last executing test programs: 5m3.641488184s ago: executing program 4 (id=4677): socket$netlink(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="09000000040802001400030076657468305f746f5f6873720000000060001a80100002800c00018008001700010000000400070048000280440001800800180004000000080010000300000008000100d6316d7c0800100000000100080014000f000000080017000400000008001a00cb00000008001e0004000000"], 0x94}}, 0x40100d0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) r5 = accept(r1, &(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x80) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000180)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4040004}, 0x24010800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x894, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x3, 0x8ec, 0xed, 0x9, 0x4, 0x11, 0x6, 0x4, 0x80, 0xaa, 0x4, 0x81, 0x9, 0x4, 0x7, 0x7, 0xac3b, 0x5, 0x4, 0x1000, 0x2, 0xffff, 0x8, 0xe, 0xc0, 0x0, 0xc, 0x5, 0x7, 0x3, 0x2, 0x4, 0xc, 0xf, 0x9, 0xfff, 0x10000, 0x3, 0xe, 0x3, 0x9, 0x7ff, 0x8001, 0x0, 0x6, 0xc6e, 0x8, 0xb9, 0xe, 0x800, 0x9, 0x1d, 0x2, 0x1, 0x101, 0x8, 0x80, 0x6927307f, 0x3, 0x2, 0x0, 0x6, 0xc21e, 0x9, 0x9, 0x0, 0x5, 0x6, 0x3, 0xa69, 0x200, 0x6, 0x4, 0x8, 0x54d3, 0x1, 0x7d27, 0x6, 0x7, 0x6, 0x7012, 0x40, 0x0, 0x2, 0x10001, 0x105, 0x0, 0xc, 0xffff8001, 0x40, 0x2, 0xffffffff, 0x9, 0x7d8f, 0x2, 0x9, 0x0, 0x5, 0x7, 0x3ff, 0xfffffffd, 0x8, 0x81, 0x0, 0xfffffffc, 0x0, 0x400, 0x3, 0x8f61, 0x7, 0x8, 0x6, 0x3ff, 0x2, 0x6, 0x6, 0x3, 0x6, 0x3, 0x8, 0x2, 0x6, 0x10000, 0x1, 0x7, 0xd38, 0x0, 0x8, 0x101, 0x2, 0x2cc8c0, 0xffff, 0x1000, 0xf, 0x8000, 0x4ce, 0x2, 0x7, 0x9, 0xb2fab80, 0xffff565c, 0x0, 0xf, 0x8, 0x1, 0xf, 0x5, 0x5, 0x6, 0x1, 0x2, 0x2, 0x10, 0x7, 0xfffff541, 0x7, 0x200d, 0x8001, 0x2, 0x4627, 0x7, 0x1, 0x1, 0xffff, 0x80000001, 0xd576, 0x8, 0x4c000000, 0x1, 0x1000, 0x8, 0x0, 0x1c, 0x6, 0x9, 0x80000001, 0x7, 0x40, 0x4, 0xbe8, 0x6, 0x9, 0x0, 0x9, 0x5, 0xffffd8e1, 0x2, 0x0, 0x8001, 0x80000001, 0x8, 0xca2b, 0x4, 0x1, 0x80000000, 0x830, 0x6, 0x5, 0x9, 0xc, 0x9, 0xffff, 0x7, 0x0, 0x4, 0x8, 0x6, 0x2, 0x5, 0x8, 0x3, 0x1, 0x2, 0x308, 0x94, 0x8, 0x1, 0xbc, 0x6c22, 0x2, 0x3, 0x9, 0x400, 0x3, 0x0, 0x8, 0x530, 0x401, 0xf51d, 0xfffffff5, 0x6, 0x9, 0xc, 0x62f, 0x8, 0xe, 0x4, 0x7fffffff, 0x7, 0x80000000, 0xfffffff7, 0x1ed7ce29, 0x1ea1, 0x6, 0x1, 0xfffffffb, 0x6, 0x40, 0x6, 0x3, 0x7fffffff, 0x6, 0x554, 0x100, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x5, 0x7f, 0xfffffeff, 0xfffffffe, 0x9, 0x10000, 0x7, 0x3d8, 0x7ff, 0x0, 0x4, 0x6, 0x1, 0x7fffffff, 0x6, 0x40, 0x0, 0x10001, 0x1, 0x6, 0x4, 0x9, 0x7, 0xc7d, 0x80, 0x919, 0xc1d, 0x2, 0x5, 0x6, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xfffffff8, 0x2, 0x400, 0x4, 0x63, 0x8, 0x88c0, 0xc59, 0x4, 0x7, 0x8, 0x0, 0x80000001, 0xfffffd12, 0x8, 0x5, 0x5, 0x1b0d2671, 0x3, 0x5, 0x5, 0x1000, 0x5, 0x3, 0xfffffffc, 0x0, 0xfffffff8, 0x47, 0xffff, 0x0, 0x200, 0x4, 0x5, 0x0, 0x7, 0x5092, 0x1, 0xe, 0x6, 0xfffff801, 0x40, 0x1, 0x10001, 0xfffffff7, 0x2, 0x6, 0x9, 0xe, 0x7ff, 0x80000001, 0x8, 0x7caa, 0xe198, 0x6, 0x6, 0x1, 0x8000, 0x1, 0xd, 0x5, 0xd0a, 0x1, 0x0, 0x4b, 0xef9, 0x200, 0x401, 0x3, 0x101, 0x917, 0x4, 0x7, 0x3, 0xffff, 0x5, 0xe34, 0x7, 0x2, 0xfffffff2, 0x0, 0x3ff, 0x80000000, 0x2, 0xed4, 0x5, 0x9661, 0xd29377d, 0x4, 0x101, 0x398, 0x2, 0x0, 0x3, 0x7, 0x2, 0x8, 0xa7, 0x3, 0x0, 0x8, 0x5, 0xe, 0xfffffff8, 0x8000, 0xc, 0x3, 0x6, 0xf, 0x3, 0x4, 0x6, 0x4, 0x0, 0xae31, 0x0, 0x3, 0x5557, 0x10000, 0x1, 0x99ba, 0x84, 0x0, 0x7, 0xb, 0x10000, 0x1a3, 0x1ff, 0x0, 0x100, 0xf, 0x6, 0x5, 0x2, 0x3ff, 0x2, 0x4, 0x401, 0x3, 0x6, 0x9, 0x2, 0x7, 0xbf1f, 0x3, 0x6b0c, 0xd55, 0x2, 0x2a3, 0x8, 0x80, 0x7, 0x2, 0x4, 0x0, 0x7fff, 0xfffffffc, 0x7fffffff, 0x11, 0x7, 0x5, 0x9, 0x9, 0xfffffffe, 0x10, 0xb, 0x81, 0xffff, 0x800, 0x3b, 0x7, 0x4, 0x5, 0x1, 0xffffffff, 0xf, 0x800, 0x9, 0x0, 0x0, 0xe, 0x2, 0x59, 0x38, 0x2, 0x8, 0x85, 0x6, 0x443b, 0x1, 0x1, 0x4, 0x6, 0x4d09, 0x1, 0xc482, 0x4, 0x2, 0x7, 0xfffffffe, 0x4d, 0x6, 0xe1, 0x1, 0x0, 0x101, 0x7, 0xffffff7f, 0xfd, 0x1, 0x3, 0x2, 0x2, 0x7fff, 0x7, 0xffff, 0xda3, 0x3, 0x3, 0x7, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8c9, 0x0, 0x80000001, 0x7fff, 0x2, {0x1, 0x1, 0xff, 0xffff, 0x3, 0x1a9e}, {0x9, 0x2, 0x40, 0x2, 0xff, 0x7}, 0x4, 