last executing test programs: 6m27.774585442s ago: executing program 0 (id=121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800ffb0000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m27.687495712s ago: executing program 2 (id=122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {0x0, 0x3000000}]}]}, {0x0, [0x30, 0x61, 0x1e]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x81, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="85"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000200)=0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c800) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r11) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r13}, &(0x7f0000000140), &(0x7f00000001c0)=r14}, 0x20) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r12, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0106004000000000005c0900000024000480130001"], 0x38}}, 0x0) r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r15, &(0x7f0000000080)={0x0, 0x8, 0x3, 0x3, 0xfd}, 0x8) sendmsg$nl_generic(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8010000310000042abd7000fddbdf2514000000a701248004004d80faae850ecebb43c02b71fa1168f008715b4a8cdb2329ce046721935c92c2af93e8a988908ca2ade5592c83252126678cec2d676bd7786fb401539bab7c3895cf7221fb16275a602bb7dcfd35321bab56975cc76e3451e65f20578f528e2d8951510af1165ee9982af601aa341fbc48e114b886a87c5702e8a5e6188bfedd87c2ae9ac05bdd0ecd5a37881d6f54d1aa892bdac426b17e744b77bcab69d8d807bb995bc0fe71dfb363bd39324b8277a3774c24c77ebfc254d42865bdb81104e344db4677f339e7e04844fb59b3e5025d7f17f9b6ce2b0d93c50bbf5ea1dcba6b37ac7888533f43ceed5c7d001027de228f9cbda46f49bfca2557b02e0c8d62eb6e43d6bdb92a5a9400ca40ab2f9a602cb1ab2033dd317186833c8c0611a0a9a6bf1a64c20a85ea453446d618c3df349908ba2bc53b05f6312a380f950d59099b2b39722404b2a0cd016de6ff9f7925f8b43142894947f1f9aa12ba017aff227222daee6e9c6fb88201bd2806a3824d98bd032d669330045f9f4c87e6866fab906d6ab0aac6ac795e0fc44f5a08009a000700000008000500", @ANYRES32=r9, @ANYBLOB="04000080000cc2f200ffffffffffffff7f1a1327ae12c945a4465bd51515cb2ec0f340d86f7b5932b346c442b73e35003a82e32e3e41d35d2f0ebb867288bc85b867685b86d554a6c5600cf4a1a4e69bcfff703667180197dafe33cc0315ff88943bd8a6de35ed0be608187ca29cac6c355ef18bd2a2262fc5929a28aa0783ed854a74b9ec0a1303c373d649af4d4504bc7303914bde9480d89a8c2cd52849a5db4cec5c88"], 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 6m27.66275864s ago: executing program 0 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000ffd00000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m27.518691468s ago: executing program 0 (id=124): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000"], 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r1 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16, @ANYBLOB="000029bd7000fcdbdf257a0000000600fb00feff00000a00f9003a55195b2f8700000700f9005f60f200"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) close(0x4) 6m27.21463455s ago: executing program 2 (id=128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x100000000000000, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) 6m26.046786497s ago: executing program 2 (id=138): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}, 0x1, 0x604000000000000}, 0x0) 6m26.018856058s ago: executing program 0 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x24008800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000c0001cdd45e89dd2aff5bddfb5a0ce209270c55b70e9d7347be6b56ded52f997a00b9f53048e41abddc8a901a26bdd29b30ca3d6bf3"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xe, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1}, 0x10, 0x0, r2}, 0x94) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd0, 0x1de6, 0x51, @mcast2, @remote, 0x10, 0x1, 0x7, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x8000, 0xfffffffa, 0x510f, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010100}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000fc0)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030ade3c0000000000000000010000000900030073797a30000000000900010073797a300000000028000000060a010100000000000000000100000908000b4000e8ff010900010073797a3000000000140000001100010000000000000000000000000a5fbadd346db6e4a72aced7aa80e2cedab6"], 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000c2a578ac804b7dbacb9cb545e5cb1133437d6455a0df38bef5263f984cbe7b9c8b6a46f21e360b2d591fab5c92be0107fcedd34e47b338ef8de63dd99e6d2c06fc85cfa34724e27383f0270c27d1ce67a22fa9630d0e804cd954f53daefd25b849ac2a56c570e724c85af3b5815b26ffc4599cb4e1cedc504f0cf2ce9aae2349a24f6c78ede8ef08705b95781bc1dc6e63"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000008}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r14, @ANYBLOB="50002f800c00020002"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 6m25.886603322s ago: executing program 2 (id=141): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x2}, 0x2}], 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000040)={&(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0xfd90, &(0x7f0000000080)={0x0, 0x4c}, 0x7, 0x0, 0x0, 0x98a594acf120b0d4}, 0x40) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd65, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x0, 0x0, 0x148, 0x1b0, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff00b001, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {}, 0x84, 0x0, 0x60}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x6, [0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e31, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4ea0, 0x4622, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e21], [0x4e24, 0x4e22], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x2, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073087a31000000010900030073797a320000988114000000110001bb5a397f52fd575e8403d83f8fed4adcc300000000453e3e31e6537f651d4664b330a152ea1c4d70b85b921395d2b03bd88da538c03d3af94bfd0b6ece245ef5ee52ba15cee3b3e5030000002b6c1ab53031fd094c4286e6879751a5a5eec49bc93bc98cccc3459a2636099d35a67a06e589dc8c4a8837c65bad5581db000459ec22a4ed"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt(r6, 0xfffffffb, 0x30, &(0x7f0000000200)=""/117, &(0x7f0000000000)=0x75) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r10, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r8, 0x2000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20040840) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) 6m25.820464226s ago: executing program 3 (id=142): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}, 0xfff5}, 0x0) 6m25.740857191s ago: executing program 3 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000fff80000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m25.562917505s ago: executing program 3 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x8c00000000000000) 6m25.499935267s ago: executing program 3 (id=147): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x890, 0x4c0, 0x590, 0x2b8, 0x4c0, 0x3a8, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x290, 0x2b8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x1001, 0xb10}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0xf76, 0xff, 0x20, 0x7, 0xb, 0xaeae, 0x7f, 0x6b1d1c17, 0x80, 0x78}, {0x8}}}]}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0xff, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x100000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffff8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8f0) 6m25.367603672s ago: executing program 3 (id=148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x4010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000050000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0) 6m25.335734186s ago: executing program 2 (id=149): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 6m25.083590787s ago: executing program 0 (id=150): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000"], 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r1 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16, @ANYBLOB="000029bd7000fcdbdf257a0000000600fb00feff00000a00f9003a55195b2f8700000700f9005f60f200"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) close(0x4) 6m24.878970114s ago: executing program 2 (id=153): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="090000001ba97d7313e8b09d606bea0ecdccf3fa3604026a0400000082ba8ec66a2264b1cbf966a5a5ca2145e06af57992bc553da80d0000000035e7f798925b86bfd11ffd4e94f91883", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000005140)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="9451", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000b00)}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000280)="c22d", 0x2}], 0x1}}], 0x3, 0x8000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) connect$rose(0xffffffffffffffff, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@bridge_getvlan={0x38, 0x72, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x2000c000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x5}, {0x800, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}], [{}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r5}, 0x38) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r8, 0x80044944, &(0x7f00000003c0)={0x7fff}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000200)={0x5000, 0x6, 0x19e1, 0x9}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a00010000000a0102000000000000000002000001d1000600d0e8adb6bd98446c1e4269efa7aee8b8a0420498db6452d88e95431c3deb1cd904e6e9d17375e5c594aceb5e31bec1bdb166e85b05051b0b6ef4d1debd043e45af8e7e1d579520d9370ba80083d2e9b11eecaa468114f38642f4bef24ec79cf57ebe25756a71600b962159c2cddc5858b9927b3b7c0a780832bc7271a23e8e2e29d8856acd4699b2b32f49307aea87921bec8a8ed3ec94ff986db4bec0da265c97840872ac4e65c75ac9f2fb5bb51a0fe6626dcd9f3c611817a5294cd76445f2fa68a35f2ffb40916c1c91ec9a0000000900010073797a30000000000c000440000000000000000524000000090a010100800000000000000000000508000c40000000f60700084000000001140000001100010000000000000000000200000a"], 0x14c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 6m24.872394106s ago: executing program 3 (id=155): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="16cb487743757fac787478549b8b528bcfae3702743fba765dcee076127afafccb3bb4b012fbabcedf1d97381edc5b71d72eee3b1a817bc9e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @fwd={0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @union={0x6, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x5, 0x3, 0x800}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000400)=""/185, 0x5c, 0xb9, 0x1, 0x9}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ef1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000007000000850000005e0000009500000000002200ce08b200000000006dc77d2ac94403e569eb508f5a4cf6e491fd623aa5247e9163db0a732cc939c42bd8de054956e7d0316916a84f77c70c69293c5525725e9d6600e20084"], &(0x7f00000001c0)='syzkaller\x00', 0x401, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x52, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3779, r3, 0x5, &(0x7f0000000640)=[r5, r3, r7], &(0x7f0000000680)=[{0x2, 0x1, 0x2, 0xb}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x5}, {0x3, 0x3, 0x6, 0x9}, {0x2, 0x3, 0x5, 0xc}], 0x10, 0x9}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r9, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r11, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a52f33baa334e784851fbe350e6bf242"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "8cf0690ac7db949f89efd41cd2290994"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4d77e3d9c0a63b3e7dc38ac5b626cbb0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'geneve0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x31, 0x1, {{0x23, 0x4, 0x1, 0x4, 0x8c, 0x68, 0x183, 0xab, 0x29, 0x0, @multicast1, @local, {[@end, @noop, @end, @timestamp={0x44, 0x14, 0x43, 0x0, 0x7, [0x2, 0x0, 0x0, 0x8]}, @generic={0x44, 0xb, "25648b144e43d1a7bf"}, @end, @cipso={0x86, 0x30, 0x3, [{0x5, 0x4, "f077"}, {0x1, 0xb, "2489911386754471d8"}, {0x1, 0xf, "2239975117ba0a894b45e6c607"}, {0x0, 0xc, "a9b12cfb1b8f41d67f34"}]}, @timestamp_addr={0x44, 0x24, 0x3f, 0x1, 0x0, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x7, 0x700, 0x401, 0x800, {{0x35, 0x4, 0x3, 0xb, 0xd4, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xeb, 0x1, 0x5, [{@rand_addr=0x64010102, 0xffffffff}]}, @timestamp_prespec={0x44, 0x34, 0xf8, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0xfffff00b}, {@rand_addr=0x64010100, 0x80}, {@rand_addr=0x64010102, 0x1000}, {@multicast2, 0xffffff00}, {@loopback, 0x1}]}, @generic={0x1a, 0xe, "d70ee113f1d8a987e94f8b52"}, @noop, @timestamp_prespec={0x44, 0x34, 0x38, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x45d}, {@loopback, 0xffffff01}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@remote, 0x35c4fac9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1b65bcd}]}, @lsrr={0x83, 0xb, 0xca, [@loopback, @loopback]}, @lsrr={0x83, 0x1f, 0x4, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100]}, @ssrr={0x89, 0xf, 0xeb, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1]}]}}}}}) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) 6m24.302600076s ago: executing program 32 (id=153): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="090000001ba97d7313e8b09d606bea0ecdccf3fa3604026a0400000082ba8ec66a2264b1cbf966a5a5ca2145e06af57992bc553da80d0000000035e7f798925b86bfd11ffd4e94f91883", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000005140)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="9451", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000b00)}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000280)="c22d", 0x2}], 0x1}}], 0x3, 0x8000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) connect$rose(0xffffffffffffffff, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@bridge_getvlan={0x38, 0x72, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x2000c000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x5}, {0x800, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}], [{}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r5}, 0x38) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r8, 0x80044944, &(0x7f00000003c0)={0x7fff}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000200)={0x5000, 0x6, 0x19e1, 0x9}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 6m24.283298042s ago: executing program 0 (id=157): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0xffff0000}, 0x8040) 6m24.283035811s ago: executing program 33 (id=157): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0xffff0000}, 0x8040) 6m24.269138245s ago: executing program 34 (id=155): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="16cb487743757fac787478549b8b528bcfae3702743fba765dcee076127afafccb3bb4b012fbabcedf1d97381edc5b71d72eee3b1a817bc9e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @fwd={0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @union={0x6, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x5, 0x3, 0x800}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000400)=""/185, 0x5c, 0xb9, 0x1, 0x9}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ef1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000007000000850000005e0000009500000000002200ce08b200000000006dc77d2ac94403e569eb508f5a4cf6e491fd623aa5247e9163db0a732cc939c42bd8de054956e7d0316916a84f77c70c69293c5525725e9d6600e20084"], &(0x7f00000001c0)='syzkaller\x00', 0x401, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x52, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3779, r3, 0x5, &(0x7f0000000640)=[r5, r3, r7], &(0x7f0000000680)=[{0x2, 0x1, 0x2, 0xb}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x5}, {0x3, 0x3, 0x6, 0x9}, {0x2, 0x3, 0x5, 0xc}], 0x10, 0x9}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r9, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r11, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a52f33baa334e784851fbe350e6bf242"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "8cf0690ac7db949f89efd41cd2290994"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4d77e3d9c0a63b3e7dc38ac5b626cbb0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'geneve0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x31, 0x1, {{0x23, 0x4, 0x1, 0x4, 0x8c, 0x68, 0x183, 0xab, 0x29, 0x0, @multicast1, @local, {[@end, @noop, @end, @timestamp={0x44, 0x14, 0x43, 0x0, 0x7, [0x2, 0x0, 0x0, 0x8]}, @generic={0x44, 0xb, "25648b144e43d1a7bf"}, @end, @cipso={0x86, 0x30, 0x3, [{0x5, 0x4, "f077"}, {0x1, 0xb, "2489911386754471d8"}, {0x1, 0xf, "2239975117ba0a894b45e6c607"}, {0x0, 0xc, "a9b12cfb1b8f41d67f34"}]}, @timestamp_addr={0x44, 0x24, 0x3f, 0x1, 0x0, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x7, 0x700, 0x401, 0x800, {{0x35, 0x4, 0x3, 0xb, 0xd4, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xeb, 0x1, 0x5, [{@rand_addr=0x64010102, 0xffffffff}]}, @timestamp_prespec={0x44, 0x34, 0xf8, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0xfffff00b}, {@rand_addr=0x64010100, 0x80}, {@rand_addr=0x64010102, 0x1000}, {@multicast2, 0xffffff00}, {@loopback, 0x1}]}, @generic={0x1a, 0xe, "d70ee113f1d8a987e94f8b52"}, @noop, @timestamp_prespec={0x44, 0x34, 0x38, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x45d}, {@loopback, 0xffffff01}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@remote, 0x35c4fac9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1b65bcd}]}, @lsrr={0x83, 0xb, 0xca, [@loopback, @loopback]}, @lsrr={0x83, 0x1f, 0x4, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100]}, @ssrr={0x89, 0xf, 0xeb, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1]}]}}}}}) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) 21.466841389s ago: executing program 5 (id=3403): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x6}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socket$inet_udp(0x2, 0x2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) shutdown(r0, 0x2) 18.90314012s ago: executing program 7 (id=3419): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) listen(r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)="2d1a63f1890a8901ef644082d8b7c528c4e8aa637884433300626ccd2b0299cbdd61e19a11921fe3062c1e4fbd3acb9d1a0b8c8064b81b1ccb837b8c294b65fb3ce9968c6df65dbef91e52a61732c758f2d39a0af2aa8b47cf31987eaf4a11b35f88af150a0864b58ce686f82bec92f0e103db4ead9c41052d927d424a5c5d380506605a531780de344ff7ad9c2780e7cd9339bd4904990bf007a971131a152784c19ca7b70ce48594f514d9063e32dcbe31f5cc83b461b9848c133ac0d986200389eecd2603b4568c18dfb31f63834e9a0c23c146aa91619be974e3460dd344b2c703", 0x0, 0xb47}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r7) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 17.848329284s ago: executing program 5 (id=3425): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000702"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, &(0x7f00000007c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa0}]}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 17.841263258s ago: executing program 7 (id=3426): r0 = socket(0x15, 0x5, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000070000000200010009"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead0"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9a43, 0x7ff, 0x9, 0x2, r4, 0x4, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x4}, 0x50) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) (async, rerun: 32) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='devices.list\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 64) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 17.414979991s ago: executing program 7 (id=3431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30f5ffffff2c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174"], 0xc8}}, 0x0) 17.277757313s ago: executing program 7 (id=3432): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x8000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, &(0x7f0000000480)="c2a2ecf79e10c62ba65958093bdc4a5fbe1eb68446f5ec02c21d43ac09adad3f41f03e99a0ea3a37959f92f3a2c4c759f3ed0c82320969059e06c4299fbeb7fd938f5a7ae4b6ffc1ddee82635d972f2ad6f4b9a4676c305d79cec59ea71142212165c23b95958a68429fd560ea1f0fc46e3e54c2a5be5dddfe6d1fcbc6a73cf3462b112154a4930e585188a2b236fc59a70c59a7c779d7779245d42b416c34668f81681b13c1c1f159358b629f5f01f9368c9e98e11cccdf10d935466e0f17d4db8b1dbe8a47f0b39a029883e70120643e8edc42acbef3416d60", &(0x7f0000000680)=@buf="8e3269aca27d13bc7014e227076f4917f559e256c688802e8a81c6c5401c15cfa3eb9717bd27285130e525c4a5ac674543529ac642950101e6958d36deed3867bb850ae017f71478d1dcca5fb01e589519a88b2dd0e0fea36f848fa6ba2fe7e3c6450ec2e63541ad4b4fc17aa6d2ddb20b11685c3ea215a2d656786854934d5c26b11bfb8ff0b17f7ea67de674d942a671cb54c29cc83ebed522d0c9529bb5bcbccc1eceaf990d4d84c5df84bac1ef0f6afe31d81fd9cef9", 0x2}, 0x20) ioctl$FICLONE(r7, 0x40049409, r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000100)="3cec0b48585fd74987a740450eb47ba42de7c0efef180b22ac8fcde9f714238d2b19f30edaa78e9bf9d17b4395dd68", &(0x7f0000000300)=""/110, &(0x7f0000000380)="d412e3aeca4f48f8a1e2621f222bb78817fb5549b113102e342de0701cd331950586165b7e62a6548024c8b0f5bfc36d38eac8514c42f3e8ea36d3ca55c653311ed486d05ae0602d98f172e1e803e5b60250f9c9a3981f2faeefd865ed6a6c36530f7394e064ed45bcd45595c2855f", &(0x7f0000000400)="582f8291d7ff4ef6f99eb9505de871569accb37cdbd4bb5725419da570405fa3b1fe8737530bac157f15ae6883a7f322312b2bbd34aca71f68d8fb39bb64cdc37472f21d5bbcf1cc747b7b1d34d2601b72ee5e", 0xb, r5, 0x4}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="61e8316580b231e206929c621335", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x3}, {0x3, 0x0, 0x1, 0x1}}], 0x8) close(r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002c00070100000000ffdb15351744465f01f1df25037c00000800018004000600100002800c00018008008e800400e98028358d98c273d855604b5c49f2fedf3fdfccf1ccd2606c"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 17.246900725s ago: executing program 1 (id=3433): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0xe0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 16.726646559s ago: executing program 1 (id=3434): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg\x00'}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [], [], 