last executing test programs: 1m20.80461991s ago: executing program 1 (id=8149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m20.743271912s ago: executing program 1 (id=8150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25040000000400ae802337b6fd303907f21288179da7e312e07425e70481870f27fb5c68dc6244065c85e2350137405da505413bfcbe1ad47d063020f3e3d2f0e69089298a5f044635e9bf2a354f8886d6fb5098147e9ce25d71aa08f8602d7471dbe54d050309fe5f42cc217deacd01aad631e62b92317672b8e098ee7ebd1f5a4493862ae557121b8e208a2bc01a18e19124cbc3a801d4f084b3620fbe3c729c3531390370962074fce017b567bd389a8c9b13d670c61c68484e96f270b0ba50e477f0"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/125, 0x7d}], 0x2}, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r2, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x8c4}, 0x854) 1m20.654309214s ago: executing program 1 (id=8153): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) 1m20.565352468s ago: executing program 1 (id=8155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x1, 0x300) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES8=r3, @ANYRES16=0x0], 0x68) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000080)=0x8) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000140), 0xc9, 0x10001) write$tun(r0, &(0x7f0000002240)={@void, @val={0x2, 0x0, 0x2, 0xe7b6, 0x14, 0x1}, @ipv4=@dccp={{0x1b, 0x4, 0x1, 0xe, 0x132, 0x65, 0x0, 0x3, 0x21, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x39, 0x0, [{0x6, 0x7, "7d9bcf8859"}, {0x7, 0xc, "dcb077679d0498e918ef"}, {0x7, 0x3, "96"}, {0x6, 0xa, "dac6569c0d589528"}, {0x6, 0x7, "51008d3957"}, {0x1, 0x4, "b014"}, {0x0, 0x8, "644d964db266"}]}, @timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x3, [{@local, 0x4}, {@private=0xa010100, 0x7}, {@loopback, 0x7}]}]}}, {{0x4e20, 0x6e24, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, "ab5cf7", 0x1, "5dd58b"}, "afccd126a45da13a7360fabf96597f86c1852508bb94f5fede350606af2824b44e33b24fd4c81c6fd46649c030f865e63f6622908b23b448877b6402c64f18d4849d1292d5116f8d51b7077f3961a1105fae9430eaf78b8f4c6b36eff0152bfe7366e2649c55211ef4cd5dc58325035d47dae6a8214245748f7719d9ca05589ee2b9a94b358573cc899ae14b0459ea9f8d882dddbd158f083442021c804875bb935b60d31232727a5c07c586c90dd76076fcbbf3e71e"}}}, 0x13c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e7ffffff1600"/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r7, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x500, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0x77, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendto(r2, &(0x7f0000000080)="ae515272b2af70963a46cb14cb0cf9e555dbc66c8615af96d584d54ba240c1497171d9311de8d154e55137fb1aad9a7c5fb856fc3b04985a0bfe8744532512bf6ee626edc12516e2c98ab2e842c251edf4a349a82ced056e1e0203a90404f80f7f63453bea6a02ce24448811064b30f92f0e74e5f5210352bf1e", 0x7a, 0x4000005, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x6, 0x2, 0x8, @loopback, @loopback, 0x1, 0x8000, 0x9, 0x4}}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', r8, 0x80, 0x7800, 0x6, 0x7, {{0x26, 0x4, 0x3, 0x1, 0x98, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local, {[@lsrr={0x83, 0x27, 0xe6, [@local, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @cipso={0x86, 0x15, 0x2, [{0x6, 0x6, "e361d2a2"}, {0x2, 0x9, "f4cf1b3f93d7d3"}]}, @timestamp_prespec={0x44, 0x14, 0x7b, 0x3, 0x6, [{@broadcast, 0xac3b}, {@multicast1, 0xe}]}, @lsrr={0x83, 0xb, 0x8d, [@empty, @private=0xa010101]}, @noop, @ssrr={0x89, 0xf, 0xfd, [@rand_addr=0x64010102, @private=0xa010100, @loopback]}, @timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x3}]}, @lsrr={0x83, 0xb, 0x84, [@private=0xa010102, @loopback]}]}}}}}) 1m20.207320919s ago: executing program 1 (id=8162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000000c00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000240)={r1, &(0x7f0000000100)='batadv\x00', 0x801, &(0x7f0000000140)={@align=0x8225, {0x6000, 0x2, 0x6, 0x1000}}, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0xa21a}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r6, 0xd7735000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r4) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x1b0, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5c32}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb286}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffbc}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000840}, 0x48005) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r15, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r13, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) 1m20.181817059s ago: executing program 1 (id=8164): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2ac200, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000280)={{0x8, 0x2, 0x0, 0x8, 0x1}, [{0x401, 0x8, 0x3, 0x8}, {0xffffffffffffffff, 0x0, 0x3, 0x4}, {0xcc54, 0x9, 0x4, 0x81}, {0x6, 0x8, 0x6, 0xad}]}) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) sendfile(r1, r6, &(0x7f0000000100)=0x9, 0xdcd) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaeaaaaaa08004e11e221da0425cc82b04510001c006600ea070290780e0101020000"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000200)='FROZEN\x00', 0x7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000340)=r5, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) 1m5.101106656s ago: executing program 32 (id=8164): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000038000000bca3000000000000550305002dfeffff630af0ff0000000071a400fe000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430200000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a0acf30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478b41d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d859f49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f00960298f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2ccb0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab53080d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f982c91ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f098b6367917888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee1ee17da1900004c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f01ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864eeb6511004c1d44d90da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acccbc48d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d29000000003e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa63264648225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4db8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc351bc8a7c040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9dce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac42218301009bbf61e4bba695a41e2109eba8e40c3702bd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843ff3fd404f535be474f456778b5ef85afb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000003f1c0483706db2cb51a9439c2bf24fce70bb9ef9c150397aa1458d9045e9a066c4c07dcb5d3fd47532e6400d78e799e33dda64665388d543741c7440ebdd551ee967b6e2d14a1cc096f18779bc4e34f7de607ec7cbb28efa359d13683d5ef3adc614110f4d8610ebbb5e2d404be76418a0008f12850c49024211b4ea30dc07a52d95989123702f3caab2060f0dbd693ebcf0d5d32b4b76c473d668d63643a162bb4705764fd5656b033c4e49c28c9df7e20bb73ee59205520ad1e2ad93e22231f8251bba43534818baf226082d7d94e9544fe721af383b271d36a43e429ac976ce49ca182f6fcf5f5d1bc6388247669bb217af8c314cf5df36729c23cbcbab2fc7a2fdff67bf87c2651d0c1d87409d1dbef5457ba659111a23ebf03f9b876a03c00ee6b3e29f85321e9b47702f12e3eba8395cbbf7e5e67acc4d20a78ba87899884be807834578d1f2818140ba9facdb716cc8e744c17e5e66ca54b9a243067f85bf63ab86a7bd3bdc7bfd27a5be263205a1f8e2c650e88495fa4b3b6f7176c21c8dc81c9843479f4b14b9a13d8c0fc238e7500a399195373514c3b82efafcc261cfa53944f187ba7ea751a3437c3d4116399d5b65ddf8a641441086bbd30307adc59be211373873ef0fdb10d2c585e07dfd366f256f4b14f7db958cefc154f46bba0893f51acf2f8dd8a19055ffe12661932ac9a648e50683df90d17809e0bd5ec0e0c43f73e85cdc4912ad91b0753bd4561d79906588f9f5d09f56464cc2f56684d287b262b57c23ec78d2eaf96fb17c64f11ead4430c265c28ec02dca4ba38ecfecd4561855adeb2412430abcfa1e0391d0653567bf10827ccc1961743e096dcf2cc2e380b106491ae16d2a1a668de060f838408fbb60bbf017ad4d8dbd7a762c3c0705839f15a3c9f77ebe36bebbd27d98b519f36b12f5153905ed31453958c8c46cb8f974197eb01c819439fd43f43a15920fc1977f2f2a4bdd5d079283e1d6308251a5ae0461e2bd8190284f93f60244101ef8b6541a717a832ddf8aeed5455ed90bdeb9b03dae5481f6cbbf176321fff5e1aeb29840466177af699e84e49d3f9254e557e31a19bbfe55b62e20439710a75bcfa5c8c5f69f5b6cadddfc811fb73b78477688935b00f2f4971ba8c4c7c930e24d9f2fbcc9dc0bd2bf64294e47f02f69b0a84bdd4c0fedac522c7274d74bf367ca6c5441e177fbfc95a56d9490731b1aa1af08aeebb5a9e56d1b50bad5fc3f3ba8eb3095adba4ac1f236580000000000000000000000000000000000000000002e7ec9df3c71f02bb6d639855e3584aafd546739b880ffac40b1292971abc7faa153f90ec46f8c707fdb5b603ce64c155d76aeb8115f54ac9cb6eca976f8026a8bc56392b233a5a661d2e7ee1bbb330cef4da2ec20a4bc1249e45a3c69742ec706a8924bb3ed655137690e951b66fbafe688d98f898fcd545555ed60b3173dc2600f1c6f025dde0629055074e01f79751ba93da933a503a6b928ee43ced85e63996abd88f535bbd6eb7a1f613d2b1bb278341a9a3ed1f0cc81a2b39213ddad2e1e8e94ef639ec16f1d4ba1b89172e8036529d96cb07b409420b8c523103faeadb52341e2adbee1fc90e82924b64e948aea9bf810eb8623263c1dd4d8cc2eef8464f2554a4494a505ef204232f44665eb41c30ad2305056a89255734b3121849af8f6e7348cc9c13c76d285d701c2c078a7b2a41e0c7b2aded6377380e1454c00000000000000000000009355e100fd97c3214075e1ccb353b3e87c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2ac200, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000280)={{0x8, 0x2, 0x0, 0x8, 0x1}, [{0x401, 0x8, 0x3, 0x8}, {0xffffffffffffffff, 0x0, 0x3, 0x4}, {0xcc54, 0x9, 0x4, 0x81}, {0x6, 0x8, 0x6, 0xad}]}) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) sendfile(r1, r6, &(0x7f0000000100)=0x9, 0xdcd) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaeaaaaaa08004e11e221da0425cc82b04510001c006600ea070290780e0101020000"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000200)='FROZEN\x00', 0x7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000340)=r5, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) 2.323628515s ago: executing program 2 (id=9289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r0}, 0x38) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}, @ssrr={0x89, 0x7, 0x7c, [@rand_addr=0x64010101]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r0}, 0x38) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}, @ssrr={0x89, 0x7, 0x7c, [@rand_addr=0x64010101]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) (async) 2.095659763s ago: executing program 2 (id=9293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0}, 0x94) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000bc0)={r3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000000) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf25020006000500010000"], 0x30}, 0x1, 0x0, 0x0, 0x404c001}, 0x10) 2.0936673s ago: executing program 4 (id=9295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x1, 0x84, &(0x7f0000000000)="1a000f44e5ff0031", 0xfffffffffffffd54) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x16, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r6}, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x6}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x4b, 0x0, 0x11}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @const={0x0, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x5}, {0xa, 0x3}, {0x10, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x30, 0x30, 0x2e]}}, &(0x7f0000000540)=""/184, 0xa9, 0xb8, 0x0, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r9 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x2, @val=@tcx={@void, @value=r8}}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r12, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r12, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000bd1000/0x2000)=nil, 0x2000, 0x1000005, 0x4012, r13, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0xc}, {0xffff, 0x8}, {0x0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xb}}]}, 0x2d}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) socket(0x8, 0x6, 0x2) 1.763760102s ago: executing program 4 (id=9298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r3, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) 1.512016451s ago: executing program 4 (id=9301): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x20048040) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.404092162s ago: executing program 4 (id=9303): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r7) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc01000019000100d84a7aa25a29e2633860000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000006340856abb3d0000ffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x4000) 1.303873334s ago: executing program 0 (id=9305): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000740)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000a80)=""/30, 0x1e}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000171112e0000000000850000000000000095000000000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00?\x00', @ANYRES16, @ANYBLOB="8b300000000000000000150000000c009900040000000000000010"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r0}, 0x0, &(0x7f0000000fc0)=r1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x80, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x800, 0x9}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "1f2b20d07669df2363983ae8f1da08cd"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="ee431e1030667c34"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="55f9e6c9c89e"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="fcd508245c169c229255204050fc59d16715413a325d7e3010c2435ba359"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f00000006c0), &(0x7f0000000700)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r11) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.216683899s ago: executing program 2 (id=9306): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast2, @multicast1, 0x11, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@in, &(0x7f0000000180)=0x80, 0x81800) sendto$l2tp6(r7, &(0x7f00000001c0)="52eab1fc42d5abaa008c3075990641cc463a5cca87669e413cbcaaac6b680e878651d29c0401676e5f3f2046936e822aec546d9b4bac96bb8b9af57678ab0c3d081547d51f157dcdd9283615db748ff3f9861edc95bc5b48843659e761e6df611d4ce3d9de4178e9", 0x68, 0x20040000, &(0x7f0000000280)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8918, &(0x7f0000000000)={r6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x34, 0x1, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r9, r1, 0x2c, 0x2000, 0x0, @value, @void, @void, @void, r8}, 0x20) 1.039461891s ago: executing program 5 (id=9308): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x1b, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 999.914098ms ago: executing program 2 (id=9309): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x36, 0x6595d904020e1262, 0xee30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESDEC=r0, @ANYRESDEC=r5, @ANYRES8=r4], 0x44}, 0x1, 0x0, 0x0, 0x200c011}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x10, 0x2, 0x0) (async) write(r2, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x36, 0x6595d904020e1262, 0xee30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESDEC=r0, @ANYRESDEC=r5, @ANYRES8=r4], 0x44}, 0x1, 0x0, 0x0, 0x200c011}, 0x0) (async) 851.865941ms ago: executing program 5 (id=9310): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000980)=0xd, 0x4) socket$phonet(0x23, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000240)={0x6ec, 0x3b, 0x400, 0x55, 0x25dfdbfc, "", [@nested={0x313, 0x27, 0x0, 0x1, [@generic="211f4e46e6a920e23356bea8c56f1612cbac898d457955f8f784587d8532218c37ac28734008540898c3520b4350d051bfe7e7781e15a7a19627c4fd5a08b44b69e9c804dfe033656509e11475e23406659164dd580a75e95f08e7d7831f035d6f6dd239717b62e4efd694a1a157f44b42fa3e25", @typed={0xc, 0x111, 0x0, 0x0, @u64=0x10000}, @nested={0x4, 0x55}, @generic="1bb40021cbde9a5898e3be6a3e377bd51846038e161c8a713a61df3d08987355459e6d9be50c770edd0e39afb3ce2f", @typed={0x9c, 0xff, 0x0, 0x0, @binary="d153ab482b0c831c24340743a4112325fe827acea97b5dc4052f44be4d3692c6490e66533f288122e413b14cf36f01a74002c8bf49ee72bb269e56bdfc0bae210041ec26940a9db832244597292512ff9a1090bdb70c7c577438f6d69e621fa2628e81b542a691678735ea9df02baa5d7593372985ec35442d31ad58f66e66b1649fdd678c5721ea7eba711f151084842ec9708546365f8a"}, @generic="3dfa0dbe2b6e755321f88814ee2183be3de92fbb5186fb1ed9b8f1587e2219f6da5c5cb09102974bdd027ad248c2edee411a91bb1390f46e26099b09699121c1964b489b19", @nested={0x4, 0x43}, @generic="2cb37643c3cd6e4a25ceba49b27cb6b28e537ef837f61e8509462eb2e62d75e5ecb6b99992e085abf3364b4e34a8987370287a0b6be6e390aea79dbe81939d3800c0691be3c268d2bea7ad703c81533105dddceeee54ab0907c1548d843feb3c0f80cb58100b6caa1096fc6d86ae9c150b1d68e14edbb1b95212f5eb392878f22389a9f29b0b4fc643c50ee03fbd56e438aaa319e240175dfe5139ade387d1b2e6c310ac3954403c63368f2c234f30b857b6ff9b2e570f7e", @nested={0x4, 0x143}, @generic="da1f3172540ffcd01733709ba3bf70e0b655d82bce41444625b470e3cbb1430c5ce6bda521f5a6abf6996b9b6958851283e0edb0251f05b91bd48b32fdba0a0026d1d72b28a22824d6de37d93af7cad6f5328d48c72250de713d37378f083c3163fe3733304565f8f06c6fe7e8b446e1a677d2d0a4e7186603b2a8a35024b1ea71a6ca320ff9e273db409833be61813003b8cb1fbc4e4aba03e5d30c69d5a9356a732e303526569396853a8c4f75353f74eeb4a72092853116e3b4"]}, @nested={0xe4, 0x103, 0x0, 0x1, [@typed={0xc, 0xba, 0x0, 0x0, @u64=0xabdc}, @generic="09de6d1bfa5ce8cfe3c9bed97bcead646b7986d48c5ca12cbd5fc0750ec27cf2a28f0555bb353805330428ea74120731e3eea678105c1cb184900841b95cd1e7eda18d0e4b47917fa5e4238c40c804b52ffd7e7cfcce29a524701c7bdfa2faf47e26606a2232ed202cc3e58a4adf53f5421eef4855966812d1e4755cd955b3f2e92255184c8323237f006f74d5831492820e7925ec26754bd7200b8161dd0ef150504b37999366ef2fb380b94d7ebe7ab6e02146db211839909ba08eb7dcf78ccfcc55d27214d13804fd495663cc4460f42f3eb1"]}, @nested={0x2e1, 0x8a, 0x0, 0x1, [@typed={0xa5, 0x65, 0x0, 0x0, @binary="3e5ec003ac88e4ba9e155fca1b50bb379eae7e94ed7d52dda8c1a77092dbb1c5fc8070876b7f13e52e6f88e127ba20d83fa5d4dfb8d115891cd0f9e350c8d36adedef01157a45ce2174aa66f617d2627b19467ae1381aa316b87f09cda0769c8b2e4d23f11ff4a9fdf48f92a195058cbe69ced0158f66c61b50c29f178d5dcc7d37a7bd05103fc433482840362c762f55100143b0db11d3e20baa9a565e2e917e5"}, @generic="772d431ac56869a4b4e057a134589edff536ca0d1b1cf7cdb9771ccb359404d43138e8beb36ca84b880cec4a38c87addb2f97104c4415d677ad768f1d4c163c5ffe31a39372117763a818ef3d48091572e76e5d2267b5b8da8ee3526886612a158047bddeaf42e2eab4ae1aee4b597fa8a84d02458ad8e2bfcd0d26ddf161d800aa8c77df5bb4dde969908ea4631a0ea86145fa5af37ba51a512ccf54914f8", @nested={0x4, 0x86}, @nested={0x4, 0x11c}, @nested={0x4, 0xef}, @generic="781d9a260d4a4bfba749f06d669a3c30c80ee20f3146b549526dd27c40ed11ae55afd79652d695f66e73e10852fe6abb893766ef4c696408461ffc57954e7dd75b2af6eb2ad142ca6503c560aec375d59a6b4c8c30f5a95b5764551d5cf204f3b33f8c1448991917bfb4ba643e536ad5dee02f8dd5d2eb40407be76926078fda169625d3c3532c1ce3bde4b8dd4c673e5cb62287ea1004a3", @generic="0a7d1a9c5a1dfe9c660f09cc4418d9b65dd9f198e2cc19a8aee8f8c9a0289b95b84166a6e95ee9492ebab3adcafaafe373537dbd99b6fab89635fa654c4a3a60df9c28f575084c73399ee4e6eb2544f62bf13d41a0b9b762231c15df7a501e491d38e9e12aeca9adcffa1a09f8acf981102a7f10102a53ce60228ebbd366265cd59cd5231d58822fba4ed61a9402", @generic="9911e7f5fe1e82417430c6a74e12cfc4209ca5d91c065d8ea1e0d0131cc7c92dc21d3f1ab16393be9d0fa381db644d6540f7bda0eeebc31773cce2aab44dd0b6d2681bf66c891b54e7c315ea69c3b1fe98c1d86e38a54225dfd6e626", @nested={0x4, 0x3d}, @nested={0x4, 0xe5}]}]}, 0x6ec}, {&(0x7f00000000c0)={0x1c, 0x2a, 0x1, 0x70bd25, 0x25dfdbfe, "", [@typed={0xa, 0x74, 0x0, 0x0, @str='wlan0\x00'}]}, 0x1c}, {&(0x7f00000009c0)={0x1c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc, 0x121, 0x0, 0x0, @u64=0x5b}]}, 0x1c}, {&(0x7f0000000b40)={0x110c, 0x1e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@generic="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", @typed={0xfc, 0x90, 0x0, 0x0, @binary="beefe0c8e447a178b9a9cded8648a01ca5a9e9ba7e0aca436a7ffa2ac7853fff5a380d9ba1b198a970ebfd7eed309200fb7fd7facad1b5a76270c4dd760fc3968c040fc8d2cc3769633a507c7bfa017c265be14287e9cb08b8c98f5d8e48c992246e909f9aeb32af374087b5c886e0880c5d1278b6934bda462c0236af630d39617ae962e13dabf74a6c481e995f23a591325b6cbb576a98d7dd863fd4269e8c0e9168dce3133a16bd7bfa0a473ca36dd09f59aa68262a194f352415c0963fbe0d659a058f3dedfcd313c348408295a898c472143fa3561968a83293c9a4264c241c26dbd642dc900ed5ef73b8da5e19a79a39c78f0fe8a9"}]}, 0x110c}], 0x4, 0x0, 0x0, 0x4}, 0x40048) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122', @ANYRESHEX], 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400040000000007040000f0ffffffb702000003c2df0000000000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001900000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd29, 