last executing test programs: 8m54.517310146s ago: executing program 3 (id=7385): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x400c041) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x88d0) 8m54.342397238s ago: executing program 3 (id=7389): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290021001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) 8m54.15874075s ago: executing program 3 (id=7392): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4f23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0xb, 0x14}}], 0x18}, 0x922bac8556bda5ce) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="64010102ac1414aa0100000400000000"], 0x10) 8m53.928583836s ago: executing program 3 (id=7396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000009c0)={r3, 0x9}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000140)=0x10) 8m53.635404594s ago: executing program 3 (id=7403): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f0000000080)=""/196, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94) 8m53.466663585s ago: executing program 3 (id=7408): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r4, 0x1, 0xda, 0x6, @remote}, 0x14) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 8m38.396762952s ago: executing program 32 (id=7408): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r4, 0x1, 0xda, 0x6, @remote}, 0x14) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 4m14.0604132s ago: executing program 5 (id=11374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050027bd7400fedbdf259900000008000300", @ANYRES32=r2, @ANYBLOB="08000500040000000500"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 4m13.969582687s ago: executing program 5 (id=11377): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m13.857314315s ago: executing program 5 (id=11380): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x44000) 4m13.774453274s ago: executing program 5 (id=11383): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x12000000, 0x0, 0x0) 4m13.651860505s ago: executing program 5 (id=11388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25210000000800", @ANYRES32=r2, @ANYBLOB="14002c80080000008009"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 4m13.574173749s ago: executing program 5 (id=11391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3m58.507087574s ago: executing program 33 (id=11391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m27.256026448s ago: executing program 2 (id=12517): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x65dfdbff, {0x0, 0x0, 0x0, r2, {0x6}, {0x0, 0x4}, {0x7, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x1d, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20044084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="b994e29e185ab60163c6f5794ecd6a9e01fef5785500b1b700f463f11b1ce2a15953a5b18dcf9229a25668ccdd63c3c8cbf40284ebb43d6af99150510c622f81e574ccbf8b728330b427372977ff0872d83525a2f2b6ccf19ca5d4bf3b324cbb06c6edc5829642c34c13f3f4d5726a5662605872bd99df358bbb2cb99cfb3e83cae541d7259526852956385d7a4605f97cf38b8b3fe44c1d77b4b9f79044", @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m27.197691222s ago: executing program 2 (id=12519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x81, "c0c936f8c3e0d63bfa66ccbcc425657551ed91f01516fafc1c83efa683edaa307abdc9429d11e2bb3f1840ea20992a96384b18180d08760ea4589cfc154607125e74c169a0f9320095afb8c37d8c7bea2f5c69eb8fcc5624c4f86ab6792bcf43b1e197ec9e6c5be2c65ce01d583c1eacb5c8236fc2ca67cf40d5cb88f6b76055b8"}, &(0x7f0000000380)=0x89) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={r5, 0x7}, &(0x7f0000000400)=0x8) close(r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01010100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m27.103777052s ago: executing program 2 (id=12520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000140), &(0x7f0000000440)=0x4) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xb, &(0x7f00000001c0)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x27927, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x12) openat$cgroup_ro(r6, &(0x7f0000000480)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r3, r4, 0x4, r6}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) r7 = socket$netlink(0x10, 0x3, 0x15) write(r7, &(0x7f0000000000)="2700000014000707030e0000120f0a0004000100f5fe009d2fb112ff000000008a151f75080039", 0x27) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2m26.21954575s ago: executing program 2 (id=12527): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xfffd}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) (fail_nth: 8) 2m25.738948616s ago: executing program 2 (id=12530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_b, @device_a, {0x8, 0x3}, @broadcast, @value={0x8, 0x0, 0x0, 0x0, 0x5}}, @a_msdu}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x200008c0) (fail_nth: 8) 2m25.458890379s ago: executing program 2 (id=12534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) r5 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'dummy0\x00', 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0c575deafd73a557e3f85000000000000000000f7c42af2ba5ced770004001980"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) recvfrom$inet(r7, &(0x7f0000000040)=""/27, 0x3, 0x2, 0x0, 0xfffffffffffffd16) 2m10.228032127s ago: executing program 34 (id=12534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) r5 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'dummy0\x00', 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0c575deafd73a557e3f85000000000000000000f7c42af2ba5ced770004001980"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) recvfrom$inet(r7, &(0x7f0000000040)=""/27, 0x3, 0x2, 0x0, 0xfffffffffffffd16) 30.07021032s ago: executing program 7 (id=13443): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffd, @broadcast}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x23}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) 29.981656673s ago: executing program 7 (id=13444): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000740)=ANY=[@ANYBLOB="00080000d007ca18675a70b14781332072062c2499a18fda910872ceaff5019bd12b806d9855fd6df810290fae23afe144211e0a845ac619fb1c7c6163ef2430250cf8eb10dfa270c4484e0281011e26fc5741b51e4babe4b2a930aeb41d64e14e", @ANYRES16=r1, @ANYBLOB="0100fcffffff000000001e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0000000000000000000c0090000100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='.\x00', &(0x7f0000000300)=[0x0], 0x0, 0x1, 0x1}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2004c013) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x5, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x6, 0x48, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x19, 0x2, [{0x0, 0x6, "00479c0f"}, {0x7, 0xa, "91705fbed77a6c81"}, {0x2, 0x3, "a3"}]}, @end]}}, {{0x4e20, 0x4e23, 0x41424344, r4, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) syz_emit_ethernet(0x115, &(0x7f0000000480)={@multicast, @random="e278c8b9b5d9", @void, {@ipv4={0x800, @tcp={{0x1c, 0x4, 0x0, 0x3b, 0x107, 0x66, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0xc, 0x5d, 0x0, 0x7, [0x1, 0xdca3]}, @lsrr={0x83, 0x17, 0xa8, [@private=0xa010101, @multicast1, @local, @local, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0xc, 0xa8, 0x1, 0xb, [{@rand_addr=0x64010100, 0x400040}]}, @rr={0x7, 0x2b, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @local, @private=0xa010100, @remote, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}, {{0x4e20, 0x4e20, 0x41424344, r4, 0x0, 0x0, 0x6, 0x4, 0x1, 0x0, 0x12, {[@sack_perm={0x4, 0x2}]}}, {"91709c7bf33e06100ffb70a61eb3cbfe74c2ba9f13c309664fc6d835f5468d544fc746e96d12bf92b36cc4980b557201fe15bc88bd9eb1cbbf48db67206bde0da76b213e03aae5251800b7470140ca0b98d63ac87c78fca2bb06b5a54d12576c4a04e4c598d72872adaa034bc20a2342de6b3db21a4c1ec09f30448893521a"}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r7, &(0x7f0000000100), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64], 0xa) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000800)=0x1) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xc8, 0x41, 0x107, 0xfffffefe, 0x0, {0x18, 0x7c}, [@nested={0x4, 0x142}, @nested={0xaa, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic="481de4fb5da95af8747274c425b1b4faa67585028d2ab552cd1a71a292245cad36d4161cec6d2730b2205ca50b167756a4db65f5ff4d091a2b69020d675ddd3a843e72efea47ebda181b15dfc5fdc2f8ba34025b6bd11b3ebc9250eb0288dc7079039e6961c0c9cc9b7ecf256113abffd8539cbe7b067f0bd9bcdbdda450a1cbc2bb4a3c2e805e7f44df7f8481fa4e19f92ebeb9936ae4103ac4b66a7d48"]}, @nested={0x4, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f00000000c0)=0x1) getsockname(r5, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000700)=0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 29.658788514s ago: executing program 7 (id=13445): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @none, 0x11}, 0xa) 29.608805713s ago: executing program 7 (id=13447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r8}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000480)=0x8000, 0x4) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000000)) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000"], 0x18, 0x40045}], 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000300)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) 29.390638195s ago: executing program 7 (id=13450): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000240)="eb", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x18}, 0x200400c1) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0xfffffa1e, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x10, 0x3, 0x2, 0xd3e, 0x40, 0x4, 0x87}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000300)={r5, 0x45, "109400cbde49d994f5632f39a6aca02c1c7012f6d346f82f70dc404dff983ecde33a44222cad4dc842be12d570398f11a103574fd0ffbf9fb53398a3a9e71a3cfb63ce26ec"}, &(0x7f0000000380)=0x4d) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) (async) socket$inet6(0xa, 0x5, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000240)="eb", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x18}, 0x200400c1) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0xfffffa1e, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x10, 0x3, 0x2, 0xd3e, 0x40, 0x4, 0x87}, &(0x7f00000002c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000300)={r5, 0x45, "109400cbde49d994f5632f39a6aca02c1c7012f6d346f82f70dc404dff983ecde33a44222cad4dc842be12d570398f11a103574fd0ffbf9fb53398a3a9e71a3cfb63ce26ec"}, &(0x7f0000000380)=0x4d) (async) 29.258776383s ago: executing program 7 (id=13453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x50}}, 0x20000800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0x44e9}, &(0x7f0000000040)=0x8) r7 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x44b, 0x10, 0xfd49, 0x1, 0x5, 0x9, 0x5, {r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x6, 0xffffffe0, 0x8, 0x9, 0x4}}, &(0x7f0000000340)=0xb0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdbdf250c"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24004910) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, 0x0, 0x0) close(r7) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r7, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYRESOCT=r4], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 14.110536099s ago: executing program 35 (id=13453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x50}}, 0x20000800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0x44e9}, &(0x7f0000000040)=0x8) r7 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x44b, 0x10, 0xfd49, 0x1, 0x5, 0x9, 0x5, {r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x6, 0xffffffe0, 0x8, 0x9, 0x4}}, &(0x7f0000000340)=0xb0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdbdf250c"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24004910) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, 0x0, 0x0) close(r7) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r7, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYRESOCT=r4], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 3.858862805s ago: executing program 0 (id=13729): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) r1 = socket(0x29, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000041200fffe4c0004802800018007000100637400001c00028008000140000090cc45780240200000160500030000000000b7c7e3d8751dbcd5d54a2bf17e1f83b5000100637400001400108008000240009e0000000000000000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000aad68dc95fc7163a9ef15b25d1699c7dd154ac1629d60d214be2b0305b2fce964d7480ef3271041b8c5e5bf6f6d0a4ca939ad3c5c4c0ebd6aa2b7083e2bf68abe"], 0xa0}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) close(r3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0xa}, 0x28) r5 = socket(0x3a, 0x1, 0x8) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "1f00", "0bf70000000000000000061000000001", "00000004", '\x00\x00\b\x00'}, 0x28) 2.863400903s ago: executing program 0 (id=13743): socket$netlink(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x52) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES32=r4]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0xb, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000061656769733132382d67656e6572696300"], 0xe0}}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r10}, 0x20) 2.687851252s ago: executing program 4 (id=13745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2f8, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd}, @NL80211_ATTR_REG_RULES={0x204, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5c7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xac1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x604}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x65}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffff801}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5d8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xab5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x66}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x19}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="4700330080000500ffffffffffff080211"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 2.335037821s ago: executing program 6 (id=13750): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x2c, &(0x7f0000000840)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x4}]}, &(0x7f00000008c0)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30) socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x1}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000b06010800000000000000000600000205000100070000002c0007801800018014000240fe80ef000000000000000000000000bb060004404e21000005000300650000000900020073797a3100"], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 2.251335948s ago: executing program 8 (id=13751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '*%-[#\x00}\x86'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) (rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000088) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x4008000) (async) r8 = socket$netlink(0x10, 0x3, 0xb) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xaa9}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r10, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000007c0)={@private0, 0x0}, &(0x7f0000000800)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newtclass={0x38, 0x28, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4, 0x3}, {0xd, 0x7}, {0x6, 0xffe0}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x248c1) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x6c081, 0x0) ioctl$TUNSETSTEERINGEBPF(r13, 0x800454e0, &(0x7f0000000940)) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r14, 0x84, 0x12, &(0x7f0000000980), &(0x7f00000009c0)=0x4) (async) sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/net/tun\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r8) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r15, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x14}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xee}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x160}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4008804) r16 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c, 0x0, @val=@tracing={0xffffffffffffffff, 0xd71}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000cc0)=r16, 0x4) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 2.240034502s ago: executing program 4 (id=13752): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async, rerun: 32) r2 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000000) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r1}, 0x8, 0x100000000, 0x1191}) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x140d, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000002c0)) (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000380)) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101300, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000400)={r7, 0x2, 0x2, 0x5}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000440)={{0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x7, 0x7fffffffffffffff, 0x9, 0x4, 0x5, 0x2, 0x56, 0x6, 0x1, 0x800, 0xa4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001500)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000002500)={{0x0, 0x9513, 0x7f, 0x3ff, 0x2fc4, 0x94, 0xd, 0x10000, 0xad3, 0x9, 0x8, 0xff, 0x0, 0x2, 0x5e06}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000025c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000027c0)={{0x0, 0x400, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x4, 0x10, 0xfffffff7, 0x7fffffff, 0x6, 0xffff, 0x6, 0x7fffffffffffffff, 0x1}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002880)={0x0, ""/256, 0x0, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002a80)={{0x0, 0x9b, 0x6, 0x8, 0x7, 0xfff, 0x3, 0x7, 0x7, 0x40, 0x0, 0x9, 0x2, 0x7, 0x8a0000}}) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003a80)={0x0, 0x0, "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", "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"}) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000004a80)={{0x0, 0x15, 0x4, 0x8, 0x3ff, 0x9, 0x6, 0x1, 0x8, 0x6ed5, 0x10000, 0x4, 0x9, 0x4eb, 0x3}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000004b00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000004d00)={{0x0, 0x46, 0x1, 0x6, 0x5, 0x0, 0xc, 0x9, 0x80, 0xfffff4bd, 0x0, 0x1, 0x3, 0x442d, 0x7}, 0x10, [0x0, 0x0]}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000004d80)={0x0, ""/256, 0x0, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000125740)={0x3, [{r9, r10}, {0x0, r11}, {}, {r12, r13}, {r14, r15}, {r16, r17}, {r18, r19}, {r20, r21}], 0x81, "beefa3b862017f"}) 1.907327822s ago: executing program 0 (id=13753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x4, 0xea, 0x440, 0x4, 0x10, 0xfffffffd, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee8b31f41fde894f56db1366a4bd394fc49cf5c29c072d3b7b158df886176ec97491ff0d6162b77b3a9cc94dde3be346fdd773edd347a35e5d71761b46ece495a0ae", @ANYRES16=r2, @ANYBLOB="20002dbd7000fcdbdf250e00000038000180080009003c000000060002000000000008000b007369700014000300ac14143e00000000000000000000000008000b00736970000800060007000000080005000500000008000400070000000800040075000000080004000a000000080005003400000008000600f20000003c000180080005000000000014000300fe880000000000000000000000000101140003006401010100000000000000000000000008000b007369700008000500ff030000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x1, 0x0) 1.706864168s ago: executing program 0 (id=13754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a20000000000a05000000000000000000070000000900010073797a300000000049000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080001408000"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.706655273s ago: executing program 6 (id=13755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200081000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.704444166s ago: executing program 8 (id=13756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x2) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) poll(&(0x7f0000000200)=[{r2, 0x2008}], 0x1, 0xfffffffc) 1.680556781s ago: executing program 1 (id=13757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200020000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.62729492s ago: executing program 4 (id=13758): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r1, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.530696961s ago: executing program 6 (id=13759): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000045c0)=[{{&(0x7f0000000480)={0xa, 0x1, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44191) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0800508004000400"], 0x24}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) 1.530384794s ago: executing program 1 (id=13760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="fee1d49513f03edd35a8d7f5b6a2f10d7d3d97036fdfdc8fd72156a36ce1cec4c1cf731d0b703ba2d3b5ddb549c806ece6afa045c47e7f2b8e36ec9a433d46f8e361a4ea172f62419c625f326b1caabe57b97eb8233e227558604fa97022daa2db126c375d", 0x65}], 0x1}, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r4, 0x8}, &(0x7f00000000c0)=0x8) 1.530270225s ago: executing program 0 (id=13761): r0 = socket(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x12}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.461762137s ago: executing program 1 (id=13762): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000001f40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000100)=""/78, 0x4e}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/174, 0xae}, {&(0x7f0000001580)=""/186, 0xba}], 0x4, &(0x7f0000001680)=""/113, 0x71}, 0x4}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001700)=""/138, 0x8a}, {&(0x7f00000017c0)=""/131, 0x83}, {&(0x7f0000001880)=""/237, 0xed}, {&(0x7f0000001980)=""/161, 0xa1}, {&(0x7f0000001a40)=""/179, 0xb3}, {&(0x7f0000001b00)=""/153, 0x99}, {&(0x7f0000001bc0)=""/231, 0xe7}, {&(0x7f0000001cc0)=""/157, 0x9d}], 0x8, &(0x7f0000001e00)=""/173, 0xad}, 0xc759}], 0x2, 0x20, &(0x7f0000001f80)={r3, r4+60000000}) bind$802154_dgram(r2, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffe}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.457586266s ago: executing program 4 (id=13763): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="ff", 0x1, 0xf1704a4122f681df, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) 1.320149814s ago: executing program 0 (id=13764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18387}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) (fail_nth: 4) 1.252391479s ago: executing program 1 (id=13765): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000000)="bcdc69204f") sendmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="c8c90a98ec42973fb332117313acd99a96ead9aced65ac0075529c6471c9e92bc4cf68fa41426990e7fef1771421fd1b317366a2f52e0220aae686c1205b1148758c69ee2cc8e9e7ae18890b8270007b00468acc323c41d76894a2e797c49f850763dee0448a73461fb9057ad48eb991004daf5e0ee2c7c0cbee7c24965ddf43a3dc7bfbee5a5702f5544a95037f2f076bea006485c4fdf9a6bb3f3793caa4c6c1d383b566c285e7a0db12207d401f0bf3354930f25a1306e9c018fe6a0c8910111968b4e2067103401a165a4422a4ba7179590e", 0xd4}, {&(0x7f0000000140)="bd670c9265554e97856a9fa180e79f4cba871bca6574e044aa7dd9e7f2c925ea4d4e45055454540afc65ad1dac0fcd290fef703877a298d09068397aa94cc6b1de4a974b7465b83b976711d23ae647ed7441b399c150369388110134f7df32c08ce3f49050f582e21d2ed114f311b9298a3f04972f6ac4", 0x77}], 0x2, &(0x7f0000000200)=[{0xe8, 0x119, 0x1, "e3dda6cd5dddef011e83831a8c8285c618ef25622845ab707ecc4aeb9782830f2bab46bf0ad4c701f92c1cb576cd7e161930a0da4558ab16ec796e2e0ebc79cce7893b1d59ef3e1b6ff7582e924b278779e7dd7796fcf4900dc1b1be4d8703d96c92dfd8b6e369a5e28bbcb6d6cbee940dfec051012b090dc5e8d938e23fe723741770b732bdbb20e971f5c03baa4c2c6bce17c0f6726617768121d4b5c848f7e7177e7a5fb179449610e9e8ef71d22044d51250d0ade51063e28bce211e688f06f7ee1b0463659619c249a5d83ca4eaf56016e1"}, {0xb8, 0x10d, 0x17, "d51c89a30d6498dbdfb007731cbce9f35056b25e4c3d7ddf4b710234eb16fa81ff03e899595fc603e1dbc1fa2a768fffe88fb6416448b69cee832f838fdf1eea37e2d95027f8aea5b2c035dbd39574fb244da861f07e3a6af6272f3d605d543f377442e94fd1c19a43b46255dd2645844f5789b61d9f790b4dac39309626ed0e1e3d86637efadbd5d49834f8de078c7eadfa4c70d80492c8b4c4527d82c548122b6add03f4dda604"}, {0x1010, 0x6, 0xffff, "231dbd20a6ad6eef67f7ea84bf3672de82c9f61b7e3906087490da697528378a6d94fbaa37f024f0d2b08ad18a505e2261ea159af369538f0e3b34c3d3299ba98c7ebc7395ac39070de4cf094043f79c4b8f52b7211d5d8d5fe18be31db5603320e64c8aa5059b55c161c23d47a460aec3fa5b29ef199a11245c4f712397d3780193d9704fa78da045c2c20465a0cb4ea8751af1823571a4c54278e03b6e756161282ca584e480c2bfc725c4f1a630c68fc2922e7baf51b97c64f484a9fc06d7a6b9c65ac3ff2ba7d369fb2862f525e7930da0988ed0c7c6b21cec06fe43a0afa92a6b59a11f83cb7a6216b829f3b95644a0058cf5d17ac94b00dc6243cb44225ba0f4927d694e4e97a70371076210a06762382d18ffdc013a8e7e646c9dad09da765903dc30f85490786a47fb5400ed6dd73add35f3a7fabcc04497cf4aa2604d6af7db82cca236cef65fa9da44e0ce67489fa5e48b6d75b259103ad75704ee0eb2a7c83843f11256a7d973fb9c30bfe59a2be29a8fed8ac79481061359f5315ba90bbe0c7be7bc308ceb556911b3d8db6729f233984c65dce9adb7657b82baffdfaf9802550d376543ea4efcc41182c6fa040b568c579d7fa8ba761aa3047d040da2de9f7ee43dd076e5f487919560366dbca73685f9551d6369e3b71937892f4aa98f1bbd5456a5d10624e8d794c8a757cf1d1ad7fa5661ef5e3a06d255aad47f0afbb4240eda26a04014d785b594f41d3a3847dfbf2c74dd2c53c891182e3fe06d86da512f7228289d9da2f3012c04b64c2e9b1128d65b1df6184248c5d9f200a0efa2877129c004d36f02ac4d963ef46ff3fbc2a8d06d5873869c21bc04ec24694553537ad46c9cded0714a3586b804cd25013e4c66a330104f9c32269d54e04462d3be7fc03b51650c57727b571b7143fe285f0af6f8654fbf7e05bb405698dbbf9f6d9f594aabf2edfb5c18cd4a5196d1b55fe36c19f12708035df832691284aa10f1e119fe41e6021a7b51c8775f3791f73a8f08991fe8088c5b0a97f310dd0b4fc3253e18e068ce848367dffe4a3c2cc58d6219981eb241935e38f6f0d4fd54019b99ba1e87b34fe03698e56d67ad86ab06de8b3f1b24e910dd5d5c4dbb78fe377286939570058e49ed78ac3be078fb56a118e28f142f9be143a2ab566f10ed4e1fdca33971d61f0cfc9e0a79f78d95c01d50bc299c66163b47cfa9373386ec5d4a10407870c97be8adc12466255182442f54b563eb004a6e1e5310fd1108aa55fa92ddde0d780ca49c2093758ebe79567ab93b8080e93457f9d2c9c2134dc6cbca96d8ec570e2a035fd42388f53ec04a0de251b35be6ca44004b2680f21ace15a7713913f26522a4331cddcd94f51e39fe7ca9ad7f48f95b0facad71831d430cdff6c0958475521a3f34e6fe1d0310a49c280228c597cd4a063e66beaee33e81d2c5c85d836caf05a5e1fef0f5df53e159381863d8fdcef3e5b39df30f464d049043ae01240fac7ba63d94c90a62ae8331c8a4f6ff54bda78077a8f7e56f94b9abf7bdb495391872750b4a02268c2ac449763e9298acdcf262a6738983f341bacff7775d6ab13d9bf1dbc4c6716ccecc1c76851da4c4920c01db0005d3ab2cd374a27cdd0088a23d704b57c64940a4bb7ed0eefbd425ba5469751294157d6001c7a4793f53f0ebe1a59011bd31064889739b033160deaa4bc063c047f23b9213c5e14fee912c57147a87032b4d171c0d620d146a24410154cad170bd11f7c8ddb8beb8fa128c9f6bd767c81fb58245a317d5ef25e544f357d67f8a7ed9dca37d44f673ad1ab2932962d488b85580989d643edeba848b6f0cfdd84a11749ff045c272365a49db184945ad2bfc2aa13e889499ddceea2d9b08863d31a4a716b271a970e0855eced8400e5f75f2331134221cc590db66d7cd76aa6bfc1eff7b8ec55d0394c546e88d128a4714db37099f47995b36928154c11bf84d297f3f6fa34153b00cf623320d8084ad17e17ecf02cdeb5631910c9b69e5df1ba1c6d6378ec498210a60d1f432b6f373ef0a21ab3e7d5284ce16a66a2c32b14ec745441d63929ab41374fbdbc6580ce5c9e5997480c1687a443aefdc9b76678b841534f86d16a03fec22e230e59e745e47ff7c8b4d4396f43f39e347e3993ea129db6c7c4d1039f0c147330f48532cf90880bd9926b06095aace94e4f7937589547ad32496400f9e52d11fa62fa329dba5df0693d8efc26b20b6a2433627f6f31fae1a6eae1d7f542e62433c48da3c6c3c4ea8b8ba4e9aab98a61c2b18df7e751e24d6729207e7e422134715dd7258a95bf1fe535ce8fe76666dc214db72c6273b2321850d308b485d5ba22ecf67588d1733e2edf3d509f8a60c4ae0d98ef72ca4fc511289adc4a90ac7cb250ddff02a1ec75301fbd83ad6b4a20caee7945d66fd72fe63660e75c9e138c7e3061e0d751539b112ea800920d1b7388de7c8340dea9d91c548f463e55845c392190bc1bf51ce55d8b3ebe78e3ac1489d854f1487f25d7ddc8d15e710349329cf28882a505e5ae2b505c1ab3d212225de5a08b7ed41fabc4fadeb91af843bfaecf8721a78b4a292ef31f84e2408761221fbfa759a99b7d7cf7191ae7a66324342af0e8fbe12d4316011c5f36e7913a637941e5ac6eb162a4b35fe450d59b259b0557bb4072e74a56e10f745c59ea69fb722db4aa2bad091ee981f5a35d0b048da5e2020f12466c55f0da2c9681647893e3656a58a31be49945f9c45ea7d05da2321e8ed6d1fd80d8635a5725584719e989bb84aec481d43e1c659dbcf9cfb8a9ac171dc7142347c9dabff69ac5c638c89feff6c36f454a955533d301516f5e9460e6b754bee686c9393344a957765e02d77f92762852806e49c4c0df1ee0cb67a5378c203921408bb5adf9ab526dafd5601d9d6f295a3784648a075beb11cfdec3667ed80d3da6f3c111666d6ea7318956260fd9f8de89aff05d2373a46eaa7f8c07058bc99154224130785edb34a7a26dbeeafb89a7f517f704bb5b5b5ac23ee8ac1186247a8b051fb9694efdbed975043cb04098101983baf20959896be4dcf5b4bb6f082c16369de5b8b7aeb72f37f0255143f9f3fd4737d8cf6f8cb5984d11873c2e1d8da7604e3f948de909a31f3039f5e0c92f54aa08d1c899569cc877c0bf361a6de46709fc9c5d0423d5f0f660d8799179564b98ace3647c608fe925cf1578c836ad7429d2a5d35d72261d5c3d405981a48407bf54158de555c438aee0c6823452ad92901bdd723c294fbba9d0eb1dfbf7690776ecacfa97cedeebe03740f4fec2b47b662c751c04775eaaae4b46a74d81e64a0b83075fcbe1cad0531a1231f4e6ee3c14eebec6072fb8e882c48d4f74b1916f2cf3afa18ba80dd19a3ae053e0e127d3457401c88d6d7db8b7df741ae595d03f85d3d8d46192bd6d98fc25d43b9ab14f0ca33fd449d0ea9e048c9d0e550a75991d4fb8cd5f1ad2eb4a38e91132714d19fe63971fb6f0c719019ef733aadf80325ac032807a190e94a876eb7a78c8037645b97d3e2283c0883a95756961b766f3509be24faa0f285396e872d78be7d5bc4c62c979f5d0e913cc9b296e1bd42b46ba13a7048b3ddfc84f7abc273b8f255c6b09bb4ad62c7fbdc26a657556b626dbaf05b98a7bfbd1f957b0fea2321f4f22e236d347c05df7a77bd02e0464440d59c099ff867d73c5f30b8502ab663408bf834ed7b0a7323fcdb7d2ac886a57774c85e9af9de4f7eb209dba50ad7896022d24cafd4b03e947e331b7d85f8d4b18ac37df7b6db3af3d4c7c1e5e5c28134cc400974a364308c436b3befc0fdd1a24613f69c6b388b88b6a2a0b8228d7f65ea7ea4dc817a893b275590913d4aaea665501032ee26b01c2f601bda08d58156a85421439718e38f283a8d5273c0288d1972137b2d6b79e689d8dff40e4719dddad91464499fe613e6053cc39b6d18fd52ce4253228f6ab79362553c7478ba97b9b84f9b824ed84d0fef87970acf05ad3df653cd2449162f4e77e71a08fd34b2d30d84b52bdbe41ecd85a303a901b886ad7dfc59b5fb840472d668148e64b01b8272c667d5cf8938122205bde844fea4bb81398ccbd167b7adebe7e64d0db17ea0758535bebb724a394f178d84ca4d1ad8919d1c58519e2d5381a82acc71231b67ed8aceb8fe50259db97c2c5abde0e6d585717f706280de92740c5f0e0f6bb56395ffe3fddd341a10e2ea74b06ea69658bab99ff43bfb6755cb0396d04c5c2bdbbc902cbbc5fd8ca7ad585d886132854f0691ae89b043b968b7fdeb962c6c3c7ee3a611c0cb7a22c6d2a2afda5eee736eafd5a13a3b4d14c88993ced7c281e99c3907b34e929bdc47ac52c8762271bdbd66bb78a223dfc297975e3f3e964f3c12988d27af4d851fb3f7ce3eb02373a3e7dccba9afccce6a583b0cd07b677f134a74aa94f9120915413b88fff64ca6648724ac36af88ad86bd0acec731a036546a6c1ced392e986293d3923e3bb8701f3991d11edd7d7892e0b45e01b0a6be4049fbffd1995e3018a41083887110b2f8b7718c82368f3aaf565609a6e3befe6bde0972ed89e4857db90f9ed5e6b386df7dc130f8c14c5ce623ec88f54b39cec969a5698e4f33d0799b7048898ea4fee7ef58b34707f5b9d25469923d1f0a95ffc5597a3512ba3d8625a4a7bde868ceb350748011494b5330c4668ac43c5ac4d9f1128b561bc4777569581bd1188669e639ad6bf6d9ffaecb3c63865a9ef7791911dea9539086b207fd25ead100672468af2614bb9228330ef792ecdd85ca014e7dfb41154895e0b56f95fea83d9464d1e28cc8cc2363c99d789777fd78b0e3601dd7bf2e8588d5bd7645a1d897364e734abe3941374f5de6d97bed9a3c706b442dbd46fdfac19c451783b70803692c6cbd4554b4cc1d62a3ef0d2512ed212c356a7ed96252c0c84dd25b14f2eae162baed18953dbef09b3368a1f6ece29832275403f7eeb4349795363a790cbf9954a65a06c2c2dfee6023fb439a14fab2bf65d479276b45581b578bd095ecfb00f06b8437d8eb979398cffb3104b6cc531d324850577def7d666413afdb3a32e3f01c93aab18092172bcc406defeb1d75b144a2cada26bcd78c557894c00fbcd07dc81fa38c3204d4401bbffa1080fe6ca4a24c5637d4860d4bfae09941c73b743d6ffd529c7b5195aaa83f0264d66abe7d010aea3f175fbf401149ca5fed1fe96da1c6d84f6252644a6d54d484df6fe672610cd8e5e98ebc6e10dea8b99ebeb0135221f867f6cac82bf4812454336f827d77e067d94ec7d632a4de770d1c5e9486b35917b588ea00468557a02345932036cd260906ce6b57532e07fadf32a553b76bb82622d46c2cc67749953c2ab37dd99da159d75b20100605337ecc0b24adaa77d761fc5dfb7f0871ad947779aaf96cce74f72461d01d1052df9a06ea6a53329bf4784819ca4b648a519ba4267400ac59c2fd3801b36290c63c88f67d8f1b5da09d5511e21c75a9e0be0bd2df1952d043219ad99fed415b65c066b8f8e8cc1ff417cc678120d93e10616b5e7e21004d2f8289a8b83fc80a14015ad37c5cd4a4b6af76e019170d8a7d75d025fee598027f7f6f2cdfe9056b48923ea68447934f228720937812c2cb66a3cb853f69bffe904e620eaf8caa7e9b8a7fcc91c7d4545f04a934fdb29173aa3b567486cc42f4a48a19463a10c0bdbccbf879ba7be194808b604a3d1ec93e2daaf5941ca21097e529ff241c960872defa019d3f93dfe997"}, {0xd0, 0x0, 0x1, "2d51e215f5b0c34e1dc3cddacdc187615a0db359e70a35e2526c5079f3d586e9839c7a879eeb67fc4e61e09ac4cba864c0c9a7075f84bf18ef14858c09d79cf1304f81311ac4c1563b37cc34b054f7cde00abd557af986703385115697c41d854c06fe68456f4a57ff873e52bf3ca69162111de1da33093acf6b954b82f045f1f20e184781899c9cf0a362031235dfe1ce636122230ca230b429212b42a2bea4f1eb369c78bff519865dbcac00e492c1b3a72efce2ebde6045"}], 0x1280}}, {{&(0x7f0000001480)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001500)="bdf2a3bc759a44946f3ae3ba7cd97c999e5b2d119150d8e8a1ee42a158714ad8fa8dda1cd6639453ccb662b8dd90f6eee5c2fdf3024e350cc21057caffbc44d579ab27916d2175ef4db4043c2caa39ae4e6449247bf0071a8290dada62edd8a13aa69a5774d3082b3d3b0833aec0c0d32915d82a2f01f55be19966486036dfdf28f61ab90bd6e3c19edac659931622bcd643a8", 0x93}, {&(0x7f00000015c0)="cda2c74cd8324c9e5b568d44d7f1f09daf87d87ea1f3e18d8914a3641190ee64631b920e6bdfde", 0x27}, {&(0x7f0000001600)="9d6031d1d3786ed50d4faeb69c926cb9129a83210ee415f9339fa682bdfcac8f710f8ee192fa9ba77111e04d68e04116f3c46d1d185e63b3c201d6b1858ba41e28504c5417716bb20af5fb85d52a5dd7a1486f188d9a99292d72ba632aa9b9659e0aa3c04f37d5207bf110cac2ecea5c9bc6f37de85ca2fd12cb46b11bec408398635d8773cee0fce116705c7334baf666ec5662e7e2a7423242588f5573e44a6f0c20151df4ab82fb1711663bad2bf76a78d4454d09efaa3bd5203133", 0xbd}], 0x3, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@phonet={0x23, 0x4, 0x1, 0x5}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000017c0)="9c8f111281f0bb0a57654080a31e763b5089", 0x12}, {&(0x7f0000001800)="a5c03c8281aec2debdcbc77787322453063fde488ad77583fed55b96c823e43916ca649d2b24d223ec3ba96f6a9e248f81c97b5ee9a7f0dece347506b2f603f1f4207c436cdf15836525a6af7fe8ad707925bdb337419d31162d5abef0c5c5dfe2b1e48fc67489bd9bce445d635dc0233c7d0f71c74e7a034b814e", 0x7b}, {&(0x7f0000001880)="8d8e95dd6fcdd96d8ec035e6630edcc60bb28d8989b70570ba5773f3627a1e56a441c7299dfa4c86baeb20fb76c9053141b775baa034c777e909a9cbfd2b76177c16fcd569d20c83a59d1db165f5dc4d713eb86ad7858625844495aaa8e15cbc609e8efec229c0", 0x67}, {&(0x7f0000001900)="8ff62261d9029a93963006834453048a6d594f878cddc517be1d654305b4a4cac89966426a0bb98a5608ad1423bb545d36329ecfa3c56d2c86b4009f1cb4ed4eae2ed651f2aabc4a827701447d541aecdcf7128c310979eae814e09d1bc0ea9958985c43a87942dc2341bfd79afa23ed7456c3553758664e635bb346c7daa5aec20492bdda83d431bfc0c41a4c63d5bb8f6f47b33270ad6fdad90f7b2bd9e8fe2559666467af07331053d91b5c4b7d1ca1c8e1feb64dd7ec00f669cbcef93428758b52c52ee0577bf24cb5411875d7073f386de17c10263d", 0xd8}, {&(0x7f0000001a00)="fe0b68bf582136669655a38a3779267e2337ab8d495d6de93a15583e81097b56c1e221ec77c17d064bde6f87a750a9ea02ac5926776002c5035eba190aef0a64c07aaa405aec553bf6c9be1f1ea614904a8d75c0c4dfe58e12c56623caf091b5d80b8e3428a2833c8d79de9a8e5eb986def6f74fe122dbfa17da2d76ee94c1e6dc9ce02f061aef94a29d448b6aa5f26b45de9b64090f94e9e56b58f4e89c5fc340865dd9e1b83bce4b885cab6d8e42a33e1d3d5ea3841d9b5ae0bebdebfb235ef03e1e87c2f738dfb15256ff2e385538f9231cb8b7329b5f185a6aa1fb548c9646fb72cee2", 0xe5}, {&(0x7f0000001b00)="60e763be5112bda9a10c6b2b4b55cf4a428bf4bf392cd7db7cb5a23373d58496d03f3c3463ba4cbcad4c866c0ada6fa4e2fee2311f14e8f35890c56bc330c07bc600210bcc0a93335c319c795f6a24f824a183b04ed1eda3378967454772d6cbca349f718ec58f3e2c3763b3e925ea80b20e46d41cf40f", 0x77}, {&(0x7f0000001b80)="3312de7644db6b5f36a5db35c7173bfe90d2c9d34b64984ad97d288c20e347a010d0dfd7453cd31a74c00c1e9a442a2fa06b9c606976207f635b49870b3571fa82662ca376d654f124e24af04a74e6fcdaba0f14570b7110f68832218fe1c0f20b8c0dd15b6e8d049d093f62fd68db44590b63ba09c410bbcb41e84319f353b90db610508ede08919c47c43c136431411f604339059daeb94eb221acc503707bb119ed4fe78d24c660257ffaf1f128e08a5ec2e21c38c841edac0e3dcac8e7873584926440d30b9205164273ee", 0xcd}, {&(0x7f0000001c80)="0ee10d8b11bf3113d80d0bc2745e015566c4eeeabde92605f9ffa39b862ebcad606e8580dfb848db5bdcaed9ab8d4995f7bbd5208c80d656987d4e4373321d485b7c6f4b607ff1c39eb8ae568c89f95dea079447d9964307d181cdd2772390a0c78731e19d489a8e337faf16835bbed46ffb58f19c5f40df9f82015d1855c3e6bb47451231889cbb14efd3dca522807430035d9350e58450aa84e7eca86dd8b842ecae", 0xa3}, {&(0x7f0000001d40)="49ba7a8b9e0048d904bc746025524eac62544636e7daaf5ed1ef1d17c5a5397349618684e4230054ea8e1b01197f0750260a64bb4064500321aeda559e0aeb426de3834b21a258e23047674c56fbc1ce8a1f401ce56475c3eb033fecb62dc4582e7633016bcf0a3400c372f023550372a695", 0x72}], 0x9, &(0x7f0000001e80)=[{0x88, 0x84, 0x7, "1ac5332c7a7703e45fe0d3440a16aff8840fbf96fb9658dacf02019545c46e7eb987b8923737cbc3e2b31fac30c6268013cf6ac34189e9bb96d64972b83ffe38c6b82052bb75afadf8e60efa08ad677c3affc2443f54b0922188592042724e6e87b4bb761144b523f6f999be8aee9ce8d260f0259b"}, {0x100, 0x116, 0x7, "2f5eced31107cfef0ee98821c4f425a08cbd7b87aa38457309a52711c08ec96f2bc6af8fbdf310215953554aba3c7c8d646e44d1752e98e650c5482b15708a79601c9397dcd04610f62c3ae726f97978470aedc2ad1f0a34268952ca0760c0d1895661285ffe57c87cf9b9503c450bcdeacabdf73e7e343b761f23b62a28f2b22bf447f3d6e5ccdd911c866d01024c5ac6d540442d1d6c9fe36fbda2b66042dff1e5311efc60c47de00f549466d619d00084cfca2b803b886fd1c4c0abbeeff83a5921da2c379f8b3e215bc5342fa2650332c55bbcd9ea325c0d676b8fd9c1f543d816ae9bf0cd9e45"}, {0x88, 0x11, 0xe, "68e41e09e060868b0f46b124ed3e0b17dc40b03f3bf101df9ca5882b6090d571ba02613cc02ec03c2b9e2d93044879a17f035dee0a4ecb48b1edd649d308149a9a5cecc51849795e17ae1a51185b80c8a6be66560ec90ba17b83843d1ec83919e9cff36bc233c2958bc3f6f80ff09be9771d"}], 0x210}}], 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x15) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000022c0)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000002300)=r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x6c, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2008800) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000002800)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002680)=@delsa={0x120, 0x11, 0x20, 0x70bd2b, 0x25dfdbfb, {@in6=@mcast1, 0x4d2, 0xa, 0x32}, [@algo_auth={0xdb, 0x1, {{'blake2s-128-arm\x00'}, 0x498, "e6bfe2734583a50c9111dc1e71379123b0042e4d6f84be5062960485a9069389eb3c6a92772f2be93476b8b035d78f3b7d407fbb4f8ef240874c33833aaeb30421790b5d3f1ab5c2b9bddae76d570db17b5696af07f4f1120331874d2084e739cb17a840b8818a4d97228af1df21cc80a3adb87b9c03ce74e6d6ccab1196bc001932b0238b8ab4984e5ab6cfc47902aac20fb0"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e21, @in=@empty}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4c001}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000002840)=0xdb, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x40000) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000029c0), r7) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x40, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x4004000) r12 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000002ac0)={0x0, 0x7, 0x400, 0x533}, 0x10) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000002b00)={0x0, 0xf8be, 0x2, 0xfffffff8}, &(0x7f0000002b40)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r13, 0x84, 0x19, &(0x7f0000002b80)={r14, 0x4d33}, 0x8) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000003340)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003300)={&(0x7f0000002c00)={0x700, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x222, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7be3}, @broadcast, @broadcast, @from_mac=@broadcast, {0x8, 0x20}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x8, @default, 0x1822, @val={0x0, 0x6, @random="828b81d235c9"}, @val={0x1, 0x8, [{0x30}, {0x7a, 0x1}, {0x48, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x16, 0x1}, {0x5}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8}}, [{0xdd, 0xe, "32425df4ce97a04167ce5a6ab20f"}, {0xdd, 0xb2, "4f72d7147153342c0b9ff94e5276d6ea9c75bd3a021a192f3f80f86ff10ae569aa1adaf97eeef798e9370290d907e86a29ed6490100394cf036805c8a53c07fd7d659404d3de9ce637b05261cbaa4b71e96762bd0971fb2909d3c622b2511a52c308ec26cf1704073619b8074cdbafb76240e981182af98496acc631426ba0444a4c4aa94ef42e249b7012c3b82f39f6e18b09437e44cd1d3883332bdf530b66cbfbb20f53832a92408505354d4cd5064291"}, {0xdd, 0xa2, "f28963844f7f936cdf3c9ed2e1e3c5c37f5212e0af8e2779aea71e542567c8fb37f6bc78f072a3aa8cc4a6728b7774f73ef36f4a66a34b69f92089587a876fe932b8684e08ada5bc0b7228b14b2fdbae8eaf9a85900575a2cb5edc9968dc30f065ebdd8c4a985c4e1280fba9a10d84e255981f2490df54ad3c38202882678eb287976f58a5834f4f73afcb86ca094d0f09183920d9bf609121929462f0ad6739e063"}, {0xdd, 0x71, "d9e19ee8214b34fbbaac89befc2195af60799809347e3604966455cad17a72a0a871c16b28f9351f19e722c9718ab0065e5b5338e72e090e4c5fd97b3fbf0ae7aaa6b5af08dafb0e9c6dc609c59f5202ccdd3ea5569636c419a8419510741c90f3a2bd7b0b4bd1dc03749f1228bf191748"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x10a, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="28543fb00c2d", {0xb, 0x9}, "", @value={0xa, 0x1, 0x0, 0x0, 0x7}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0xd7, "4cc8050004a711eaf34e2f383907d2f35378cac13544d3305efb813941aec6622d4cccc7ecf74ceeaae6e19506bc055075317f52cf55a6f2297b99a1ee5171e7948b8bcf24a085e10739051fba6e0d6e6301212b5775d2bec1f136bcc7a2ee3ba28e1f51847e73de9911fd14534c62bab275318278aad651e699af2aeab69975f2b6ce04985b3565939e121f3d7662776f5d4976500121f1415dcba6dec232cf7218247f2f58f8199e23eae8bf459c468ed597407e6d326e8cbb5d1c9e9897bf6cdf498a7a0825b8083c259b345fc38772a8cc7b6106f2"}]}}, @NL80211_ATTR_FRAME={0x1de, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_b, @initial, {0x7, 0x7}, @value=@ver_80211n={0x0, 0x5bd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, @random=0xc, 0x40a0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x60, 0x1}]}, @val={0x3, 0x1, 0xa9}, @val={0x4, 0x6, {0x4, 0xc, 0x4, 0x3}}, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xac, "837c1f4ae46af585a54b9ab8fc5e6f3dd8707b5fcf7519115fc113cc81e2cd8ebc9e9b61009faf9cebbbbb5f35c480f528765c1cf0e7bf3303f0b94eb21760252bf0975541054c00a03b6a4a493fe75e724c55edfb0a5565dbe3c77ed392bc8864d72e1e34873fb290bf0fe7364659aba766678da6a27fe50f2347c5cb3b9dc362372fc6549cff16731fce6f1d4f812a6ae0ee7317eb28a6cf20dbd88f762d19d21c8ba48abaf51fd74a0ef3"}, {0xdd, 0x8e, "ca978557d2bd60b2fe28776ad8742329ad761a1fd1d1b20301eb4ab8bd490dbd7a329b3a842f20cc970d6f290e78ee9662646f4ae9f3171bd79a28456fcb0ffbb67336d6e4183f83b8049cb982ba4bf9cae0e60c63dcd94c57047439bf7c9905d4ab6d706e791da3fd58999e1283bd93b31009ce76e009b7c8d7c2ee5f9848cfc4dbaa49824395a66ca13c30eddf"}, {0xdd, 0x54, "9c1b9fd8b591d510a5ea8445da813b01ab0cf8d15a61bfba0d0f9e6c6b75975c31310e4624b8d1f7531786559e25163afb4370401b49db8c154b728518b8bf0381f94d013dd08d367e8416fe94cfd4f8f8c7cacd"}]}}, @NL80211_ATTR_FRAME={0x188, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @from_mac=@device_b, {0x9, 0xe}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x101e, 0x2e, @random=0xfff9, @void, @val={0x2d, 0x1a, {0x1000, 0x2, 0x0, 0x0, {0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x9}}, [{0xdd, 0x6e, "f70c8d9e56c6a4e65981ebe6e78cbff6cf09dd4680137cd70d5d6590f59553c41ce4d754f459f82efdc172fd9b611d46071cbf7dcb57dc3b50e66506a8c89bcadab26fcdac90ddbc3dc931b966e307386bb3d3d997a470dfcbe5c647d1aba74a99aee779de153de8fc04902638d3"}, {0xdd, 0xd4, "f5ffe8901c0cd225737bb1e334d86aa0f313cfa04a1d569423a6cea11d6687b996095d400af036cf250afbcc050f2ae45af6266392b7b5b0bf0d6edcadaf85bec2006902f577f9f7835b8292e2dbb00aefd9a35b0a2da40f74fa6efcbcc13929043c3842e96b16939eb53cd8f1114157e532ba943cae22a90367b2749d3df06e35c97317073d323840c4df327546216c767a4dd495acec523b9b43ebb2f652c55a70fce83fb9bb02301b132b5757cff2857d131d642cbb5bc662014978509fbde6c4be605836d17b54c5e7365bdeb74cdcc82ced"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x700}, 0x1, 0x0, 0x0, 0x4000046}, 0x20004841) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000033c0)={0x0, 0x0}, &(0x7f0000003400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000003e80)=@broute={'broute\x00', 0x20, 0x6, 0x86c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000003600], 0x0, &(0x7f0000003380), &(0x7f0000003600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x1e, 0xa, 0x8, 'team_slave_0\x00', 'dvmrp0\x00', 'nicvf0\x00', 'lo\x00', @empty, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x19e, 0x1ce, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8001, 'system_u:object_r:clock_device_t:s0\x00'}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xf65}}}}, {0x5, 0x44, 0x9200, 'syzkaller1\x00', 'ipvlan0\x00', 'bond_slave_0\x00', 'veth0_to_team\x00', @random="6019863d45ca", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0xff, 0x0, 0x467d8d5afa1d85d7, 0xff], 0x6e, 0xe6, 0x136, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbda, 0x6, 0x7, 0x0, 0x0, "f5026712c6b56fef00f4296c7751794b4a7056a611b122f7fb95735bae9ed6e8165af8fc0dfb847218e0d736afd1d6f99373be5b4dbdc6ec12f4e86b408dd874"}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x101}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x0, 0xf6, 'bond_slave_1\x00', 'ip6tnl0\x00', 'veth0_to_bond\x00', 'sit0\x00', @link_local, [0x0, 0xff, 0xff, 0xe0410443e77ed234], @random="4eb9f4149641", [0x0, 0x0, 0xff], 0xde, 0x10e, 0x13e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x1c12f7a1, 0x100000001, 0x0, 0x2}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x8001}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x5, 