'veth1_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x380, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:framebuf_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580) 16.682076685s ago: executing program 4 (id=3435): socket$kcm(0x11, 0x200000000000002, 0x300) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket(0x2, 0x3, 0xff) (async) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0) sendmmsg$inet(r2, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a", 0x2d}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}], 0x2}}], 0x2, 0x488c4) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r6, @ANYBLOB="0804000000000000"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendto$inet(r1, &(0x7f0000000380)="a6", 0x1, 0x40, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r8 = socket$netlink(0x10, 0x3, 0x9) (async, rerun: 32) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000011c0)=@ethtool_rxnfc={0x30, 0x10, 0x2ee7a3f8, {0x7, @tcp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4e21, 0x8}, {0x0, @local, 0x6, 0x288e, [0x7d3, 0x7]}, @esp_ip6_spec={@mcast1, @mcast2, 0xf, 0x2}, {0x0, @random="bfa6b04fd512", 0x6, 0x8001, [0xa, 0x80000000]}, 0xfffffffffffffffa, 0x3}}}) 16.570508068s ago: executing program 1 (id=3436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x15}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x4c}}, 0x11) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x5, 0x7fff, 0x5, 0x100, r2, 0x9, '\x00', 0x0, r3, 0x2, 0x3, 0x4, 0xe}, 0x50) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @from_mac, @initial, {0x7, 0x8}, "", @value={0x4, 0x1, 0x0, 0x1, 0xff}}, @random="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"}, 0x7ff) syz_emit_ethernet(0x5a, &(0x7f0000000b40)={@broadcast, @broadcast, @val={@void, {0x8100, 0x6, 0x1}}, {@canfd={0xd, {{0x1, 0x1}, 0x1b, 0x2, 0x0, 0x0, "15daaae0640595c803b4fc6eb917062d25f7d79988dd5b4b2bd8be18254a4fa6fb6bf051dca1e547f8eaa5711cadbd9c157f1396f9cdb9cd9b8e31d8118e2df6"}}}}, &(0x7f0000000bc0)={0x0, 0x1, [0x8de, 0xd7f, 0xc1a, 0x86f]}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c00), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r5, 0x0, 0x75, 0x4c, &(0x7f0000000c40)="d95cc4071fc7f3dcf4ceae0af9e9ccae36e6752f1dbc050d4e5bb960d4fb6a98262f03fc5b45c4ae1ddf583180a3455de7b8bf01ea0d688b428d274157d699e254ef63b325a3cd6d333ba44ab88a192d7b840c9eed54f24a72fcc603b0e7d55d907e1bbb6d23df01014987a7dcc5a7c60b0cd1818a", &(0x7f0000000cc0)=""/76, 0x8, 0x0, 0x19, 0x69, &(0x7f0000000d40)="c7482e0fd1b3524761decd5eb96f9f1a73b7d85eca50ea11a5", &(0x7f0000000d80)="48a32f34a1aa51272b12f00bc81a238304e3fc178bda8b09c4d657ee87efb22d5dd93becb4531ab8b46c1355be51486a6756c785f138e586cd75d58a26c6bdb9190fcd97a1c6952544d9d601e6b7121cf97b49635d0e860610ab219d609f3a7bfc430b9aaa250b6c05", 0x6, 0x0, 0x1000}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000e80)={'wg0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', r6, r3, 0x1, 0x1}, 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x84, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x8800) r8 = socket(0x37, 0x1, 0xaed6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001140)=@req={0x28, &(0x7f0000001100)={'bridge0\x00', @ifru_names='syzkaller1\x00'}}) ioctl$sock_bt_hci(r8, 0x800448d4, &(0x7f0000001180)="fa51204c08a9271d6e4297e9214eb664f1b7dd9efc1d67764c010ad17a2956006b7b4fc56f94977454bf97df95766b4737c97f9a48967a7cbde88d2dda36914d982a7fa35a2dcae0330bd0e2acb070c0686ec77ba2b8d4e3cccdfe6fbd9f4bce345bbebd4c780b4042e029963e4399dd51a7e216f265f59d5c14bc9898fe59ff0e94d7ef0b1a9c48906325f7e170b593eee63beb06ac5187960923dc4286e46a2ba680dc783c428bd349644dd0037b66a310e342a8fd1449064428d5a26c540a6cc748e0df2e5cf72ae064e8e1bf195b0ed594e7a15469558e0523f410c81997d04e1e56bff2bdfb8b21d3e35878eef12d715e7b9cf8351523ebbbbd6a231962c2551122708060813225fbb8445d90097e7d1dae44ce9047f86c8bbbcb09423d3f68337e49e178af79021cc01471c27974d14b174ac6ee432572c189a7bd64eee37037532876c4379f6b1858a5b3492bade3481b63ec587f50dbd449ff2f4c393953454115aad19a48548f9dab908e42105bdcfd617759cf111fc5b82c28eae441308355b16d2095a4e2112c821f8c77ae3064fff39fabe34330c6114eda90f54b98d4a278879a51274b57230c9c0367c91da30dd61309a44b21e378b20ba9d1208ff0582d7d3e05819af92a1617a15dd997fc0b8ea0cf0defc3e899b2c059e5de456f2de36a992b0e03f0e25389bbda91df51850e24ff49a6bfe109c61d5669af2c40848f00486721fe13deae18805aa492881ee0070b066a1fc3ae37f5455a3160d48c1ccb419528b32cef49f5670f21dfe6cee7e6a3c8c62ac3305e231692845e67389cd42b984b8ff19778da7f77a084a5ff6c7b540fd4194bc8c763eb447dcd3050c48b09c7c2e7c5f698b6943df016f1425e7c211e9c532609c60291fabe60214c91f8ebae8ea8fe5a2f976f22aec1cbcbec2be9dd7e320fec63136c24a12ed4be2dbe7fdeee141273c1bf9bf8631314775b4c6b671e25bb14c2576b38c287dbef85e2534c8575b822bc4be8fa7903a6e2bd231b9a1a3d3391297017b0f1b08607262ae85f7114bac90a675448cc1a3075da34f2303532df336937f3e68112bbc9c251b0d2920b0db10c4283fa7a936fe881a3494eac49d3b64b0223ed22ec73674c3dff35e7cf08a46e51515330c54776e18620cf9b4ba83db8628c375e3f36a5c0a5e22fe99a0d1ca84c144304e2d90331d1e94e83074d5cba923c41cdb1a6167fccfd8635d0d28f26576d69c29b7c741e55d202344da390ffdbf3d4a524953a24d72b9a20b8133a7a897b06cb09776b12803c11214f32a61893865392e514f442b0638849968bb59fad3f1a07e94a38aa853dcfbac35e11a30ef8d44ba95429212de6b4bbadc367a5519a7c949f853c66dfb2656b4a2de44aa7302a2afc58584fdeb8c07c2b6ab5b1b5e7c5e056b07aa7d10d2c90372608a39a5da0e1a1bda8fd7486197c8c56ecd06c9ebd04241f92dccbf5fbf37684c0bcb513a4896aec9c66c0a9cbe9a574eacded60fc841ef701081c4aeff9cf68ba65c73730999ff32be17bb12fd28c2efcc7743d1e16afc544cac0ee89eecba3d439feb6c4704567680379390b4d96e6fb753bece0d455d0871e8bd267a5f97e0a856bb29ec99727993f5febfab6603ded8567ea15b38cf37c21c79ff2c4e4e8725d901c00643342143f3d1887a113e7aa80970b26d838e5816f96c038a2945f52198af1bce838390ec3b44d00b67fb9f6c8374ce9eb3cebb3a6424b8207e2b68969364b58dcb5eb1635528e410e6aa45d7cbac9deebf6c7448439bc36f28c18cec91ed989f3b514dd3826b0fc41a2abe8c73e92c1b3f51818f568dba43f37a118443ba46145df14a57530187a70ac99400ca5af8ca7304caabf815bc3091c379d5ae49d51ad0b261e2bf07cbb03b4987221ba10034aca15cd5fd3abe662b2bf9733bb5abf30d27987957a928194fc7caf16bdf93058df2de90c4dc7e555204c32fe98290fcc47bd1cc41ec0ba36ad9eec5bd6bfe264110d091f602f86465f9ef64f129f4954e932b42204f6898dd20091bf72d421e23e3673e5298b9c8eee6fa23cbdd8d8d87e4f644d6c1df608752385a986f4b45764ac586495b6814d5a10b9d1bc0bf20d81770f8bd2dd6c3b1b1c3013e53c17625421fd977164b0914011bdf1020e5cc400ea0af5e8c205cd7d41b77b0838e1723eedbf6376f56ac09fb44ef6c013de6a081f3a46db1d9751029e476adeb73800ca1c7b85279684c59e90e3e83ccfda88ff899c897841d8ef74d2e85241aa7ea75e86cdef391d0cf32abd3c0d7f5af1a508721342e5ed2773b89e8f04d2785fe3506456538b7686f819bc39652a61829a457b93a9b619b18ac90b1a1f5e95ae2ec448c5390e0dba899f6803b492065981573cee84d18f0212745b666a8d31b6f8192efc74118de55531a73a90763644664aa63aec1e35d83274e9e4de299ead2ea8066def20d4c3ef877fa8f15b25be4b7ffeecb850906ce28b479621bcd1bf7e00fe98d72bc4a150238d7ac12fe5a14aa468613baff905c378eb9254fd29e694a98159a1b62165992ccf5a426dc42119ac4cb173b176acea7a957c8542a9ff1b56bcc57d915e2479088c077db53693eeebe152ce1468a4ee6afc0d9eb21bbbd050440dd545ae346407429b062cca9e33bc3bbff4a0355eae9e12847ba0400ee6be20687c1e8a2c5e15d1e2caa833bd3ef7f6d9876c06e732915ac8de14b608b3e7f03b15057a23cec26765ffbcaf43ba55e373b6b5ca116e221289bec496502397259cc230b7f2b5d20c8f21c44c628972a1c476069322e1d2e1bef789a68f239333b388b4048af97fa6e87d07396bf4ecc5ca8bb0da0a718d74db7fb13d89cf59881d4ce7d7d6cc818197a8c10526a9b0b4209cceb5527450b54ded9551c8df81174d8bc74b88f4331b284f2dd50164e40ecfc6bfac2adbbdb279e137211c86c604b1472a32c407fa3367389134b680926647975afd994096399fecbacc98e70fe978c432c4f9e5ff27ed10ac0edfbbba5b39f6984a7bb1a6bfbda43f0e3ddc217c9f36ea0bf5fd63ec08458e7eab1705f8664399b5dc2ffd5c3bc182e133885b737c011df0cb86c3754204aeef3f083c8379b457dd6998a0aab9a7a93a57a14023d3acd4c1bd3b2b5e1f0919b63c5996ab6781af572bab53611061992430b3edc8f550ed8c8b3b9d0b46e8580c41d49f27dd69a2668f54049ac64612b567303cb2fed9996b64aad991296e850abfe10b480deedceaea4b27e7eb24da77fe40d7ac28312ab30a841c8a45c324d9b71286bc046cc0a07efcde18fa52eeda03a96b52fef09a829bb15b66a3d506f56d9b84b2bc02d79715504e9055240a50b3b77e2b3e725cfc4dbdce11facfd15b173d50712427bd388772d1927bea3a92a3893d14fcef17fde4a88101022a696127ea29d2f050ac96f57093df714bee8d9902d4cb75f8a2be2fe4bb04daf1f716cf1f69ad419169c2de3582d113f42069c08f4c4a59be628b4271da3bb1e672476e14dc001773e233705b4db0d9bf4a279cfa79fe27850cdcb6407c362cb995576228a9c74f6156d4be1d9665ea5b9f61c028c4da3de2e3c63451bb6a9982f6556fbc13b069b3a3aada86bc634fed05d62d5706a70a3da6ce9fbc57b608b0713c0070e19c232fc44c95dc65da82cf6ab3fc4b463944b9704b99fea3c695018b59cef06f35deaecba5f4292636e5551390c4c623a2fea4d9ae6396d2e539162930f9636c9fc70c27ae709e721bfe8f209a3a98549efceb72452cbb8df9e2a8c03bf787970cdabb9b42d9a15afbe2394c85e7edeeda191a82719ef0a3fb180280a50e2b681c62cff63bfec51d5af094bd90fedf08e171745563a8de5c70e1bf03ff247bea8541f109de3de83198e0f1f4af238f907c36017ed830d34756f5683ef53fa2f2e041c13be80bb39db8f7af9ac8dfbe9b26c86d51225a8292d86a984bde69fdac3d8e95bf4d5ed4fc751243bd4df7b0dfe65d3d7561e505e5dc6c68a4412fc3026e29ba94d279f31d6818a2d4a1efee39d7ec10bb508833e8acc3dadbac879b7223a3e71fffa09e98690ca8b7f2890ba26d0f771a2f4fcdba4fa46a5fd371d00e3190db8fc3f98b7dbd0a148e2870d11095d0f2c032328d28b7df2268d7acc154590abd8bf1420ad3874bd083c4e562d995fd753e37f43407fed0e82fb9206ba0abddf1b297c2ec81f81f2253335c8d56a68ebecb43f9ccd6172ac2efd4cd4e512c092eacddd57971d85b1b52a689628fe77459efed87bfe933c349521c9a4d6280cce2987448c4b3b9a2e4f6d7f7136d68d9e47f6accc6b777a9efc56ae7486bdcb732303058dc53a6cd8a010b6db64805fcf12101bf3910ae5b848a2b61d4b0f7593f70e5bc33b6be9cb790403ba9c12af436974b13f62a4a21adf937ca99b6893943e47a6d1e99d307623c9bd44c76b00587ad53515b0931ec02fe27af9cbb0b20b321f4b60c310a3da9408d2a7878196e37a92f805142856e7b518f98526d33c4953f550f9867aa8649d66522f2fb99127b0925efe6d06989d62951b45498b744c81a32601a6aec53e379f380440e9f50b69f152e94d2ba0f49524d97c82c1eb3b66d3ce16be8d5a74a5c2a6d22ec4e177c74d898637253811c57492e206f6aa2109bc88fe2bacb6d10ce390a89287c9b4f543665ecc0cbbc22890402602fd037cf207e30ea21a80b6780c34aef2add500c95d80fb54d3566d18a2686583b89f706d05feaf0d2f09f5034aebbf250e6f8d817a1b90489ac26daacd0e32e8903ec2f1ea2feb0ae22f9bc76d9f565c07ef68a653ffc00f7036c5340a698818a0546c5d40c284dd11b74aa50f6d88f821849951407fa9be89e72e1eb70502de6a1d4020923229eb95a28431d407dd2295a447fe5c889f7442a8562f55d0095169e81327baac3874fdc1241c9b25d57c2a72e5ef869ff1b6a0f57b3b7eac48f759f7ae07a99a1ab52dccf9d71c31ea75dfd1174e9a0c90a23c7f80f2209ebc27bf70ca36db6e36cebbe2304e03dac08b56cdfe04790fc96e18ab49ccaeea5aa35056d4de71723e6e5e0ee0f56e6915907be8e0312194a07014c6bfb3c4d119b1c340cfdea6b51808da851b8781388163fb0e3e7f3581ed3239539f26ccefb1e721dc9914d60666cbe2b901db1a4e3519663e76b9aeb69b6285811bf275e21614277b126bbbe1c50a6c58e6e5eae5ce08786f767c6934538fc2c9fffd5b1ca8886dc58ba7bd13ab05a8555032226191258dad76b4d1d194ce8db08217ae8da335b639d29fa53e722cb4c8dc2fecaaa77461b252e85cd05cdb93cdf1169794e1863e25a5052ae763125a7b99840e2623ca9e3d6230ffaebe331c058202c0a158cda229250caf83831b5aa11ce7445fce65c8e7215c85c9cb3d674954c56959244bffa34f913a8aa6783356e2d904a33b34985bc0d6315abf5a1f429415cedafbe78bb75fc40f48433dca996c825a970fde934b080d683cec4d30ec4a802a634f780e2c17eb0823bd89f91a5082b7657239a0d6c1ec7b34c26387a4e1921b4051321ce3207eacad58b5e33c09282714e4c3e938447ffca7369850d971995e407976a7e8cc8c6b08417299b7dd3ad91a41a6f7fb56f5b34d5c35c815f02d30554a3164409f60e4ccdc86fe2987ffa704d9ab251ed0368f753df26379fcd68964c347c8ce0fa3aad1ad6e82ee62f074108d131ad786e574d4a5fcf9889a408910f49de7de6e0463298a53e59037661aadc3fe61ea2781853f07c5c3b0c062c75db") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000021c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f0000002200)={0xd0, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8c28085a5335ea9931062689a4ffb30e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d2d7d7c92ffce094"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe9}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1003d0c1a093efed9e11a6b756eb06fd"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="90126478a9c18447faa4b4a6fd7cc477d3bb74f4a78e80e6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8fae8967f43f91fda4e4249babcb21a3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8181467b7e5e3bdd37a283479cccff75"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="212eab0c46bbc5599d2970fa1fd84dcc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x1010, r4, 0xd6425000) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000002380)=0x853e, 0x4) shutdown(r0, 0x1) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000023c0)={0x101, {{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x4, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e22, @remote}}]}, 0x290) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, &(0x7f0000002680)={'filter\x00', 0x44, "266fb120c5baac2dacf881cb28ee6419c576eeacd690899086b09420de9bf368b765a11d0b69ae0fa547f3d69c41cb0f9f0160e01ffdfdb0b596f92538138145d57aba18"}, &(0x7f0000002700)=0x68) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000002740)=0x3, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000002780)) getsockopt$sock_buf(r8, 0x1, 0x3d, &(0x7f00000027c0)=""/118, &(0x7f0000002840)=0x76) sendmsg$nl_route_sched(r8, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)=@deltfilter={0x2c, 0x2d, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff3}, {0x7, 0xb}, {0x9, 0xffe8}}, [@TCA_RATE={0x6, 0x5, {0xb7, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8c1) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000002980)) 16.570260633s ago: executing program 7 (id=3437): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x81, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) unshare(0x6a040000) socket(0x8, 0x3, 0x3) close(0x4) 16.472226541s ago: executing program 5 (id=3438): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x9fef}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) (async, rerun: 64) write$ppp(r0, &(0x7f0000000140)="1e0861", 0x3) (rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'hsr0\x00', @multicast}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe70, &(0x7f0000000580)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010528bdb20c0000df251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async, rerun: 64) r8 = accept$alg(r7, 0x0, 0x0) (rerun: 64) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)='|=', 0x2}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 16.039377639s ago: executing program 4 (id=3439): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000008d00000000000000000010ff020000000000000000000000000001"], 0x340a) 15.826945962s ago: executing program 5 (id=3440): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x8918, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000024000100000000000000000000000000060003"], 0x24}}, 0x8004) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x2}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00-\x00\t'], 0x20}}, 0x84) readv(r5, &(0x7f0000000140), 0xa) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = accept4(r0, &(0x7f0000000200)=@l2, &(0x7f0000000040)=0x80, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) recvmmsg(r0, &(0x7f000000fdc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000580)=""/213, 0xd5}, {0x0}], 0x2}, 0x9}], 0x1, 0x40, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2d2) 15.73222022s ago: executing program 6 (id=3441): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x810) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="51000000000b01010000000000000000030000080800034000000001050001000000000008000100292e2900080002400000000508000340"], 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0xcc, r3, 0x400, 0x8, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa0d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="00ffff00c5e36941d32445f0fcbde494caa4ba5589a9456a67c092678aec6377870cdff3fd0c59a62db4c6b7fdf23cd131f44198d329dc78472707a2c5a2a172a48d9504a179ff3bca4475bf0fee65c455ead16dbd0e2a3fadf1a9c07e4176a516ff99459290ebbfd9c2f5a0fdd8d7086f3e108658ccfe321136d03af5a18edd1234ba14be6357c51d6833f3a8bbd61a33c3ea39", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x42054}, 0x14) 15.723906666s ago: executing program 4 (id=3442): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x2000c800) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) close(0x3) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r5 = epoll_create1(0x80000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000340)={0xa000001c}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@delchain={0xb8, 0x65, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0xa}, {0x5, 0x10}, {0xc, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x75}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb}}, @TCA_FLOW_MASK={0x8, 0x6, 0x8ef}]}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xfff1}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x98}]}}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b22, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000f80)={{r7}, 0x0, 0x4, @unused=[0xa, 0xe, 0x401, 0x4], @devid=r9}) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000a80)={r11, 0x9a4, 0x1, 0x1}) 15.414875962s ago: executing program 1 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30002000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174"], 0xc8}}, 0x0) 15.270327934s ago: executing program 6 (id=3444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007001e007b1af8ff00000000bfa100000000000007c037824c7ed58f010000f8ffffffb700880040000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.208655718s ago: executing program 7 (id=3445): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="d9e81fb433fbce0c1e00020000000000181101000fa64d11ed31a4c1d686f909bdbaf79d1546b9cfca718219a384884cb7c9dc817800b3efe3e9cd31971ed8aafbb93d4361f78c86dfae532ba656fac1d963a68fb38863c7ac82d13c7eb72a8ea6d264320348", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040)="d802917196255a563d6d7a1ec2cf86a333457566fd5fa8abc0329f866652549ee6a2d4edc760a182c5cf22946d94d17521c7d9385191e895fc2752b8e8107e89a2fa7e9501ded89db4880000c2b479bffe1390a8286f6719643f9d1d2a2c864253bed66be18df993dc46531232fae2774586dd33649739460efd1c8d97a60c7384092311ca2afdd944ef17a317e23f21c804da6c0866283a34ac4e2c7600c489d7a167de766e87356104230fddd4fccd1c8a3405a44a297ddc7072dfea5f99388b083856eae87f52", &(0x7f00000001c0)=""/94}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x2, 0x0) 15.114777226s ago: executing program 1 (id=3446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0xc00}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ff7ffd, {0x0, 0x0, 0x0, r2, {0x7}, {0xd}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40400d4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x14, r5, 0x1}, 0x14}}, 0x24000000) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @default, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x88, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2411}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff0000, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000082) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0xc00}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ff7ffd, {0x0, 0x0, 0x0, r2, {0x7}, {0xd}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40400d4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x14, r5, 0x1}, 0x14}}, 0x24000000) (async) socket$inet(0x2, 0x3, 0x6) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @default, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x88, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2411}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff0000, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000082) (async) 15.114492509s ago: executing program 4 (id=3447): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000002000000000000000000010ff020000000000000000000000000001"], 0x340a) 14.963034263s ago: executing program 6 (id=3448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff"], 0x48) close(r1) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x7, 0xfffffffffffffe01, 0x7, 0x81, 0xd], 0x3, &(0x7f0000000080), 0x0, [{}, {}, {}]}, 0xa8) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r10, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 14.95086555s ago: executing program 5 (id=3449): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x2}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd700000000000040000004803118031f9e0562f"], 0x35c}, 0x1, 0xfdffffffffffffff, 0x0, 0x42804}, 0x4000010) 14.719050804s ago: executing program 6 (id=3450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c000000000000000000000000000000000000000000ff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101000000000000c4000500fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffe00000020300000000028100000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc01000000000000000000000000000000000000040002"], 0x17c}}, 0x0) 14.675416696s ago: executing program 6 (id=3451): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0xc0000008}) close(0x3) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) syz_emit_ethernet(0x79, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x3f, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty, [@routing={0x2c, 0x0, 0x2, 0xa3}], "d0c7a2be9cafc5"}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x4d2, 0x33}, @in6=@empty, {0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0xfffffffffffffffd, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x5010}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001300)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x4, 0x4, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000003c0)={r4, 0x6, 0x5, 0xffffffffffffffc8}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000440)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x3a, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xf39, 0x0, &(0x7f0000000200), 0x40f00, 0x11, '\x00', r10, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xb, 0x2, 0x8000}, 0x10, 0xffffffffffffffff, r11, 0x0, 0x0, &(0x7f0000000400), 0x10, 0xfffffffb}, 0x94) 14.612328331s ago: executing program 4 (id=3452): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x4010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000308000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0) 