 850.109110][ T2158] ? bpf_test_init+0x113/0x150 [ 850.109127][ T2158] ? xdp_convert_md_to_buff+0x5b/0x330 [ 850.109147][ T2158] bpf_prog_test_run_xdp+0x81c/0x1160 [ 850.109182][ T2158] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 850.109206][ T2158] ? __fget_files+0x2a/0x420 [ 850.109230][ T2158] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 850.109250][ T2158] bpf_prog_test_run+0x2c7/0x340 [ 850.109273][ T2158] __sys_bpf+0x5cb/0x920 [ 850.109293][ T2158] ? __pfx___sys_bpf+0x10/0x10 [ 850.109326][ T2158] ? ksys_write+0x242/0x270 [ 850.109351][ T2158] ? __pfx_ksys_write+0x10/0x10 [ 850.109381][ T2158] __x64_sys_bpf+0x7c/0x90 [ 850.109405][ T2158] do_syscall_64+0xe2/0xf80 [ 850.109426][ T2158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.109442][ T2158] ? trace_irq_disable+0x37/0x100 [ 850.109458][ T2158] ? clear_bhb_loop+0x60/0xb0 [ 850.109479][ T2158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.109495][ T2158] RIP: 0033:0x7feeccb9aeb9 [ 850.109511][ T2158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.109526][ T2158] RSP: 002b:00007feecda7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.109545][ T2158] RAX: ffffffffffffffda RBX: 00007feecce15fa0 RCX: 00007feeccb9aeb9 [ 850.109558][ T2158] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 850.109570][ T2158] RBP: 00007feecda7b090 R08: 0000000000000000 R09: 0000000000000000 [ 850.109581][ T2158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.109592][ T2158] R13: 00007feecce16038 R14: 00007feecce15fa0 R15: 00007ffff0109c18 [ 850.109622][ T2158] [ 850.113067][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7806'. [ 850.426976][ T2156] vlan2: entered promiscuous mode [ 850.609568][ T2176] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7814'. [ 850.669535][ T2176] ipvlan0: entered promiscuous mode [ 850.674890][ T2179] xt_bpf: check failed: parse error [ 850.682281][ T2176] ipvlan0: left promiscuous mode [ 850.758955][ T2177] tipc: Enabled bearer , priority 0 [ 851.048440][ T2174] syzkaller0: entered promiscuous mode [ 851.064532][ T2174] syzkaller0: entered allmulticast mode [ 851.108379][ T2173] tipc: Resetting bearer [ 851.196829][ T2173] tipc: Disabling bearer [ 851.311437][ T2207] xt_bpf: check failed: parse error [ 851.375969][ T2208] Cannot find set identified by id 3 to match [ 851.581134][ T2223] lo speed is unknown, defaulting to 1000 [ 851.587204][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 851.843277][ T2223] wg1 speed is unknown, defaulting to 1000 [ 851.855797][ T2239] netlink: 'syz.6.7834': attribute type 1 has an invalid length. [ 852.100924][ T2247] lo speed is unknown, defaulting to 1000 [ 852.124421][ T2256] xt_bpf: check failed: parse error [ 852.175932][ T2258] syzkaller0: entered promiscuous mode [ 852.181429][ T2258] syzkaller0: entered allmulticast mode [ 852.252255][ T2262] vlan2: entered promiscuous mode [ 852.513539][ T2269] tipc: Enabled bearer , priority 0 [ 852.520318][ T2247] wg1 speed is unknown, defaulting to 1000 [ 852.589190][ T2257] tipc: Resetting bearer [ 852.637087][ T2257] tipc: Disabling bearer [ 852.744192][ T2286] netlink: 'syz.1.7848': attribute type 3 has an invalid length. [ 853.062377][ T2307] xt_bpf: check failed: parse error [ 853.279669][ T2323] netlink: del zone limit has 4 unknown bytes [ 853.401693][ T2326] lo speed is unknown, defaulting to 1000 [ 853.470324][ T2333] netlink: 'syz.4.7865': attribute type 10 has an invalid length. [ 853.486343][ T2333] team0: Port device dummy0 added [ 853.534243][ T2335] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 853.546717][ T2335] syzkaller0: entered promiscuous mode [ 853.552207][ T2335] syzkaller0: entered allmulticast mode [ 853.691478][ T2326] wg1 speed is unknown, defaulting to 1000 [ 853.767273][ T2333] lo speed is unknown, defaulting to 1000 [ 853.837007][ T30] audit: type=1804 audit(1770229487.667:14): pid=2339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7866" name="memory.events" dev="tmpfs" ino=1928 res=1 errno=0 [ 854.046571][ T2343] xt_bpf: check failed: parse error [ 854.152336][ T2348] netlink: 'syz.6.7869': attribute type 10 has an invalid length. [ 854.172330][ T2348] __nla_validate_parse: 6 callbacks suppressed [ 854.172346][ T2348] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7869'. [ 854.594260][ T2348] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 854.604102][ T2348] team0: Failed to send options change via netlink (err -105) [ 854.614193][ T2348] team0: Port device geneve0 added [ 854.645684][ T2333] wg1 speed is unknown, defaulting to 1000 [ 