last executing test programs: 3m14.472134502s ago: executing program 1 (id=3901): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000640)) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="1ab195", 0x3}], 0x1, 0x5, 0x7) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 3m14.184251964s ago: executing program 1 (id=3903): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000009c0108802800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c70"], 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x80000) recvmsg$can_raw(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) recvfrom$packet(r7, &(0x7f0000000080)=""/167, 0xa7, 0x40000000, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x38}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x7, 0x4, 0x8, 0x5, 0x1, 0x0, 0xc0, 0x6, 0x101, 0x920, 0x7, 0x3, 0x2, 0x2c9d, 0x6, 0x26, 0x2, 0x10, 0xffffffa0, 0x7d0, 0xffff, 0x10000, 0x3, 0x3, 0xfffffff9, 0xe5, 0x3, 0x8, 0x3, 0x3, 0x9, 0x1, 0xfffffff9, 0x22, 0x2, 0x1, 0x2, 0x0, 0x0, 0xea3, 0x1, 0x0, 0x4, 0x91, 0x4, 0x3, 0x5, 0x7, 0x4, 0x7f, 0x6, 0xd9a, 0xc, 0xb, 0x100, 0xed7, 0x8, 0xad4, 0x15, 0x9, 0xfffffff5, 0x31, 0x7, 0x1, 0x3, 0x8, 0x17028692, 0x3, 0x4, 0x7f, 0x4, 0xfe, 0x4, 0xffff, 0x3f, 0x6, 0x5, 0xdf, 0x40000, 0x9, 0x7, 0xb, 0x7ff, 0x3fb3c724, 0x7, 0x7, 0x8, 0x6, 0x7fff, 0x8, 0x6, 0x2, 0x3, 0x5, 0x5, 0x1, 0x10, 0x3, 0x97, 0x3, 0x0, 0x1, 0x5b5b, 0x9, 0x8, 0x9, 0x2000, 0x4ce, 0x8, 0xfff, 0x6, 0x8db3, 0x9, 0x6, 0x279, 0x6, 0x6, 0xffff, 0x0, 0x3, 0x4, 0x4, 0xfff, 0x5, 0x2, 0x800, 0xffff, 0x4, 0x0, 0x7, 0x10000, 0x8000, 0x6, 0xad9b, 0x7, 0x0, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0x7, 0xd6e4, 0x4, 0x533, 0x9, 0x276, 0x7, 0xff, 0x4, 0x2, 0x1166, 0xfffffffa, 0x3, 0xb20e, 0xe8, 0x4, 0x7f4, 0x7, 0x1, 0xfff, 0x3, 0x8001, 0x4, 0x3, 0x4, 0x7, 0x8, 0xca2, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x18, 0xc6, 0x7, 0x7, 0x4, 0x80000000, 0x0, 0x7, 0xb68, 0x7ab, 0x52, 0x3, 0x80, 0x9, 0x2da, 0x5, 0x9, 0x7fff, 0x2, 0xd5916ed, 0x0, 0xb8, 0x6, 0x5, 0x9, 0x2cc, 0x0, 0x2, 0xb7, 0x3, 0xb6b6, 0x0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x4, 0xfce2, 0x8, 0xc, 0x3f5c, 0x100, 0xdb03, 0xfffffff9, 0x4, 0xf84, 0x6, 0xd7d2, 0xffffffff, 0xf300, 0x9a84, 0x8, 0x516, 0x3, 0x3, 0x8, 0x2, 0x1000, 0xffffffff, 0x3, 0x6, 0x200, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x6, 0x8001, 0x8, 0x4, 0x5, 0x8, 0x1, 0xcdb9, 0x70, 0xf1, 0x10, 0x6, 0x93d5eea, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0xb, 0x7, 0x5, 0x101, 0x8000, 0x80000000, 0x5, 0x10, 0xffffffff, 0x7, 0x7fffffff, 0xffffffff, 0x4, 0x3ff, 0x8, 0x693d24ac, 0x9, 0x5, 0x7f, 0x9, 0x2, 0xe9, 0x14b, 0x3, 0x40, 0x8d, 0x1, 0x6, 0x101, 0xfff, 0x9, 0x7, 0x6, 0x10000, 0x8, 0x8001, 0x10c4, 0x3, 0x205, 0x9, 0x8, 0x60b, 0xd, 0xffff, 0x4, 0x1, 0xe, 0x1, 0x9, 0xffff, 0x8, 0x5, 0x0, 0x9, 0x5, 0x8, 0xfffffff9, 0x401, 0xd, 0x800, 0x4, 0x6, 0x3, 0x9, 0x3ff, 0x10, 0x8, 0x80000000, 0x6, 0x2afa, 0xffffffff, 0x6, 0x2, 0x3ff, 0x0, 0xd, 0x5, 0x6, 0x8, 0x2, 0x2000000, 0x7, 0x6, 0xfff, 0x3, 0x7, 0x8, 0x8, 0x6, 0x5, 0x7fff, 0x3, 0x1200, 0x9, 0xbc, 0x1, 0x8001, 0x9, 0xf, 0x5, 0x2, 0x3192212c, 0x3, 0x1, 0x3, 0x1000, 0x0, 0x9, 0x8000, 0xfffffff8, 0x3dae, 0x80, 0x5, 0x9, 0x9, 0x7, 0x698, 0x1, 0x7, 0x7f, 0x6, 0x401, 0x5, 0x7, 0x7fffffff, 0x7, 0x10001, 0xffffffe3, 0x7ff, 0x4, 0x10, 0x7, 0x1, 0x7, 0x9, 0x1ff, 0x7, 0xc5dd, 0x2, 0x7, 0x80, 0x3, 0xa, 0xff, 0x9, 0x6, 0x1, 0xd, 0x45, 0x10000, 0x553, 0x800, 0x0, 0x3, 0x4, 0x1b, 0xb, 0x1, 0x8, 0x59, 0x200, 0x1, 0x6, 0x5, 0xd, 0x8001, 0x5c34a762, 0x4, 0x9, 0x3, 0xf, 0x0, 0x9, 0x3, 0x40, 0xf9, 0xfffffff8, 0x2d1f, 0x0, 0x6, 0x3, 0x80000001, 0x4, 0x40, 0x0, 0xffffffff, 0x80000000, 0x9, 0x8, 0x7, 0xfffffff1, 0x5, 0x7f, 0x9, 0x81, 0x9, 0xeb5e, 0x4, 0x6, 0x2, 0x3, 0xf9d, 0xf, 0xce, 0xea5, 0x6, 0x4, 0x6, 0x400, 0x2, 0x300, 0x15, 0x8, 0x2, 0x6, 0x3, 0x9, 0x800, 0xa, 0x200, 0x6, 0x442b89e0, 0x3, 0x0, 0x35b4, 0x10001, 0x3, 0x10001, 0x5, 0x9, 0x4, 0xf, 0x6, 0x7, 0x0, 0x7, 0x0, 0x8ba2, 0x8, 0x2, 0x10001, 0x8, 0x9, 0x6, 0x7fffffff, 0x1, 0x3, 0x6, 0xbd3, 0x9, 0x7fffffff, 0x7, 0xffffd4a4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0xbc, 0x7fffffff, 0x12b0abb7, {0xe, 0x0, 0x3, 0x9, 0x40, 0xfffffffb}, {0x1, 0x2, 0xfff7, 0x101, 0x8000, 0x3}, 0x8, 0x9}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m13.939232482s ago: executing program 1 (id=3906): unshare(0x20000400) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r1, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x20}}], 0x1, 0x20000001) (async) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) 3m13.765590708s ago: executing program 1 (id=3909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) socket$kcm(0x2, 0x200000000000001, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='block_bio_complete\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001a80)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r5, 0x1, {0x0, 0x1, 0x2}}, 0x18) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) readv(r6, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/191, 0xbf}], 0x1) (async, rerun: 32) write$cgroup_subtree(r7, &(0x7f0000000700)=ANY=[], 0xfe33) (rerun: 32) sendmmsg$inet6(r3, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048040) (async) close(r2) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x2, [@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}]}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) write$cgroup_subtree(r7, &(0x7f0000000140)={[{0x2d, 'rlimit'}, {0x2b, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'net'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}]}, 0x36) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async, rerun: 64) write$tun(r1, &(0x7f0000000280)=ANY=[], 0xc2) (rerun: 64) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 3m13.653522128s ago: executing program 1 (id=3911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x38}}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x5b}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 3m13.448321663s ago: executing program 1 (id=3913): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4420}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}]}, 0x28}}, 0x24044000) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc8ebe30", 0x4}, {&(0x7f0000000300)="17b43e19b1a2afd6dca1ba00"/26, 0x1a}, {&(0x7f0000000340)="1138a6ef60e86e143a2eb8d88c55211ea0e7959269fa62acced6a278db36a58ce78bb7f533d3e85be7a96d53bbf9e970ed94e22d5f7b33d851b55df889f3515817cc67eb48325658f4fe35ce6828a9ca5500eb526e339162b44d55a22ff46b2d5043b552331d84e500acf6ac0930e6f10221fbfc923f262437923d8f1883bd3c086e73c6954ff2d542054d81b2a353b771a8742a5f0dab34c44d9f5b1bd1c51bd04296957754301c2f01403d4c54729e942d6982afec", 0xb6}], 0x4}, 0x20058045) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0xc) 3m13.255739183s ago: executing program 32 (id=3913): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4420}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}]}, 0x28}}, 0x24044000) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc8ebe30", 0x4}, {&(0x7f0000000300)="17b43e19b1a2afd6dca1ba00"/26, 0x1a}, {&(0x7f0000000340)="1138a6ef60e86e143a2eb8d88c55211ea0e7959269fa62acced6a278db36a58ce78bb7f533d3e85be7a96d53bbf9e970ed94e22d5f7b33d851b55df889f3515817cc67eb48325658f4fe35ce6828a9ca5500eb526e339162b44d55a22ff46b2d5043b552331d84e500acf6ac0930e6f10221fbfc923f262437923d8f1883bd3c086e73c6954ff2d542054d81b2a353b771a8742a5f0dab34c44d9f5b1bd1c51bd04296957754301c2f01403d4c54729e942d6982afec", 0xb6}], 0x4}, 0x20058045) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0xc) 2m16.907958053s ago: executing program 0 (id=4696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x1, 0xc, 0x3, 0xb000, 0xffffffffffffffff, 0x94, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffe, 0x5, 0x6}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000880)='(|5\r.Cz7', &(0x7f0000000340)=@tcp=r1}, 0x20) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) (async) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x200000c4, &(0x7f0000000840)={0x2, 0x4e23, @empty}, 0x10) (async) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x20040802}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) (async) r6 = openat$cgroup_devices(r3, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4040840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005", @ANYRES8=r4, @ANYRES16=r2], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) (async, rerun: 64) unshare(0x6a040000) (rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 2m16.76357423s ago: executing program 0 (id=4698): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x408d0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00e}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="84080000000000007111840000000000851000000200000085000000a000000095000000000000009500a50500000000bca83deaa3145cc12ab395b3799988641db780a6924e703909f85babc949201ec6c2c4f9c0b7981f1d3a0aa4f807768adcb69751dc55707b5a56168fafe56c6bb5b02bd54326dd320877577a2b7aaf17d8114670fc639dff5a9bc58a1182b6e8282de79a696635aa"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 2m16.588076791s ago: executing program 0 (id=4701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m16.499040398s ago: executing program 0 (id=4702): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c0100000301050000000000000000000100000a08001a400000000874000d8008000200e000000208000200ac1414aa140004002001000000000000000000000000000024000380060002"], 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a670300000000000000000100000008000440000000000900010073797a300000000038000380340000000400018004000680140007800c000100636f756e7465720004000280140001800600"], 0xe4}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'veth0_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x3e0, 0x210, 0x110, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010100, @private=0xa010102, 0xff000000, 0xff, 0x2, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, {[0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="f3b027c18b30", {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0xbe5, 0xb, 0x8, 0x2, 0x3, 'syzkaller0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x60}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="b2b5e8752a3d", @broadcast, @multicast1, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x15, 0x7, {0x81d}}}}, {{@arp={@loopback, @multicast2, 0xffffffff, 0x0, 0x0, 0x9, {@empty, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac, {[0xff, 0xff]}}, 0x0, 0x0, 0xff, 0x8, 0xc6, 0x4, 'wlan1\x00', 'veth1\x00', {}, {}, 0x0, 0x20d}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x200, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x12, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r8, &(0x7f00000005c0)="5838d1d5f648cedba1d2a6cc2251ad7919d365ae79eb457c1d7fef", &(0x7f0000000600)=@tcp=r7}, 0x20) (async) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @private=0xa010101}}, 0x0, 0x0, 0x38, 0x0, "394281e595fd9ef506cdb5a28c934734c6bde18882e299a83da979fa66c8aedcdb0492dbfbac6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b7500d7600"}, 0xd8) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x14, r10, 0x601, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x8090) (async, rerun: 64) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000020301020000000000a3e933783b000000000000100800010001000000d4a50500f21bfea52640f526cade62f3fbf0cecdf3aeb5ba48159fa6162d716e95f6d35f784275"], 0x1c}}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 2m16.242289317s ago: executing program 0 (id=4705): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000f40)=""/4096, &(0x7f0000000080)=0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000010000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000f40)=""/4096, &(0x7f0000000080)=0x1000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000010000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) (async) 2m16.139004986s ago: executing program 0 (id=4708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], 0x8) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r11 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 2m1.042453429s ago: executing program 33 (id=4708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], 0x8) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r11 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 7.035989187s ago: executing program 2 (id=5832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r4, 0x0, &(0x7f0000000040), 0x81000) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x5, r6}, 0x6f) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00061800007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000580), 0x7, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r7, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4ecd, 0x1}, 0x12) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000180)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x0, 0x1, r9}, @IFLA_IPTUN_LINK={0x0, 0x1, r10}, @IFLA_IPTUN_LOCAL={0x0, 0x2, @multicast1}, @IFLA_IPTUN_LINK, @IFLA_IPTUN_ENCAP_TYPE]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48105}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000600)={0x0, 0x8, 0x1, [0x7, 0x2, 0x0, 0x8, 0x3202], [0x40, 0x3, 0x1, 0xffff, 0x401, 0xfff, 0x6, 0x0, 0x8, 0x7, 0xbbf, 0x100, 0x4, 0x10, 0x100000001, 0x58, 0x2, 0x8, 0x8, 0x8000000000000001, 0x3ff, 0x3, 0xfffffffffffffff9, 0xffffffffffffe338, 0x1, 0x101, 0x3, 0x4, 0x6, 0x8, 0x2, 0x7, 0x9, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0xab8d, 0x81, 0x625, 0x81, 0xb, 0x80000000, 0xc, 0xe, 0x7fff, 0x0, 0x2, 0x1ff, 0x10001, 0x7ff, 0x8, 0x8, 0x3, 0x4c11b72c, 0x5, 0x3, 0xfffffffffffffffe, 0x1, 0xe4f1b02, 0x1000, 0x3, 0xf3, 0x8, 0x401, 0x5, 0x7f, 0x7, 0x0, 0x0, 0x7, 0x2, 0x1, 0x5, 0x8, 0x1000, 0x6, 0x1f2, 0x1, 0x100000000, 0x8, 0xfc4f, 0x6, 0x4, 0x2, 0x4687, 0x100000001, 0x2, 0x2, 0xfffffffffffffffd, 0x3fa, 0xa23, 0x80000001, 0x1ff, 0x2, 0x81, 0x2, 0x9, 0x7, 0x2, 0x5, 0x100000000, 0x1ff, 0x5, 0x1ff, 0x5, 0x650000, 0x8, 0x10001, 0x80, 0x4, 0x401, 0x0, 0x400, 0xffffffffffffffff, 0x9, 0x200, 0x9, 0x2]}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001780)={r11, "1c190370e99ab79a238196ee70983087"}) 6.657431585s ago: executing program 2 (id=5836): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c6cc74493097e2025d65dd5c1e59c208000f7a63e052f028381a5685235977aeb3fba45e6ffa9b32b58cd5a375b3b4e6913aa07cb8e00009f00c181aea14e73894db827cb6ed91f3d9f46b90292b050fb9c1475b0f675837fdeb1440cc3c7447ebba157f7431293363d50b8306ed4bdf0b006ec8c8a23a447b5490000c2a691b041d530a9b8f800c0c8fdbd647725817d5bab7a7ad42ec136ba669ffe9db4c4154c4385f484a199e4df94b1930098dceff4ffcb039ce10ec533c160d0946e212109f20612d6a5940571160d17bdf7a777500289b4fda6de4ab91c541add5bc58fe0fd60cbde78b825dc7fc87473a80ded6970ad61d8193fb97fad61732fba16d7029528c69762a8b8e5a1c7ac277d906aff7ac60336126374280fd0e98cce004a78399a26ebb91b6d7ac6ab4574342fb6abc2854274959092587d92ae7d77baafb60b12505f9ac37f440b0d5371587b3dc7d413b642c3875f373e0da86efe6aa636af895d4f0f0cc6b66556fe1f836e53a05c052b9b93d95c", @ANYRES16=r2, @ANYRES16=0x0, @ANYRES32=r1, @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000800) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000b00010000c00100008000000100020000200103000081577443634eac950500000000000d00ff000000"], 0x52}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0xb48, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) (async) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x100, 0x200081, 0x1ff, 0x1, 0x1}, 0x1c) (rerun: 32) recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 64) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x3, {0x0, 0xf0, 0x2}, {0x1}, 0x1, 0xfe}, {0x3, 0x0, {0x2}, {0x2}, 0xfe, 0xfe}, {0x2, 0x1, {0x1, 0x1, 0x1}, {0x0, 0xf0, 0x4}, 0x1}, {0x3, 0x2, {0x1, 0xff, 0x4}, {0x2, 0xed, 0x1}, 0xfd, 0x2}], 0x80) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) (async) close(0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.554029166s ago: executing program 2 (id=5838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlinkprop={0x24, 0x6c, 0x527, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x10404, 0x800}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x8000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 6.45270047s ago: executing program 2 (id=5840): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1}}], 0x1, 0x4004804) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000bc0)='9s', 0x2}], 0x1}}], 0x1, 0xc8c0) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="f8baf8980082", 0x6}], 0x1}}], 0x1, 0x4020) unshare(0x20000400) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x1b, &(0x7f0000000880)="ef648929676a311000000000000000001600000059", 0x15) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00@\x00', @ANYRES16=r6, @ANYBLOB="000325bd7000fedbdf250c00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000500000025000000"], 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x5) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x18) tee(r2, 0xffffffffffffffff, 0x8f5, 0x100000000000000) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x38, r9, 0x1, 0x70bd26, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 6.40163361s ago: executing program 2 (id=5842): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="000800ff07500500300012800b00010062726905001700010000000c0022000600080000000000080004008100"/56], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r6, 0x1ff}, 0xc) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, @any, 0x81}, 0xa) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, 0x0, &(0x7f0000001b80)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x2004c805) 6.017086136s ago: executing program 2 (id=5845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\bta\x00'], 0x70}}], 0x1, 0x4000004) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newae={0x70, 0x1e, 0x301, 0x70bd2a, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2, 0x2b}, @in=@private=0xa010101, 0x0, 0x3500}, [@mark={0xc, 0x15, {0x35075b, 0x6}}, @lifetime_val={0x24, 0x9, {0x1, 0xe9, 0x1, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003540)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "0ba7218fd198c0"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002540)={r3, 0x0, "4770cf0be2259495c054e884f2fb7e08fc8dd654a3ab598163a4cfa2985100606c043e7ad48af3993712682b123d4055e6dce507ff50e6d589e7ae1e2f3ac2919418eb39b84f2592e46b728f92aece4a846d8c521f3ca84da1f88d949b1dc031819e412611b2a33a5c8a1370641f714a438eaa58dbda1f2d593c9282775cce4a908157e575f519cd3dd2ba542300cd3a147e549737bbf9a46abfeb5072e3c221927597f480170f1eeb030501f2c7c499fae2a02f5532f16338ed1691904d9c951af23fa9ee23b6a7c7160d21df804ef0d67014f0f043ed8673540fa7a46d83f2e15c92d14b119bb621fc12cf91fc089c00", "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"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0}) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1440100c0}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x350, r6, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x590660d8}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x174}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x844}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54a936b8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x285}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4bc3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf01a}]}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001540)={r4, r5, "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", "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"}) 3.973505765s ago: executing program 6 (id=5884): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="09583ade49d9", 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r7, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x68, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}, {"83c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445f44c1e54"}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)="29c4f080f3e9a97df861f45fdd1c0ea4373747c04998", 0x0, 0x1006, r5, 0x4}, 0x38) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 3.718752244s ago: executing program 6 (id=5888): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000003ed040000000000100003a459e000000000000000", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @struct={0xb, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x7, 0x0, 0x9}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @enum64={0x10, 0x5, 0x0, 0x13, 0x0, 0x8, [{0xc, 0x4, 0x5}, {0x7, 0x0, 0x8}, {0x1, 0x2, 0x3}, {0xf, 0x3e6, 0x9}, {0x6, 0x8, 