0x100002, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x63}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 851.470772ms ago: executing program 0 (id=9311): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000580)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f00000004c0)=""/98, 0x62}], 0x3, &(0x7f0000000600)=""/247, 0xf7}, 0x101) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x88400, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000080)={0x0, 0x6, [0x80000000, 0x7, 0xffffffff, 0x5]}) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 831.259112ms ago: executing program 3 (id=9212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) 776.298352ms ago: executing program 2 (id=9312): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x20048040) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 671.590331ms ago: executing program 0 (id=9313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) (async) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 671.098723ms ago: executing program 3 (id=9314): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x42b}], 0x1, &(0x7f0000001ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xb4, 0x0, 0x7}]}}}], 0x38}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f0000000000)='+$,\x00', 0x400000, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x5]}, {0x2, 0x101, 0x5, 0x8}}, 0xffffffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x3}, 0x8, &(0x7f00000007c0)=[{0x1, 0x7, &(0x7f0000000100)='}$\xf9:^$\x00', &(0x7f0000000140)="ae5e8aa39fa0968f4b3553caa8db69921511e828e8fd560224879ac4787823cfb80f33b42b29d08fa17abc9ce0db64c25e786ee3e99ec41c2caff16bcd6c13adfa53f73a3502725e89308a4f2b93c1f61c8eb4fd793b94b9f5d2f5751a88e26ff988ac17d202b4f1457154eda34c3d3386709ab4aa31ab7dbe38334f6ad283d640b9ae10849edca859eafe18e25893e6d4dac62f79b9f82e76f430a36909007599dd2b94774594f9e13eae1c4baf6a554c96bc17ca7e6463b125e79d676e629e9af0bbb41b82", 0xc6, 0x2}, {0x1, 0xeb, &(0x7f0000000240)='\':]\x00', &(0x7f0000000280)="de0c18ba76561e2808b3e4df6eaad272b6a2c0425d059449492b452115722bac0bee2d47f2d641fa088a4b39f0141b18e3558e77de6e465c6b0b6e95ca4dc465c17699cc7996a0b6ddd51f2778f943be83915fcdd71a737c18791f2e88e08f430f655fcd8ff74dd8248ce8c1928f572558d2ddb27742", 0x76, 0x30}, {0x2, 0x16, &(0x7f0000000300)='/(\x00', &(0x7f0000000400)="e13aef8dcb2438336e66c757849ca7e8d02944a22e1c60f4009505ec8f3eafb85a723dad0937c45251ac792167d25264ad64c853b5e6842278a29e2350e8bde9431b42f0e359c6a8f2566a80607200484471060d804a343c90b57f8763464d1139144bbee844b2365e7139b777132871a1939d0cf1f49eebcbcb721c9174126bab7002643d7d854ba28edb17109f6ddc8567b5f620581049d46f3b12cbb7094d1077b1ddf20f4287a8e5dc67d7e109a24eae39b283130d498433315efc783fdcf4412ee363c97bd8a65cc7f289bb1a47a4b3d0ee5959207fd9f55a0999de28", 0xdf, 0x2}, {0x2, 0xff, &(0x7f0000000340)=')}{\x00', &(0x7f0000000380)="f9300ad69c07d45633730fcd0828dcc24fa73d139b7e1acbf18d83b0a1514f651ba1c856da3bf6b1b6dc16b3ec3bcb075feec8df42aa9e", 0x37}, {0x2, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)="7e513625e00cce8f74a1d8422e2e3d31bf8f2e16e03742a6009c2bde30397c93dcd9", 0x22, 0x8}, {0x2, 0x7, &(0x7f0000000580)='$*+]-$]#\'\x00', &(0x7f00000005c0)="c8bbb2ce93ca1c08b9585a7b745193c422cf2459bff30105888a", 0x1a, 0x9}, {0x1, 0x4, &(0x7f0000000600)='!\x00', &(0x7f0000000640)="633f491873ce5d05fdf412c2d1734d4b5dff8834e7c0ae90eede160f6ecc4b2be5e488518cb56abf4bb9635952c48c09fc51547048db44090172478b962daab54ce3f00372c6aa8d7adcf37eac6c538c8cba3c9027c1b18fb4f739f9796e12f3b0b6ae33ab98162ffec7df72486b6ed9440ea8bad63064105d0ceba2aea398c240f1549a05230b81393222a8f5fa54bd670e8c3d71210f682dbf8ab466494e9e09fd8438d2c70162c0350bf5f14b8b83f08dc95c14c4faab4cff00dc16216b3a", 0xc0, 0x8}, {0x1, 0x9, &(0x7f0000000700)='+-\'\x00', &(0x7f0000000740)="39b9cc7cbc9605ca304f6e8dfb83b78410ee0453a0fc96a05a7038f398fd8bf2c925c228a1663f4475dcff74579615337fd1be2bde7ace08613190481d15dc26751027a2c4451545e5ff6f20b7a0ba67f8af3f5ad9c6e17128ac739bd96c72e564283579ea29f242b3f65a98e0b2dee7abdf69", 0x73, 0x1a}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x5, 0x10, 0x20, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7, 0x62, 0xffffffff}}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000a80)={0x0, 0x5, 0x6, 0xffffffff, 0x40, 0x76}, &(0x7f0000000ac0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000b00)={r5, 0x101}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1e, 0x6, 0x99e, 0x401, 0x80, r1, 0x7, '\x00', r2, r4, 0x0, 0x1, 0x5}, 0x50) 667.49201ms ago: executing program 2 (id=9315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0}, 0x94) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000bc0)={r3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000000) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf25020006000500010000"], 0x30}, 0x1, 0x0, 0x0, 0x404c001}, 0x10) 616.352979ms ago: executing program 5 (id=9316): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x6e) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000280)="aa3ba3d0e80ad811557f7f14842ceee6bda011a7718237df90255f19de36580088d18047a22de8b23e793ec571cb2cc6a760b0521331ee9e59c343a6839c05245d05d19c55f2e81b577cb8623814258cfcde3d3e30511206cc3f49268a7a0def8c88bfdb91b80cd9cbca9785bfd418ea1f5e2992ba69cef688d67b975ed056d9792d4782e9b5589844cd274856533b2ee04dcbed14697efc7019202ebe65f7a2617b73c5231d0bc1b7dd29fb6f4f877234fe5033dcc0abce1ed3a50839e3be546a2df8f3364fe1e26d340d9188b347c7c646542f969cfff21fd216af5143e4b5914291bfa14ad44bc10338c9c8bf", 0xee) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000200)='bridge0\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xea1) 554.092626ms ago: executing program 3 (id=9317): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) 484.09921ms ago: executing program 5 (id=9318): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e4", @ANYRES32, @ANYBLOB="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", @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf183"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00?\x00', @ANYRES16, @ANYBLOB="8b300000000000000000150000000c00990004000000000000"], 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 408.322897ms ago: executing program 4 (id=9319): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x5, @private=0xa010100}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) close(0x4) 407.878304ms ago: executing program 3 (id=9320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x31}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2}, "d33cffd98794e48a"}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@initdev, @multicast2, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @empty, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x5, 0x3, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x20, 0x9, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xb, 0xc, 0x22, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0xb, 0x12580000}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x164, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24004040}, 0x20004004) 404.530728ms ago: executing program 0 (id=9321): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f00000003c0)=@raw=[@map_idx={0x18, 0x6}], &(0x7f0000000500)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x10, 0x9, 0x54c}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x4, 0x5, 0x1, 0xb}, {0x1, 0x3, 0x5, 0x2}, {0x5, 0x4, 0xd, 0x4}, {0x1, 0x2, 0x1, 0xc}, {0x1, 0x1, 0x9, 0xa}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8e, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x62, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', r2, 0x4, 0x3, 0xb, 0x8000, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8, 0x80, 0xc010, 0x6}}) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) 312.521602ms ago: executing program 3 (id=9322): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800) poll(&(0x7f0000000280)=[{r0, 0x101}, {r0, 0x8400}, {r0}, {r1, 0x1214}], 0x4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x40, 0x5, 0x6, 0x5644, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 239.576347ms ago: executing program 0 (id=9323): r0 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x4000095) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bond0\x00', @random="3146b4b7262e"}) 212.759806ms ago: executing program 5 (id=9324): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x6, @local, 0x80}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b8e9bf53e00070000000a010102000000002f4d6599beedc79d8aeb7ca79a18a0190570772b8e58897bfab1ee89b54426f9de7e60eae0a967691d64f0e261598430a07ee27035926aa33b769814d09d5109e5c98320c78b0d92155557a33fb8735412c84c7a07955c028708e7f7ae642e9ec6515753c1fb97"], 0x18}], 0x1, 0xc4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_fd={0x18, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x29, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x0, 0x80000001, 0x1}, 0x10, 0x188dc, 0xffffffffffffffff, 0x5, &(0x7f00000003c0)=[0x1], &(0x7f0000000480)=[{0x1, 0x2, 0xc, 0xa}, {0x0, 0x1, 0x3}, {0x4, 0x4, 0x2}, {0x3, 0x2, 0xc, 0x3}, {0x3, 0x5, 0x8, 0x4}], 0x10, 0x200}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000005c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @jmp={0x5, 0x0, 0x7, 0x6, 0x3, 0x10, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xff, 0x0, &(0x7f00000006c0), 0x41000, 0x46, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x8, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000740)=[0x1, 0x1, 0x1], &(0x7f0000000780)=[{0x3d3d, 0x1, 0x9, 0x8}, {0x0, 0x2, 0x9, 0x4}, {0x4, 0x3, 0x0, 0x1}, {0x3, 0x5, 0xf, 0xb}, {0x1, 0x4, 0xc, 0xa}, {0x1, 0x3, 0x2, 0x5}, {0x5, 0x4, 0xe, 0x8}]}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x12, &(0x7f0000000980)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6d9}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x3, 0x7, 0xb, 0x20, 0x8}, @generic={0xfd, 0x1, 0x6, 0x6, 0x6}], &(0x7f0000000800)='syzkaller\x00', 0x7fff, 0x19, &(0x7f0000000840)=""/25, 0x40f00, 0x20, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=@dellink={0x3f0, 0x11, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x2, 0x40000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_VF_PORTS={0x2f4, 0x18, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1a82410008b2976af66965ae3471fe1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b46f27d2ba77d1e4a081bdd6c131ce5"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "166f88130df5b845d2e30196cdff614c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2efe69e225a9b4620b63b9d19b53544c"}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bd1e317ebb91ad87b86fa38dc8c1169b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc8}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1a070d0c6e9abaf6a7143fc62a68f78c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "351be00f32e10eb6cdc5d71f45bf6b20"}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2fb26ebab31402439b45f5c386602e30"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "99577d31950fe8b033d75b488a382ce0"}, @IFLA_PORT_VF={0x8, 0x1, 0x54}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4145b042bb2a4f68ab1584b3fa3163cf"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1423019785246f4d0e1f5a9e413b4926"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a65e357a50c56b25a8567e8ccfa75b9f"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'gre\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "853bd6453ee7cb306375cb75b2b48e5f"}, @IFLA_PORT_PROFILE={0x10, 0x2, '!-(}7+\\@\x01/\xc6\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8fd4e37a30d55c7de8499d8774d09049"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "057f0bbaadf5d54dd8c9fca216d7ee1e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e930a9ac1aea6883a192e422f2ae275c"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffc}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9d9e40b2df3cc1e0842a107456dcbd2d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5dd4832b19885dcee711edde79880378"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a0fd0df48f5d97e44d028bc6543fb4d2"}, @IFLA_PORT_PROFILE={0xc, 0x2, '.\',--)!\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ffeeda92198cbed54030adc8d3fb24f6"}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0x7, 0x2, ',]\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "035235fdeab112790e54a1c5a92a8ebf"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x2ad}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "42f7654f76321b99aa19f055e5d66b3d"}, @IFLA_PORT_VF={0x8, 0x1, 0x80000000}, @IFLA_PORT_PROFILE={0xb, 0x2, '/!*$&{\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '!$+]\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, 'gre\x00'}]}]}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xe}]}, @IFLA_MTU={0x8, 0x4, 0xffff}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_VF_PORTS={0x68, 0x18, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4b7d3d658f7123331fc9c855982c475c"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3119c895d6c6f0febd324ec770de27d9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a15a7f8cc17f2a0f28e696e23d87a5ac"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4160}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x200488c4}, 0x4000000) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0xe, 0x6, 0xffffff42, 0x0, 0x5, 0x2, 0x0, &(0x7f0000000080)=[{0x8, 0x101, 0x80000001}, {0x10, 0xfe, 0x4}]}) recvmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f0000000c00)=@llc, 0x80, &(0x7f0000001480)=[{&(0x7f00000006c0)=""/62, 0x3e}, {&(0x7f0000000c80)=""/22, 0x16}, {&(0x7f0000000cc0)=""/54, 0x36}, {&(0x7f0000000d00)=""/37, 0x25}, {&(0x7f0000000d40)=""/60, 0x3c}, {&(0x7f0000000d80)=""/161, 0xa1}, {&(0x7f0000000e40)=""/238, 0xee}, {&(0x7f0000001380)=""/251, 0xfb}], 0x8, &(0x7f0000001500)=""/215, 0xd7}, 0xb}, {{&(0x7f0000001600)=@xdp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001680)=""/180, 0xb4}], 0x1, &(0x7f0000001740)=""/103, 0x67}, 0x7}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/49, 0x31}], 0x1, &(0x7f0000001840)=""/171, 0xab}, 0x3}, {{&(0x7f0000001900), 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001980)}, {&(0x7f00000019c0)=""/43, 0x2b}, {&(0x7f0000001a00)=""/17, 0x11}, {&(0x7f0000001a40)=""/97, 0x61}, {&(0x7f0000001ac0)=""/123, 0x7b}, {&(0x7f0000001b40)}, {0xfffffffffffffffc}, {&(0x7f0000001b80)=""/28, 0x1c}], 0x8, &(0x7f0000001c40)=""/193, 0xc1}, 0x99}], 0x4, 0x12000, &(0x7f0000001e40)={0x0, 0x989680}) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x1000, 0x4) 212.192327ms ago: executing program 4 (id=9325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x277, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @empty, 'caif0\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="feaa945181c40042cccde76ac5bfe2169266a72093fc1039deff2ad38a9e7f21ef5263d0cba5922b871fadf9249c7f26c28c752ef6be397972d61e9ec16d38feb0fb8a45bd2a727d43047b06ca12b179317b77ad17054b26c165a4297c6c6175f81e78fc2cd621ea31b8359905fd27d705e50633ea72b27f642b9d952accebb00959ece4a49cf2d3054ad6f5f3e4433afd5e9a962798435f56bff9402ac3bdf119bd821170f84959c8b9af6d60dfd53c9a6f7004", 0xb4}, {&(0x7f0000000640)="e124129d3997759b52e2273362f175e36ed4e7115bd0a0902d9d3bfadfde71dd3932ba7fb4629a5bbbbed68e0c72da1e746154a215e3dc9a5f92c15fac68a325e9ffa3c2e1f80d97dc9bb2f3b4e3054dc9955a194304399246eea1107027a5d7fdc983ee609fb9fa1fb5fc7dc287df6b4f7f9c90b681bd610efcf746c4c76c1c0b65f6e87933e946307afae899a1c6e1897589dc1643224b255b5a0b9405295f9b09e371370f12dfd5da950116479de7d839f611a1c663e9fe6380fa5b578c4f06d725bba47e0d60cfeb6a8465de172d3bb146788ae4ef68b458d6", 0xdb}], 0x2, &(0x7f0000000740)=[{0x28, 0x116, 0xce, "609b80fbd1122502655116d3aa619995cf856b9017"}, {0x40, 0x103, 0x0, "c1b3fa260f583e2faf4abaaf76be4cee846cdea2b54f5047bcee5e1c189e5522dbcb8b615fce980c4898a86818"}, {0xe0, 0x108, 0xb, "909bc9c5667f4289396580e8888ab0e6cda0eb3ed8f6c80304bc3d26464c5e9127f027f9620c57ae0bfc7a759ebd65a61b39417b2634ba1f08883473954d3ed773220f43b0b0ab7521e839488f8d309bd604c7bc7c8bc04caaac8cfa890a509bf1b489d64acff0ac8c59056c2b68f04d37f6f229723c82b5941258d7c5d864ca9c404585d951c650c600eab7d726851ee040fe34225b60987b2418909f12cfe43af71cee19b0e21c4ee4141bc18a3759dc5a97fb37e08c0eb38647f7d38aa78ecd8235205ab70dcbb142b201"}, {0x58, 0x1, 0x6, "a961ac25aca67384dbc4da17a65f7f1838d32809d176bb99263cb0d3a15716fdefb90263cfc0b68d914c735c6659318cef10bfb02a5bef94ac032d7071065fd5f0475f09"}], 0x1a0}, 0x4004894) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) 143.700722ms ago: executing program 3 (id=9326): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x108, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x7c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x799, 0x10003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x29f6f48f, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0xfffffff0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc000000, 0x2}}]}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x42c, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x373d, 0x7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x41}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 107.769422ms ago: executing program 5 (id=9327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x0, 0x8}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xd9}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x18}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 0 (id=9328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x19e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6900000000033a00fe8000000000000000000000000000aaff020000000000000000000000000001040190"], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) kernel console output (not intermixed with test programs): 4d0 [ 908.251786][ T1413] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 908.251810][ T1413] ? tun_get+0x1c/0x2f0 [ 908.251831][ T1413] ? tun_get+0x1c/0x2f0 [ 908.251858][ T1413] ? tun_get+0x1c/0x2f0 [ 908.251880][ T1413] ? tun_get+0x1c/0x2f0 [ 908.251906][ T1413] tun_chr_write_iter+0x113/0x200 [ 908.251931][ T1413] vfs_write+0x61d/0xb90 [ 908.251960][ T1413] ? __pfx_vfs_write+0x10/0x10 [ 908.251991][ T1413] ? __fget_files+0x2a/0x420 [ 908.252017][ T1413] ksys_write+0x150/0x270 [ 908.252040][ T1413] ? __pfx_ksys_write+0x10/0x10 [ 908.252071][ T1413] do_syscall_64+0x14d/0xf80 [ 908.252099][ T1413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.252116][ T1413] ? trace_irq_disable+0x37/0x100 [ 908.252135][ T1413] ? clear_bhb_loop+0x40/0x90 [ 908.252156][ T1413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.252173][ T1413] RIP: 0033:0x7f119f75cece [ 908.252190][ T1413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.252205][ T1413] RSP: 002b:00007f11a066dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 908.252224][ T1413] RAX: ffffffffffffffda RBX: 00007f11a066e6c0 RCX: 00007f119f75cece [ 908.252236][ T1413] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 908.252248][ T1413] RBP: 00007f11a066e090 R08: 0000000000000000 R09: 0000000000000000 [ 908.252260][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.252270][ T1413] R13: 00007f119fa16038 R14: 00007f119fa15fa0 R15: 00007ffce0e3c788 [ 908.252301][ T1413] [ 908.527707][ T1415] syzkaller0: entered promiscuous mode [ 908.533300][ T1415] syzkaller0: entered allmulticast mode [ 908.542131][ T1415] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7743'. [ 908.846811][T12817] wlan1: Trigger new scan to find an IBSS to join [ 908.886655][ T1434] netlink: 'syz.4.7749': attribute type 5 has an invalid length. [ 909.151082][ T1445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7750'. [ 909.380343][ T1453] IPv6: NLM_F_CREATE should be specified when creating new route [ 909.399169][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7753'. [ 909.473528][ T1457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7753'. [ 909.541401][ T1454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7753'. [ 909.848125][ T1468] FAULT_INJECTION: forcing a failure. [ 909.848125][ T1468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.868759][ T1465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.896549][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.929952][ T1465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.947145][ T1468] CPU: 0 UID: 0 PID: 1468 Comm: syz.4.7758 Not tainted syzkaller #0 PREEMPT(full) [ 909.947170][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.947181][ T1468] Call Trace: [ 909.947189][ T1468] [ 909.947197][ T1468] dump_stack_lvl+0xe8/0x150 [ 909.947224][ T1468] should_fail_ex+0x412/0x560 [ 909.947254][ T1468] _copy_from_iter+0x1d3/0x1670 [ 909.947290][ T1468] ? __pfx__copy_from_iter+0x10/0x10 [ 909.947311][ T1468] ? sock_alloc_send_pskb+0x896/0x990 [ 909.947339][ T1468] ? __pfx__copy_from_iter+0x10/0x10 [ 909.947365][ T1468] ? page_copy_sane+0x16a/0x270 [ 909.947390][ T1468] copy_page_from_iter+0xdd/0x170 [ 909.947417][ T1468] skb_copy_datagram_from_iter+0x306/0x710 [ 909.947451][ T1468] tun_get_user+0xc38/0x3dd0 [ 909.947486][ T1468] ? aa_file_perm+0x12d/0x1630 [ 909.947514][ T1468] ? aa_file_perm+0x440/0x1630 [ 909.947536][ T1468] ? __pfx_tun_get_user+0x10/0x10 [ 909.947560][ T1468] ? __lock_acquire+0x6b5/0x2cf0 [ 909.947582][ T1468] ? kstrtoull+0x12f/0x1d0 [ 909.947611][ T1468] ? ref_tracker_alloc+0x363/0x4d0 [ 909.947636][ T1468] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 909.947661][ T1468] ? tun_get+0x1c/0x2f0 [ 909.947682][ T1468] ? tun_get+0x1c/0x2f0 [ 909.947709][ T1468] ? tun_get+0x1c/0x2f0 [ 909.947738][ T1468] ? tun_get+0x1c/0x2f0 [ 909.947764][ T1468] tun_chr_write_iter+0x113/0x200 [ 909.947789][ T1468] vfs_write+0x61d/0xb90 [ 909.947818][ T1468] ? __pfx_vfs_write+0x10/0x10 [ 909.947848][ T1468] ? __fget_files+0x2a/0x420 [ 909.947875][ T1468] ksys_write+0x150/0x270 [ 909.947897][ T1468] ? __pfx_ksys_write+0x10/0x10 [ 909.947928][ T1468] do_syscall_64+0x14d/0xf80 [ 909.947950][ T1468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.947966][ T1468] ? trace_irq_disable+0x37/0x100 [ 909.947985][ T1468] ? clear_bhb_loop+0x40/0x90 [ 909.948006][ T1468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.948022][ T1468] RIP: 0033:0x7f508ff5cece [ 909.948039][ T1468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 909.948054][ T1468] RSP: 002b:00007f5090dd7fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.948073][ T1468] RAX: ffffffffffffffda RBX: 00007f5090dd86c0 RCX: 00007f508ff5cece [ 909.948086][ T1468] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 909.948098][ T1468] RBP: 00007f5090dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 909.948109][ T1468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.948120][ T1468] R13: 00007f5090216038 R14: 00007f5090215fa0 R15: 00007ffe59f1cdd8 [ 909.948151][ T1468] [ 910.259601][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.988728][ T1493] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 911.027190][ T1493] syzkaller1: tun_chr_ioctl cmd 35108 [ 911.034092][ T1493] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 911.062205][ T1493] syzkaller1: linktype set to 823 [ 911.424007][ T1511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7773'. [ 911.434487][ T1512] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 911.447128][ T1513] xt_l2tp: v2 doesn't support IP mode [ 911.817106][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 911.825138][ C1] lec:lec_tx_timeout: lec0 [ 912.046140][ T1532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7777'. [ 912.060498][ T1507] syzkaller0: entered promiscuous mode [ 912.074720][ T1507] syzkaller0: entered allmulticast mode [ 912.085228][ T1532] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 912.326615][ T48] wlan1: Creating new IBSS network, BSSID f6:52:2f:83:ee:1a [ 913.009940][ T1567] netlink: 'syz.1.7783': attribute type 1 has an invalid length. [ 913.042622][ T1568] netlink: 'syz.1.7783': attribute type 1 has an invalid length. [ 915.682169][ T1567] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 915.683916][ T1568] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 915.873152][ T1577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7786'. [ 915.938104][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.166622][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.216983][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7788'. [ 916.256578][ T1588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7788'. [ 916.280935][ T1589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7789'. [ 916.570360][ T1603] netlink: 'syz.4.7792': attribute type 8 has an invalid length. [ 916.859414][ T1623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7800'. [ 916.883102][ T1621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7799'. [ 917.155517][ T1632] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 917.195859][ T1632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7804'. [ 918.206550][T24276] Bluetooth: hci4: command 0x0405 tx timeout [ 918.450196][ T1686] netem: change failed [ 918.569479][ T1688] syzkaller0: entered promiscuous mode [ 918.586088][ T1692] netlink: 'syz.3.7824': attribute type 1 has an invalid length. [ 918.598233][ T1688] syzkaller0: entered allmulticast mode [ 918.659856][ T1697] netlink: 'syz.1.7825': attribute type 1 has an invalid length. [ 918.770887][ T1697] bond4: entered promiscuous mode [ 918.776795][ T1697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 918.848500][ T1704] Unsupported ieee802154 address type: 0 [ 919.111034][ T1697] bond4: (slave bridge7): making interface the new active one [ 919.156099][ T1697] bridge7: entered promiscuous mode [ 919.177216][ T1697] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 919.214331][ T1711] netlink: 'syz.3.7827': attribute type 1 has an invalid length. [ 919.343054][ T1711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 919.421943][ T1710] bond5: (slave veth7): Enslaving as an active interface with a down link [ 919.485152][ T1723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7830'. [ 919.507732][ T1715] bond5: (slave veth0_to_bond): making interface the new active one [ 919.538170][ T1715] veth0_to_bond: entered promiscuous mode [ 919.563187][ T1715] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 919.734575][ T1711] bond5: (slave veth9): Enslaving as an active interface with a down link [ 919.755492][ T1719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.764535][ T1719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.084679][ T1734] netlink: 45 bytes leftover after parsing attributes in process `syz.2.7833'. [ 920.094093][ T1733] netlink: 'syz.1.7834': attribute type 23 has an invalid length. [ 920.150946][ T1733] netlink: 'syz.1.7834': attribute type 23 has an invalid length. [ 920.978195][ T1774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7846'. [ 921.102113][ T1774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7846'. [ 921.164911][ T1774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7846'. [ 921.571449][ T1793] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7853'. [ 921.844691][ T1805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7856'. [ 922.105824][ T1813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7860'. [ 922.132203][T15713] lec:lec_start_xmit: lec0:No lecd attached [ 922.412380][ T1827] netlink: 'syz.4.7864': attribute type 16 has an invalid length. [ 922.457205][ T1827] netlink: 'syz.4.7864': attribute type 17 has an invalid length. [ 922.465459][ T1831] x_tables: duplicate underflow at hook 1 [ 922.519750][ T1830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7866'. [ 923.164794][ T1827] bridge0: port 2(.) entered disabled state [ 923.171234][ T1827] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.626786][T12814] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.669865][T12814] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.707899][T12814] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 46766 - 0 [ 924.744544][T12814] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.775471][ T1858] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 924.800642][T12814] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.821681][ T1859] netlink: 'syz.2.7872': attribute type 2 has an invalid length. [ 924.861278][T12814] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 46766 - 0 [ 924.894040][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7872'. [ 925.265833][ T1884] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.7878'. [ 925.457500][T12814] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.491527][T12814] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.539646][T12814] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 46766 - 0 [ 925.641740][T12814] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.718740][T12814] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.783842][T12814] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 46766 - 0 [ 925.924686][ T1904] openvswitch: netlink: IP tunnel dst address not specified [ 925.950399][ T1906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7882'. [ 925.980695][ T1907] openvswitch: netlink: IP tunnel dst address not specified [ 926.279426][ T1916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7883'. [ 926.355780][ T1906] syzkaller0: entered promiscuous mode [ 926.389772][ T1906] syzkaller0: entered allmulticast mode [ 927.822159][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 927.830203][ C1] lec:lec_tx_timeout: lec0 [ 929.939982][T12814] mac80211_hwsim hwsim29 wlan0: left allmulticast mode [ 929.947973][T12814] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 929.955032][T12814] bridge0: port 2(wlan0) entered disabled state [ 930.087279][T12814] bond_slave_0: left promiscuous mode [ 930.093150][T12814] bond_slave_1: left promiscuous mode [ 930.423152][T12814] bond7 (unregistering): (slave geneve4): Releasing active interface [ 931.268609][T12814] bond5 (unregistering): (slave macvlan0): Releasing active interface [ 931.292917][T12814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.308753][T12814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.329067][T12814] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 931.340458][T12814] bond0 (unregistering): Released all slaves [ 931.353897][T12814] bond1 (unregistering): Released all slaves [ 931.381382][T12814] bond2 (unregistering): Released all slaves [ 931.402711][T12814] bond3 (unregistering): (slave veth5): Releasing active interface [ 931.424525][T12814] bond3 (unregistering): Released all slaves [ 931.448739][T12814] bond4 (unregistering): Released all slaves [ 931.477707][T12814] bond5 (unregistering): Released all slaves [ 931.499901][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.508689][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.528954][T12814] bond6 (unregistering): Released all slaves [ 931.551795][T12814] bond7 (unregistering): Released all slaves [ 931.590708][T12814] bond8 (unregistering): (slave vcan0): Releasing backup interface [ 931.602159][T12814] bond8 (unregistering): Released all slaves [ 931.624479][ T1930] kthread_run failed with err -4 [ 931.642757][ T1934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7886'. [ 931.810977][ T1952] netlink: 296 bytes leftover after parsing attributes in process `syz.3.7891'. [ 932.119679][T12814] : left promiscuous mode [ 932.193474][ T1946] wg1 speed is unknown, defaulting to 1000 [ 932.206072][ T1954] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7892'. [ 932.219756][ T48] veth0_to_bond: left promiscuous mode [ 932.255238][ T1959] team_slave_0: entered promiscuous mode [ 932.261036][ T1959] team_slave_1: entered promiscuous mode [ 932.284940][ T1959] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 932.314213][ T1959] team0: Device macvlan1 is already an upper device of the team interface [ 932.348451][ T1959] team_slave_0: left promiscuous mode [ 932.353927][ T1959] team_slave_1: left promiscuous mode [ 932.498146][T12814] tipc: Disabling bearer [ 932.503745][T12814] tipc: Left network mode [ 933.031974][ T1981] netlink: 'syz.0.7899': attribute type 1 has an invalid length. [ 933.098790][ T1981] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 933.119287][ T1981] bond7: (slave lo): Enslaving as an active interface with an up link [ 933.134619][ T1981] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 933.372421][ T1990] netlink: 'syz.4.7902': attribute type 4 has an invalid length. [ 933.446774][ T1990] netlink: 'syz.4.7902': attribute type 4 has an invalid length. [ 933.538453][ T1996] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 933.554588][ T1998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7903'. [ 934.224233][ T2013] xt_hashlimit: overflow, rate too high: 0 [ 935.404367][ T2014] kthread_run failed with err -4 [ 935.856586][ T2034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7917'. [ 935.875940][ T2034] netlink: 'syz.2.7917': attribute type 7 has an invalid length. [ 935.907048][ T2034] netlink: 'syz.2.7917': attribute type 8 has an invalid length. [ 935.925370][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7917'. [ 936.650754][T12814] hsr_slave_0: left promiscuous mode [ 936.690266][ T2071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7929'. [ 936.751650][ T2073] netlink: 'syz.2.7930': attribute type 10 has an invalid length. [ 936.772347][T12814] hsr_slave_1: left promiscuous mode [ 936.777737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 936.777770][ C1] lec:lec_tx_timeout: lec0 [ 936.816160][T12814] veth1_macvtap: left promiscuous mode [ 936.821614][ T2079] netlink: 'syz.0.7931': attribute type 21 has an invalid length. [ 936.821684][ T2079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7931'. [ 936.838794][T12814] veth0_macvtap: left promiscuous mode [ 936.907935][T12814] team0 (unregistering): Port device batadv1 removed [ 937.072953][T12814] team0 (unregistering): Port device team_slave_1 removed [ 937.114271][T12814] team0 (unregistering): Port device team_slave_0 removed [ 937.231358][ T2073] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.243027][ T2073] bond0: (slave team0): Enslaving as an active interface with an up link [ 937.254094][ T2079] netlink: 'syz.0.7931': attribute type 21 has an invalid length. [ 937.265527][ T2079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7931'. [ 937.451748][ T2095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7936'. [ 937.557831][T12814] IPVS: stop unused estimator thread 0... [ 937.797553][ T2111] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7940'. [ 937.861351][ T2114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7941'. [ 937.880473][ T29] audit: type=1804 audit(1771354313.207:5): pid=2118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7943" name="/newroot/487/cgroup.controllers" dev="tmpfs" ino=2486 res=1 errno=0 [ 937.923945][ T29] audit: type=1800 audit(1771354313.227:6): pid=2118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7943" name="cgroup.controllers" dev="tmpfs" ino=2486 res=0 errno=0 [ 938.284850][ T2137] sch_fq: defrate 0 ignored. [ 938.381428][ T2144] netlink: 'syz.1.7952': attribute type 1 has an invalid length. [ 938.425080][ T2144] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7952'. [ 938.516201][ T2148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7953'. [ 938.808263][ T2175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7954'. [ 938.959995][ T2185] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 939.235095][ T2205] netlink: 'syz.1.7974': attribute type 29 has an invalid length. [ 939.243980][ T2207] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7974'. [ 939.253596][ T2206] netlink: 'syz.1.7974': attribute type 29 has an invalid length. [ 939.591957][ T2232] netlink: 'syz.3.7982': attribute type 15 has an invalid length. [ 939.745389][ T2241] netlink: 'syz.0.7985': attribute type 10 has an invalid length. [ 939.770594][ T2241] batman_adv: batadv0: Interface deactivated: dummy0 [ 939.807390][ T2241] batman_adv: batadv0: Removing interface: dummy0 [ 939.829966][ T2241] team0: Port device dummy0 added [ 940.009320][ T2257] gretap1: entered promiscuous mode [ 940.031234][ T2257] gretap1: entered allmulticast mode [ 940.662149][ T2302] netlink: 'syz.3.8008': attribute type 1 has an invalid length. [ 940.686684][ T2302] netlink: 'syz.3.8008': attribute type 4 has an invalid length. [ 941.012434][ T2331] bond5 (unregistering): Released all slaves [ 941.208506][ T2351] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 941.844480][ T2385] macsec0: entered promiscuous mode [ 941.884223][ T2385] macsec0: entered allmulticast mode [ 941.910986][ T2385] veth1_macvtap: entered allmulticast mode [ 941.928561][ T2385] macsec0: left promiscuous mode [ 941.933709][ T2385] macsec0: left allmulticast mode [ 941.949116][ T2385] veth1_macvtap: left allmulticast mode [ 941.971516][ T2387] __nla_validate_parse: 17 callbacks suppressed [ 941.971535][ T2387] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.8037'. [ 941.994159][ T2391] netlink: 'syz.2.8039': attribute type 26 has an invalid length. [ 942.034702][ T2391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8039'. [ 942.091977][ T2394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8040'. [ 942.125433][ T2399] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8041'. [ 942.335373][ T2414] syzkaller0: entered promiscuous mode [ 942.365270][ T2414] syzkaller0: entered allmulticast mode [ 942.773218][ T2456] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8057'. [ 943.379454][ T2505] wg1 speed is unknown, defaulting to 1000 [ 943.402897][ T2513] netlink: 'syz.1.8067': attribute type 9 has an invalid length. [ 943.426381][ T2513] netlink: 'syz.1.8067': attribute type 6 has an invalid length. [ 943.677271][ T2531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8072'. [ 943.821322][ T2538] x_tables: duplicate underflow at hook 2 [ 944.332229][ T2516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.927560][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 946.493362][ T2517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 946.944290][ T2600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8090'. [ 947.171410][ T2624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8095'. [ 947.211904][ T2629] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003 [ 947.395907][ T2642] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 947.562752][ T2650] tipc: Enabled bearer , priority 0 [ 947.582849][ T2660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8104'. [ 947.620797][ T2662] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 947.716697][ T2650] +: renamed from syzkaller0 [ 947.723382][ T2650] tipc: Disabling bearer [ 947.760416][ T2671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8108'. [ 947.836207][ T2679] netlink: 'syz.1.8110': attribute type 13 has an invalid length. [ 947.959604][ T2690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8111'. [ 948.444332][ T2728] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 948.461410][ T2728] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 948.543501][ T2734] IPVS: persistence engine module ip_vs_pe_À not found [ 948.565307][ T2737] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.8124'. [ 948.594028][ T2741] mac80211_hwsim hwsim50 syzkaller0: Caught tx_queue_len zero misconfig [ 948.811849][ T2766] netlink: zone id is out of range [ 948.833415][ T2766] netlink: zone id is out of range [ 948.839359][ T2766] netlink: zone id is out of range [ 948.844702][ T2766] netlink: zone id is out of range [ 948.850814][ T2766] netlink: zone id is out of range [ 948.857024][ T2766] netlink: zone id is out of range [ 948.862726][ T2766] netlink: zone id is out of range [ 948.877245][ T2766] netlink: zone id is out of range [ 948.889895][ T2766] netlink: zone id is out of range [ 949.064103][ T2783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8135'. [ 949.074241][ T2783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8135'. [ 949.348199][ T2799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8140'. [ 949.367335][ T2799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8140'. [ 949.394691][T15437] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.394776][ T2799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8140'. [ 949.404013][T15437] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.463296][T15437] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.488984][T15437] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.969007][ T2686] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 949.975186][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 949.982245][ T2686] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 950.003282][ T2848] ip6t_rpfilter: unknown options [ 950.142328][ T2859] tipc: Enabling of bearer rejected, failed to enable media [ 950.249460][ T2875] syzkaller0: entered promiscuous mode [ 950.254979][ T2875] syzkaller0: entered allmulticast mode [ 950.278397][ T2877] netlink: 'syz.4.8159': attribute type 11 has an invalid length. [ 950.595161][ T2895] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 950.869158][ T2686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 950.876819][ T2686] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 950.942631][ T2686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 950.949030][ T2686] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 951.031111][ T2686] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 951.043487][ T2686] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 