14.584221665s ago: executing program 1 (id=3453): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000001400)) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000062102000100060008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 14.582716114s ago: executing program 5 (id=3454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000300)={'veth1_macvtap\x00', @ifru_names='batadv_slave_0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000800100000400000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r8, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4a33c16684"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cef95f1f810fbdbcf3b5e5745d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4da69c4a47"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e7e975f80a58683ca72550dd59"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "29eafdc790"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) splice(r12, 0x0, r11, 0x0, 0x406f413, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 14.529279205s ago: executing program 6 (id=3455): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xbf}], 0x1}}], 0x3, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 14.426957945s ago: executing program 4 (id=3456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x80) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 0s ago: executing program 35 (id=3445): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="d9e81fb433fbce0c1e00020000000000181101000fa64d11ed31a4c1d686f909bdbaf79d1546b9cfca718219a384884cb7c9dc817800b3efe3e9cd31971ed8aafbb93d4361f78c86dfae532ba656fac1d963a68fb38863c7ac82d13c7eb72a8ea6d264320348", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040)="d802917196255a563d6d7a1ec2cf86a333457566fd5fa8abc0329f866652549ee6a2d4edc760a182c5cf22946d94d17521c7d9385191e895fc2752b8e8107e89a2fa7e9501ded89db4880000c2b479bffe1390a8286f6719643f9d1d2a2c864253bed66be18df993dc46531232fae2774586dd33649739460efd1c8d97a60c7384092311ca2afdd944ef17a317e23f21c804da6c0866283a34ac4e2c7600c489d7a167de766e87356104230fddd4fccd1c8a3405a44a297ddc7072dfea5f99388b083856eae87f52", &(0x7f00000001c0)=""/94}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x2, 0x0) kernel console output (not intermixed with test programs): ng attributes in process `syz.5.2603'. [ 356.613627][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2604'. [ 356.664808][T15271] wg1 speed is unknown, defaulting to 1000 [ 356.672883][T15271] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.734354][T15276] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 356.805302][T15282] vlan0: entered allmulticast mode [ 356.818168][T15282] dummy0: entered allmulticast mode [ 356.990594][T15284] bond4: Unable to set up delay as MII monitoring is disabled [ 357.051832][T15284] bond4 (unregistering): Released all slaves [ 357.165318][T15291] netlink: 'syz.6.2611': attribute type 1 has an invalid length. [ 358.241619][T15323] batadv0: entered promiscuous mode [ 358.277927][T15328] xt_bpf: check failed: parse error [ 358.286938][T15323] batadv0: entered allmulticast mode [ 358.745421][T15313] bridge9: entered promiscuous mode [ 358.784797][T15313] bridge9: entered allmulticast mode [ 358.901345][T15339] wg1 speed is unknown, defaulting to 1000 [ 358.918520][T15340] netlink: 'syz.7.2623': attribute type 11 has an invalid length. [ 358.928785][T15339] ip6_vti0 speed is unknown, defaulting to 1000 [ 358.930537][T15340] netlink: 'syz.7.2623': attribute type 11 has an invalid length. [ 359.077981][T15329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.114100][T15349] wg1 speed is unknown, defaulting to 1000 [ 359.296487][T15357] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.327831][T15359] FAULT_INJECTION: forcing a failure. [ 359.327831][T15359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.342441][T15357] netlink: 'syz.6.2631': attribute type 9 has an invalid length. [ 359.361385][T15357] netlink: 'syz.6.2631': attribute type 6 has an invalid length. [ 359.370657][T15357] netlink: 'syz.6.2631': attribute type 7 has an invalid length. [ 359.379088][T15359] CPU: 1 UID: 0 PID: 15359 Comm: syz.1.2632 Not tainted syzkaller #0 PREEMPT(full) [ 359.379110][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.379121][T15359] Call Trace: [ 359.379130][T15359] [ 359.379138][T15359] dump_stack_lvl+0x189/0x250 [ 359.379167][T15359] ? __pfx____ratelimit+0x10/0x10 [ 359.379191][T15359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.379212][T15359] ? __pfx__printk+0x10/0x10 [ 359.379242][T15359] should_fail_ex+0x414/0x560 [ 359.379269][T15359] _copy_from_user+0x2d/0xb0 [ 359.379289][T15359] bpf_test_init+0xd8/0x150 [ 359.379309][T15359] bpf_prog_test_run_skb+0x206/0x1550 [ 359.379324][T15359] ? __fget_files+0x2a/0x420 [ 359.379346][T15359] ? __fget_files+0x2a/0x420 [ 359.379365][T15359] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 359.379384][T15359] bpf_prog_test_run+0x2c7/0x340 [ 359.379405][T15359] __sys_bpf+0x562/0x860 [ 359.379423][T15359] ? __pfx___sys_bpf+0x10/0x10 [ 359.379455][T15359] ? ksys_write+0x22a/0x250 [ 359.379481][T15359] ? __pfx_ksys_write+0x10/0x10 [ 359.379511][T15359] __x64_sys_bpf+0x7c/0x90 [ 359.379536][T15359] do_syscall_64+0xfa/0xfa0 [ 359.379571][T15359] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.379595][T15359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.379619][T15359] ? clear_bhb_loop+0x60/0xb0 [ 359.379640][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.379658][T15359] RIP: 0033:0x7ff37a78f6c9 [ 359.379673][T15359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.379689][T15359] RSP: 002b:00007ff37b635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.379708][T15359] RAX: ffffffffffffffda RBX: 00007ff37a9e5fa0 RCX: 00007ff37a78f6c9 [ 359.379720][T15359] RDX: 000000000000004c RSI: 0000200000001040 RDI: 000000000000000a [ 359.379732][T15359] RBP: 00007ff37b635090 R08: 0000000000000000 R09: 0000000000000000 [ 359.379742][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.379754][T15359] R13: 00007ff37a9e6038 R14: 00007ff37a9e5fa0 R15: 00007ffce74691c8 [ 359.379781][T15359] [ 359.379976][T15357] netlink: 'syz.6.2631': attribute type 8 has an invalid length. [ 359.503904][T15349] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.838050][T15369] __nla_validate_parse: 12 callbacks suppressed [ 359.838069][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 359.853833][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2637'. [ 360.403656][T15391] netlink: 'syz.1.2640': attribute type 11 has an invalid length. [ 360.444054][T15391] netlink: 'syz.1.2640': attribute type 11 has an invalid length. [ 360.497719][T15391] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2640'. [ 360.531518][T15376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.096363][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 361.278933][T15421] tipc: Enabled bearer , priority 0 [ 361.300516][T15422] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 361.317861][T15422] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 361.378242][T15425] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.397923][T15425] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 361.450347][T15425] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 361.637512][T15428] wg1 speed is unknown, defaulting to 1000 [ 361.697021][T15428] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.826323][T15433] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2655'. [ 362.095654][T15441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2658'. [ 362.329220][T15449] xt_bpf: check failed: parse error [ 362.362996][T15451] FAULT_INJECTION: forcing a failure. [ 362.362996][T15451] name failslab, interval 1, probability 0, space 0, times 0 [ 362.392954][T15451] CPU: 1 UID: 0 PID: 15451 Comm: syz.4.2662 Not tainted syzkaller #0 PREEMPT(full) [ 362.392988][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.392999][T15451] Call Trace: [ 362.393007][T15451] [ 362.393015][T15451] dump_stack_lvl+0x189/0x250 [ 362.393045][T15451] ? __pfx____ratelimit+0x10/0x10 [ 362.393070][T15451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.393092][T15451] ? __pfx__printk+0x10/0x10 [ 362.393117][T15451] ? __pfx___might_resched+0x10/0x10 [ 362.393135][T15451] ? fs_reclaim_acquire+0x7d/0x100 [ 362.393165][T15451] should_fail_ex+0x414/0x560 [ 362.393195][T15451] should_failslab+0xa8/0x100 [ 362.393216][T15451] __kmalloc_noprof+0xcb/0x7f0 [ 362.393238][T15451] ? security_sk_alloc+0x52/0x390 [ 362.393264][T15451] security_sk_alloc+0x52/0x390 [ 362.393286][T15451] sk_prot_alloc+0x101/0x220 [ 362.393305][T15451] ? sk_alloc+0x26/0x410 [ 362.393325][T15451] sk_alloc+0x39/0x410 [ 362.393342][T15451] ? bpf_ctx_init+0x167/0x1d0 [ 362.393362][T15451] bpf_prog_test_run_skb+0x313/0x1550 [ 362.393389][T15451] ? __fget_files+0x2a/0x420 [ 362.393412][T15451] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 362.393431][T15451] bpf_prog_test_run+0x2c7/0x340 [ 362.393454][T15451] __sys_bpf+0x562/0x860 [ 362.393474][T15451] ? __pfx___sys_bpf+0x10/0x10 [ 362.393508][T15451] ? ksys_write+0x22a/0x250 [ 362.393534][T15451] ? __pfx_ksys_write+0x10/0x10 [ 362.393569][T15451] __x64_sys_bpf+0x7c/0x90 [ 362.393595][T15451] do_syscall_64+0xfa/0xfa0 [ 362.393618][T15451] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.393643][T15451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.393661][T15451] ? clear_bhb_loop+0x60/0xb0 [ 362.393683][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.393700][T15451] RIP: 0033:0x7f1934f8f6c9 [ 362.393717][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.393731][T15451] RSP: 002b:00007f19331ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.393752][T15451] RAX: ffffffffffffffda RBX: 00007f19351e5fa0 RCX: 00007f1934f8f6c9 [ 362.393765][T15451] RDX: 000000000000004c RSI: 0000200000001040 RDI: 000000000000000a [ 362.393777][T15451] RBP: 00007f19331ee090 R08: 0000000000000000 R09: 0000000000000000 [ 362.393789][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.393800][T15451] R13: 00007f19351e6038 R14: 00007f19351e5fa0 R15: 00007ffda6c138d8 [ 362.393832][T15451] [ 362.397323][ T1288] tipc: Node number set to 4100370353 [ 362.459782][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2663'. [ 363.516061][T15481] wg1 speed is unknown, defaulting to 1000 [ 363.524004][T15481] ip6_vti0 speed is unknown, defaulting to 1000 [ 363.580800][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 363.812185][T15494] xt_CT: No such helper "netbios-ns" [ 364.002521][T15514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2685'. [ 364.473441][T15537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2691'. [ 365.378372][T15564] __nla_validate_parse: 2 callbacks suppressed [ 365.378389][T15564] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2702'. [ 365.429523][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2702'. [ 365.646960][ T5838] syz_tun (unregistering): left promiscuous mode [ 365.706221][T15581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2706'. [ 365.749754][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.761774][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.771613][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.780790][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.790762][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.879864][T15582] wg1 speed is unknown, defaulting to 1000 [ 365.990840][T15586] wg1 speed is unknown, defaulting to 1000 [ 365.997077][T15582] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.142070][T15595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2712'. [ 366.341178][T15597] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 366.473423][T15597] 8021q: adding VLAN 0 to HW filter on device bond5 [ 366.499158][T15601] bond5: (slave ip6erspan0): making interface the new active one [ 366.508833][T15605] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2714'. [ 366.509738][T15601] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 366.570122][T15604] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2714'. [ 366.596753][T15586] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.693374][T15607] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2715'. [ 366.704292][T15607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2715'. [ 366.859741][ T50] bridge_slave_1: left allmulticast mode [ 366.867570][ T50] bridge_slave_1: left promiscuous mode [ 366.873898][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.899333][T15612] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2717'. [ 366.918195][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2716'. [ 366.984779][ T50] bridge_slave_0: left promiscuous mode [ 366.997302][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.055235][T15622] netlink: 'syz.4.2719': attribute type 15 has an invalid length. [ 367.199597][ T50] ip6gretap0 (unregistering): left promiscuous mode [ 367.582713][ T50] bond3 (unregistering): (slave gretap1): Releasing active interface [ 367.907763][ T5837] Bluetooth: hci4: command tx timeout [ 368.170792][ T50] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 368.183966][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.194110][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.205181][ T50] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 368.215294][ T50] bond0 (unregistering): Released all slaves [ 368.299457][ T50] bond1 (unregistering): Released all slaves [ 368.314501][ T50] bond2 (unregistering): Released all slaves [ 368.398769][ T50] bond3 (unregistering): Released all slaves [ 368.592224][ T50] tipc: Left network mode [ 368.745016][T15646] xt_bpf: check failed: parse error [ 369.011136][T15652] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 369.038831][T15652] bond6 (unregistering): Released all slaves [ 369.080447][T15664] netlink: 'syz.6.2731': attribute type 10 has an invalid length. [ 369.094716][T15582] chnl_net:caif_netlink_parms(): no params data found [ 369.123827][T15664] team0: Port device bridge0 added [ 369.427771][T15672] netlink: 'syz.7.2732': attribute type 5 has an invalid length. [ 369.672430][T15681] nbd: must specify a size in bytes for the device [ 369.690046][T15672] geneve3: entered promiscuous mode [ 369.701965][T15672] geneve3: entered allmulticast mode [ 369.786177][ T1165] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 369.824186][ T1165] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 369.845454][T15582] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.854197][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.977034][T15582] bridge_slave_0: entered allmulticast mode [ 369.977252][ T5837] Bluetooth: hci4: command tx timeout [ 369.997138][T15582] bridge_slave_0: entered promiscuous mode [ 370.063981][ T1165] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 370.086061][ T1165] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 370.097889][T15582] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.105522][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.118225][T15582] bridge_slave_1: entered allmulticast mode [ 370.131843][T15582] bridge_slave_1: entered promiscuous mode [ 370.376308][T15582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.440185][T15582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.607986][T15582] team0: Port device team_slave_0 added [ 370.634377][T15582] team0: Port device team_slave_1 added [ 370.794481][T15582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.836324][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.926548][T15582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.956004][T15718] __nla_validate_parse: 12 callbacks suppressed [ 370.956022][T15718] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2744'. [ 370.964471][T15582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.006151][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.036913][T15720] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2746'. [ 371.076923][T15582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.195995][T15721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2746'. [ 371.341179][T15582] hsr_slave_0: entered promiscuous mode [ 371.379411][T15582] hsr_slave_1: entered promiscuous mode [ 371.396131][T15582] debugfs: 'hsr0' already exists in 'hsr' [ 371.418509][T15582] Cannot create hsr debugfs directory [ 371.983597][T15736] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2749'. [ 372.075652][ T5837] Bluetooth: hci4: command tx timeout [ 372.312736][T15741] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2752'. [ 372.407755][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'. [ 372.418301][ T50] hsr_slave_0: left promiscuous mode [ 372.427114][ T50] hsr_slave_1: left promiscuous mode [ 372.849381][ T50] team0 (unregistering): Port device team_slave_1 removed [ 372.896754][ T50] team0 (unregistering): Port device team_slave_0 removed [ 373.264309][T15745] tipc: Enabling of bearer rejected, already enabled [ 373.275376][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2754'. [ 373.326294][T15754] tipc: Resetting bearer [ 373.403016][T15762] wg1 speed is unknown, defaulting to 1000 [ 373.411409][T15762] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.462232][T15770] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2761'. [ 373.676476][ T50] IPVS: stop unused estimator thread 0... [ 373.963146][T15582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.032402][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2769'. [ 374.075352][T15582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.136895][ T5837] Bluetooth: hci4: command tx timeout [ 374.164050][T15794] syzkaller0: entered promiscuous mode [ 374.169603][T15794] syzkaller0: entered allmulticast mode [ 374.176974][T15582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.199187][T15582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.237483][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2771'. [ 375.621497][T15800] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 375.630087][T15800] CPU: 0 UID: 0 PID: 15800 Comm: syz.6.2770 Not tainted syzkaller #0 PREEMPT(full) [ 375.630113][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.630126][T15800] Call Trace: [ 375.630135][T15800] [ 375.630143][T15800] dump_stack_lvl+0x189/0x250 [ 375.630179][T15800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.630205][T15800] ? __pfx__printk+0x10/0x10 [ 375.630231][T15800] ? kernfs_path_from_node+0x2f/0x290 [ 375.630255][T15800] ? kernfs_path_from_node+0x250/0x290 [ 375.630276][T15800] ? kernfs_path_from_node+0x2f/0x290 [ 375.630304][T15800] sysfs_warn_dup+0x8e/0xa0 [ 375.630326][T15800] sysfs_do_create_link_sd+0xc0/0x110 [ 375.630352][T15800] device_add_class_symlinks+0x1cf/0x240 [ 375.630379][T15800] device_add+0x475/0xb50 [ 375.630405][T15800] wiphy_register+0x1d2e/0x2d20 [ 375.630451][T15800] ? __pfx_wiphy_register+0x10/0x10 [ 375.630479][T15800] ? __pfx_netdev_run_todo+0x10/0x10 [ 375.630502][T15800] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 375.630533][T15800] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 375.630560][T15800] ieee80211_register_hw+0x3473/0x40d0 [ 375.630599][T15800] ? ieee80211_register_hw+0x1411/0x40d0 [ 375.630632][T15800] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 375.630653][T15800] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 375.630683][T15800] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 375.630707][T15800] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 375.630740][T15800] ? __hrtimer_setup+0x187/0x210 [ 375.630759][T15800] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 375.630784][T15800] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 375.630842][T15800] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 375.630867][T15800] ? trace_kmalloc+0x1f/0xd0 [ 375.630889][T15800] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 375.630915][T15800] ? kstrndup+0xbf/0x160 [ 375.630946][T15800] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 375.630981][T15800] ? __pfx___nla_validate_parse+0x10/0x10 [ 375.631023][T15800] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 375.631058][T15800] ? rcu_is_watching+0x15/0xb0 [ 375.631084][T15800] ? __nla_parse+0x40/0x60 [ 375.631109][T15800] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 375.631144][T15800] genl_family_rcv_msg_doit+0x215/0x300 [ 375.631177][T15800] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 375.631217][T15800] ? bpf_lsm_capable+0x9/0x20 [ 375.631238][T15800] ? security_capable+0x7e/0x2e0 [ 375.631270][T15800] genl_rcv_msg+0x60e/0x790 [ 375.631301][T15800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.631324][T15800] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 375.631369][T15800] netlink_rcv_skb+0x208/0x470 [ 375.631386][T15800] ? __lock_acquire+0xab9/0xd20 [ 375.631405][T15800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.631430][T15800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.631471][T15800] ? down_read+0x1ad/0x2e0 [ 375.631494][T15800] genl_rcv+0x28/0x40 [ 375.631514][T15800] netlink_unicast+0x82f/0x9e0 [ 375.631551][T15800] ? __pfx_netlink_unicast+0x10/0x10 [ 375.631580][T15800] ? netlink_sendmsg+0x642/0xb30 [ 375.631598][T15800] ? skb_put+0x11b/0x210 [ 375.631621][T15800] netlink_sendmsg+0x805/0xb30 [ 375.631652][T15800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.631676][T15800] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.631704][T15800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.631721][T15800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.631742][T15800] __sock_sendmsg+0x21c/0x270 [ 375.631770][T15800] ____sys_sendmsg+0x505/0x830 [ 375.631797][T15800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.631827][T15800] ? import_iovec+0x74/0xa0 [ 375.631854][T15800] ___sys_sendmsg+0x21f/0x2a0 [ 375.631878][T15800] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.631940][T15800] ? __fget_files+0x2a/0x420 [ 375.631957][T15800] ? __fget_files+0x3a0/0x420 [ 375.631987][T15800] __x64_sys_sendmsg+0x19b/0x260 [ 