0x6}]}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x258, [{0x3, 0x2, 0xfb6c}, {0x2, 0x4}]}, @fwd={0xa}]}, {0x0, [0x61]}}, &(0x7f00000007c0)=""/201, 0xc3, 0xc9, 0x1, 0x50e7}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) pselect6(0x40, &(0x7f0000000280)={0x8a7, 0x7, 0xfffffffffffff7e4, 0x8, 0x200, 0x4455, 0x2, 0x4}, &(0x7f0000000380)={0xe163, 0x1000, 0x9, 0x7487, 0x0, 0x6000000000, 0x80, 0x3}, &(0x7f00000004c0)={0x8, 0x5, 0x6, 0x65, 0xfffffffffffffffe, 0x1, 0x3ff, 0xffffffff}, &(0x7f0000000500)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000540)={[0x3]}, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c200100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30"], 0x1c0}, 0x1, 0xba01}, 0x20048050) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000240), 0x4) 3.717824196s ago: executing program 3 (id=5889): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.563953419s ago: executing program 3 (id=5893): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xffff, 0x0, @loopback, 0x200}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a"], 0x210) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="da0d79ffba59734493f6c759502e5b6a0f8ae66648d3df5588e05f1b0d570c5dccfcba4784fb199ded01227bb6c3930b9fe2d52035246330f1520b9ef61a8c99e7bbeae2be31aa0d507a62f844beb05db5956763aea13526d80ca7c3b8c23d003af742753f3796d552c3cc816e8821353df880428c0c88a1149c"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) nanosleep(&(0x7f0000000080), 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010700000100fcdbdf25590000000e0001006e657464657673696d0000000f007464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) 2.732155082s ago: executing program 4 (id=5896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r6) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x20000000000000f4, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@generic={0x8, 0x3, 0xb, 0x16f, 0x5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.535101462s ago: executing program 4 (id=5898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xa}, 0x18) bind$qrtr(0xffffffffffffffff, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @f={0x4, 0x3, 0x2, 0x80, {0x9, 0x1, '/'}, 0x1}}, 0xb) 1.743455363s ago: executing program 5 (id=5901): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.69926601s ago: executing program 6 (id=5902): r0 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8503}], 0x1, 0x0, 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@deltaction={0xe0, 0x31, 0x104, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb4f4}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xe0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x3}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r12, &(0x7f0000000580)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b378151ab492e56b275d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c43f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xd9, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r12, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) 1.65063616s ago: executing program 5 (id=5903): syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffff8dbdf251000000008000900300a00001800018014000200776c616e3000000000000000000000000800080000bc5c"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="74bc0000", @ANYRES16=r3, @ANYBLOB="10002abd7000fcdbdf25090000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x38}}], 0x2, 0x4040000) 1.520184213s ago: executing program 4 (id=5904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r4, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1f}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 1.519720297s ago: executing program 5 (id=5905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x7f, 0x0, 0x1}, 0x3) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="28f7ff00520001000000001c00001014000000000000d65b147466a3035c10e7eefbf54a69c6a57055d531c3bb27f4f18866318924d6b17b179bdc8cc9caf38c", @ANYRES64=r3], 0x28}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="0005d8a4ca71a74d19e83e665100", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.440944783s ago: executing program 6 (id=5906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10820, 0x400}}, 0x20}}, 0x4084) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ad8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) r6 = socket(0x8000000010, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r6, &(0x7f00000002c0)="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", 0xfc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r9, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000068000100ffffffffffdbdf250a0000000000000004000b00040006"], 0x20}}, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r11) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f0000000200)) 1.431129652s ago: executing program 5 (id=5907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x26b9ffe36856e205}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x1, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6085a900009c8800fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e000e22009c90"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 1.376034684s ago: executing program 4 (id=5908): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0xffffdffd, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) recvfrom(r0, &(0x7f00000000c0)=""/232, 0xe8, 0x60, &(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) 1.162608483s ago: executing program 3 (id=5909): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0xffffffffffffffff}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESHEX=r2, @ANYRES8], 0x0, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000a00000005b6fe1175a041d6fe000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000004c0)="7fcdff913fe7784876c894dd0e24d7cdab4937cd5cda736a80b86121042fbcedf50d450a9e4fa877ac7c23ec0bd3ab62a39f5a738dda1cfe7f88e38b2c780292dff4f4333198dc160cf31ca1c7d180df3315dfafc4fa9fcb137c1cfe2463a45dd4ee50ac0db036cfe85bc60f94ff3b1d1747e6e63ff2330c185df6175b9289e4080cb1faf9c1935f29cbd5cceb5e6cbfab77ed452a8d9b7ca1a5f07bf6cd472634e8c92ead174b8d67edb722e24e6e1b66ab706d24a8bec80e68008de794bf208d3642dd198bc472794c2cb2068a105b56fdb973488c475d0e3ad1bf1271fd53f21af562691f5c769ada73f9c54503359f2e", &(0x7f00000003c0)=""/124, &(0x7f00000005c0)="b832f227bba4c87cec043e74e54ca9df44716d7f34080df951a3498adc9c76cd7ec5c28f9c732e479a4904e1a9cd9c6731ee70cb1393c65ef5ace6533271d0e9874245a1a146918e58df36c276287c07b763ef06188f48c0745b6e3e5c", &(0x7f0000000640)="97246b2c26c416a2ea0a2f0d2e61db270ff1a6b1b13404dc118cffdc209c1d797f7b3785003cfa00fddb7306a6e73ec2531989b0b34fe75e61313707e359259fd8010d1d4b038a8bcc7d856deb7499f0dd92af271c03797772077295a6ee8cc34e9bf7046db0fdd68ddbff5f33b664a773d84fa148d35d97ee6e9dbce6d31c", 0x6, r2, 0x4}, 0x38) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0xffffffffffffffff}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESHEX=r2, @ANYRES8], 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000a00000005b6fe1175a041d6fe000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000004c0)="7fcdff913fe7784876c894dd0e24d7cdab4937cd5cda736a80b86121042fbcedf50d450a9e4fa877ac7c23ec0bd3ab62a39f5a738dda1cfe7f88e38b2c780292dff4f4333198dc160cf31ca1c7d180df3315dfafc4fa9fcb137c1cfe2463a45dd4ee50ac0db036cfe85bc60f94ff3b1d1747e6e63ff2330c185df6175b9289e4080cb1faf9c1935f29cbd5cceb5e6cbfab77ed452a8d9b7ca1a5f07bf6cd472634e8c92ead174b8d67edb722e24e6e1b66ab706d24a8bec80e68008de794bf208d3642dd198bc472794c2cb2068a105b56fdb973488c475d0e3ad1bf1271fd53f21af562691f5c769ada73f9c54503359f2e", &(0x7f00000003c0)=""/124, &(0x7f00000005c0)="b832f227bba4c87cec043e74e54ca9df44716d7f34080df951a3498adc9c76cd7ec5c28f9c732e479a4904e1a9cd9c6731ee70cb1393c65ef5ace6533271d0e9874245a1a146918e58df36c276287c07b763ef06188f48c0745b6e3e5c", &(0x7f0000000640)="97246b2c26c416a2ea0a2f0d2e61db270ff1a6b1b13404dc118cffdc209c1d797f7b3785003cfa00fddb7306a6e73ec2531989b0b34fe75e61313707e359259fd8010d1d4b038a8bcc7d856deb7499f0dd92af271c03797772077295a6ee8cc34e9bf7046db0fdd68ddbff5f33b664a773d84fa148d35d97ee6e9dbce6d31c", 0x6, r2, 0x4}, 0x38) (async) 1.147603951s ago: executing program 6 (id=5910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000050000000000000000000000000000009438785abe19663f1adaeb4653daabc57b5322f9d2265172c06176684af7bb4a3aca0847a110e61c4b4b6a28b9c89e30ed7dcd73f92925f63d4361cd2c0e4e3714a76e516c4391b84671c506"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x80}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000000000000076c4fbe8b4a8dc3754d69aaf10cd1ef2f745e24b372451183f7f6f29785580fc57388d5eb2dfe675698247ec908abdf02a00819f7e3a8f41889e9dce27a2d3cab14f6a39ba6c82806b28a79b8d56621b8c8de598779ed8e598c987cf5c77ab2a513688c8a5cb1125b10e141388548ce1aada", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000440)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0xa}, 0x94) pread64(r9, &(0x7f0000000180)=""/238, 0xee, 0x3) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000700)={@private2, r8}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r6) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="68010000", @ANYRES16=r11, @ANYBLOB="020029bd7000fcdbdf250300000008000100", @ANYRES32=r8, @ANYBLOB="4001028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040005000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f726955790000000000000000ab3c522b5f3ac20038d400000000000000000002000000050003000e00000008000400032457faf179077af5470000000800171de15c94bde27e96e938709be3dc35babaa39e48e10474d74c5c5a2aead2", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff0700004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r8, @ANYBLOB="04000280"], 0x168}, 0x1, 0x0, 0x0, 0x200080c1}, 0x2200c89d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x18) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000003c0)=0x80) 1.128170749s ago: executing program 4 (id=5911): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0}) r1 = socket$kcm(0x29, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) pipe(&(0x7f0000002740)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x10}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x1000) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c0100001a0007930000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES16=r10], 0x18c}}, 0x0) 1.056168392s ago: executing program 3 (id=5912): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 951.584754ms ago: executing program 3 (id=5913): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x270, 0x0, 0xb14, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe2, 0x52}}}}, [@NL80211_ATTR_TESTDATA={0x86, 0x45, "d494a58ab75015e8e53603793ed0f3bb2aea000cdf3fca0054adc5042c4d69e4d7add323f09fc13bbfb25c46bbf614d934214a0c50db3a5cb5b9ca28aa55f989e0492db7e8941a16c86be6b693e6359ecc1c451df89fdaf65fb7ee1b6b880987b606d58a856c7f333bcb749a71ac3ff507dd3502c5e51a1e172b315f877c3861111f"}, @NL80211_ATTR_TESTDATA={0xc6, 0x45, "dd4d11be77984e2428f9bc6f4899f731c57daa08c557aa022dcd56ad8ea2d940de6945be090fb0550817b86389f07928bae772cf34e54ab5fa0ba2c5e2fe2d3ceef936aa8a29ea34a91c7eeb1008203d84151f46812b67d41db03545bf56be9549d9d3467ca7e634d75cb09b943d741f2d65036b6f9451ecbfa6d051b4be7495e026c562d8930e2cf486758b6dc0dbeba92d52b35a12d22bed6635436c1304c916f31fd917cf2d8d0907e3fdd12d08154c55811b07d30de9cd19063a2bc95934b4af"}, @NL80211_ATTR_TESTDATA={0xa0, 0x45, "b5bc603ad414e56cbb06ba3df9b02a01a0e47d7ee4cd3401731aa284e5841c6e3aa3d03e7e6de251840dec1a484502536a2506facce95085f2c1c433b69ba80dbc2cf3fd5484705b457635a8a021d5a078eb273bc51e0d1e62020118477e0b1de7144823fc8ded597bff2cbd804bd5153d79b9799d6ef5e2691e46d5396e351733a97817d57d03efc49c257c2688447f42ce986161ebe1375c9439e5"}, @NL80211_ATTR_TESTDATA={0x5d, 0x45, "b8134688579639182d57eaab9ffd9b67081461270ada276d83cb8fb8ac624c3ee5f1812d78297a2adad8607ba9bdfd606090b066d27d9cc0535a60cb3996f29632dbe70bf6bbcd852ab28d3f4f2a6e593123d5f92590714b5c"}]}, 0x270}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = accept4(r0, &(0x7f0000000480)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000500)=0x80, 0x800) getsockopt(r2, 0x1, 0xd, &(0x7f0000000540)=""/222, &(0x7f0000000640)=0xde) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x80) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r3, 0x3a5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 817.227575ms ago: executing program 3 (id=5914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10048804}, 0xc000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="9f0ad00e0000000400000008000000efffffff0066dd593fcc95d2cff9fa238e59743e8f28097fdb66c7b4a6f5281ca4a80b4f35bc738a03e66d042ceef2ca2d3b04894b7556f6df81579e10cd61c46210435fae5a4f638bfa6dde1aad2bf5988eacb334a40c94cb852ae71ac5a0a3a562324777e9c4ca0f7eddba93599052b00df9b6218b325a1a7ebca6948b0c20f348f68713aa4eaecff7fb82ed18757b5659aa0cd873607b92027347991d9321af17010cc8d76c640da9ca9643f27a66acab579176fb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="181a0000080000000000000000000080850000000f00000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) ioctl$int_in(r6, 0x73, &(0x7f00000006c0)=0x80000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x190, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x164, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x14c, 0x1, [@m_mirred={0x148, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x1, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x1, 0xfff, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xff000000, 0x8, 0xffff0001, 0xff}, 0x2}}]}, {0x99, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x3, 0x2, 0x3, 0x1}, 0x20) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0xd21e9089b362a205}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @generic={0x7, 0x3, 0x7, 0x323, 0x1ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000100)=""/21, 0x40f00, 0x24, '\x00', 0x0, @xdp, r3, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xb, 0x7, 0xff}, 0x10, 0x0, r4, 0x0, &(0x7f00000002c0)=[r9, r11], 0x0, 0x10, 0x1000001}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 391.930565ms ago: executing program 4 (id=5915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xecf9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000006118be000000000085000000090000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x9, 0x8, 0x7f, 0x9}, 0x2, 0x7, 0x1169}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) accept4(r6, &(0x7f00000006c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80, 0x80000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x2, 0xb}, {0xd, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r9 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) r10 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r10, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/50, 0x32}, 0x6}, {{&(0x7f0000000440)=@nl=@proc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001880)=""/228, 0xe4}, {&(0x7f00000003c0)}], 0x4, &(0x7f0000000500)=""/37, 0x25}, 0x3}, {{&(0x7f00000005c0)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/17, 0x11}], 0x1}, 0x6}], 0x3, 0x1832b, 0x0) (async) setsockopt$inet6_int(r10, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r10, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async) r11 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) 386.414335ms ago: executing program 5 (id=5916): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xf0}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xf0}}, 0x0) socket(0x11, 0x4, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00"/54], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1}, 0x28) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) (async) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r6, &(0x7f0000000280)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000580)={@void, @val={0x2, 0x3, 0x1, 0x100, 0x2, 0x101}, @ipv6=@generic={0x0, 0x6, "af90da", 0x19e, 0x1d, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, {[@routing={0x2c, 0xc, 0x2, 0xfd, 0x0, [@dev={0xfe, 0x80, '\x00', 0x22}, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x2, 0x0, 0x7, 0x0, 0x0, 0x8, 0x68}, @fragment={0xb4, 0x0, 0x80, 0x0, 0x0, 0x2, 0x68}, @hopopts={0x32, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0xf800, [0x401, 0x6, 0x4, 0x0, 0xb90b]}}]}, @routing={0x6c, 0xe, 0x2, 0x9, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2c, 0x2, 0x4, 0x1, 0x9, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], "be11f3805df439b0f899e26019758c12b5a0570d8a454c2cf8d21284c89876239beb7942a07556e1d25611633eca63d90679200954fdf9f4961390e861c77d1c9401328cc674db50a472bcd160d3eacccef66d3160a0"}}}, 0x1d0) syz_emit_ethernet(0x7a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b00010069703679fd01000000fb905eabdcf5e840746e6c0000200002801400020000000000000000000000ffffac14142a0500"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b00010069703679fd01000000fb905eabdcf5e840746e6c0000200002801400020000000000000000000000ffffac14142a0500"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 60.101705ms ago: executing program 6 (id=5917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80000) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x5, @any, 0x7, 0x1}, 0xe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 0s ago: executing program 5 (id=5918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001001000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000101020085000000060000009508000000000000b814ef1261fd2b44a0adebf7cfc83a4bbfdaa2b6f828229c77d99ea785d320119b0e7a14d8507156f231a495ac01f287904352bb8a23bb4d8d5f3bf3a1d82f22d96df1597baccd22f0aa3baeb75d9716ebfb53fd5b8f1795eeaf1df93b58f8bcd05218b3eb2d6343b7ac7a7db0fc61e4c472a54bf1b52cd007571054a85224"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x17, 