951.706198][ T2953] FAULT_INJECTION: forcing a failure. [ 951.706198][ T2953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.742391][ T2953] CPU: 1 UID: 0 PID: 2953 Comm: syz.2.8185 Not tainted syzkaller #0 PREEMPT(full) [ 951.742418][ T2953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 951.742429][ T2953] Call Trace: [ 951.742437][ T2953] [ 951.742445][ T2953] dump_stack_lvl+0xe8/0x150 [ 951.742474][ T2953] should_fail_ex+0x412/0x560 [ 951.742501][ T2953] _copy_from_user+0x2d/0xb0 [ 951.742520][ T2953] ___sys_sendmsg+0x1c6/0x360 [ 951.742540][ T2953] ? __lock_acquire+0x6b5/0x2cf0 [ 951.742564][ T2953] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.742626][ T2953] ? __fget_files+0x2a/0x420 [ 951.742643][ T2953] ? __fget_files+0x3a0/0x420 [ 951.742670][ T2953] __x64_sys_sendmsg+0x1bd/0x2a0 [ 951.742694][ T2953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.742724][ T2953] ? __pfx_ksys_write+0x10/0x10 [ 951.742757][ T2953] do_syscall_64+0x14d/0xf80 [ 951.742777][ T2953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.742794][ T2953] ? trace_irq_disable+0x37/0x100 [ 951.742812][ T2953] ? clear_bhb_loop+0x40/0x90 [ 951.742833][ T2953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.742850][ T2953] RIP: 0033:0x7f78d3f9c629 [ 951.742866][ T2953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.742881][ T2953] RSP: 002b:00007f78d4e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.742900][ T2953] RAX: ffffffffffffffda RBX: 00007f78d4215fa0 RCX: 00007f78d3f9c629 [ 951.742912][ T2953] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 951.742923][ T2953] RBP: 00007f78d4e13090 R08: 0000000000000000 R09: 0000000000000000 [ 951.742934][ T2953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.742944][ T2953] R13: 00007f78d4216038 R14: 00007f78d4215fa0 R15: 00007ffcb9c450e8 [ 951.742972][ T2953] [ 952.083210][ T2964] team0: Device gtp0 is up. Set it down before adding it as a team port [ 952.195782][ T2972] pim6reg527: entered allmulticast mode [ 952.264085][ T2980] __nla_validate_parse: 10 callbacks suppressed [ 952.264106][ T2980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8190'. [ 952.577992][ T2996] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.8195'. [ 952.751076][ T3007] xt_recent: Unsupported userspace flags (000000b1) [ 952.838335][ T3014] netlink: 'syz.3.8200': attribute type 1 has an invalid length. [ 952.889628][ T3014] bond6: (slave ip6gretap1): making interface the new active one [ 952.898241][ T3014] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 953.307642][ T3044] netlink: 'syz.0.8211': attribute type 3 has an invalid length. [ 953.308523][ T3038] wg1 speed is unknown, defaulting to 1000 [ 953.414187][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8211'. [ 953.417775][ T3049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8211'. [ 953.505996][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8212'. [ 953.733217][ T3057] netlink: 'syz.2.8213': attribute type 11 has an invalid length. [ 953.741129][ T3057] netlink: 'syz.2.8213': attribute type 11 has an invalid length. [ 953.754726][ T3057] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8213'. [ 953.766953][ T3057] netlink: 324 bytes leftover after parsing attributes in process `syz.2.8213'. [ 953.970209][ T3067] netlink: 'syz.0.8214': attribute type 18 has an invalid length. [ 954.021414][ T3069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8214'. [ 954.047240][ T3069] gretap0: left promiscuous mode [ 954.060708][ T3069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8214'. [ 954.092898][ T3067] netlink: 'syz.0.8214': attribute type 1 has an invalid length. [ 954.148981][ T3067] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8214'. [ 954.414110][ T3094] IPv6: NLM_F_CREATE should be specified when creating new route [ 954.670338][ T3119] FAULT_INJECTION: forcing a failure. [ 954.670338][ T3119] name failslab, interval 1, probability 0, space 0, times 0 [ 954.683820][ T3119] CPU: 0 UID: 0 PID: 3119 Comm: syz.0.8230 Not tainted syzkaller #0 PREEMPT(full) [ 954.683845][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.683856][ T3119] Call Trace: [ 954.683863][ T3119] [ 954.683871][ T3119] dump_stack_lvl+0xe8/0x150 [ 954.683898][ T3119] should_fail_ex+0x412/0x560 [ 954.683923][ T3119] should_failslab+0xa8/0x100 [ 954.683945][ T3119] ? skb_clone+0x212/0x3a0 [ 954.683965][ T3119] kmem_cache_alloc_noprof+0x87/0x650 [ 954.683983][ T3119] ? __netlink_lookup+0xc6/0x8b0 [ 954.684007][ T3119] skb_clone+0x212/0x3a0 [ 954.684027][ T3119] __netlink_deliver_tap+0x404/0x850 [ 954.684055][ T3119] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.684075][ T3119] netlink_deliver_tap+0x19c/0x1b0 [ 954.684092][ T3119] netlink_unicast+0x7e3/0x9b0 [ 954.684118][ T3119] ? __pfx_netlink_unicast+0x10/0x10 [ 954.684142][ T3119] ? netlink_sendmsg+0x650/0xb40 [ 954.684156][ T3119] ? skb_put+0x11b/0x210 [ 954.684179][ T3119] netlink_sendmsg+0x813/0xb40 [ 954.684205][ T3119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.684226][ T3119] ? aa_sock_msg_perm+0xf1/0x1b0 [ 954.684250][ T3119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 954.684275][ T3119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.684292][ T3119] ____sys_sendmsg+0xa68/0xad0 [ 954.684313][ T3119] ? __might_fault+0xaf/0x130 [ 954.684339][ T3119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.684386][ T3119] ? import_iovec+0x73/0xa0 [ 954.684409][ T3119] ___sys_sendmsg+0x2a5/0x360 [ 954.684427][ T3119] ? __lock_acquire+0x6b5/0x2cf0 [ 954.684451][ T3119] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.684502][ T3119] ? __fget_files+0x2a/0x420 [ 954.684517][ T3119] ? __fget_files+0x3a0/0x420 [ 954.684542][ T3119] __x64_sys_sendmsg+0x1bd/0x2a0 [ 954.684565][ T3119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.684596][ T3119] ? __pfx_ksys_write+0x10/0x10 [ 954.684626][ T3119] do_syscall_64+0x14d/0xf80 [ 954.684648][ T3119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.684664][ T3119] ? trace_irq_disable+0x37/0x100 [ 954.684683][ T3119] ? clear_bhb_loop+0x40/0x90 [ 954.684704][ T3119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.684721][ T3119] RIP: 0033:0x7f11aed9c629 [ 954.684743][ T3119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.684758][ T3119] RSP: 002b:00007f11afc43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.684778][ T3119] RAX: ffffffffffffffda RBX: 00007f11af015fa0 RCX: 00007f11aed9c629 [ 954.684791][ T3119] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 954.684802][ T3119] RBP: 00007f11afc43090 R08: 0000000000000000 R09: 0000000000000000 [ 954.684812][ T3119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.684822][ T3119] R13: 00007f11af016038 R14: 00007f11af015fa0 R15: 00007fff3f70cd68 [ 954.684861][ T3119] [ 955.337139][ T3139] netlink: 'syz.4.8237': attribute type 19 has an invalid length. [ 955.501666][ T3153] FAULT_INJECTION: forcing a failure. [ 955.501666][ T3153] name failslab, interval 1, probability 0, space 0, times 0 [ 955.514596][ T3153] CPU: 1 UID: 0 PID: 3153 Comm: syz.2.8241 Not tainted syzkaller #0 PREEMPT(full) [ 955.514620][ T3153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 955.514632][ T3153] Call Trace: [ 955.514640][ T3153] [ 955.514649][ T3153] dump_stack_lvl+0xe8/0x150 [ 955.514676][ T3153] should_fail_ex+0x412/0x560 [ 955.514705][ T3153] should_failslab+0xa8/0x100 [ 955.514728][ T3153] ? skb_clone+0x212/0x3a0 [ 955.514750][ T3153] kmem_cache_alloc_noprof+0x87/0x650 [ 955.514780][ T3153] skb_clone+0x212/0x3a0 [ 955.514805][ T3153] __netlink_deliver_tap+0x404/0x850 [ 955.514837][ T3153] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.514857][ T3153] netlink_deliver_tap+0x19c/0x1b0 [ 955.514877][ T3153] netlink_sendskb+0x68/0x140 [ 955.514903][ T3153] netlink_unicast+0x3a3/0x9b0 [ 955.514936][ T3153] ? __pfx_netlink_unicast+0x10/0x10 [ 955.514969][ T3153] netlink_rcv_skb+0x2b6/0x4b0 [ 955.514988][ T3153] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 955.515014][ T3153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 955.515042][ T3153] ? bpf_lsm_capable+0x9/0x20 [ 955.515059][ T3153] ? security_capable+0x7e/0x2c0 [ 955.515090][ T3153] nfnetlink_rcv+0x2c0/0x27b0 [ 955.515123][ T3153] ? __local_bh_enable_ip+0xd0/0x130 [ 955.515144][ T3153] ? lockdep_hardirqs_on+0x7a/0x110 [ 955.515165][ T3153] ? __dev_queue_xmit+0x274/0x3850 [ 955.515185][ T3153] ? __local_bh_enable_ip+0xd0/0x130 [ 955.515214][ T3153] ? __dev_queue_xmit+0x274/0x3850 [ 955.515234][ T3153] ? __dev_queue_xmit+0x1e6c/0x3850 [ 955.515253][ T3153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.515283][ T3153] ? __dev_queue_xmit+0x274/0x3850 [ 955.515306][ T3153] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 955.515336][ T3153] ? __pfx___dev_queue_xmit+0x10/0x10 [ 955.515366][ T3153] ? ref_tracker_free+0x693/0x840 [ 955.515387][ T3153] ? __copy_skb_header+0xa3/0x4a0 [ 955.515410][ T3153] ? __pfx_ref_tracker_free+0x10/0x10 [ 955.515449][ T3153] ? skb_clone+0x246/0x3a0 [ 955.515474][ T3153] ? __netlink_deliver_tap+0x807/0x850 [ 955.515491][ T3153] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.515516][ T3153] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.515543][ T3153] netlink_unicast+0x80f/0x9b0 [ 955.515575][ T3153] ? __pfx_netlink_unicast+0x10/0x10 [ 955.515600][ T3153] ? netlink_sendmsg+0x650/0xb40 [ 955.515616][ T3153] ? skb_put+0x11b/0x210 [ 955.515639][ T3153] netlink_sendmsg+0x813/0xb40 [ 955.515667][ T3153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.515689][ T3153] ? aa_sock_msg_perm+0xf1/0x1b0 [ 955.515713][ T3153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.515738][ T3153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.515755][ T3153] ____sys_sendmsg+0xa68/0xad0 [ 955.515776][ T3153] ? __might_fault+0xaf/0x130 [ 955.515803][ T3153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.515834][ T3153] ? import_iovec+0x73/0xa0 [ 955.515857][ T3153] ___sys_sendmsg+0x2a5/0x360 [ 955.515877][ T3153] ? __lock_acquire+0x6b5/0x2cf0 [ 955.515901][ T3153] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.515956][ T3153] ? __fget_files+0x2a/0x420 [ 955.516068][ T3153] ? __fget_files+0x3a0/0x420 [ 955.516093][ T3153] __x64_sys_sendmsg+0x1bd/0x2a0 [ 955.516119][ T3153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.516146][ T3153] ? __pfx_ksys_write+0x10/0x10 [ 955.516184][ T3153] do_syscall_64+0x14d/0xf80 [ 955.516209][ T3153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.516254][ T3153] ? trace_irq_disable+0x37/0x100 [ 955.516271][ T3153] ? clear_bhb_loop+0x40/0x90 [ 955.516290][ T3153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.516305][ T3153] RIP: 0033:0x7f78d3f9c629 [ 955.516322][ T3153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.516336][ T3153] RSP: 002b:00007f78d4e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.516355][ T3153] RAX: ffffffffffffffda RBX: 00007f78d4215fa0 RCX: 00007f78d3f9c629 [ 955.516367][ T3153] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 955.516378][ T3153] RBP: 00007f78d4e13090 R08: 0000000000000000 R09: 0000000000000000 [ 955.516389][ T3153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.516400][ T3153] R13: 00007f78d4216038 R14: 00007f78d4215fa0 R15: 00007ffcb9c450e8 [ 955.516431][ T3153] [ 956.352678][ T29] audit: type=1107 audit(1771354331.677:7): pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Eø%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 956.694081][ T3221] geneve2: entered promiscuous mode [ 956.701177][ T3221] geneve2: entered allmulticast mode [ 956.868159][ T3229] FAULT_INJECTION: forcing a failure. [ 956.868159][ T3229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.882053][ T3229] CPU: 1 UID: 0 PID: 3229 Comm: syz.3.8266 Not tainted syzkaller #0 PREEMPT(full) [ 956.882069][ T3229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 956.882076][ T3229] Call Trace: [ 956.882080][ T3229] [ 956.882085][ T3229] dump_stack_lvl+0xe8/0x150 [ 956.882110][ T3229] should_fail_ex+0x412/0x560 [ 956.882127][ T3229] _copy_from_user+0x2d/0xb0 [ 956.882139][ T3229] ___sys_sendmsg+0x1c6/0x360 [ 956.882153][ T3229] ? __lock_acquire+0x6b5/0x2cf0 [ 956.882166][ T3229] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.882196][ T3229] ? __fget_files+0x2a/0x420 [ 956.882206][ T3229] ? __fget_files+0x3a0/0x420 [ 956.882221][ T3229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 956.882240][ T3229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 956.882257][ T3229] ? __pfx_ksys_write+0x10/0x10 [ 956.882276][ T3229] do_syscall_64+0x14d/0xf80 [ 956.882290][ T3229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.882299][ T3229] ? trace_irq_disable+0x37/0x100 [ 956.882311][ T3229] ? clear_bhb_loop+0x40/0x90 [ 956.882323][ T3229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.882332][ T3229] RIP: 0033:0x7fb21119c629 [ 956.882343][ T3229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.882352][ T3229] RSP: 002b:00007fb212085028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.882363][ T3229] RAX: ffffffffffffffda RBX: 00007fb211415fa0 RCX: 00007fb21119c629 [ 956.882371][ T3229] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000044 [ 956.882377][ T3229] RBP: 00007fb212085090 R08: 0000000000000000 R09: 0000000000000000 [ 956.882383][ T3229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.882389][ T3229] R13: 00007fb211416038 R14: 00007fb211415fa0 R15: 00007ffd9026c898 [ 956.882405][ T3229] [ 957.142405][ T3235] net_ratelimit: 47 callbacks suppressed [ 957.142428][ T3235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 957.448141][ T3253] netlink: 'syz.2.8278': attribute type 22 has an invalid length. [ 957.459715][ T3253] __nla_validate_parse: 11 callbacks suppressed [ 957.459727][ T3253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8278'. [ 957.462005][ T3254] netlink: 'syz.3.8277': attribute type 11 has an invalid length. [ 957.494443][ T3254] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8277'. [ 957.513906][ T3254] netlink: 'syz.3.8277': attribute type 11 has an invalid length. [ 957.522203][ T3254] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8277'. [ 957.540255][ T3253] netlink: 'syz.2.8278': attribute type 22 has an invalid length. [ 957.551316][ T3253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8278'. [ 957.583695][ T3262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8279'. [ 957.601804][ T3264] netlink: 'syz.3.8281': attribute type 1 has an invalid length. [ 957.626208][ T3264] bond7: entered promiscuous mode [ 957.631958][ T3264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 957.643589][ T3264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8281'. [ 957.653113][ T3264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8281'. [ 957.816193][ T3276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8285'. [ 957.827700][ T3276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8285'. [ 957.935268][ T3285] netlink: 'syz.3.8287': attribute type 32 has an invalid length. [ 958.043113][ T3285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8287'. [ 958.116522][ T3296] sctp: [Deprecated]: syz.2.8291 (pid 3296) Use of int in max_burst socket option. [ 958.116522][ T3296] Use struct sctp_assoc_value instead [ 958.125908][ T3285] bond8: option coupled_control: invalid value (64) [ 958.145129][ T3285] bond8 (unregistering): Released all slaves [ 958.546059][ T3325] netlink: 'syz.3.8299': attribute type 1 has an invalid length. [ 958.580099][ T3325] 8021q: adding VLAN 0 to HW filter on device bond9 [ 958.712471][ T3333] team0: Device ip6gre1 is of different type [ 958.806475][ T3335] tipc: New replicast peer: 255.255.255.255 [ 958.813126][ T3335] tipc: Enabled bearer , priority 10 [ 958.989986][ T3347] netlink: 'syz.2.8308': attribute type 1 has an invalid length. [ 959.012998][ T3348] erspan2: entered allmulticast mode [ 959.064302][ T3347] bond2: entered promiscuous mode [ 959.071750][ T3347] bond2: entered allmulticast mode [ 959.095427][ T3347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 959.318848][ T3370] FAULT_INJECTION: forcing a failure. [ 959.318848][ T3370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.333080][ T3370] CPU: 1 UID: 0 PID: 3370 Comm: syz.0.8315 Not tainted syzkaller #0 PREEMPT(full) [ 959.333105][ T3370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.333117][ T3370] Call Trace: [ 959.333124][ T3370] [ 959.333132][ T3370] dump_stack_lvl+0xe8/0x150 [ 959.333159][ T3370] should_fail_ex+0x412/0x560 [ 959.333188][ T3370] _copy_from_iter+0x1d3/0x1670 [ 959.333220][ T3370] ? rcu_is_watching+0x15/0xb0 [ 959.333241][ T3370] ? __pfx__copy_from_iter+0x10/0x10 [ 959.333271][ T3370] ? netlink_sendmsg+0x650/0xb40 [ 959.333288][ T3370] ? skb_put+0x11b/0x210 [ 959.333312][ T3370] netlink_sendmsg+0x6c0/0xb40 [ 959.333339][ T3370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.333361][ T3370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 959.333384][ T3370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 959.333407][ T3370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.333424][ T3370] ____sys_sendmsg+0xa68/0xad0 [ 959.333443][ T3370] ? __might_fault+0xaf/0x130 [ 959.333469][ T3370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.333498][ T3370] ? import_iovec+0x73/0xa0 [ 959.333519][ T3370] ___sys_sendmsg+0x2a5/0x360 [ 959.333537][ T3370] ? __lock_acquire+0x6b5/0x2cf0 [ 959.333559][ T3370] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.333621][ T3370] ? __fget_files+0x2a/0x420 [ 959.333638][ T3370] ? __fget_files+0x3a0/0x420 [ 959.333664][ T3370] __x64_sys_sendmsg+0x1bd/0x2a0 [ 959.333687][ T3370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 959.333717][ T3370] ? __pfx_ksys_write+0x10/0x10 [ 959.333749][ T3370] do_syscall_64+0x14d/0xf80 [ 959.333770][ T3370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.333790][ T3370] ? trace_irq_disable+0x37/0x100 [ 959.333809][ T3370] ? clear_bhb_loop+0x40/0x90 [ 959.333830][ T3370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.333847][ T3370] RIP: 0033:0x7f11aed9c629 [ 959.333863][ T3370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.333877][ T3370] RSP: 002b:00007f11afc43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.333896][ T3370] RAX: ffffffffffffffda RBX: 00007f11af015fa0 RCX: 00007f11aed9c629 [ 959.333909][ T3370] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000044 [ 959.333921][ T3370] RBP: 00007f11afc43090 R08: 0000000000000000 R09: 0000000000000000 [ 959.333932][ T3370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.333943][ T3370] R13: 00007f11af016038 R14: 00007f11af015fa0 R15: 00007fff3f70cd68 [ 959.333977][ T3370] [ 959.837893][ T3401] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 960.221396][ T3420] netlink: 'syz.4.8327': attribute type 21 has an invalid length. [ 960.229127][ T3421] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 960.237252][ T3420] netlink: 'syz.4.8327': attribute type 5 has an invalid length. [ 960.280293][ T3421] syzkaller0: entered promiscuous mode [ 960.285898][ T3421] syzkaller0: entered allmulticast mode [ 960.297505][ T3421] tipc: Enabled bearer , priority 0 [ 960.334229][ T3419] tipc: Resetting bearer [ 960.362636][ T3419] tipc: Disabling bearer [ 960.621853][ T3443] ipvlan4: entered promiscuous mode [ 960.886808][ T3459] netlink: 'syz.0.8337': attribute type 10 has an invalid length. [ 960.984383][ T3464] tc_dump_action: action bad kind [ 961.257250][ T3477] syzkaller0: entered promiscuous mode [ 961.262901][ T3477] syzkaller0: entered allmulticast mode [ 961.445320][ T3489] wg1 speed is unknown, defaulting to 1000 [ 962.284667][ T3533] syzkaller0: entered promiscuous mode [ 962.296609][ T3533] syzkaller0: entered allmulticast mode [ 962.327315][ T3543] IPv6: sit1: Disabled Multicast RS [ 962.334038][ T3543] sit1: entered allmulticast mode [ 962.375878][ T3545] netlink: 'syz.4.8360': attribute type 5 has an invalid length. [ 962.381626][ T3546] netlink: 'syz.3.8361': attribute type 1 has an invalid length. [ 962.427055][ T3546] 8021q: adding VLAN 0 to HW filter on device bond10 [ 962.480824][ T3546] 8021q: adding VLAN 0 to HW filter on device bond10 [ 962.489817][ T3546] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 962.504171][ T3546] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 963.377511][ T3572] __nla_validate_parse: 25 callbacks suppressed [ 963.377532][ T3572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8364'. [ 964.116359][ T3550] veth11: entered promiscuous mode [ 964.136945][ T3567] veth0: entered promiscuous mode [ 964.149898][ T3573] veth0: left promiscuous mode [ 964.318546][ T3584] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8370'. [ 964.382236][ T3591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8371'. [ 