0x3ff, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR-', 0x4}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x1c, r7, 0x701, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 5m1.961036989s ago: executing program 4 (id=4685): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) unshare(0x6020400) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000300)={0x10000000}) 5m1.624013268s ago: executing program 4 (id=4688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x54, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000114}, 0x4000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000004000000000000000000001811000045", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100fcff00000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f0000000080)="14a3db2a", 0x4}], 0x2) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 5m0.846240464s ago: executing program 4 (id=4691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$netlink(r4, &(0x7f0000000880)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="143c52200be1853a25bd70c9fcdbdf33"], 0x10}], 0x1, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x880d}, 0x20000040) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r2, r3, 0xe, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=[0x5], 0x0, 0x0, 0x0, r5}}, 0x40) close(r1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)={@map=r8, r9, 0x5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200002900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f00000001c0), &(0x7f0000000280)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r15) 4m48.706065024s ago: executing program 4 (id=4749): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x64}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) unshare(0x2c020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x11fe726f7e78fcf0}, 0x28) close(r5) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000100)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0xa, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) bind$802154_dgram(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4m44.101853518s ago: executing program 4 (id=4764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m43.554311538s ago: executing program 32 (id=4764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m32.566916076s ago: executing program 0 (id=5620): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f0000003820000004", @ANYRES32], 0x20) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000600000000000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2m31.898318413s ago: executing program 0 (id=5625): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000000, 0xcc0, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 2m31.417882483s ago: executing program 0 (id=5629): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)=0xa7f8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0x1}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="7a008000", @ANYRES16=r4, @ANYBLOB="08002dbd7000f8ffffff210000000c000600030000000300000024002d80050001000d00000005000400010000000800030007000000080003000100000008000300", @ANYRES32=r5, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="1c002d8005000400000000000800020002000000080002000000000008000300", @ANYRES32=0x0, @ANYBLOB="24002d800800020002000000080003000600000005000400ff000000050004000000000004002d80"], 0xac}, 0x1, 0x0, 0x0, 0x400}, 0x4000) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[@ANYBLOB="0380c2000000ea657668115908004500001c00000000000190787f000001ac1414aa1000907800060007dae4bdf602b1566d03e4e07af7e363f12972362a3fc4d02a28322b3a803deb1286e2740a1ce9c32b17"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m30.345019278s ago: executing program 0 (id=5637): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018008010600", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000002c0)=0x37, 0x4) tee(r4, 0xffffffffffffffff, 0xfffffffffffffc01, 0x2) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000340), 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x48046}, 0x0) 2m28.253140349s ago: executing program 0 (id=5648): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390440bdbad6fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290009200600080028"], 