0x9, 0x890d, 'bond_slave_0\x00', 'erspan0\x00', 'syz_tun\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff], 0xee, 0xee, 0x11e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x101}, {0x7ff}], 0x1, 0x2}}}, @time={{'time\x00', 0x0, 0x18}, {{0x1e, 0x56, 0x136a0, 0xf630, 0x7, 0x7f, 0x3}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x4, 0x0, 0x2, [{0x9, 0x14, 0x6558, 'pim6reg1\x00', 'caif0\x00', 'veth0_macvtap\x00', 'ip6erspan0\x00', @multicast, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7f], @remote, [0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xa3, 0x12b, 0xfff, 0x0, 0x0, "ebe0b176d524b92dd5b2be30dbce1bde61d60517ecbefe60ebc925f823e6f75953793cc1775b6127200ce8f07d80804b4c3921a60d0d8feab7a9a48c103add18"}}}], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 0xfffffffffffffffe}}}}, {0x5, 0x40, 0x6, 'pimreg0\x00', 'sit0\x00', 'dvmrp1\x00', 'bond_slave_0\x00', @remote, [0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0x0, 0xff, 0xff, 0xff, 0xff], 0xfe, 0xfe, 0x12e, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'sip-20000\x00'}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r15, 0x0, 0x0, 0x0, 0x1, 0x3}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}]}, 0x8e4) 1.076259844s ago: executing program 1 (id=13766): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8936, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x4, [@enum={0xf, 0x6, 0x0, 0x6, 0x4, [{0x1, 0x44c806ad}, {0x0, 0x4}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x7ff}, {0xa, 0x5}]}, @fwd={0xb}, @datasec={0xc, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x8, 0x9}, {0x4, 0xffffff22, 0x1}], 'w'}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x8}, {0xd, 0x1}, {0xf, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7}}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x51]}}, &(0x7f00000003c0)=""/252, 0xec, 0xfc, 0x0, 0x9}, 0x28) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x101, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x18}}], 0x1, 0x40000000) 971.324014ms ago: executing program 1 (id=13767): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000100)=0xfffffffe, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r4, 0x1}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESOCT], 0xec}, 0x1, 0x0, 0x0, 0x8}, 0x20041) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0xce23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 819.563389ms ago: executing program 8 (id=13768): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x4, 0x2c00, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, 0x0, 0x10002) 684.936587ms ago: executing program 8 (id=13769): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xb0}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="340a216ad143d64e39fe7500010029bafc526fda29bcb20004c87617520699ebf084ea8f118e2fda0bbb2b540e623b4f942ed138387e6c5f99927a2217075d50075aa83765e6b537b747c0116ebb3f675bf811", @ANYRES32=0x0, @ANYBLOB="08000800410400000f000200fe8000000000000000000000000000bb"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r4, 0x11, 0x70bd26, 0x4, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x0) 606.533042ms ago: executing program 6 (id=13770): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x10, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0xfffffffe, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 443.459217ms ago: executing program 4 (id=13771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200020000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 416.595812ms ago: executing program 4 (id=13772): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 410.220331ms ago: executing program 8 (id=13773): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r1, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 300.208639ms ago: executing program 8 (id=13774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000003040)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x50) 123.670944ms ago: executing program 6 (id=13775): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xa0, 0x7, 0x1, 0x0, "ca17c536f9c005749608148103201770eb53697b7d0c92e0c590fc994abdbe5c1fea0f75240e432df0833801d949c91eeeafed1a3c7527465ca840168ae02454f602349a38f8d3ef08115a6fd0f37e48fbea6243d3065ca175d2144a3f25a52215ce41ac1a8fff169a85086fd4c875e7b26fbcc34b23c6290cef4cf58ee3d40d5ea8c41ccb41e7a75c572bcd23811910d70c784f9a445bdc49ceab74"}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x114}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (rerun: 32) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf253a00000008000300925560ac71075e7b0d9519eb4f657e45f41bf7eb3b55f397a438d9ff841a8c524b2d64bf966072084fe27e62d8844955631d30172b8d13fc547da80cae52dbbc54c25820b2c98557f8a64dbcad441b0351baafec8d222084c4ada4b9fac36e8f1ddef5a73d5e8b7aa1", @ANYRES32=r4, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x40001) 0s ago: executing program 6 (id=13776): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "1fbabdae000000000000080000000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) shutdown(0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x40000000, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, {0xa, 0x4e20, 0x400, @private0, 0x59d1}, 0x1, {[0x6, 0x5, 0x5, 0x1, 0x3, 0x2, 0x796, 0x4]}}, 0x5c) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) kernel console output (not intermixed with test programs): 09.636672][T14064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.673879][T14064] CPU: 1 UID: 0 PID: 14064 Comm: syz.7.12820 Not tainted syzkaller #0 PREEMPT(full) [ 1109.673905][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1109.673925][T14064] Call Trace: [ 1109.673934][T14064] [ 1109.673942][T14064] dump_stack_lvl+0xe8/0x150 [ 1109.673978][T14064] should_fail_ex+0x40c/0x560 [ 1109.674005][T14064] _copy_from_user+0x2d/0xb0 [ 1109.674033][T14064] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1109.674070][T14064] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 1109.674106][T14064] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1109.674139][T14064] ? rcu_is_watching+0x15/0xb0 [ 1109.674166][T14064] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1109.674193][T14064] ? alloc_pages_mpol+0x24a/0x380 [ 1109.674224][T14064] ip_generic_getfrag+0x149/0x2d0 [ 1109.674253][T14064] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1109.674274][T14064] ? raw6_getfrag+0x116/0x3a0 [ 1109.674298][T14064] ? skb_page_frag_refill+0x119/0x460 [ 1109.674326][T14064] __ip6_append_data+0x241e/0x40c0 [ 1109.674370][T14064] ? __pfx_raw6_getfrag+0x10/0x10 [ 1109.674420][T14064] ? __pfx___ip6_append_data+0x10/0x10 [ 1109.674444][T14064] ? ip6_setup_cork+0x547/0xf60 [ 1109.674467][T14064] ? ip6_append_data+0x1a6/0x270 [ 1109.674491][T14064] ip6_append_data+0x108/0x270 [ 1109.674514][T14064] ? __pfx_raw6_getfrag+0x10/0x10 [ 1109.674541][T14064] rawv6_sendmsg+0x1298/0x18c0 [ 1109.674582][T14064] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1109.674638][T14064] ? sock_rps_record_flow+0x19/0x350 [ 1109.674665][T14064] ? inet_sendmsg+0x298/0x320 [ 1109.674692][T14064] ? __pfx_inet_sendmsg+0x10/0x10 [ 1109.674714][T14064] sock_sendmsg_nosec+0x10e/0x180 [ 1109.674739][T14064] ____sys_sendmsg+0x54e/0x850 [ 1109.674771][T14064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1109.674809][T14064] ? import_iovec+0x73/0xa0 [ 1109.674839][T14064] ___sys_sendmsg+0x2a5/0x360 [ 1109.674866][T14064] ? __lock_acquire+0x683/0x2cf0 [ 1109.674895][T14064] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.674965][T14064] ? __fget_files+0x2a/0x420 [ 1109.674989][T14064] ? __fget_files+0x3a2/0x420 [ 1109.675022][T14064] __x64_sys_sendmsg+0x1b1/0x290 [ 1109.675053][T14064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1109.675096][T14064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.675117][T14064] do_syscall_64+0x174/0x580 [ 1109.675141][T14064] ? trace_irq_disable+0x3b/0x140 [ 1109.675166][T14064] ? clear_bhb_loop+0x40/0x90 [ 1109.675190][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.675209][T14064] RIP: 0033:0x7f3619b9de59 [ 1109.675228][T14064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.675245][T14064] RSP: 002b:00007f361aaf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.675266][T14064] RAX: ffffffffffffffda RBX: 00007f3619e25fa0 RCX: 00007f3619b9de59 [ 1109.675280][T14064] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 1109.675292][T14064] RBP: 00007f361aaf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.675304][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.675316][T14064] R13: 00007f3619e26038 R14: 00007f3619e25fa0 R15: 00007ffe75ceba98 [ 1109.675348][T14064] [ 1109.686478][T14068] netlink: 'syz.6.12822': attribute type 1 has an invalid length. [ 1109.725491][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12823'. [ 1109.960109][T14075] IPv6: NLM_F_CREATE should be specified when creating new route [ 1110.032068][T14074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1110.145044][T14087] netlink: 'syz.0.12824': attribute type 18 has an invalid length. [ 1110.200219][T14092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1110.225629][T14068] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1110.281296][T14081] netlink: 'syz.1.12823': attribute type 14 has an invalid length. [ 1110.436609][ T1131] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.457614][ T1131] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.478224][T14102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1110.530701][ T14] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.534293][T14102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12831'. [ 1110.570077][ T14] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.615149][T14109] FAULT_INJECTION: forcing a failure. [ 1110.615149][T14109] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.660588][T14109] CPU: 1 UID: 0 PID: 14109 Comm: syz.7.12833 Not tainted syzkaller #0 PREEMPT(full) [ 1110.660614][T14109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1110.660626][T14109] Call Trace: [ 1110.660634][T14109] [ 1110.660642][T14109] dump_stack_lvl+0xe8/0x150 [ 1110.660675][T14109] should_fail_ex+0x40c/0x560 [ 1110.660702][T14109] should_failslab+0xa8/0x100 [ 1110.660733][T14109] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1110.660755][T14109] ? kstrdup+0x81/0x100 [ 1110.660780][T14109] ? __kernfs_new_node+0xe6/0x980 [ 1110.660806][T14109] ? __kernfs_new_node+0xe6/0x980 [ 1110.660838][T14109] __kernfs_new_node+0xe6/0x980 [ 1110.660874][T14109] ? __pfx___kernfs_new_node+0x10/0x10 [ 1110.660908][T14109] ? kernfs_root+0x1c/0x230 [ 1110.660939][T14109] ? kernfs_root+0x1c/0x230 [ 1110.660962][T14109] ? kernfs_root+0x1c/0x230 [ 1110.660982][T14109] ? kernfs_root+0x1c/0x230 [ 1110.661009][T14109] kernfs_new_node+0xea/0x140 [ 1110.661040][T14109] kernfs_create_link+0xa7/0x200 [ 1110.661064][T14109] sysfs_do_create_link_sd+0x83/0x110 [ 1110.661090][T14109] device_add_class_symlinks+0x1cf/0x240 [ 1110.661125][T14109] device_add+0x467/0xb80 [ 1110.661155][T14109] rfkill_register+0x170/0x9b0 [ 1110.661396][T14109] nfc_register_device+0x13d/0x370 [ 1110.661430][T14109] nci_register_device+0x8a2/0xa00 [ 1110.661467][T14109] ? __pfx_nci_register_device+0x10/0x10 [ 1110.661493][T14109] ? __raw_spin_lock_init+0x45/0x100 [ 1110.661519][T14109] ? __raw_spin_lock_init+0x45/0x100 [ 1110.661541][T14109] ? __init_waitqueue_head+0xa8/0x150 [ 1110.661566][T14109] virtual_ncidev_open+0x129/0x1a0 [ 1110.661590][T14109] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1110.661611][T14109] misc_open+0x2d5/0x350 [ 1110.661641][T14109] chrdev_open+0x4d9/0x600 [ 1110.661666][T14109] ? __pfx_chrdev_open+0x10/0x10 [ 1110.661685][T14109] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1110.661722][T14109] ? __pfx_chrdev_open+0x10/0x10 [ 1110.661741][T14109] do_dentry_open+0x816/0x1380 [ 1110.661777][T14109] vfs_open+0x3b/0x340 [ 1110.661798][T14109] ? path_openat+0x2e2d/0x3830 [ 1110.661829][T14109] path_openat+0x2e44/0x3830 [ 1110.661862][T14109] ? kasan_save_track+0x3e/0x80 [ 1110.661894][T14109] ? do_sys_openat2+0xcc/0x200 [ 1110.661918][T14109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.661962][T14109] do_file_open+0x23e/0x4a0 [ 1110.661997][T14109] ? __pfx_do_file_open+0x10/0x10 [ 1110.662050][T14109] ? _raw_spin_unlock+0x28/0x50 [ 1110.662072][T14109] ? alloc_fd+0x651/0x6c0 [ 1110.662106][T14109] do_sys_openat2+0x115/0x200 [ 1110.662134][T14109] ? __pfx_do_sys_openat2+0x10/0x10 [ 1110.662159][T14109] ? ksys_write+0x242/0x270 [ 1110.662192][T14109] ? __pfx_ksys_write+0x10/0x10 [ 1110.662222][T14109] __x64_sys_openat+0x138/0x170 [ 1110.662246][T14109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.662266][T14109] do_syscall_64+0x174/0x580 [ 1110.662293][T14109] ? clear_bhb_loop+0x40/0x90 [ 1110.662317][T14109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.662335][T14109] RIP: 0033:0x7f3619b9de59 [ 1110.662355][T14109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.662371][T14109] RSP: 002b:00007f361aaf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1110.662393][T14109] RAX: ffffffffffffffda RBX: 00007f3619e25fa0 RCX: 00007f3619b9de59 [ 1110.662407][T14109] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1110.662420][T14109] RBP: 00007f361aaf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.662430][T14109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1110.662442][T14109] R13: 00007f3619e26038 R14: 00007f3619e25fa0 R15: 00007ffe75ceba98 [ 1110.662475][T14109] [ 1111.091323][T14115] tipc: Enabling of bearer rejected, failed to enable media [ 1111.191175][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12836'. [ 1111.468724][T14134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12840'. [ 1112.029007][T14158] syzkaller0: entered promiscuous mode [ 1112.050261][T14158] syzkaller0: entered allmulticast mode [ 1112.059634][T14160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.089107][T14158] FAULT_INJECTION: forcing a failure. [ 1112.089107][T14158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.090293][T14159] FAULT_INJECTION: forcing a failure. [ 1112.090293][T14159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.138403][T14158] CPU: 0 UID: 0 PID: 14158 Comm: syz.1.12850 Not tainted syzkaller #0 PREEMPT(full) [ 1112.138432][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1112.138444][T14158] Call Trace: [ 1112.138452][T14158] [ 1112.138460][T14158] dump_stack_lvl+0xe8/0x150 [ 1112.138494][T14158] should_fail_ex+0x40c/0x560 [ 1112.138521][T14158] _copy_from_user+0x2d/0xb0 [ 1112.138547][T14158] ___sys_sendmsg+0x1c6/0x360 [ 1112.138572][T14158] ? __lock_acquire+0x683/0x2cf0 [ 1112.138598][T14158] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.138655][T14158] ? __fget_files+0x2a/0x420 [ 1112.138676][T14158] ? __fget_files+0x3a2/0x420 [ 1112.138709][T14158] __x64_sys_sendmsg+0x1b1/0x290 [ 1112.138739][T14158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1112.138784][T14158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.138805][T14158] do_syscall_64+0x174/0x580 [ 1112.138829][T14158] ? trace_irq_disable+0x3b/0x140 [ 1112.138852][T14158] ? clear_bhb_loop+0x40/0x90 [ 1112.138876][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.138895][T14158] RIP: 0033:0x7fcd85f9de59 [ 1112.138914][T14158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.138930][T14158] RSP: 002b:00007fcd86dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1112.138951][T14158] RAX: ffffffffffffffda RBX: 00007fcd86225fa0 RCX: 00007fcd85f9de59 [ 1112.138965][T14158] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1112.138977][T14158] RBP: 00007fcd86dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.138989][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.139001][T14158] R13: 00007fcd86226038 R14: 00007fcd86225fa0 R15: 00007ffd06111b88 [ 1112.139032][T14158] [ 1112.162832][T14159] CPU: 1 UID: 0 PID: 14159 Comm: syz.6.12852 Not tainted syzkaller #0 PREEMPT(full) [ 1112.162858][T14159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1112.162869][T14159] Call Trace: [ 1112.162877][T14159] [ 1112.162886][T14159] dump_stack_lvl+0xe8/0x150 [ 1112.162919][T14159] should_fail_ex+0x40c/0x560 [ 1112.162945][T14159] _copy_from_iter+0x1d3/0x1660 [ 1112.162976][T14159] ? _copy_from_iter+0x21b/0x1660 [ 1112.163002][T14159] ? __pfx__copy_from_iter+0x10/0x10 [ 1112.163030][T14159] ? __pfx__copy_from_iter+0x10/0x10 [ 1112.163061][T14159] copy_page_from_iter+0x219/0x2d0 [ 1112.163089][T14159] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1112.163130][T14159] tun_get_user+0x1520/0x4370 [ 1112.163170][T14159] ? aa_file_perm+0x18b/0x15f0 [ 1112.163194][T14159] ? aa_file_perm+0x4ed/0x15f0 [ 1112.163213][T14159] ? __pfx_tun_get_user+0x10/0x10 [ 1112.163238][T14159] ? __lock_acquire+0x683/0x2cf0 [ 1112.163266][T14159] ? kstrtoull+0x12f/0x1d0 [ 1112.163294][T14159] ? ref_tracker_alloc+0x341/0x4b0 [ 1112.163314][T14159] ? get_pid_task+0x20/0x1f0 [ 1112.163341][T14159] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1112.163365][T14159] ? tun_get+0x1c/0x2f0 [ 1112.163388][T14159] ? tun_get+0x1c/0x2f0 [ 1112.163416][T14159] ? tun_get+0x1c/0x2f0 [ 1112.163437][T14159] ? tun_get+0x1c/0x2f0 [ 1112.163464][T14159] tun_chr_write_iter+0x113/0x200 [ 1112.163490][T14159] vfs_write+0x612/0xba0 [ 1112.163525][T14159] ? __pfx_vfs_write+0x10/0x10 [ 1112.163562][T14159] ? __fget_files+0x2a/0x420 [ 1112.163594][T14159] ksys_write+0x150/0x270 [ 1112.163623][T14159] ? __pfx_ksys_write+0x10/0x10 [ 1112.163658][T14159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.163678][T14159] do_syscall_64+0x174/0x580 [ 1112.163709][T14159] ? trace_irq_disable+0x3b/0x140 [ 1112.163732][T14159] ? clear_bhb_loop+0x40/0x90 [ 1112.163755][T14159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.163773][T14159] RIP: 0033:0x7f73ffb9de59 [ 1112.163791][T14159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.163808][T14159] RSP: 002b:00007f7400a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1112.163827][T14159] RAX: ffffffffffffffda RBX: 00007f73ffe25fa0 RCX: 00007f73ffb9de59 [ 1112.163841][T14159] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000011 [ 1112.163856][T14159] RBP: 00007f7400a52090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.163868][T14159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.163879][T14159] R13: 00007f73ffe26038 R14: 00007f73ffe25fa0 R15: 00007ffe49db8158 [ 1112.163911][T14159] [ 1113.071802][T14193] FAULT_INJECTION: forcing a failure. [ 1113.071802][T14193] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.182591][T14193] CPU: 1 UID: 0 PID: 14193 Comm: syz.0.12861 Not tainted syzkaller #0 PREEMPT(full) [ 1113.182619][T14193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1113.182634][T14193] Call Trace: [ 1113.182642][T14193] [ 1113.182650][T14193] dump_stack_lvl+0xe8/0x150 [ 1113.182685][T14193] should_fail_ex+0x40c/0x560 [ 1113.182712][T14193] should_failslab+0xa8/0x100 [ 1113.182742][T14193] __kmalloc_cache_noprof+0xa8/0x660 [ 1113.182765][T14193] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1113.182789][T14193] ? __kmalloc_cache_noprof+0x150/0x660 [ 1113.182812][T14193] ? sctp_add_bind_addr+0x8c/0x370 [ 1113.182833][T14193] ? sctp_add_bind_addr+0x8c/0x370 [ 1113.182860][T14193] sctp_add_bind_addr+0x8c/0x370 [ 1113.182888][T14193] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1113.182913][T14193] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1113.182938][T14193] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1113.182966][T14193] ? sctp_v4_is_any+0x35/0x60 [ 1113.182988][T14193] ? sctp_copy_one_addr+0x93/0x360 [ 1113.183015][T14193] sctp_bind_addr_copy+0xb3/0x3c0 [ 1113.183039][T14193] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1113.183074][T14193] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1113.183105][T14193] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1113.183140][T14193] ? __local_bh_enable_ip+0xd0/0x130 [ 1113.183161][T14193] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1113.183182][T14193] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1113.183212][T14193] sctp_sendmsg+0x159b/0x2d00 [ 1113.183255][T14193] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1113.183287][T14193] ? aa_sk_perm+0x6d5/0x900 [ 1113.183321][T14193] ? __might_fault+0xaf/0x130 [ 1113.183346][T14193] ? sock_rps_record_flow+0x19/0x350 [ 1113.183374][T14193] ? inet_sendmsg+0x298/0x320 [ 1113.183401][T14193] ? __pfx_inet_sendmsg+0x10/0x10 [ 1113.183423][T14193] sock_sendmsg_nosec+0x10e/0x180 [ 1113.183449][T14193] ____sys_sendmsg+0x54e/0x850 [ 1113.183489][T14193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1113.183526][T14193] ? import_iovec+0x73/0xa0 [ 1113.183557][T14193] ___sys_sendmsg+0x2a5/0x360 [ 1113.183582][T14193] ? __lock_acquire+0x683/0x2cf0 [ 1113.183614][T14193] ? __pfx____sys_sendmsg+0x10/0x10 [ 1113.183681][T14193] ? __fget_files+0x2a/0x420 [ 1113.183706][T14193] ? __fget_files+0x3a2/0x420 [ 1113.183742][T14193] __x64_sys_sendmsg+0x1b1/0x290 [ 1113.183773][T14193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1113.183822][T14193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.183844][T14193] do_syscall_64+0x174/0x580 [ 1113.183869][T14193] ? trace_irq_disable+0x3b/0x140 [ 1113.183892][T14193] ? clear_bhb_loop+0x40/0x90 [ 1113.183916][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.183935][T14193] RIP: 0033:0x7f2fc979de59 [ 1113.183953][T14193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.183970][T14193] RSP: 002b:00007f2fca6c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.183990][T14193] RAX: ffffffffffffffda RBX: 00007f2fc9a25fa0 RCX: 00007f2fc979de59 [ 1113.184005][T14193] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1113.184017][T14193] RBP: 00007f2fca6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.184029][T14193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1113.184040][T14193] R13: 00007f2fc9a26038 R14: 00007f2fc9a25fa0 R15: 00007fffb5477cc8 [ 1113.184073][T14193] [ 1113.940277][T14219] syzkaller0: entered promiscuous mode [ 1113.946066][T14219] syzkaller0: entered allmulticast mode [ 1113.980103][T14222] __nla_validate_parse: 3 callbacks suppressed [ 1113.980121][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12867'. [ 1114.044102][T14231] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12873'. [ 1114.073960][T14232] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12872'. [ 1115.161724][ T4764] page_pool_release_retry() stalled pool shutdown: id 86, 1 inflight 908 sec [ 1117.519081][T14229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1117.538857][T14231] FAULT_INJECTION: forcing a failure. [ 1117.538857][T14231] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.572428][T14231] CPU: 0 UID: 0 PID: 