854.667307][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.688256][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.719741][ T2369] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7875'. [ 854.768789][ T2371] geneve2: entered promiscuous mode [ 854.782291][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.800512][ T2377] netlink: 'syz.2.7874': attribute type 1 has an invalid length. [ 854.809556][ T2377] netlink: 'syz.2.7874': attribute type 11 has an invalid length. [ 854.819430][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.838906][ T2377] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7874'. [ 854.860272][ T2369] vlan2: entered promiscuous mode [ 855.050978][ T2387] xt_bpf: check failed: parse error [ 855.120339][ T2380] bond4 (unregistering): Released all slaves [ 855.589504][ T2405] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7886'. [ 855.674218][ T2407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7887'. [ 855.810664][ T2416] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7887'. [ 856.080410][ T2435] ip6erspan0: entered promiscuous mode [ 856.119697][ T2435] IPVS: stopping backup sync thread 30422 ... [ 856.136180][ T2442] netlink: 'syz.2.7898': attribute type 10 has an invalid length. [ 856.159379][ T2442] team0: Port device dummy0 added [ 856.177127][ T2442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7898'. [ 856.207712][ T2442] netlink: 'syz.2.7898': attribute type 4 has an invalid length. [ 856.218152][ T2442] netlink: 'syz.2.7898': attribute type 8 has an invalid length. [ 856.235824][ T2442] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7898'. [ 856.266360][ T2442] xt_TCPMSS: Only works on TCP SYN packets [ 856.280727][ T2442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7898'. [ 856.321872][ T2442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7898'. [ 856.460439][ T2454] bridge0: port 2(batadv1) entered blocking state [ 856.470837][ T2454] bridge0: port 2(batadv1) entered disabled state [ 856.478177][ T2454] batadv1: entered allmulticast mode [ 856.492456][ T2454] batadv1: entered promiscuous mode [ 856.499740][ T2456] batadv_slave_1: entered promiscuous mode [ 856.521891][ T2469] bond0: (slave rose0): Enslaving as an active interface with an up link [ 856.543998][ T2455] batadv_slave_1: left promiscuous mode [ 856.696292][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 856.812894][ T2498] netlink: 'syz.6.7910': attribute type 8 has an invalid length. [ 856.966014][ T1838] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 856.975918][ T1838] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 857.614574][ T2564] netlink: 'syz.2.7925': attribute type 29 has an invalid length. [ 857.627609][ T2564] netlink: 'syz.2.7925': attribute type 29 has an invalid length. [ 857.755789][ T2569] netlink: 'syz.7.7929': attribute type 7 has an invalid length. [ 857.764590][ T2569] netlink: 'syz.7.7929': attribute type 8 has an invalid length. [ 857.772781][ T2569] netlink: 'syz.7.7929': attribute type 9 has an invalid length. [ 857.839089][ T2576] netlink: 'syz.1.7928': attribute type 11 has an invalid length. [ 858.326036][ T2610] tipc: Enabled bearer , priority 0 [ 858.363099][ T2613] xt_bpf: check failed: parse error [ 858.793302][ T2598] lec:lec_atm_close: lec0: Shut down! [ 859.128116][ T2608] tipc: Disabling bearer [ 859.479932][ T2680] __nla_validate_parse: 6 callbacks suppressed [ 859.479953][ T2680] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7954'. [ 859.668876][ T2682] sctp: [Deprecated]: syz.4.7955 (pid 2682) Use of int in max_burst socket option deprecated. [ 859.668876][ T2682] Use struct sctp_assoc_value instead [ 859.896277][ T2694] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7957'. [ 859.918613][ T2694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7957'. [ 859.939662][ T2694] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7957'. [ 860.368217][ T2719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7965'. [ 860.403677][ T2719] vlan2: entered promiscuous mode [ 860.589776][ T2734] Cannot find add_set index 2 as target [ 860.819352][ T2741] sctp: [Deprecated]: syz.7.7967 (pid 2741) Use of int in max_burst socket option deprecated. [ 860.819352][ T2741] Use struct sctp_assoc_value instead [ 860.928153][ T2751] netlink: 'syz.4.7969': attribute type 1 has an invalid length. [ 860.966682][ T2751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7969'. [ 861.167959][ T2768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7973'. [ 861.280156][ T2772] openvswitch: netlink: Multiple metadata blocks provided [ 861.312721][ T2776] tipc: Invalid UDP