0x48}, 0x1, 0x0, 0x0, 0x20886}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x9, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000fabc3f35b05c158effff0008000300b4e9d5556d99f019b4abedacf8bc5184e524cdda68a45ce8df56ee868315a5b2ec2e94f5645662228e2c7d23a3538b91f93570f7318d6b84a0bc3fad9908687b23dd77f27489832a815005777fadceb2ed63f68eed2341db56f09a0fc5ec4fa492dafc5bea759709e6c6a2578191bec084918d6d015ffe6cbade8144725b2abc06a12c323a3594cc86fc146e44dd1766be17a59ca3771c69f3992b8cc6b4e3a92620b3d08ad6ff6a46310ca85a4ccc83f5898592c79045e4cbc8", @ANYRES32=r8, @ANYBLOB="08000500060000000800178004000500"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x24004811) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="8020010042000000500012800e00010069703665727370616e0000003c00028008000100", @ANYRES32=0x0, @ANYBLOB="08001500d7a31d000400120014000600000000000000000000000000000000000600188000f8000008000d00ff"], 0x70}, 0x1, 0xba01}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r13) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r14, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88140002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x10}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xfd}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2m27.505661206s ago: executing program 0 (id=5653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 2m11.643415187s ago: executing program 33 (id=5653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 5.192173487s ago: executing program 5 (id=6309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100b1bd8800fbdbdf252594a68571b946d507862ad6ce00000f0a0001007770616e301f32cb99c3b9da877b983000"/73], 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x53}}]}, 0x38}}, 0x4049004) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r10, 0x800003e}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="270c02", 0x3}, {&(0x7f0000000480)="5980dad11caeebdc04f5ee86adfdea128567e73922dd5fa1490246febf7032ccf5222f296b8d38b35fc9febee010fae870aacb7b9ec8b64213a2f79c019b900e6d98840b08b508162737c4f7e8422fc99cdb0003fac7b0cbac20b73a879c8c4208c0c6950dfe972fdc7a46fbfec618c11d73634698", 0x75}, {&(0x7f0000000380)="cd2144ea25017f3611cd9640a3c15c38240c8bc17e73c25b7abd0c", 0x1b}], 0x3}, 0x80800) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x6}}, 0x10) 5.029981153s ago: executing program 2 (id=6310): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='@\x00', 0x8000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x2]}, {0xf001, 0xf, 0x9, 0x7}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x40}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000845) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000380)={0x4, 0x12, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x19}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xaf, 0x3b, "e92178859515142854688b564e11c81a15f15d247f351c4b6977e8a394d4f7bf6257410a3ebdb2e692a1833106c09e56ca7a521db520f95eaa6f24"}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8000}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, @calipso={0x7, 0x10, {0x1, 0x2, 0xe0, 0xb, [0x0]}}]}, 0xa0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x105080, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000540)={0x1, 0x10}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000840)={r4, &(0x7f0000000740)='\x00', 0x2100, &(0x7f0000000780)={@align=0x9, {0xea, 0x7, 0x38, 0x4}}, 0x3, &(0x7f00000007c0), &(0x7f0000000800)=0x28}) connect$x25(r5, &(0x7f0000000880), 0x12) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000900)={0x0, @remote}, &(0x7f0000000940)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000a80)=r3, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl0\x00', r6, 0x29, 0xff, 0xea, 0x9, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7800, 0x700, 0x2, 0x80000}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', r0}, 0x18) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000c00), 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000c40)={@local}, 0x14) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000d00)={0x4, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4a4d}, @hao={0xc9, 