0x1, "18069c0131b1daae261374e6fe20c389c72d7d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) shutdown(r6, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r8, &(0x7f0000001300)="d37f7e7f9feaf03c81d6eae8c33a4b90f1210cd4ac050ffac5cdce9a20e426b87635b608a05d5955357c0025d00f5a5a1b815790d10ddcbd66dd87b57f8cad38151191fb17ce8dec96a66086da809a9ef95b443a4cc4c31d760e868e7da51e4311f1949fe69e5b18a312a8adf73dab9ec80b4d0cf4420858607749a82e05c5399a462940ab7aa4aa529bc446b6d37b78e2f1e8d1513b0ee8a23988de1065c1551439149dcf2275a7038be6984890b8fc2a84c19651cb6c30d682023dfed46760bfa188685429184c456dea99030ff451658d54a1e6d356d7b59263b2142a792cb5f520e242898a8d2cafb84de3be718d28bc8ef88d6991cee14cad6752810f0af829c1ad05af86bdf13e6478f35fce71f0d10c376911b4ed056f2545391026afdc3145dcb940b21ba4bd5bc3d7837a14266ef6a26732c8864ca10db4b6f2213b96342ccd2105d354cac3a1f0fcd978e5375c0bf8e7734de19605c9511f210ff28314a6cd728a3b44236f26253db18121362afb2d298f6dde18988c9b3b2c87b16942a4c5b0825ae889989dddac5318ceff4da031a2e3a2279c806bbd5fd13a1e6856184da0630795832c68955e605eb081c4adcc4b00826137c513d09e403c7200aab83dfd81b0a0d278cebe73442c0ee152c9f89045a1701df50a1a0f0df1f34fa94332d427e0ef0afd665f16b8cc55eef0e7c473135ccc7d031669b72c0ae9d53b43d329a3bd8fe5336d4ebeb8501fee33e478fabeee8fca974174b9462085b9a095224ba94655bf8c500e8b32d00c027b69264d2c262f9159953f8203be701a9a72d2f4262d434045f48032089fafb43e8a58b3c7096ba726f001b323b14b64b6dcabe2d8afcfb781ee8d8c6bb200148fe853d281840111f209460a6469f756ec329c8b83e5a25a19bd5cab9586a232c1d275d28d40c0c6114e1c6a598c2ee09149b8ff2fcf38cdfc06463efa6f337aac91641264807da409bae53a7da46fa21664946aa7192674e0730a0e49df057e4db7ac8006d910181b20fdc3397dc7550a92757234f0f30ce13bc1ed8b86d3e5387b956de210822993db76c5d70ee18e028eb6e7e9bb5f58639b5ffa6f28346d96d1949f96d49311e8706b2326190fc0769c39a1130b34fcb4304484ae9886130e427bf6a180fce7223e6438045f8602235dacb0d8b953de4aa679fdf490e62ca992003b85f40f8fedac4702421397d976ec8f083a84faa90c9fe4608194a21d70ed46bc97c5b53eddc7279eb31a8f32596ca294859d28be6db5e0ca857990664d8e9ace530a324367cd734fccd01cd65f8ef37ba5e20a8467014af6e23ec38bec89312b4c10663e974e25684decf348217903ee4da8a3edca2ff796bc9eda9a9e448d23d88531be007cae3695fa48472212672fdaee63a9b5f9cc50dc077c14f53b3558155c8d74779f9b9228aaee2afd851bf8747893ae91283ad623888fa53bcfdab66a4bf3256b3339a037e129df26d4cf155037a60ce0a6e4b04f34fa62896f2d7f4283292906ce3f5275a1e72f574016a3d6918bfa4d82541d045a4e77e9e8d1bf0ca43757f5b45ea607dd6621707dbca4f914da42fd3b6bff536101cbbeeee64ef6c94f92ea80592b81074e42b29338ef02ec85418feb525a6ebf1d0a9c80bacebbb42f8254ad38e488f5932ad92082c0fc964a7838e8007cee7c855b60b742ba841189317468b46ea72ea27967976b09db1bc8e82c25db911a4e018330754c85734eba96f710395c00b3f5c6cd3acf11097ae04b7c5d2744bc372d091997e5f56f9bb474f8d26326dc0be70d5ead3a65284e2a8a7abedd95025b249bbb61978079f21c9d697762b77b932aa60acf3982cf90bfd3997641837f3c607796d354d5ef614fc22cdd6a1d2d168905f4fee1617036900a65c8bccbd9488720abecadf9b359bb1ed5c4472b2be6e850059fcfba7b6cfc9af255aecdcf3c4bfcf3041c53798d26c2b3695e911963217868f78ffa592ac503c22f0507c3081b5c852e89da70ffd4a77ff42457b9f5c14068483092880e937928ceaa2c746e213dbdd95b08b50b2637257feb438f8655fb47efbf7c3f7ebb95d059c93503494b1366ae5303ce905aa6af53c38eaba9805bf0d20ad1239b0c284bd8dbbed5901a42556709221b3bbe4819f0adf315d90d8c980c128bd77a201c7542c946649f96d4978fd987768e8cc2d9a0262b82f6a34615bf50e4281de0e7cc600d1f56562dc9ea98f31108014ec04f48acd67dc7838389fe022fc4530b05bcf92e4624aa2b7f402a57f7befeaa07aa005ae475c87384a5c6e5227147084c46109a6bb4bb8c241fdf5639056e9268ce2cf5e5aff91c71d1c31a6d8b1f9906699719aec514c5abe79576d27e8253ccd202827aa9ab37729c9cd1606cfbf92229d31129b1076caa2839083d37c065892d8674b20adb9091bb7a7e551d8f4e2473907f3ea4905213e92e3db5468e11a51629844b3d518cfea79f9d56f054d1ea9201ae324ec8b41cdbaaa1c586521d61d583bc63b469baf363d82806b965b3f6301a6c9b709a346e44dbc7979c60ab958429b070750719fe6b0398b4a23f76b8e7b53141798379d4bb6144c333e3b3d7f706bd0ed24b1dfb04baa9fc8ce84dcb1e768c690eabd19d1a6ff472cb78c703d8201f0a520cb8892d7b8f7f45e88825c688965d4099642ee53d475e158ee471c4a9c816fedf6196f4596126cac5412bde10b074220f70b24526980acedbe2c5e4d3b547c54f1ab9aac9f7e6080e8db8948ecd5cc330cbe35e4a9585b92719cfe671ff3c0f9958714af8f483a9335b58dedc5444ef55d88496d8cdf7e24352018dd22199a1c609ba0b792897e00b92d3d51b31475358ae122c307a0d55c5fb51deb65868270f081c650b3d29d419cb462f80b031d2d6a678cdbfe0dd12df9dd8761b5dfb22c6957b5d0457061657f67cee4e5fb3bac11b7facbf066745fde5250caa44ddebfade69a6c533675f400bffb0d3c5929eec8e72620ddcc4384b3067bbcb6aa2421b376aaa2dfacbeceb943d45a16684aae8e04f180602050ed1aa62c6ecb31853e4e079ee36226f7cf575b1d2d2c81e6c2ca84c2ee76b6a28198591748be72d3ca692fab147565c5dd9e09ebf121ad9f1f0ce5ae401c0b5e4b31638b9ef73422436b470aa446c07cdc27460df81dcb3f89bbe7851a132faf13c9c2985d3c2033d0bc7a947b14559177b4abb99a680e6ad6671f14f814ba71934d864d65896daf38bca4aaefe90e6094ee72524f0e00a7093ba31566d4974e939a2f9cda333ba0c626861f24b14fd6c60031168f559028c74da7faa9bba9d9527fd0ca673999c0547bfc21f4a16f7bb17e77827bbdc92a59f17b914478bb9ba7da1e0826d367afb59e0f14a8a14962aeb4261812766db3c77897c4571c5972c98811966f612dc8cc4e74c52b1bba544848a9118f82d2d9ccdb89cdb32f9555230cd6db88fe09b6a8927ac06d7e4f85275e4a30800f4f5d80e43ad69a5ba22d525dcb9bede1d6ce6a97afbd67381069d6dd9dcc04f4cb3dc88659aaef1a28295b233380aa898db935932b2d2b3c7fcbf32687a3a3548e412adbe0dd0e0bc1334f9412e8f4eed4536c7201cba466854b5a6ed6cf3a4b4590bbe6e299544844a0d231dce96242cefa3c90505294bf0f2a8459280d522e82210e4e6ff39c043f641be6291e38a8efbc8952ee5f8d3329aa927fbd328d7bbecf5b359ecf299586cbcb668c62f7f2304a2aebc7cc552715fd386c4d061339e0850a2d1adb02b672675c7c4b87dde2289a1d2f2e7809d78dbef23156f67c6aacd9da743940c591800a22aaa973c5cd518277b375e610f9a59955e2f7e407e217e88f8fc8abae39c1c4483dc9f6e73a237111078eedb6471a70e6a62225b2562c855c7f89301d8798fd848d09fc97468a097bd0253d0d0601f780b64060ad3c604073ba560993e1def1544c4dc052163848ba5a77054263c1aec15970041aa28df360422041e7bfc4d07ccdfa65c67e7d890bf2f186d024b510c8283fd5073d8248b624156a65c45e22e446e18549725252ed88e2eb07e195a728b7afc3763713c613a867e67437a4bce818cd12bbeb2ae77c0fe08ea837f61bba3dc8db60f8a93975ce013ea0ec75b99757f927494eeab6bb803c4f8c428d48679d82daed6e1affd7b519d823a3b0e02ed30bbe30063af155d6963de2250d3178aa2d15218ee7bb83f354ba6edc855d6373fb2eb77f81dd868ea4715ce79c60886e45dc7d54edfae9b8cbd60a0fb9e3f8f83c9196e01ef8c3c144b44bd7ebd1463d9e898f7a1056d5059de86ca25b34f46781c95ea6f318e2fe8ac387d367065f9e8ccddfa163c93cf5311160f481240c8ce56df5e160f88b100f8789f8299bbe1a89ff6a81bc461f65add091084e10340ba8ea5e84e6b7ebd1414096e58051597bfa84d9c7c38d3ece55e0e6d924d54b4ba094a25a9a703815641c4d09730f2bcee7f75df18bd6ce5e9934c6ece8d84d97273b1e3ff2e5d9c61095edb016fa02bf655b45cb7fe9052b73d843cbb6a92e90abbb73cd2a9442c604970b4d4e435fdc058939eec58626e495cfc378e0c8a8050d151761d902a74bbfb9e174c9bdb9a07a0e58a8048bfa9159a727df4ee8dcc3f613cea5eefb1a1820c5ad97cebc155ffeb90c33b9f96d0d020a45dbd21e7befa15446d10c980a4aebb", 0xd01) sendmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @private=0xa010102}, 0x1, 0x1, 0x4, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="761d35fe45116f4805ffc70b47a4fb87545c88c191f9d19fddea67ebbc7645f7e838d3cfcc022256e083f703166499666705ef3d81ea3634ac6507fbea53fdabb85c6f12de71be25a676ad22585968034a11847ee6d880a29771619c02e61535f2d2290e3a0f66561005212746999a33f77fcbeb66495119cd89e476efcd9b49188f5ea5222f7f9846eea51b863df8010b0995f911b39d3d12cdcbc0e21a65c6f883115f270e907f6c021906a6aa53e9d0c36e735f61d93cd320ff40b42fb841a27d68b05855f184b6e634f52a", 0xcd}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="7172935ca86b30bb5a5ae98907532ff95770a33828dff79d71a58fcb5608e0ed37620b0536c7a08d79ce55deb62aa7c5c91b69f5d0574ba140dcdc61a30f42ed0a4f38c31fae011ed0f26bf09a138dbf4135dc2a7bb64ba0561bb8713b9e1fc450f49262731d8f0b5a16f765a297150190cdbe459cba0b7cd2f992028d9dd66006bf88c7f9b453ea71a7555e9999cec92e167a04fbab6e4b7beda15b10ddb6f2d82cef3f1f0a1dfd9882feea86994b25eaa3d8fdfe8b", 0xb6}], 0x3}, 0x8090) kernel console output (not intermixed with test programs): gth. [ 523.969549][T22601] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.980706][T22599] wg1 speed is unknown, defaulting to 1000 [ 524.024706][T22616] __nla_validate_parse: 11 callbacks suppressed [ 524.024740][T22616] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4446'. [ 524.133315][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4449'. [ 524.166296][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4449'. [ 524.199814][T22599] lo speed is unknown, defaulting to 1000 [ 524.220357][T22599] wg1 speed is unknown, defaulting to 1000 [ 524.289791][T22636] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4452'. [ 524.315989][T22636] netlink: zone id is out of range [ 524.321177][T22636] netlink: zone id is out of range [ 524.343505][T22636] netlink: zone id is out of range [ 524.350087][T22636] netlink: zone id is out of range [ 524.355294][T22636] netlink: zone id is out of range [ 524.361060][T22636] netlink: zone id is out of range [ 524.366509][T22636] netlink: zone id is out of range [ 524.371733][T22636] netlink: zone id is out of range [ 524.377750][T22636] netlink: zone id is out of range [ 524.414816][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4455'. [ 524.500275][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 524.633459][T22667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4460'. [ 524.638665][T22660] wg1 speed is unknown, defaulting to 1000 [ 524.679973][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4459'. [ 524.746975][T22671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4462'. [ 524.834767][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4462'. [ 524.872891][T22660] lo speed is unknown, defaulting to 1000 [ 524.881584][T22660] wg1 speed is unknown, defaulting to 1000 [ 525.505259][T22705] netlink: 'syz.4.4473': attribute type 1 has an invalid length. [ 525.549983][T22705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.113999][T22727] wg1 speed is unknown, defaulting to 1000 [ 526.126714][T22726] wg1 speed is unknown, defaulting to 1000 [ 526.304759][T22727] lo speed is unknown, defaulting to 1000 [ 526.312293][T22727] wg1 speed is unknown, defaulting to 1000 [ 526.380488][T22748] TCP: TCP_TX_DELAY enabled [ 526.603735][T22766] 8021q: VLANs not supported on vxcan0 [ 526.622065][T22726] lo speed is unknown, defaulting to 1000 [ 526.631180][T22765] nbd: socks must be embedded in a SOCK_ITEM attr [ 526.647829][T22726] wg1 speed is unknown, defaulting to 1000 [ 527.183293][T22790] netlink: 'syz.4.4498': attribute type 13 has an invalid length. [ 527.192228][T22790] netlink: 'syz.4.4498': attribute type 17 has an invalid length. [ 527.264650][T22790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.273695][T22790] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.413492][T22787] wg1 speed is unknown, defaulting to 1000 [ 527.452148][T22795] vlan3: entered promiscuous mode [ 527.457769][T22795] team0: entered promiscuous mode [ 527.462829][T22795] team_slave_0: entered promiscuous mode [ 527.474003][T22795] team_slave_1: entered promiscuous mode [ 527.482633][T22795] team0: Device vlan3 is already an upper device of the team interface [ 527.504901][T22792] wg1 speed is unknown, defaulting to 1000 [ 527.567421][T22787] lo speed is unknown, defaulting to 1000 [ 527.574380][T22787] wg1 speed is unknown, defaulting to 1000 [ 527.750521][T22800] netlink: 'syz.5.4501': attribute type 2 has an invalid length. [ 527.802807][T22792] lo speed is unknown, defaulting to 1000 [ 527.841439][T22792] wg1 speed is unknown, defaulting to 1000 [ 528.009986][T22810] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.049557][T22814] netlink: 'syz.5.4505': attribute type 12 has an invalid length. [ 528.084214][T22810] bridge_slave_1 (unregistering): left allmulticast mode [ 528.106352][T22810] bridge_slave_1 (unregistering): left promiscuous mode [ 528.113426][T22810] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.169174][T22819] netlink: 'syz.0.4506': attribute type 16 has an invalid length. [ 528.266202][T14961] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.276413][T14961] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.283803][T22816] IPv6: NLM_F_REPLACE set, but no existing node found! [ 528.284817][T14961] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.312754][T14961] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.723598][T22841] wg1 speed is unknown, defaulting to 1000 [ 528.752915][T22844] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 528.820720][T22844] bond0: (slave dummy0): Releasing backup interface [ 528.831692][T22844] dummy0: left promiscuous mode [ 528.854843][T22844] bridge_slave_0: left allmulticast mode [ 528.879029][T22844] bridge_slave_0: left promiscuous mode [ 528.882057][T22851] validate_nla: 1 callbacks suppressed [ 528.882077][T22851] netlink: 'syz.5.4517': attribute type 10 has an invalid length. [ 528.902341][T22844] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.931429][T22844] bond0: (slave bond_slave_0): Releasing backup interface [ 528.943526][T22844] bond_slave_0: left promiscuous mode [ 528.953671][T22844] bond0: (slave bond_slave_1): Releasing backup interface [ 528.964193][T22844] bond_slave_1: left promiscuous mode [ 528.972425][T22844] team_slave_0: left promiscuous mode [ 528.980905][T22844] team0: Port device team_slave_0 removed [ 528.987722][T22844] team_slave_1: left promiscuous mode [ 528.996285][T22844] team0: Port device team_slave_1 removed [ 529.002777][T22844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.010470][T22844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.019317][T22844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.027596][T22844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.041747][T22844] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 529.049084][T22844] batman_adv: batadv0: Removing interface: ip6gretap1 [ 529.063933][T22843] wg1 speed is unknown, defaulting to 1000 [ 529.086089][T22851] mac80211_hwsim hwsim56 wlan1: left allmulticast mode [ 529.114381][T22851] bond0: (slave wlan1): refused to change device type [ 529.142017][T22846] bridge0: entered promiscuous mode [ 529.152773][T22846] bridge0: port 1(macvlan2) entered blocking state [ 529.159761][T22846] bridge0: port 1(macvlan2) entered disabled state [ 529.173776][T22846] macvlan2: entered allmulticast mode [ 529.180100][T22846] bridge0: entered allmulticast mode [ 529.186827][T22846] macvlan2: left allmulticast mode [ 529.192367][T22846] bridge0: left allmulticast mode [ 529.202623][T22846] bridge0: left promiscuous mode [ 529.227766][T22841] lo speed is unknown, defaulting to 1000 [ 529.235379][T22841] wg1 speed is unknown, defaulting to 1000 [ 529.347233][T22843] lo speed is unknown, defaulting to 1000 [ 529.362458][T22843] wg1 speed is unknown, defaulting to 1000 [ 529.458891][T22871] geneve3: entered promiscuous mode [ 529.955902][T22882] wg1 speed is unknown, defaulting to 1000 [ 530.012463][T22892] wg1 speed is unknown, defaulting to 1000 [ 530.321719][T22919] __nla_validate_parse: 19 callbacks suppressed [ 530.321740][T22919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4534'. [ 530.446464][T22882] lo speed is unknown, defaulting to 1000 [ 530.480441][T22882] wg1 speed is unknown, defaulting to 1000 [ 530.603583][T22926] netlink: 'syz.3.4536': attribute type 4 has an invalid length. [ 530.704425][T22892] lo speed is unknown, defaulting to 1000 [ 530.764087][T22892] wg1 speed is unknown, defaulting to 1000 [ 531.129316][T22958] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4541'. [ 531.234691][T22960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4541'. [ 531.324894][T22968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4546'. [ 531.350436][T22974] netlink: 'syz.4.4547': attribute type 10 has an invalid length. [ 531.494119][T22981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.515428][T22963] bond0: (slave macvlan0): Opening slave failed [ 531.564763][T22981] bond5: (slave erspan0): Releasing active interface [ 531.577525][T22981] erspan0: left promiscuous mode [ 531.601563][T22981] bond5: (slave veth3): Releasing active interface [ 531.704207][T22983] net_ratelimit: 9 callbacks suppressed [ 531.704232][T22983] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 531.767674][T22983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4548'. [ 531.936050][T22989] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 531.946187][ T9024] IPVS: starting estimator thread 0... [ 532.046157][T22997] IPVS: using max 37 ests per chain, 88800 per kthread [ 532.115169][T23006] netlink: 'syz.0.4552': attribute type 1 has an invalid length. [ 532.329038][T23006] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.336528][T23007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4553'. [ 532.345563][T23007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4553'. [ 532.355893][T23007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4553'. [ 532.365009][T23007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4553'. [ 532.383857][T23001] bond6: (slave gretap1): making interface the new active one [ 532.392540][T23001] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 532.446128][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.472372][T23025] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 532.751857][T23049] tipc: Enabling of bearer rejected, failed to enable media [ 532.833789][T23056] netpci0: tun_chr_ioctl cmd 2147767507 [ 532.868673][T23056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4564'. [ 532.908081][T23062] batadv1: entered promiscuous mode [ 532.913349][T23062] batadv1: entered allmulticast mode [ 533.453115][T23113] tun0: tun_chr_ioctl cmd 35111 [ 533.609653][T23123] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 533.837037][T23151] openvswitch: netlink: Message has 8 unknown bytes. [ 534.035503][T23168] netlink: 'syz.5.4600': attribute type 7 has an invalid length. [ 534.136711][T23168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.144234][T23168] bridge2: port 1(bond1) entered blocking state [ 534.175120][T23168] bridge2: port 1(bond1) entered disabled state [ 534.198252][T23168] bond1: entered allmulticast mode [ 534.221874][T23168] bridge2: port 1(bond1) entered blocking state [ 534.228421][T23168] bridge2: port 1(bond1) entered forwarding state [ 534.681624][T23187] veth1_macvtap: left promiscuous mode [ 534.699973][T23187] macsec0: entered promiscuous mode [ 534.711183][T23187] macsec0: entered allmulticast mode [ 534.719295][T23192] siw: device registration error -23 [ 534.724946][T23187] veth1_macvtap: entered promiscuous mode [ 534.732005][T23187] veth1_macvtap: entered allmulticast mode [ 534.738670][T23187] macsec0: left promiscuous mode [ 534.744212][T23187] macsec0: left allmulticast mode [ 534.751130][T23187] veth1_macvtap: left allmulticast mode [ 534.759774][T14962] bridge2: port 1(bond1) entered disabled state [ 534.783527][T23189] wg1 speed is unknown, defaulting to 1000 [ 534.872786][T23198] netlink: 'syz.0.4607': attribute type 4 has an invalid length. [ 535.037982][T23210] wg1 speed is unknown, defaulting to 1000 [ 535.086837][T23205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.111863][T23205] geneve4: entered promiscuous mode [ 535.120903][T23189] lo speed is unknown, defaulting to 1000 [ 535.135100][T23189] wg1 speed is unknown, defaulting to 1000 [ 535.280983][T23210] lo speed is unknown, defaulting to 1000 [ 535.287892][T23210] wg1 speed is unknown, defaulting to 1000 [ 535.357051][T23228] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20000 [ 535.751101][T23240] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 535.814665][T23240] bond1: left allmulticast mode [ 535.823015][T23240] bridge2: port 1(bond1) entered disabled state [ 535.890162][T23240] netlink: 'syz.5.4617': attribute type 10 has an invalid length. [ 535.925751][T23240] mac80211_hwsim hwsim56 wlan1: left allmulticast mode [ 535.950227][T23240] bond0: (slave wlan1): refused to change device type [ 536.164285][T23267] netlink: 'syz.3.4624': attribute type 13 has an invalid length. [ 536.182089][T23267] netlink: 'syz.3.4624': attribute type 17 has an invalid length. [ 536.201162][T23267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.403870][T23273] wg1 speed is unknown, defaulting to 1000 [ 536.623761][T23286] wg1 speed is unknown, defaulting to 1000 [ 536.767419][T23273] lo speed is unknown, defaulting to 1000 [ 536.780394][T23273] wg1 speed is unknown, defaulting to 1000 [ 537.024201][T23307] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 537.053545][T23307] CPU: 1 UID: 0 PID: 23307 Comm: syz.3.4639 Not tainted syzkaller #0 PREEMPT(full) [ 537.053578][T23307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.053593][T23307] Call Trace: [ 537.053602][T23307] [ 537.053612][T23307] dump_stack_lvl+0x189/0x250 [ 537.053647][T23307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.053673][T23307] ? __pfx__printk+0x10/0x10 [ 537.053702][T23307] ? kernfs_root+0x1c/0x230 [ 537.053729][T23307] ? kernfs_path_from_node+0x2f/0x290 [ 537.053752][T23307] ? kernfs_path_from_node+0x250/0x290 [ 537.053775][T23307] ? kernfs_path_from_node+0x2f/0x290 [ 537.053801][T23307] sysfs_warn_dup+0x8e/0xa0 [ 537.053822][T23307] sysfs_do_create_link_sd+0xc0/0x110 [ 537.053847][T23307] device_add_class_symlinks+0x1cf/0x240 [ 537.053872][T23307] device_add+0x475/0xb50 [ 537.053895][T23307] wiphy_register+0x1ba6/0x28d0 [ 537.053937][T23307] ? __pfx_wiphy_register+0x10/0x10 [ 537.053966][T23307] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 537.053993][T23307] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 537.054019][T23307] ieee80211_register_hw+0x3425/0x4080 [ 537.054052][T23307] ? ieee80211_register_hw+0x14e1/0x4080 [ 537.054090][T23307] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 537.054118][T23307] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 537.054151][T23307] ? __hrtimer_setup+0x187/0x210 [ 537.054171][T23307] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 537.054204][T23307] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 537.054249][T23307] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 537.054276][T23307] ? trace_kmalloc+0x1f/0xd0 [ 537.054302][T23307] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 537.054333][T23307] ? kstrndup+0xbf/0x160 [ 537.054361][T23307] hwsim_new_radio_nl+0xea4/0x1b10 [ 537.054390][T23307] ? __pfx___nla_validate_parse+0x10/0x10 [ 537.054431][T23307] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.054467][T23307] ? __nla_parse+0x40/0x60 [ 537.054501][T23307] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 537.054534][T23307] genl_family_rcv_msg_doit+0x215/0x300 [ 537.054565][T23307] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.054611][T23307] ? bpf_lsm_capable+0x9/0x20 [ 537.054638][T23307] ? security_capable+0x7e/0x2e0 [ 537.054691][T23307] genl_rcv_msg+0x60e/0x790 [ 537.054719][T23307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.054742][T23307] ? __kasan_slab_alloc+0x6c/0x80 [ 537.054770][T23307] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.054800][T23307] ? __netlink_lookup+0xbd/0x810 [ 537.054820][T23307] ? rcu_is_watching+0x15/0xb0 [ 537.054848][T23307] netlink_rcv_skb+0x205/0x470 [ 537.054881][T23307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.054908][T23307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.054946][T23307] ? lock_release+0x4b/0x3e0 [ 