375.632017][T15800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.632059][T15800] ? do_syscall_64+0xbe/0xfa0 [ 375.632090][T15800] do_syscall_64+0xfa/0xfa0 [ 375.632113][T15800] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.632138][T15800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.632156][T15800] ? clear_bhb_loop+0x60/0xb0 [ 375.632179][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.632198][T15800] RIP: 0033:0x7f008358f6c9 [ 375.632216][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.632233][T15800] RSP: 002b:00007f00843bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.632254][T15800] RAX: ffffffffffffffda RBX: 00007f00837e6090 RCX: 00007f008358f6c9 [ 375.632269][T15800] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 375.632282][T15800] RBP: 00007f0083611f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.632294][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.632306][T15800] R13: 00007f00837e6128 R14: 00007f00837e6090 R15: 00007ffc5b08a6a8 [ 375.632341][T15800] [ 376.191241][T15813] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2772'. [ 376.260765][T15582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.291127][T15582] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.305965][T15818] wg1 speed is unknown, defaulting to 1000 [ 376.313138][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.320306][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.335425][T15821] netlink: 'syz.6.2774': attribute type 5 has an invalid length. [ 376.352515][T15818] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.354180][T15823] netlink: 'syz.4.2773': attribute type 15 has an invalid length. [ 376.388447][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.395614][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.976187][T15582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.218708][T15582] veth0_vlan: entered promiscuous mode [ 377.258324][T15582] veth1_vlan: entered promiscuous mode [ 377.278548][T15841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2778'. [ 377.333988][T15841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2778'. [ 377.356011][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2781'. [ 377.379796][T15582] veth0_macvtap: entered promiscuous mode [ 377.381625][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2780'. [ 377.400641][T15582] veth1_macvtap: entered promiscuous mode [ 377.513737][T15582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.562404][T15582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.649454][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.667989][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.701305][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.724302][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.039663][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.069310][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.303756][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.313487][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.552477][T15888] wg1 speed is unknown, defaulting to 1000 [ 378.568251][T15890] veth1_to_hsr: entered promiscuous mode [ 378.574449][T15890] macvtap1: entered promiscuous mode [ 378.582768][T15890] macvtap1: entered allmulticast mode [ 378.591567][T15890] veth1_to_hsr: entered allmulticast mode [ 378.599691][T15888] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.622132][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.634949][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2698'. [ 378.739534][T15893] x_tables: duplicate underflow at hook 1 [ 378.742116][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2791'. [ 378.755762][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2791'. [ 378.793865][T15892] syzkaller0: entered promiscuous mode [ 378.801072][T15892] syzkaller0: entered allmulticast mode [ 378.875849][T15890] wg1 speed is unknown, defaulting to 1000 [ 379.024687][T15890] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.040231][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2796'. [ 379.050462][T15909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2796'. [ 381.052584][T15945] netlink: 'syz.4.2806': attribute type 16 has an invalid length. [ 381.570613][T15957] __nla_validate_parse: 8 callbacks suppressed [ 381.570632][T15957] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2808'. [ 381.586104][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2808'. [ 381.590398][T15961] wg1 speed is unknown, defaulting to 1000 [ 381.597113][T15957] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2808'. [ 381.611120][T15957] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2808'. [ 381.715847][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2810'. [ 381.796616][T15961] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.818807][T15965] syzkaller0: entered promiscuous mode [ 381.824309][T15965] syzkaller0: entered allmulticast mode [ 381.904664][T15965] tc_dump_action: action bad kind [ 382.194660][T15971] netlink: 'syz.6.2811': attribute type 11 has an invalid length. [ 382.208945][T15971] netlink: 'syz.6.2811': attribute type 11 has an invalid length. [ 382.219732][T15971] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2811'. [ 382.458060][T15969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.468047][T15980] xt_TCPMSS: Only works on TCP SYN packets [ 382.511051][T15982] netlink: 324 bytes leftover after parsing attributes in process `syz.7.2816'. [ 382.523671][T15982] netlink: 'syz.7.2816': attribute type 1 has an invalid length. [ 382.533065][T15982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.329210][T16000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 383.429753][T16003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2820'. [ 383.577949][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2822'. [ 383.693820][ T6028] IPVS: starting estimator thread 0... [ 383.824149][T16014] IPVS: using max 31 ests per chain, 74400 per kthread [ 384.086371][T16033] wg1 speed is unknown, defaulting to 1000 [ 384.124039][T16033] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.263064][T16046] netlink: 'syz.5.2831': attribute type 13 has an invalid length. [ 384.312273][T16050] netlink: 'syz.6.2832': attribute type 13 has an invalid length. [ 385.002505][T16047] wg1 speed is unknown, defaulting to 1000 [ 385.307434][T16047] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.957454][T16086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.964745][T16086] IPv6: NLM_F_CREATE should be set when creating new route [ 385.972024][T16086] IPv6: NLM_F_CREATE should be set when creating new route [ 386.046398][T16086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.118149][T16091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.157693][T16085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.831830][T16100] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 386.854163][T16100] CPU: 0 UID: 0 PID: 16100 Comm: syz.7.2845 Not tainted syzkaller #0 PREEMPT(full) [ 386.854189][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.854202][T16100] Call Trace: [ 386.854210][T16100] [ 386.854219][T16100] dump_stack_lvl+0x189/0x250 [ 386.854254][T16100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.854279][T16100] ? __pfx__printk+0x10/0x10 [ 386.854312][T16100] ? kernfs_path_from_node+0x2f/0x290 [ 386.854335][T16100] ? kernfs_path_from_node+0x250/0x290 [ 386.854356][T16100] ? kernfs_path_from_node+0x2f/0x290 [ 386.854384][T16100] sysfs_warn_dup+0x8e/0xa0 [ 386.854407][T16100] sysfs_do_create_link_sd+0xc0/0x110 [ 386.854433][T16100] device_add_class_symlinks+0x1cf/0x240 [ 386.854461][T16100] device_add+0x475/0xb50 [ 386.854489][T16100] wiphy_register+0x1d2e/0x2d20 [ 386.854535][T16100] ? __pfx_wiphy_register+0x10/0x10 [ 386.854561][T16100] ? __pfx_netdev_run_todo+0x10/0x10 [ 386.854583][T16100] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 386.854614][T16100] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 386.854641][T16100] ieee80211_register_hw+0x3473/0x40d0 [ 386.854681][T16100] ? ieee80211_register_hw+0x1411/0x40d0 [ 386.854714][T16100] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 386.854735][T16100] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 386.854764][T16100] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 386.854795][T16100] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.854828][T16100] ? __hrtimer_setup+0x187/0x210 [ 386.854848][T16100] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 386.854872][T16100] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 386.854934][T16100] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 386.854958][T16100] ? trace_kmalloc+0x1f/0xd0 [ 386.854980][T16100] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 386.855007][T16100] ? kstrndup+0xbf/0x160 [ 386.855051][T16100] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 386.855088][T16100] ? __pfx___nla_validate_parse+0x10/0x10 [ 386.855125][T16100] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 386.855160][T16100] ? rcu_is_watching+0x15/0xb0 [ 386.855185][T16100] ? __nla_parse+0x40/0x60 [ 386.855210][T16100] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 386.855245][T16100] genl_family_rcv_msg_doit+0x215/0x300 [ 386.855277][T16100] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 386.855316][T16100] ? bpf_lsm_capable+0x9/0x20 [ 386.855336][T16100] ? security_capable+0x7e/0x2e0 [ 386.855368][T16100] genl_rcv_msg+0x60e/0x790 [ 386.855399][T16100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.855422][T16100] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 386.855450][T16100] ? __asan_memcpy+0x40/0x70 [ 386.855473][T16100] ? __pfx_ref_tracker_free+0x10/0x10 [ 386.855500][T16100] netlink_rcv_skb+0x208/0x470 [ 386.855518][T16100] ? __lock_acquire+0xab9/0xd20 [ 386.855538][T16100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.855561][T16100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.855602][T16100] ? down_read+0x1ad/0x2e0 [ 386.855624][T16100] genl_rcv+0x28/0x40 [ 386.855646][T16100] netlink_unicast+0x82f/0x9e0 [ 386.855683][T16100] ? __pfx_netlink_unicast+0x10/0x10 [ 386.855712][T16100] ? netlink_sendmsg+0x642/0xb30 [ 386.855729][T16100] ? skb_put+0x11b/0x210 [ 386.855753][T16100] netlink_sendmsg+0x805/0xb30 [ 386.855784][T16100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.855870][T16100] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.855905][T16100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.855923][T16100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.855945][T16100] __sock_sendmsg+0x21c/0x270 [ 386.855976][T16100] ____sys_sendmsg+0x505/0x830 [ 386.856004][T16100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.856036][T16100] ? import_iovec+0x74/0xa0 [ 386.856064][T16100] ___sys_sendmsg+0x21f/0x2a0 [ 386.856088][T16100] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.856155][T16100] ? __fget_files+0x2a/0x420 [ 386.856173][T16100] ? __fget_files+0x3a0/0x420 [ 386.856204][T16100] __x64_sys_sendmsg+0x19b/0x260 [ 386.856229][T16100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.856271][T16100] ? do_syscall_64+0xbe/0xfa0 [ 386.856301][T16100] do_syscall_64+0xfa/0xfa0 [ 386.856328][T16100] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.856354][T16100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.856372][T16100] ? clear_bhb_loop+0x60/0xb0 [ 386.856392][T16100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.856406][T16100] RIP: 0033:0x7fc57d58f6c9 [ 386.856423][T16100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.856438][T16100] RSP: 002b:00007fc57e4a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.856458][T16100] RAX: ffffffffffffffda RBX: 00007fc57d7e5fa0 RCX: 00007fc57d58f6c9 [ 386.856471][T16100] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 386.856481][T16100] RBP: 00007fc57d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.856491][T16100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.856502][T16100] R13: 00007fc57d7e6038 R14: 00007fc57d7e5fa0 R15: 00007fff26a0f248 [ 386.856597][T16100] [ 387.574581][T16105] netlink: 'syz.5.2848': attribute type 1 has an invalid length. [ 387.608048][T16105] __nla_validate_parse: 9 callbacks suppressed [ 387.608067][T16105] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2848'. [ 387.659627][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2850'. [ 387.671617][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2850'. [ 387.824689][T16105] Ï: option downdelay: invalid value (18446744073709547007) [ 387.844020][T16105] Ï: option downdelay: allowed values 0 - 2147483647 [ 387.855459][T16105] Ï (unregistering): Released all slaves [ 388.130100][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2853'. [ 388.180687][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2853'. [ 388.237425][T16126] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 388.379981][T16132] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2854'. [ 388.591629][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 388.614961][T16139] netlink: 'syz.5.2859': attribute type 13 has an invalid length. [ 388.790416][T16145] xt_bpf: check failed: parse error [ 389.306013][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2865'. [ 389.533786][T16160] ip6gre1: entered promiscuous mode [ 389.711663][T16174] netlink: 'syz.7.2869': attribute type 9 has an invalid length. [ 389.730834][T16176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2872'. [ 389.881448][T16176] dummy0: entered promiscuous mode [ 389.890763][T16176] dummy0: left promiscuous mode [ 390.092181][T16195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2877'. [ 390.095200][T16191] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 390.119119][T16191] bond1 (unregistering): Released all slaves [ 390.177779][T16198] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 390.183642][T16198] pim6reg1: linktype set to 805 [ 390.279953][T16202] netlink: 'syz.6.2875': attribute type 1 has an invalid length. [ 390.333230][T16201] bond2: entered promiscuous mode [ 391.542384][T16234] netlink: 'syz.4.2885': attribute type 11 has an invalid length. [ 391.577487][T16234] netlink: 'syz.4.2885': attribute type 11 has an invalid length. [ 391.716407][T16226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.877631][T16239] bond3: entered promiscuous mode [ 391.973167][T16245] wg1 speed is unknown, defaulting to 1000 [ 392.028785][T16245] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.138130][ T5837] Bluetooth: hci4: command tx timeout [ 392.450941][T16280] macsec0: entered allmulticast mode [ 392.960290][T16297] bond0: entered promiscuous mode [ 393.075743][T16300] netlink: 'syz.4.2902': attribute type 11 has an invalid length. [ 393.099470][T16304] __nla_validate_parse: 6 callbacks suppressed [ 393.099488][T16304] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2908'. [ 393.099783][T16300] netlink: 'syz.4.2902': attribute type 11 has an invalid length. [ 393.110809][T16304] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2908'. [ 393.151331][T16300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2902'. [ 393.193980][T16310] netlink: 'syz.5.2907': attribute type 13 has an invalid length. [ 393.348329][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.733088][T16323] syzkaller0: entered promiscuous mode [ 393.765292][T16323] syzkaller0: entered allmulticast mode [ 394.172984][ T60] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc9 [ 395.486964][T16345] netlink: 'syz.1.2915': attribute type 1 has an invalid length. [ 395.951129][T16346] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 395.961679][T16346] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 395.975052][T16346] bond1: (slave vcan1): making interface the new active one [ 395.983112][T16346] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 395.997232][T16347] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 396.010426][T16347] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 396.043471][T16355] netlink: 'syz.7.2917': attribute type 27 has an invalid length. [ 396.085160][T16335] wg1 speed is unknown, defaulting to 1000 [ 396.110754][T16335] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.129508][T16333] wg1 speed is unknown, defaulting to 1000 [ 396.142949][T16358] geneve4: entered promiscuous mode [ 396.264621][T16364] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2919'. [ 396.286439][T16359] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 396.340952][T16365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2919'. [ 396.378309][T16359] bond2 (unregistering): Released all slaves [ 396.620508][T16333] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.010762][T16386] netlink: 'syz.7.2920': attribute type 11 has an invalid length. [ 397.059877][T16386] netlink: 'syz.7.2920': attribute type 11 has an invalid length. [ 397.122862][T16386] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2920'. [ 397.184669][T16366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.434030][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2925'. [ 397.484831][T16399] netlink: 'syz.5.2926': attribute type 13 has an invalid length. [ 397.853420][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 398.076269][T16413] ip6tnl1: entered promiscuous mode [ 398.083014][T16413] ip6tnl1: entered allmulticast mode [ 398.099547][T16413] team0: Device ip6tnl1 is of different type [ 398.842204][T16426] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2931'. [ 398.871690][T16426] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2931'. [ 399.111659][T16428] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 399.127318][T16428] bond4 (unregistering): Released all slaves [ 399.462356][T16446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2938'. [ 399.570749][T16446] dummy0: entered promiscuous mode [ 399.599152][T16446] dummy0: left promiscuous mode [ 399.618997][T16453] FAULT_INJECTION: forcing a failure. [ 399.618997][T16453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.682961][T16453] CPU: 1 UID: 0 PID: 16453 Comm: syz.7.2940 Not tainted syzkaller #0 PREEMPT(full) [ 399.682985][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.682995][T16453] Call Trace: [ 399.683002][T16453] [ 399.683010][T16453] dump_stack_lvl+0x189/0x250 [ 399.683035][T16453] ? __pfx____ratelimit+0x10/0x10 [ 399.683058][T16453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.683079][T16453] ? __pfx__printk+0x10/0x10 [ 399.683105][T16453] should_fail_ex+0x414/0x560 [ 399.683131][T16453] _copy_to_user+0x31/0xb0 [ 399.683153][T16453] simple_read_from_buffer+0xe1/0x170 [ 399.683179][T16453] proc_fail_nth_read+0x1b3/0x220 [ 399.683203][T16453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.683225][T16453] ? rw_verify_area+0x2a6/0x4d0 [ 399.683246][T16453] ? __lock_acquire+0xab9/0xd20 [ 399.683271][T16453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.683292][T16453] vfs_read+0x200/0xa30 [ 399.683313][T16453] ? fdget_pos+0x247/0x320 [ 399.683333][T16453] ? __pfx___mutex_lock+0x10/0x10 [ 399.683351][T16453] ? __pfx_vfs_read+0x10/0x10 [ 399.683375][T16453] ? __fget_files+0x2a/0x420 [ 399.683394][T16453] ? __fget_files+0x3a0/0x420 [ 399.683409][T16453] ? __fget_files+0x2a/0x420 [ 399.683434][T16453] ksys_read+0x145/0x250 [ 399.683458][T16453] ? __pfx_ksys_read+0x10/0x10 [ 399.683484][T16453] ? do_syscall_64+0xbe/0xfa0 [ 399.683508][T16453] do_syscall_64+0xfa/0xfa0 [ 399.683530][T16453] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.683553][T16453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.683569][T16453] ? clear_bhb_loop+0x60/0xb0 [ 399.683590][T16453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.683607][T16453] RIP: 0033:0x7fc57d58e0dc [ 399.683624][T16453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 399.683640][T16453] RSP: 002b:00007fc57e4a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.683659][T16453] RAX: ffffffffffffffda RBX: 00007fc57d7e5fa0 RCX: 00007fc57d58e0dc [ 399.683672][T16453] RDX: 000000000000000f RSI: 00007fc57e4a80a0 RDI: 0000000000000005 [ 399.683682][T16453] RBP: 00007fc57e4a8090 R08: 0000000000000000 R09: 0000000000000000 [ 399.683693][T16453] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 399.683703][T16453] R13: 00007fc57d7e6038 R14: 00007fc57d7e5fa0 R15: 00007fff26a0f248 [ 399.683732][T16453] [ 400.400339][T16464] x_tables: unsorted entry at hook 3 [ 400.606637][T16470] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 400.625537][T16470] bond4 (unregistering): Released all slaves [ 401.127321][T16498] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2954'. [ 401.216082][T16498] batadv0: entered promiscuous mode [ 401.260198][T16505] can: request_module (can-proto-3) failed. [ 401.266050][T16498] batadv0: entered allmulticast mode [ 401.331368][T16511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2959'. [ 401.349065][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2958'. [ 401.641868][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2965'. [ 401.666265][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2965'. [ 401.699001][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2965'. [ 401.707863][T16538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2967'. [ 401.729617][T16538] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 401.982926][T16556] netlink: 'syz.6.2971': attribute type 2 has an invalid length. [ 401.993059][T16552] wg1 speed is unknown, defaulting to 1000 [ 402.002705][T16556] : entered promiscuous mode [ 402.012556][T16552] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.293222][T16568] batadv_slave_0: entered promiscuous mode [ 402.300166][T16567] batadv_slave_0: left promiscuous mode [ 403.314454][T16613] FAULT_INJECTION: forcing a failure. [ 403.314454][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 403.350549][T16613] CPU: 0 UID: 0 PID: 16613 Comm: syz.4.2988 Not tainted syzkaller #0 PREEMPT(full) [ 403.350573][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.350584][T16613] Call Trace: [ 403.350592][T16613] [ 403.350601][T16613] dump_stack_lvl+0x189/0x250 [ 403.350628][T16613] ? __pfx____ratelimit+0x10/0x10 [ 403.350652][T16613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.350674][T16613] ? __pfx__printk+0x10/0x10 [ 403.350699][T16613] ? __pfx___might_resched+0x10/0x10 [ 403.350717][T16613] ? fs_reclaim_acquire+0x7d/0x100 [ 403.350747][T16613] should_fail_ex+0x414/0x560 [ 403.350777][T16613] should_failslab+0xa8/0x100 [ 403.350797][T16613] __kmalloc_noprof+0xcb/0x7f0 [ 403.350819][T16613] ? sock_kmalloc+0xd6/0x160 [ 403.350838][T16613] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 403.350863][T16613] sock_kmalloc+0xd6/0x160 [ 403.350884][T16613] af_alg_sendmsg+0x115e/0x2440 [ 403.350922][T16613] ? aa_sk_perm+0x81e/0x950 [ 403.350948][T16613] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 403.350968][T16613] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.350989][T16613] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 403.351022][T16613] ? aa_sock_msg_perm+0xf1/0x1d0 [ 403.351048][T16613] ? skcipher_sendmsg+0x26/0xf0 [ 403.351070][T16613] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 403.351093][T16613] __sock_sendmsg+0x21c/0x270 [ 403.351126][T16613] ____sys_sendmsg+0x505/0x830 [ 403.351152][T16613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.351182][T16613] ? import_iovec+0x74/0xa0 [ 403.351208][T16613] ___sys_sendmsg+0x21f/0x2a0 [ 403.351230][T16613] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.351289][T16613] ? __fget_files+0x2a/0x420 [ 403.351304][T16613] ? __fget_files+0x3a0/0x420 [ 403.351332][T16613] __x64_sys_sendmsg+0x19b/0x260 [ 403.351354][T16613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.351383][T16613] ? __pfx_ksys_write+0x10/0x10 [ 403.351409][T16613] ? do_syscall_64+0xbe/0xfa0 [ 403.351437][T16613] do_syscall_64+0xfa/0xfa0 [ 403.351459][T16613] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.351485][T16613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.351502][T16613] ? clear_bhb_loop+0x60/0xb0 [ 403.351524][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.351542][T16613] RIP: 0033:0x7f1934f8f6c9 [ 403.351559][T16613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.351578][T16613] RSP: 002b:00007f19331cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.351598][T16613] RAX: ffffffffffffffda RBX: 00007f19351e6090 RCX: 00007f1934f8f6c9 [ 403.351611][T16613] RDX: 0000000000000040 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 403.351624][T16613] RBP: 00007f19331cd090 R08: 0000000000000000 R09: 0000000000000000 [ 403.351635][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.351647][T16613] R13: 00007f19351e6128 R14: 00007f19351e6090 R15: 00007ffda6c138d8 [ 403.351680][T16613] [ 403.728571][T16613] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 403.781983][T16613] bond6 (unregistering): Released all slaves [ 404.095814][T16640] __nla_validate_parse: 7 callbacks suppressed [ 404.095841][T16640] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2997'. [ 404.283526][T16642] bond4: option lacp_active: invalid value (8) [ 404.293023][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3004'. [ 404.363232][T16642] bond4 (unregistering): Released all slaves [ 404.692424][T16672] netlink: 'syz.1.3008': attribute type 2 has an invalid length. [ 404.738767][T16670] tipc: Enabling of bearer rejected, already enabled [ 404.892967][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3007'. [ 404.973043][T16690] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3012'. [ 405.142274][ T5830] syz_tun (unregistering): left promiscuous mode [ 405.160419][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.170617][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.179728][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3014'. [ 405.189504][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.203865][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.216098][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.261563][T16702] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3013'. [ 405.290175][T16696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.298401][T16706] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3013'. [ 405.300439][T16696] bond2: entered promiscuous mode [ 405.313417][T16696] bond0: (slave bond2): Enslaving as an active interface with an up link [ 405.429262][T16698] wg1 speed is unknown, defaulting to 1000 [ 405.474745][T16698] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.765672][T16736] openvswitch: netlink: Duplicate or invalid key (type 0). [ 405.788471][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3018'. [ 405.819500][T16736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.940055][T16740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.955130][T16740] bridge0: port 1(bond3) entered blocking state [ 405.971452][T16740] bridge0: port 1(bond3) entered disabled state [ 405.986033][T16740] bond3: entered allmulticast mode [ 406.005017][T16740] bond3: entered promiscuous mode [ 406.025175][T16752] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3023'. [ 406.235557][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3024'. [ 406.824271][T16792] FAULT_INJECTION: forcing a failure. [ 406.824271][T16792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.866953][T16792] CPU: 1 UID: 0 PID: 16792 Comm: syz.6.3035 Not tainted syzkaller #0 PREEMPT(full) [ 406.866978][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.866989][T16792] Call Trace: [ 406.866997][T16792] [ 406.867005][T16792] dump_stack_lvl+0x189/0x250 [ 406.867033][T16792] ? __pfx____ratelimit+0x10/0x10 [ 406.867058][T16792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.867080][T16792] ? __pfx__printk+0x10/0x10 [ 406.867098][T16792] ? __might_fault+0xb0/0x130 [ 406.867132][T16792] should_fail_ex+0x414/0x560 [ 406.867163][T16792] _copy_from_iter+0x404/0x1790 [ 406.867196][T16792] ? policy_nodemask+0x27c/0x720 [ 406.867214][T16792] ? __pfx__copy_from_iter+0x10/0x10 [ 406.867239][T16792] ? set_page_refcounted+0xa0/0x1e0 [ 406.867263][T16792] af_alg_sendmsg+0x1562/0x2440 [ 406.867306][T16792] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 406.867326][T16792] ? __pfx_aa_sk_perm+0x10/0x10 [ 406.867347][T16792] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 406.867379][T16792] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.867406][T16792] ? skcipher_sendmsg+0x26/0xf0 [ 406.867427][T16792] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 406.867451][T16792] __sock_sendmsg+0x21c/0x270 [ 406.867478][T16792] ____sys_sendmsg+0x505/0x830 [ 406.867503][T16792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.867533][T16792] ? import_iovec+0x74/0xa0 [ 406.867558][T16792] ___sys_sendmsg+0x21f/0x2a0 [ 406.867580][T16792] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.867638][T16792] ? __fget_files+0x2a/0x420 [ 406.867654][T16792] ? __fget_files+0x3a0/0x420 [ 406.867682][T16792] __x64_sys_sendmsg+0x19b/0x260 [ 406.867705][T16792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.867736][T16792] ? __pfx_ksys_write+0x10/0x10 [ 406.867764][T16792] ? do_syscall_64+0xbe/0xfa0 [ 406.867797][T16792] do_syscall_64+0xfa/0xfa0 [ 406.867820][T16792] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.867844][T16792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.867862][T16792] ? clear_bhb_loop+0x60/0xb0 [ 406.867884][T16792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.867902][T16792] RIP: 0033:0x7f008358f6c9 [ 406.867925][T16792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.867941][T16792] RSP: 002b:00007f00843bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.867962][T16792] RAX: ffffffffffffffda RBX: 00007f00837e6090 RCX: 00007f008358f6c9 [ 406.867976][T16792] RDX: 0000000000000040 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 406.867988][T16792] RBP: 00007f00843bc090 R08: 0000000000000000 R09: 0000000000000000 [ 406.868000][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.868011][T16792] R13: 00007f00837e6128 R14: 00007f00837e6090 R15: 00007ffc5b08a6a8 [ 406.868043][T16792] [ 407.223751][T16799] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 407.242393][T16799] bond4 (unregistering): Released all slaves [ 407.277572][T16698] chnl_net:caif_netlink_parms(): no params data found [ 407.337175][ T5837] Bluetooth: hci1: command tx timeout [ 407.489599][T16698] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.499725][T16698] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.507096][T16698] bridge_slave_0: entered allmulticast mode [ 407.515062][T16698] bridge_slave_0: entered promiscuous mode [ 407.534086][T16698] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.557041][T16698] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.564672][T16698] bridge_slave_1: entered allmulticast mode [ 407.575030][T16698] bridge_slave_1: entered promiscuous mode [ 407.696423][T16834] bond0: (slave dummy0): Releasing backup interface [ 407.905014][T16698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.958042][T16698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.475318][T16698] team0: Port device team_slave_0 added [ 408.512413][T16698] team0: Port device team_slave_1 added [ 408.523952][T16871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.620428][T16877] xt_bpf: check failed: parse error [ 408.664266][T16855] macvtap1: entered allmulticast mode [ 408.676238][T16855] mac80211_hwsim hwsim105 wlan0: entered allmulticast mode [ 408.691161][T16855] mac80211_hwsim hwsim105 wlan0: left allmulticast mode [ 408.743889][T16698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.752937][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.779412][T16698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.794640][T16698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.802943][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.833702][T16698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.964146][T16698] hsr_slave_0: entered promiscuous mode [ 408.979664][T16698] hsr_slave_1: entered promiscuous mode [ 408.986201][T16698] debugfs: 'hsr0' already exists in 'hsr' [ 408.992145][T16698] Cannot create hsr debugfs directory [ 409.046229][T16891] IPVS: Error connecting to the multicast addr [ 409.083592][T16895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.093343][T16895] bond0: (slave bond2): Enslaving as an active interface with an up link [ 409.156770][T16889] wg1 speed is unknown, defaulting to 1000 [ 409.166473][T16889] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.288356][T16905] bond1: option mode: unable to set because the bond device has slaves [ 409.417431][ T5837] Bluetooth: hci1: command tx timeout [ 409.627381][T16911] netlink: 'syz.7.3060': attribute type 11 has an invalid length. [ 409.635423][T16911] netlink: 'syz.7.3060': attribute type 11 has an invalid length. [ 409.686312][T16911] __nla_validate_parse: 18 callbacks suppressed [ 409.686330][T16911] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3060'. [ 410.075623][T16896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.317292][T16922] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3068'. [ 410.448960][T16916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3066'. [ 410.464281][T16916] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3066'. [ 410.476352][T16928] netlink: 'syz.7.3069': attribute type 1 has an invalid length. [ 410.482386][T16916] netlink: 'syz.1.3066': attribute type 6 has an invalid length. [ 410.512725][T16916] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3066'. [ 410.530511][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3069'. [ 410.545911][T16928] bond4: entered promiscuous mode [ 410.599221][T16928] bond4: entered allmulticast mode [ 410.629696][T16928] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.797098][T16918] wg1 speed is unknown, defaulting to 1000 [ 410.809775][T16916] wg1 speed is unknown, defaulting to 1000 [ 410.817929][T16916] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.108905][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3074'. [ 411.181443][T16918] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.212408][T16698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.249776][T16698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.286232][T16698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.311115][T16698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.497019][ T5837] Bluetooth: hci1: command tx timeout [ 411.612547][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3076'. [ 411.808772][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 411.853034][T16698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.922270][T16967] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3079'. [ 412.010255][T16698] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.033885][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.041121][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.102039][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.109231][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.245127][T16979] xt_bpf: check failed: parse error [ 412.314702][T16978] syzkaller0: entered promiscuous mode [ 412.324842][T16978] syzkaller0: entered allmulticast mode [ 412.412031][T16698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.705502][T16698] veth0_vlan: entered promiscuous mode [ 412.806569][T16698] veth1_vlan: entered promiscuous mode [ 413.097196][T17011] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 413.106971][T17011] CPU: 1 UID: 0 PID: 17011 Comm: syz.6.3089 Not tainted syzkaller #0 PREEMPT(full) [ 413.106995][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.107007][T17011] Call Trace: [ 413.107016][T17011] [ 413.107024][T17011] dump_stack_lvl+0x189/0x250 [ 413.107058][T17011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.107083][T17011] ? __pfx__printk+0x10/0x10 [ 413.107108][T17011] ? kernfs_path_from_node+0x2f/0x290 [ 413.107131][T17011] ? kernfs_path_from_node+0x250/0x290 [ 413.107151][T17011] ? kernfs_path_from_node+0x2f/0x290 [ 413.107175][T17011] sysfs_warn_dup+0x8e/0xa0 [ 413.107195][T17011] sysfs_do_create_link_sd+0xc0/0x110 [ 413.107218][T17011] device_add_class_symlinks+0x1cf/0x240 [ 413.107244][T17011] device_add+0x475/0xb50 [ 413.107267][T17011] wiphy_register+0x1d2e/0x2d20 [ 413.107316][T17011] ? __pfx_wiphy_register+0x10/0x10 [ 413.107342][T17011] ? __pfx_netdev_run_todo+0x10/0x10 [ 413.107367][T17011] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 413.107399][T17011] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 413.107426][T17011] ieee80211_register_hw+0x3473/0x40d0 [ 413.107466][T17011] ? ieee80211_register_hw+0x1411/0x40d0 [ 413.107500][T17011] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 413.107521][T17011] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 413.107551][T17011] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 413.107575][T17011] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 413.107609][T17011] ? __hrtimer_setup+0x187/0x210 [ 413.107628][T17011] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 413.107658][T17011] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 413.107729][T17011] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 413.107755][T17011] ? trace_kmalloc+0x1f/0xd0 [ 413.107775][T17011] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 413.107801][T17011] ? kstrndup+0xbf/0x160 [ 413.107833][T17011] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 413.107867][T17011] ? __pfx___nla_validate_parse+0x10/0x10 [ 413.107903][T17011] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.108000][T17011] ? rcu_is_watching+0x15/0xb0 [ 413.108026][T17011] ? __nla_parse+0x40/0x60 [ 413.108051][T17011] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 413.108087][T17011] genl_family_rcv_msg_doit+0x215/0x300 [ 413.108120][T17011] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 413.108159][T17011] ? bpf_lsm_capable+0x9/0x20 [ 413.108179][T17011] ? security_capable+0x7e/0x2e0 [ 413.108209][T17011] genl_rcv_msg+0x60e/0x790 [ 413.108242][T17011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.108265][T17011] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.108310][T17011] netlink_rcv_skb+0x208/0x470 [ 413.108327][T17011] ? __lock_acquire+0xab9/0xd20 [ 413.108346][T17011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.108370][T17011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.108411][T17011] ? down_read+0x1ad/0x2e0 [ 413.108432][T17011] genl_rcv+0x28/0x40 [ 413.108452][T17011] netlink_unicast+0x82f/0x9e0 [ 413.108489][T17011] ? __pfx_netlink_unicast+0x10/0x10 [ 413.108518][T17011] ? netlink_sendmsg+0x642/0xb30 [ 413.108534][T17011] ? skb_put+0x11b/0x210 [ 413.108559][T17011] netlink_sendmsg+0x805/0xb30 [ 413.108589][T17011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.108613][T17011] ? aa_sock_msg_perm+0xf1/0x1d0 [ 413.108640][T17011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.108658][T17011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.108678][T17011] __sock_sendmsg+0x21c/0x270 [ 413.108706][T17011] ____sys_sendmsg+0x505/0x830 [ 413.108734][T17011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.108766][T17011] ? import_iovec+0x74/0xa0 [ 413.108793][T17011] ___sys_sendmsg+0x21f/0x2a0 [ 413.108816][T17011] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.108880][T17011] ? __fget_files+0x2a/0x420 [ 413.108897][T17011] ? __fget_files+0x3a0/0x420 [ 413.108927][T17011] __x64_sys_sendmsg+0x19b/0x260 [ 413.108963][T17011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.109006][T17011] ? do_syscall_64+0xbe/0xfa0 [ 413.109036][T17011] do_syscall_64+0xfa/0xfa0 [ 413.109060][T17011] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.109086][T17011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.109104][T17011] ? clear_bhb_loop+0x60/0xb0 [ 413.109127][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.109146][T17011] RIP: 0033:0x7f008358f6c9 [ 413.109163][T17011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.109179][T17011] RSP: 002b:00007f00843bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.109198][T17011] RAX: ffffffffffffffda RBX: 00007f00837e6090 RCX: 00007f008358f6c9 [ 413.109213][T17011] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 413.109226][T17011] RBP: 00007f0083611f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.109238][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.109250][T17011] R13: 00007f00837e6128 R14: 00007f00837e6090 R15: 00007ffc5b08a6a8 [ 413.109286][T17011] [ 413.596334][ T5837] Bluetooth: hci1: command tx timeout [ 413.741567][T16698] veth0_macvtap: entered promiscuous mode [ 413.750310][T17014] delete_channel: no stack [ 413.866523][T16698] veth1_macvtap: entered promiscuous mode [ 414.111153][T16698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.133957][T16698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.148928][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.182979][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.209043][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.258392][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.303127][T17038] IPVS: length: 130 != 8 [ 414.480564][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.527826][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.643006][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.666304][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.814853][T17051] netlink: 'syz.6.3098': attribute type 11 has an invalid length. [ 414.829643][T17053] __nla_validate_parse: 4 callbacks suppressed [ 414.829662][T17053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3000'. [ 414.853006][T17051] netlink: 'syz.6.3098': attribute type 11 has an invalid length. [ 414.899797][T17051] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3098'. [ 414.945242][T17060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3000'. [ 415.358343][T17035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.518292][T17070] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 415.637110][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3108'. [ 415.655286][T17070] bond3 (unregistering): Released all slaves [ 415.839618][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.852351][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.865463][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.876590][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.895987][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.933971][T17084] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3112'. [ 415.992799][T17078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3110'. [ 416.050490][T17080] wg1 speed is unknown, defaulting to 1000 [ 416.068156][T17080] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.115731][T17090] wg1 speed is unknown, defaulting to 1000 [ 416.188818][T17088] wg1 speed is unknown, defaulting to 1000 [ 416.297934][T17101] netlink: 'syz.6.3117': attribute type 10 has an invalid length. [ 416.329660][T17101] team0: Port device 0! added [ 416.345920][T17103] netlink: 'syz.6.3117': attribute type 10 has an invalid length. [ 416.367497][T17101] netlink: 'syz.6.3117': attribute type 10 has an invalid length. [ 416.423479][T17101] team0: Port device 0! removed [ 416.448637][T17101] !: entered promiscuous mode [ 416.462938][T17101] bond0: (slave 0!): Enslaving as an active interface with an up link [ 416.497141][T17090] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.565218][T17109] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3119'. [ 416.595110][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3119'. [ 416.617499][T17109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3119'. [ 416.686598][T17112] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3121'. [ 416.751684][T17112] 8021q: VLANs not supported on ip6_vti0 [ 417.163997][T17131] netlink: 'syz.6.3130': attribute type 9 has an invalid length. [ 417.197194][ T1160] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.232382][ T1160] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.243188][T17134] openvswitch: netlink: Message has 592 unknown