0x10, @empty}, @pad1, @ra={0x5, 0x2, 0xd}]}, 0x28) write$cgroup_int(r0, &(0x7f0000000d40)=0x5, 0x12) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r5) 4.578601056s ago: executing program 3 (id=6314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, 0x26, 0x109, 0x870bd22, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x14e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007980), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f00000080c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="270525bd7000fddbdf2501000000100002800cf50080080001001c00000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) close(0x3) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f00)={0x200c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1fe5, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}, @generic="89180400bf79e4e72962443f230b95b8a8a7c29db70bc108bd225f20ad5b1894d6e46cb1edac42a94b42b46be6f096ff5ef2a2bd306ef8eb94b92d99a2e02638afd942a4fae3329d9d9901e57b6f7ef8cb", @nested={0x11e1, 0xae, 0x0, 0x1, [@nested={0xad, 0x23, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @pid}, @generic="290bc434778edb853e53cd75544cecf5ca6415417f99d82732c8117ee4fb644095b086343bb93931619ad1c24cf83916f17035d2036e558fcda67120840607eac04b2accab42be9c86486c44d635f67315408b97339383bc12f517e1c9da4cb6d8564e3fab64742fd15f34c72d8bcd009a4952670ebf00e64bddb92aabe029d9cb7ea3391de2f26e1c959fac06600f94d1999ae7a049561409bbe0f3b744a7c9fd"]}, @nested={0x1085, 0x75, 0x0, 0x1, [@generic="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", @generic="0db236a17d03e937c7dae117b08ee628ba56ef8b88211b1f9b696acc7f8c3078928f1733bd98f9c7ac0f37021de04811e833aca88912cb15381d8465d767dfa201fc7f4de9bb68738580e3181d0e93641f443d3b0b06f16193a5366b5518aca2b63860018e7991edafd292175b6d4ada3bdeab776044166ae90affefd9ef0152b4"]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x2}, @generic="89a017c2b5402806cdaf7004686612af5159562a81ee390ce67bda2285d55ce06939d59741e1360b8add7c3b402ec15e57af02d230e23f7bf9267c2990c848a0a648f16484188bbe2a6fd03dbc248f175c1c2274cb3855cb6d118356258505cbd7bd5314e4b5518a6467fad20cedd49809871b97c8dbe6ff16879c9461a25c2dabbfa018955133297f55d0e06005c85abe3f368adc", @nested={0x4, 0xc8}]}, @nested={0xda8, 0xdc, 0x0, 0x1, [@nested={0xda4, 0xb3, 0x0, 0x1, [@nested={0x4, 0x37}, @nested={0xd9c, 0xd0, 0x0, 0x1, [@typed={0xc, 0xa2, 0x0, 0x0, @u64=0x4}, @nested={0xd8c, 0x341, 0x0, 0x1, [@nested={0xd85, 0x10c, 0x0, 0x1, [@typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x101, 0x14c, 0x0, 0x0, @binary="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"}, @generic="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"]}]}]}]}]}]}]}, 0x200c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) write$tun(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff, 0x4}, {0x2, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xef}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40042}, 0x810) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @dev}, 0x10) 4.577987615s ago: executing program 5 (id=6315): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731122000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r1, 0x5) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0) listen(r1, 0x0) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f00000009c0)={@void, @void, @ipv6=@gre_packet={0x1, 0x6, "38b256", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x6, 0x3, 0x1, 0x3, 0x7, 0x1}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x0, 0x1, 0x1, 0x2, 0x0, 0x4}, 0x2, {0x567, 0x1000, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}, 0x6c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x23, 0x0, &(0x7f00000009c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a40)=ANY=[@ANYBLOB="12aaa8aaaaaabbbbbbbbbbbb86dd61000200000000000000000000000000000001ff0200fe00000000000000000000000187009000000002001584490000000000ea5656424185f24fd980368d4f29e6a0dc24520625c691c528d15e4b9d596129348c3edc326e2f8ec6c5e466e3cb0028d87de63a6b4c1e1c425cb564b4b13221662dc186f064c77358472ab8bda660109e72e796125bd7eca189eab3dac83b51529dc1a51b5f5fb5ad10acb13fc13fe978f8c084e38d5b5a4f42a5ba28efa2f59273ef79770a036581c9a7463c3612cb9a20b074e510cc0020049dcb9b7069ee6497"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x3c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast2, @in=@empty}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e8, r8, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf1, 