bearer configuration [ 861.312773][ T2776] tipc: Enabling of bearer rejected, failed to enable media [ 861.583827][ T2781] netlink: 172 bytes leftover after parsing attributes in process `syz.7.7978'. [ 861.594598][ T2787] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7979'. [ 861.604063][ T2781] team0: entered promiscuous mode [ 861.604086][ T2781] team_slave_0: entered promiscuous mode [ 861.604289][ T2781] team_slave_1: entered promiscuous mode [ 861.604450][ T2781] team0: entered allmulticast mode [ 861.604464][ T2781] team_slave_0: entered allmulticast mode [ 861.604478][ T2781] team_slave_1: entered allmulticast mode [ 861.611023][ T2781] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.754346][ T2794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7981'. [ 861.773986][ T2796] xt_bpf: check failed: parse error [ 861.784448][ T2794] netlink: 'syz.7.7981': attribute type 23 has an invalid length. [ 861.997073][ T2804] netlink: 'syz.2.7985': attribute type 1 has an invalid length. [ 862.026950][ T2804] netlink: 'syz.2.7985': attribute type 11 has an invalid length. [ 862.504813][ T2849] syzkaller0: entered promiscuous mode [ 862.525678][ T2849] syzkaller0: entered allmulticast mode [ 862.591648][ T2849] tipc: Enabled bearer , priority 0 [ 862.617575][ T2844] tipc: Resetting bearer [ 862.704263][ T2844] tipc: Disabling bearer [ 863.099184][ T2889] dvmrp0: entered allmulticast mode [ 863.174205][ T2899] netlink: 'syz.7.8006': attribute type 1 has an invalid length. [ 863.182146][ T2899] netlink: 'syz.7.8006': attribute type 11 has an invalid length. [ 863.441615][ T2906] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.489906][ T2918] netlink: 'syz.6.8009': attribute type 9 has an invalid length. [ 863.631836][ T2906] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.704111][ T2906] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.795511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 863.803543][ C1] lec:lec_tx_timeout: lec0 [ 863.878654][ T2906] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.042604][ T2954] vlan2: entered promiscuous mode [ 864.129066][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.170227][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.216116][ T31] INFO: task syz.5.6205:28796 blocked for more than 143 seconds. [ 864.219953][ T1838] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.235587][ T31] Not tainted syzkaller #0 [ 864.240546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.285900][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.298428][ T31] task:syz.5.6205 state:D stack:27104 pid:28796 tgid:28787 ppid:26124 task_flags:0x400140 flags:0x00080002 [ 864.328292][ T2976] sctp: [Deprecated]: syz.4.8029 (pid 2976) Use of int in max_burst socket option deprecated. [ 864.328292][ T2976] Use struct sctp_assoc_value instead [ 864.337309][ T31] Call Trace: [ 864.364446][ T31] [ 864.375293][ T31] __schedule+0x14ea/0x5050 [ 864.390171][ T31] ? __pfx___schedule+0x10/0x10 [ 864.396290][ T31] ? schedule+0x90/0x360 [ 864.400587][ T31] schedule+0x164/0x360 [ 864.404767][ T31] schedule_preempt_disabled+0x13/0x30 [ 864.410653][ T31] __mutex_lock+0x7fe/0x1300 [ 864.415256][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.420732][ T31] ? __mutex_lock+0x5ac/0x1300 [ 864.425718][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 864.431365][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 864.436545][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 864.442019][ T31] ? rcu_is_watching+0x15/0xb0 [ 864.446990][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 864.453069][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 864.465098][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 864.470814][ T31] ? __asan_memcpy+0x40/0x70 [ 864.475404][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 864.481587][ T31] ? bpf_lsm_capable+0x9/0x20 [ 864.486342][ T31] ? security_capable+0x7e/0x2c0 [ 864.491273][ T31] genl_rcv_msg+0x61c/0x7a0 [ 864.496133][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.501174][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 864.507350][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 864.512742][ T31] netlink_rcv_skb+0x232/0x4b0 [ 864.518583][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.523704][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.529449][ T31] ? genl_rcv+0x19/0x40 [ 864.533695][ T31] ? down_read+0x272/0x2e0 [ 864.539474][ T31] ? genl_rcv+0xd/0x40 [ 864.543559][ T31] genl_rcv+0x28/0x40 [ 864.547721][ T31] netlink_unicast+0x80f/0x9b0 [ 864.552506][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 