bytes. [ 417.253664][T17134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.336090][T17088] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.463700][ T1160] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.519830][ T1160] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.977573][ T5829] Bluetooth: hci5: command tx timeout [ 418.116009][ T1160] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.146904][ T1160] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 418.299055][ T1160] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.315244][ T1160] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 418.443885][T17197] ip6gre1: entered promiscuous mode [ 418.824236][T17209] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 418.832784][T17209] CPU: 1 UID: 0 PID: 17209 Comm: syz.6.3141 Not tainted syzkaller #0 PREEMPT(full) [ 418.832809][T17209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.832821][T17209] Call Trace: [ 418.832830][T17209] [ 418.832839][T17209] dump_stack_lvl+0x189/0x250 [ 418.832873][T17209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.832898][T17209] ? __pfx__printk+0x10/0x10 [ 418.832925][T17209] ? kernfs_path_from_node+0x2f/0x290 [ 418.832947][T17209] ? kernfs_path_from_node+0x250/0x290 [ 418.832968][T17209] ? kernfs_path_from_node+0x2f/0x290 [ 418.832996][T17209] sysfs_warn_dup+0x8e/0xa0 [ 418.833018][T17209] sysfs_do_create_link_sd+0xc0/0x110 [ 418.833043][T17209] device_add_class_symlinks+0x1cf/0x240 [ 418.833070][T17209] device_add+0x475/0xb50 [ 418.833096][T17209] wiphy_register+0x1d2e/0x2d20 [ 418.833141][T17209] ? __pfx_wiphy_register+0x10/0x10 [ 418.833167][T17209] ? __pfx_netdev_run_todo+0x10/0x10 [ 418.833191][T17209] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 418.833222][T17209] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 418.833249][T17209] ieee80211_register_hw+0x3473/0x40d0 [ 418.833288][T17209] ? ieee80211_register_hw+0x1411/0x40d0 [ 418.833322][T17209] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 418.833341][T17209] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 418.833372][T17209] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 418.833405][T17209] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.833439][T17209] ? __hrtimer_setup+0x187/0x210 [ 418.833459][T17209] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 418.833483][T17209] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 418.833545][T17209] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 418.833570][T17209] ? trace_kmalloc+0x1f/0xd0 [ 418.833592][T17209] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 418.833618][T17209] ? kstrndup+0xbf/0x160 [ 418.833648][T17209] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 418.833683][T17209] ? __pfx___nla_validate_parse+0x10/0x10 [ 418.833719][T17209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 418.833754][T17209] ? rcu_is_watching+0x15/0xb0 [ 418.833780][T17209] ? __nla_parse+0x40/0x60 [ 418.833805][T17209] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 418.833843][T17209] genl_family_rcv_msg_doit+0x215/0x300 [ 418.833875][T17209] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 418.833910][T17209] ? bpf_lsm_capable+0x9/0x20 [ 418.833927][T17209] ? security_capable+0x7e/0x2e0 [ 418.833958][T17209] genl_rcv_msg+0x60e/0x790 [ 418.833989][T17209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.834011][T17209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 418.834055][T17209] netlink_rcv_skb+0x208/0x470 [ 418.834072][T17209] ? __lock_acquire+0xab9/0xd20 [ 418.834092][T17209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.834117][T17209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.834159][T17209] ? down_read+0x1ad/0x2e0 [ 418.834182][T17209] genl_rcv+0x28/0x40 [ 418.834204][T17209] netlink_unicast+0x82f/0x9e0 [ 418.834242][T17209] ? __pfx_netlink_unicast+0x10/0x10 [ 418.834271][T17209] ? netlink_sendmsg+0x642/0xb30 [ 418.834288][T17209] ? skb_put+0x11b/0x210 [ 418.834312][T17209] netlink_sendmsg+0x805/0xb30 [ 418.834343][T17209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.834367][T17209] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.834402][T17209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.834420][T17209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.834442][T17209] __sock_sendmsg+0x21c/0x270 [ 418.834471][T17209] ____sys_sendmsg+0x505/0x830 [ 418.834500][T17209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.834532][T17209] ? import_iovec+0x74/0xa0 [ 418.834559][T17209] ___sys_sendmsg+0x21f/0x2a0 [ 418.834583][T17209] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.834644][T17209] ? __fget_files+0x2a/0x420 [ 418.834661][T17209] ? __fget_files+0x3a0/0x420 [ 418.834691][T17209] __x64_sys_sendmsg+0x19b/0x260 [ 418.834715][T17209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.834756][T17209] ? do_syscall_64+0xbe/0xfa0 [ 418.834787][T17209] do_syscall_64+0xfa/0xfa0 [ 418.834811][T17209] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.834837][T17209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.834856][T17209] ? clear_bhb_loop+0x60/0xb0 [ 418.834879][T17209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.834897][T17209] RIP: 0033:0x7f008358f6c9 [ 418.834914][T17209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.834931][T17209] RSP: 002b:00007f00843bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.834951][T17209] RAX: ffffffffffffffda RBX: 00007f00837e6090 RCX: 00007f008358f6c9 [ 418.834966][T17209] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 418.834979][T17209] RBP: 00007f0083611f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.834992][T17209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.835004][T17209] R13: 00007f00837e6128 R14: 00007f00837e6090 R15: 00007ffc5b08a6a8 [ 418.835040][T17209] [ 419.361819][T17080] chnl_net:caif_netlink_parms(): no params data found [ 419.579041][ T1160] ip6gretap0 (unregistering): left promiscuous mode [ 419.944332][T17234] __nla_validate_parse: 9 callbacks suppressed [ 419.944350][T17234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3150'. [ 420.024109][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3151'. [ 420.058056][ T5829] Bluetooth: hci5: command tx timeout [ 420.859299][T17250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3154'. [ 420.869832][T17250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3154'. [ 420.918587][T17252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3155'. [ 421.108327][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.118327][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.129026][ T1160] bond0 (unregistering): Released all slaves [ 421.221552][ T1160] bond1 (unregistering): Released all slaves [ 421.234209][ T1160] bond2 (unregistering): Released all slaves [ 421.247314][ T1160] bond3 (unregistering): Released all slaves [ 421.336311][ T1160] bond4 (unregistering): Released all slaves [ 421.592657][T17257] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3157'. [ 421.626955][ T1160] tipc: Left network mode [ 421.881018][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3160'. [ 421.920709][T17276] FAULT_INJECTION: forcing a failure. [ 421.920709][T17276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.943681][T17276] CPU: 1 UID: 0 PID: 17276 Comm: syz.4.3161 Not tainted syzkaller #0 PREEMPT(full) [ 421.943707][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.943718][T17276] Call Trace: [ 421.943727][T17276] [ 421.943735][T17276] dump_stack_lvl+0x189/0x250 [ 421.943763][T17276] ? __pfx____ratelimit+0x10/0x10 [ 421.943788][T17276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.943809][T17276] ? __pfx__printk+0x10/0x10 [ 421.943841][T17276] should_fail_ex+0x414/0x560 [ 421.943871][T17276] _copy_from_user+0x2d/0xb0 [ 421.943894][T17276] __copy_msghdr+0x3c5/0x5b0 [ 421.943919][T17276] ___sys_sendmsg+0x1a5/0x2a0 [ 421.943941][T17276] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.943995][T17276] ? __fget_files+0x2a/0x420 [ 421.944010][T17276] ? __fget_files+0x3a0/0x420 [ 421.944034][T17276] __sys_sendmmsg+0x227/0x430 [ 421.944058][T17276] ? __pfx___sys_sendmmsg+0x10/0x10 [ 421.944086][T17276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 421.944121][T17276] ? ksys_write+0x22a/0x250 [ 421.944146][T17276] ? __pfx_ksys_write+0x10/0x10 [ 421.944174][T17276] __x64_sys_sendmmsg+0xa0/0xc0 [ 421.944196][T17276] do_syscall_64+0xfa/0xfa0 [ 421.944218][T17276] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.944241][T17276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.944257][T17276] ? clear_bhb_loop+0x60/0xb0 [ 421.944278][T17276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.944302][T17276] RIP: 0033:0x7fca48f8f6c9 [ 421.944318][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.944332][T17276] RSP: 002b:00007fca49da8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.944352][T17276] RAX: ffffffffffffffda RBX: 00007fca491e5fa0 RCX: 00007fca48f8f6c9 [ 421.944365][T17276] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003 [ 421.944377][T17276] RBP: 00007fca49da8090 R08: 0000000000000000 R09: 0000000000000000 [ 421.944389][T17276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.944400][T17276] R13: 00007fca491e6038 R14: 00007fca491e5fa0 R15: 00007ffe2962e178 [ 421.944429][T17276] [ 422.168562][ T5829] Bluetooth: hci5: command tx timeout [ 422.194519][T17274] ip6gretap1: entered promiscuous mode [ 422.206189][T17274] ip6gretap1: entered allmulticast mode [ 422.241267][T17080] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.250641][T17080] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.258293][T17080] bridge_slave_0: entered allmulticast mode [ 422.266030][T17080] bridge_slave_0: entered promiscuous mode [ 422.290033][T17080] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.297262][T17080] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.304487][T17080] bridge_slave_1: entered allmulticast mode [ 422.312926][T17080] bridge_slave_1: entered promiscuous mode [ 422.413514][T17080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.425407][T17282] debugfs: '1ùàV!' already exists in 'ieee80211' [ 422.446164][T17080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.634760][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3168'. [ 422.654173][T17288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3166'. [ 422.656356][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3167'. [ 422.809861][T17080] team0: Port device team_slave_0 added [ 422.895557][T17080] team0: Port device team_slave_1 added [ 423.016969][T17304] netlink: 'syz.1.3170': attribute type 1 has an invalid length. [ 423.133783][T17080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.141321][T17080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.166403][T17319] netlink: 'syz.4.3172': attribute type 23 has an invalid length. [ 423.185212][T17080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.219355][T17080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.238545][T17080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.300776][T17080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.418704][T17080] hsr_slave_0: entered promiscuous mode [ 423.425043][T17080] hsr_slave_1: entered promiscuous mode [ 423.432295][T17080] debugfs: 'hsr0' already exists in 'hsr' [ 423.443361][T17080] Cannot create hsr debugfs directory [ 424.227151][ T5829] Bluetooth: hci5: command tx timeout [ 424.438710][T17344] wg1 speed is unknown, defaulting to 1000 [ 424.463102][T17344] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.475766][T17348] wg1 speed is unknown, defaulting to 1000 [ 424.833678][T17348] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.955929][T17368] netlink: 'syz.4.3184': attribute type 1 has an invalid length. [ 425.253004][T17080] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 425.273428][T17080] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 425.300534][T17080] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 425.311904][T17080] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 425.721049][T17080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.760017][T17080] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.801827][T17379] __nla_validate_parse: 4 callbacks suppressed [ 425.801847][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3186'. [ 425.864657][T17169] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.871886][T17169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.899445][T17169] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.906605][T17169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.297167][ T5829] Bluetooth: hci5: command tx timeout [ 426.586585][ T1160] hsr_slave_0: left promiscuous mode [ 426.605750][T17394] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3191'. [ 426.614991][T17394] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3191'. [ 426.687115][ T1160] hsr_slave_1: left promiscuous mode [ 426.850848][ T1160] pim6reg99999999 (unregistering): left allmulticast mode [ 427.151043][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 427.187437][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 427.581365][T17400] wg1 speed is unknown, defaulting to 1000 [ 427.631852][T17400] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.780784][T17080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.962278][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3197'. [ 428.018701][T17420] netlink: 'syz.5.3195': attribute type 1 has an invalid length. [ 428.092361][ T1160] IPVS: stop unused estimator thread 0... [ 428.294033][T17080] veth0_vlan: entered promiscuous mode [ 428.330936][T17080] veth1_vlan: entered promiscuous mode [ 428.561376][T17080] veth0_macvtap: entered promiscuous mode [ 428.594403][T17080] veth1_macvtap: entered promiscuous mode [ 428.625481][T17080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.642767][T17080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.684841][T17173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.726985][T17173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.738035][T17173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.474477][T17173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.646459][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.660786][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.800826][T17173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.825076][T17173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.159476][T17449] netlink: 'syz.6.3204': attribute type 11 has an invalid length. [ 430.180537][T17449] netlink: 'syz.6.3204': attribute type 11 has an invalid length. [ 430.203276][T17449] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3204'. [ 430.261478][T17444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.390197][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3205'. [ 430.439697][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3206'. [ 430.457349][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3206'. [ 430.561318][T17457] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3208'. [ 430.602645][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3210'. [ 430.638566][T17461] bridge_slave_1: left allmulticast mode [ 430.644522][T17461] bridge_slave_1: left promiscuous mode [ 430.659013][T17461] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.670853][T17461] bridge_slave_0: left allmulticast mode [ 430.677178][T17461] bridge_slave_0: left promiscuous mode [ 430.683068][T17461] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.788590][T17477] netlink: 'syz.7.3209': attribute type 1 has an invalid length. [ 430.916463][T17461] team0: Port device bridge0 removed [ 431.375412][T17488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3217'. [ 431.401449][T17489] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 431.408695][T17486] wg1 speed is unknown, defaulting to 1000 [ 431.557827][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.567458][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.575579][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.586142][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.594493][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.670690][T17486] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.796707][T17492] wg1 speed is unknown, defaulting to 1000 [ 432.049622][T17492] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.276754][T17173] bond3: left allmulticast mode [ 432.281965][T17173] bond3: left promiscuous mode [ 432.302193][T17173] bridge0: port 1(bond3) entered disabled state [ 432.667572][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'. [ 432.677757][T17173] ip6gretap0 (unregistering): left promiscuous mode [ 432.688502][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'. [ 432.812221][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 432.907701][T17533] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 432.931905][T17173] erspan0 (unregistering): left promiscuous mode [ 432.979260][T17173] gretap0 (unregistering): left promiscuous mode [ 433.028125][T17173] bond1 (unregistering): (slave gre1): Releasing backup interface [ 433.035984][T17173] gre1 (unregistering): left promiscuous mode [ 433.657514][ T5829] Bluetooth: hci0: command tx timeout [ 433.692461][T17173] bond1 (unregistering): Released all slaves [ 433.711534][T17173] bond0 (unregistering): (slave bond2): Releasing backup interface [ 433.727582][T17173] bond2 (unregistering): left promiscuous mode [ 433.734083][T17173] bond0 (unregistering): Released all slaves [ 433.807635][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 433.874805][T17173] bond2 (unregistering): Released all slaves [ 434.032505][T17173] bond3 (unregistering): Released all slaves [ 434.120425][T17539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.338685][T17173] IPVS: stopping backup sync thread 14793 ... [ 434.395679][T17539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.104470][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3237'. [ 435.407263][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3240'. [ 435.435235][T17569] hsr_slave_0: left promiscuous mode [ 435.441651][T17569] hsr_slave_1: left promiscuous mode [ 435.482863][T17577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3242'. [ 435.491989][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 435.518860][T17573] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 435.541782][T17573] bond3 (unregistering): Released all slaves [ 435.737162][ T5829] Bluetooth: hci0: command tx timeout [ 435.805705][T17492] chnl_net:caif_netlink_parms(): no params data found [ 436.052517][T17492] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.065097][T17492] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.073253][T17492] bridge_slave_0: entered allmulticast mode [ 436.081015][T17492] bridge_slave_0: entered promiscuous mode [ 436.117158][T17492] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.125940][T17492] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.157750][T17492] bridge_slave_1: entered allmulticast mode [ 436.168498][T17492] bridge_slave_1: entered promiscuous mode [ 436.175724][T17598] netlink: 'syz.4.3249': attribute type 8 has an invalid length. [ 436.187777][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'. [ 436.231557][T17598] bond0: entered promiscuous mode [ 436.236634][T17598] bond_slave_0: entered promiscuous mode [ 436.243046][T17598] bond_slave_1: entered promiscuous mode [ 436.251105][T17598] bond0: left promiscuous mode [ 436.256098][T17598] bond_slave_0: left promiscuous mode [ 436.269980][T17598] bond_slave_1: left promiscuous mode [ 436.335814][T17492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.463309][T17616] __nla_validate_parse: 1 callbacks suppressed [ 436.463328][T17616] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3252'. [ 436.481548][T17492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.600275][T17492] team0: Port device team_slave_0 added [ 436.614948][T17492] team0: Port device team_slave_1 added [ 436.685045][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3254'. [ 436.720733][T17492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.727870][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.761201][T17492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.775024][T17492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.790259][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.797649][T17636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3257'. [ 436.816669][T17492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.838704][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3254'. [ 436.973206][T17640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3259'. [ 437.018387][T17640] dummy0: entered promiscuous mode [ 437.049858][T17640] dummy0: left promiscuous mode [ 437.107409][T17492] hsr_slave_0: entered promiscuous mode [ 437.126894][T17492] hsr_slave_1: entered promiscuous mode [ 437.341717][T17652] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3264'. [ 437.679392][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 437.828279][ T5829] Bluetooth: hci0: command tx timeout [ 438.053796][T17173] hsr_slave_0: left promiscuous mode [ 438.073805][T17173] hsr_slave_1: left promiscuous mode [ 438.084022][T17173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.100330][T17173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.165346][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3271'. [ 438.325966][T17688] netlink: 'syz.1.3274': attribute type 28 has an invalid length. [ 438.334933][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3274'. [ 438.686252][T17173] team0 (unregistering): Port device team_slave_1 removed [ 438.741425][T17173] team0 (unregistering): Port device team_slave_0 removed [ 439.087325][T17686] bond4: entered promiscuous mode [ 439.092476][T17686] bond4: entered allmulticast mode [ 439.098813][T17686] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.208725][T17686] bond4 (unregistering): Released all slaves [ 439.331562][T17703] wg1 