537.054980][T23307] ? down_read+0x1ad/0x2e0 [ 537.055004][T23307] genl_rcv+0x28/0x40 [ 537.055027][T23307] netlink_unicast+0x82c/0x9e0 [ 537.055071][T23307] ? __pfx_netlink_unicast+0x10/0x10 [ 537.055103][T23307] ? netlink_sendmsg+0x642/0xb30 [ 537.055122][T23307] ? skb_put+0x11b/0x210 [ 537.055143][T23307] netlink_sendmsg+0x805/0xb30 [ 537.055169][T23307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.055190][T23307] ? futex_unqueue+0x22/0x240 [ 537.055215][T23307] ? aa_sock_msg_perm+0xf1/0x1d0 [ 537.055236][T23307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.055260][T23307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.055280][T23307] __sock_sendmsg+0x21c/0x270 [ 537.055311][T23307] ____sys_sendmsg+0x505/0x830 [ 537.055338][T23307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.055368][T23307] ? import_iovec+0x74/0xa0 [ 537.055395][T23307] ___sys_sendmsg+0x21f/0x2a0 [ 537.055420][T23307] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.055447][T23307] ? futex_wait+0x285/0x360 [ 537.055496][T23307] ? __fget_files+0x2a/0x420 [ 537.055515][T23307] ? __fget_files+0x3a0/0x420 [ 537.055540][T23307] __x64_sys_sendmsg+0x19b/0x260 [ 537.055565][T23307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.055595][T23307] ? rcu_is_watching+0x15/0xb0 [ 537.055620][T23307] ? rcu_is_watching+0x15/0xb0 [ 537.055644][T23307] do_syscall_64+0xfa/0x3b0 [ 537.055665][T23307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.055687][T23307] ? clear_bhb_loop+0x60/0xb0 [ 537.055712][T23307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.055734][T23307] RIP: 0033:0x7fb81bb8ebe9 [ 537.055754][T23307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.055775][T23307] RSP: 002b:00007fb81cab4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.055803][T23307] RAX: ffffffffffffffda RBX: 00007fb81bdb5fa0 RCX: 00007fb81bb8ebe9 [ 537.055820][T23307] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 537.055834][T23307] RBP: 00007fb81bc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 537.055848][T23307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.055861][T23307] R13: 00007fb81bdb6038 R14: 00007fb81bdb5fa0 R15: 00007ffd81dbb658 [ 537.055885][T23307] [ 537.564811][T23286] lo speed is unknown, defaulting to 1000 [ 537.577423][T23286] wg1 speed is unknown, defaulting to 1000 [ 537.664980][T23319] __nla_validate_parse: 8 callbacks suppressed [ 537.664999][T23319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4641'. [ 538.011248][T23333] openvswitch: netlink: Duplicate or invalid key (type 0). [ 538.050092][T23333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.235384][T23345] netlink: 'syz.4.4648': attribute type 1 has an invalid length. [ 538.264864][T23345] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4648'. [ 538.296093][T23345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4648'. [ 538.631312][T23356] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 538.804912][T23376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4655'. [ 538.855130][T23378] netlink: 'syz.2.4658': attribute type 4 has an invalid length. [ 538.861207][T23381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.866495][T23380] netlink: 'syz.2.4658': attribute type 4 has an invalid length. [ 539.079195][T23396] vxcan3: entered allmulticast mode [ 539.134951][T23398] netlink: 'syz.0.4663': attribute type 1 has an invalid length. [ 539.161110][T23398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.174304][T23398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4663'. [ 539.324904][T23413] tipc: Enabled bearer , priority 14 [ 539.334201][T23413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4664'. [ 539.343883][T23413] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4664'. [ 539.512920][T23423] netlink: 'syz.3.4669': attribute type 4 has an invalid length. [ 539.523523][T23423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 539.535059][T23423] netlink: 'syz.3.4669': attribute type 1 has an invalid length. [ 539.548206][T23423] netlink: 'syz.3.4669': attribute type 1 has an invalid length. [ 539.881564][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4678'. [ 539.996107][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4681'. [ 540.062268][T23464] veth1_macvtap: left promiscuous mode [ 540.839763][T23493] wg1 speed is unknown, defaulting to 1000 [ 540.853194][T23497] wg1 speed is unknown, defaulting to 1000 [ 540.988826][T23504] pimreg: entered allmulticast mode [ 541.007284][T23504] pimreg: left allmulticast mode [ 541.075782][T23506] wg1 speed is unknown, defaulting to 1000 [ 541.081796][T23493] lo speed is unknown, defaulting to 1000 [ 541.094294][T23493] wg1 speed is unknown, defaulting to 1000 [ 541.329811][T23497] lo speed is unknown, defaulting to 1000 [ 541.338798][T23497] wg1 speed is unknown, defaulting to 1000 [ 541.518961][T23523] netlink: 'syz.3.4700': attribute type 12 has an invalid length. [ 541.529513][T23506] lo speed is unknown, defaulting to 1000 [ 541.560388][T23506] wg1 speed is unknown, defaulting to 1000 [ 541.794679][T23540] netlink: 'syz.0.4702': attribute type 3 has an invalid length. [ 542.121991][T23558] wg1 speed is unknown, defaulting to 1000 [ 542.634890][T23558] lo speed is unknown, defaulting to 1000 [ 542.677165][T23558] wg1 speed is unknown, defaulting to 1000 [ 543.038069][T23602] __nla_validate_parse: 41 callbacks suppressed [ 543.038092][T23602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4720'. [ 543.110707][T23603] syzkaller0: entered promiscuous mode [ 543.117454][T23603] syzkaller0: entered allmulticast mode [ 543.554386][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4722'. [ 544.407485][T23631] netlink: 'syz.3.4729': attribute type 11 has an invalid length. [ 544.468689][T23636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4731'. [ 544.482939][T23636] macvlan3: entered promiscuous mode [ 544.507172][T23636] hsr0: entered promiscuous mode [ 544.512715][T23636] macvlan3: entered allmulticast mode [ 544.520326][T23636] hsr0: entered allmulticast mode [ 544.525404][T23636] hsr_slave_0: entered allmulticast mode [ 544.531423][T23636] hsr_slave_1: entered allmulticast mode [ 544.544763][T23636] hsr0: left allmulticast mode [ 544.553503][T23636] hsr_slave_0: left allmulticast mode [ 544.561283][T23636] hsr_slave_1: left allmulticast mode [ 544.567486][T23636] hsr0: left promiscuous mode [ 544.679366][T23650] tipc: Enabled bearer , priority 0 [ 544.702066][T23649] tipc: Resetting bearer [ 544.734435][T23648] tipc: Disabling bearer [ 544.988308][T23670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4742'. [ 545.470826][T23704] tipc: Enabling of bearer rejected, failed to enable media [ 546.169358][T23730] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 546.213158][T23732] team0: Mode changed to "loadbalance" [ 546.221214][T23732] veth0: entered promiscuous mode [ 546.232473][T23731] veth0: left promiscuous mode [ 546.520507][T23744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4765'. [ 546.794104][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4766'. [ 546.901432][T23748] wg1 speed is unknown, defaulting to 1000 [ 547.065173][T23748] lo speed is unknown, defaulting to 1000 [ 547.075592][T23748] wg1 speed is unknown, defaulting to 1000 [ 547.521869][T23758] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4769'. [ 547.551828][T23758] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4769'. [ 547.628354][T23762] wg1 speed is unknown, defaulting to 1000 [ 547.783063][T23767] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 547.791007][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4772'. [ 547.809059][T23767] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 547.856721][T23762] lo speed is unknown, defaulting to 1000 [ 547.863499][T23762] wg1 speed is unknown, defaulting to 1000 [ 548.091358][T23775] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4775'. [ 548.311333][T23788] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 548.461440][T23798] netlink: 'syz.3.4780': attribute type 2 has an invalid length. [ 548.530642][T23795] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4779'. [ 548.598686][T23795] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 548.809048][T23812] tipc: Enabled bearer , priority 0 [ 548.822226][T23812] syzkaller0: entered promiscuous mode [ 548.831469][T23812] syzkaller0: entered allmulticast mode [ 548.844343][T23811] wg1 speed is unknown, defaulting to 1000 [ 548.866808][T23806] tipc: Resetting bearer [ 548.941907][T23805] tipc: Resetting bearer [ 548.976255][T23805] tipc: Disabling bearer [ 548.999323][T23811] lo speed is unknown, defaulting to 1000 [ 549.006926][T23811] wg1 speed is unknown, defaulting to 1000 [ 549.081858][T23815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4785'. [ 549.099878][T23815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4785'. [ 549.109369][T23815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4785'. [ 549.123249][T23815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4785'. [ 549.143767][T23815] netlink: 'syz.2.4785': attribute type 6 has an invalid length. [ 549.155230][T23818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.310900][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'. [ 549.411066][T23828] batadv0: entered promiscuous mode [ 549.453419][T23828] macsec1: entered promiscuous mode [ 549.490749][T23828] batadv0: left promiscuous mode [ 550.333152][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4798'. [ 550.348850][T23879] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4798'. [ 550.510527][T23893] tipc: Enabled bearer , priority 0 [ 550.524156][T23893] tipc: Resetting bearer [ 550.539106][T23892] tipc: Disabling bearer [ 550.667208][T23906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4804'. [ 551.302788][T23931] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 551.314459][T23931] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 551.632226][T23945] vlan0: entered promiscuous mode [ 551.637817][T23945] macvtap0: entered promiscuous mode [ 552.112733][ T30] audit: type=1804 audit(1756424270.042:18): pid=23979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4831" name="/newroot/385/cgroup.controllers" dev="tmpfs" ino=1995 res=1 errno=0 [ 552.145538][ T30] audit: type=1800 audit(1756424270.072:19): pid=23979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4831" name="cgroup.controllers" dev="tmpfs" ino=1995 res=0 errno=0 [ 553.272622][T24045] wg1 speed is unknown, defaulting to 1000 [ 553.289737][T14962] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.330430][T24054] 8021q: VLANs not supported on tunl0 [ 553.349273][T24054] 8021q: VLANs not supported on tunl0 [ 553.359995][T14962] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.380955][T14962] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.399120][T14958] bond3: left allmulticast mode [ 553.414383][T14958] bond3: left promiscuous mode [ 553.421308][T14958] bridge0: port 1(bond3) entered disabled state [ 553.474473][T24060] netlink: 'syz.3.4848': attribute type 1 has an invalid length. [ 553.489485][T24060] __nla_validate_parse: 6 callbacks suppressed [ 553.489508][T24060] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4848'. [ 553.789674][T14958] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 553.801899][T14958] bond0 (unregistering): Released all slaves [ 553.825031][T14958] bond1 (unregistering): Released all slaves [ 553.840858][T14958] bond2 (unregistering): Released all slaves [ 553.864508][T14958] bond3 (unregistering): Released all slaves [ 553.880414][T24054] 8021q: VLANs not supported on tunl0 [ 553.892175][T14962] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.912634][T24045] lo speed is unknown, defaulting to 1000 [ 553.951878][T24045] wg1 speed is unknown, defaulting to 1000 [ 553.996396][T14958] tipc: Left network mode [ 554.085710][T24067] tipc: Enabled bearer , priority 0 [ 554.096901][ T30] audit: type=1800 audit(1756424272.022:20): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4850" name="memory.events" dev="tmpfs" ino=2011 res=0 errno=0 [ 554.126020][T24068] tipc: Enabling of bearer rejected, already enabled [ 554.135452][T24067] syzkaller0: entered promiscuous mode [ 554.142643][T24067] syzkaller0: entered allmulticast mode [ 554.167049][T24068] tipc: Resetting bearer [ 554.185079][T24066] tipc: Resetting bearer [ 554.262807][T24066] tipc: Disabling bearer [ 554.567070][T14958] hsr_slave_0: left promiscuous mode [ 554.595115][T14958] hsr_slave_1: left promiscuous mode [ 554.665110][T24084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4857'. [ 554.679587][T24084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4857'. [ 554.703564][T14958] pimreg (unregistering): left allmulticast mode [ 554.716805][ T9024] IPVS: starting estimator thread 0... [ 554.819129][T24089] IPVS: using max 40 ests per chain, 96000 per kthread [ 554.845151][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 555.141651][T24085] wg1 speed is unknown, defaulting to 1000 [ 555.360625][T24085] lo speed is unknown, defaulting to 1000 [ 555.368680][T24085] wg1 speed is unknown, defaulting to 1000 [ 555.940278][T24142] netlink: 'syz.5.4867': attribute type 13 has an invalid length. [ 555.940566][T24143] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4868'. [ 555.956361][T24142] netlink: 'syz.5.4867': attribute type 17 has an invalid length. [ 556.019997][T24135] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4868'. [ 556.045640][T24142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.074447][T24146] wg1 speed is unknown, defaulting to 1000 [ 556.125413][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4870'. [ 556.140286][T24149] vcan1: entered promiscuous mode [ 556.145471][T24149] vcan1: entered allmulticast mode [ 556.253737][T24146] lo speed is unknown, defaulting to 1000 [ 556.261606][T24146] wg1 speed is unknown, defaulting to 1000 [ 556.439509][T24158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.461134][T24158] bond2 (unregistering): Released all slaves [ 556.607434][T24166] wg1 speed is unknown, defaulting to 1000 [ 556.717348][T24166] lo speed is unknown, defaulting to 1000 [ 556.724092][T24166] wg1 speed is unknown, defaulting to 1000 [ 556.939775][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4877'. [ 556.962134][T24178] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 556.962761][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4877'. [ 557.256787][T24188] netlink: 'syz.4.4881': attribute type 1 has an invalid length. [ 557.387138][T24188] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 557.432279][T24197] veth7: entered promiscuous mode [ 557.525521][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 557.622489][T24207] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 557.671755][T24207] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 557.681499][T24207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 557.876043][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.883731][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.899764][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.914718][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.923971][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 557.944195][ T5180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.952937][ T5180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.960632][ T5180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.970426][ T5180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.981020][ T5180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.086249][T24238] wg1 speed is unknown, defaulting to 1000 [ 558.120097][T24230] wg1 speed is unknown, defaulting to 1000 [ 558.148771][T24237] tipc: Enabled bearer , priority 0 [ 558.252827][T24237] syzkaller0: entered promiscuous mode [ 558.277080][T24237] syzkaller0: entered allmulticast mode [ 558.283277][T24237] tipc: Resetting bearer [ 558.303048][T24235] wg1 speed is unknown, defaulting to 1000 [ 558.529162][T24230] lo speed is unknown, defaulting to 1000 [ 558.563718][T24238] lo speed is unknown, defaulting to 1000 [ 558.565582][T24239] __nla_validate_parse: 1 callbacks suppressed [ 558.565603][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4893'. [ 558.587230][T24230] wg1 speed is unknown, defaulting to 1000 [ 558.600323][T24238] wg1 speed is unknown, defaulting to 1000 [ 558.632774][T24250] netlink: 'syz.5.4896': attribute type 10 has an invalid length. [ 558.663705][T24250] bond0: (slave wlan1): refused to change device type [ 558.789167][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4897'. [ 558.836034][T24235] lo speed is unknown, defaulting to 1000 [ 558.978673][T24245] tipc: Resetting bearer [ 559.022884][T24245] tipc: Disabling bearer [ 559.033726][T24235] wg1 speed is unknown, defaulting to 1000 [ 559.303721][T24230] chnl_net:caif_netlink_parms(): no params data found [ 559.478601][T24271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4899'. [ 559.755474][T24230] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.765767][T24230] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.783626][T24230] bridge_slave_0: entered allmulticast mode [ 559.818187][T24230] bridge_slave_0: entered promiscuous mode [ 559.825581][T24282] netlink: 'syz.3.4902': attribute type 1 has an invalid length. [ 559.842473][T24272] wg1 speed is unknown, defaulting to 1000 [ 559.843491][T24230] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.862618][T24282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.872109][T24230] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.884018][T24230] bridge_slave_1: entered allmulticast mode [ 559.892537][T24230] bridge_slave_1: entered promiscuous mode [ 559.908895][ T30] audit: type=1800 audit(1756424277.792:21): pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4902" name="memory.events" dev="tmpfs" ino=1807 res=0 errno=0 [ 560.024423][T24230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.042251][T24230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.061772][ T5863] Bluetooth: hci3: command tx timeout [ 560.130335][T24230] team0: Port device team_slave_0 added [ 560.252859][T24230] team0: Port device team_slave_1 added [ 560.321222][T24295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 560.439401][T24272] lo speed is unknown, defaulting to 1000 [ 560.454679][T24230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.483689][T24230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.555846][T24230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.590922][T24230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.599575][T24230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.632698][T24230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.692683][T24300] tipc: Enabled bearer , priority 0 [ 560.699495][T24272] wg1 speed is unknown, defaulting to 1000 [ 560.787397][T24230] hsr_slave_0: entered promiscuous mode [ 560.794017][T24230] hsr_slave_1: entered promiscuous mode [ 560.804388][T24230] debugfs: 'hsr0' already exists in 'hsr' [ 560.812099][T24230] Cannot create hsr debugfs directory [ 560.852158][T24297] tipc: Disabling bearer [ 560.907514][T14960] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.953065][T14961] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.993344][T14961] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.002470][T14961] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.103349][T14957] bond6 (unregistering): (slave gretap1): Releasing active interface [ 561.384397][T14957] bond0 (unregistering): Released all slaves [ 561.394470][T14957] bond1 (unregistering): Released all slaves [ 561.405638][T14957] bond2 (unregistering): Released all slaves [ 561.418408][T14957] bond3 (unregistering): Released all slaves [ 561.433844][T14957] bond4 (unregistering): Released all slaves [ 561.444796][T14957] bond5 (unregistering): Released all slaves [ 561.456997][T14957] bond6 (unregistering): Released all slaves [ 561.469461][T14957] bond7 (unregistering): Released all slaves [ 561.533071][T14957] tipc: Left network mode [ 561.541909][T24230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.555176][T24230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.574615][T24230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.586584][T24230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 