14231 Comm: syz.1.12873 Not tainted syzkaller #0 PREEMPT(full) [ 1117.572456][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.572468][T14231] Call Trace: [ 1117.572476][T14231] [ 1117.572485][T14231] dump_stack_lvl+0xe8/0x150 [ 1117.572521][T14231] should_fail_ex+0x40c/0x560 [ 1117.572549][T14231] should_failslab+0xa8/0x100 [ 1117.572579][T14231] __kmalloc_cache_noprof+0xa8/0x660 [ 1117.572604][T14231] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1117.572623][T14231] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1117.572648][T14231] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1117.572671][T14231] notifier_call_chain+0x1a5/0x3d0 [ 1117.572707][T14231] blocking_notifier_call_chain+0x6a/0x90 [ 1117.572736][T14231] netlink_release+0x11f8/0x1a80 [ 1117.572773][T14231] ? netlink_release+0x106/0x1a80 [ 1117.572802][T14231] ? __pfx_netlink_release+0x10/0x10 [ 1117.572827][T14231] ? down_write+0x16d/0x200 [ 1117.572855][T14231] ? __pfx_down_write+0x10/0x10 [ 1117.572891][T14231] sock_close+0xad/0x220 [ 1117.572912][T14231] ? __pfx_sock_close+0x10/0x10 [ 1117.572931][T14231] __fput+0x418/0xa50 [ 1117.572971][T14231] task_work_run+0x1d9/0x270 [ 1117.573002][T14231] ? __pfx_task_work_run+0x10/0x10 [ 1117.573032][T14231] ? kick_process+0xeb/0x160 [ 1117.573065][T14231] get_signal+0x1181/0x12c0 [ 1117.573099][T14231] ? __fput_deferred+0x216/0x380 [ 1117.573129][T14231] arch_do_signal_or_restart+0xbb/0x860 [ 1117.573158][T14231] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1117.573180][T14231] ? __x64_sys_sendmsg+0x25d/0x290 [ 1117.573228][T14231] exit_to_user_mode_loop+0x104/0x730 [ 1117.573252][T14231] ? rcu_is_watching+0x15/0xb0 [ 1117.573281][T14231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.573303][T14231] do_syscall_64+0x353/0x580 [ 1117.573326][T14231] ? trace_irq_disable+0x3b/0x140 [ 1117.573349][T14231] ? clear_bhb_loop+0x40/0x90 [ 1117.573373][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.573393][T14231] RIP: 0033:0x7fcd85f9de59 [ 1117.573411][T14231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.573428][T14231] RSP: 002b:00007fcd86dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.573448][T14231] RAX: 0000000000000090 RBX: 00007fcd86225fa0 RCX: 00007fcd85f9de59 [ 1117.573460][T14231] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1117.573472][T14231] RBP: 00007fcd86dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.573484][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.573495][T14231] R13: 00007fcd86226038 R14: 00007fcd86225fa0 R15: 00007ffd06111b88 [ 1117.573525][T14231] [ 1118.105991][T14245] netlink: 'syz.1.12878': attribute type 1 has an invalid length. [ 1118.149695][T14245] bond1: entered promiscuous mode [ 1118.164504][T14245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1118.273380][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1118.374008][T14245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1118.394683][T14245] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1118.417371][T14245] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1118.449294][T14245] bond1: (slave vti0): making interface the new active one [ 1118.457326][T14245] vti0: entered promiscuous mode [ 1118.464479][T14245] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1118.485594][T14264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1118.540032][T14264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12885'. [ 1118.924640][T14286] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12887'. [ 1119.142875][ T1131] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1119.226906][T14293] bond0: Error: CAN devices cannot be enslaved [ 1119.437629][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12897'. [ 1120.203459][T14342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12905'. [ 1120.230476][T14334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1121.636822][T14286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1122.199904][T14388] sctp: [Deprecated]: syz.7.12911 (pid 14388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1122.199904][T14388] Use struct sctp_sack_info instead [ 1124.851097][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12911'. [ 1125.035643][T14404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12912'. [ 1125.058903][T14411] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1125.273772][T14420] syzkaller0: entered promiscuous mode [ 1125.282676][T14420] syzkaller0: entered allmulticast mode [ 1125.354204][T14425] siw: device registration error -23 [ 1125.376818][T14420] tipc: Started in network mode [ 1125.378997][T14430] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12923'. [ 1125.400401][T14420] tipc: Node identity 523280fadbc5, cluster identity 4711 [ 1125.416634][T14420] tipc: Enabled bearer , priority 0 [ 1125.443203][T14419] tipc: Resetting bearer [ 1125.506292][T14435] netlink: 'syz.0.12925': attribute type 21 has an invalid length. [ 1125.526811][T14437] netlink: 'syz.0.12925': attribute type 21 has an invalid length. [ 1125.541032][T14419] tipc: Disabling bearer [ 1125.557440][T14439] netlink: 'syz.1.12926': attribute type 9 has an invalid length. [ 1125.571805][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12925'. [ 1125.583718][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12925'. [ 1125.677365][T14446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12929'. [ 1125.897715][T14457] FAULT_INJECTION: forcing a failure. [ 1125.897715][T14457] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.921934][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12934'. [ 1125.936540][T14457] CPU: 0 UID: 0 PID: 14457 Comm: syz.7.12933 Not tainted syzkaller #0 PREEMPT(full) [ 1125.936566][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1125.936577][T14457] Call Trace: [ 1125.936586][T14457] [ 1125.936594][T14457] dump_stack_lvl+0xe8/0x150 [ 1125.936626][T14457] should_fail_ex+0x40c/0x560 [ 1125.936653][T14457] should_failslab+0xa8/0x100 [ 1125.936683][T14457] __kmalloc_cache_noprof+0xa8/0x660 [ 1125.936706][T14457] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1125.936729][T14457] ? __kmalloc_cache_noprof+0x150/0x660 [ 1125.936752][T14457] ? sctp_add_bind_addr+0x8c/0x370 [ 1125.936772][T14457] ? sctp_add_bind_addr+0x8c/0x370 [ 1125.936801][T14457] sctp_add_bind_addr+0x8c/0x370 [ 1125.936828][T14457] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1125.936854][T14457] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1125.936878][T14457] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1125.936906][T14457] ? sctp_v4_is_any+0x35/0x60 [ 1125.936928][T14457] ? sctp_copy_one_addr+0x93/0x360 [ 1125.936954][T14457] sctp_bind_addr_copy+0xb3/0x3c0 [ 1125.936978][T14457] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1125.937012][T14457] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1125.937039][T14457] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1125.937064][T14457] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1125.937088][T14457] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1125.937112][T14457] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1125.937140][T14457] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1125.937161][T14457] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1125.937192][T14457] sctp_sendmsg+0x159b/0x2d00 [ 1125.937233][T14457] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1125.937266][T14457] ? aa_sk_perm+0x6d5/0x900 [ 1125.937299][T14457] ? __might_fault+0xaf/0x130 [ 1125.937321][T14457] ? sock_rps_record_flow+0x19/0x350 [ 1125.937351][T14457] ? inet_sendmsg+0x298/0x320 [ 1125.937376][T14457] ? __pfx_inet_sendmsg+0x10/0x10 [ 1125.937395][T14457] sock_sendmsg_nosec+0x10e/0x180 [ 1125.937418][T14457] __sys_sendto+0x408/0x5a0 [ 1125.937449][T14457] ? ksys_write+0x1e6/0x270 [ 1125.937478][T14457] ? __pfx___sys_sendto+0x10/0x10 [ 1125.937497][T14457] ? __mutex_unlock_slowpath+0x731/0x900 [ 1125.937549][T14457] ? __pfx_ksys_write+0x10/0x10 [ 1125.937581][T14457] __x64_sys_sendto+0xde/0x100 [ 1125.937605][T14457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.937625][T14457] do_syscall_64+0x174/0x580 [ 1125.937647][T14457] ? trace_irq_disable+0x3b/0x140 [ 1125.937668][T14457] ? clear_bhb_loop+0x40/0x90 [ 1125.937691][T14457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.937708][T14457] RIP: 0033:0x7f3619b9de59 [ 1125.937726][T14457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.937741][T14457] RSP: 002b:00007f361aaf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1125.937760][T14457] RAX: ffffffffffffffda RBX: 00007f3619e25fa0 RCX: 00007f3619b9de59 [ 1125.937773][T14457] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1125.937785][T14457] RBP: 00007f361aaf0090 R08: 0000200000000240 R09: 000000000000001c [ 1125.937797][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.937807][T14457] R13: 00007f3619e26038 R14: 00007f3619e25fa0 R15: 00007ffe75ceba98 [ 1125.937836][T14457] [ 1125.941560][T14460] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12934'. [ 1126.151709][T14466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12935'. [ 1126.328918][T14464] syzkaller1: entered promiscuous mode [ 1126.339587][T14464] syzkaller1: entered allmulticast mode [ 1126.358041][T14466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12935'. [ 1126.393715][T14469] sock: sock_set_timeout: `syz.7.12936' (pid 14469) tries to set negative timeout [ 1126.578782][T14476] syzkaller0: entered promiscuous mode [ 1126.606314][T14476] syzkaller0: entered allmulticast mode [ 1127.474880][T14522] netlink: 'syz.6.12955': attribute type 1 has an invalid length. [ 1127.538617][T14522] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1127.604642][T14526] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 1127.855343][T14540] netlink: 'syz.0.12959': attribute type 12 has an invalid length. [ 1131.038351][T14550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1131.610594][T14609] __nla_validate_parse: 6 callbacks suppressed [ 1131.610614][T14609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12982'. [ 1132.720917][T14658] "syz.1.12999" (14658) uses obsolete ecb(arc4) skcipher [ 1132.948340][T14672] FAULT_INJECTION: forcing a failure. [ 1132.948340][T14672] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.983806][T14672] CPU: 1 UID: 0 PID: 14672 Comm: syz.0.13007 Not tainted syzkaller #0 PREEMPT(full) [ 1132.983831][T14672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1132.983842][T14672] Call Trace: [ 1132.983850][T14672] [ 1132.983859][T14672] dump_stack_lvl+0xe8/0x150 [ 1132.983892][T14672] should_fail_ex+0x40c/0x560 [ 1132.983917][T14672] ? __rhashtable_init_noprof+0x545/0xaf0 [ 1132.983943][T14672] should_failslab+0xa8/0x100 [ 1132.983972][T14672] __kvmalloc_node_noprof+0x176/0x860 [ 1132.984001][T14672] ? __rhashtable_init_noprof+0x545/0xaf0 [ 1132.984031][T14672] __rhashtable_init_noprof+0x545/0xaf0 [ 1132.984059][T14672] __rhltable_init_noprof+0x26/0x70 [ 1132.984084][T14672] nf_tables_newtable+0x6a7/0x1950 [ 1132.984212][T14672] nfnetlink_rcv+0x1288/0x28c0 [ 1132.984276][T14672] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1132.984319][T14672] ? ref_tracker_free+0x689/0x830 [ 1132.984368][T14672] ? skb_clone+0x246/0x3a0 [ 1132.984400][T14672] ? __netlink_deliver_tap+0x811/0x860 [ 1132.984438][T14672] ? netlink_deliver_tap+0x2e/0x1b0 [ 1132.984465][T14672] ? netlink_deliver_tap+0x2e/0x1b0 [ 1132.984499][T14672] netlink_unicast+0x7bb/0x940 [ 1132.984537][T14672] netlink_sendmsg+0x813/0xb40 [ 1132.984575][T14672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1132.984609][T14672] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1132.984641][T14672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1132.984668][T14672] sock_sendmsg_nosec+0x13a/0x180 [ 1132.984694][T14672] ____sys_sendmsg+0x54e/0x850 [ 1132.984728][T14672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1132.984765][T14672] ? import_iovec+0x73/0xa0 [ 1132.984796][T14672] ___sys_sendmsg+0x2a5/0x360 [ 1132.984822][T14672] ? __lock_acquire+0x683/0x2cf0 [ 1132.984853][T14672] ? __pfx____sys_sendmsg+0x10/0x10 [ 1132.984919][T14672] ? __fget_files+0x2a/0x420 [ 1132.984943][T14672] ? __fget_files+0x3a2/0x420 [ 1132.984978][T14672] __x64_sys_sendmsg+0x1b1/0x290 [ 1132.985009][T14672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1132.985055][T14672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.985077][T14672] do_syscall_64+0x174/0x580 [ 1132.985102][T14672] ? trace_irq_disable+0x3b/0x140 [ 1132.985126][T14672] ? clear_bhb_loop+0x40/0x90 [ 1132.985150][T14672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.985170][T14672] RIP: 0033:0x7f2fc979de59 [ 1132.985188][T14672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.985206][T14672] RSP: 002b:00007f2fca6c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1132.985227][T14672] RAX: ffffffffffffffda RBX: 00007f2fc9a25fa0 RCX: 00007f2fc979de59 [ 1132.985242][T14672] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1132.985255][T14672] RBP: 00007f2fca6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.985267][T14672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.985278][T14672] R13: 00007f2fc9a26038 R14: 00007f2fc9a25fa0 R15: 00007fffb5477cc8 [ 1132.985309][T14672] [ 1133.424979][T14677] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13008'. [ 1133.616349][T14690] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13014'. [ 1133.676325][T14686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.702408][T14686] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1133.761554][T14688] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13012'. [ 1133.787675][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13012'. [ 1133.798724][T14686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1133.823256][T14686] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1133.991895][T14686] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1134.010518][T14686] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1134.065394][T14707] netlink: 'syz.1.13020': attribute type 21 has an invalid length. [ 1134.158337][T14686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1134.175096][T14686] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1134.197108][T14712] bond1: entered allmulticast mode [ 1134.199303][T14686] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1134.205483][T14712] vti0: entered allmulticast mode [ 1134.239781][T14686] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1134.241193][T14712] lo: entered allmulticast mode [ 1134.317638][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13024'. [ 1134.363624][T14714] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13023'. [ 1134.434122][T14711] bond1: left allmulticast mode [ 1134.439176][T14711] vti0: left allmulticast mode [ 1134.581955][T14686] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1134.607586][T14721] sctp: [Deprecated]: syz.6.13025 (pid 14721) Use of int in maxseg socket option. [ 1134.607586][T14721] Use struct sctp_assoc_value instead [ 1134.630046][T14686] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 1134.684042][T14725] syzkaller0: entered promiscuous mode [ 1134.691997][T14725] syzkaller0: entered allmulticast mode [ 1134.866691][T14729] syzkaller0: entered promiscuous mode [ 1134.889493][T14729] syzkaller0: entered allmulticast mode [ 1138.747754][ T188] IPVS: starting estimator thread 0... [ 1138.852389][T14768] IPVS: using max 34 ests per chain, 81600 per kthread [ 1138.865744][T14775] FAULT_INJECTION: forcing a failure. [ 1138.865744][T14775] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.897404][T14775] CPU: 0 UID: 0 PID: 14775 Comm: syz.7.13037 Not tainted syzkaller #0 PREEMPT(full) [ 1138.897430][T14775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1138.897442][T14775] Call Trace: [ 1138.897450][T14775] [ 1138.897458][T14775] dump_stack_lvl+0xe8/0x150 [ 1138.897492][T14775] should_fail_ex+0x40c/0x560 [ 1138.897519][T14775] should_failslab+0xa8/0x100 [ 1138.897546][T14775] __kmalloc_cache_noprof+0xa8/0x660 [ 1138.897568][T14775] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1138.897592][T14775] ? __kmalloc_cache_noprof+0x150/0x660 [ 1138.897613][T14775] ? sctp_add_bind_addr+0x8c/0x370 [ 1138.897633][T14775] ? sctp_add_bind_addr+0x8c/0x370 [ 1138.897661][T14775] sctp_add_bind_addr+0x8c/0x370 [ 1138.897686][T14775] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1138.897709][T14775] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1138.897729][T14775] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1138.897753][T14775] ? sctp_v4_is_any+0x35/0x60 [ 1138.897773][T14775] ? sctp_copy_one_addr+0x93/0x360 [ 1138.897797][T14775] sctp_bind_addr_copy+0xb3/0x3c0 [ 1138.897842][T14775] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1138.897882][T14775] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1138.897912][T14775] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1138.897937][T14775] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1138.897962][T14775] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1138.897985][T14775] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1138.898016][T14775] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1138.898038][T14775] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1138.898067][T14775] sctp_sendmsg+0x159b/0x2d00 [ 1138.898109][T14775] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1138.898142][T14775] ? aa_sk_perm+0x6d5/0x900 [ 1138.898176][T14775] ? __might_fault+0xaf/0x130 [ 1138.898203][T14775] ? sock_rps_record_flow+0x19/0x350 [ 1138.898232][T14775] ? inet_sendmsg+0x298/0x320 [ 1138.898258][T14775] ? __pfx_inet_sendmsg+0x10/0x10 [ 1138.898281][T14775] sock_sendmsg_nosec+0x10e/0x180 [ 1138.898306][T14775] __sys_sendto+0x408/0x5a0 [ 1138.898330][T14775] ? ksys_write+0x1e6/0x270 [ 1138.898361][T14775] ? __pfx___sys_sendto+0x10/0x10 [ 1138.898383][T14775] ? __mutex_unlock_slowpath+0x731/0x900 [ 1138.898438][T14775] ? __pfx_ksys_write+0x10/0x10 [ 1138.898469][T14775] __x64_sys_sendto+0xde/0x100 [ 1138.898495][T14775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.898517][T14775] do_syscall_64+0x174/0x580 [ 1138.898540][T14775] ? trace_irq_disable+0x3b/0x140 [ 1138.898563][T14775] ? clear_bhb_loop+0x40/0x90 [ 1138.898585][T14775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.898604][T14775] RIP: 0033:0x7f3619b9de59 [ 1138.898622][T14775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.898639][T14775] RSP: 002b:00007f361aacf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1138.898659][T14775] RAX: ffffffffffffffda RBX: 00007f3619e26090 RCX: 00007f3619b9de59 [ 1138.898672][T14775] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 1138.898684][T14775] RBP: 00007f361aacf090 R08: 0000200000000240 R09: 0000000000000010 [ 1138.898697][T14775] R10: f1704a4122f681df R11: 0000000000000246 R12: 0000000000000002 [ 1138.898709][T14775] R13: 00007f3619e26128 R14: 00007f3619e26090 R15: 00007ffe75ceba98 [ 1138.898741][T14775] [ 1139.307534][T14779] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13038'. [ 1139.329044][T14779] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 1139.540173][T14789] syzkaller0: entered promiscuous mode [ 1139.585522][T14789] syzkaller0: entered allmulticast mode [ 1139.628923][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13046'. [ 1140.156822][T14806] netlink: 'syz.7.13048': attribute type 12 has an invalid length. [ 1140.172928][T14806] netlink: 'syz.7.13048': attribute type 29 has an invalid length. [ 1140.181229][T14806] netlink: 148 bytes leftover after parsing attributes in process `syz.7.13048'. [ 1140.191654][T14806] netlink: 'syz.7.13048': attribute type 1 has an invalid length. [ 1140.200162][T14806] netlink: 47 bytes leftover after parsing attributes in process `syz.7.13048'. [ 1140.393360][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13051'. [ 1143.984674][T14819] vlan2: entered allmulticast mode [ 1143.989865][T14819] bridge1: entered allmulticast mode [ 1144.004079][T14821] bridge1: port 1(erspan0) entered blocking state [ 1144.010725][T14821] bridge1: port 1(erspan0) entered disabled state [ 1144.019511][T14821] erspan0: entered allmulticast mode [ 1144.029565][T14821] erspan0: entered promiscuous mode [ 1144.045046][T14821] bridge1: port 1(erspan0) entered blocking state [ 1144.051619][T14821] bridge1: port 1(erspan0) entered forwarding state [ 1144.076885][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1144.213882][T14836] netlink: 'syz.7.13058': attribute type 4 has an invalid length. [ 1144.222872][T14833] netlink: 'syz.0.13055': attribute type 1 has an invalid length. [ 1144.357398][T14841] netlink: 'syz.4.13057': attribute type 3 has an invalid length. [ 1144.829512][T14876] netlink: 'syz.6.13069': attribute type 4 has an invalid length. [ 1144.933729][T14880] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13070'. [ 1145.039193][T14887] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1145.078228][T14883] syzkaller0: entered promiscuous mode [ 1145.096374][T14883] syzkaller0: entered allmulticast mode [ 1145.111682][T14890] syzkaller1: entered promiscuous mode [ 1145.125376][T14890] syzkaller1: entered allmulticast mode [ 1145.425763][T14905] syzkaller0: entered promiscuous mode [ 1145.440703][T14905] syzkaller0: entered allmulticast mode [ 1145.566985][T14915] netlink: 768 bytes leftover after parsing attributes in process `syz.6.13084'. [ 1145.574412][T14913] FAULT_INJECTION: forcing a failure. [ 1145.574412][T14913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.594039][T14913] CPU: 0 UID: 0 PID: 14913 Comm: syz.4.13083 Not tainted syzkaller #0 PREEMPT(full) [ 1145.594064][T14913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1145.594077][T14913] Call Trace: [ 1145.594085][T14913] [ 1145.594094][T14913] dump_stack_lvl+0xe8/0x150 [ 1145.594128][T14913] should_fail_ex+0x40c/0x560 [ 1145.594156][T14913] _copy_from_user+0x2d/0xb0 [ 1145.594185][T14913] kstrtouint_from_user+0xd6/0x180 [ 1145.594209][T14913] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1145.594250][T14913] proc_fail_nth_write+0x8e/0x210 [ 1145.594277][T14913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1145.594312][T14913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1145.594337][T14913] vfs_write+0x296/0xba0 [ 1145.594375][T14913] ? __pfx_vfs_write+0x10/0x10 [ 1145.594405][T14913] ? __fget_files+0x2a/0x420 [ 1145.594435][T14913] ? __fget_files+0x3a2/0x420 [ 1145.594458][T14913] ? __fget_files+0x2a/0x420 [ 1145.594492][T14913] ksys_write+0x150/0x270 [ 1145.594530][T14913] ? __pfx_ksys_write+0x10/0x10 [ 1145.594568][T14913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.594590][T14913] do_syscall_64+0x174/0x580 [ 1145.594616][T14913] ? trace_irq_disable+0x3b/0x140 [ 1145.594643][T14913] ? clear_bhb_loop+0x40/0x90 [ 1145.594668][T14913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.594687][T14913] RIP: 0033:0x7fca0f35e68e [ 1145.594706][T14913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1145.594723][T14913] RSP: 002b:00007fca10243fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1145.594745][T14913] RAX: ffffffffffffffda RBX: 00007fca102446c0 RCX: 00007fca0f35e68e [ 1145.594760][T14913] RDX: 0000000000000001 RSI: 00007fca102440a0 RDI: 0000000000000006 [ 1145.594773][T14913] RBP: 00007fca10244090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.594785][T14913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.594796][T14913] R13: 00007fca0f626038 R14: 00007fca0f625fa0 R15: 00007ffdf8fcf9b8 [ 1145.594830][T14913] [ 1145.847241][T14917] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13087'. [ 1145.876883][T14917] netlink: 'syz.0.13087': attribute type 21 has an invalid length. [ 1145.886033][T14917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13087'. [ 1146.076567][T14925] netlink: 'syz.6.13088': attribute type 1 has an invalid length. [ 1146.136474][T14925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1146.238745][T14937] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13092'. [ 1146.345706][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13091'. [ 1146.379476][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13091'. [ 1146.928244][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13100'. [ 1147.010690][T14979] FAULT_INJECTION: forcing a failure. [ 1147.010690][T14979] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.025618][T14979] CPU: 1 UID: 0 PID: 14979 Comm: syz.6.13104 Not tainted syzkaller #0 PREEMPT(full) [ 1147.025642][T14979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1147.025654][T14979] Call Trace: [ 1147.025662][T14979] [ 1147.025670][T14979] dump_stack_lvl+0xe8/0x150 [ 1147.025703][T14979] should_fail_ex+0x40c/0x560 [ 1147.025730][T14979] should_failslab+0xa8/0x100 [ 1147.025759][T14979] __kmalloc_cache_noprof+0xa8/0x660 [ 1147.025782][T14979] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1147.025805][T14979] ? __kmalloc_cache_noprof+0x150/0x660 [ 1147.025828][T14979] ? sctp_add_bind_addr+0x8c/0x370 [ 1147.025857][T14979] ? sctp_add_bind_addr+0x8c/0x370 [ 1147.025886][T14979] sctp_add_bind_addr+0x8c/0x370 [ 1147.025913][T14979] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1147.025939][T14979] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1147.025963][T14979] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1147.025990][T14979] ? sctp_v4_is_any+0x35/0x60 [ 1147.026012][T14979] ? sctp_copy_one_addr+0x93/0x360 [ 1147.026038][T14979] sctp_bind_addr_copy+0xb3/0x3c0 [ 1147.026061][T14979] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1147.026096][T14979] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1147.026125][T14979] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1147.026159][T14979] ? __local_bh_enable_ip+0xd0/0x130 [ 1147.026180][T14979] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1147.026201][T14979] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1147.026230][T14979] sctp_sendmsg+0x159b/0x2d00 [ 1147.026272][T14979] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1147.026306][T14979] ? aa_sk_perm+0x6d5/0x900 [ 1147.026340][T14979] ? __might_fault+0xaf/0x130 [ 1147.026366][T14979] ? sock_rps_record_flow+0x19/0x350 [ 1147.026394][T14979] ? inet_sendmsg+0x298/0x320 [ 1147.026421][T14979] ? __pfx_inet_sendmsg+0x10/0x10 [ 1147.026443][T14979] sock_sendmsg_nosec+0x10e/0x180 [ 1147.026468][T14979] ____sys_sendmsg+0x54e/0x850 [ 1147.026501][T14979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1147.026538][T14979] ? import_iovec+0x73/0xa0 [ 1147.026569][T14979] ___sys_sendmsg+0x2a5/0x360 [ 1147.026595][T14979] ? __lock_acquire+0x683/0x2cf0 [ 1147.026626][T14979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1147.026688][T14979] ? __fget_files+0x2a/0x420 [ 1147.026712][T14979] ? __fget_files+0x3a2/0x420 [ 1147.026747][T14979] __x64_sys_sendmsg+0x1b1/0x290 [ 1147.026776][T14979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1147.026823][T14979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.026850][T14979] do_syscall_64+0x174/0x580 [ 1147.026875][T14979] ? trace_irq_disable+0x3b/0x140 [ 1147.026897][T14979] ? clear_bhb_loop+0x40/0x90 [ 1147.026919][T14979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.026941][T14979] RIP: 0033:0x7f73ffb9de59 [ 1147.026958][T14979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.026974][T14979] RSP: 002b:00007f7400a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.026995][T14979] RAX: ffffffffffffffda RBX: 00007f73ffe25fa0 RCX: 00007f73ffb9de59 [ 1147.027009][T14979] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1147.027022][T14979] RBP: 00007f7400a52090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.027034][T14979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.027045][T14979] R13: 00007f73ffe26038 R14: 00007f73ffe25fa0 R15: 00007ffe49db8158 [ 1147.027078][T14979] [ 1147.078120][T14969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1147.094829][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1147.408904][T14976] macvlan2: entered promiscuous mode [ 1147.419906][T14976] macvlan2: entered allmulticast mode [ 1147.460712][T14976] bond1: entered promiscuous mode [ 1147.488145][T14976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1147.515113][T14976] bond1: left promiscuous mode [ 1148.190015][T15018] netlink: 180 bytes leftover after parsing attributes in process `syz.4.13113'. [ 1148.315163][T15021] syzkaller1: entered promiscuous mode [ 1148.321615][T15021] syzkaller1: entered allmulticast mode [ 1148.347117][T15024] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.13115'. [ 1148.382104][T15027] FAULT_INJECTION: forcing a failure. [ 1148.382104][T15027] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.394855][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.1.13114 Not tainted syzkaller #0 PREEMPT(full) [ 1148.394881][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1148.394892][T15027] Call Trace: [ 1148.394901][T15027] [ 1148.394909][T15027] dump_stack_lvl+0xe8/0x150 [ 1148.394943][T15027] should_fail_ex+0x40c/0x560 [ 1148.394972][T15027] should_failslab+0xa8/0x100 [ 1148.395010][T15027] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1148.395038][T15027] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1148.395059][T15027] ? nf_ct_ext_add+0x1b6/0x3f0 [ 1148.395188][T15027] ? nf_ct_ext_add+0x1b6/0x3f0 [ 1148.395216][T15027] ? nf_ct_ext_add+0x1b6/0x3f0 [ 1148.395243][T15027] krealloc_node_align_noprof+0x19a/0x390 [ 1148.395276][T15027] nf_ct_ext_add+0x1b6/0x3f0 [ 1148.395308][T15027] init_conntrack+0x647/0x1080 [ 1148.395343][T15027] ? __pfx_init_conntrack+0x10/0x10 [ 1148.395378][T15027] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 1148.395403][T15027] ? __lock_acquire+0x683/0x2cf0 [ 1148.395427][T15027] ? __siphash_unaligned+0x25c/0x3e0 [ 1148.395463][T15027] nf_conntrack_in+0xbc3/0x15a0 [ 1148.395513][T15027] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1148.395547][T15027] ? ipt_do_table+0x2b9/0x15d0 [ 1148.395583][T15027] ? NF_HOOK+0x9e/0x3c0 [ 1148.395604][T15027] ? NF_HOOK+0x9e/0x3c0 [ 1148.395621][T15027] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 1148.395642][T15027] ? ip_sabotage_in+0x57/0x270 [ 1148.395704][T15027] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 1148.395729][T15027] nf_hook_slow+0xc5/0x220 [ 1148.395757][T15027] NF_HOOK+0x21f/0x3c0 [ 1148.395778][T15027] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1148.395797][T15027] ? NF_HOOK+0x9e/0x3c0 [ 1148.395815][T15027] ? __pfx_NF_HOOK+0x10/0x10 [ 1148.395836][T15027] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1148.395864][T15027] ? netif_receive_skb+0x102/0xbf0 [ 1148.395885][T15027] ? __pfx_ip_rcv+0x10/0x10 [ 1148.395903][T15027] netif_receive_skb+0x45b/0xbf0 [ 1148.395932][T15027] ? __pfx_netif_receive_skb+0x10/0x10 [ 1148.395960][T15027] ? tun_rx_batched+0x185/0x790 [ 1148.395988][T15027] tun_rx_batched+0x1de/0x790 [ 1148.396020][T15027] ? __pfx_tun_rx_batched+0x10/0x10 [ 1148.396044][T15027] ? tun_get_user+0x2717/0x4370 [ 1148.396070][T15027] ? tun_get_user+0x2717/0x4370 [ 1148.396095][T15027] ? tun_get_user+0x23cb/0x4370 [ 1148.396119][T15027] ? tun_get_user+0x23cb/0x4370 [ 1148.396142][T15027] ? __local_bh_enable_ip+0xd0/0x130 [ 1148.396163][T15027] ? tun_get_user+0x2717/0x4370 [ 1148.396187][T15027] ? tun_get_user+0x2717/0x4370 [ 1148.396211][T15027] tun_get_user+0x2b44/0x4370 [ 1148.396256][T15027] ? aa_file_perm+0x18b/0x15f0 [ 1148.396283][T15027] ? aa_file_perm+0x4ed/0x15f0 [ 1148.396303][T15027] ? __pfx_tun_get_user+0x10/0x10 [ 1148.396330][T15027] ? __lock_acquire+0x683/0x2cf0 [ 1148.396359][T15027] ? kstrtoull+0x12f/0x1d0 [ 1148.396389][T15027] ? ref_tracker_alloc+0x341/0x4b0 [ 1148.396411][T15027] ? get_pid_task+0x20/0x1f0 [ 1148.396439][T15027] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1148.396464][T15027] ? tun_get+0x1c/0x2f0 [ 1148.396488][T15027] ? tun_get+0x1c/0x2f0 [ 1148.396519][T15027] ? tun_get+0x1c/0x2f0 [ 1148.396542][T15027] ? tun_get+0x1c/0x2f0 [ 1148.396571][T15027] tun_chr_write_iter+0x113/0x200 [ 1148.396598][T15027] vfs_write+0x612/0xba0 [ 1148.396637][T15027] ? __pfx_vfs_write+0x10/0x10 [ 1148.396696][T15027] ? __fget_files+0x2a/0x420 [ 1148.396732][T15027] ksys_write+0x150/0x270 [ 1148.396763][T15027] ? __pfx_ksys_write+0x10/0x10 [ 1148.396800][T15027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.396823][T15027] do_syscall_64+0x174/0x580 [ 1148.396848][T15027] ? trace_irq_disable+0x3b/0x140 [ 1148.396872][T15027] ? clear_bhb_loop+0x40/0x90 [ 1148.396897][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.396917][T15027] RIP: 0033:0x7fcd85f9de59 [ 1148.396937][T15027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.396954][T15027] RSP: 002b:00007fcd86da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1148.396976][T15027] RAX: ffffffffffffffda RBX: 00007fcd86226090 RCX: 00007fcd85f9de59 [ 1148.396991][T15027] RDX: 0000000000000022 RSI: 0000200000000840 RDI: 0000000000000003 [ 1148.397004][T15027] RBP: 00007fcd86da3090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.397017][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.397029][T15027] R13: 00007fcd86226128 R14: 00007fcd86226090 R15: 00007ffd06111b88 [ 1148.397063][T15027] [ 1150.073692][T15085] macsec1: entered promiscuous mode [ 1150.549834][T15099] __nla_validate_parse: 3 callbacks suppressed [ 1150.549854][T15099] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13134'. [ 1150.670401][T15104] FAULT_INJECTION: forcing a failure. [ 1150.670401][T15104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.673437][T15101] netlink: 'syz.7.13136': attribute type 39 has an invalid length. [ 1150.727087][T15104] CPU: 0 UID: 0 PID: 15104 Comm: syz.6.13137 Not tainted syzkaller #0 PREEMPT(full) [ 1150.727112][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1150.727123][T15104] Call Trace: [ 1150.727131][T15104] [ 1150.727139][T15104] dump_stack_lvl+0xe8/0x150 [ 1150.727172][T15104] should_fail_ex+0x40c/0x560 [ 1150.727195][T15104] _copy_to_user+0x31/0xb0 [ 1150.727222][T15104] simple_read_from_buffer+0xe1/0x170 [ 1150.727250][T15104] proc_fail_nth_read+0x1bb/0x230 [ 1150.727275][T15104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1150.727301][T15104] ? rw_verify_area+0x24a/0x4c0 [ 1150.727328][T15104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1150.727350][T15104] vfs_read+0x213/0xa80 [ 1150.727381][T15104] ? __pfx___mutex_lock+0x10/0x10 [ 1150.727407][T15104] ? __pfx_vfs_read+0x10/0x10 [ 1150.727435][T15104] ? __fget_files+0x2a/0x420 [ 1150.727463][T15104] ? __fget_files+0x3a2/0x420 [ 1150.727487][T15104] ? __fget_files+0x2a/0x420 [ 1150.727519][T15104] ksys_read+0x150/0x270 [ 1150.727549][T15104] ? __pfx_ksys_read+0x10/0x10 [ 1150.727585][T15104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.727607][T15104] do_syscall_64+0x174/0x580 [ 1150.727631][T15104] ? trace_irq_disable+0x3b/0x140 [ 1150.727655][T15104] ? clear_bhb_loop+0x40/0x90 [ 1150.727678][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.727697][T15104] RIP: 0033:0x7f73ffb5e68e [ 1150.727715][T15104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1150.727731][T15104] RSP: 002b:00007f7400a51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1150.727753][T15104] RAX: ffffffffffffffda RBX: 00007f7400a526c0 RCX: 00007f73ffb5e68e [ 1150.727767][T15104] RDX: 000000000000000f RSI: 00007f7400a520a0 RDI: 0000000000000006 [ 1150.727779][T15104] RBP: 00007f7400a52090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.727792][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.727804][T15104] R13: 00007f73ffe26038 R14: 00007f73ffe25fa0 R15: 00007ffe49db8158 [ 1150.727839][T15104] [ 1151.704336][T15128] bond0: entered promiscuous mode [ 1151.730216][T15128] bond_slave_0: entered promiscuous mode [ 1151.778353][T15128] bond_slave_1: entered promiscuous mode [ 1152.045543][T15153] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13147'. [ 1152.223837][T15152] netlink: 'syz.7.13145': attribute type 2 has an invalid length. [ 1152.244616][T15152] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13145'. [ 1152.295303][T15163] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13149'. [ 1152.497316][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13152'. [ 1152.673960][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13152'. [ 1152.696492][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13152'. [ 1152.722763][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13152'. [ 1152.742657][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13152'. [ 1152.768450][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13152'. [ 1153.189028][T15195] syzkaller1: entered promiscuous mode [ 1153.210400][T15195] syzkaller1: entered allmulticast mode [ 1154.618121][T15257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.652615][T15260] nbd: must specify at least one socket [ 1154.743670][T15264] nbd: couldn't find a device at index 0 [ 1155.796323][T15304] syzkaller0: entered promiscuous mode [ 1155.803603][T15304] syzkaller0: entered allmulticast mode [ 1156.315434][T15344] x_tables: duplicate underflow at hook 3 [ 1156.761662][T15357] __nla_validate_parse: 65 callbacks suppressed [ 1156.761682][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13192'. [ 1159.911599][T15361] FAULT_INJECTION: forcing a failure. [ 1159.911599][T15361] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.948057][T15361] CPU: 1 UID: 0 PID: 15361 Comm: syz.6.13193 Not tainted syzkaller #0 PREEMPT(full) [ 1159.948083][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1159.948094][T15361] Call Trace: [ 1159.948101][T15361] [ 1159.948109][T15361] dump_stack_lvl+0xe8/0x150 [ 1159.948143][T15361] should_fail_ex+0x40c/0x560 [ 1159.948171][T15361] should_failslab+0xa8/0x100 [ 1159.948199][T15361] __kmalloc_cache_noprof+0xa8/0x660 [ 1159.948222][T15361] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1159.948244][T15361] ? __kmalloc_cache_noprof+0x150/0x660 [ 1159.948264][T15361] ? sctp_add_bind_addr+0x8c/0x370 [ 1159.948284][T15361] ? sctp_add_bind_addr+0x8c/0x370 [ 1159.948311][T15361] sctp_add_bind_addr+0x8c/0x370 [ 1159.948338][T15361] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1159.948362][T15361] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1159.948385][T15361] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1159.948408][T15361] ? sctp_v6_is_any+0x64/0x80 [ 1159.948521][T15361] ? sctp_copy_one_addr+0x93/0x360 [ 1159.948545][T15361] sctp_bind_addr_copy+0xb3/0x3c0 [ 1159.948566][T15361] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1159.948598][T15361] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1159.948626][T15361] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1159.948658][T15361] ? sctp_inet6_send_verify+0x23a/0x300 [ 1159.948677][T15361] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1159.948704][T15361] __sctp_connect+0x5cb/0xdc0 [ 1159.948741][T15361] ? __pfx___sctp_connect+0x10/0x10 [ 1159.948776][T15361] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1159.948804][T15361] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1159.948826][T15361] sctp_getsockopt_connectx3+0x227/0x360 [ 1159.948847][T15361] ? lock_sock_nested+0x6a/0x100 [ 1159.948873][T15361] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1159.948896][T15361] ? sctp_getsockopt+0x12f/0xb90 [ 1159.948922][T15361] ? __local_bh_enable_ip+0xd0/0x130 [ 1159.948948][T15361] sctp_getsockopt+0x984/0xb90 [ 1159.948973][T15361] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1159.948996][T15361] do_sock_getsockopt+0x51d/0x7e0 [ 1159.949026][T15361] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1159.949066][T15361] ? __fget_files+0x3a2/0x420 [ 1159.949088][T15361] ? __fget_files+0x2a/0x420 [ 1159.949114][T15361] __x64_sys_getsockopt+0x1a4/0x240 [ 1159.949145][T15361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.949165][T15361] do_syscall_64+0x174/0x580 [ 1159.949187][T15361] ? trace_irq_disable+0x3b/0x140 [ 1159.949209][T15361] ? clear_bhb_loop+0x40/0x90 [ 1159.949233][T15361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.949250][T15361] RIP: 0033:0x7f73ffb9de59 [ 1159.949268][T15361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.949283][T15361] RSP: 002b:00007f7400a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1159.949303][T15361] RAX: ffffffffffffffda RBX: 00007f73ffe25fa0 RCX: 00007f73ffb9de59 [ 1159.949317][T15361] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1159.949329][T15361] RBP: 00007f7400a52090 R08: 0000200000000040 R09: 0000000000000000 [ 1159.949341][T15361] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 1159.949353][T15361] R13: 00007f73ffe26038 R14: 00007f73ffe25fa0 R15: 00007ffe49db8158 [ 1159.949385][T15361] [ 1160.363210][ T188] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1160.685697][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13201'. [ 1160.771913][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1160.937362][T15397] vlan0: entered allmulticast mode [ 1160.968604][T15397] bridge1: entered allmulticast mode [ 1160.976564][T15388] bridge1: port 1(erspan0) entered blocking state [ 1160.986649][T15388] bridge1: port 1(erspan0) entered disabled state [ 1160.993584][T15388] erspan0: entered allmulticast mode [ 1161.001416][T15388] erspan0: entered promiscuous mode [ 1161.014372][T15388] bridge1: port 1(erspan0) entered blocking state [ 1161.020929][T15388] bridge1: port 1(erspan0) entered forwarding state [ 1161.029389][T15407] netlink: 'syz.0.13207': attribute type 12 has an invalid length. [ 1161.203354][ T5771] IPVS: starting estimator thread 0... [ 1161.333673][T15416] IPVS: using max 55 ests per chain, 132000 per kthread [ 1161.397283][ T5771] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1161.416057][T15415] syzkaller0: entered promiscuous mode [ 1161.421625][T15415] syzkaller0: entered allmulticast mode [ 1161.610881][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13211'. [ 1161.683332][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13211'. [ 1161.759877][T15436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13211'. [ 1162.690688][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13219'. [ 1165.142721][T15452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.244769][T15452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.569731][T15483] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13227'. [ 1165.619986][T15483] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13227'. [ 1165.939404][T15496] syzkaller0: entered promiscuous mode [ 1165.952098][T15496] syzkaller0: entered allmulticast mode [ 1166.130121][T15511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13238'. [ 1166.215466][T15516] netlink: 'syz.6.13240': attribute type 11 has an invalid length. [ 1166.728849][T15518] netlink: 260 bytes leftover after parsing attributes in process `syz.4.13241'. [ 1169.384975][T15532] veth0: entered promiscuous mode [ 1169.420555][T15531] veth0: left promiscuous mode [ 1169.450656][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13246'. [ 1169.467648][T15538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13248'. [ 1169.485154][T15538] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1169.649851][T15546] tipc: Enabled bearer , priority 0 [ 1169.685579][T15546] syzkaller0: MTU too low for tipc bearer [ 1169.695234][T15546] tipc: Disabling bearer [ 1169.821436][T15556] sctp: [Deprecated]: syz.4.13256 (pid 15556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1169.821436][T15556] Use struct sctp_sack_info instead [ 1169.965427][T15565] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13259'. [ 1170.089682][T15569] FAULT_INJECTION: forcing a failure. [ 1170.089682][T15569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.116305][T15569] CPU: 0 UID: 0 PID: 15569 Comm: syz.6.13261 Not tainted syzkaller #0 PREEMPT(full) [ 1170.116331][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.116343][T15569] Call Trace: [ 1170.116351][T15569] [ 1170.116360][T15569] dump_stack_lvl+0xe8/0x150 [ 1170.116394][T15569] should_fail_ex+0x40c/0x560 [ 1170.116421][T15569] _copy_from_iter+0x1d3/0x1660 [ 1170.116453][T15569] ? _copy_from_iter+0x21b/0x1660 [ 1170.116479][T15569] ? __pfx__copy_from_iter+0x10/0x10 [ 1170.116509][T15569] ? __pfx__copy_from_iter+0x10/0x10 [ 1170.116539][T15569] copy_page_from_iter+0x219/0x2d0 [ 1170.116567][T15569] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1170.116604][T15569] tun_get_user+0x1520/0x4370 [ 1170.116639][T15569] ? aa_file_perm+0x18b/0x15f0 [ 1170.116662][T15569] ? aa_file_perm+0x4ed/0x15f0 [ 1170.116681][T15569] ? __pfx_tun_get_user+0x10/0x10 [ 1170.116704][T15569] ? __lock_acquire+0x683/0x2cf0 [ 1170.116728][T15569] ? kstrtoull+0x12f/0x1d0 [ 1170.116756][T15569] ? ref_tracker_alloc+0x341/0x4b0 [ 1170.116777][T15569] ? get_pid_task+0x20/0x1f0 [ 1170.116804][T15569] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1170.116827][T15569] ? tun_get+0x1c/0x2f0 [ 1170.116848][T15569] ? tun_get+0x1c/0x2f0 [ 1170.116882][T15569] ? tun_get+0x1c/0x2f0 [ 1170.116903][T15569] ? tun_get+0x1c/0x2f0 [ 1170.116927][T15569] tun_chr_write_iter+0x113/0x200 [ 1170.116955][T15569] vfs_write+0x612/0xba0 [ 1170.116989][T15569] ? __pfx_vfs_write+0x10/0x10 [ 1170.117032][T15569] ? __fget_files+0x2a/0x420 [ 1170.117062][T15569] ksys_write+0x150/0x270 [ 1170.117092][T15569] ? __pfx_ksys_write+0x10/0x10 [ 1170.117126][T15569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.117146][T15569] do_syscall_64+0x174/0x580 [ 1170.117170][T15569] ? trace_irq_disable+0x3b/0x140 [ 1170.117193][T15569] ? clear_bhb_loop+0x40/0x90 [ 1170.117216][T15569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.117235][T15569] RIP: 0033:0x7f73ffb9de59 [ 1170.117252][T15569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.117268][T15569] RSP: 002b:00007f7400a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1170.117288][T15569] RAX: ffffffffffffffda RBX: 00007f73ffe25fa0 RCX: 00007f73ffb9de59 [ 1170.117305][T15569] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000011 [ 1170.117317][T15569] RBP: 00007f7400a52090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.117330][T15569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.117342][T15569] R13: 00007f73ffe26038 R14: 00007f73ffe25fa0 R15: 00007ffe49db8158 [ 1170.117374][T15569] [ 1170.557140][T15583] FAULT_INJECTION: forcing a failure. [ 1170.557140][T15583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.571733][T15583] CPU: 0 UID: 0 PID: 15583 Comm: syz.7.13270 Not tainted syzkaller #0 PREEMPT(full) [ 1170.571758][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.571769][T15583] Call Trace: [ 1170.571777][T15583] [ 1170.571785][T15583] dump_stack_lvl+0xe8/0x150 [ 1170.571816][T15583] should_fail_ex+0x40c/0x560 [ 1170.571843][T15583] _copy_from_user+0x2d/0xb0 [ 1170.571869][T15583] ___sys_sendmsg+0x1c6/0x360 [ 1170.571895][T15583] ? __lock_acquire+0x683/0x2cf0 [ 1170.571924][T15583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1170.571989][T15583] ? __fget_files+0x2a/0x420 [ 1170.572013][T15583] ? __fget_files+0x3a2/0x420 [ 1170.572044][T15583] __x64_sys_sendmsg+0x1b1/0x290 [ 1170.572074][T15583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1170.572119][T15583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.572141][T15583] do_syscall_64+0x174/0x580 [ 1170.572165][T15583] ? trace_irq_disable+0x3b/0x140 [ 1170.572188][T15583] ? clear_bhb_loop+0x40/0x90 [ 1170.572213][T15583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.572230][T15583] RIP: 0033:0x7f3619b9de59 [ 1170.572248][T15583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.572263][T15583] RSP: 002b:00007f361aaf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.572283][T15583] RAX: ffffffffffffffda RBX: 00007f3619e25fa0 RCX: 00007f3619b9de59 [ 1170.572296][T15583] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 1170.572307][T15583] RBP: 00007f361aaf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.572318][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.572327][T15583] R13: 00007f3619e26038 R14: 00007f3619e25fa0 R15: 00007ffe75ceba98 [ 1170.572357][T15583] [ 1170.910511][T15593] netlink: 'syz.7.13273': attribute type 4 has an invalid length. [ 1170.940711][T15593] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13273'. [ 1170.967662][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13274'. [ 1170.994474][T15593] .