speed is unknown, defaulting to 1000 [ 439.351021][T17703] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.521400][T17720] netlink: 'syz.7.3281': attribute type 16 has an invalid length. [ 439.529367][T17720] netlink: 'syz.7.3281': attribute type 17 has an invalid length. [ 439.589946][T17723] xt_bpf: check failed: parse error [ 439.779971][T17726] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3284'. [ 439.902136][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.909930][T17720] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.926913][ T5829] Bluetooth: hci0: command tx timeout [ 440.075499][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.603798][T17720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.629466][T17720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.852384][ T3445] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.876071][ T3445] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.919620][ T3445] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.961687][ T3445] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.042956][T17173] IPVS: stop unused estimator thread 0... [ 441.240283][T17754] wg1 speed is unknown, defaulting to 1000 [ 441.277093][T17754] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.502762][T17771] netlink: 'syz.4.3294': attribute type 10 has an invalid length. [ 441.519861][T17771] __nla_validate_parse: 6 callbacks suppressed [ 441.519879][T17771] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3294'. [ 441.638230][T17771] team0: Failed to send options change via netlink (err -105) [ 441.662069][T17771] team0: Port device geneve0 added [ 441.696839][T17492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 441.709461][T17492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 441.995019][T17492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.056199][T17492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.081866][T17779] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3298'. [ 442.306033][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3299'. [ 442.478595][T17492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.575472][T17492] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.638210][T17166] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.645494][T17166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.698954][T17166] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.706127][T17166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.451473][T17492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.690574][T17807] netlink: 'syz.7.3301': attribute type 11 has an invalid length. [ 443.710633][T17807] netlink: 'syz.7.3301': attribute type 11 has an invalid length. [ 443.726043][T17807] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3301'. [ 443.742330][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3301'. [ 443.752683][T17808] netlink: 'syz.1.3302': attribute type 11 has an invalid length. [ 443.760733][T17808] netlink: 'syz.1.3302': attribute type 11 has an invalid length. [ 443.791585][T17808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3302'. [ 443.955827][T17798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.041701][T17815] openvswitch: netlink: IP tunnel dst address not specified [ 444.216082][T17492] veth0_vlan: entered promiscuous mode [ 444.243354][T17492] veth1_vlan: entered promiscuous mode [ 444.258866][T17824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3305'. [ 444.310372][T17492] veth0_macvtap: entered promiscuous mode [ 444.334819][T17492] veth1_macvtap: entered promiscuous mode [ 444.372928][T17492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.416511][T17492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.448044][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.490032][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.506748][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.536513][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.572337][T17837] netlink: 'syz.1.3307': attribute type 12 has an invalid length. [ 444.687851][T17837] netlink: 'syz.1.3307': attribute type 4 has an invalid length. [ 444.855248][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3309'. [ 444.904376][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.913027][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.985120][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.993681][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.172592][T17849] xt_bpf: check failed: parse error [ 445.335608][T17846] wg1 speed is unknown, defaulting to 1000 [ 445.344586][T17846] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.567378][T17862] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3314'. [ 446.099328][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.109417][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.124958][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.134173][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.143932][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.396265][T17880] wg1 speed is unknown, defaulting to 1000 [ 446.404037][T17880] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.563436][T17892] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3323'. [ 446.803793][T17894] FAULT_INJECTION: forcing a failure. [ 446.803793][T17894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.846940][T17894] CPU: 1 UID: 0 PID: 17894 Comm: syz.1.3324 Not tainted syzkaller #0 PREEMPT(full) [ 446.846966][T17894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.846981][T17894] Call Trace: [ 446.846988][T17894] [ 446.846996][T17894] dump_stack_lvl+0x189/0x250 [ 446.847023][T17894] ? __pfx____ratelimit+0x10/0x10 [ 446.847045][T17894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.847067][T17894] ? __pfx__printk+0x10/0x10 [ 446.847085][T17894] ? __might_fault+0xb0/0x130 [ 446.847124][T17894] should_fail_ex+0x414/0x560 [ 446.847154][T17894] _copy_from_user+0x2d/0xb0 [ 446.847176][T17894] ip_tunnel_parm_from_user+0xa2/0x380 [ 446.847197][T17894] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 446.847221][T17894] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 446.847243][T17894] ? rcu_is_watching+0x15/0xb0 [ 446.847274][T17894] ip_tunnel_siocdevprivate+0x99/0x180 [ 446.847291][T17894] ? __mutex_lock+0x5bb/0x1350 [ 446.847310][T17894] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 446.847339][T17894] ? netdev_name_node_lookup+0xdf/0x120 [ 446.847365][T17894] dev_ifsioc+0xb57/0xf00 [ 446.847394][T17894] dev_ioctl+0x84c/0x1150 [ 446.847415][T17894] sock_ioctl+0x719/0x790 [ 446.847441][T17894] ? __pfx_sock_ioctl+0x10/0x10 [ 446.847467][T17894] ? __fget_files+0x3a0/0x420 [ 446.847483][T17894] ? __fget_files+0x2a/0x420 [ 446.847504][T17894] ? bpf_lsm_file_ioctl+0x9/0x20 [ 446.847523][T17894] ? __pfx_sock_ioctl+0x10/0x10 [ 446.847551][T17894] __se_sys_ioctl+0xfc/0x170 [ 446.847575][T17894] do_syscall_64+0xfa/0xfa0 [ 446.847598][T17894] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.847622][T17894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.847640][T17894] ? clear_bhb_loop+0x60/0xb0 [ 446.847661][T17894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.847683][T17894] RIP: 0033:0x7fd077d8f6c9 [ 446.847700][T17894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.847714][T17894] RSP: 002b:00007fd078cd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.847733][T17894] RAX: ffffffffffffffda RBX: 00007fd077fe5fa0 RCX: 00007fd077d8f6c9 [ 446.847747][T17894] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 446.847760][T17894] RBP: 00007fd078cd4090 R08: 0000000000000000 R09: 0000000000000000 [ 446.847772][T17894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.847782][T17894] R13: 00007fd077fe6038 R14: 00007fd077fe5fa0 R15: 00007ffc7b532e08 [ 446.847815][T17894] [ 447.302074][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3328'. [ 447.712816][T17912] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.720646][T17912] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.038972][T17912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.183494][T17912] veth1_to_hsr: left allmulticast mode [ 448.217234][ T5829] Bluetooth: hci2: command tx timeout [ 448.277485][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.289489][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.308263][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3331'. [ 448.341885][T17923] netlink: 'syz.5.3331': attribute type 14 has an invalid length. [ 448.365916][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.400053][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.454058][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3332'. [ 448.458219][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3331'. [ 448.506988][T17923] netlink: 'syz.5.3331': attribute type 14 has an invalid length. [ 448.608245][T17930] xt_bpf: check failed: parse error [ 448.626602][ T3445] ip6gretap0 (unregistering): left promiscuous mode [ 448.854400][T17173] smc: removing ib device syz2 [ 448.922243][T17935] netlink: 'syz.1.3335': attribute type 10 has an invalid length. [ 448.988999][ T3445] bond2 (unregistering): (slave gretap1): Releasing active interface [ 449.001831][ T3445] gretap1 (unregistering): left allmulticast mode [ 449.096333][ T3445] dvmrp6 (unregistering): left allmulticast mode [ 450.017356][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.036701][ T3445] bond_slave_0: left promiscuous mode [ 450.054788][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.065068][ T3445] bond_slave_1: left promiscuous mode [ 450.074898][ T3445] bond0 (unregistering): (slave 0!): Releasing backup interface [ 450.085890][ T3445] !: left promiscuous mode [ 450.092763][ T3445] bond0 (unregistering): Released all slaves [ 450.110298][ T3445] bond1 (unregistering): Released all slaves [ 450.123593][ T3445] bond2 (unregistering): Released all slaves [ 450.218467][ T3445] bond3 (unregistering): Released all slaves [ 450.234474][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.243483][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.257016][T17933] bridge_slave_0: left allmulticast mode [ 450.262708][T17933] bridge_slave_0: left promiscuous mode [ 450.286555][T17933] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.297180][ T5829] Bluetooth: hci2: command tx timeout [ 450.350315][T17933] bridge_slave_1: left allmulticast mode [ 450.370387][T17933] bridge_slave_1: left promiscuous mode [ 450.376222][T17933] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.421995][T17933] bond0: (slave bond_slave_0): Releasing backup interface [ 450.444367][T17933] bond0: (slave bond_slave_1): Releasing backup interface [ 450.460696][T17933] team0: Port device team_slave_0 removed [ 450.469476][T17933] team0: Port device team_slave_1 removed [ 450.475750][T17933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.539264][T17933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.586514][T17935] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 450.597061][T17936] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 450.605632][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.606564][T17936] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 450.618061][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.656926][T17936] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 450.669621][ T3445] : left promiscuous mode [ 450.798231][T17939] FAULT_INJECTION: forcing a failure. [ 450.798231][T17939] name failslab, interval 1, probability 0, space 0, times 0 [ 450.814528][T17939] CPU: 0 UID: 0 PID: 17939 Comm: syz.7.3336 Not tainted syzkaller #0 PREEMPT(full) [ 450.814551][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.814562][T17939] Call Trace: [ 450.814570][T17939] [ 450.814578][T17939] dump_stack_lvl+0x189/0x250 [ 450.814606][T17939] ? __pfx____ratelimit+0x10/0x10 [ 450.814631][T17939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.814653][T17939] ? __pfx__printk+0x10/0x10 [ 450.814678][T17939] ? __pfx___might_resched+0x10/0x10 [ 450.814697][T17939] ? fs_reclaim_acquire+0x7d/0x100 [ 450.814727][T17939] should_fail_ex+0x414/0x560 [ 450.814758][T17939] should_failslab+0xa8/0x100 [ 450.814778][T17939] __kvmalloc_node_noprof+0x158/0x910 [ 450.814805][T17939] ? alloc_netdev_mqs+0xa6/0x11b0 [ 450.814835][T17939] alloc_netdev_mqs+0xa6/0x11b0 [ 450.814855][T17939] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 450.814888][T17939] __ip_tunnel_create+0x349/0x560 [ 450.814910][T17939] ? __pfx___ip_tunnel_create+0x10/0x10 [ 450.814930][T17939] ? bpf_lsm_capable+0x9/0x20 [ 450.814950][T17939] ? security_capable+0x7e/0x2e0 [ 450.814982][T17939] ip_tunnel_ctl+0x4dd/0xc30 [ 450.815005][T17939] ipgre_tunnel_ctl+0x2ef/0x5c0 [ 450.815039][T17939] ip_tunnel_siocdevprivate+0xf5/0x180 [ 450.815056][T17939] ? __mutex_lock+0x5bb/0x1350 [ 450.815076][T17939] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 450.815107][T17939] ? netdev_name_node_lookup+0xdf/0x120 [ 450.815134][T17939] dev_ifsioc+0xb57/0xf00 [ 450.815168][T17939] dev_ioctl+0x84c/0x1150 [ 450.815191][T17939] sock_ioctl+0x719/0x790 [ 450.815216][T17939] ? __pfx_sock_ioctl+0x10/0x10 [ 450.815242][T17939] ? __fget_files+0x3a0/0x420 [ 450.815259][T17939] ? __fget_files+0x2a/0x420 [ 450.815279][T17939] ? bpf_lsm_file_ioctl+0x9/0x20 [ 450.815299][T17939] ? __pfx_sock_ioctl+0x10/0x10 [ 450.815320][T17939] __se_sys_ioctl+0xfc/0x170 [ 450.815346][T17939] do_syscall_64+0xfa/0xfa0 [ 450.815368][T17939] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.815392][T17939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.815410][T17939] ? clear_bhb_loop+0x60/0xb0 [ 450.815432][T17939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.815450][T17939] RIP: 0033:0x7f30fc18f6c9 [ 450.815467][T17939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.815482][T17939] RSP: 002b:00007f30fcf94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.815501][T17939] RAX: ffffffffffffffda RBX: 00007f30fc3e5fa0 RCX: 00007f30fc18f6c9 [ 450.815515][T17939] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 450.815528][T17939] RBP: 00007f30fcf94090 R08: 0000000000000000 R09: 0000000000000000 [ 450.815539][T17939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.815550][T17939] R13: 00007f30fc3e6038 R14: 00007f30fc3e5fa0 R15: 00007ffff23af0d8 [ 450.815584][T17939] [ 451.202276][ T3445] tipc: Disabling bearer [ 451.212547][ T3445] tipc: Left network mode [ 451.379786][T17880] chnl_net:caif_netlink_parms(): no params data found [ 451.505035][T17964] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3343'. [ 451.838479][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3349'. [ 451.850745][T17880] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.884715][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.907416][T17880] bridge_slave_0: entered allmulticast mode [ 451.909047][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3351'. [ 451.924214][T17880] bridge_slave_0: entered promiscuous mode [ 451.968680][T17986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.986058][T17990] bond1: option ad_select: unable to set because the bond device is up [ 451.997615][T17880] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.004863][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.016220][T17880] bridge_slave_1: entered allmulticast mode [ 452.024201][T17880] bridge_slave_1: entered promiscuous mode [ 452.087994][T17997] ip6gre1: entered promiscuous mode [ 452.102403][T17999] FAULT_INJECTION: forcing a failure. [ 452.102403][T17999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.122775][T17999] CPU: 0 UID: 0 PID: 17999 Comm: syz.4.3353 Not tainted syzkaller #0 PREEMPT(full) [ 452.122802][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.122813][T17999] Call Trace: [ 452.122822][T17999] [ 452.122830][T17999] dump_stack_lvl+0x189/0x250 [ 452.122856][T17999] ? __pfx____ratelimit+0x10/0x10 [ 452.122880][T17999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.122903][T17999] ? __pfx__printk+0x10/0x10 [ 452.122935][T17999] should_fail_ex+0x414/0x560 [ 452.122963][T17999] _copy_to_user+0x31/0xb0 [ 452.122988][T17999] bpf_test_finish+0x24e/0x700 [ 452.123016][T17999] ? __pfx_bpf_test_finish+0x10/0x10 [ 452.123041][T17999] ? bpf_test_init+0x113/0x150 [ 452.123061][T17999] bpf_prog_test_run_xdp+0x88c/0x10e0 [ 452.123097][T17999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 452.123119][T17999] ? __fget_files+0x2a/0x420 [ 452.123143][T17999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 452.123162][T17999] bpf_prog_test_run+0x2c7/0x340 [ 452.123185][T17999] __sys_bpf+0x562/0x860 [ 452.123213][T17999] ? __pfx___sys_bpf+0x10/0x10 [ 452.123247][T17999] ? ksys_write+0x22a/0x250 [ 452.123273][T17999] ? __pfx_ksys_write+0x10/0x10 [ 452.123302][T17999] __x64_sys_bpf+0x7c/0x90 [ 452.123327][T17999] do_syscall_64+0xfa/0xfa0 [ 452.123349][T17999] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.123372][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.123390][T17999] ? clear_bhb_loop+0x60/0xb0 [ 452.123412][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.123429][T17999] RIP: 0033:0x7fca48f8f6c9 [ 452.123445][T17999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.123460][T17999] RSP: 002b:00007fca49da8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.123480][T17999] RAX: ffffffffffffffda RBX: 00007fca491e5fa0 RCX: 00007fca48f8f6c9 [ 452.123494][T17999] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 452.123506][T17999] RBP: 00007fca49da8090 R08: 0000000000000000 R09: 0000000000000000 [ 452.123518][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.123529][T17999] R13: 00007fca491e6038 R14: 00007fca491e5fa0 R15: 00007ffe2962e178 [ 452.123560][T17999] [ 452.377372][ T5829] Bluetooth: hci2: command tx timeout [ 452.409765][T17880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.426877][T17992] wg1 speed is unknown, defaulting to 1000 [ 452.451168][T17880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.474035][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3355'. [ 452.484763][T18003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3354'. [ 452.569048][T17880] team0: Port device team_slave_0 added [ 452.591298][T17880] team0: Port device team_slave_1 added [ 452.607287][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3355'. [ 452.934743][T17880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.945180][T17880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.971840][T17880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.004284][T17880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.011456][T17880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.038905][T17880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.200981][T17880] hsr_slave_0: entered promiscuous mode [ 453.207952][T17880] hsr_slave_1: entered promiscuous mode [ 453.214334][T17880] debugfs: 'hsr0' already exists in 'hsr' [ 453.221691][T17880] Cannot create hsr debugfs directory [ 453.685118][T18036] netlink: 'syz.4.3363': attribute type 11 has an invalid length. [ 453.699363][T18036] netlink: 'syz.4.3363': attribute type 11 has an invalid length. [ 453.717723][T18036] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3363'. [ 453.928760][T18029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.015769][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3367'. [ 454.047335][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3367'. [ 454.245218][ T3445] hsr_slave_0: left promiscuous mode [ 454.264876][ T3445] hsr_slave_1: left promiscuous mode [ 454.457058][ T5829] Bluetooth: hci2: command tx timeout [ 454.552554][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 454.605963][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 455.058772][T18056] tipc: Enabling of bearer rejected, failed to enable media [ 455.161519][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 455.170546][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3374'. [ 455.675590][ T3445] IPVS: stop unused estimator thread 0... [ 455.766972][T17880] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 455.803830][ T3445] veth0_to_bridge: left allmulticast mode [ 455.822538][ T3445] veth0_to_bridge: left promiscuous mode [ 455.830088][ T3445] bridge0: port 3(veth0_to_bridge) entered disabled state [ 455.851814][ T3445] bridge_slave_1: left allmulticast mode [ 455.857731][ T3445] bridge_slave_1: left promiscuous mode [ 455.863610][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.874693][ T3445] bridge_slave_0: left allmulticast mode [ 455.880481][ T3445] bridge_slave_0: left promiscuous mode [ 455.886293][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.966392][ T3445] ip6gretap0 (unregistering): left promiscuous mode [ 456.023051][ T3445] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 456.171447][ T3445] bond3 (unregistering): (slave gretap1): Releasing active interface [ 456.181326][ T3445] gretap1 (unregistering): left allmulticast mode [ 456.649359][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.659789][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.669761][ T3445] bond0 (unregistering): (slave `): Releasing backup interface [ 456.679900][ T3445] bond0 (unregistering): Released all slaves [ 456.771336][ T3445] bond1 (unregistering): Released all slaves [ 456.864671][ T3445] bond2 (unregistering): Released all slaves [ 456.877167][ T3445] bond3 (unregistering): Released all slaves [ 456.889776][ T3445] bond4 (unregistering): Released all slaves [ 456.979302][ T3445] bond5 (unregistering): Released all slaves [ 456.991486][T17880] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 457.006748][T17880] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 457.019520][T17880] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 457.157981][T18094] wg1 speed is unknown, defaulting to 1000 [ 457.163904][ T3445] tipc: Left network mode [ 457.329466][T18132] __nla_validate_parse: 3 callbacks suppressed [ 457.329699][T18132] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3393'. [ 457.648486][T17880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.831255][T18151] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3400'. [ 