561.648166][T24230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.672552][T24230] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.690779][T14960] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.697972][T14960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.709718][T14961] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.716874][T14961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.022635][T24230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.127520][ T5863] Bluetooth: hci3: command tx timeout [ 562.203868][T24230] veth0_vlan: entered promiscuous mode [ 562.214830][T24230] veth1_vlan: entered promiscuous mode [ 562.236904][T14957] IPVS: stop unused estimator thread 0... [ 562.244900][T24230] veth0_macvtap: entered promiscuous mode [ 562.253626][T24230] veth1_macvtap: entered promiscuous mode [ 562.271024][T24230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.283188][T24230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.299098][T14957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.308453][T14957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.317879][T14962] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.329725][T14962] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.375743][T14961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.384361][T14961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.410188][T14957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.418326][T14957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.206087][ T5863] Bluetooth: hci3: command tx timeout [ 566.286530][ T5863] Bluetooth: hci3: command tx timeout [ 568.287812][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 606.253367][T24337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4912'. [ 606.285227][T24332] wg1 speed is unknown, defaulting to 1000 [ 606.294274][T24337] nbd: socks must be embedded in a SOCK_ITEM attr [ 606.496618][T24348] tipc: Enabled bearer , priority 0 [ 606.546438][T24348] syzkaller0: entered promiscuous mode [ 606.570787][T24348] syzkaller0: entered allmulticast mode [ 606.616140][T24332] lo speed is unknown, defaulting to 1000 [ 606.623056][T24332] wg1 speed is unknown, defaulting to 1000 [ 606.640171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.648461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.688254][T24348] tipc: Resetting bearer [ 606.710977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.719327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.846258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.854431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.987004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.126859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.135120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.266286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.435600][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4916'. [ 607.537849][T24363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4916'. [ 607.546884][ T24] tipc: Node number set to 1420970635 [ 607.566469][T24335] tipc: Resetting bearer [ 607.618928][T24335] tipc: Disabling bearer [ 608.090362][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4917'. [ 608.277146][T24375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4920'. [ 608.361447][T24374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4921'. [ 608.409094][T24374] geneve3: entered promiscuous mode [ 608.435290][T24384] netlink: 'syz.5.4920': attribute type 3 has an invalid length. [ 608.455886][T14961] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.469507][T24384] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4920'. [ 608.497022][T14961] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.505362][T14961] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.551800][T14961] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.734809][T24395] netlink: 'syz.4.4923': attribute type 13 has an invalid length. [ 608.777631][T24395] netlink: 'syz.4.4923': attribute type 17 has an invalid length. [ 608.923164][T24403] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4928'. [ 609.101981][ T24] IPVS: starting estimator thread 0... [ 609.121418][T24405] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4929'. [ 609.140052][T24405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4929'. [ 609.195880][T24407] IPVS: using max 37 ests per chain, 88800 per kthread [ 609.245420][T24416] Unsupported ieee802154 address type: 0 [ 609.449891][T24429] netlink: 'syz.4.4937': attribute type 1 has an invalid length. [ 609.463073][T24429] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 609.463515][T24430] erspan0: entered allmulticast mode [ 609.822807][T24428] sctp: [Deprecated]: syz.6.4938 (pid 24428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.822807][T24428] Use struct sctp_sack_info instead [ 609.925649][T24461] tipc: Enabled bearer , priority 0 [ 609.933132][T24461] syzkaller0: entered allmulticast mode [ 609.946678][T24460] tipc: Disabling bearer [ 610.494371][T24487] wg1 speed is unknown, defaulting to 1000 [ 610.606691][T24494] wg1 speed is unknown, defaulting to 1000 [ 610.669790][T24487] lo speed is unknown, defaulting to 1000 [ 610.676663][T24487] wg1 speed is unknown, defaulting to 1000 [ 610.795489][T24494] lo speed is unknown, defaulting to 1000 [ 610.802363][T24494] wg1 speed is unknown, defaulting to 1000 [ 611.006541][T24516] syzkaller1: entered promiscuous mode [ 611.012243][T24516] syzkaller1: entered allmulticast mode [ 611.236370][T24525] netlink: 'syz.6.4965': attribute type 39 has an invalid length. [ 611.258417][T24536] netlink: 'syz.4.4968': attribute type 1 has an invalid length. [ 611.284268][T24525] veth0_macvtap: left promiscuous mode [ 611.294803][T24536] __nla_validate_parse: 9 callbacks suppressed [ 611.294823][T24536] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4968'. [ 611.419730][T24542] tipc: Enabled bearer , priority 0 [ 611.423570][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'. [ 611.436396][T24545] syzkaller0: entered promiscuous mode [ 611.455529][T24541] netlink: 'syz.2.4969': attribute type 21 has an invalid length. [ 611.472692][T24545] syzkaller0: entered allmulticast mode [ 611.552704][T24545] tipc: Resetting bearer [ 611.635331][T24553] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 611.665297][T24554] netlink: 147804 bytes leftover after parsing attributes in process `syz.2.4969'. [ 611.678849][ C1] net_ratelimit: 7 callbacks suppressed [ 611.678873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.692884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.753297][T24551] netlink: 'syz.6.4972': attribute type 13 has an invalid length. [ 611.798675][T24546] syzkaller1: entered promiscuous mode [ 611.804204][T24546] syzkaller1: entered allmulticast mode [ 611.810201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.076255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.084431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.142649][T24526] tipc: Resetting bearer [ 612.200141][T24526] tipc: Disabling bearer [ 612.488739][T24577] vlan2: entered promiscuous mode [ 612.502172][T24577] vlan2: entered allmulticast mode [ 612.515053][T24577] hsr_slave_1: entered allmulticast mode [ 612.522190][T24584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4980'. [ 612.624808][T24584] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4980'. [ 613.037024][T24614] syzkaller1: entered promiscuous mode [ 613.056046][T24614] syzkaller1: entered allmulticast mode [ 613.208484][T24621] wg1 speed is unknown, defaulting to 1000 [ 613.216801][T24620] wg1 speed is unknown, defaulting to 1000 [ 613.326427][T24620] lo speed is unknown, defaulting to 1000 [ 613.333122][T24620] wg1 speed is unknown, defaulting to 1000 [ 613.359274][T24631] netlink: 'syz.3.4995': attribute type 39 has an invalid length. [ 613.494657][T24621] lo speed is unknown, defaulting to 1000 [ 613.501674][T24621] wg1 speed is unknown, defaulting to 1000 [ 613.825285][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4997'. [ 613.842050][T24643] netlink: 'syz.2.4997': attribute type 9 has an invalid length. [ 614.012015][T24647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4998'. [ 614.176918][T24653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5001'. [ 614.309519][T24659] netlink: 'syz.4.5001': attribute type 10 has an invalid length. [ 614.612592][T24673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5005'. [ 614.870273][T24685] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5007'. [ 614.910959][T24686] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 614.949787][T24686] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 615.005720][T24691] tipc: Enabling of bearer rejected, failed to enable media [ 615.060141][T24704] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 615.080244][T24704] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 615.244475][ T30] audit: type=1800 audit(1756424333.172:22): pid=24721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5017" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1901 res=0 errno=0 [ 615.293073][T24720] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 615.418894][T24726] : renamed from batadv_slave_0 (while UP) [ 615.429783][T24726] batman_adv: batadv0: Interface deactivated:  [ 615.765323][T24765] netlink: 'syz.5.5025': attribute type 1 has an invalid length. [ 615.923903][T24765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 615.992034][T24770] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 616.013386][T24763] tipc: Started in network mode [ 616.018953][T24763] tipc: Node identity ac1414aa, cluster identity 4711 [ 616.029515][T24763] tipc: Enabled bearer , priority 10 [ 616.045024][T24763] Bluetooth: MGMT ver 1.23 [ 616.163657][T24793] netlink: 'syz.6.5036': attribute type 2 has an invalid length. [ 616.216217][T24793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.285271][T24795] veth0_to_team: entered promiscuous mode [ 616.299825][T24795] veth0_to_team: entered allmulticast mode [ 616.541958][T24821] __nla_validate_parse: 8 callbacks suppressed [ 616.541981][T24821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5045'. [ 616.578898][T24832] netlink: 'syz.6.5048': attribute type 2 has an invalid length. [ 616.623015][T24832] k›*·]‘: entered promiscuous mode [ 616.675022][T24836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.819975][T24836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5048'. [ 616.861287][T14963] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 616.869627][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5055'. [ 616.883248][T24854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5054'. [ 616.913355][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5054'. [ 617.003938][T24867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.036881][T24858] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.145901][ T9025] tipc: Node number set to 2886997162 [ 617.349794][T24879] vxlan0: entered promiscuous mode [ 617.355135][T24879] vxlan0: entered allmulticast mode [ 617.366925][T14961] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.387420][T14961] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.403032][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5064'. [ 617.422056][T14961] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.433387][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5064'. [ 617.454941][T14961] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.539439][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5069'. [ 617.552792][T24896] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5068'. [ 617.563663][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5068'. [ 617.795412][T24916] wg1 speed is unknown, defaulting to 1000 [ 617.948779][T24911] wg1 speed is unknown, defaulting to 1000 [ 617.992362][T24926] netlink: 'syz.2.5077': attribute type 4 has an invalid length. [ 618.018239][T24928] ip6gretap0: entered promiscuous mode [ 618.024106][T24928] macsec1: entered promiscuous mode [ 618.030458][T24928] macsec1: entered allmulticast mode [ 618.036117][T24928] ip6gretap0: entered allmulticast mode [ 618.060559][T24928] wg1 speed is unknown, defaulting to 1000 [ 618.079609][T24916] lo speed is unknown, defaulting to 1000 [ 618.088218][T24916] wg1 speed is unknown, defaulting to 1000 [ 618.278578][T24911] lo speed is unknown, defaulting to 1000 [ 618.285740][T24911] wg1 speed is unknown, defaulting to 1000 [ 618.354086][T24938] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 618.632471][T24950] nbd: couldn't find a device at index 0 [ 618.667542][T24930] syzkaller0: entered promiscuous mode [ 618.673087][T24930] syzkaller0: entered allmulticast mode [ 618.739307][T24955] vlan0: entered promiscuous mode [ 618.760787][T24955] bridge0: entered promiscuous mode [ 618.766374][ T5180] Bluetooth: hci3: command 0x0405 tx timeout [ 618.785545][T24943] macsec2: entered promiscuous mode [ 618.820674][T24928] lo speed is unknown, defaulting to 1000 [ 618.831195][T24928] wg1 speed is unknown, defaulting to 1000 [ 618.837997][T24957] siw: device registration error -23 [ 619.229652][ T30] audit: type=1800 audit(1756424337.162:23): pid=24996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5093" name="memory.events" dev="tmpfs" ino=2201 res=0 errno=0 [ 619.799040][T25024] netlink: 'syz.2.5105': attribute type 2 has an invalid length. [ 619.830697][T25024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.872954][T25026] netlink: 'syz.6.5106': attribute type 2 has an invalid length. [ 620.213668][T25052] bridge_slave_0: left allmulticast mode [ 620.244153][T25052] bridge_slave_0: left promiscuous mode [ 620.251803][T25052] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.274032][T25052] bridge_slave_1: left allmulticast mode [ 620.283738][T25052] bridge_slave_1: left promiscuous mode [ 620.290459][T25052] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.310642][T25052] bond0: (slave bond_slave_0): Releasing backup interface [ 620.354123][T25052] bond0: (slave bond_slave_1): Releasing backup interface [ 620.392375][T25052] team0: Port device team_slave_0 removed [ 620.445044][T25052] team0: Port device team_slave_1 removed [ 620.482003][T25052] batman_adv: batadv0: Removing interface:  [ 620.501683][T25052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.509615][T25052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.559482][T25053] vlan2: entered promiscuous mode [ 620.564992][T25053] bond0: entered promiscuous mode [ 620.574359][T25053] vlan2: entered allmulticast mode [ 620.582470][T25053] bond0: entered allmulticast mode [ 620.608956][T25054] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 620.654424][T25076] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 620.751797][T25076] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 620.824552][T25084] netlink: 'syz.3.5115': attribute type 4 has an invalid length. [ 620.865148][T25076] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 620.901739][T25086] netlink: 'syz.5.5116': attribute type 1 has an invalid length. [ 620.910252][T25086] netlink: 'syz.5.5116': attribute type 2 has an invalid length. [ 620.929466][T25086] netlink: 'syz.5.5116': attribute type 1 has an invalid length. [ 620.941824][T25086] netlink: 'syz.5.5116': attribute type 2 has an invalid length. [ 621.013288][T25091] netlink: 'syz.2.5118': attribute type 83 has an invalid length. [ 621.701540][T25076] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 621.845406][T25104] __nla_validate_parse: 12 callbacks suppressed [ 621.845428][T25104] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5121'. [ 621.902145][T14964] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 621.962653][T14964] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 621.982323][T14964] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 622.005213][T14964] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 622.195992][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5123'. [ 622.244708][T25134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5131'. [ 622.403653][T25147] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20004 [ 622.521359][T25161] IPv6: Can't replace route, no match found [ 622.752641][T25175] tipc: Enabled bearer , priority 0 [ 622.765413][T25175] syzkaller0: mtu less than device minimum [ 622.775157][T25174] tipc: Disabling bearer [ 622.873623][T25181] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 622.882192][T25181] batman_adv: batadv0: Removing interface: ip6gretap1 [ 622.902512][T25186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5145'. [ 622.957348][T25181] bond1: (slave gretap1): Releasing active interface [ 623.007882][T25186] team0: Unable to change to the same mode the team is in [ 623.042164][T25190] netlink: 'syz.3.5148': attribute type 1 has an invalid length. [ 623.237354][T25207] wg1 speed is unknown, defaulting to 1000 [ 623.431935][T25235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5160'. [ 623.487357][T25237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5160'. [ 623.551014][T25207] lo speed is unknown, defaulting to 1000 [ 623.560755][T14962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.572063][T14962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.597790][T25207] wg1 speed is unknown, defaulting to 1000 [ 623.673374][T25245] tap0: tun_chr_ioctl cmd 2147767521 [ 623.841444][T25255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5166'. [ 624.188220][T25273] netlink: 'syz.5.5170': attribute type 10 has an invalid length. [ 624.196560][T25273] bond0: (slave wlan1): refused to change device type [ 624.783124][T25287] wg1 speed is unknown, defaulting to 1000 [ 624.910444][T25283] wg1 speed is unknown, defaulting to 1000 [ 624.955353][T25287] lo speed is unknown, defaulting to 1000 [ 624.965146][T25287] wg1 speed is unknown, defaulting to 1000 [ 625.122190][T25300] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5175'. [ 625.300206][T25283] lo speed is unknown, defaulting to 1000 [ 625.341779][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5177'. [ 625.342610][T25283] wg1 speed is unknown, defaulting to 1000 [ 625.370920][T25308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5177'. [ 625.819038][T25332] netlink: 'syz.3.5187': attribute type 10 has an invalid length. [ 625.909713][T25332] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 626.360764][T25353] netlink: 'syz.3.5190': attribute type 13 has an invalid length. [ 626.369606][T25353] netlink: 'syz.3.5190': attribute type 17 has an invalid length. [ 626.387771][T25352] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 626.414041][T25355] netlink: 'syz.5.5193': attribute type 10 has an invalid length. [ 626.455579][T25353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.470650][T25353] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.482049][T25353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.531195][T25355] bridge0: entered promiscuous mode [ 626.567059][T25355] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 626.605533][T25364] tipc: Enabled bearer , priority 10 [ 626.612600][T25356] wg1 speed is unknown, defaulting to 1000 [ 626.836766][T25356] lo speed is unknown, defaulting to 1000 [ 626.845105][T25356] wg1 speed is unknown, defaulting to 1000 [ 627.171249][T25393] wg1 speed is unknown, defaulting to 1000 [ 627.338809][T25402] __nla_validate_parse: 4 callbacks suppressed [ 627.338831][T25402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5206'. [ 627.428489][T25405] netlink: 'syz.5.5207': attribute type 4 has an invalid length. [ 627.441614][T25405] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5207'. [ 627.455034][T25393] lo speed is unknown, defaulting to 1000 [ 627.573478][T25405] Ã: renamed from bond0 (while UP) [ 627.684501][T25393] wg1 speed is unknown, defaulting to 1000 [ 627.729106][T25415] xt_time: unknown flags 0xf4 [ 628.121182][T25430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5214'. [ 628.123180][T25435] netlink: 'syz.2.5215': attribute type 5 has an invalid length. [ 628.141403][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5215'. [ 628.289703][T25443] tipc: Enabled bearer , priority 0 [ 628.392459][T25443] syzkaller0: entered promiscuous mode [ 628.398115][T25443] syzkaller0: entered allmulticast mode [ 628.683051][T25449] tipc: Resetting bearer [ 628.721483][T25448] wg1 speed is unknown, defaulting to 1000 [ 628.750842][T25452] wg1 speed is unknown, defaulting to 1000 [ 628.933479][T25448] lo speed is unknown, defaulting to 1000 [ 628.947473][T25448] wg1 speed is