964.430467][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8371'. [ 964.478808][ T3591] bond11: option xmit_hash_policy: invalid value (64) [ 964.564539][ T3591] bond11 (unregistering): Released all slaves [ 964.782013][ T3620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8379'. [ 964.854533][ T3626] netlink: 'syz.0.8381': attribute type 1 has an invalid length. [ 964.862467][ T3626] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8381'. [ 964.954135][ T3626] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 965.032941][ T3633] netlink: 'syz.0.8383': attribute type 17 has an invalid length. [ 965.041748][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8383'. [ 965.052616][ T3633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8383'. [ 965.235221][ T3646] netlink: 'syz.0.8388': attribute type 8 has an invalid length. [ 965.531148][ T3665] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 965.629353][T24276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 965.641655][ T3670] FAULT_INJECTION: forcing a failure. [ 965.641655][ T3670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.667192][T24276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 965.680955][T24276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 965.689261][T24276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 965.692125][ T3670] CPU: 1 UID: 0 PID: 3670 Comm: syz.0.8395 Not tainted syzkaller #0 PREEMPT(full) [ 965.692150][ T3670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 965.692161][ T3670] Call Trace: [ 965.692168][ T3670] [ 965.692176][ T3670] dump_stack_lvl+0xe8/0x150 [ 965.692205][ T3670] should_fail_ex+0x412/0x560 [ 965.692241][ T3670] _copy_from_iter+0x1d3/0x1670 [ 965.692273][ T3670] ? rcu_is_watching+0x15/0xb0 [ 965.692294][ T3670] ? __pfx__copy_from_iter+0x10/0x10 [ 965.692325][ T3670] ? netlink_sendmsg+0x650/0xb40 [ 965.692341][ T3670] ? skb_put+0x11b/0x210 [ 965.692364][ T3670] netlink_sendmsg+0x6c0/0xb40 [ 965.692391][ T3670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.692412][ T3670] ? aa_sock_msg_perm+0xf1/0x1b0 [ 965.692435][ T3670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 965.692459][ T3670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.692475][ T3670] ____sys_sendmsg+0xa68/0xad0 [ 965.692496][ T3670] ? __might_fault+0xaf/0x130 [ 965.692521][ T3670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 965.692550][ T3670] ? import_iovec+0x73/0xa0 [ 965.692571][ T3670] ___sys_sendmsg+0x2a5/0x360 [ 965.692590][ T3670] ? __lock_acquire+0x6b5/0x2cf0 [ 965.692612][ T3670] ? __pfx____sys_sendmsg+0x10/0x10 [ 965.692666][ T3670] ? __fget_files+0x2a/0x420 [ 965.692682][ T3670] ? __fget_files+0x3a0/0x420 [ 965.692709][ T3670] __x64_sys_sendmsg+0x1bd/0x2a0 [ 965.692731][ T3670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 965.692761][ T3670] ? __pfx_ksys_write+0x10/0x10 [ 965.692792][ T3670] do_syscall_64+0x14d/0xf80 [ 965.692813][ T3670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.692829][ T3670] ? trace_irq_disable+0x37/0x100 [ 965.692846][ T3670] ? clear_bhb_loop+0x40/0x90 [ 965.692867][ T3670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.692884][ T3670] RIP: 0033:0x7f11aed9c629 [ 965.692900][ T3670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.692915][ T3670] RSP: 002b:00007f11afc43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.692933][ T3670] RAX: ffffffffffffffda RBX: 00007f11af015fa0 RCX: 00007f11aed9c629 [ 965.692945][ T3670] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 965.692957][ T3670] RBP: 00007f11afc43090 R08: 0000000000000000 R09: 0000000000000000 [ 965.692967][ T3670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.692977][ T3670] R13: 00007f11af016038 R14: 00007f11af015fa0 R15: 00007fff3f70cd68 [ 965.693006][ T3670] [ 965.729499][ T3679] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 965.893958][T24276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.912214][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 965.977090][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 965.984466][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 965.992530][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 966.021954][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 966.165381][ T3696] netlink: 'syz.2.8402': attribute type 5 has an invalid length. [ 966.207098][ T3694] ip6tnl0: Caught tx_queue_len zero misconfig [ 966.223733][ T3700] x_tables: duplicate underflow at hook 2 [ 966.269965][ T3667] wg1 speed is unknown, defaulting to 1000 [ 966.275600][ T3704] netlink: 'syz.4.8406': attribute type 10 has an invalid length. [ 966.291091][ T3704] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 966.305801][ T3704] netlink: 'syz.4.8406': attribute type 10 has an invalid length. [ 966.421877][ T3717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8405'. [ 966.470861][ T3719] FAULT_INJECTION: forcing a failure. [ 966.470861][ T3719] name failslab, interval 1, probability 0, space 0, times 0 [ 966.486042][ T3719] CPU: 0 UID: 0 PID: 3719 Comm: syz.2.8409 Not tainted syzkaller #0 PREEMPT(full) [ 966.486065][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.486074][ T3719] Call Trace: [ 966.486080][ T3719] [ 966.486088][ T3719] dump_stack_lvl+0xe8/0x150 [ 966.486112][ T3719] should_fail_ex+0x412/0x560 [ 966.486138][ T3719] should_failslab+0xa8/0x100 [ 966.486160][ T3719] ? skb_clone+0x212/0x3a0 [ 966.486180][ T3719] kmem_cache_alloc_noprof+0x87/0x650 [ 966.486201][ T3719] ? __netlink_lookup+0xc6/0x8b0 [ 966.486227][ T3719] skb_clone+0x212/0x3a0 [ 966.486248][ T3719] __netlink_deliver_tap+0x404/0x850 [ 966.486275][ T3719] ? netlink_deliver_tap+0x2e/0x1b0 [ 966.486294][ T3719] netlink_deliver_tap+0x19c/0x1b0 [ 966.486312][ T3719] netlink_unicast+0x7e3/0x9b0 [ 966.486341][ T3719] ? __pfx_netlink_unicast+0x10/0x10 [ 966.486363][ T3719] ? netlink_sendmsg+0x650/0xb40 [ 966.486378][ T3719] ? skb_put+0x11b/0x210 [ 966.486399][ T3719] netlink_sendmsg+0x813/0xb40 [ 966.486424][ T3719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.486444][ T3719] ? aa_sock_msg_perm+0xf1/0x1b0 [ 966.486465][ T3719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 966.486489][ T3719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.486505][ T3719] ____sys_sendmsg+0xa68/0xad0 [ 966.486524][ T3719] ? __might_fault+0xaf/0x130 [ 966.486549][ T3719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.486578][ T3719] ? import_iovec+0x73/0xa0 [ 966.486600][ T3719] ___sys_sendmsg+0x2a5/0x360 [ 966.486618][ T3719] ? __lock_acquire+0x6b5/0x2cf0 [ 966.486640][ T3719] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.486695][ T3719] ? __fget_files+0x2a/0x420 [ 966.486711][ T3719] ? __fget_files+0x3a0/0x420 [ 966.486739][ T3719] __x64_sys_sendmsg+0x1bd/0x2a0 [ 966.486762][ T3719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 966.486792][ T3719] ? __pfx_ksys_write+0x10/0x10 [ 966.486821][ T3719] do_syscall_64+0x14d/0xf80 [ 966.486850][ T3719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.486865][ T3719] ? trace_irq_disable+0x37/0x100 [ 966.486883][ T3719] ? clear_bhb_loop+0x40/0x90 [ 966.486902][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.486918][ T3719] RIP: 0033:0x7f78d3f9c629 [ 966.486934][ T3719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.486948][ T3719] RSP: 002b:00007f78d4e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.486966][ T3719] RAX: ffffffffffffffda RBX: 00007f78d4215fa0 RCX: 00007f78d3f9c629 [ 966.486978][ T3719] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 966.486988][ T3719] RBP: 00007f78d4e13090 R08: 0000000000000000 R09: 0000000000000000 [ 966.486997][ T3719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.487008][ T3719] R13: 00007f78d4216038 R14: 00007f78d4215fa0 R15: 00007ffcb9c450e8 [ 966.487037][ T3719] [ 966.516705][ T3721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8410'. [ 966.669216][ T3667] chnl_net:caif_netlink_parms(): no params data found [ 967.041802][ T3744] Cannot find set identified by id 3 to match [ 967.046636][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.057597][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.064960][ T3667] bridge_slave_0: entered allmulticast mode [ 967.074964][ T3743] Cannot find set identified by id 3 to match [ 967.075549][ T3667] bridge_slave_0: entered promiscuous mode [ 967.090751][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.098501][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.105766][ T3667] bridge_slave_1: entered allmulticast mode [ 967.113679][ T3667] bridge_slave_1: entered promiscuous mode [ 967.217971][ T3667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.249429][ T3667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.296141][ T3667] team0: Port device team_slave_0 added [ 967.320562][ T3667] team0: Port device team_slave_1 added [ 967.338986][ T3751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.448884][ T3667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.472564][ T3667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.524789][ T3667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.561770][ T3667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.577520][ T3667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.621909][ T3667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.745379][ T3784] FAULT_INJECTION: forcing a failure. [ 967.745379][ T3784] name failslab, interval 1, probability 0, space 0, times 0 [ 967.758984][ T3784] CPU: 0 UID: 0 PID: 3784 Comm: syz.2.8426 Not tainted syzkaller #0 PREEMPT(full) [ 967.759008][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 967.759019][ T3784] Call Trace: [ 967.759027][ T3784] [ 967.759035][ T3784] dump_stack_lvl+0xe8/0x150 [ 967.759070][ T3784] should_fail_ex+0x412/0x560 [ 967.759098][ T3784] should_failslab+0xa8/0x100 [ 967.759123][ T3784] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 967.759145][ T3784] ? __alloc_skb+0x186/0x7d0 [ 967.759164][ T3784] ? __alloc_skb+0x1d0/0x7d0 [ 967.759180][ T3784] ? __local_bh_enable_ip+0xd0/0x130 [ 967.759205][ T3784] __alloc_skb+0x1d0/0x7d0 [ 967.759224][ T3784] ? netlink_ack_tlv_len+0x6c/0x210 [ 967.759244][ T3784] netlink_ack+0x146/0xa50 [ 967.759279][ T3784] netlink_rcv_skb+0x2b6/0x4b0 [ 967.759297][ T3784] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 967.759324][ T3784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 967.759353][ T3784] ? bpf_lsm_capable+0x9/0x20 [ 967.759370][ T3784] ? security_capable+0x7e/0x2c0 [ 967.759400][ T3784] nfnetlink_rcv+0x2c0/0x27b0 [ 967.759432][ T3784] ? __local_bh_enable_ip+0xd0/0x130 [ 967.759451][ T3784] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.759471][ T3784] ? __dev_queue_xmit+0x274/0x3850 [ 967.759491][ T3784] ? __local_bh_enable_ip+0xd0/0x130 [ 967.759508][ T3784] ? __dev_queue_xmit+0x274/0x3850 [ 967.759528][ T3784] ? __dev_queue_xmit+0x1e6c/0x3850 [ 967.759548][ T3784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.759577][ T3784] ? __dev_queue_xmit+0x274/0x3850 [ 967.759601][ T3784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 967.759630][ T3784] ? __pfx___dev_queue_xmit+0x10/0x10 [ 967.759659][ T3784] ? ref_tracker_free+0x693/0x840 [ 967.759681][ T3784] ? __copy_skb_header+0xa3/0x4a0 [ 967.759703][ T3784] ? __pfx_ref_tracker_free+0x10/0x10 [ 967.759742][ T3784] ? skb_clone+0x246/0x3a0 [ 967.759766][ T3784] ? __netlink_deliver_tap+0x807/0x850 [ 967.759784][ T3784] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.759808][ T3784] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.759833][ T3784] netlink_unicast+0x80f/0x9b0 [ 967.759865][ T3784] ? __pfx_netlink_unicast+0x10/0x10 [ 967.759890][ T3784] ? netlink_sendmsg+0x650/0xb40 [ 967.759907][ T3784] ? skb_put+0x11b/0x210 [ 967.759930][ T3784] netlink_sendmsg+0x813/0xb40 [ 967.759957][ T3784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.759979][ T3784] ? aa_sock_msg_perm+0xf1/0x1b0 [ 967.760002][ T3784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 967.760026][ T3784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.760048][ T3784] ____sys_sendmsg+0xa68/0xad0 [ 967.760069][ T3784] ? __might_fault+0xaf/0x130 [ 967.760095][ T3784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.760125][ T3784] ? import_iovec+0x73/0xa0 [ 967.760147][ T3784] ___sys_sendmsg+0x2a5/0x360 [ 967.760171][ T3784] ? __lock_acquire+0x6b5/0x2cf0 [ 967.760194][ T3784] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.760251][ T3784] ? __fget_files+0x2a/0x420 [ 967.760267][ T3784] ? __fget_files+0x3a0/0x420 [ 967.760295][ T3784] __x64_sys_sendmsg+0x1bd/0x2a0 [ 967.760319][ T3784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.760349][ T3784] ? __pfx_ksys_write+0x10/0x10 [ 967.760383][ T3784] do_syscall_64+0x14d/0xf80 [ 967.760403][ T3784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.760420][ T3784] ? trace_irq_disable+0x37/0x100 [ 967.760438][ T3784] ? clear_bhb_loop+0x40/0x90 [ 967.760459][ T3784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.760476][ T3784] RIP: 0033:0x7f78d3f9c629 [ 967.760493][ T3784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.760509][ T3784] RSP: 002b:00007f78d4e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.760528][ T3784] RAX: ffffffffffffffda RBX: 00007f78d4215fa0 RCX: 00007f78d3f9c629 [ 967.760542][ T3784] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 967.760554][ T3784] RBP: 00007f78d4e13090 R08: 0000000000000000 R09: 0000000000000000 [ 967.760565][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.760576][ T3784] R13: 00007f78d4216038 R14: 00007f78d4215fa0 R15: 00007ffcb9c450e8 [ 967.760606][ T3784] [ 968.183336][ T5140] Bluetooth: hci3: command tx timeout [ 968.231078][ T3667] hsr_slave_0: entered promiscuous mode [ 968.238154][ T3667] hsr_slave_1: entered promiscuous mode [ 968.244881][ T3667] debugfs: 'hsr0' already exists in 'hsr' [ 968.252214][ T3667] Cannot create hsr debugfs directory [ 968.260487][ T3787] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 968.478235][ T3801] __nla_validate_parse: 5 callbacks suppressed [ 968.478254][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8431'. [ 968.479971][ T3806] Cannot find del_set index 49151 as target [ 968.595043][ T3667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 968.631942][ T3667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 968.663045][ T3667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 968.698455][ T3667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 968.733792][ T3817] syzkaller0: entered allmulticast mode [ 968.804108][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8437'. [ 968.818618][ T3818] netlink: 'syz.2.8435': attribute type 23 has an invalid length. [ 969.068122][ T3667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.132069][ T3667] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.154272][ T3855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8444'. [ 969.174880][ T3857] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8445'. [ 969.187033][T12817] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.194218][T12817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.215746][T12804] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.222979][T12804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.455633][ T3868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8448'. [ 969.469567][ T3863] netlink: 'syz.4.8447': attribute type 26 has an invalid length. [ 969.492654][ T3863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8447'. [ 969.573129][ T3863] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8447'. [ 969.583301][ T3863] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8447'. [ 969.629217][ T3667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.719629][ T3879] netlink: 'syz.0.8451': attribute type 11 has an invalid length. [ 970.175078][ T3915] x_tables: duplicate underflow at hook 4 [ 970.208311][ T5140] Bluetooth: hci3: command tx timeout [ 970.242079][ T3667] veth0_vlan: entered promiscuous mode [ 970.253174][ T3919] xt_hashlimit: size too large, truncated to 1048576 [ 970.270503][ T3667] veth1_vlan: entered promiscuous mode [ 970.419882][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8463'. [ 970.444479][ T3667] veth0_macvtap: entered promiscuous mode [ 970.498150][ T3921] netlink: 'syz.3.8463': attribute type 16 has an invalid length. [ 970.524253][ T3667] veth1_macvtap: entered promiscuous mode [ 970.530460][ T3921] netlink: 'syz.3.8463': attribute type 17 has an invalid length. [ 970.605692][ T3921] bridge0: left allmulticast mode [ 970.628316][ T3921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 970.689617][ T3667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.705586][ T3667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.727051][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.736826][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.745561][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.818451][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.025436][T15431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.056937][T15431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.135140][T15437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.144054][T15437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.258247][ T3955] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8471'. [ 971.484225][ T3973] netlink: 'syz.4.8475': attribute type 1 has an invalid length. [ 971.603080][ T3979] xt_bpf: check failed: parse error [ 971.610629][ T3972] bond4: (slave gretap3): making interface the new active one [ 971.622817][ T3972] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 971.695439][T28072] hid-generic 0005:10CF:0080.0002: unknown main item tag 0x2 [ 971.719395][T28072] hid-generic 0005:10CF:0080.