458.020320][T17880] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.176101][T17169] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.183308][T17169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.295691][T18157] netlink: 'syz.5.3403': attribute type 13 has an invalid length. [ 458.329359][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.336523][T17173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.576483][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.584284][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.612693][T18166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3406'. [ 458.889767][T18157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.975449][T18157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.321128][T17166] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.336921][T17166] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.356915][T17166] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.378442][T17166] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.387694][T17166] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.396697][T17166] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.427307][T18174] wg1 speed is unknown, defaulting to 1000 [ 459.477966][T18179] geneve2: entered promiscuous mode [ 459.504241][T17166] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.514099][T17166] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.542652][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3409'. [ 459.995039][T18184] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 460.338773][T18199] netlink: 'syz.1.3415': attribute type 5 has an invalid length. [ 460.482992][T17880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.548833][T18203] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3416'. [ 460.634167][T18207] debugfs: '1ùàV!' already exists in 'ieee80211' [ 460.907214][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3420'. [ 461.121484][T18222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.166558][T18222] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.215208][T18222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.442933][T17880] veth0_vlan: entered promiscuous mode [ 461.466486][T17880] veth1_vlan: entered promiscuous mode [ 461.536222][T17880] veth0_macvtap: entered promiscuous mode [ 461.561581][T17880] veth1_macvtap: entered promiscuous mode [ 461.586634][T17880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.612782][T17880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.632378][ T3487] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.649757][ T3487] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.675692][ T3487] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.722898][ T3487] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.802407][ T3445] hsr_slave_0: left promiscuous mode [ 461.809029][ T3445] hsr_slave_1: left promiscuous mode [ 462.294319][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'. [ 462.312283][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3431'. [ 462.363118][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'. [ 462.534935][ T3445] ` (unregistering): Port device team_slave_1 removed [ 462.569530][ T3445] ` (unregistering): Port device team_slave_0 removed [ 462.578101][ T3487] smc: removing ib device syz1 [ 462.921983][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3425'. [ 462.999576][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.003516][T18282] xt_hashlimit: invalid rate [ 463.047899][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.084951][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3435'. [ 463.214493][T18287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.226964][T17166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.234797][T17166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.840983][T18303] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3313'. [ 463.865531][T18303] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3313'. [ 463.890465][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 463.921071][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3440'. [ 463.971863][T18305] Bluetooth: MGMT ver 1.23 [ 464.143805][T18308] netlink: 21 bytes leftover after parsing attributes in process `syz.6.3441'. [ 464.310787][T18319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3443'. [ 464.384361][T18319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3443'. [ 464.629932][ T3445] IPVS: stop unused estimator thread 0... [ 464.850896][T18341] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.859083][T18341] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.877723][T18342] debugfs: '1ùàV!' already exists in 'ieee80211' [ 501.500797][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.057005][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 529.177011][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 559.896948][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 562.939651][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.137002][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 580.377002][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 621.177232][ T31] INFO: task syz.7.3445:18328 blocked for more than 143 seconds. [ 621.185022][ T31] Not tainted syzkaller #0 [ 621.190428][ T31] Blocked by coredump. [ 621.195025][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.203991][ T31] task:syz.7.3445 state:D stack:23792 pid:18328 tgid:18325 ppid:17080 task_flags:0x40044c flags:0x00080000 [ 621.216115][ T31] Call Trace: [ 621.219483][ T31] [ 621.222553][ T31] __schedule+0x1798/0x4cc0 [ 621.227296][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.232153][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.237099][ T31] ? __pfx___schedule+0x10/0x10 [ 621.241963][ T31] ? schedule+0x91/0x360 [ 621.246202][ T31] schedule+0x165/0x360 [ 621.250425][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.255902][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 621.261674][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 621.267547][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 621.273720][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.278730][ T31] ? exit_mmap+0x286/0xb40 [ 621.283181][ T31] down_write+0x1ab/0x1f0 [ 621.287577][ T31] ? __pfx_down_write+0x10/0x10 [ 621.292443][ T31] exit_mmap+0x286/0xb40 [ 621.296701][ T31] ? uprobe_clear_state+0x20f/0x290 [ 621.301956][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 621.306734][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 621.312483][ T31] ? __pfx_exit_aio+0x10/0x10 [ 621.317240][ T31] ? uprobe_clear_state+0x27c/0x290 [ 621.322452][ T31] __mmput+0x118/0x430 [ 621.326508][ T31] exit_mm+0x1da/0x2c0 [ 621.330644][ T31] ? __pfx_exit_mm+0x10/0x10 [ 621.335251][ T31] ? rcu_is_watching+0x15/0xb0 [ 621.340093][ T31] do_exit+0x648/0x2300 [ 621.344289][ T31] ? do_raw_spin_lock+0x121/0x290 [ 621.349377][ T31] ? __pfx_do_exit+0x10/0x10 [ 621.353985][ T31] do_group_exit+0x21c/0x2d0 [ 621.358854][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.364073][ T31] get_signal+0x1285/0x1340 [ 621.368741][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 621.374300][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 621.380513][ T31] ? __se_sys_futex+0x36f/0x400 [ 621.385385][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 621.390895][ T31] exit_to_user_mode_loop+0x72/0x130 [ 621.396189][ T31] do_syscall_64+0x2bd/0xfa0 [ 621.400844][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.406059][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.412204][ T31] ? clear_bhb_loop+0x60/0xb0 [ 621.417299][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.423206][ T31] RIP: 0033:0x7f30fc18f6c9 [ 621.428072][ T31] RSP: 002b:00007f30fcf730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 621.436502][ T31] RAX: fffffffffffffe00 RBX: 00007f30fc3e6098 RCX: 00007f30fc18f6c9 [ 621.444518][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30fc3e6098 [ 621.452534][ T31] RBP: 00007f30fc3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 621.460624][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.468631][ T31] R13: 00007f30fc3e6128 R14: 00007ffff23aeff0 R15: 00007ffff23af0d8 [ 621.476601][ T31] [ 621.479661][ T31] INFO: task syz.1.3453:18349 blocked for more than 143 seconds. [ 621.487424][ T31] Not tainted syzkaller #0 [ 621.492352][ T31] Blocked by coredump. [ 621.497071][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.505733][ T31] task:syz.1.3453 state:D stack:27272 pid:18349 tgid:18349 ppid:15582 task_flags:0x40004c flags:0x00080000 [ 621.517803][ T31] Call Trace: [ 621.521084][ T31] [ 621.524003][ T31] __schedule+0x1798/0x4cc0 [ 621.528572][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.533426][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.538331][ T31] ? __pfx___schedule+0x10/0x10 [ 621.543215][ T31] ? schedule+0x91/0x360 [ 621.547550][ T31] schedule+0x165/0x360 [ 621.551717][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.557214][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 621.562853][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 621.568717][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 621.574879][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.579764][ T31] ? exit_mmap+0x286/0xb40 [ 621.584248][ T31] down_write+0x1ab/0x1f0 [ 621.588631][ T31] ? __pfx_down_write+0x10/0x10 [ 621.593573][ T31] exit_mmap+0x286/0xb40 [ 621.597872][ T31] ? uprobe_clear_state+0x20f/0x290 [ 621.603079][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 621.607909][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 621.613553][ T31] ? __pfx_exit_aio+0x10/0x10 [ 621.619792][ T31] ? uprobe_clear_state+0x27c/0x290 [ 621.625008][ T31] __mmput+0x118/0x430 [ 621.629138][ T31] exit_mm+0x1da/0x2c0 [ 621.633224][ T31] ? __pfx_exit_mm+0x10/0x10 [ 621.637891][ T31] ? rcu_is_watching+0x15/0xb0 [ 621.642665][ T31] do_exit+0x648/0x2300 [ 621.646872][ T31] ? preempt_schedule+0xae/0xc0 [ 621.651735][ T31] ? preempt_schedule_common+0x83/0xd0 [ 621.657342][ T31] ? preempt_schedule+0xae/0xc0 [ 621.662209][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 621.668660][ T31] ? __pfx_do_exit+0x10/0x10 [ 621.673271][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 621.678694][ T31] do_group_exit+0x21c/0x2d0 [ 621.683296][ T31] __x64_sys_exit_group+0x3f/0x40 [ 621.688386][ T31] x64_sys_call+0x21f7/0x2200 [ 621.693060][ T31] do_syscall_64+0xfa/0xfa0 [ 621.697641][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.703719][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.709909][ T31] ? clear_bhb_loop+0x60/0xb0 [ 621.714597][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.720539][ T31] RIP: 0033:0x7fd077d8f6c9 [ 621.724959][ T31] RSP: 002b:00007ffc7b533168 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 621.733422][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd077d8f6c9 [ 621.741460][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.749538][ T31] RBP: 00007ffc7b5331cc R08: 0000000e7b53325f R09: 00000000000927c0 [ 621.757531][ T31] R10: 00000000000000e0 R11: 0000000000000246 R12: 000000000000008a [ 621.765511][ T31] R13: 00000000000927c0 R14: 0000000000071788 R15: 00007ffc7b533220 [ 621.773575][ T31] [ 621.776601][ T31] INFO: task syz.6.3455:18352 blocked for more than 143 seconds. [ 621.784414][ T31] Not tainted syzkaller #0 [ 621.789404][ T31] Blocked by coredump. [ 621.794002][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.802824][ T31] task:syz.6.3455 state:D stack:26696 pid:18352 tgid:18352 ppid:17880 task_flags:0x40044c flags:0x00080002 [ 621.814779][ T31] Call Trace: [ 621.818138][ T31] [ 621.821073][ T31] __schedule+0x1798/0x4cc0 [ 621.825575][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.830499][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.835362][ T31] ? __pfx___schedule+0x10/0x10 [ 621.840283][ T31] ? schedule+0x91/0x360 [ 621.844532][ T31] schedule+0x165/0x360 [ 621.848724][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.854190][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 621.859888][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 621.865720][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 621.871925][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.876840][ T31] ? exit_mmap+0x286/0xb40 [ 621.881270][ T31] down_write+0x1ab/0x1f0 [ 621.885582][ T31] ? __pfx_down_write+0x10/0x10 [ 621.890508][ T31] exit_mmap+0x286/0xb40 [ 621.894754][ T31] ? uprobe_clear_state+0x20f/0x290 [ 621.900426][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 621.905206][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 621.910917][ T31] ? __pfx_exit_aio+0x10/0x10 [ 621.915602][ T31] ? uprobe_clear_state+0x27c/0x290 [ 621.920911][ T31] __mmput+0x118/0x430 [ 621.924993][ T31] exit_mm+0x1da/0x2c0 [ 621.929265][ T31] ? __pfx_exit_mm+0x10/0x10 [ 621.933866][ T31] ? rcu_is_watching+0x15/0xb0 [ 621.938681][ T31] do_exit+0x648/0x2300 [ 621.942850][ T31] ? do_raw_spin_lock+0x121/0x290 [ 621.947901][ T31] ? __pfx_do_exit+0x10/0x10 [ 621.952507][ T31] do_group_exit+0x21c/0x2d0 [ 621.957144][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.962348][ T31] get_signal+0x1285/0x1340 [ 621.966915][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 621.972565][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 621.978837][ T31] ? vm_mmap_pgoff+0x271/0x4d0 [ 621.983692][ T31] ? __se_sys_futex+0x36f/0x400 [ 621.988619][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 621.994097][ T31] exit_to_user_mode_loop+0x72/0x130 [ 621.999433][ T31] do_syscall_64+0x2bd/0xfa0 [ 622.004030][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.009280][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.015434][ T31] ? clear_bhb_loop+0x60/0xb0 [ 622.020175][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.026073][ T31] RIP: 0033:0x7f1fb198f703 [ 622.030511][ T31] RSP: 002b:00007ffe6a3a0c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 622.038980][ T31] RAX: fffffffffffffffc RBX: 00007f1fb03f76c0 RCX: 00007f1fb198f703 [ 622.046994][ T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 622.054974][ T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 622.062991][ T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe6a3a0db0 [ 622.071012][ T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 622.079252][ T31] [ 622.082292][ T31] INFO: task syz.5.3454:18356 blocked for more than 144 seconds. [ 622.090044][ T31] Not tainted syzkaller #0 [ 622.094973][ T31] Blocked by coredump. [ 622.099667][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 622.108349][ T31] task:syz.5.3454 state:D stack:20264 pid:18356 tgid:18354 ppid:17492 task_flags:0x40054c flags:0x00080000 [ 622.120341][ T31] Call Trace: [ 622.123625][ T31] [ 622.126544][ T31] __schedule+0x1798/0x4cc0 [ 622.131102][ T31] ? __lock_acquire+0xab9/0xd20 [ 622.135958][ T31] ? __lock_acquire+0xab9/0xd20 [ 622.140860][ T31] ? __pfx___schedule+0x10/0x10 [ 622.145729][ T31] ? schedule+0x91/0x360 [ 622.150014][ T31] schedule+0x165/0x360 [ 622.154186][ T31] schedule_preempt_disabled+0x13/0x30 [ 622.159685][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 622.165335][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 622.171219][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 622.177445][ T31] ? __lock_acquire+0xab9/0xd20 [ 622.182307][ T31] ? exit_mmap+0x286/0xb40 [ 622.186719][ T31] down_write+0x1ab/0x1f0 [ 622.191150][ T31] ? __pfx_down_write+0x10/0x10 [ 622.196009][ T31] exit_mmap+0x286/0xb40 [ 622.200490][ T31] ? uprobe_clear_state+0x20f/0x290 [ 622.205704][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 622.210553][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 622.216204][ T31] ? __pfx_exit_aio+0x10/0x10 [ 622.221316][ T31] ? uprobe_clear_state+0x27c/0x290 [ 622.226538][ T31] __mmput+0x118/0x430 [ 622.230671][ T31] exit_mm+0x1da/0x2c0 [ 622.234778][ T31] ? __pfx_exit_mm+0x10/0x10 [ 622.239445][ T31] ? rcu_is_watching+0x15/0xb0 [ 622.244242][ T31] do_exit+0x648/0x2300 [ 622.248455][ T31] ? do_raw_spin_lock+0x121/0x290 [ 622.253503][ T31] ? __pfx_do_exit+0x10/0x10 [ 622.258143][ T31] do_group_exit+0x21c/0x2d0 [ 622.262744][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.267988][ T31] get_signal+0x1285/0x1340 [ 622.272508][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 622.278124][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 622.284373][ T31] ? __se_sys_futex+0x36f/0x400 [ 622.289287][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 622.294754][ T31] exit_to_user_mode_loop+0x72/0x130 [ 622.300182][ T31] do_syscall_64+0x2bd/0xfa0 [ 622.304779][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.310032][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.316108][ T31] ? clear_bhb_loop+0x60/0xb0 [ 622.320864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.326762][ T31] RIP: 0033:0x7fbe9398f6c9 [ 622.331240][ T31] RSP: 002b:00007fbe91bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 622.339709][ T31] RAX: fffffffffffffe00 RBX: 00007fbe93be5fa8 RCX: 00007fbe9398f6c9 [ 622.347706][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbe93be5fa8 [ 622.355688][ T31] RBP: 00007fbe93be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 622.363728][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.371734][ T31] R13: 00007fbe93be6038 R14: 00007ffc2fe7f3f0 R15: 00007ffc2fe7f4d8 [ 622.379775][ T31] [ 622.382812][ T31] [ 622.382812][ T31] Showing all locks held in the system: [ 622.390570][ T31] 1 lock held by khungtaskd/31: [ 622.395413][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 622.405327][ T31] 2 locks held by getty/5587: [ 622.410040][ T31] #0: ffff8880335180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 622.419929][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 622.430475][ T31] 1 lock held by syz-executor/5815: [ 622.435678][ T31] #0: ffff88802fc98ca0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 622.445176][ T31] 2 locks held by syz-executor/16698: [ 622.450609][ T31] #0: ffffffff8dff6850 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 622.462198][ T31] #1: ffff88802fc9c260 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x126/0x1b10 [ 622.472764][ T31] 1 lock held by syz-executor/17080: [ 622.478213][ T31] #0: ffff88802eaced60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 622.487700][ T31] 1 lock held by syz.7.3445/18328: [ 622.492811][ T31] #0: ffff88802fc99760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 622.501926][ T31] 1 lock held by syz.1.3453/18349: [ 622.507144][ T31] #0: ffff88801a05a220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 622.516223][ T31] 1 lock held by syz.6.3455/18352: [ 622.521931][ T31] #0: ffff8880305481e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 622.531091][ T31] 1 lock held by syz.5.3454/18356: [ 622.536211][ T31] #0: ffff88803054cd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 622.545825][ T31] [ 622.548381][ T31] ============================================= [ 622.548381][ T31] [ 622.556910][ T31] NMI backtrace for cpu 1 [ 622.556928][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 622.556945][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.556955][ T31] Call Trace: [ 622.556964][ T31] [ 622.556975][ T31] dump_stack_lvl+0x189/0x250 [ 622.557003][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.557024][ T31] ? __pfx__printk+0x10/0x10 [ 622.557056][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 622.557082][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 622.557104][ T31] ? __pfx__printk+0x10/0x10 [ 622.557146][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 622.557171][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 622.557192][ T31] watchdog+0xf60/0xfa0 [ 622.557212][ T31] ? watchdog+0x1e2/0xfa0 [ 622.557232][ T31] kthread+0x711/0x8a0 [ 622.557255][ T31] ? __pfx_watchdog+0x10/0x10 [ 622.557270][ T31] ? __pfx_kthread+0x10/0x10 [ 622.557289][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.557310][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.557332][ T31] ? __pfx_kthread+0x10/0x10 [ 622.557354][ T31] ret_from_fork+0x4bc/0x870 [ 622.557376][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 622.557401][ T31] ? __switch_to_asm+0x39/0x70 [ 622.557414][ T31] ? __switch_to_asm+0x33/0x70 [ 622.557427][ T31] ? __pfx_kthread+0x10/0x10 [ 622.557450][ T31] ret_from_fork_asm+0x1a/0x30 [ 622.557482][ T31] [ 622.557489][ T31] Sending NMI from CPU 1 to CPUs 0: [ 622.703565][ C0] NMI backtrace for cpu 0 [ 622.703582][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 622.703600][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.703609][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 622.703636][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 622.703650][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 622.703665][ C0] RAX: 3dc60c8fa2a97900 RBX: ffffffff81967bf7 RCX: 3dc60c8fa2a97900 [ 622.703678][ C0] RDX: 0000000000000001 RSI: ffffffff8d70ed12 RDI: ffffffff8bbf0760 [ 622.703689][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 622.703701][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce670 [ 622.703713][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 622.703724][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 622.703737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.703748][ C0] CR2: 00007f4bfeccd3d0 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 622.703763][ C0] Call Trace: [ 622.703771][ C0] [ 622.703778][ C0] default_idle+0x13/0x20 [ 622.703794][ C0] default_idle_call+0x73/0xb0 [ 622.703812][ C0] do_idle+0x1e7/0x510 [ 622.703832][ C0] ? __pfx_do_idle+0x10/0x10 [ 622.703855][ C0] cpu_startup_entry+0x44/0x60 [ 622.703871][ C0] rest_init+0x2de/0x300 [ 622.703890][ C0] start_kernel+0x3ae/0x410 [ 622.703909][ C0] x86_64_start_reservations+0x24/0x30 [ 622.703930][ C0] x86_64_start_kernel+0x143/0x1c0 [ 622.703949][ C0] common_startup_64+0x13e/0x147 [ 622.703978][ C0] [ 624.379988][ T1304] ieee802154 phy1 wpan1: encryption failed: -22