0xac, "b5e6ad30c272c8cb5a507de14db35b830c30170b2a1efc589ba74aa90f2bff21ef32fd64a69b89396254710f741adaae7665b5473075b010eae9aaf501a005230c01cfc6683e533c54a152f40fcf31e516438028dc16ad835217b508dd1c6e94e5e05a38fcdc19e0b91a031713068e81bbd9bb501f799ec869357badb9dbf2d800d65b8674cea8c1dc8e6f9d30266e37394deaab4c2f49ea6e9513f807f76e8a94760a1f5123cc3fef4b8b1d1ed6b90926dca9b9179b6451370eb8fbfe60af6ab467de932e10a56d68892d1e8b4e669b41339e98bf99a75f8b36935c57a431e281ff65404a9541c2373f0aba59"}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc5, 0xbe, "d42666e58c2e61cadf94552bb99b7d25446661078f639a8dc9812fff88390c3ee5ec8d3edbaeb4f3f79b624aa6bbd37bee9fd3275504bf19e2f09e167fe21336c6b7e40e9ae4bcf9144f218b936a9144f82f4e2ba91b3bc1ddf59eed2e67a6aab0302633a169097314b5a582118bc10cc4da42dc6f86228f1c4ce53468f644c33a5bc51dc3df8e8e5f0d64e1c484393a674b625ccd740244bdd8f051d3b8b558ef40114de977e9e26c3d2dc776699cf20e7e3cc43f7bc596ada0aa1a9301d2da0b"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x66}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$unix(r11, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x117, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20048811}}], 0x1, 0x4000) 4.39207009s ago: executing program 2 (id=6317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x148, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_max_qsize={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c6173740000000004000280140001800a00010071756f74000800000000000008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3.766132431s ago: executing program 6 (id=6318): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x5, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x400c844}, 0x2004c000) unshare(0x2a060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000480)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x32, 0xd, 0x2, {0x3, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8001, 0x2, 0x7}, {0x0, @multicast, 0x3, 0x8, [0x7, 0xd]}, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4e21, 0x4e21, 0xfa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x200, 0x6, [0xff, 0x8]}, 0x5, 0x6}}}) write$tun(r4, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="741f38df1014247f9d50a4e12bde6944d1e1b77b033f03963ac27173ff6b6fd94db024c46e0942e19820cfc16e1626e5ce51d050a4e8025a73265bf130fdc1c42675b02b6a"}}}, 0x73) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$unix(r3, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) socket$inet(0x2, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 3.628759544s ago: executing program 5 (id=6319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x26, 0x0, 0x168, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0xc}, @struct={0x8, 0x8, 0x0, 0x4, 0x0, 0xb5, [{0x2}, {0x8, 0x1, 0x7fffffff}, {0x2, 0x5, 0x43}, {0xc, 0x5, 0x7ff}, {0x0, 0x2, 0x8001}, {0x10, 0x2, 0x10}, {0x10, 0x0, 0x1}, {0x2, 0x0, 0x7}]}]}, {0x0, [0x0]}}, &(0x7f00000006c0)=""/136, 0x93, 0x88, 0x1, 0x5, 0x10000}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpuset.memory_pressure\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000a00)={0x0, 0x25a, 0x2}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000e00)={0x0, 0x1, @start={r8, 0x0, "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", "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"}, [0x0, 0x4, 0x8, 0x25, 0xf457, 0x4, 0xb6b, 0xa00000000000, 0x9263, 0xfffffffffffff800, 0xdf, 0x3, 0x1, 0x554b, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x6, 0xc000000000, 0xe2f2, 0x4, 0x6, 0x8, 0x9, 0x4, 0x0, 0x6a7, 0xe0, 0x5, 0x7, 0x504b, 0x4, 0x4, 0xa, 0x0, 0x9, 0x3, 0x3, 0x2, 0x6, 0x8, 0x9, 0x3c9, 0x2, 0x100000001, 0x7f, 0x7, 0x40, 0x5, 0xfffffffffffffffd, 0x6, 0x7, 0x33972a2b, 0x0, 0xc2a, 0x7, 0x0, 0xfff, 0x0, 0x0, 0x7fffffffffffffff, 0xd, 0x2, 0x0, 