`: renamed from bond0 (while UP) [ 1171.215699][T15604] bridge1: port 1(erspan0) entered disabled state [ 1171.258691][T15604] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13276'. [ 1171.350829][T15610] IPVS: ip_vs_add_dest(): server weight less than zero [ 1171.528303][T15619] netlink: 'syz.4.13284': attribute type 4 has an invalid length. [ 1171.585951][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13287'. [ 1171.789692][T15638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13292'. [ 1171.916643][T15642] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13293'. [ 1171.988305][T15647] netlink: 'syz.0.13295': attribute type 8 has an invalid length. [ 1172.104391][ T14] bridge_slave_1: left allmulticast mode [ 1172.123710][ T14] bridge_slave_1: left promiscuous mode [ 1172.140451][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.169789][ T14] bridge_slave_0: left promiscuous mode [ 1172.179619][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.324796][T15667] netlink: 'syz.1.13302': attribute type 10 has an invalid length. [ 1172.461872][ T14] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1172.574650][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.587271][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.599809][ T14] bond0 (unregistering): Released all slaves [ 1172.611592][ T14] bond1 (unregistering): Released all slaves [ 1172.628160][ T14] bond2 (unregistering): Released all slaves [ 1172.710253][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.784346][T15667] batadv0: entered promiscuous mode [ 1172.829580][T15667] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1172.920224][T15669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.965467][T15669] bond_slave_0: left promiscuous mode [ 1172.974557][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13306'. [ 1173.052891][T15669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.065729][T15688] FAULT_INJECTION: forcing a failure. [ 1173.065729][T15688] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.080538][T15688] CPU: 0 UID: 0 PID: 15688 Comm: syz.6.13309 Not tainted syzkaller #0 PREEMPT(full) [ 1173.080564][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1173.080574][T15688] Call Trace: [ 1173.080582][T15688] [ 1173.080590][T15688] dump_stack_lvl+0xe8/0x150 [ 1173.080622][T15688] should_fail_ex+0x40c/0x560 [ 1173.080650][T15688] should_failslab+0xa8/0x100 [ 1173.080677][T15688] __kmalloc_cache_noprof+0xa8/0x660 [ 1173.080700][T15688] ? nft_pernet+0x23/0x240 [ 1173.080724][T15688] ? nf_tables_newchain+0x1098/0x28b0 [ 1173.080743][T15688] ? nf_tables_newchain+0x1098/0x28b0 [ 1173.080772][T15688] nf_tables_newchain+0x1098/0x28b0 [ 1173.080808][T15688] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1173.080859][T15688] ? nfnl_pernet+0x23/0x240 [ 1173.080886][T15688] ? nfnl_pernet+0x23/0x240 [ 1173.080920][T15688] ? __nla_parse+0x40/0x60 [ 1173.080950][T15688] nfnetlink_rcv+0x1288/0x28c0 [ 1173.081011][T15688] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1173.081053][T15688] ? ref_tracker_free+0x689/0x830 [ 1173.081100][T15688] ? skb_clone+0x246/0x3a0 [ 1173.081130][T15688] ? __netlink_deliver_tap+0x811/0x860 [ 1173.081176][T15688] ? netlink_deliver_tap+0x2e/0x1b0 [ 1173.081202][T15688] ? netlink_deliver_tap+0x2e/0x1b0 [ 1173.081235][T15688] netlink_unicast+0x7bb/0x940 [ 1173.081269][T15688] netlink_sendmsg+0x813/0xb40 [ 1173.081306][T15688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.081337][T15688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1173.081360][T15688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.081385][T15688] sock_sendmsg_nosec+0x13a/0x180 [ 1173.081407][T15688] ____sys_sendmsg+0x54e/0x850 [ 1173.081437][T15688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.081471][T15688] ? import_iovec+0x73/0xa0 [ 1173.081498][T15688] ___sys_sendmsg+0x2a5/0x360 [ 1173.081525][T15688] ? __lock_acquire+0x683/0x2cf0 [ 1173.081553][T15688] ? __pfx____sys_sendmsg+0x10/0x10 [ 1173.081609][T15688] ? __fget_files+0x2a/0x420 [ 1173.081630][T15688] ? __fget_files+0x3a2/0x420 [ 1173.081662][T15688] __x64_sys_sendmsg+0x1b1/0x290 [ 1173.081691][T15688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1173.081734][T15688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.081755][T15688] do_syscall_64+0x174/0x580 [ 1173.081776][T15688] ? trace_irq_disable+0x3b/0x140 [ 1173.081799][T15688] ? clear_bhb_loop+0x40/0x90 [ 1173.081820][T15688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.081837][T15688] RIP: 0033:0x7f73ffb9de59 [ 1173.081856][T15688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.081873][T15688] RSP: 002b:00007f7400a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.081894][T15688] RAX: ffffffffffffffda RBX: 00007f73ffe25fa0 RCX: 00007f73ffb9de59 [ 1173.081908][T15688] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1173.081922][T15688] RBP: 00007f7400a52090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.081934][T15688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.081945][T15688] R13: 00007f73ffe26038 R14: 00007f73ffe25fa0 R15: 00007ffe49db8158 [ 1173.081977][T15688] [ 1173.082172][T15669] bond_slave_1: left promiscuous mode [ 1173.409909][T15669] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1173.419199][T15669] batadv0: left promiscuous mode [ 1173.433480][T15669] bond0 (unregistering): Released all slaves [ 1173.466227][ T14] tipc: Left network mode [ 1174.131040][T15713] syzkaller1: entered promiscuous mode [ 1174.192589][T15713] syzkaller1: entered allmulticast mode [ 1174.219102][T15724] syzkaller1: left promiscuous mode [ 1174.240229][T15724] syzkaller1: left allmulticast mode [ 1174.714447][T15727] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1174.731152][T15727] bond0 (unregistering): Released all slaves [ 1175.240577][T15770] netlink: 'syz.7.13335': attribute type 9 has an invalid length. [ 1175.308783][ T14] hsr_slave_0: left promiscuous mode [ 1175.329703][ T14] hsr_slave_1: left promiscuous mode [ 1175.354030][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.384563][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.417368][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.425300][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.478035][ T14] veth1_macvtap: left promiscuous mode [ 1175.485118][ T14] veth0_macvtap: left promiscuous mode [ 1175.681531][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1175.699192][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1176.113573][ T5771] page_pool_release_retry() stalled pool shutdown: id 86, 1 inflight 969 sec [ 1176.349160][T15805] __nla_validate_parse: 6 callbacks suppressed [ 1176.349180][T15805] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13344'. [ 1176.395931][T15807] syz_tun: entered allmulticast mode [ 1176.416491][T15807] lo: entered allmulticast mode [ 1176.429929][T15805] netlink: 'syz.4.13344': attribute type 10 has an invalid length. [ 1176.478487][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.498693][T15805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.577648][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13348'. [ 1176.680963][T15806] syz_tun: left allmulticast mode [ 1176.740435][T15818] vlan2: entered allmulticast mode [ 1176.764817][T15818] bridge2: entered allmulticast mode [ 1176.775883][T15815] bridge2: port 1(erspan0) entered blocking state [ 1176.803894][T15815] bridge2: port 1(erspan0) entered disabled state [ 1176.826472][T15815] erspan0: entered allmulticast mode [ 1176.844701][T15815] erspan0: entered promiscuous mode [ 1176.861271][T15815] bridge2: port 1(erspan0) entered blocking state [ 1176.867881][T15815] bridge2: port 1(erspan0) entered forwarding state [ 1177.086782][T15836] netlink: 'syz.4.13357': attribute type 39 has an invalid length. [ 1177.294422][T15847] netlink: 'syz.0.13362': attribute type 4 has an invalid length. [ 1177.336177][T15847] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13362'. [ 1177.366374][T15852] FAULT_INJECTION: forcing a failure. [ 1177.366374][T15852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.485212][T15852] CPU: 0 UID: 0 PID: 15852 Comm: syz.1.13364 Not tainted syzkaller #0 PREEMPT(full) [ 1177.485254][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1177.485273][T15852] Call Trace: [ 1177.485281][T15852] [ 1177.485290][T15852] dump_stack_lvl+0xe8/0x150 [ 1177.485323][T15852] should_fail_ex+0x40c/0x560 [ 1177.485349][T15852] _copy_from_user+0x2d/0xb0 [ 1177.485375][T15852] ___sys_sendmsg+0x1c6/0x360 [ 1177.485400][T15852] ? __lock_acquire+0x683/0x2cf0 [ 1177.485427][T15852] ? __pfx____sys_sendmsg+0x10/0x10 [ 1177.485458][T15852] ? kstrtouint+0x6e/0xe0 [ 1177.485503][T15852] ? __fget_files+0x2a/0x420 [ 1177.485527][T15852] ? __fget_files+0x3a2/0x420 [ 1177.485560][T15852] __sys_sendmmsg+0x273/0x4d0 [ 1177.485592][T15852] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1177.485627][T15852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1177.485666][T15852] ? ksys_write+0x242/0x270 [ 1177.485696][T15852] ? __pfx_ksys_write+0x10/0x10 [ 1177.485730][T15852] __x64_sys_sendmmsg+0xa0/0xc0 [ 1177.485756][T15852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.485776][T15852] do_syscall_64+0x174/0x580 [ 1177.485799][T15852] ? trace_irq_disable+0x3b/0x140 [ 1177.485819][T15852] ? clear_bhb_loop+0x40/0x90 [ 1177.485839][T15852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.485855][T15852] RIP: 0033:0x7fcd85f9de59 [ 1177.485871][T15852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.485884][T15852] RSP: 002b:00007fcd86dc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1177.485900][T15852] RAX: ffffffffffffffda RBX: 00007fcd86225fa0 RCX: 00007fcd85f9de59 [ 1177.485911][T15852] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 1177.485921][T15852] RBP: 00007fcd86dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.485930][T15852] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.485940][T15852] R13: 00007fcd86226038 R14: 00007fcd86225fa0 R15: 00007ffd06111b88 [ 1177.485968][T15852] [ 1177.939722][T15878] netlink: 344 bytes leftover after parsing attributes in process `syz.0.13371'. [ 1177.940690][T15879] sctp: [Deprecated]: syz.4.13367 (pid 15879) Use of int in maxseg socket option. [ 1177.940690][T15879] Use struct sctp_assoc_value instead [ 1177.966048][T15880] FAULT_INJECTION: forcing a failure. [ 1177.966048][T15880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.993575][T15880] CPU: 1 UID: 0 PID: 15880 Comm: syz.7.13370 Not tainted syzkaller #0 PREEMPT(full) [ 1177.993602][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1177.993613][T15880] Call Trace: [ 1177.993620][T15880] [ 1177.993628][T15880] dump_stack_lvl+0xe8/0x150 [ 1177.993662][T15880] should_fail_ex+0x40c/0x560 [ 1177.993690][T15880] _copy_from_iter+0x1d3/0x1660 [ 1177.993714][T15880] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1177.993744][T15880] ? __pfx_policy_nodemask+0x10/0x10 [ 1177.993772][T15880] ? unwind_next_frame+0x8f/0x2550 [ 1177.993792][T15880] ? __pfx__copy_from_iter+0x10/0x10 [ 1177.993819][T15880] ? alloc_pages_mpol+0x24a/0x380 [ 1177.993856][T15880] copy_page_from_iter+0x219/0x2d0 [ 1177.993885][T15880] tun_get_user+0x1bf1/0x4370 [ 1177.993912][T15880] ? tun_get_user+0x6e7/0x4370 [ 1177.993951][T15880] ? aa_file_perm+0x4ed/0x15f0 [ 1177.993972][T15880] ? __pfx_tun_get_user+0x10/0x10 [ 1177.993998][T15880] ? __lock_acquire+0x683/0x2cf0 [ 1177.994038][T15880] ? ref_tracker_alloc+0x341/0x4b0 [ 1177.994059][T15880] ? get_pid_task+0x20/0x1f0 [ 1177.994086][T15880] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1177.994109][T15880] ? tun_get+0x1c/0x2f0 [ 1177.994133][T15880] ? tun_get+0x1c/0x2f0 [ 1177.994161][T15880] ? tun_get+0x1c/0x2f0 [ 1177.994184][T15880] ? tun_get+0x1c/0x2f0 [ 1177.994211][T15880] tun_chr_write_iter+0x113/0x200 [ 1177.994238][T15880] vfs_write+0x612/0xba0 [ 1177.994275][T15880] ? __pfx_vfs_write+0x10/0x10 [ 1177.994313][T15880] ? __fget_files+0x2a/0x420 [ 1177.994346][T15880] ksys_write+0x150/0x270 [ 1177.994377][T15880] ? __pfx_ksys_write+0x10/0x10 [ 1177.994413][T15880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.994434][T15880] do_syscall_64+0x174/0x580 [ 1177.994457][T15880] ? trace_irq_disable+0x3b/0x140 [ 1177.994480][T15880] ? clear_bhb_loop+0x40/0x90 [ 1177.994503][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.994520][T15880] RIP: 0033:0x7f3619b5e68e [ 1177.994538][T15880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1177.994554][T15880] RSP: 002b:00007f361aaadfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1177.994580][T15880] RAX: ffffffffffffffda RBX: 00007f361aaae6c0 RCX: 00007f3619b5e68e [ 1177.994594][T15880] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1177.994606][T15880] RBP: 00007f361aaae090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.994616][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.994628][T15880] R13: 00007f3619e26218 R14: 00007f3619e26180 R15: 00007ffe75ceba98 [ 1177.994659][T15880] [ 1177.997620][T15860] Unsupported ieee802154 address type: 0 [ 1178.313116][T15882] ip6tnl1: entered promiscuous mode [ 1178.507183][T15893] netlink: 'syz.7.13373': attribute type 1 has an invalid length. [ 1178.552447][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13373'. [ 1178.857583][T15915] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13381'. [ 1178.936059][T15917] xt_nfacct: accounting object `syz1' does not exist [ 1179.000107][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13384'. [ 1179.437732][T15951] netlink: 'syz.0.13393': attribute type 142 has an invalid length. [ 1179.873591][T15967] tipc: Enabled bearer , priority 0 [ 1179.900997][T15967] syzkaller0: entered promiscuous mode [ 1179.922458][T15967] syzkaller0: entered allmulticast mode [ 1179.949988][T15967] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1180.100428][T15967] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1180.113981][T15967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1180.143282][T15967] tipc: Resetting bearer [ 1180.320941][T15966] tipc: Resetting bearer [ 1180.444837][T15966] tipc: Disabling bearer [ 1180.559448][T15988] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13407'. [ 1180.614004][T15988] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1180.672396][ C1] syz_tun: tun_net_xmit 42 [ 1180.738218][T16007] netlink: 'syz.0.13413': attribute type 3 has an invalid length. [ 1180.755560][T16009] netlink: 232 bytes leftover after parsing attributes in process `syz.1.13414'. [ 1180.768235][T16007] netlink: 'syz.0.13413': attribute type 1 has an invalid length. [ 1180.787941][T16007] netlink: 204 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1181.074899][T16024] syzkaller0: entered promiscuous mode [ 1181.080721][T16024] syzkaller0: entered allmulticast mode [ 1181.100006][T16024] tipc: Started in network mode [ 1181.112305][T16024] tipc: Node identity 562e32541df6, cluster identity 4711 [ 1181.125575][T16024] tipc: Enabled bearer , priority 0 [ 1181.139384][T16023] tipc: Resetting bearer [ 1181.174050][T16023] tipc: Disabling bearer [ 1181.355550][T16037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.377776][T16037] __nla_validate_parse: 2 callbacks suppressed [ 1181.377795][T16037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13424'. [ 1181.712369][ C1] syz_tun: tun_net_xmit 42 [ 1181.806563][T16052] netlink: 748 bytes leftover after parsing attributes in process `syz.1.13429'. [ 1182.009258][T16061] netlink: 'syz.7.13433': attribute type 15 has an invalid length. [ 1182.337870][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13439'. [ 1182.455768][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.475379][T16085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13442'. [ 1182.487344][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13441'. [ 1182.575641][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13443'. [ 1182.752941][ C1] syz_tun: tun_net_xmit 42 [ 1182.811114][T16097] netlink: 'syz.7.13444': attribute type 11 has an invalid length. [ 1183.049814][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13447'. [ 1183.216350][T16109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13448'. [ 1183.354549][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13452'. [ 1183.549129][T16135] netlink: 'syz.4.13456': attribute type 26 has an invalid length. [ 1183.593496][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.792361][ C1] syz_tun: tun_net_xmit 42 [ 1183.799293][T16146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.818420][T16146] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13458'. [ 1184.438235][T16160] xt_TCPMSS: Only works on TCP SYN packets [ 1184.586619][T16162] syzkaller0: entered promiscuous mode [ 1184.592190][T16162] syzkaller0: entered allmulticast mode [ 1184.832323][ C1] syz_tun: tun_net_xmit 42 [ 1184.933050][T16181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1185.500215][T16210] syzkaller0: entered promiscuous mode [ 1185.524475][T16210] syzkaller0: entered allmulticast mode [ 1186.768155][T16242] netlink: 'syz.6.13491': attribute type 2 has an invalid length. [ 1186.857654][T16247] __nla_validate_parse: 6 callbacks suppressed [ 1186.857672][T16247] netlink: 88 bytes leftover after parsing attributes in process `syz.6.13492'. [ 1186.884650][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13492'. [ 1186.918775][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13492'. [ 1187.113922][T16264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1187.135666][T16264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13495'. [ 1187.790112][T16284] ip6t_rpfilter: unknown options [ 1187.798868][T16284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13503'. [ 1188.070404][T16287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.085947][T16287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.131153][T16301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13509'. [ 1188.257847][T16287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.270539][T16287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.391698][T16287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.403508][T16287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.507315][T16287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.518934][T16287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.711280][T28104] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.729704][T28104] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.790674][T28104] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.800670][T28104] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.815561][T16315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1188.841900][T16315] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13511'. [ 1188.858446][T28113] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.872606][T28113] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.987448][T27716] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1189.005484][T27716] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.185675][T16323] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13513'. [ 1189.219644][T16323] netlink: 'syz.1.13513': attribute type 1 has an invalid length. [ 1189.290208][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13516'. [ 1189.301810][T16329] netlink: 'syz.0.13516': attribute type 21 has an invalid length. [ 1189.317856][T16323] syzkaller0: entered promiscuous mode [ 1189.325338][T16329] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13516'. [ 1189.334864][T16323] syzkaller0: entered allmulticast mode [ 1189.365645][T16323] tipc: Started in network mode [ 1189.375186][T16323] tipc: Node identity 52fb0223141d, cluster identity 4711 [ 1189.394805][T16323] tipc: Enabled bearer , priority 0 [ 1189.421949][T16322] tipc: Resetting bearer [ 1189.482921][T16322] tipc: Disabling bearer [ 1189.497604][T16334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1189.504922][T16334] IPv6: NLM_F_CREATE should be set when creating new route [ 1189.512158][T16334] IPv6: NLM_F_CREATE should be set when creating new route [ 1189.584987][T16336] FAULT_INJECTION: forcing a failure. [ 1189.584987][T16336] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.604455][T16336] CPU: 1 UID: 0 PID: 16336 Comm: syz.1.13520 Not tainted syzkaller #0 PREEMPT(full) [ 1189.604482][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1189.604493][T16336] Call Trace: [ 1189.604501][T16336] [ 1189.604509][T16336] dump_stack_lvl+0xe8/0x150 [ 1189.604545][T16336] should_fail_ex+0x40c/0x560 [ 1189.604573][T16336] should_failslab+0xa8/0x100 [ 1189.604601][T16336] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1189.604628][T16336] ? local_lock_release+0x9c/0x160 [ 1189.604666][T16336] ? __alloc_skb+0x1d7/0x7a0 [ 1189.604687][T16336] ? __alloc_skb+0x1d7/0x7a0 [ 1189.604717][T16336] __alloc_skb+0x1d7/0x7a0 [ 1189.604744][T16336] netlink_sendmsg+0x5d4/0xb40 [ 1189.604783][T16336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.604815][T16336] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1189.604837][T16336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.604862][T16336] sock_sendmsg_nosec+0x13a/0x180 [ 1189.604886][T16336] ____sys_sendmsg+0x54e/0x850 [ 1189.604918][T16336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1189.604954][T16336] ? import_iovec+0x73/0xa0 [ 1189.604984][T16336] ___sys_sendmsg+0x2a5/0x360 [ 1189.605010][T16336] ? __lock_acquire+0x683/0x2cf0 [ 1189.605040][T16336] ? __pfx____sys_sendmsg+0x10/0x10 [ 1189.605103][T16336] ? __fget_files+0x2a/0x420 [ 1189.605127][T16336] ? __fget_files+0x3a2/0x420 [ 1189.605160][T16336] __x64_sys_sendmsg+0x1b1/0x290 [ 1189.605190][T16336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1189.605234][T16336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.605257][T16336] do_syscall_64+0x174/0x580 [ 1189.605283][T16336] ? trace_irq_disable+0x3b/0x140 [ 1189.605306][T16336] ? clear_bhb_loop+0x40/0x90 [ 1189.605329][T16336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.605347][T16336] RIP: 0033:0x7fcd85f9de59 [ 1189.605364][T16336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.605379][T16336] RSP: 002b:00007fcd86dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.605398][T16336] RAX: ffffffffffffffda RBX: 00007fcd86225fa0 RCX: 00007fcd85f9de59 [ 1189.605411][T16336] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1189.605422][T16336] RBP: 00007fcd86dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.605432][T16336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.605441][T16336] R13: 00007fcd86226038 R14: 00007fcd86225fa0 R15: 00007ffd06111b88 [ 1189.605469][T16336] [ 1189.867157][T16340] siw: device registration error -23 [ 1190.304461][T16369] syz_tun: entered allmulticast mode [ 1190.326788][T16368] syz_tun: left allmulticast mode [ 1190.577307][T16378] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1190.768595][T16389] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1190.791175][T16391] syzkaller0: entered promiscuous mode [ 1190.806398][T16391] syzkaller0: entered allmulticast mode [ 1190.949150][T16397] netlink: 'syz.4.13541': attribute type 9 has an invalid length. [ 1191.008396][T16399] netlink: 'syz.1.13542': attribute type 1 has an invalid length. [ 1191.090093][T16401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.183376][T16405] syzkaller0: entered promiscuous mode [ 1191.189043][T16405] syzkaller0: entered allmulticast mode [ 1191.291955][T16411] netlink: 'syz.0.13547': attribute type 8 has an invalid length. [ 1192.455521][T16463] __nla_validate_parse: 4 callbacks suppressed [ 1192.455534][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13565'. [ 1192.480878][T16463] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1192.556287][T16465] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13566'. [ 1192.594551][T16465] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 1192.671895][T16467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13567'. [ 1192.775192][ T188] IPVS: starting estimator thread 0... [ 1192.857651][T16472] syz_tun: tun_net_xmit 42 [ 1192.872534][T16470] IPVS: using max 34 ests per chain, 81600 per kthread [ 1193.628037][T16507] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1193.640541][T16509] netlink: 180 bytes leftover after parsing attributes in process `syz.4.13584'. [ 1193.824171][T16517] syzkaller0: entered promiscuous mode [ 1193.843015][T16517] syzkaller0: entered allmulticast mode [ 1193.872322][ C0] syz_tun: tun_net_xmit 42 [ 1193.910777][T16519] team0 (unregistering): Port device team_slave_0 removed [ 1193.931005][T16519] team0 (unregistering): Port device team_slave_1 removed [ 1193.949115][T16521] tipc: Started in network mode [ 1193.955180][T16521] tipc: Node identity 76dba4cbb0ab, cluster identity 4711 [ 1193.964994][T16521] tipc: Enabled bearer , priority 0 [ 1193.968062][T16523] netlink: 240 bytes leftover after parsing attributes in process `syz.6.13590'. [ 1193.984459][T16516] tipc: Resetting bearer [ 1194.028427][T16516] tipc: Disabling bearer [ 1194.069652][T16525] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1194.270754][T16533] netlink: 712 bytes leftover after parsing attributes in process `syz.4.13595'. [ 1194.399855][T16540] netlink: 180 bytes leftover after parsing attributes in process `syz.1.13597'. [ 1194.609449][T16559] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1194.642361][T16555] syzkaller0: entered promiscuous mode [ 1194.648375][T16555] syzkaller0: entered allmulticast mode [ 1194.691228][T16562] sctp: [Deprecated]: syz.1.13605 (pid 16562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1194.691228][T16562] Use struct sctp_sack_info instead [ 1194.913835][ C0] syz_tun: tun_net_xmit 42 [ 1195.962661][ C0] syz_tun: tun_net_xmit 42 [ 1197.000886][ C0] syz_tun: tun_net_xmit 42 [ 1198.032313][ C0] syz_tun: tun_net_xmit 42 [ 1198.099703][T16584] netlink: 712 bytes leftover after parsing attributes in process `syz.0.13609'. [ 1198.199577][T16586] syzkaller0: entered promiscuous mode [ 1198.227537][T16586] syzkaller0: entered allmulticast mode [ 1198.287887][T16593] FAULT_INJECTION: forcing a failure. [ 1198.287887][T16593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.314178][T16594] netlink: 'syz.0.13612': attribute type 1 has an invalid length. [ 1198.315020][T16593] CPU: 1 UID: 0 PID: 16593 Comm: syz.1.13614 Not tainted syzkaller #0 PREEMPT(full) [ 1198.315044][T16593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1198.315055][T16593] Call Trace: [ 1198.315063][T16593] [ 1198.315072][T16593] dump_stack_lvl+0xe8/0x150 [ 1198.315106][T16593] should_fail_ex+0x40c/0x560 [ 1198.315133][T16593] _copy_from_iter+0x1d3/0x1660 [ 1198.315155][T16593] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1198.315179][T16593] ? rcu_is_watching+0x15/0xb0 [ 1198.315207][T16593] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1198.315232][T16593] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1198.315253][T16593] ? __pfx__copy_from_iter+0x10/0x10 [ 1198.315276][T16593] ? __alloc_skb+0x276/0x7a0 [ 1198.315298][T16593] ? __alloc_skb+0x276/0x7a0 [ 1198.315326][T16593] ? netlink_sendmsg+0x650/0xb40 [ 1198.315353][T16593] ? skb_put+0x112/0x210 [ 1198.315380][T16593] netlink_sendmsg+0x6c0/0xb40 [ 1198.315416][T16593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.315447][T16593] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1198.315471][T16593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.315497][T16593] sock_sendmsg_nosec+0x13a/0x180 [ 1198.315521][T16593] ____sys_sendmsg+0x54e/0x850 [ 1198.315553][T16593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.315588][T16593] ? import_iovec+0x73/0xa0 [ 1198.315617][T16593] ___sys_sendmsg+0x2a5/0x360 [ 1198.315642][T16593] ? __lock_acquire+0x683/0x2cf0 [ 1198.315671][T16593] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.315694][T16593] ? proc_fail_nth_write+0x184/0x210 [ 1198.315759][T16593] ? __fget_files+0x2a/0x420 [ 1198.315782][T16593] ? __fget_files+0x3a2/0x420 [ 1198.315815][T16593] __x64_sys_sendmsg+0x1b1/0x290 [ 1198.315844][T16593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1198.315903][T16593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.315924][T16593] do_syscall_64+0x174/0x580 [ 1198.315948][T16593] ? trace_irq_disable+0x3b/0x140 [ 1198.315970][T16593] ? clear_bhb_loop+0x40/0x90 [ 1198.315993][T16593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.316012][T16593] RIP: 0033:0x7fcd85f9de59 [ 1198.316029][T16593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.316046][T16593] RSP: 002b:00007fcd86dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.316065][T16593] RAX: ffffffffffffffda RBX: 00007fcd86225fa0 RCX: 00007fcd85f9de59 [ 1198.316079][T16593] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1198.316091][T16593] RBP: 00007fcd86dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.316103][T16593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.316114][T16593] R13: 00007fcd86226038 R14: 00007fcd86225fa0 R15: 00007ffd06111b88 [ 1198.316144][T16593] [ 1198.770658][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1198.785340][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1198.799609][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1198.809050][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1198.817355][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1198.867309][T10202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1198.875183][T10202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1198.890540][T10202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1198.899020][T10202] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1198.906954][T10202] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1199.011346][T16625] openvswitch: netlink: Missing valid actions attribute. [ 1199.046143][T16625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.070556][T16621] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13619'. [ 1199.183108][T16618] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13619'. [ 1199.266674][T16638] netlink: 712 bytes leftover after parsing attributes in process `syz.0.13622'. [ 1199.417518][T16643] x_tables: duplicate entry at hook 1 [ 1199.715466][T16612] vxcan1 speed is unknown, defaulting to 1000 [ 1199.816443][T16656] syzkaller0: entered promiscuous mode [ 1199.851264][T16656] syzkaller0: entered allmulticast mode [ 1200.269030][T16612] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1200.429027][T16675] netlink: 776 bytes leftover after parsing attributes in process `syz.0.13634'. [ 1200.607610][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13638'. [ 1200.817930][T16691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13643'. [ 1200.893703][T16691] ip6tnl2: entered allmulticast mode [ 1200.906386][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13643'. [ 1200.993077][T10202] Bluetooth: hci4: command tx timeout [ 1201.127695][T16704] netlink: 'syz.6.13648': attribute type 12 has an invalid length. [ 1201.154887][T16707] netlink: 776 bytes leftover after parsing attributes in process `syz.1.13647'. [ 1201.411421][T16720] syz_tun: tun_net_xmit 42 [ 1201.448781][T16612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.456604][T16612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.464804][T16612] bridge_slave_0: entered allmulticast mode [ 1201.465317][T16724] FAULT_INJECTION: forcing a failure. [ 1201.465317][T16724] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.474356][T16612] bridge_slave_0: entered promiscuous mode [ 1201.493700][T16612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.500992][T16612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.508855][T16612] bridge_slave_1: entered allmulticast mode [ 1201.515843][T16724] CPU: 1 UID: 0 PID: 16724 Comm: syz.0.13652 Not tainted syzkaller #0 PREEMPT(full) [ 1201.515871][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1201.515883][T16724] Call Trace: [ 1201.515891][T16724] [ 1201.515899][T16724] dump_stack_lvl+0xe8/0x150 [ 1201.515933][T16724] should_fail_ex+0x40c/0x560 [ 1201.515960][T16724] should_failslab+0xa8/0x100 [ 1201.515989][T16724] __kmalloc_cache_noprof+0xa8/0x660 [ 1201.516012][T16724] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1201.516037][T16724] ? __kmalloc_cache_noprof+0x150/0x660 [ 1201.516060][T16724] ? sctp_add_bind_addr+0x8c/0x370 [ 1201.516080][T16724] ? sctp_add_bind_addr+0x8c/0x370 [ 1201.516109][T16724] sctp_add_bind_addr+0x8c/0x370 [ 1201.516137][T16724] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1201.516163][T16724] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1201.516187][T16724] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1201.516215][T16724] ? sctp_v4_is_any+0x35/0x60 [ 1201.516244][T16724] ? sctp_copy_one_addr+0x93/0x360 [ 1201.516270][T16724] sctp_bind_addr_copy+0xb3/0x3c0 [ 1201.516291][T16724] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1201.516325][T16724] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1201.516354][T16724] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1201.516382][T16724] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1201.516406][T16724] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1201.516428][T16724] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1201.516453][T16724] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1201.516472][T16724] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1201.516497][T16724] sctp_sendmsg+0x159b/0x2d00 [ 1201.516531][T16724] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1201.516555][T16724] ? aa_sk_perm+0x6d5/0x900 [ 1201.516580][T16724] ? __might_fault+0xaf/0x130 [ 1201.516600][T16724] ? sock_rps_record_flow+0x19/0x350 [ 1201.516623][T16724] ? inet_sendmsg+0x298/0x320 [ 1201.516644][T16724] ? __pfx_inet_sendmsg+0x10/0x10 [ 1201.516665][T16724] sock_sendmsg_nosec+0x10e/0x180 [ 1201.516686][T16724] __sys_sendto+0x408/0x5a0 [ 1201.516710][T16724] ? ksys_write+0x1e6/0x270 [ 1201.516739][T16724] ? __pfx___sys_sendto+0x10/0x10 [ 1201.516762][T16724] ? __mutex_unlock_slowpath+0x731/0x900 [ 1201.516815][T16724] ? __pfx_ksys_write+0x10/0x10 [ 1201.516849][T16724] __x64_sys_sendto+0xde/0x100 [ 1201.516876][T16724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.516898][T16724] do_syscall_64+0x174/0x580 [ 1201.516922][T16724] ? clear_bhb_loop+0x40/0x90 [ 1201.516946][T16724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.516965][T16724] RIP: 0033:0x7f2fc979de59 [ 1201.516983][T16724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.516998][T16724] RSP: 002b:00007f2fca6a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1201.517018][T16724] RAX: ffffffffffffffda RBX: 00007f2fc9a26090 RCX: 00007f2fc979de59 [ 1201.517032][T16724] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 1201.517044][T16724] RBP: 00007f2fca6a3090 R08: 0000200000000240 R09: 0000000000000010 [ 1201.517056][T16724] R10: f1704a4122f681df R11: 0000000000000246 R12: 0000000000000002 [ 1201.517066][T16724] R13: 00007f2fc9a26128 R14: 00007f2fc9a26090 R15: 00007fffb5477cc8 [ 1201.517095][T16724] [ 1201.517376][T16612] bridge_slave_1: entered promiscuous mode [ 1201.880956][T16612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.894461][T16612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.943382][T16612] team0: Port device team_slave_0 added [ 1201.966939][T16612] team0: Port device team_slave_1 added [ 1202.081563][T16612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.090987][T16612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.119908][T16612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.136763][T16612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.145955][T16612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.172950][T16612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.295258][T16612] hsr_slave_0: entered promiscuous mode [ 1202.314873][T16612] hsr_slave_1: entered promiscuous mode [ 1202.340464][T16612] debugfs: 'hsr0' already exists in 'hsr' [ 1202.357998][T16612] Cannot create hsr debugfs directory [ 1202.430081][T16749] netlink: 776 bytes leftover after parsing attributes in process `syz.4.13660'. [ 1202.439428][ C1] syz_tun: tun_net_xmit 42 [ 1203.006878][T28108] bridge_slave_1: left allmulticast mode [ 1203.035660][T28108] bridge_slave_1: left promiscuous mode [ 1203.065152][T28108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.072919][T10202] Bluetooth: hci4: command tx timeout [ 1203.090607][T28108] bridge_slave_0: left allmulticast mode [ 1203.101349][T28108] bridge_slave_0: left promiscuous mode [ 1203.108396][T28108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.131249][T28108] lo: left allmulticast mode [ 1203.247170][T16788] __nla_validate_parse: 1 callbacks suppressed [ 1203.247189][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13668'. [ 1203.457787][T28108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.470775][T28108] bond_slave_0: left allmulticast mode [ 1203.472469][ C1] syz_tun: tun_net_xmit 42 [ 1203.486293][T28108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.495899][T28108] bond_slave_1: left allmulticast mode [ 1203.503426][T28108] bond0 (unregistering): Released all slaves [ 1203.533839][T16788] netlink: 'syz.4.13668': attribute type 12 has an invalid length. [ 1203.730448][T28108] tipc: Left network mode [ 1203.918131][T16802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13675'. [ 1203.965577][T16802] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13675'. [ 1204.373893][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13680'. [ 1204.460760][T16821] FAULT_INJECTION: forcing a failure. [ 1204.460760][T16821] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.473487][T16821] CPU: 0 UID: 0 PID: 16821 Comm: syz.4.13682 Not tainted syzkaller #0 PREEMPT(full) [ 1204.473511][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1204.473522][T16821] Call Trace: [ 1204.473531][T16821] [ 1204.473539][T16821] dump_stack_lvl+0xe8/0x150 [ 1204.473573][T16821] should_fail_ex+0x40c/0x560 [ 1204.473602][T16821] should_failslab+0xa8/0x100 [ 1204.473629][T16821] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1204.473657][T16821] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1204.473678][T16821] ? lock_acquire+0x106/0x350 [ 1204.473701][T16821] ? dst_alloc+0x105/0x170 [ 1204.473719][T16821] ? dst_alloc+0x105/0x170 [ 1204.473740][T16821] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1204.473768][T16821] dst_alloc+0x105/0x170 [ 1204.473793][T16821] ip6_pol_route+0xba1/0x14d0 [ 1204.473819][T16821] ? ip6_pol_route+0x163/0x14d0 [ 1204.473842][T16821] ? __pfx_ip6_pol_route+0x10/0x10 [ 1204.473861][T16821] ? __lock_acquire+0x683/0x2cf0 [ 1204.473895][T16821] ? __lock_acquire+0x683/0x2cf0 [ 1204.473923][T16821] fib6_rule_lookup+0x222/0x730 [ 1204.473954][T16821] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1204.473974][T16821] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1204.474003][T16821] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.474025][T16821] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.474049][T16821] ? dev_get_by_index_rcu+0xee/0x110 [ 1204.474076][T16821] ip6_route_output_flags+0x364/0x5d0 [ 1204.474095][T16821] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.474118][T16821] ip6_dst_lookup_tail+0x1a1/0x1610 [ 1204.474151][T16821] ? sk_dst_check+0x25/0x480 [ 1204.474176][T16821] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1204.474197][T16821] ? sk_dst_check+0x25/0x480 [ 1204.474225][T16821] ? sk_dst_check+0x25/0x480 [ 1204.474251][T16821] ? sk_dst_check+0x25/0x480 [ 1204.474271][T16821] ? sk_dst_check+0x30e/0x480 [ 1204.474297][T16821] ip6_sk_dst_lookup_flow+0x79a/0xa50 [ 1204.474322][T16821] ? ping_v6_sendmsg+0xc0d/0x12a0 [ 1204.474436][T16821] ping_v6_sendmsg+0xc86/0x12a0 [ 1204.474473][T16821] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 1204.474500][T16821] ? __lock_acquire+0x683/0x2cf0 [ 1204.474543][T16821] ? reacquire_held_locks+0x104/0x190 [ 1204.474571][T16821] ? release_sock+0x2f/0x260 [ 1204.474608][T16821] ? __local_bh_enable_ip+0xd0/0x130 [ 1204.474631][T16821] ? lockdep_hardirqs_on+0x7a/0x110 [ 1204.474655][T16821] ? inet_sendmsg+0x10d/0x320 [ 1204.474680][T16821] ? inet_sendmsg+0x298/0x320 [ 1204.474706][T16821] ? __pfx_inet_sendmsg+0x10/0x10 [ 1204.474729][T16821] sock_sendmsg_nosec+0x10e/0x180 [ 1204.474753][T16821] ____sys_sendmsg+0x54e/0x850 [ 1204.474784][T16821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1204.474825][T16821] ? import_iovec+0x73/0xa0 [ 1204.474853][T16821] ___sys_sendmsg+0x2a5/0x360 [ 1204.474877][T16821] ? __lock_acquire+0x683/0x2cf0 [ 1204.474904][T16821] ? __pfx____sys_sendmsg+0x10/0x10 [ 1204.474938][T16821] ? kstrtouint+0x6e/0xe0 [ 1204.474990][T16821] ? __fget_files+0x2a/0x420 [ 1204.475013][T16821] ? __fget_files+0x3a2/0x420 [ 1204.475049][T16821] __sys_sendmmsg+0x273/0x4d0 [ 1204.475083][T16821] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1204.475118][T16821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1204.475158][T16821] ? ksys_write+0x242/0x270 [ 1204.475190][T16821] ? __pfx_ksys_write+0x10/0x10 [ 1204.475226][T16821] __x64_sys_sendmmsg+0xa0/0xc0 [ 1204.475254][T16821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.475275][T16821] do_syscall_64+0x174/0x580 [ 1204.475299][T16821] ? trace_irq_disable+0x3b/0x140 [ 1204.475323][T16821] ? clear_bhb_loop+0x40/0x90 [ 1204.475347][T16821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.475367][T16821] RIP: 0033:0x7fca0f39de59 [ 1204.475386][T16821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.475403][T16821] RSP: 002b:00007fca10244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1204.475424][T16821] RAX: ffffffffffffffda RBX: 00007fca0f625fa0 RCX: 00007fca0f39de59 [ 1204.475439][T16821] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 1204.475451][T16821] RBP: 00007fca10244090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.475463][T16821] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.475475][T16821] R13: 00007fca0f626038 R14: 00007fca0f625fa0 R15: 00007ffdf8fcf9b8 [ 1204.475509][T16821] [ 1204.512828][ C1] syz_tun: tun_net_xmit 42 [ 1204.529946][T16612] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1204.929749][T16612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1204.938971][ T30] audit: type=1804 audit(1783339082.188:17): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.13684" name="/newroot/474/cgroup.controllers" dev="tmpfs" ino=2421 res=1 errno=0 [ 1205.041330][ T30] audit: type=1800 audit(1783339082.188:18): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13684" name="cgroup.controllers" dev="tmpfs" ino=2421 res=0 errno=0 [ 