unknown, defaulting to 1000 [ 629.035580][T25452] lo speed is unknown, defaulting to 1000 [ 629.042501][T25452] wg1 speed is unknown, defaulting to 1000 [ 629.055386][T25478] sctp: [Deprecated]: syz.3.5225 (pid 25478) Use of int in maxseg socket option. [ 629.055386][T25478] Use struct sctp_assoc_value instead [ 629.110337][T25442] tipc: Resetting bearer [ 629.147529][T25442] tipc: Disabling bearer [ 629.269774][T25485] veth1_to_bond: entered allmulticast mode [ 629.282320][T25485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5227'. [ 629.339702][T25485] veth1_to_bond (unregistering): left allmulticast mode [ 629.490368][ T9030] IPVS: starting estimator thread 0... [ 629.616553][T25505] IPVS: using max 36 ests per chain, 86400 per kthread [ 629.654218][T25517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5234'. [ 629.697087][T25520] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5235'. [ 629.728073][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 629.729938][T25522] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5236'. [ 629.775865][T25518] unknown channel width for channel at 909000KHz? [ 629.828399][T25529] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5237'. [ 629.968535][T25529] batadv1: entered promiscuous mode [ 629.973804][T25529] batadv1: entered allmulticast mode [ 629.982368][T25523] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5235'. [ 631.061290][T25616] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 631.071742][T25616] openvswitch: netlink: Message has 8454 unknown bytes. [ 631.263721][T25625] bridge0: port 1(vlan4) entered blocking state [ 631.278218][T25625] bridge0: port 1(vlan4) entered disabled state [ 631.284889][T25625] vlan4: entered allmulticast mode [ 631.291595][T25625] bridge0: entered allmulticast mode [ 631.299504][T25625] vlan4: left allmulticast mode [ 631.314179][T25625] bridge0: left allmulticast mode [ 631.338904][T25630] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 631.364154][T25637] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 631.471914][T25644] netlink: 'syz.4.5268': attribute type 1 has an invalid length. [ 631.524598][T25644] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.558207][T25644] bond6: entered promiscuous mode [ 632.116195][T25694] tipc: Enabled bearer , priority 0 [ 632.125556][T25694] tipc: Resetting bearer [ 632.138905][T25693] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0 [ 632.209561][T25689] tipc: Disabling bearer [ 632.230141][T25697] netlink: 'syz.5.5287': attribute type 16 has an invalid length. [ 632.238588][T25697] netlink: 'syz.5.5287': attribute type 17 has an invalid length. [ 632.831459][T25720] __nla_validate_parse: 15 callbacks suppressed [ 632.831483][T25720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5293'. [ 632.916442][T25709] tipc: Enabled bearer , priority 0 [ 632.967060][T14957] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.994545][T14957] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.019276][T14957] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.040040][T14957] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.092567][T25709] tipc: Disabling bearer [ 633.170479][T14957] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.210854][T14957] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.249258][T14957] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.271766][T25737] xt_l2tp: unknown flags: 51 [ 633.279771][T14957] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.303115][T25737] netlink: 'syz.4.5298': attribute type 10 has an invalid length. [ 633.312641][T25727] wg1 speed is unknown, defaulting to 1000 [ 633.324961][T14957] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.343966][T14957] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.381074][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5298'. [ 633.403613][T25739] team0: entered allmulticast mode [ 633.417522][T14957] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.436637][T14957] netdevsim netdevsim1 eth4: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.512335][T14957] netdevsim netdevsim0 eth5: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.550863][T14964] netdevsim netdevsim0 eth6: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.559542][T14964] netdevsim netdevsim0 eth7: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.581296][T25727] lo speed is unknown, defaulting to 1000 [ 633.588338][T25727] wg1 speed is unknown, defaulting to 1000 [ 633.629059][T25741] wg1 speed is unknown, defaulting to 1000 [ 633.645050][T14964] netdevsim netdevsim0 eth8: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.655507][T25750] wg1 speed is unknown, defaulting to 1000 [ 633.823109][T25741] lo speed is unknown, defaulting to 1000 [ 633.836937][T25741] wg1 speed is unknown, defaulting to 1000 [ 633.851773][T25760] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5305'. [ 633.880989][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5304'. [ 633.987629][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5305'. [ 634.046755][T25767] tipc: Enabled bearer , priority 0 [ 634.055358][T25767] syzkaller0: entered promiscuous mode [ 634.064419][T25767] syzkaller0: entered allmulticast mode [ 634.137153][T25767] tipc: Resetting bearer [ 634.181992][T25766] tipc: Resetting bearer [ 634.207480][T25766] tipc: Disabling bearer [ 634.228426][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'. [ 634.274054][T25750] lo speed is unknown, defaulting to 1000 [ 634.293643][T25750] wg1 speed is unknown, defaulting to 1000 [ 634.552238][T25795] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5311'. [ 634.592312][T25795] .70·: renamed from hsr0 (while UP) [ 634.632073][T25795] .70·: entered allmulticast mode [ 634.660402][T25795] hsr_slave_0: entered allmulticast mode [ 634.681156][T25795] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 634.719072][T25788] wg1 speed is unknown, defaulting to 1000 [ 634.979423][T25788] lo speed is unknown, defaulting to 1000 [ 635.000711][T25788] wg1 speed is unknown, defaulting to 1000 [ 635.392916][T25829] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5324'. [ 635.568053][T25837] wg1 speed is unknown, defaulting to 1000 [ 635.623046][T25842] "syz.6.5325" (25842) uses obsolete ecb(arc4) skcipher [ 635.698618][T25847] netlink: 'syz.6.5325': attribute type 1 has an invalid length. [ 635.712118][T25847] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5325'. [ 635.823565][T25837] lo speed is unknown, defaulting to 1000 [ 635.844106][T25837] wg1 speed is unknown, defaulting to 1000 [ 635.926440][T25858] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 636.005376][T25866] FAULT_INJECTION: forcing a failure. [ 636.005376][T25866] name failslab, interval 1, probability 0, space 0, times 0 [ 636.018073][T25866] CPU: 0 UID: 0 PID: 25866 Comm: syz.5.5335 Not tainted syzkaller #0 PREEMPT(full) [ 636.018101][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.018115][T25866] Call Trace: [ 636.018124][T25866] [ 636.018133][T25866] dump_stack_lvl+0x189/0x250 [ 636.018163][T25866] ? __pfx____ratelimit+0x10/0x10 [ 636.018192][T25866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.018216][T25866] ? __pfx__printk+0x10/0x10 [ 636.018262][T25866] ? do_xdp_generic+0x11a/0x11a0 [ 636.018293][T25866] should_fail_ex+0x414/0x560 [ 636.018324][T25866] should_failslab+0xa8/0x100 [ 636.018357][T25866] kmem_cache_alloc_noprof+0x73/0x3c0 [ 636.018385][T25866] ? skb_clone+0x212/0x3a0 [ 636.018412][T25866] skb_clone+0x212/0x3a0 [ 636.018434][T25866] ? packet_rcv+0x567/0x1590 [ 636.018460][T25866] packet_rcv+0x6d6/0x1590 [ 636.018488][T25866] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 636.018519][T25866] __netif_receive_skb_core+0x3107/0x4020 [ 636.018564][T25866] ? __pfx___skb_flow_dissect+0x10/0x10 [ 636.018593][T25866] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 636.018625][T25866] ? __pfx___skb_flow_dissect+0x10/0x10 [ 636.018657][T25866] ? kasan_save_track+0x4f/0x80 [ 636.018682][T25866] ? kasan_save_track+0x3e/0x80 [ 636.018706][T25866] ? __kasan_slab_alloc+0x6c/0x80 [ 636.018732][T25866] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 636.018763][T25866] __netif_receive_skb_list_core+0x23f/0x800 [ 636.018792][T25866] ? do_dentry_open+0xa18/0x13f0 [ 636.018812][T25866] ? do_syscall_64+0xfa/0x3b0 [ 636.018843][T25866] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 636.018873][T25866] ? __might_fault+0xb0/0x130 [ 636.018907][T25866] netif_receive_skb_list_internal+0x96f/0xcb0 [ 636.018941][T25866] ? inet_gro_receive+0x264/0xcc0 [ 636.018971][T25866] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 636.018999][T25866] ? lock_release+0x4b/0x3e0 [ 636.019029][T25866] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 636.019057][T25866] ? _copy_from_iter+0x24c/0x16f0 [ 636.019076][T25866] ? dev_gro_receive+0x1040/0x23b0 [ 636.019109][T25866] ? eth_type_trans+0x3a8/0x760 [ 636.019137][T25866] napi_complete_done+0x2f2/0x7c0 [ 636.019168][T25866] ? __pfx_napi_complete_done+0x10/0x10 [ 636.019213][T25866] ? rcu_is_watching+0x15/0xb0 [ 636.019235][T25866] ? napi_gro_frags+0x975/0x1030 [ 636.019274][T25866] ? tun_get_user+0x266c/0x3e20 [ 636.019295][T25866] tun_get_user+0x28d5/0x3e20 [ 636.019320][T25866] ? rcu_is_watching+0x15/0xb0 [ 636.019343][T25866] ? tun_get_user+0x266c/0x3e20 [ 636.019378][T25866] ? aa_file_perm+0x44d/0x1550 [ 636.019399][T25866] ? __pfx_tun_get_user+0x10/0x10 [ 636.019424][T25866] ? kstrtoull+0x12f/0x1d0 [ 636.019457][T25866] ? ref_tracker_alloc+0x318/0x460 [ 636.019486][T25866] ? get_pid_task+0x20/0x1f0 [ 636.019512][T25866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 636.019541][T25866] ? tun_get+0x1c/0x2f0 [ 636.019560][T25866] ? tun_get+0x1c/0x2f0 [ 636.019579][T25866] ? rcu_is_watching+0x15/0xb0 [ 636.019597][T25866] ? tun_get+0x1c/0x2f0 [ 636.019615][T25866] ? lock_release+0x4b/0x3e0 [ 636.019644][T25866] ? common_file_perm+0x1b5/0x230 [ 636.019677][T25866] ? tun_get+0x1c/0x2f0 [ 636.019699][T25866] tun_chr_write_iter+0x113/0x200 [ 636.019721][T25866] vfs_write+0x5c9/0xb30 [ 636.019751][T25866] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 636.019772][T25866] ? __pfx_vfs_write+0x10/0x10 [ 636.019804][T25866] ? __fget_files+0x2a/0x420 [ 636.019828][T25866] ksys_write+0x145/0x250 [ 636.019857][T25866] ? __pfx_ksys_write+0x10/0x10 [ 636.019882][T25866] ? rcu_is_watching+0x15/0xb0 [ 636.019905][T25866] ? rcu_is_watching+0x15/0xb0 [ 636.019927][T25866] do_syscall_64+0xfa/0x3b0 [ 636.019966][T25866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.019987][T25866] ? clear_bhb_loop+0x60/0xb0 [ 636.020009][T25866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.020027][T25866] RIP: 0033:0x7fab7e98ebe9 [ 636.020044][T25866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.020060][T25866] RSP: 002b:00007fab7f876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 636.020081][T25866] RAX: ffffffffffffffda RBX: 00007fab7ebb5fa0 RCX: 00007fab7e98ebe9 [ 636.020097][T25866] RDX: 000000000000002e RSI: 0000200000000740 RDI: 0000000000000003 [ 636.020112][T25866] RBP: 00007fab7f876090 R08: 0000000000000000 R09: 0000000000000000 [ 636.020125][T25866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.020138][T25866] R13: 00007fab7ebb6038 R14: 00007fab7ebb5fa0 R15: 00007ffe3ca72498 [ 636.020164][T25866] [ 636.021060][T25869] wg1 speed is unknown, defaulting to 1000 [ 636.119227][T25872] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5337'. [ 636.316504][T25869] lo speed is unknown, defaulting to 1000 [ 636.507626][T25869] wg1 speed is unknown, defaulting to 1000 [ 636.580024][T25889] netlink: 'syz.3.5341': attribute type 1 has an invalid length. [ 636.904308][T25899] wg1 speed is unknown, defaulting to 1000 [ 636.926370][ T5180] Bluetooth: hci3: command 0x0405 tx timeout [ 636.939115][T25913] Unsupported ieee802154 address type: 0 [ 636.979818][T25918] netlink: 'syz.2.5348': attribute type 3 has an invalid length. [ 637.126415][T25899] lo speed is unknown, defaulting to 1000 [ 637.133256][T25899] wg1 speed is unknown, defaulting to 1000 [ 637.192072][T25928] FAULT_INJECTION: forcing a failure. [ 637.192072][T25928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.205496][T25928] CPU: 1 UID: 0 PID: 25928 Comm: syz.4.5353 Not tainted syzkaller #0 PREEMPT(full) [ 637.205527][T25928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.205541][T25928] Call Trace: [ 637.205550][T25928] [ 637.205567][T25928] dump_stack_lvl+0x189/0x250 [ 637.205597][T25928] ? __pfx____ratelimit+0x10/0x10 [ 637.205628][T25928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.205653][T25928] ? __pfx__printk+0x10/0x10 [ 637.205687][T25928] ? rcu_is_watching+0x15/0xb0 [ 637.205710][T25928] should_fail_ex+0x414/0x560 [ 637.205745][T25928] _copy_to_user+0x31/0xb0 [ 637.205770][T25928] simple_read_from_buffer+0xe1/0x170 [ 637.205803][T25928] proc_fail_nth_read+0x1b3/0x220 [ 637.205828][T25928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.205853][T25928] ? rw_verify_area+0x2a6/0x4d0 [ 637.205879][T25928] ? tun_chr_write_iter+0x18a/0x200 [ 637.205899][T25928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.205922][T25928] vfs_read+0x1fd/0xa30 [ 637.205946][T25928] ? fdget_pos+0x247/0x320 [ 637.205967][T25928] ? __pfx___mutex_lock+0x10/0x10 [ 637.205997][T25928] ? __pfx_vfs_read+0x10/0x10 [ 637.206027][T25928] ? __fget_files+0x3a0/0x420 [ 637.206043][T25928] ? __fget_files+0x2a/0x420 [ 637.206064][T25928] ksys_read+0x145/0x250 [ 637.206092][T25928] ? __pfx_ksys_read+0x10/0x10 [ 637.206116][T25928] ? rcu_is_watching+0x15/0xb0 [ 637.206139][T25928] ? rcu_is_watching+0x15/0xb0 [ 637.206162][T25928] do_syscall_64+0xfa/0x3b0 [ 637.206182][T25928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.206214][T25928] ? clear_bhb_loop+0x60/0xb0 [ 637.206234][T25928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.206252][T25928] RIP: 0033:0x7f3a50d8d5fc [ 637.206270][T25928] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 637.206288][T25928] RSP: 002b:00007f3a51caf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 637.206308][T25928] RAX: ffffffffffffffda RBX: 00007f3a50fb5fa0 RCX: 00007f3a50d8d5fc [ 637.206323][T25928] RDX: 000000000000000f RSI: 00007f3a51caf0a0 RDI: 0000000000000006 [ 637.206335][T25928] RBP: 00007f3a51caf090 R08: 0000000000000000 R09: 0000000000000000 [ 637.206348][T25928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.206360][T25928] R13: 00007f3a50fb6038 R14: 00007f3a50fb5fa0 R15: 00007ffc885990f8 [ 637.206384][T25928] [ 637.767346][T25935] wg1 speed is unknown, defaulting to 1000 [ 637.797535][T25946] IPVS: stopping backup sync thread 25950 ... [ 637.833430][T25947] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 637.904095][T25946] __nla_validate_parse: 35 callbacks suppressed [ 637.904118][T25946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5359'. [ 637.915572][T25952] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5360'. [ 637.972277][T25952] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5360'. [ 638.049601][T25954] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5361'. [ 638.173144][T25935] lo speed is unknown, defaulting to 1000 [ 638.209349][T25935] wg1 speed is unknown, defaulting to 1000 [ 638.239725][T25963] wg1 speed is unknown, defaulting to 1000 [ 638.424545][T25980] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5368'. [ 638.461434][T25977] tipc: Enabling of bearer rejected, failed to enable media [ 638.558206][T25963] lo speed is unknown, defaulting to 1000 [ 638.565007][T25963] wg1 speed is unknown, defaulting to 1000 [ 638.571581][T25983] wg1 speed is unknown, defaulting to 1000 [ 638.800291][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5373'. [ 638.822415][T26000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5374'. [ 639.139490][T26010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5376'. [ 639.185243][T26013] netlink: 'syz.4.5377': attribute type 1 has an invalid length. [ 639.299711][T26013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5377'. [ 639.317933][T26013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 639.348057][T26023] pim6reg1: entered promiscuous mode [ 639.353585][T26023] pim6reg1: entered allmulticast mode [ 639.582881][T25983] lo speed is unknown, defaulting to 1000 [ 639.597283][T25983] wg1 speed is unknown, defaulting to 1000 [ 639.642892][T26028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5380'. [ 639.735600][T26033] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 639.951370][T26042] sctp: [Deprecated]: syz.4.5381 (pid 26042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 639.951370][T26042] Use struct sctp_sack_info instead [ 639.952796][T26041] wg1 speed is unknown, defaulting to 1000 [ 640.212755][T26047] wg1 speed is unknown, defaulting to 1000 [ 640.226254][T14963] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 640.428646][T26062] netlink: 'syz.4.5387': attribute type 13 has an invalid length. [ 640.449678][T26041] lo speed is unknown, defaulting to 1000 [ 640.457251][T26041] wg1 speed is unknown, defaulting to 1000 [ 640.637935][T26069] openvswitch: netlink: IPv4 tun info is not correct [ 640.644879][T26065] openvswitch: netlink: IPv4 tun info is not correct [ 640.774829][T26061] wg1 speed is unknown, defaulting to 1000 [ 640.859184][T26047] lo speed is unknown, defaulting to 1000 [ 640.866541][T26047] wg1 speed is unknown, defaulting to 1000 [ 641.025502][T26061] lo speed is unknown, defaulting to 1000 [ 641.052709][T26061] wg1 speed is unknown, defaulting to 1000 [ 641.313967][T26085] ipip0: entered promiscuous mode [ 641.590632][T26112] netlink: 'syz.5.5396': attribute type 4 has an invalid length. [ 641.606795][T26114] netlink: 'syz.2.5399': attribute type 9 has an invalid length. [ 641.617745][T26112] netlink: 'syz.5.5396': attribute type 4 has an invalid length. [ 641.753456][T26113] wg1 speed is unknown, defaulting to 1000 [ 641.875384][T26123] netlink: 'syz.3.5400': attribute type 10 has an invalid length. [ 641.883928][T26123] bond0: (slave wlan1): refused to change device type [ 641.915866][T26113] lo speed is unknown, defaulting to 1000 [ 641.922537][T26113] wg1 speed is unknown, defaulting to 1000 [ 642.219233][T26133] wg1 speed is unknown, defaulting to 1000 [ 642.360943][T26133] lo speed is unknown, defaulting to 1000 [ 642.383324][T26133] wg1 speed is unknown, defaulting to 1000 [ 642.831999][T26158] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode [ 642.844986][T26158] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 642.861420][T26160] batadv_slave_1: entered promiscuous mode [ 642.900831][T26160] tipc: Enabled bearer , priority 0 [ 642.927820][T26160] syzkaller0: entered promiscuous mode [ 642.938504][T26160] syzkaller0: entered allmulticast mode [ 642.951174][T26160] tipc: Resetting bearer [ 642.959027][T26159] batadv_slave_1: left promiscuous mode [ 642.968648][T26159] tipc: Resetting bearer [ 642.983711][T26159] tipc: Disabling bearer [ 643.001456][T26168] mac80211_hwsim hwsim72 wlan1: entered allmulticast mode [ 643.033657][T26172] __nla_validate_parse: 12 callbacks suppressed [ 643.033677][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5418'. [ 643.099016][T26174] netlink: 'syz.6.5417': attribute type 10 has an invalid length. [ 643.115856][T26174] mac80211_hwsim hwsim72 wlan1: left allmulticast mode [ 643.130540][T26174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.180994][T26174] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 643.363345][T26186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5423'. [ 643.383647][T26190] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 643.652559][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5428'. [ 643.661658][T26206] netlink: 'syz.2.5428': attribute type 30 has an invalid length. [ 643.728224][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5428'. [ 643.747693][T26206] netlink: 'syz.2.5428': attribute type 30 has an invalid length. [ 644.477328][T26246] 8021q: VLANs not supported on bond0 [ 644.700795][T26252] syzkaller1: entered promiscuous mode [ 644.708277][T26252] syzkaller1: entered allmulticast mode [ 644.721200][T26252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5440'. [ 644.824423][T26264] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 645.029087][T26281] netlink: 'syz.6.5452': attribute type 31 has an invalid length. [ 645.045646][T26276] netlink: 'syz.4.5451': attribute type 33 has an invalid length. [ 645.094607][T26276] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5451'. [ 