0x9]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r10}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x26, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x524e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9c4}}]}, &(0x7f0000000580)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x2, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000007c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xd, 0x39d, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r2, r6, r2, r10, r2, r2], 0x0, 0x10, 0x7fff}, 0x94) 3.484881929s ago: executing program 3 (id=6320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbb5bbbbbbbbbbbb88a8480081003000884ac80080000000000000022cd26497be4b98"], 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100251aefc7f9c50955540aceac87cc52872ccd4b3b7580b9236c88c8bf1f099bf0b5d74b423f116a1a9eed596b221dd2debed41b09a7d5c87f005b1eee1f6aa279e97264b1bc924f0dd82bf760c6b881920d13dc8e42df09985587d108d1910844002159292499bd653d30ffab39e6f221837f46d616071be64d35d665ab3773782a73eedb31fe98c5829ab756d938b85d3a4a0e8e4e96d6f5e56c15c3e0a61b4762d089f0e1", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16=r1], 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) pread64(r8, &(0x7f0000001840)=""/4096, 0x1000, 0x8) pread64(r8, &(0x7f0000000340)=""/69, 0x45, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4040004) 3.262139495s ago: executing program 2 (id=6321): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r7, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000009000200d1ff84c38723be63d0d9"], 0x12) r9 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r9, 0x913e0000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 3.261621538s ago: executing program 5 (id=6322): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0xc, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="07000008000400001ee1000100000000000000000000008502000000000000008c26fdee2ed26bce9c0000f8ffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000042, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES16=r5], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.812630776s ago: executing program 6 (id=6324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0c0100001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000dc00128009000100766c616e00000000cc000280040004800600050088a800000c0002000b0000000700000006000500810000000600010003000000640003800c00010004000000030000000c000100208d0000090000000c000100010000000c0000000c000100050000002ceeffff0c00010001ffffff060000000c00010001000000040000000c00010001000000000040000c000100f9ffffff5d0a00000600010003000000340004800c00010007000000000000000c00010006000000090000000c00010003000000ff7fffff0c000100000001000900040008000500", @ANYRES32=r1], 0x10c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x6, 0xfffffd75, 0x6, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8048, 0x40, 0x2, 0xab}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d00000000000000950000000000000055e7d5d720f9ee2b3aa350e692e44d5f98e7e7e58bd3e88b1553396f381ae48a287f6710465f9319dec584f884dbbf3545cf615c475052771905b7f941db5e5df74f4acb0735ace6dc491acbd1de22049a87116c6cbe0e493686e1"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10}, 0x94) 2.698081363s ago: executing program 1 (id=6325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="00005fb60000100000ecfe8e40000000d000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300000000"], 0x50) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000) 2.590307335s ago: executing program 1 (id=6326): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.487048742s ago: executing program 1 (id=6327): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x1, 0x70bc28, 0xfffffffd, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b000000366a6a849a739045002400000000e80000001a00606ea6b38500"}}]}, 0x158}}, 0x44050) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000001e80)=""/76, 0x4c}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/225, 0xe1}], 0x9}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {0x0, 0x1}, {0xe, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffff01}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x6, 0x2, 0x0, 0x6, 0x0, 0x2, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x5, 0x4]}}]}]}, 