1205.094614][T16612] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1205.119508][T16612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1205.153689][T10202] Bluetooth: hci4: command tx timeout [ 1205.172370][T16612] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1205.225297][T16612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1205.267054][T16612] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1205.340314][T16612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1205.552308][ C1] syz_tun: tun_net_xmit 42 [ 1205.617026][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13695'. [ 1205.629620][T16866] netlink: 666 bytes leftover after parsing attributes in process `syz.4.13696'. [ 1205.657714][T16866] netlink: 748 bytes leftover after parsing attributes in process `syz.4.13696'. [ 1205.714062][T16868] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13697'. [ 1205.759116][T16612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.835601][T16612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.891362][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.898597][T27716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.966590][T28111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.972465][T16874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13700'. [ 1205.973821][T28111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.592556][ C1] syz_tun: tun_net_xmit 42 [ 1206.689593][T28108] hsr_slave_0: left promiscuous mode [ 1206.711334][T28108] hsr_slave_1: left promiscuous mode [ 1206.730087][T28108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.758270][T28108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.788487][T28108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.801841][T28108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.827095][T16908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.865471][T28108] veth1_macvtap: left promiscuous mode [ 1206.876435][T28108] veth0_macvtap: left promiscuous mode [ 1207.233328][T10202] Bluetooth: hci4: command tx timeout [ 1207.238970][T16926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13713'. [ 1207.276720][T28108] team0 (unregistering): Port device team_slave_1 removed [ 1207.291792][T28108] team0 (unregistering): Port device team_slave_0 removed [ 1207.444737][T28115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.474000][T28115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.628015][T16933] netlink: 'syz.1.13715': attribute type 61 has an invalid length. [ 1207.883685][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1207.905967][T16941] veth3: entered promiscuous mode [ 1207.919837][T16941] veth3: entered allmulticast mode [ 1207.933811][T16612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.943972][T28108] IPVS: stop unused estimator thread 0... [ 1208.261964][T16965] __nla_validate_parse: 1 callbacks suppressed [ 1208.261984][T16965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13724'. [ 1208.513175][T16612] veth0_vlan: entered promiscuous mode [ 1208.599141][T16612] veth1_vlan: entered promiscuous mode [ 1208.707105][T16612] veth0_macvtap: entered promiscuous mode [ 1208.745677][T16612] veth1_macvtap: entered promiscuous mode [ 1208.767989][T16982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13729'. [ 1208.777759][T16612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.798832][T16982] syz_tun: tun_net_xmit 42 [ 1208.806344][T16612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.853865][T28108] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.867099][T28108] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.883533][T28108] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.912077][T28108] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.145308][T16996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13734'. [ 1209.160417][T28115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.179373][T28115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.259191][T28108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.269715][T28108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.671303][T17019] netlink: 'syz.6.13741': attribute type 1 has an invalid length. [ 1209.733104][T17019] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1209.796615][T17026] bond9: (slave veth3): Enslaving as an active interface with a down link [ 1209.859826][T17019] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1209.872369][ C1] syz_tun: tun_net_xmit 42 [ 1209.918026][T17019] bond9: (slave batadv1): making interface the new active one [ 1209.960116][T17019] batadv1: entered promiscuous mode [ 1210.024501][T17019] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 1210.106765][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13745'. [ 1210.185536][T17026] bond9: (slave veth5): Enslaving as an active interface with a down link [ 1210.234867][T17039] bridge1: port 1(erspan0) entered disabled state [ 1210.315921][T17051] FAULT_INJECTION: forcing a failure. [ 1210.315921][T17051] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.343385][T17051] CPU: 0 UID: 0 PID: 17051 Comm: syz.1.13749 Not tainted syzkaller #0 PREEMPT(full) [ 1210.343414][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1210.343426][T17051] Call Trace: [ 1210.343434][T17051] [ 1210.343443][T17051] dump_stack_lvl+0xe8/0x150 [ 1210.343477][T17051] should_fail_ex+0x40c/0x560 [ 1210.343505][T17051] should_failslab+0xa8/0x100 [ 1210.343535][T17051] __kmalloc_cache_noprof+0xa8/0x660 [ 1210.343558][T17051] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1210.343582][T17051] ? __kmalloc_cache_noprof+0x150/0x660 [ 1210.343605][T17051] ? sctp_add_bind_addr+0x8c/0x370 [ 1210.343625][T17051] ? sctp_add_bind_addr+0x8c/0x370 [ 1210.343654][T17051] sctp_add_bind_addr+0x8c/0x370 [ 1210.343679][T17051] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1210.343705][T17051] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1210.343729][T17051] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1210.343755][T17051] ? sctp_v4_is_any+0x35/0x60 [ 1210.343778][T17051] ? sctp_copy_one_addr+0x93/0x360 [ 1210.343805][T17051] sctp_bind_addr_copy+0xb3/0x3c0 [ 1210.343830][T17051] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1210.343864][T17051] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1210.343896][T17051] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1210.343931][T17051] ? __local_bh_enable_ip+0xd0/0x130 [ 1210.343952][T17051] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1210.343974][T17051] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1210.344004][T17051] sctp_sendmsg+0x159b/0x2d00 [ 1210.344047][T17051] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1210.344086][T17051] ? aa_sk_perm+0x6d5/0x900 [ 1210.344122][T17051] ? __might_fault+0xaf/0x130 [ 1210.344148][T17051] ? sock_rps_record_flow+0x19/0x350 [ 1210.344177][T17051] ? inet_sendmsg+0x298/0x320 [ 1210.344204][T17051] ? __pfx_inet_sendmsg+0x10/0x10 [ 1210.344227][T17051] sock_sendmsg_nosec+0x10e/0x180 [ 1210.344253][T17051] ____sys_sendmsg+0x54e/0x850 [ 1210.344287][T17051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1210.344325][T17051] ? import_iovec+0x73/0xa0 [ 1210.344356][T17051] ___sys_sendmsg+0x2a5/0x360 [ 1210.344382][T17051] ? __lock_acquire+0x683/0x2cf0 [ 1210.344413][T17051] ? __pfx____sys_sendmsg+0x10/0x10 [ 1210.344480][T17051] ? __fget_files+0x2a/0x420 [ 1210.344505][T17051] ? __fget_files+0x3a2/0x420 [ 1210.344540][T17051] __x64_sys_sendmsg+0x1b1/0x290 [ 1210.344572][T17051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1210.344619][T17051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.344641][T17051] do_syscall_64+0x174/0x580 [ 1210.344665][T17051] ? trace_irq_disable+0x3b/0x140 [ 1210.344689][T17051] ? clear_bhb_loop+0x40/0x90 [ 1210.344714][T17051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.344733][T17051] RIP: 0033:0x7fcd85f9de59 [ 1210.344752][T17051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.344769][T17051] RSP: 002b:00007fcd86dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1210.344789][T17051] RAX: ffffffffffffffda RBX: 00007fcd86225fa0 RCX: 00007fcd85f9de59 [ 1210.344804][T17051] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1210.344817][T17051] RBP: 00007fcd86dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.344830][T17051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1210.344843][T17051] R13: 00007fcd86226038 R14: 00007fcd86225fa0 R15: 00007ffd06111b88 [ 1210.344876][T17051] [ 1210.912335][ C1] syz_tun: tun_net_xmit 42 [ 1210.991340][T17072] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13754'. [ 1211.181264][T17078] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 1211.201551][T17087] netlink: 'syz.4.13763': attribute type 1 has an invalid length. [ 1211.203709][T17078] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1211.221481][T17087] netlink: 232 bytes leftover after parsing attributes in process `syz.4.13763'. [ 1211.249633][T17087] netlink: 'syz.4.13763': attribute type 1 has an invalid length. [ 1211.260701][T17090] Unsupported ieee802154 address type: 0 [ 1211.273274][T17090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13762'. [ 1211.302081][T17093] syzkaller0: entered promiscuous mode [ 1211.307903][T17093] syzkaller0: entered allmulticast mode [ 1211.751255][T17106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13767'. [ 1211.952658][ C1] syz_tun: tun_net_xmit 42 [ 1212.033532][T17112] netlink: 'syz.8.13769': attribute type 1 has an invalid length. [ 1212.056539][T17112] netlink: 756 bytes leftover after parsing attributes in process `syz.8.13769'. [ 1212.232774][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13772'. [ 1212.998608][ C1] syz_tun: tun_net_xmit 42 [ 1214.032379][ C1] syz_tun: tun_net_xmit 42 [ 1214.924915][ T31] INFO: task syz.2.12534:13013 blocked for more than 143 seconds. [ 1214.932906][ T31] Not tainted syzkaller #0 [ 1214.937861][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1214.949862][ T31] task:syz.2.12534 state:D stack:25656 pid:13013 tgid:13010 ppid:4812 task_flags:0x400040 flags:0x00080002 [ 1214.962577][ T31] Call Trace: [ 1214.965898][ T31] [ 1214.968839][ T31] __schedule+0x17d9/0x56c0 [ 1214.973436][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1214.978815][ T31] ? __pfx___schedule+0x10/0x10 [ 1214.984049][ T31] ? schedule+0x90/0x2b0 [ 1214.988313][ T31] schedule+0x164/0x2b0 [ 1214.994181][ T31] schedule_preempt_disabled+0x13/0x30 [ 1214.999689][ T31] __mutex_lock+0x7bf/0x1550 [ 1215.008661][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1215.013786][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 1215.020001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1215.025638][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1215.031035][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1215.036321][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 1215.042759][ T31] ? kasan_save_track+0x3e/0x80 [ 1215.047644][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1215.052840][ T31] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 1215.059445][ T31] ? __alloc_skb+0x2bd/0x7a0 [ 1215.064218][ T31] ? netlink_dump+0x1e7/0xee0 [ 1215.068925][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 1215.074928][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 1215.083932][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 1215.088652][ T31] ? genl_rcv+0x28/0x40 [ 1215.092878][ T31] ? netlink_unicast+0x7bb/0x940 [ 1215.097827][ T31] ? netlink_sendmsg+0x813/0xb40 [ 1215.103157][ T31] ? sock_sendmsg_nosec+0x13a/0x180 [ 1215.108367][ T31] ? ____sys_sendmsg+0x54e/0x850 [ 1215.113783][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 1215.118651][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1215.123928][ T31] ? do_syscall_64+0x174/0x580 [ 1215.128726][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.135110][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1215.141640][ T31] ? rcu_is_watching+0x15/0xb0 [ 1215.146831][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1215.151442][ T31] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 1215.158094][ T31] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1215.164718][ T31] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 1215.171361][ T31] ? netlink_dump+0x1e7/0xee0 [ 1215.176993][ T31] ? netlink_dump+0x1e7/0xee0 [ 1215.181722][ T31] genl_dumpit+0x10b/0x1b0 [ 1215.186322][ T31] netlink_dump+0x711/0xee0 [ 1215.190876][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 1215.196252][ T31] ? genl_start+0x497/0x6d0 [ 1215.200783][ T31] __netlink_dump_start+0x589/0x7b0 [ 1215.207481][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1215.213436][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1215.219695][ T31] ? genl_get_cmd+0x523/0x960 [ 1215.224786][ T31] ? __pfx_genl_start+0x10/0x10 [ 1215.229653][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 1215.234987][ T31] ? __pfx_genl_done+0x10/0x10 [ 1215.239773][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1215.245167][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 1215.249715][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1215.255053][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1215.261562][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1215.267349][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1215.272135][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1215.277379][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1215.283134][ T31] ? down_read+0x2be/0x330 [ 1215.287591][ T31] genl_rcv+0x28/0x40 [ 1215.291581][ T31] netlink_unicast+0x7bb/0x940 [ 1215.296671][ T31] netlink_sendmsg+0x813/0xb40 [ 1215.301471][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.306941][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1215.311913][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.318197][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1215.323725][ T31] ____sys_sendmsg+0x54e/0x850 [ 1215.329874][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1215.335298][ T31] ? import_iovec+0x73/0xa0 [ 1215.339841][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1215.345024][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1215.350024][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1215.355571][ T31] ? futex_wait+0x2a2/0x390 [ 1215.360167][ T31] ? __fget_files+0x2a/0x420 [ 1215.364955][ T31] ? __fget_files+0x3a2/0x420 [ 1215.369663][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1215.374905][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1215.380381][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.386974][ T31] do_syscall_64+0x174/0x580 [ 1215.391600][ T31] ? trace_irq_disable+0x3b/0x140 [ 1215.397006][ T31] ? clear_bhb_loop+0x40/0x90 [ 1215.401705][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.408190][ T31] RIP: 0033:0x7efdf8b9de59 [ 1215.412800][ T31] RSP: 002b:00007efdf9ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1215.421292][ T31] RAX: ffffffffffffffda RBX: 00007efdf8e26090 RCX: 00007efdf8b9de59 [ 1215.429447][ T31] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1215.437661][ T31] RBP: 00007efdf8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1215.447374][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.456355][ T31] R13: 00007efdf8e26128 R14: 00007efdf8e26090 R15: 00007ffc1bdb72b8 [ 1215.465341][ T31] [ 1215.468527][ T31] [ 1215.468527][ T31] Showing all locks held in the system: [ 1215.489076][ T31] 1 lock held by khungtaskd/31: [ 1215.494523][ T31] #0: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1215.504992][ T31] 2 locks held by getty/5386: [ 1215.509698][ T31] #0: ffff8880363870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1215.519896][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1215.531278][ T31] 5 locks held by kworker/u8:14/27716: [ 1215.537320][ T31] 3 locks held by kworker/u8:16/28104: [ 1215.542963][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1215.556837][ T31] #1: ffffc90003557c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1215.568020][ T31] #2: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1215.577043][ T31] 3 locks held by kworker/u8:19/28108: [ 1215.582873][ T31] #0: ffff888032dd5940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1215.594585][ T31] #1: ffffc90003637c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1215.607555][ T31] #2: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1215.635851][ T31] 3 locks held by kworker/u8:20/28109: [ 1215.655699][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1215.667794][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1215.676988][ T31] #2: ffff8880b8726058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 1215.686171][ T31] 2 locks held by syz.5.11391/9665: [ 1215.691391][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1215.699624][ T31] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1215.710091][ T31] 3 locks held by syz.2.12534/13013: [ 1215.715599][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1215.724019][ T31] #1: ffff88807ef836e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1215.736511][ T31] #2: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 1215.747805][ T31] 2 locks held by syz.7.13453/16124: [ 1215.753419][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1215.761692][ T31] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 1215.774033][ T31] 2 locks held by syz.0.13764/17091: [ 1215.779362][ T31] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1215.788471][ T31] #1: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1215.799536][ T31] 1 lock held by syz.1.13767/17102: [ 1215.805041][ T31] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1215.814597][ T31] 1 lock held by syz.1.13767/17103: [ 1215.819832][ T31] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1215.829517][ T31] 2 locks held by syz.4.13772/17117: [ 1215.835155][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1215.843968][ T31] #1: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 1215.862258][ T31] 2 locks held by syz.8.13774/17122: [ 1215.867589][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1215.878575][ T31] #1: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 1215.888841][ T31] 1 lock held by syz.6.13776/17131: [ 1215.894142][ T31] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x6a7/0xb20 [ 1215.903499][ T31] 2 locks held by dhcpcd/17136: [ 1215.908359][ T31] #0: ffff888045973600 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1215.918758][ T31] #1: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1215.929729][ T31] 1 lock held by dhcpcd/17137: [ 1215.935203][ T31] #0: ffff88807d5d6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1215.945039][ T31] [ 1215.948025][ T31] ============================================= [ 1215.948025][ T31] [ 1215.959320][ T31] NMI backtrace for cpu 0 [ 1215.959339][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1215.959359][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1215.959370][ T31] Call Trace: [ 1215.959379][ T31] [ 1215.959388][ T31] dump_stack_lvl+0xe8/0x150 [ 1215.959431][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1215.959453][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1215.959480][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1215.959499][ T31] sys_info+0x135/0x170 [ 1215.959513][ T31] watchdog+0xfd7/0x1030 [ 1215.959538][ T31] ? watchdog+0x1c7/0x1030 [ 1215.959562][ T31] kthread+0x388/0x470 [ 1215.959583][ T31] ? __pfx_watchdog+0x10/0x10 [ 1215.959600][ T31] ? __pfx_kthread+0x10/0x10 [ 1215.959621][ T31] ret_from_fork+0x514/0xb70 [ 1215.959646][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1215.959667][ T31] ? __switch_to+0xc89/0x1420 [ 1215.959688][ T31] ? __pfx_kthread+0x10/0x10 [ 1215.959710][ T31] ret_from_fork_asm+0x1a/0x30 [ 1215.959738][ T31] [ 1215.959745][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1216.074805][ C1] NMI backtrace for cpu 1 [ 1216.074823][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1216.074842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1216.074854][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1216.074881][ C1] Code: 2c 81 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 19 1b 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1216.074905][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 1216.074921][ C1] RAX: 000000000030489d RBX: ffffffff819ab370 RCX: 0000000080000001 [ 1216.074934][ C1] RDX: 0000000000000001 RSI: ffffffff8e22940e RDI: ffffffff8c4bd280 [ 1216.074946][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 1216.074960][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 1216.074972][ C1] R13: 1ffff11003c52000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 1216.074985][ C1] FS: 0000000000000000(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000 [ 1216.075000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1216.075011][ C1] CR2: 0000558fa79974b0 CR3: 000000007c88e000 CR4: 00000000003526f0 [ 1216.075027][ C1] Call Trace: [ 1216.075034][ C1] [ 1216.075040][ C1] default_idle+0x9/0x20 [ 1216.075064][ C1] default_idle_call+0x72/0xb0 [ 1216.075091][ C1] do_idle+0x2e0/0x540 [ 1216.075115][ C1] ? __pfx_do_idle+0x10/0x10 [ 1216.075142][ C1] cpu_startup_entry+0x43/0x60 [ 1216.075164][ C1] start_secondary+0x101/0x110 [ 1216.075187][ C1] common_startup_64+0x13e/0x157 [ 1216.075216][ C1] [ 1216.241418][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1216.248286][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1216.257411][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1216.267456][ T31] Call Trace: [ 1216.270723][ T31] [ 1216.273643][ T31] vpanic+0x56c/0xa60 [ 1216.277629][ T31] ? __pfx___schedule+0x10/0x10 [ 1216.282476][ T31] ? __pfx_vpanic+0x10/0x10 [ 1216.286985][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1216.293132][ T31] panic+0xc5/0xd0 [ 1216.296849][ T31] ? __pfx_panic+0x10/0x10 [ 1216.301255][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1216.306704][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1216.312071][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1216.318215][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1216.324372][ T31] watchdog+0x1030/0x1030 [ 1216.328700][ T31] ? watchdog+0x1c7/0x1030 [ 1216.333111][ T31] kthread+0x388/0x470 [ 1216.337176][ T31] ? __pfx_watchdog+0x10/0x10 [ 1216.341842][ T31] ? __pfx_kthread+0x10/0x10 [ 1216.346462][ T31] ret_from_fork+0x514/0xb70 [ 1216.351052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1216.356158][ T31] ? __switch_to+0xc89/0x1420 [ 1216.360831][ T31] ? __pfx_kthread+0x10/0x10 [ 1216.365415][ T31] ret_from_fork_asm+0x1a/0x30 [ 1216.370180][ T31] [ 1216.373480][ T31] Kernel Offset: disabled [ 1216.377796][ T31] Rebooting in 86400 seconds..