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 972.005117][ T4006] xt_CONNSECMARK: invalid mode: 0 [ 972.027562][ T4007] xt_CONNSECMARK: invalid mode: 0 [ 972.151147][ T4011] sctp: [Deprecated]: syz.3.8485 (pid 4011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 972.151147][ T4011] Use struct sctp_sack_info instead [ 972.289413][ T5140] Bluetooth: hci3: command tx timeout [ 972.450847][ T4030] syzkaller1: entered promiscuous mode [ 972.456572][ T4030] syzkaller1: entered allmulticast mode [ 972.749067][ T4054] openvswitch: netlink: IPv4 tun info is not correct [ 973.103823][ T4079] xt_l2tp: v2 doesn't support IP mode [ 973.339600][ T4095] tipc: Started in network mode [ 973.351597][ T4095] tipc: Node identity 8eaed726192f, cluster identity 4711 [ 973.367340][ T4095] tipc: Enabled bearer , priority 0 [ 973.437585][ T4095] syzkaller0: entered promiscuous mode [ 973.444969][ T4095] syzkaller0: entered allmulticast mode [ 973.453213][ T4095] tipc: Resetting bearer [ 973.497100][ T4094] tipc: Resetting bearer [ 973.748639][ T4105] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 973.830069][ T4109] __nla_validate_parse: 7 callbacks suppressed [ 973.830090][ T4109] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8512'. [ 974.327280][ T4122] netlink: 'syz.0.8515': attribute type 1 has an invalid length. [ 974.367810][ T5140] Bluetooth: hci3: command tx timeout [ 975.528479][ T4094] tipc: Disabling bearer [ 975.557740][ T1838] tipc: Node number set to 2541868838 [ 975.636817][ T4078] lec:lec_atm_close: lec0: Shut down! [ 975.715700][ T4136] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 975.774557][ T4130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8518'. [ 975.795604][ T4137] wg1 speed is unknown, defaulting to 1000 [ 976.426856][ T4183] netlink: 'syz.5.8533': attribute type 9 has an invalid length. [ 976.434970][ T4184] netlink: 'syz.5.8533': attribute type 9 has an invalid length. [ 976.611571][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.619192][ T4186] team0: Cannot enslave team device to itself [ 976.629885][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8536'. [ 976.758973][ T4203] netlink: zone id is out of range [ 976.768882][ T4207] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8539'. [ 976.778421][ T4209] pim6reg527: entered allmulticast mode [ 976.786568][ T4203] netlink: zone id is out of range [ 976.806407][ T4203] netlink: zone id is out of range [ 976.825245][ T4203] netlink: zone id is out of range [ 976.844019][ T4203] netlink: zone id is out of range [ 976.861947][ T4203] netlink: zone id is out of range [ 976.869607][ T4203] netlink: zone id is out of range [ 977.124406][ T4209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8541'. [ 977.182496][ T4228] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8545'. [ 977.239652][ T4230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8546'. [ 977.495273][ T4244] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.8552'. [ 977.563433][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8551'. [ 977.627804][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8551'. [ 977.752584][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 977.799393][ T4256] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 977.810735][ T4256] team0: Failed to send options change via netlink (err -105) [ 977.820716][ T4256] team0: Port device batadv1 added [ 977.889665][ T4264] bond1: (slave lo): Releasing backup interface [ 977.907119][ T4264] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 977.930214][ T4264] net_ratelimit: 48 callbacks suppressed [ 977.930236][ T4264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 978.012019][ T4277] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 978.322621][ T4302] !: renamed from dummy0 (while UP) [ 978.384961][ T4302] netlink: 'syz.5.8569': attribute type 1 has an invalid length. [ 978.404457][ T4302] netlink: 'syz.5.8569': attribute type 2 has an invalid length. [ 978.613645][ T4318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 978.621023][ T4318] IPv6: NLM_F_CREATE should be set when creating new route [ 978.755532][ T4322] ipvlan2: entered promiscuous mode [ 978.870906][ T4342] 8021q: VLANs not supported on vxcan1 [ 978.904977][ T4346] __nla_validate_parse: 6 callbacks suppressed [ 978.904995][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8581'. [ 978.922382][ T4345] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8582'. [ 979.163243][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8586'. [ 979.894410][ T4395] syzkaller0: entered promiscuous mode [ 979.901739][ T4395] syzkaller0: entered allmulticast mode [ 980.101060][ T4406] bridge0: entered allmulticast mode [ 980.351363][ T4418] netlink: 'syz.2.8601': attribute type 21 has an invalid length. [ 980.360020][ T4418] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8601'. [ 980.767942][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 980.776015][ C1] lec:lec_tx_timeout: lec0 [ 982.480409][ T4377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.690628][ T4434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8602'. [ 982.742685][ T4428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 982.783974][ T4441] netlink: 'syz.5.8607': attribute type 1 has an invalid length. [ 982.794935][ T4441] netlink: 'syz.5.8607': attribute type 3 has an invalid length. [ 982.819746][ T4441] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8607'. [ 982.831601][ T4441] NCSI netlink: No device for ifindex 813332851 [ 982.852995][ T4446] FAULT_INJECTION: forcing a failure. [ 982.852995][ T4446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.868354][ T4446] CPU: 1 UID: 0 PID: 4446 Comm: syz.2.8608 Not tainted syzkaller #0 PREEMPT(full) [ 982.868379][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.868390][ T4446] Call Trace: [ 982.868398][ T4446] [ 982.868405][ T4446] dump_stack_lvl+0xe8/0x150 [ 982.868432][ T4446] should_fail_ex+0x412/0x560 [ 982.868460][ T4446] _copy_from_iter+0x1d3/0x1670 [ 982.868494][ T4446] ? rcu_is_watching+0x15/0xb0 [ 982.868516][ T4446] ? kmem_cache_alloc_noprof+0x307/0x650 [ 982.868533][ T4446] ? skb_ext_add+0x148/0x8f0 [ 982.868553][ T4446] ? __pfx__copy_from_iter+0x10/0x10 [ 982.868578][ T4446] ? skb_ext_add+0x3b3/0x8f0 [ 982.868599][ T4446] ? skb_put+0x11b/0x210 [ 982.868621][ T4446] j1939_sk_sendmsg+0x7cb/0x1380 [ 982.868664][ T4446] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 982.868685][ T4446] ? aa_sock_msg_perm+0xf1/0x1b0 [ 982.868709][ T4446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 982.868731][ T4446] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 982.868748][ T4446] ____sys_sendmsg+0xa68/0xad0 [ 982.868767][ T4446] ? __might_fault+0xaf/0x130 [ 982.868793][ T4446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 982.868828][ T4446] ? import_iovec+0x73/0xa0 [ 982.868847][ T4446] ___sys_sendmsg+0x2a5/0x360 [ 982.868870][ T4446] ? __lock_acquire+0x6b5/0x2cf0 [ 982.868893][ T4446] ? __pfx____sys_sendmsg+0x10/0x10 [ 982.868958][ T4446] ? __fget_files+0x2a/0x420 [ 982.868975][ T4446] ? __fget_files+0x3a0/0x420 [ 982.869004][ T4446] __x64_sys_sendmsg+0x1bd/0x2a0 [ 982.869027][ T4446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 982.869058][ T4446] ? __pfx_ksys_write+0x10/0x10 [ 982.869092][ T4446] do_syscall_64+0x14d/0xf80 [ 982.869116][ T4446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.869133][ T4446] ? trace_irq_disable+0x37/0x100 [ 982.869152][ T4446] ? clear_bhb_loop+0x40/0x90 [ 982.869181][ T4446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.869202][ T4446] RIP: 0033:0x7f78d3f9c629 [ 982.869219][ T4446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.869235][ T4446] RSP: 002b:00007f78d4e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.869254][ T4446] RAX: ffffffffffffffda RBX: 00007f78d4215fa0 RCX: 00007f78d3f9c629 [ 982.869266][ T4446] RDX: 0000000004048081 RSI: 0000200000000140 RDI: 0000000000000004 [ 982.869277][ T4446] RBP: 00007f78d4e13090 R08: 0000000000000000 R09: 0000000000000000 [ 982.869288][ T4446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.869297][ T4446] R13: 00007f78d4216038 R14: 00007f78d4215fa0 R15: 00007ffcb9c450e8 [ 982.869324][ T4446] [ 983.662992][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8618'. [ 983.754184][ T4497] netlink: 284 bytes leftover after parsing attributes in process `syz.5.8620'. [ 984.133577][ T4523] tipc: Enabled bearer , priority 0 [ 984.215462][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8630'. [ 984.269842][ T4523] syzkaller0: entered promiscuous mode [ 984.275723][ T4523] syzkaller0: entered allmulticast mode [ 984.282641][ T4523] tipc: Resetting bearer [ 984.307680][ T4520] tipc: Resetting bearer [ 985.999240][ T4520] tipc: Disabling bearer [ 986.276820][ T4566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8640'. [ 986.285837][ T4566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8640'. [ 986.401536][ T4572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8641'. [ 986.626057][ T4593] netlink: 'syz.4.8649': attribute type 21 has an invalid length. [ 986.635428][ T4593] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8649'. [ 986.646341][ T4593] netlink: 'syz.4.8649': attribute type 5 has an invalid length. [ 986.654337][ T4593] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8649'. [ 986.997374][T15713] lec:lec_start_xmit: lec0:No lecd attached [ 987.130984][ T4629] tunl0: entered promiscuous mode [ 987.141677][ T4629] netlink: 'syz.4.8661': attribute type 3 has an invalid length. [ 987.150354][ T4629] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8661'. [ 987.219335][ T4633] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.8662'. [ 987.243409][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8660'. [ 987.470687][ T4653] tipc: Enabled bearer , priority 0 [ 987.478793][ T4653] syzkaller0: entered promiscuous mode [ 987.484393][ T4653] syzkaller0: entered allmulticast mode [ 987.496066][ T4653] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 987.574409][ T4653] syzkaller0: mtu greater than device maximum [ 987.590458][ T4660] bond0: mtu greater than device maximum [ 987.610241][ T4649] tipc: Resetting bearer [ 987.649074][ T4649] tipc: Disabling bearer [ 987.769383][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8673'. [ 987.951786][ T4695] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 988.220054][ T4720] sctp: [Deprecated]: syz.5.8683 (pid 4720) Use of int in max_burst socket option deprecated. [ 988.220054][ T4720] Use struct sctp_assoc_value instead [ 988.284009][ T4720] netlink: 'syz.5.8683': attribute type 2 has an invalid length. [ 988.304002][ T4724] syzkaller1: entered promiscuous mode [ 988.312534][ T4724] syzkaller1: entered allmulticast mode [ 988.321133][ T4725] netlink: 'syz.2.8686': attribute type 10 has an invalid length. [ 988.336153][ T4725] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 988.403869][ T4734] netlink: 'syz.3.8688': attribute type 2 has an invalid length. [ 988.430649][ T4738] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.472435][ T4730] tc_dump_action: action bad kind [ 988.628136][ T4756] netlink: 'syz.4.8693': attribute type 11 has an invalid length. [ 988.855472][ T4771] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 988.897504][ T4771] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 989.383418][ T4815] netlink: 'syz.3.8708': attribute type 1 has an invalid length. [ 989.438480][ T4818] __nla_validate_parse: 5 callbacks suppressed [ 989.438500][ T4818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8708'. [ 989.519941][ T4820] netlink: 'syz.0.8711': attribute type 1 has an invalid length. [ 989.520881][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8708'. [ 989.549761][ T4820] netlink: 'syz.0.8711': attribute type 7 has an invalid length. [ 989.606410][ T4820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8711'. [ 989.709806][ T4832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8715'. [ 989.818775][ T4845] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8717'. [ 990.089979][ T4857] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8721'. [ 990.651117][ T4895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8727'. [ 991.126666][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8725'. [ 991.586858][ T4934] tipc: Enabled bearer , priority 0 [ 991.655724][ T4934] syzkaller0: entered promiscuous mode [ 991.696083][ T4934] syzkaller0: entered allmulticast mode [ 991.814175][ T4926] tipc: Resetting bearer [ 991.874086][ T4926] tipc: Disabling bearer [ 992.170939][ T4972] netlink: 1116 bytes leftover after parsing attributes in process `syz.3.8748'. [ 992.225623][ T4972] netlink: 1116 bytes leftover after parsing attributes in process `syz.3.8748'. [ 992.689641][ T5019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.730115][ T5019] syzkaller1: entered promiscuous mode [ 992.743265][ T5019] syzkaller1: entered allmulticast mode [ 992.776275][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 992.784428][ C1] lec:lec_tx_timeout: lec0 [ 992.933603][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.958491][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 993.269081][ T5050] validate_nla: 2 callbacks suppressed [ 993.269101][ T5050] netlink: 'syz.5.8770': attribute type 5 has an invalid length. [ 993.323725][ T5054] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 993.721119][ T5068] netlink: set zone limit has 4 unknown bytes [ 993.854207][ T5082] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 994.036100][ T5107] netlink: 'syz.2.8787': attribute type 1 has an invalid length. [ 994.170677][ T5107] bond3: entered promiscuous mode [ 994.232372][ T5107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 994.304032][ T5112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 994.332927][ T5112] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 994.343617][ T5112] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 994.357288][ T5112] bond3: (slave vcan1): making interface the new active one [ 994.364758][ T5112] vcan1: entered promiscuous mode [ 994.372363][ T5112] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 994.517105][ T5123] __nla_validate_parse: 13 callbacks suppressed [ 994.517127][ T5123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8792'. [ 994.545348][ T5128] dvmrp0: entered allmulticast mode [ 994.648917][ T5141] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8796'. [ 994.670726][ T5145] netlink: 'syz.5.8797': attribute type 11 has an invalid length. [ 994.771093][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8798'. [ 994.797516][ T29] audit: type=1107 audit(1771354370.117:8): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 994.842603][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8798'. [ 994.874980][ T5156] C: renamed from lo (while UP) [ 994.910837][ T5156] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 995.316180][ T5208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8812'. [ 995.327811][ T5208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8812'. [ 995.421387][ T5214] team0: Caught tx_queue_len zero misconfig [ 995.422204][ T5212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.611280][ T5226] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8817'. [ 995.860482][ T5243] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 995.890085][ T5241] netlink: 'syz.5.8820': attribute type 1 has an invalid length. [ 996.021278][ T5241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 996.097019][ T5242] bond1: (slave geneve2): making interface the new active one [ 996.122594][ T5242] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 996.569303][ T5278] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.8831'. [ 997.391115][ T5337] wg1 speed is unknown, defaulting to 1000 [ 997.411421][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8850'. [ 997.437415][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8852'. [ 997.491951][ T5344] erspan2: entered allmulticast mode [ 997.814022][ T5361] bond9: option fail_over_mac: invalid value (16) [ 997.833065][ T5361] bond9 (unregistering): Released all slaves [ 997.960892][ T5337] syzkaller0: entered promiscuous mode [ 997.967084][ T5337] syzkaller0: entered allmulticast mode [ 997.975850][ T5337] Cannot find add_set index 65532 as target [ 997.976340][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 997.989862][ C1] lec:lec_tx_timeout: lec0 [ 998.169462][ T5384] bond7: (slave lo): Releasing backup interface [ 998.179482][ T5384] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 998.225587][ T5384] team0: Port device dummy0 removed [ 998.236761][ T5384] bridge_slave_0: left allmulticast mode [ 998.242550][ T5384] bridge_slave_0: left promiscuous mode [ 998.252021][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.310741][ T5384] bridge_slave_1: left allmulticast mode [ 998.317123][ T5384] bridge_slave_1: left promiscuous mode [ 998.323031][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.349123][ T5384] bond0: (slave bond_slave_0): Releasing backup interface [ 998.399392][ T5384] bond0: (slave bond_slave_1): Releasing backup interface [ 998.441662][ T5384] team0: Port device team_slave_0 removed [ 998.473577][ T5384] team0: Port device team_slave_1 removed [ 998.481835][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.489992][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.501929][ T5384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 998.779922][ T5415] siw: device registration error -23 [ 998.794611][ T5418] netlink: 'syz.2.8876': attribute type 1 has an invalid length. [ 998.841319][ T5415] bridge0: port 3(team0) entered blocking state [ 998.866454][ T5415] bridge0: port 3(team0) entered disabled state [ 998.873132][ T5415] team0: entered allmulticast mode [ 998.878998][ T5415] team_slave_0: entered allmulticast mode [ 998.888712][ T5415] team_slave_1: entered allmulticast mode [ 998.899672][ T5415] team0: entered promiscuous mode [ 998.904736][ T5415] team_slave_0: entered promiscuous mode [ 998.911554][ T5415] team_slave_1: entered promiscuous mode [ 998.923042][ T5415] bridge0: port 3(team0) entered blocking state [ 998.929587][ T5415] bridge0: port 3(team0) entered forwarding state [ 999.014186][ T5409] netlink: 'syz.0.8871': attribute type 12 has an invalid length. [ 999.264059][ T5450] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 999.279212][ T5450] netlink: 'syz.3.8887': attribute type 1 has an invalid length. [ 999.324376][ T5450] bond12: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 999.339273][ T5450] bond12: (slave ipvlan5): The slave device specified does not support setting the MAC address [ 999.350416][ T5450] bond12: (slave ipvlan5): Setting fail_over_mac to active for active-backup mode [ 999.384324][ T5457] syzkaller0: entered promiscuous mode [ 999.390406][ T5457] syzkaller0: entered allmulticast mode [ 999.716740][ T5480] tipc: Invalid UDP bearer configuration [ 999.716796][ T5480] tipc: Enabling of bearer rejected, failed to enable media [ 999.746999][ T5481] tipc: Invalid UDP bearer configuration [ 999.747052][ T5481] tipc: Enabling of bearer rejected, failed to enable media [ 999.804647][ T5480] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1000.105227][ T5509] __nla_validate_parse: 3 callbacks suppressed [ 1000.105246][ T5509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1000.282644][ T5524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8908'. [ 1000.483444][ T5540] netlink: 'syz.5.8911': attribute type 72 has an invalid length. [ 1000.494518][ T5541] netlink: 'syz.2.8912': attribute type 10 has an invalid length. [ 1000.507089][ T5541] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8912'. [ 1000.516857][ T5540] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.8911'. [ 1000.689932][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8918'. [ 1000.716955][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8915'. [ 1001.328049][ T5598] netlink: 'syz.5.8925': attribute type 72 has an invalid length. [ 1001.349400][ T5601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8926'. [ 1001.366026][ T5598] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.8925'. [ 1001.559545][ T5606] xt_time: unknown flags 0xf4 [ 1002.111373][ T5634] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8932'. [ 1002.187984][ T5638] netlink: 'syz.0.8935': attribute type 4 has an invalid length. [ 1002.195782][ T5638] netlink: 'syz.0.8935': attribute type 1 has an invalid length. [ 1002.238059][ T5638] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8935'. [ 1002.728083][ T5678] syzkaller0: entered promiscuous mode [ 1002.733604][ T5678] syzkaller0: entered allmulticast mode [ 1003.001848][ T5706] netlink: 'syz.2.8953': attribute type 1 has an invalid length. [ 1003.039616][ T5704] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1003.050224][ T5706] netlink: 'syz.2.8953': attribute type 32 has an invalid length. [ 1003.711955][ T5751] tipc: Enabling of bearer rejected, failed to enable media [ 1003.934382][ T5764] syzkaller0: entered promiscuous mode [ 1003.948977][ T5764] syzkaller0: entered allmulticast mode [ 1004.146399][ T5779] validate_nla: 2 callbacks suppressed [ 1004.146418][ T5779] netlink: 'syz.2.8976': attribute type 13 has an invalid length. [ 1004.558255][ T5807] macvtap1: entered promiscuous mode [ 1004.580387][ T5807] macvtap1: entered allmulticast mode [ 1004.585819][ T5807] veth1_vlan: entered allmulticast mode [ 1004.733267][ T5820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.764213][ T5820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.803536][ T5820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.266825][ T5866] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1005.288178][ T5866] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1005.702214][ T5908] __nla_validate_parse: 50 callbacks suppressed [ 1005.702236][ T5908] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9008'. [ 1005.880724][T24276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1005.892085][T24276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1005.901655][T24276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1005.914632][T24276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1005.923506][T24276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1005.951071][ T5912] syzkaller0: entered promiscuous mode [ 1005.959024][ T5912] syzkaller0: entered allmulticast mode [ 1007.103086][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9014'. [ 1007.122471][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9014'. [ 1007.972755][ T5140] Bluetooth: hci6: command tx timeout [ 1008.099706][ T5932] netlink: 'syz.0.9013': attribute type 4 has an invalid length. [ 1008.182632][ T5918] wg1 speed is unknown, defaulting to 1000 [ 1008.281602][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1008.367220][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9018'. [ 1008.406495][ T1838] IPVS: starting estimator thread 0... [ 1008.506554][ T5956] IPVS: using max 37 ests per chain, 88800 per kthread [ 1008.580581][ T5970] netlink: 'syz.3.9025': attribute type 1 has an invalid length. [ 1008.617471][ T5970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.642014][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 1008.761969][ T5974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9026'. [ 1008.812955][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9029'. [ 1008.859848][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.886006][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.910807][ T5918] bridge_slave_0: entered allmulticast mode [ 1008.933163][ T5918] bridge_slave_0: entered promiscuous