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r5) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x5) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) close(0x3) 2.33799885s ago: executing program 6 (id=6328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf2514000008180007800800020007000000ef95605019ba0c0003000100000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x101, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x4, 0x6, "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"}, {0x6, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xb, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=0x0, @ANYRES16=r1], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffe3}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8841}, 0x20000090) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5452, &(0x7f0000000440)=0x8) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x2) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x2}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x1, 0xfe}}}, 0x10, 0x0}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r6) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0xce, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES8, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000100000080003"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x10001, 0x9, 0x1}, 0x48) 2.282032084s ago: executing program 2 (id=6329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x10}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000010) 2.15816364s ago: executing program 3 (id=6330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r1, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, 0x0, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 2.010051215s ago: executing program 6 (id=6331): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) unshare(0x2020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x9}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x30}}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}, @IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x4}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 2.009494607s ago: executing program 1 (id=6332): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f0000002d40)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x8}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x0, 0x3, 0x1}, {0x10040002, 0x0, 0x4, 0x5}], 0x10, 0x80}, 0x94) close(r5) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r6) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608304c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r10, &(0x7f0000000000)="436e91", 0x0}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaa2aaaaaaaa080045000028006400000402907800000000e000000111009078e0000002000100010000000000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x10, &(0x7f0000000040)=ANY=[@ANYRES8=r9], 0x0, 0x40, 0xbe, &(0x7f0000000240)=""/190, 0x41000, 0x54, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x8, 0xff, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=[{0x2, 0x3, 0x4, 0x1}, {0x1, 0x1, 0xe, 0x7}, {0x0, 0x1, 0x80000001, 0xb}, {0x1, 0x3, 0xa, 0xc8acadbc0b5dcbd4}], 0x10, 0x8}, 0x94) 1.994438817s ago: executing program 2 (id=6333): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe54, &(0x7f0000001b00)=[{&(0x7f00000000c0)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000b00)="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"}], 0x3}, 0xc854) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180)=0x4c, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, 0x0, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffffe, @local, 0x20009}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @remote}}, 0x3, 0x0, 0x1002, 0x0, "5e3b86774ef89ec669fabcaff49c2ed78c4614c85b196a0c67a776931c08d43101cb8242bc65b8e0662749000000000000000000c900000000000000000000000200"}, 0xd8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 963.405061ms ago: executing program 6 (id=6334): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x5, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x400c844}, 0x2004c000) unshare(0x2a060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000480)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x32, 