864.557958][ T31] ? netlink_sendmsg+0x650/0xb40 [ 864.562906][ T31] ? skb_put+0x11b/0x210 [ 864.567286][ T31] netlink_sendmsg+0x813/0xb40 [ 864.572063][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.577493][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.582449][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.588291][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.593594][ T31] ____sys_sendmsg+0xa68/0xad0 [ 864.598476][ T31] ? __might_fault+0xaf/0x130 [ 864.603170][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.608610][ T31] ? import_iovec+0x73/0xa0 [ 864.613125][ T31] ___sys_sendmsg+0x2a5/0x360 [ 864.617907][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 864.622854][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.628518][ T31] ? futex_wait+0x29a/0x380 [ 864.633041][ T31] ? __fget_files+0x2a/0x420 [ 864.637731][ T31] ? __fget_files+0x3a0/0x420 [ 864.642429][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.647528][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.653025][ T31] ? rcu_is_watching+0x15/0xb0 [ 864.658213][ T31] do_syscall_64+0xe2/0xf80 [ 864.665501][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.671583][ T31] ? trace_irq_disable+0x37/0x100 [ 864.676843][ T31] ? clear_bhb_loop+0x60/0xb0 [ 864.681545][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.687643][ T31] RIP: 0033:0x7f5b04b9aeb9 [ 864.692072][ T31] RSP: 002b:00007f5b059d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.702113][ T31] RAX: ffffffffffffffda RBX: 00007f5b04e16090 RCX: 00007f5b04b9aeb9 [ 864.710169][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000006 [ 864.718684][ T31] RBP: 00007f5b04c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 864.727043][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.735229][ T31] R13: 00007f5b04e16128 R14: 00007f5b04e16090 R15: 00007ffc4f922fa8 [ 864.744097][ T31] [ 864.747413][ T31] [ 864.747413][ T31] Showing all locks held in the system: [ 864.755155][ T31] 1 lock held by rcu_tasks_trace/29: [ 864.761389][ T31] #0: ffffffff8e55b0b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf4/0xde0 [ 864.772548][ T31] 1 lock held by khungtaskd/31: [ 864.777932][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 864.787893][ T31] 2 locks held by getty/5575: [ 864.792571][ T31] #0: ffff88814e1090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 864.802964][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 864.813193][ T31] 2 locks held by syz.3.5392/25370: [ 864.818558][ T31] #0: ffffffff8fa1ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.826832][ T31] #1: ffffffff8e8793a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 864.837043][ T31] 3 locks held by kworker/0:1/27748: [ 864.842333][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 864.853541][ T31] #1: ffffc90012377bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 864.875594][ T31] #2: ffff8880a16ff240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 864.892445][ T31] 2 locks held by syz.5.6205/28796: [ 864.897782][ T31] #0: ffffffff8fa1ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.906196][ T31] #1: ffffffff8e8793a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 864.916251][ T31] 3 locks held by syz.0.6351/29540: [ 864.921451][ T31] #0: ffffffff8fa1ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.929770][ T31] #1: ffff888057deb6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 864.940412][ T31] #2: ffffffff8e8793a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 864.950999][ T31] 3 locks held by kworker/u8:4/1838: [ 864.956449][ T31] #0: ffff88802f656948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 864.968130][ T31] #1: ffffc9000fc8fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 864.981915][ T31] #2: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 864.991598][ T31] 5 locks held by kworker/u8:43/2042: [ 864.997008][ T31] 1 lock held by syz.1.8026/2973: [ 865.002033][ T31] #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 865.011171][ T31] 2 locks held by syz.7.8027/2978: [ 865.016465][ T31] #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 865.026193][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 865.037122][ T31] 2 locks held by syz.7.8027/2981: [ 865.042232][ T31] #0: ffffffff8fef7858 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 865.051875][ T31] #1: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 865.061003][ T31] 2 locks held by syz.2.8028/2980: [ 865.066372][ T31] #0: ffffffff8fef7fa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 865.075922][ T31] #1: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 865.084989][ T31] 2 locks held by syz.2.8028/2982: [ 865.090223][ T31] #0: ffffffff8f99ddf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 865.100154][ T31] #1: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 865.110759][ T31] 1 lock held by syz.2.8028/2983: [ 865.115835][ T31] #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 865.124651][ T31] 1 lock held by syz.2.8028/2986: [ 865.129847][ T31] #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 865.139239][ T31] 1 lock held by syz.2.8028/2987: [ 865.144267][ T31] #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 865.153203][ T31] [ 865.155599][ T31] ============================================= [ 865.155599][ T31] [ 865.164029][ T31] NMI backtrace for cpu 0 [ 865.164045][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 865.164063][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 865.164073][ T31] Call Trace: [ 865.164081][ T31] [ 865.164089][ T31] dump_stack_lvl+0xe8/0x150 [ 865.164113][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 865.164132][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 865.164159][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 865.164181][ T31] sys_info+0x135/0x170 [ 865.164203][ T31] watchdog+0xf90/0xfe0 [ 865.164224][ T31] ? watchdog+0x209/0xfe0 [ 865.164246][ T31] kthread+0x726/0x8b0 [ 865.164266][ T31] ? __pfx_watchdog+0x10/0x10 [ 865.164280][ T31] ? __pfx_kthread+0x10/0x10 [ 865.164302][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 865.164320][ T31] ? __pfx_kthread+0x10/0x10 [ 865.164340][ T31] ret_from_fork+0x51b/0xa40 [ 865.164366][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 865.164388][ T31] ? __switch_to+0xc82/0x1410 [ 865.164413][ T31] ? __pfx_kthread+0x10/0x10 [ 865.164432][ T31] ret_from_fork_asm+0x1a/0x30 [ 865.164467][ T31] [ 865.164474][ T31] Sending NMI from CPU 0 to CPUs 1: [ 865.283786][ C1] NMI backtrace for cpu 1 [ 865.283805][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 865.283823][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 865.283832][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 865.283855][ C1] Code: 18 5f 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 77 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 865.283867][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 865.283881][ C1] RAX: 00000000002ae727 RBX: ffffffff8199370d RCX: 0000000080000001 [ 865.283892][ C1] RDX: 0000000000000001 RSI: ffffffff8dccd1e4 RDI: ffffffff8c073980 [ 865.283903][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 865.283914][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef4270 [ 865.283925][ C1] R13: 1ffff11003a51b70 R14: 0000000000000001 R15: 0000000000000001 [ 865.283935][ C1] FS: 0000000000000000(0000) GS:ffff8881257eb000(0000) knlGS:0000000000000000 [ 865.283947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.283957][ C1] CR2: 000000110c35ee4b CR3: 000000007e75a000 CR4: 00000000003526f0 [ 865.283972][ C1] Call Trace: [ 865.283979][ C1] [ 865.283985][ C1] default_idle+0x9/0x20 [ 865.284004][ C1] default_idle_call+0x72/0xb0 [ 865.284024][ C1] do_idle+0x1bd/0x500 [ 865.284041][ C1] ? __pfx_do_idle+0x10/0x10 [ 865.284061][ C1] ? do_idle+0x4d0/0x500 [ 865.284076][ C1] cpu_startup_entry+0x43/0x60 [ 865.284089][ C1] start_secondary+0x101/0x110 [ 865.284108][ C1] common_startup_64+0x13e/0x147 [ 865.284133][ C1] [ 865.449130][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 865.455981][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 865.465069][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 865.475107][ T31] Call Trace: [ 865.478372][ T31] [ 865.481289][ T31] vpanic+0x1e0/0x670 [ 865.485258][ T31] panic+0xc5/0xd0 [ 865.488966][ T31] ? __pfx_panic+0x10/0x10 [ 865.493369][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 865.498741][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 865.504910][ T31] watchdog+0xfda/0xfe0 [ 865.509147][ T31] ? watchdog+0x209/0xfe0 [ 865.513467][ T31] kthread+0x726/0x8b0 [ 865.517532][ T31] ? __pfx_watchdog+0x10/0x10 [ 865.522203][ T31] ? __pfx_kthread+0x10/0x10 [ 865.526787][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 865.531979][ T31] ? __pfx_kthread+0x10/0x10 [ 865.536560][ T31] ret_from_fork+0x51b/0xa40 [ 865.541146][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 865.546250][ T31] ? __switch_to+0xc82/0x1410 [ 865.550917][ T31] ? __pfx_kthread+0x10/0x10 [ 865.555499][ T31] ret_from_fork_asm+0x1a/0x30 [ 865.560273][ T31] [ 865.563659][ T31] Kernel Offset: disabled [ 865.567968][ T31] Rebooting in 86400 seconds..