mode [ 1008.957992][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.965230][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.975540][ T5918] bridge_slave_1: entered allmulticast mode [ 1008.994107][ T5918] bridge_slave_1: entered promiscuous mode [ 1009.005077][ T5980] syzkaller0: entered promiscuous mode [ 1009.013085][ T5980] syzkaller0: entered allmulticast mode [ 1009.081066][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.105382][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.117055][ T5996] syzkaller0: entered promiscuous mode [ 1009.123083][ T5996] syzkaller0: entered allmulticast mode [ 1009.168179][ T5918] team0: Port device team_slave_0 added [ 1009.179099][ T5918] team0: Port device team_slave_1 added [ 1009.232689][ T6000] bond4: option mode: invalid value (133) [ 1009.240185][ T6000] bond4 (unregistering): Released all slaves [ 1009.292354][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.310278][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.376454][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.423956][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.442125][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.471298][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.544993][ T5918] hsr_slave_0: entered promiscuous mode [ 1009.555029][ T5918] hsr_slave_1: entered promiscuous mode [ 1009.566015][ T5918] debugfs: 'hsr0' already exists in 'hsr' [ 1009.571700][ T6020] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1009.574905][ T5918] Cannot create hsr debugfs directory [ 1009.627430][ T6022] lo: Caught tx_queue_len zero misconfig [ 1009.980451][ T6041] netlink: 'syz.3.9045': attribute type 1 has an invalid length. [ 1009.991079][ T6041] netlink: 'syz.3.9045': attribute type 2 has an invalid length. [ 1010.004703][ T6041] netlink: 'syz.3.9045': attribute type 1 has an invalid length. [ 1010.049265][ T5140] Bluetooth: hci6: command tx timeout [ 1010.152667][ T6046] netlink: 'syz.3.9045': attribute type 29 has an invalid length. [ 1010.178698][ T6041] netlink: 'syz.3.9045': attribute type 29 has an invalid length. [ 1010.198725][ T6041] netlink: 'syz.3.9045': attribute type 29 has an invalid length. [ 1010.199635][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9047'. [ 1010.284112][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9047'. [ 1010.284287][ T6041] netlink: 'syz.3.9045': attribute type 29 has an invalid length. [ 1010.334382][ T6041] netlink: 'syz.3.9045': attribute type 29 has an invalid length. [ 1010.361917][ T6041] netlink: 'syz.3.9045': attribute type 29 has an invalid length. [ 1010.412098][ T6057] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9050'. [ 1010.442995][ T6041] netlink: 'syz.3.9045': attribute type 29 has an invalid length. [ 1010.453435][ T6059] delete_channel: no stack [ 1010.474644][ T5918] bond0: (slave netdevsim0): Releasing backup interface [ 1010.899764][ T5918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1010.933579][ T6090] __nla_validate_parse: 1 callbacks suppressed [ 1010.933597][ T6090] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9061'. [ 1010.955969][ T5918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1011.002347][ T5918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1011.047248][ T5918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1011.272903][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.327562][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.340459][T12794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.347704][T12794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.402200][ T901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.409503][ T901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.450544][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9073'. [ 1011.873731][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.069841][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.107830][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1012.136815][ T5140] Bluetooth: hci6: command tx timeout [ 1012.458915][ T5918] veth0_vlan: entered promiscuous mode [ 1012.572771][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9090'. [ 1012.583781][ T5918] veth1_vlan: entered promiscuous mode [ 1012.711172][ T5918] veth0_macvtap: entered promiscuous mode [ 1012.752972][ T5918] veth1_macvtap: entered promiscuous mode [ 1012.855801][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.929412][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.026554][ T901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.089892][ T901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.149104][ T901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.161991][ T6230] netlink: zone id is out of range [ 1013.163034][ T901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.169595][ T6230] netlink: del zone limit has 4 unknown bytes [ 1013.263130][ T904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.290714][ T904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.351233][ T6233] bond2: entered promiscuous mode [ 1013.370491][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9103'. [ 1013.370919][ T904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.389110][ T904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.825976][ T6248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1013.942679][ T6253] bond13: option primary_reselect: invalid value (255) [ 1014.018058][ T6253] bond13 (unregistering): Released all slaves [ 1014.089884][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9110'. [ 1014.209086][ T5140] Bluetooth: hci6: command tx timeout [ 1014.259675][T24276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1014.270792][T24276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1014.280187][T24276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1014.291712][T24276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1014.301144][T24276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1014.355881][ T6263] wg1 speed is unknown, defaulting to 1000 [ 1014.890481][ T6300] pim6reg1: entered promiscuous mode [ 1014.895817][ T6300] pim6reg1: entered allmulticast mode [ 1014.944061][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1015.086471][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 1015.104202][ T6314] tunl0: entered promiscuous mode [ 1015.110333][ T6314] validate_nla: 5 callbacks suppressed [ 1015.110349][ T6314] netlink: 'syz.0.9127': attribute type 3 has an invalid length. [ 1015.129309][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9128'. [ 1015.136371][ T6314] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9127'. [ 1015.312192][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9130'. [ 1015.403598][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.411139][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.419552][ T6263] bridge_slave_0: entered allmulticast mode [ 1015.461257][ T6263] bridge_slave_0: entered promiscuous mode [ 1015.470954][ T6346] xt_cgroup: path and classid specified [ 1015.518536][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.525778][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.536099][ T6263] bridge_slave_1: entered allmulticast mode [ 1015.545068][ T6263] bridge_slave_1: entered promiscuous mode [ 1015.585506][ T6346] bond13: Removing last arp target with arp_interval on [ 1015.672810][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.687472][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.777397][ T6263] team0: Port device team_slave_0 added [ 1015.787785][ T6263] team0: Port device team_slave_1 added [ 1015.939251][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.955629][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.983706][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.997153][ T6373] veth0: entered promiscuous mode [ 1016.007972][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.015055][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.091062][ T6373] __nla_validate_parse: 4 callbacks suppressed [ 1016.091083][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9140'. [ 1016.110562][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.134645][ T6377] macsec1: entered promiscuous mode [ 1016.293180][ T6263] hsr_slave_0: entered promiscuous mode [ 1016.326047][ T6263] hsr_slave_1: entered promiscuous mode [ 1016.341734][ T6263] debugfs: 'hsr0' already exists in 'hsr' [ 1016.358326][ T6391] IPv6: NLM_F_CREATE should be specified when creating new route [ 1016.367881][T24276] Bluetooth: hci5: command tx timeout [ 1016.374660][ T6263] Cannot create hsr debugfs directory [ 1016.388003][ T6391] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1016.510877][ T6381] wg1 speed is unknown, defaulting to 1000 [ 1016.776548][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9155'. [ 1016.920380][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1016.952042][ T6263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.964120][ T6263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.994642][ T6422] xt_TCPMSS: Only works on TCP SYN packets [ 1017.058406][ T6263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.068878][ T6263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.130302][ T6426] netlink: 'syz.0.9159': attribute type 1 has an invalid length. [ 1017.228686][ T6263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.242711][ T6263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.398030][ T6263] bond0: (slave netdevsim0): Releasing backup interface [ 1017.413992][ T6263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.430336][ T6263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.592220][ T6453] bridge0: port 3(team0) entered disabled state [ 1017.598833][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.606732][ T6453] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1017.798732][ T6263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1017.837270][ T6263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1017.860382][ T6263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1017.934642][ T6263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1018.149354][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.157036][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.187648][ T6481] netlink: 'syz.5.9171': attribute type 1 has an invalid length. [ 1018.196474][ T6481] nbd: error processing sock list [ 1018.204759][ T6481] block nbd3: shutting down sockets [ 1018.244488][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.361314][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.382749][ T6488] netlink: 'syz.5.9174': attribute type 21 has an invalid length. [ 1018.422300][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.429541][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.445547][ T6488] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9174'. [ 1018.461271][T24276] Bluetooth: hci5: command tx timeout [ 1018.476545][ T6488] netlink: 'syz.5.9174': attribute type 4 has an invalid length. [ 1018.499678][ T6488] netlink: 'syz.5.9174': attribute type 5 has an invalid length. [ 1018.517953][ T6488] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9174'. [ 1018.554145][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.561593][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.688850][ T6501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9178'. [ 1018.830289][ T6511] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9178'. [ 1019.029476][ T6525] vlan2: entered allmulticast mode [ 1019.034655][ T6525] hsr0: entered allmulticast mode [ 1019.043387][ T6525] hsr_slave_0: entered allmulticast mode [ 1019.066387][ T6525] hsr_slave_1: entered allmulticast mode [ 1019.133862][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1019.316066][ T6535] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9186'. [ 1019.338803][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9187'. [ 1019.350466][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.551543][ T6543] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1019.588677][ T6263] veth0_vlan: entered promiscuous mode [ 1019.615416][ T6263] veth1_vlan: entered promiscuous mode [ 1019.692286][ T6263] veth0_macvtap: entered promiscuous mode [ 1019.722075][ T6263] veth1_macvtap: entered promiscuous mode [ 1019.804299][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.842100][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.858815][ T5180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.898128][ T5180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.912528][ T5180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.958713][ T5180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.974368][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.154037][ T6573] 8021q: VLANs not supported on wg2 [ 1020.211872][T12794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.258890][T12794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.325073][T12794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.334227][T12794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.526979][T24276] Bluetooth: hci5: command tx timeout [ 1020.617225][ T6596] netlink: 'syz.4.9207': attribute type 1 has an invalid length. [ 1020.990246][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1021.001386][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1021.014635][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1021.023795][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1021.034533][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1021.058983][ T6620] openvswitch: netlink: Flow actions attr not present in new flow. [ 1021.172910][ T6616] wg1 speed is unknown, defaulting to 1000 [ 1021.402848][ T6634] __nla_validate_parse: 10 callbacks suppressed [ 1021.402868][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9216'. [ 1021.663825][ T6616] chnl_net:caif_netlink_parms(): no params data found [ 1021.853465][ T6651] wg1 speed is unknown, defaulting to 1000 [ 1021.870275][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9225'. [ 1021.957951][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.965579][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.978647][ T6616] bridge_slave_0: entered allmulticast mode [ 1021.987008][ T6616] bridge_slave_0: entered promiscuous mode [ 1022.010717][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.018618][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.026178][ T6616] bridge_slave_1: entered allmulticast mode [ 1022.035627][ T6616] bridge_slave_1: entered promiscuous mode [ 1022.098075][ T6616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.113122][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9229'. [ 1022.125922][ T6616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.471495][ T6616] team0: Port device team_slave_0 added [ 1022.540967][ T6616] team0: Port device team_slave_1 added [ 1022.585777][ T6677] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.9228'. [ 1022.597481][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.604647][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.608101][T24276] Bluetooth: hci5: command tx timeout [ 1022.673565][ T6616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.688630][ T6704] "syz.2.9235" (6704) uses obsolete ecb(arc4) skcipher [ 1022.718736][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.729593][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.730525][ T6710] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1022.756944][ T6616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.767273][ T6707] ipt_ECN: cannot use operation on non-tcp rule [ 1022.800336][ T898] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.836313][ T898] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.845254][ T898] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.858888][ T6712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1022.969175][ T5182] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.993469][ T6616] hsr_slave_0: entered promiscuous mode [ 1023.023636][ T6616] hsr_slave_1: entered promiscuous mode [ 1023.032165][ T6616] debugfs: 'hsr0' already exists in 'hsr' [ 1023.047634][ T6616] Cannot create hsr debugfs directory [ 1023.142870][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9240'. [ 1023.170879][T24276] Bluetooth: hci0: command tx timeout [ 1023.310554][ T6738] openvswitch: netlink: Key type 220 is out of range max 32 [ 1023.514394][ T6616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1023.526039][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1023.526580][ T6616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.545944][ T6751] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1023.545968][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1023.658930][ T6616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1023.766451][ T6616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.872131][ T6616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1023.914333][ T6616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.943441][ T6768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9253'. [ 1023.957367][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9251'. [ 1023.995379][ T6616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1024.013744][ T6616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.093446][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.174706][ T6776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.360365][ T6775] syzkaller0: entered promiscuous mode [ 1024.366199][ T6775] syzkaller0: entered allmulticast mode [ 1024.409244][ T6790] FAULT_INJECTION: forcing a failure. [ 1024.409244][ T6790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.455506][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.4.9260 Not tainted syzkaller #0 PREEMPT(full) [ 1024.455532][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1024.455544][ T6790] Call Trace: [ 1024.455552][ T6790] [ 1024.455560][ T6790] dump_stack_lvl+0xe8/0x150 [ 1024.455588][ T6790] should_fail_ex+0x412/0x560 [ 1024.455616][ T6790] _copy_from_user+0x2d/0xb0 [ 1024.455636][ T6790] ___sys_sendmsg+0x1c6/0x360 [ 1024.455656][ T6790] ? __lock_acquire+0x6b5/0x2cf0 [ 1024.455680][ T6790] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.455698][ T6790] ? __lock_acquire+0x6b5/0x2cf0 [ 1024.455719][ T6790] ? kstrtouint+0x6e/0xe0 [ 1024.455778][ T6790] __sys_sendmmsg+0x27c/0x4e0 [ 1024.455805][ T6790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1024.455823][ T6790] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1024.455871][ T6790] ? ksys_write+0x242/0x270 [ 1024.455892][ T6790] ? __pfx_ksys_write+0x10/0x10 [ 1024.455919][ T6790] __x64_sys_sendmmsg+0xa0/0xc0 [ 1024.455942][ T6790] do_syscall_64+0x14d/0xf80 [ 1024.455962][ T6790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.455985][ T6790] ? trace_irq_disable+0x37/0x100 [ 1024.456003][ T6790] ? clear_bhb_loop+0x40/0x90 [ 1024.456023][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.456039][ T6790] RIP: 0033:0x7f90cd99c629 [ 1024.456056][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.456070][ T6790] RSP: 002b:00007f90ce808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1024.456090][ T6790] RAX: ffffffffffffffda RBX: 00007f90cdc15fa0 RCX: 00007f90cd99c629 [ 1024.456102][ T6790] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1024.456115][ T6790] RBP: 00007f90ce808090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.456126][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.456137][ T6790] R13: 00007f90cdc16038 R14: 00007f90cdc15fa0 R15: 00007ffed83c4378 [ 1024.456166][ T6790] [ 1025.252105][T24276] Bluetooth: hci0: command tx timeout [ 1026.897466][ T6823] FAULT_INJECTION: forcing a failure. [ 1026.897466][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.910350][ T6616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1026.940129][ T6823] CPU: 1 UID: 0 PID: 6823 Comm: syz.5.9272 Not tainted syzkaller #0 PREEMPT(full) [ 1026.940155][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1026.940167][ T6823] Call Trace: [ 1026.940174][ T6823] [ 1026.940182][ T6823] dump_stack_lvl+0xe8/0x150 [ 1026.940210][ T6823] should_fail_ex+0x412/0x560 [ 1026.940238][ T6823] should_failslab+0xa8/0x100 [ 1026.940260][ T6823] ? skb_clone+0x212/0x3a0 [ 1026.940282][ T6823] kmem_cache_alloc_noprof+0x87/0x650 [ 1026.940310][ T6823] skb_clone+0x212/0x3a0 [ 1026.940332][ T6823] __netlink_deliver_tap+0x404/0x850 [ 1026.940360][ T6823] ? netlink_deliver_tap+0x2e/0x1b0 [ 1026.940379][ T6823] netlink_deliver_tap+0x19c/0x1b0 [ 1026.940398][ T6823] netlink_sendskb+0x68/0x140 [ 1026.940423][ T6823] netlink_unicast+0x3a3/0x9b0 [ 1026.940453][ T6823] ? __pfx_netlink_unicast+0x10/0x10 [ 1026.940488][ T6823] netlink_rcv_skb+0x2b6/0x4b0 [ 1026.940507][ T6823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1026.940527][ T6823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1026.940556][ T6823] ? netlink_deliver_tap+0x2e/0x1b0 [ 1026.940579][ T6823] netlink_unicast+0x80f/0x9b0 [ 1026.940610][ T6823] ? __pfx_netlink_unicast+0x10/0x10 [ 1026.940635][ T6823] ? netlink_sendmsg+0x650/0xb40 [ 1026.940650][ T6823] ? skb_put+0x11b/0x210 [ 1026.940673][ T6823] netlink_sendmsg+0x813/0xb40 [ 1026.940700][ T6823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.940722][ T6823] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1026.940746][ T6823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1026.940770][ T6823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.940786][ T6823] ____sys_sendmsg+0xa68/0xad0 [ 1026.940807][ T6823] ? __might_fault+0xaf/0x130 [ 1026.940833][ T6823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.940861][ T6823] ? import_iovec+0x73/0xa0 [ 1026.940882][ T6823] ___sys_sendmsg+0x2a5/0x360 [ 1026.940901][ T6823] ? __lock_acquire+0x6b5/0x2cf0 [ 1026.940925][ T6823] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.940958][ T6823] ? kstrtouint+0x6e/0xe0 [ 1026.941007][ T6823] ? __fget_files+0x2a/0x420 [ 1026.941024][ T6823] ? __fget_files+0x3a0/0x420 [ 1026.941050][ T6823] __sys_sendmmsg+0x27c/0x4e0 [ 1026.941075][ T6823] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1026.941093][ T6823] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1026.941138][ T6823] ? ksys_write+0x242/0x270 [ 1026.941165][ T6823] ? __pfx_ksys_write+0x10/0x10 [ 1026.941192][ T6823] __x64_sys_sendmmsg+0xa0/0xc0 [ 1026.941215][ T6823] do_syscall_64+0x14d/0xf80 [ 1026.941236][ T6823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.941252][ T6823] ? trace_irq_disable+0x37/0x100 [ 1026.941271][ T6823] ? clear_bhb_loop+0x40/0x90 [ 1026.941291][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.941308][ T6823] RIP: 0033:0x7fa79b39c629 [ 1026.941324][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.941338][ T6823] RSP: 002b:00007fa79c210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1026.941358][ T6823] RAX: ffffffffffffffda RBX: 00007fa79b615fa0 RCX: 00007fa79b39c629 [ 1026.941371][ T6823] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1026.941382][ T6823] RBP: 00007fa79c210090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.941394][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.941405][ T6823] R13: 00007fa79b616038 R14: 00007fa79b615fa0 R15: 00007fffc83b1e58 [ 1026.941436][ T6823] [ 1027.288514][ T6827] __nla_validate_parse: 8 callbacks suppressed [ 1027.288528][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9273'. [ 1027.304375][ T6616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1027.321446][ T6616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1027.338233][T24276] Bluetooth: hci0: command tx timeout [ 1027.365619][ T6616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1027.461366][ T6843] sctp: [Deprecated]: syz.0.9276 (pid 6843) Use of int in max_burst socket option deprecated. [ 1027.461366][ T6843] Use struct sctp_assoc_value instead [ 1027.563218][ T6616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.594724][ T6616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.648435][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.655642][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.683275][ T6849] xt_ecn: cannot match TCP bits for non-tcp packets [ 1027.692745][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.700079][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.715130][ T6852] xt_ecn: cannot match TCP bits for non-tcp packets [ 1027.818434][ T6616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1027.855052][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1027.856847][ T6616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.000164][ T6858] wg1 speed is unknown, defaulting to 1000 [ 1028.225534][ T6877] ip6gre0: Master is either lo or non-ether device [ 1028.243287][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9290'. [ 1028.265717][ T6877] ip6gre0: Master is either lo or non-ether device [ 1028.355810][ T6616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.434537][ T6891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1028.453269][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9293'. [ 1028.551612][ T6894] syzkaller1: entered promiscuous mode [ 1028.558609][ T6894] syzkaller1: entered allmulticast mode [ 1028.761893][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9299'. [ 1028.775376][ T6616] veth0_vlan: entered promiscuous mode [ 1028.783560][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9299'. [ 1028.794450][ T6616] veth1_vlan: entered promiscuous mode [ 1028.880116][ T6616] veth0_macvtap: entered promiscuous mode [ 1028.891543][ T6616] veth1_macvtap: entered promiscuous mode [ 1028.943493][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.964364][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.000068][ T5180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.026719][ T5180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.048805][ T5180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.071338][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9302'. [ 1029.083524][ T5180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.324452][T12814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.349112][T12814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.407217][T24276] Bluetooth: hci0: command tx timeout [ 1029.444835][ T898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.494637][ T898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.682622][ T6945] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1029.689611][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9310'. [ 1029.982060][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9315'. [ 1030.314377][ T6987] sctp: [Deprecated]: syz.5.9324 (pid 6987) Use of int in max_burst socket option deprecated. [ 1030.314377][ T6987] Use struct sctp_assoc_value instead [ 1030.331544][ T6986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.343827][ T6991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1030.513468][T12814] [ 1030.515844][T12814] ============================================ [ 1030.521992][T12814] WARNING: possible recursive locking detected [ 1030.528162][T12814] syzkaller #0 Not tainted [ 1030.532578][T12814] -------------------------------------------- [ 1030.538727][T12814] kworker/u8:32/12814 is trying to acquire lock: [ 1030.545041][T12814] ffff88807d1f0fa0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1030.554370][T12814] [ 1030.554370][T12814] but task is already holding lock: [ 1030.561722][T12814] ffff88807d1f0fa0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1030.571285][T12814] [ 1030.571285][T12814] other info that might help us debug this: [ 1030.579341][T12814] Possible unsafe locking scenario: [ 1030.579341][T12814] [ 1030.586774][T12814] CPU0 [ 1030.590034][T12814] ---- [ 1030.593291][T12814] lock(k-sk_lock-AF_INET6); [ 1030.597953][T12814] lock(k-sk_lock-AF_INET6); [ 1030.602612][T12814] [ 1030.602612][T12814] *** DEADLOCK *** [ 1030.602612][T12814] [ 1030.610737][T12814] May be due to missing lock nesting notation [ 1030.610737][T12814] [ 1030.619135][T12814] 4 locks held by kworker/u8:32/12814: [ 1030.624573][T12814] #0: ffff88806e593948 ((wq_completion)krds_cp_wq#16/0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1030.636303][T12814] #1: ffffc90003b7fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1030.649111][T12814] #2: ffff88807d1f0fa0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1030.659116][T12814] #3: ffff88807d1f1148 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 1030.669285][T12814] [ 1030.669285][T12814] stack backtrace: [ 1030.675167][T12814] CPU: 0 UID: 0 PID: 12814 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 1030.675185][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1030.675194][T12814] Workqueue: krds_cp_wq#16/0 rds_send_worker [ 1030.675214][T12814] Call Trace: [ 1030.675221][T12814] [ 1030.675229][T12814] dump_stack_lvl+0xe8/0x150 [ 1030.675248][T12814] print_deadlock_bug+0x279/0x290 [ 1030.675266][T12814] __lock_acquire+0x253f/0x2cf0 [ 1030.675281][T12814] ? unwind_next_frame+0xa5/0x23c0 [ 1030.675297][T12814] ? lock_acquire+0x106/0x330 [ 1030.675311][T12814] ? unwind_next_frame+0xa5/0x23c0 [ 1030.675326][T12814] ? lock_acquire+0x106/0x330 [ 1030.675339][T12814] ? unwind_next_frame+0xa5/0x23c0 [ 1030.675356][T12814] ? inet6_getname+0x15d/0x650 [ 1030.675373][T12814] lock_acquire+0x106/0x330 [ 1030.675386][T12814] ? inet6_getname+0x15d/0x650 [ 1030.675403][T12814] ? unwind_next_frame+0xa5/0x23c0 [ 1030.675418][T12814] ? unwind_next_frame+0x1aaf/0x23c0 [ 1030.675436][T12814] lock_sock_nested+0x48/0x100 [ 1030.675448][T12814] ? inet6_getname+0x15d/0x650 [ 1030.675466][T12814] inet6_getname+0x15d/0x650 [ 1030.675487][T12814] rds_tcp_conn_slots_available+0x288/0x470 [ 1030.675514][T12814] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1030.675538][T12814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1030.675552][T12814] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1030.675571][T12814] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1030.675589][T12814] ? process_scheduled_works+0xaec/0x17a0 [ 1030.675602][T12814] ? worker_thread+0xa50/0xfc0 [ 1030.675615][T12814] ? kthread+0x388/0x470 [ 1030.675635][T12814] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1030.675652][T12814] rds_recv_incoming+0x9f6/0x12d0 [ 1030.675669][T12814] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1030.675682][T12814] ? skb_copy_bits+0x7e5/0x8f0 [ 1030.675699][T12814] rds_tcp_data_recv+0x7f1/0xa40 [ 1030.675718][T12814] __tcp_read_sock+0x196/0x970 [ 1030.675738][T12814] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1030.675752][T12814] rds_tcp_data_ready+0x369/0x950 [ 1030.675763][T12814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1030.675777][T12814] ? __pfx_sock_def_readable+0x10/0x10 [ 1030.675796][T12814] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1030.675813][T12814] tcp_rcv_established+0x19e9/0x2670 [ 1030.675835][T12814] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1030.675850][T12814] ? ip6_dst_check+0x70/0x7e0 [ 1030.675864][T12814] ? ip6_dst_check+0xe2/0x7e0 [ 1030.675877][T12814] ? ip6_dst_check+0x5e3/0x7e0 [ 1030.675889][T12814] ? __pfx_ip6_dst_check+0x10/0x10 [ 1030.675902][T12814] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1030.675923][T12814] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1030.675939][T12814] __release_sock+0x1b8/0x3a0 [ 1030.675962][T12814] release_sock+0x5f/0x1f0 [ 1030.675974][T12814] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1030.675987][T12814] rds_send_xmit+0x207e/0x28d0 [ 1030.676013][T12814] ? __pfx_rds_send_xmit+0x10/0x10 [ 1030.676026][T12814] ? process_scheduled_works+0xa0f/0x17a0 [ 1030.676042][T12814] rds_send_worker+0x7d/0x2e0 [ 1030.676056][T12814] ? process_scheduled_works+0xa0f/0x17a0 [ 1030.676070][T12814] process_scheduled_works+0xaec/0x17a0 [ 1030.676092][T12814] ? __pfx_process_scheduled_works+0x10/0x10 [ 1030.676107][T12814] ? assign_work+0x3d5/0x5e0 [ 1030.676122][T12814] worker_thread+0xa50/0xfc0 [ 1030.676144][T12814] kthread+0x388/0x470 [ 1030.676160][T12814] ? __pfx_worker_thread+0x10/0x10 [ 1030.676172][T12814] ? __pfx_kthread+0x10/0x10 [ 1030.676188][T12814] ret_from_fork+0x51e/0xb90 [ 1030.676203][T12814] ? __pfx_ret_from_fork+0x10/0x10 [ 1030.676217][T12814] ? __switch_to+0xc7d/0x1400 [ 1030.676231][T12814] ? __pfx_kthread+0x10/0x10 [ 1030.676248][T12814] ret_from_fork_asm+0x1a/0x30 [ 1030.676272][T12814] [ 1031.030186][T12814] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1031.038977][T12814] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12814, name: kworker/u8:32 [ 1031.048385][T12814] preempt_count: 201, expected: 0 [ 1031.053410][T12814] RCU nest depth: 0, expected: 0 [ 1031.058360][T12814] INFO: lockdep is turned off. [ 1031.063108][T12814] Preemption disabled at: [ 1031.063117][T12814] [<0000000000000000>] 0x0 [ 1031.071874][T12814] CPU: 0 UID: 0 PID: 12814 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 1031.071894][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.071905][T12814] Workqueue: krds_cp_wq#16/0 rds_send_worker [ 1031.071927][T12814] Call Trace: [ 1031.071934][T12814] [ 1031.071941][T12814] dump_stack_lvl+0xe8/0x150 [ 1031.071961][T12814] __might_resched+0x378/0x4d0 [ 1031.071981][T12814] lock_sock_nested+0x5d/0x100 [ 1031.071998][T12814] inet6_getname+0x15d/0x650 [ 1031.072022][T12814] rds_tcp_conn_slots_available+0x288/0x470 [ 1031.072044][T12814] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1031.072074][T12814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1031.072093][T12814] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1031.072116][T12814] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1031.072133][T12814] ? process_scheduled_works+0xaec/0x17a0 [ 1031.072151][T12814] ? worker_thread+0xa50/0xfc0 [ 1031.072167][T12814] ? kthread+0x388/0x470 [ 1031.072191][T12814] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1031.072213][T12814] rds_recv_incoming+0x9f6/0x12d0 [ 1031.072234][T12814] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1031.072250][T12814] ? skb_copy_bits+0x7e5/0x8f0 [ 1031.072272][T12814] rds_tcp_data_recv+0x7f1/0xa40 [ 1031.072297][T12814] __tcp_read_sock+0x196/0x970 [ 1031.072321][T12814] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1031.072340][T12814] rds_tcp_data_ready+0x369/0x950 [ 1031.072355][T12814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1031.072379][T12814] ? __pfx_sock_def_readable+0x10/0x10 [ 1031.072401][T12814] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1031.072424][T12814] tcp_rcv_established+0x19e9/0x2670 [ 1031.072452][T12814] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1031.072478][T12814] ? ip6_dst_check+0x70/0x7e0 [ 1031.072497][T12814] ? ip6_dst_check+0xe2/0x7e0 [ 1031.072512][T12814] ? ip6_dst_check+0x5e3/0x7e0 [ 1031.072528][T12814] ? __pfx_ip6_dst_check+0x10/0x10 [ 1031.072542][T12814] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1031.072565][T12814] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1031.072584][T12814] __release_sock+0x1b8/0x3a0 [ 1031.072605][T12814] release_sock+0x5f/0x1f0 [ 1031.072618][T12814] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1031.072634][T12814] rds_send_xmit+0x207e/0x28d0 [ 1031.072660][T12814] ? __pfx_rds_send_xmit+0x10/0x10 [ 1031.072676][T12814] ? process_scheduled_works+0xa0f/0x17a0 [ 1031.072694][T12814] rds_send_worker+0x7d/0x2e0 [ 1031.072710][T12814] ? process_scheduled_works+0xa0f/0x17a0 [ 1031.072726][T12814] process_scheduled_works+0xaec/0x17a0 [ 1031.072757][T12814] ? __pfx_process_scheduled_works+0x10/0x10 [ 1031.072777][T12814] ? assign_work+0x3d5/0x5e0 [ 1031.072797][T12814] worker_thread+0xa50/0xfc0 [ 1031.072827][T12814] kthread+0x388/0x470 [ 1031.072847][T12814] ? __pfx_worker_thread+0x10/0x10 [ 1031.072864][T12814] ? __pfx_kthread+0x10/0x10 [ 1031.072885][T12814] ret_from_fork+0x51e/0xb90 [ 1031.072905][T12814] ? __pfx_ret_from_fork+0x10/0x10 [ 1031.072922][T12814] ? __switch_to+0xc7d/0x1400 [ 1031.072940][T12814] ? __pfx_kthread+0x10/0x10 [ 1031.072961][T12814] ret_from_fork_asm+0x1a/0x30 [ 1031.072990][T12814] [ 1031.073000][T12814] BUG: scheduling while atomic: kworker/u8:32/12814/0x00000202 [ 1031.376189][T12814] INFO: lockdep is turned off. [ 1031.380991][T12814] Modules linked in: [ 1031.384882][T12814] Preemption disabled at: [ 1031.384890][T12814] [<0000000000000000>] 0x0 [ 1031.393647][T12814] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 1031.402478][T12814] CPU: 0 UID: 0 PID: 12814 Comm: kworker/u8:32 Tainted: G W syzkaller #0 PREEMPT(full) [ 1031.413670][T12814] Tainted: [W]=WARN [ 1031.417475][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.427539][T12814] Workqueue: krds_cp_wq#16/0 rds_send_worker [ 1031.433525][T12814] Call Trace: [ 1031.436806][T12814] [ 1031.439734][T12814] vpanic+0x1e0/0x670 [ 1031.443717][T12814] panic+0xc5/0xd0 [ 1031.447546][T12814] ? __pfx_panic+0x10/0x10 [ 1031.451969][T12814] ? __pfx__printk+0x10/0x10 [ 1031.456553][T12814] ? vprintk_emit+0x4eb/0x560 [ 1031.461230][T12814] ? __pfx_vprintk_emit+0x10/0x10 [ 1031.466252][T12814] ? __irq_work_queue_local+0x1f2/0x540 [ 1031.471813][T12814] check_panic_on_warn+0x89/0xb0 [ 1031.476868][T12814] __schedule_bug+0xf6/0x150 [ 1031.481469][T12814] __schedule+0x168c/0x5290 [ 1031.485957][T12814] ? __wake_up_klogd+0xe6/0x120 [ 1031.490802][T12814] ? vprintk_emit+0x4eb/0x560 [ 1031.495461][T12814] ? rcu_is_watching+0x15/0xb0 [ 1031.500209][T12814] ? __pfx_vprintk_emit+0x10/0x10 [ 1031.505226][T12814] ? unwind_next_frame+0xa5/0x23c0 [ 1031.510332][T12814] ? do_raw_spin_lock+0x12b/0x2f0 [ 1031.515356][T12814] ? prepare_to_wait_exclusive+0x45/0x240 [ 1031.521086][T12814] ? __pfx___schedule+0x10/0x10 [ 1031.525927][T12814] ? schedule+0x90/0x360 [ 1031.530169][T12814] ? rcu_is_watching+0x15/0xb0 [ 1031.534922][T12814] ? rcu_is_watching+0x15/0xb0 [ 1031.539691][T12814] ? lock_release+0x4b/0x3a0 [ 1031.544313][T12814] ? schedule+0x90/0x360 [ 1031.548549][T12814] ? wq_worker_sleeping+0x63/0x250 [ 1031.553652][T12814] schedule+0x164/0x360 [ 1031.557796][T12814] __lock_sock+0x161/0x2c0 [ 1031.562207][T12814] ? __pfx___lock_sock+0x10/0x10 [ 1031.567140][T12814] ? do_raw_spin_lock+0x12b/0x2f0 [ 1031.572154][T12814] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1031.578217][T12814] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1031.583584][T12814] ? dump_stack_lvl+0x135/0x150 [ 1031.588428][T12814] ? lock_sock_nested+0x6a/0x100 [ 1031.593356][T12814] lock_sock_nested+0x9f/0x100 [ 1031.598104][T12814] inet6_getname+0x15d/0x650 [ 1031.602689][T12814] rds_tcp_conn_slots_available+0x288/0x470 [ 1031.608575][T12814] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1031.614989][T12814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1031.620790][T12814] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1031.627196][T12814] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1031.632296][T12814] ? process_scheduled_works+0xaec/0x17a0 [ 1031.637999][T12814] ? worker_thread+0xa50/0xfc0 [ 1031.642747][T12814] ? kthread+0x388/0x470 [ 1031.646987][T12814] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1031.652619][T12814] rds_recv_incoming+0x9f6/0x12d0 [ 1031.657634][T12814] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1031.663081][T12814] ? skb_copy_bits+0x7e5/0x8f0 [ 1031.667850][T12814] rds_tcp_data_recv+0x7f1/0xa40 [ 1031.672802][T12814] __tcp_read_sock+0x196/0x970 [ 1031.677579][T12814] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1031.683073][T12814] rds_tcp_data_ready+0x369/0x950 [ 1031.688263][T12814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1031.694322][T12814] ? __pfx_sock_def_readable+0x10/0x10 [ 1031.699772][T12814] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1031.705313][T12814] tcp_rcv_established+0x19e9/0x2670 [ 1031.710590][T12814] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1031.716209][T12814] ? ip6_dst_check+0x70/0x7e0 [ 1031.720874][T12814] ? ip6_dst_check+0xe2/0x7e0 [ 1031.725536][T12814] ? ip6_dst_check+0x5e3/0x7e0 [ 1031.730285][T12814] ? __pfx_ip6_dst_check+0x10/0x10 [ 1031.735385][T12814] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1031.740061][T12814] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1031.745163][T12814] __release_sock+0x1b8/0x3a0 [ 1031.749841][T12814] release_sock+0x5f/0x1f0 [ 1031.754240][T12814] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1031.760465][T12814] rds_send_xmit+0x207e/0x28d0 [ 1031.765229][T12814] ? __pfx_rds_send_xmit+0x10/0x10 [ 1031.770337][T12814] ? process_scheduled_works+0xa0f/0x17a0 [ 1031.776219][T12814] rds_send_worker+0x7d/0x2e0 [ 1031.780884][T12814] ? process_scheduled_works+0xa0f/0x17a0 [ 1031.786591][T12814] process_scheduled_works+0xaec/0x17a0 [ 1031.792132][T12814] ? __pfx_process_scheduled_works+0x10/0x10 [ 1031.798193][T12814] ? assign_work+0x3d5/0x5e0 [ 1031.802770][T12814] worker_thread+0xa50/0xfc0 [ 1031.807370][T12814] kthread+0x388/0x470 [ 1031.811429][T12814] ? __pfx_worker_thread+0x10/0x10 [ 1031.816522][T12814] ? __pfx_kthread+0x10/0x10 [ 1031.821102][T12814] ret_from_fork+0x51e/0xb90 [ 1031.825677][T12814] ? __pfx_ret_from_fork+0x10/0x10 [ 1031.830772][T12814] ? __switch_to+0xc7d/0x1400 [ 1031.835432][T12814] ? __pfx_kthread+0x10/0x10 [ 1031.840100][T12814] ret_from_fork_asm+0x1a/0x30 [ 1031.844859][T12814] [ 1031.848355][T12814] Kernel Offset: disabled [ 1031.852673][T12814] Rebooting in 86400 seconds..