645.203291][T26291] syzkaller1: entered promiscuous mode [ 645.210403][T26294] netlink: 'syz.3.5455': attribute type 33 has an invalid length. [ 645.220853][T26291] syzkaller1: entered allmulticast mode [ 645.228931][T26294] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5455'. [ 645.412181][T26310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5457'. [ 645.467958][T26310] sctp: [Deprecated]: syz.4.5457 (pid 26310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.467958][T26310] Use struct sctp_sack_info instead [ 645.631896][T26331] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5462'. [ 645.651225][T26304] bridge0: port 1(bond8) entered blocking state [ 645.671798][T26304] bridge0: port 1(bond8) entered disabled state [ 645.684414][T26304] bond8: entered allmulticast mode [ 645.878623][T26337] "syz.5.5464" (26337) uses obsolete ecb(arc4) skcipher [ 645.904738][T26352] wg1 speed is unknown, defaulting to 1000 [ 646.481564][T26352] lo speed is unknown, defaulting to 1000 [ 646.560534][T26352] wg1 speed is unknown, defaulting to 1000 [ 646.671835][T26373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5474'. [ 647.544187][T26445] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 647.544326][T26441] IPVS: stopping backup sync thread 26445 ... [ 647.643462][T26448] wg1 speed is unknown, defaulting to 1000 [ 647.685194][T26454] netlink: zone id is out of range [ 647.705651][T26454] netlink: zone id is out of range [ 647.752287][T26454] netlink: zone id is out of range [ 647.768149][T26454] netlink: zone id is out of range [ 647.777377][T26454] netlink: zone id is out of range [ 647.790575][T26454] netlink: zone id is out of range [ 647.796441][T26454] netlink: zone id is out of range [ 647.802144][T26454] netlink: zone id is out of range [ 647.842552][T26454] netlink: zone id is out of range [ 647.859871][T26454] netlink: zone id is out of range [ 647.867098][T26454] netlink: zone id is out of range [ 647.877577][T26454] netlink: zone id is out of range [ 647.883200][T26454] netlink: zone id is out of range [ 647.899600][T26454] netlink: zone id is out of range [ 647.910268][T26454] netlink: zone id is out of range [ 647.916401][T26454] netlink: zone id is out of range [ 647.922274][T26454] netlink: zone id is out of range [ 647.928088][T26454] netlink: zone id is out of range [ 647.933689][T26454] netlink: zone id is out of range [ 647.982626][T26465] veth3: entered promiscuous mode [ 648.069990][T26448] lo speed is unknown, defaulting to 1000 [ 648.079930][T26448] wg1 speed is unknown, defaulting to 1000 [ 648.304103][T26476] mac80211_hwsim hwsim49 wlan0: left promiscuous mode [ 648.339058][T26476] ipvlan2: left promiscuous mode [ 648.358532][T26476] vlan3: left promiscuous mode [ 648.372003][T26476] vcan1: left promiscuous mode [ 648.379412][T26476] vcan1: left allmulticast mode [ 648.524684][T26491] __nla_validate_parse: 7 callbacks suppressed [ 648.524705][T26491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5506'. [ 648.567012][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5506'. [ 648.721842][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5508'. [ 648.742474][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5508'. [ 648.877980][T26508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5513'. [ 648.988063][T26523] tipc: Enabled bearer , priority 0 [ 649.031167][T26517] wg1 speed is unknown, defaulting to 1000 [ 649.037664][T26523] tipc: Enabling of bearer rejected, already enabled [ 649.066290][T26523] tipc: Enabling of bearer rejected, already enabled [ 649.089173][T26527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5518'. [ 649.099153][T26523] tipc: Enabling of bearer rejected, already enabled [ 649.151186][T26523] tipc: Disabling bearer [ 649.303835][T26541] validate_nla: 1 callbacks suppressed [ 649.303858][T26541] netlink: 'syz.4.5519': attribute type 8 has an invalid length. [ 649.319094][T26536] netlink: 'syz.4.5519': attribute type 8 has an invalid length. [ 649.331686][T26536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5519'. [ 649.344710][T26541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5519'. [ 649.358768][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5520'. [ 649.409944][T26540] netlink: 704 bytes leftover after parsing attributes in process `syz.5.5520'. [ 649.430551][T26542] tipc: Enabling of bearer rejected, failed to enable media [ 649.580628][T26517] lo speed is unknown, defaulting to 1000 [ 649.618189][T26517] wg1 speed is unknown, defaulting to 1000 [ 649.770178][T26564] wg1 speed is unknown, defaulting to 1000 [ 649.956375][T26564] lo speed is unknown, defaulting to 1000 [ 649.963194][T26564] wg1 speed is unknown, defaulting to 1000 [ 650.225256][T26578] "syz.4.5529" (26578) uses obsolete ecb(arc4) skcipher [ 650.494121][T26594] wg1 speed is unknown, defaulting to 1000 [ 651.426227][T26594] lo speed is unknown, defaulting to 1000 [ 651.447390][T26594] wg1 speed is unknown, defaulting to 1000 [ 651.649482][T26649] nbd: socks must be embedded in a SOCK_ITEM attr [ 651.854523][T26665] wg1 speed is unknown, defaulting to 1000 [ 652.108583][T26665] lo speed is unknown, defaulting to 1000 [ 652.125195][T26665] wg1 speed is unknown, defaulting to 1000 [ 652.573950][ T30] audit: type=1804 audit(1756424370.502:24): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5556" name="/newroot/543/cgroup.controllers" dev="tmpfs" ino=2804 res=1 errno=0 [ 652.645164][T26685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.654066][ T30] audit: type=1800 audit(1756424370.502:25): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5556" name="cgroup.controllers" dev="tmpfs" ino=2804 res=0 errno=0 [ 652.678082][T26685] bond0: (slave bond3): Enslaving as an active interface with an up link [ 652.955024][T26714] netlink: 'syz.4.5565': attribute type 1 has an invalid length. [ 652.975591][T26715] IPVS: length: 163 != 8 [ 653.256365][T26743] net_ratelimit: 8 callbacks suppressed [ 653.256387][T26743] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 653.345398][T26752] 8021q: VLANs not supported on ip_vti0 [ 653.740065][T26792] bond0: Error: Cannot enslave bond to itself. [ 653.888330][T26805] netlink: 'syz.5.5582': attribute type 16 has an invalid length. [ 653.896399][T26805] netlink: 'syz.5.5582': attribute type 3 has an invalid length. [ 653.915061][T26808] __nla_validate_parse: 15 callbacks suppressed [ 653.915083][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5584'. [ 653.936198][T26805] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.5582'. [ 654.010684][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5586'. [ 654.033621][T26817] macsec2: entered promiscuous mode [ 654.043304][T26817] bridge0: entered promiscuous mode [ 654.049830][T26817] bridge0: port 1(macsec2) entered blocking state [ 654.057229][T26817] bridge0: port 1(macsec2) entered disabled state [ 654.070798][T26817] macsec2: entered allmulticast mode [ 654.085307][T26817] bridge0: entered allmulticast mode [ 654.103868][T26817] macsec2: left allmulticast mode [ 654.109541][T26817] bridge0: left allmulticast mode [ 654.124775][T26817] bridge0: left promiscuous mode [ 654.249141][T26825] wg1 speed is unknown, defaulting to 1000 [ 654.397271][T26838] netlink: 'syz.6.5593': attribute type 1 has an invalid length. [ 654.450812][T26839] can: request_module (can-proto-0) failed. [ 654.472915][T26842] netlink: 'syz.3.5594': attribute type 1 has an invalid length. [ 654.565401][T26842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.651042][T26848] veth9: entered promiscuous mode [ 654.664455][T26848] bond8: (slave veth9): Enslaving as an active interface with a down link [ 654.674034][T26851] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5596'. [ 654.686374][T26825] lo speed is unknown, defaulting to 1000 [ 654.686576][T14957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.695842][T26825] wg1 speed is unknown, defaulting to 1000 [ 654.735520][T14957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.826742][T26859] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5599'. [ 654.855198][T26859] 0ªX¹¦À: renamed from caif0 [ 654.883698][T26859] 0ªX¹¦À: entered allmulticast mode [ 654.913091][T26859] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 655.080086][T14961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.144849][T14961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.178189][T26879] FAULT_INJECTION: forcing a failure. [ 655.178189][T26879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.203975][T26884] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5606'. [ 655.212478][T26879] CPU: 0 UID: 0 PID: 26879 Comm: syz.3.5605 Not tainted syzkaller #0 PREEMPT(full) [ 655.212514][T26879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 655.212531][T26879] Call Trace: [ 655.212540][T26879] [ 655.212551][T26879] dump_stack_lvl+0x189/0x250 [ 655.212592][T26879] ? __pfx____ratelimit+0x10/0x10 [ 655.212629][T26879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.212657][T26879] ? __pfx__printk+0x10/0x10 [ 655.212688][T26879] ? __might_fault+0xb0/0x130 [ 655.212728][T26879] ? rcu_is_watching+0x15/0xb0 [ 655.212755][T26879] should_fail_ex+0x414/0x560 [ 655.212790][T26879] _copy_from_user+0x2d/0xb0 [ 655.212818][T26879] ___sys_sendmsg+0x158/0x2a0 [ 655.212847][T26879] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.212876][T26879] ? kstrtouint+0x6e/0xe0 [ 655.212929][T26879] ? rcu_is_watching+0x15/0xb0 [ 655.212951][T26879] ? lock_release+0x4b/0x3e0 [ 655.212982][T26879] ? __might_fault+0xcc/0x130 [ 655.213011][T26879] __sys_sendmmsg+0x227/0x430 [ 655.213034][T26879] ? __pfx___sys_sendmmsg+0x10/0x10 [ 655.213066][T26879] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 655.213114][T26879] ? ksys_write+0x22a/0x250 [ 655.213143][T26879] ? __pfx_ksys_write+0x10/0x10 [ 655.213168][T26879] ? rcu_is_watching+0x15/0xb0 [ 655.213192][T26879] __x64_sys_sendmmsg+0xa0/0xc0 [ 655.213215][T26879] do_syscall_64+0xfa/0x3b0 [ 655.213235][T26879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.213255][T26879] ? clear_bhb_loop+0x60/0xb0 [ 655.213278][T26879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.213298][T26879] RIP: 0033:0x7fb81bb8ebe9 [ 655.213317][T26879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.213336][T26879] RSP: 002b:00007fb81cab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 655.213358][T26879] RAX: ffffffffffffffda RBX: 00007fb81bdb5fa0 RCX: 00007fb81bb8ebe9 [ 655.213374][T26879] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 655.213388][T26879] RBP: 00007fb81cab4090 R08: 0000000000000000 R09: 0000000000000000 [ 655.213401][T26879] R10: 0000000004040000 R11: 0000000000000246 R12: 0000000000000001 [ 655.213414][T26879] R13: 00007fb81bdb6038 R14: 00007fb81bdb5fa0 R15: 00007ffd81dbb658 [ 655.213439][T26879] [ 655.330364][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.455837][T26885] ÿ: renamed from bond_slave_0 [ 655.464909][T26888] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5607'. [ 655.703313][T26905] tipc: Enabled bearer , priority 0 [ 655.770754][T26905] tipc: Disabling bearer [ 655.793286][T26908] wg1 speed is unknown, defaulting to 1000 [ 655.877740][T26917] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5614'. [ 655.894760][T26916] netlink: 'syz.4.5615': attribute type 4 has an invalid length. [ 655.992475][T26908] lo speed is unknown, defaulting to 1000 [ 656.014817][T26908] wg1 speed is unknown, defaulting to 1000 [ 656.061237][T26929] sctp: [Deprecated]: syz.5.5618 (pid 26929) Use of int in max_burst socket option. [ 656.061237][T26929] Use struct sctp_assoc_value instead [ 656.605090][T26958] vlan0: entered promiscuous mode [ 656.622416][T26967] FAULT_INJECTION: forcing a failure. [ 656.622416][T26967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.637196][T26967] CPU: 1 UID: 0 PID: 26967 Comm: syz.6.5630 Not tainted syzkaller #0 PREEMPT(full) [ 656.637226][T26967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.637241][T26967] Call Trace: [ 656.637250][T26967] [ 656.637259][T26967] dump_stack_lvl+0x189/0x250 [ 656.637289][T26967] ? __pfx____ratelimit+0x10/0x10 [ 656.637320][T26967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.637345][T26967] ? __pfx__printk+0x10/0x10 [ 656.637377][T26967] ? rcu_is_watching+0x15/0xb0 [ 656.637401][T26967] should_fail_ex+0x414/0x560 [ 656.637431][T26967] _copy_to_user+0x31/0xb0 [ 656.637456][T26967] simple_read_from_buffer+0xe1/0x170 [ 656.637490][T26967] proc_fail_nth_read+0x1b3/0x220 [ 656.637516][T26967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 656.637541][T26967] ? rw_verify_area+0x2a6/0x4d0 [ 656.637568][T26967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 656.637592][T26967] vfs_read+0x1fd/0xa30 [ 656.637618][T26967] ? fdget_pos+0x247/0x320 [ 656.637639][T26967] ? __pfx___mutex_lock+0x10/0x10 [ 656.637671][T26967] ? __pfx_vfs_read+0x10/0x10 [ 656.637702][T26967] ? __fget_files+0x3a0/0x420 [ 656.637720][T26967] ? __fget_files+0x2a/0x420 [ 656.637744][T26967] ksys_read+0x145/0x250 [ 656.637772][T26967] ? __pfx_ksys_read+0x10/0x10 [ 656.637797][T26967] ? rcu_is_watching+0x15/0xb0 [ 656.637820][T26967] ? rcu_is_watching+0x15/0xb0 [ 656.637843][T26967] do_syscall_64+0xfa/0x3b0 [ 656.637862][T26967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.637883][T26967] ? clear_bhb_loop+0x60/0xb0 [ 656.637907][T26967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.637936][T26967] RIP: 0033:0x7fead758d5fc [ 656.637954][T26967] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 656.637972][T26967] RSP: 002b:00007fead8333030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 656.637994][T26967] RAX: ffffffffffffffda RBX: 00007fead77b5fa0 RCX: 00007fead758d5fc [ 656.638010][T26967] RDX: 000000000000000f RSI: 00007fead83330a0 RDI: 0000000000000004 [ 656.638023][T26967] RBP: 00007fead8333090 R08: 0000000000000000 R09: 0000000000000000 [ 656.638036][T26967] R10: 0000000004040000 R11: 0000000000000246 R12: 0000000000000001 [ 656.638049][T26967] R13: 00007fead77b6038 R14: 00007fead77b5fa0 R15: 00007ffed9f486c8 [ 656.638075][T26967] [ 656.915721][T26973] netlink: 'syz.6.5632': attribute type 4 has an invalid length. [ 657.205432][T26961] netlink: 'syz.3.5629': attribute type 9 has an invalid length. [ 657.224492][T26961] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5629'. [ 657.366184][T26988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5639'. [ 657.524147][T27001] syzkaller0: entered promiscuous mode [ 657.530125][T27001] syzkaller0: entered allmulticast mode [ 657.539251][T27006] tipc: Enabled bearer , priority 0 [ 657.580640][T27000] tipc: Resetting bearer [ 658.250608][T27000] tipc: Disabling bearer [ 658.390896][T27024] netlink: 'syz.3.5647': attribute type 10 has an invalid length. [ 658.607179][T27041] IPv6: NLM_F_REPLACE set, but no existing node found! [ 658.768809][T27054] netlink: 'syz.2.5655': attribute type 62 has an invalid length. [ 658.876384][T27056] bond7: (slave ip6gretap2): making interface the new active one [ 658.903676][T27056] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 659.093941][T27073] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 659.194996][T27076] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 659.282563][T27080] __nla_validate_parse: 3 callbacks suppressed [ 659.282578][T27080] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5663'. [ 659.671047][T27124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5676'. [ 659.687175][T27114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5672'. [ 659.700965][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5672'. [ 659.805416][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5678'. [ 659.852662][T27137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 659.888522][T27147] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 659.913159][T27149] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5681'. [ 659.925361][T27149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'. [ 659.983827][T27153] tipc: Enabled bearer , priority 0 [ 659.991711][T27153] syzkaller0: entered promiscuous mode [ 659.998273][T27153] syzkaller0: entered allmulticast mode [ 660.013454][T27153] tipc: Resetting bearer [ 660.023950][T27153] IPv6: sit3: Disabled Multicast RS [ 660.036106][T27152] tipc: Resetting bearer [ 660.060616][T27152] tipc: Disabling bearer [ 660.100145][T27161] netlink: 'syz.6.5685': attribute type 1 has an invalid length. [ 660.108238][T27161] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5685'. [ 660.196079][T27167] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 660.216028][T27167] netlink: 'syz.3.5688': attribute type 142 has an invalid length. [ 660.226740][T27167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5688'. [ 660.236633][T27167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5688'. [ 660.604385][T27189] tipc: Enabled bearer , priority 0 [ 660.622481][T27180] tipc: Enabling of bearer rejected, failed to enable media [ 660.655272][T27196] netlink: 'syz.5.5697': attribute type 3 has an invalid length. [ 660.687192][T27200] syzkaller0: entered promiscuous mode [ 660.692718][T27200] syzkaller0: entered allmulticast mode [ 660.739708][T27189] tipc: Resetting bearer [ 660.754070][T27187] tipc: Resetting bearer [ 660.779649][T27187] tipc: Disabling bearer [ 660.903885][T27215] wg1 speed is unknown, defaulting to 1000 [ 660.930109][T27222] tipc: Enabled bearer , priority 10 [ 661.112368][T27215] lo speed is unknown, defaulting to 1000 [ 661.134028][T27234] ªªªªª: renamed from veth0_virt_wifi [ 661.142844][T27215] wg1 speed is unknown, defaulting to 1000 [ 661.146137][T27233] wg1 speed is unknown, defaulting to 1000 [ 661.288775][T27233] lo speed is unknown, defaulting to 1000 [ 661.296568][T27233] wg1 speed is unknown, defaulting to 1000 [ 661.865175][T27266] tipc: Enabled bearer , priority 0 [ 661.891986][T27266] syzkaller0: entered promiscuous mode [ 661.903205][T27266] syzkaller0: entered allmulticast mode [ 661.988352][T27265] tipc: Resetting bearer [ 662.001781][T27265] tipc: Disabling bearer [ 662.032735][T27280] vlan3: entered promiscuous mode [ 662.042167][T27280] syz_tun: entered promiscuous mode [ 662.178274][T27290] wg1 speed is unknown, defaulting to 1000 [ 662.208500][T27293] netlink: 'syz.3.5721': attribute type 1 has an invalid length. [ 662.352818][T27290] lo speed is unknown, defaulting to 1000 [ 662.414095][T27290] wg1 speed is unknown, defaulting to 1000 [ 663.167460][T27344] sctp: [Deprecated]: syz.6.5736 (pid 27344) Use of int in maxseg socket option. [ 663.167460][T27344] Use struct sctp_assoc_value instead [ 663.193052][T27346] bridge0: entered promiscuous mode [ 663.391212][T27349] bridge0: port 1(veth0_to_team) entered blocking state [ 663.404017][T27349] bridge0: port 1(veth0_to_team) entered disabled state [ 663.434494][T27349] veth0_to_team: entered allmulticast mode [ 663.465506][T27349] veth0_to_team: entered promiscuous mode [ 663.594906][T27362] IPv6: NLM_F_REPLACE set, but no existing node found! [ 663.851381][T27368] wg1 speed is unknown, defaulting to 1000 [ 663.947492][T27372] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.966667][T27372] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.071798][T27372] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.083482][T27372] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.183653][T27372] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.205223][T27372] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.236173][T27368] lo speed is unknown, defaulting to 1000 [ 664.242905][T27368] wg1 speed is unknown, defaulting to 1000 [ 664.287505][T27372] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.305073][T27372] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.537503][T14964] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.555823][T14964] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.574336][T14964] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.594548][T14964] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.682928][T14964] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.701614][T14964] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.723237][T14964] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.773992][T14964] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.802518][T27374] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.826484][T27374] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.912044][T27374] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.933454][T27374] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.037222][T27374] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.050759][T27374] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.114156][T27374] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.157427][T27374] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.270223][T27416] syzkaller0: entered promiscuous mode [ 665.276840][T27416] syzkaller0: entered allmulticast mode [ 665.446913][T27421] syzkaller1: entered promiscuous mode [ 665.452844][T27421] syzkaller1: entered allmulticast mode [ 665.463783][T27425] netlink: 'syz.4.5759': attribute type 16 has an invalid length. [ 665.506614][T27425] __nla_validate_parse: 19 callbacks suppressed [ 665.506636][T27425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5759'. [ 665.699937][T27441] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5763'. [ 665.725006][T27440] netlink: 'syz.5.5765': attribute type 1 has an invalid length. [ 665.756065][T27440] netlink: 'syz.5.5765': attribute type 3 has an invalid length. [ 665.794299][T27440] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5765'. [ 666.178285][T27457] netlink: 404 bytes leftover after parsing attributes in process `syz.5.5768'. [ 666.205678][T27457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5768'. [ 666.235640][T27457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5768'. [ 666.249518][T27457] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5768'. [ 666.326625][T27455] 0ªX¹¦À: left allmulticast mode [ 666.348612][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5766'. [ 666.422486][T27455] veth0_to_team: left promiscuous mode [ 666.435255][T27455] veth0_to_team: left allmulticast mode [ 666.450652][T27467] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5771'. [ 666.496575][T27470] netlink: 'syz.5.5772': attribute type 1 has an invalid length. [ 666.513547][T27455] .70·: left allmulticast mode [ 666.520560][T27470] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5772'. [ 666.532041][T27455] hsr_slave_0: left allmulticast mode [ 666.630373][T27455] mac80211_hwsim hwsim71 wlan0: left promiscuous mode [ 666.643227][T27455] vlan2: left promiscuous mode [ 666.649603][T27455] vlan2: left allmulticast mode [ 666.654493][T27455] hsr_slave_1: left allmulticast mode [ 666.670951][T27455] ip6gretap0: left allmulticast mode [ 666.680692][T27455] macsec1: left promiscuous mode [ 666.685687][T27455] macsec1: left allmulticast mode [ 666.707966][T27455] ipip0: left promiscuous mode [ 666.738994][T27470] Ã: (slave bridge0): Releasing backup interface [ 666.770665][T27470] veth0_to_team: left allmulticast mode [ 666.781215][T27470] veth0_to_team: left promiscuous mode [ 666.798736][T27470] bridge0: port 1(veth0_to_team) entered disabled state [ 666.816302][T27482] netlink: 'syz.5.5772': attribute type 1 has an invalid length. [ 666.833590][T27470] bond2: (slave wlan0): Releasing active interface [ 666.833925][T27482] netlink: 'syz.5.5772': attribute type 15 has an invalid length. [ 666.858522][T27470] bond0: (slave bond3): Releasing backup interface [ 666.873750][T14963] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.883204][T14963] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.919996][T14963] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.937400][T14964] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.971924][T27486] wg1 speed is unknown, defaulting to 1000 [ 667.220729][T27486] lo speed is unknown, defaulting to 1000 [ 667.245907][T27486] wg1 speed is unknown, defaulting to 1000 [ 667.253912][T27502] tipc: Enabled bearer , priority 0 [ 667.263148][T27502] syzkaller0: entered promiscuous mode [ 667.268877][T27502] syzkaller0: entered allmulticast mode [ 667.350090][T27502] tipc: Resetting bearer [ 667.383825][T27501] tipc: Resetting bearer [ 667.407639][T27501] tipc: Disabling bearer [ 667.946190][T27541] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 668.863237][T27591] netlink: 'syz.5.5804': attribute type 13 has an invalid length. [ 668.871774][T27591] netlink: 'syz.5.5804': attribute type 17 has an invalid length. [ 668.929478][T27591] 8021q: adding VLAN 0 to HW filter on device à [ 668.939954][T27591] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.952141][T27591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.111587][T27598] openvswitch: netlink: Missing key (keys=40, expected=100) [ 669.184558][T27606] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20002 [ 669.302085][T27618] wg1 speed is unknown, defaulting to 1000 [ 669.395687][T27618] lo speed is unknown, defaulting to 1000 [ 669.402730][T27618] wg1 speed is unknown, defaulting to 1000 [ 669.608039][T27635] netlink: 'syz.4.5815': attribute type 13 has an invalid length. [ 669.616055][T27635] netlink: 'syz.4.5815': attribute type 17 has an invalid length. [ 669.642028][T27635] erspan0: left allmulticast mode [ 669.654230][T27635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.704832][T27636] wg1 speed is unknown, defaulting to 1000 [ 669.741604][T27635] wg1 speed is unknown, defaulting to 1000 [ 669.757814][T14961] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.768572][T14961] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.802000][T14963] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.815925][T14963] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.834471][T14963] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.844438][T14963] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.880737][T14958] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.889364][T14958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.897868][T27636] lo speed is unknown, defaulting to 1000 [ 669.915136][T27636] wg1 speed is unknown, defaulting to 1000 [ 670.099407][T27635] lo speed is unknown, defaulting to 1000 [ 670.108955][T27635] wg1 speed is unknown, defaulting to 1000 [ 670.425532][T27667] wg1 speed is unknown, defaulting to 1000 [ 670.557788][T27676] bridge0: port 1(erspan0) entered blocking state [ 670.568744][T27676] bridge0: port 1(erspan0) entered disabled state [ 670.575686][T27676] erspan0: entered allmulticast mode [ 670.601578][T27676] erspan0: entered promiscuous mode [ 670.619506][T27676] bridge0: port 1(erspan0) entered blocking state [ 670.626089][T27676] bridge0: port 1(erspan0) entered forwarding state [ 670.682564][T27667] lo speed is unknown, defaulting to 1000 [ 670.689808][T27667] wg1 speed is unknown, defaulting to 1000 [ 670.732028][T27683] syzkaller1: entered promiscuous mode [ 670.752439][T27683] syzkaller1: entered allmulticast mode [ 670.805429][T27690] __nla_validate_parse: 9 callbacks suppressed [ 670.805450][T27690] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5828'. [ 670.843423][T27693] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5828'. [ 670.868581][T27696] netlink: 'syz.5.5830': attribute type 16 has an invalid length. [ 670.877120][T27697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5828'. [ 670.878748][T27696] netlink: 'syz.5.5830': attribute type 17 has an invalid length. [ 670.904017][T27693] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5828'. [ 671.153981][T27710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5832'. [ 671.323821][T27713] tipc: Enabled bearer , priority 0 [ 671.349359][T27708] syzkaller0: entered promiscuous mode [ 671.375286][T27708] syzkaller0: entered allmulticast mode [ 671.449511][T27708] tipc: Resetting bearer [ 671.576198][T27729] netlink: 'syz.6.5837': attribute type 28 has an invalid length. [ 671.696230][T27737] netlink: 'syz.4.5841': attribute type 21 has an invalid length. [ 671.707665][T27738] netlink: 'syz.4.5841': attribute type 21 has an invalid length. [ 671.730623][T27740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5842'. [ 671.795503][T27746] macsec1: entered promiscuous mode [ 671.804195][T27746] team0: entered promiscuous mode [ 672.013564][T27707] tipc: Resetting bearer [ 672.028355][T27707] tipc: Disabling bearer [ 672.142595][T27764] netlink: 'syz.4.5844': attribute type 12 has an invalid length. [ 672.259392][T27776] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5849'. [ 672.345933][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 672.370502][T27778] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5850'. [ 672.391370][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 672.476983][T27780] wg1 speed is unknown, defaulting to 1000 [ 672.608087][T27780] lo speed is unknown, defaulting to 1000 [ 672.614856][T27780] wg1 speed is unknown, defaulting to 1000 [ 672.657671][T27792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.731579][ T5180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 672.744039][ T5180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 672.753548][ T5180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 672.764773][ T5180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 672.772403][ T5180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 672.834141][T27795] wg1 speed is unknown, defaulting to 1000 [ 673.054285][T27795] lo speed is unknown, defaulting to 1000 [ 673.115328][T27795] wg1 speed is unknown, defaulting to 1000 [ 673.229944][T27825] syzkaller1: entered promiscuous mode [ 673.239910][T27825] syzkaller1: entered allmulticast mode [ 673.459219][T27842] netlink: 'syz.4.5873': attribute type 32 has an invalid length. [ 673.485567][T27842] (unnamed net_device) (uninitialized): option coupled_control: invalid value (48) [ 673.501070][T27795] chnl_net:caif_netlink_parms(): no params data found [ 673.574566][T27854] netlink: 'syz.6.5872': attribute type 12 has an invalid length. [ 673.695630][T27842] tap0: tun_chr_ioctl cmd 1074025675 [ 673.701618][T27842] tap0: persist disabled [ 673.833996][T27795] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.850511][T27795] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.862988][T27795] bridge_slave_0: entered allmulticast mode [ 673.872359][T27795] bridge_slave_0: entered promiscuous mode [ 673.882082][T27872] netlink: 'syz.6.5877': attribute type 1 has an invalid length. [ 673.892029][T27869] syzkaller1: entered promiscuous mode [ 673.904161][T27869] syzkaller1: entered allmulticast mode [ 673.915712][T27795] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.924575][T27795] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.932621][T27795] bridge_slave_1: entered allmulticast mode [ 673.941334][T27795] bridge_slave_1: entered promiscuous mode [ 674.007887][T27879] gretap1: entered allmulticast mode [ 674.023922][T27884] tipc: Enabled bearer , priority 0 [ 674.034557][T27795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.044793][T27882] syzkaller0: entered promiscuous mode [ 674.051288][T27882] syzkaller0: entered allmulticast mode [ 674.061806][T27795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.157571][T27795] team0: Port device team_slave_0 added [ 674.167808][T27882] tipc: Resetting bearer [ 674.190701][T27795] team0: Port device team_slave_1 added [ 674.231536][T27881] tipc: Resetting bearer [ 674.256291][T27881] tipc: Disabling bearer [ 674.293733][T27795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.301021][T27795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.346730][T27795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.363109][T27795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.371602][T27795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.408027][T27795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.429996][T27912] netlink: 'syz.4.5891': attribute type 12 has an invalid length. [ 674.511669][T27795] hsr_slave_0: entered promiscuous mode [ 674.518674][T27795] hsr_slave_1: entered promiscuous mode [ 674.524950][T27795] debugfs: 'hsr0' already exists in 'hsr' [ 674.532926][T27795] Cannot create hsr debugfs directory [ 674.629587][T27914] wg1 speed is unknown, defaulting to 1000 [ 674.797303][T27921] tipc: Enabled bearer , priority 0 [ 674.845879][ T5863] Bluetooth: hci4: command tx timeout [ 674.871682][T27795] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.898788][T27795] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.999118][T27924] bond0: (slave wlan1): Releasing backup interface [ 675.014902][T27924] bond1: (slave bridge1): Releasing active interface [ 675.032547][T27924] bond4: (slave gretap2): Releasing active interface [ 675.079200][T27924] bond8: left allmulticast mode [ 675.089362][T27924] bridge0: port 1(bond8) entered disabled state [ 675.130118][T27914] lo speed is unknown, defaulting to 1000 [ 675.165096][T27923] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 675.192336][T27795] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.203489][T27795] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.219676][T27920] tipc: Disabling bearer [ 675.230055][ T9024] wg1 speed is unknown, defaulting to 1000 [ 675.236028][ T9024] syz0: Port: 1 Link DOWN [ 675.239856][T27914] wg1 speed is unknown, defaulting to 1000 [ 675.248340][T27940] wg1 speed is unknown, defaulting to 1000 [ 675.257361][T27795] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.268266][T27795] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.353563][T27795] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.372192][T27795] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.506678][T14960] erspan0: left allmulticast mode [ 675.523293][T14960] erspan0: left promiscuous mode [ 675.552483][T14960] bridge0: port 1(erspan0) entered disabled state [ 675.940889][ T34] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 676.103719][T14960] bond0 (unregistering): Released all slaves [ 676.116765][T14960] bond1 (unregistering): Released all slaves [ 676.126294][T27940] lo speed is unknown, defaulting to 1000 [ 676.148701][T27940] wg1 speed is unknown, defaulting to 1000 [ 676.221785][T14960] k›*·]‘: left promiscuous mode [ 676.301702][T14960] : left promiscuous mode [ 676.399473][T14960] tipc: Disabling bearer [ 676.416478][T14960] tipc: Disabling bearer [ 676.465587][T14960] tipc: Left network mode [ 676.488631][T14960] IPVS: stopping backup sync thread 26190 ... [ 676.500548][T27795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 676.512058][T27795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 676.529576][T27795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 676.552937][T27795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 676.581591][T27977] __nla_validate_parse: 14 callbacks suppressed [ 676.581613][T27977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5904'. [ 676.791265][T27998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5908'. [ 676.810970][T28000] netlink: 'syz.6.5906': attribute type 12 has an invalid length. [ 676.833707][T27795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.928005][ T5863] Bluetooth: hci4: command tx timeout [ 677.046112][T27795] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.309230][T28024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5914'. [ 677.425232][T28026] netlink: 'syz.3.5914': attribute type 1 has an invalid length. [ 677.469274][T28011] wg1: left promiscuous mode [ 677.474014][T28011] wg1: left allmulticast mode [ 677.491983][T28011] gretap1: left promiscuous mode [ 677.499581][T28011] bridge6: left promiscuous mode [ 677.525061][T28011] gretap2: left promiscuous mode [ 677.535188][T28011] geneve3: left promiscuous mode [ 677.545492][T28011] bond6: left promiscuous mode [ 677.590432][T14961] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.597615][T14961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.613243][T14958] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.654704][T14961] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.661918][T14961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.712930][T14958] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.760156][T28041] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5916'. [ 677.776080][T14961] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.793160][T28040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5916'. [ 677.793496][T28038] tipc: Enabled bearer , priority 0 [ 677.863380][T14960] hsr_slave_0: left promiscuous mode [ 677.885056][T14960] team0: left promiscuous mode [ 677.901144][T14960] veth0_macvtap: left promiscuous mode [ 677.916464][T14960] veth1_vlan: left promiscuous mode [ 677.924074][T14960] veth0_vlan: left promiscuous mode [ 678.126970][ C1] ------------[ cut here ]------------ [ 678.132508][ C1] kernel BUG at arch/x86/mm/physaddr.c:28! [ 678.138414][ C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 678.144780][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 678.154029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.164189][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 678.169423][ C1] Code: 8f ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 c4 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90 [ 678.189125][ C1] RSP: 0000:ffffc900001d7878 EFLAGS: 00010246 [ 678.195200][ C1] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801d68da00 [ 678.203202][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 678.211178][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: 0000000000000000 [ 678.219156][ C1] R10: dffffc0000000000 R11: ffffffff8a024650 R12: ffffffff8a024650 [ 678.227135][ C1] R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 678.235121][ C1] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 678.244061][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.250655][ C1] CR2: 0000200000002000 CR3: 0000000024914000 CR4: 00000000003526f0 [ 678.258633][ C1] Call Trace: [ 678.261919][ C1] [ 678.264860][ C1] ? in_dev_free_rcu+0x49/0x60 [ 678.269734][ C1] kfree+0x77/0x440 [ 678.273555][ C1] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 678.278842][ C1] ? rcu_core+0xc37/0x1770 [ 678.283272][ C1] in_dev_free_rcu+0x49/0x60 [ 678.287874][ C1] rcu_core+0xca8/0x1770 [ 678.292142][ C1] ? __pfx_rcu_core+0x10/0x10 [ 678.296834][ C1] ? rcu_qs+0xc4/0x170 [ 678.300909][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 678.305413][ C1] ? sched_clock_cpu+0x74/0x430 [ 678.310286][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 678.315054][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 678.320272][ C1] handle_softirqs+0x283/0x870 [ 678.325048][ C1] ? run_ksoftirqd+0x9b/0x100 [ 678.329745][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 678.335035][ C1] ? schedule+0x91/0x360 [ 678.339295][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 678.344325][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 678.349358][ C1] run_ksoftirqd+0x9b/0x100 [ 678.353873][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 678.358997][ C1] smpboot_thread_fn+0x53f/0xa60 [ 678.363955][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 678.369004][ C1] kthread+0x70e/0x8a0 [ 678.373117][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 678.378583][ C1] ? __pfx_kthread+0x10/0x10 [ 678.383186][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.388397][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.393613][ C1] ? __pfx_kthread+0x10/0x10 [ 678.398214][ C1] ret_from_fork+0x3f9/0x770 [ 678.402818][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 678.407934][ C1] ? __switch_to_asm+0x39/0x70 [ 678.412799][ C1] ? __switch_to_asm+0x33/0x70 [ 678.417575][ C1] ? __pfx_kthread+0x10/0x10 [ 678.422177][ C1] ret_from_fork_asm+0x1a/0x30 [ 678.426959][ C1] [ 678.429992][ C1] Modules linked in: [ 678.433960][ C1] ---[ end trace 0000000000000000 ]--- [ 678.439463][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 678.444725][ C1] Code: 8f ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 c4 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90 [ 678.464493][ C1] RSP: 0000:ffffc900001d7878 EFLAGS: 00010246 [ 678.470635][ C1] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801d68da00 [ 678.478656][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 678.486707][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: 0000000000000000 [ 678.494731][ C1] R10: dffffc0000000000 R11: ffffffff8a024650 R12: ffffffff8a024650 [ 678.502769][ C1] R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 678.510799][ C1] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 678.519797][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.526449][ C1] CR2: 0000200000002000 CR3: 0000000024914000 CR4: 00000000003526f0 [ 678.534456][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 678.542063][ C1] Kernel Offset: disabled [ 678.546393][ C1] Rebooting in 86400 seconds..