0xd, 0x2, {0x3, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8001, 0x2, 0x7}, {0x0, @multicast, 0x3, 0x8, [0x7, 0xd]}, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4e21, 0x4e21, 0xfa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x200, 0x6, [0xff, 0x8]}, 0x5, 0x6}}}) write$tun(r4, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="741f38df1014247f9d50a4e12bde6944d1e1b77b033f03963ac27173ff6b6fd94db024c46e0942e19820cfc16e1626e5ce51d050a4e8025a73265bf130fdc1c42675b02b6a"}}}, 0x73) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$unix(r3, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) socket$inet(0x2, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 950.189377ms ago: executing program 3 (id=6335): r0 = socket$inet(0x2, 0x5, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0xf5ff, 0x0) (fail_nth: 36) 810.231599ms ago: executing program 1 (id=6336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=[0x3], 0x0, 0x7fff, 0x1, 0x1}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000200)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 782.623052ms ago: executing program 5 (id=6337): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001f00)={r1, &(0x7f0000000ec0), &(0x7f0000001ec0)=@udp, 0x2}, 0x20) sendfile(r1, r0, &(0x7f0000000080)=0x4, 0x5) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r2, 0x300, 0x70bd28, 0x8, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x8801) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 484.617489ms ago: executing program 3 (id=6338): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) unshare(0x22020600) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/84, 0x54}, {&(0x7f0000000180)}], 0x2}}, {{&(0x7f0000000200)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/44, 0x2c}], 0x2, &(0x7f0000000400)=""/30, 0x1e}}, {{&(0x7f0000000440)=@tipc=@name, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/33, 0x21}], 0x4, &(0x7f0000000700)}, 0x2}], 0x3, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000d80)={&(0x7f0000000800)={0x27, r3, 0xffffffffffffffff, 0x4, 0x10, 0x1, "4ce2932af6b0bdb25e38483504847af47e4ce4d1c0f13f266a0e4d96a8173a2de48dd346ccf8d4ff0eb03e35eb673f966eb1f3c59863ff2a2891e0da58c209", 0x1a}, 0x60, &(0x7f0000000c80)=[{&(0x7f0000000880)="e7a427", 0x3}, {&(0x7f00000008c0)="8ff1b77058813c2796eb59b029cc58f6c8d24614d45a6c06e2377a59aa7ff6a629051973b293e98d64c94e19ecf66b4726218254188b91a8c2934b49dce7a659eaf62c9de1db1fcb3727223e5906cc9da9d0f33b8a87fa85035f6c33b8e0d50c7f427482c5f5050f996d617fa148dc7087d22b6a7c565496ed7f40b6c27e8c3953ba4e5a2772896a7e882814108330988938610742e8a448567551e5833438b0", 0xa0}, {&(0x7f0000000980)="247389aef4f62d626154dc84f16b5b36cc4cb639cc3d5b7b17af5182e60783b3576c76d8cfe72e2214134efe34a4bee9bd75cac70b3494b978628b5b5792c2eb", 0x40}, {&(0x7f00000009c0)="822347bc0497f5c2a20b85099d9dd1a53fbb82f8d6026a9728910470f3ad56bfc386e4e6a68a9308d450cf397f0d1d9205d4333735dd08847b52e6f96450909ae13c0e192493ef474cbbf5160e2b7baf6d9819d70c7dbf9412a23687f5d13813fedc9dd6d84bc5e672e679314d21fdd2d5f969ca9404d3ac785b3cea75c520281244f920505363e996dcf692be3500dc531153f28aee4b07fbfea60bb19f3e299a", 0xa1}, {&(0x7f0000000a80)="0a32b59a3b8e4080505e457c325d7ab6f22cfd9d25f05c6e0c835807bb865c8290c38fa22d86c292dd4d7f5cffa90d71bb4b030a940a00ece157f3829c300bf68517463b839595cc92e8bf421c448972edf8f2a6252ca5cbd5a9f8acd87ed58cdca3a7c09ea54b8f46b97fc021afd55aec48664beb8efb1ff2bce1fc8641c9f5a090d3560c7574989be95d137122be2c1caa0e0dfd529cb30a40ff5db96fe281ceddf443b160dfb9403048649af0ed4d4f10fb2eddba", 0xb6}, {&(0x7f0000000b40)="a78f7bda962afab2653fc96293fc37f101b46cefcedf857e00333d8702d831a1a5a339f96ce4c27bbed02ca2412d83ff491f8c2ff57b747afad35990bfe10f0671c8e969b7dba20c76e4b64e21202860ca2bd0d25d8b29ffe61a5cf325846d1e3139654869849cf54b33c93acfc150aa970a528dbfe6c8b648a364aeacc93614a343846c98176ff05d94df7a1cdc2c575dad47198aaf4cac4796d274d750e326b95a48ac9bccb286fd7c233faf6407d217919df42ef427725fd8e070c1fd8bb4b9432eb417dd38bc4124eb3c56ea32ec3e721bc8c49c440c4fe2553c", 0xdc}, {&(0x7f0000000c40)="f0076036e35950e0412ff80d42a1118671800ac669ee049cfa30694f9a4423cbf213d2cb88e2acf1", 0x28}], 0x7, &(0x7f0000000d00)={0x70, 0x108, 0x800, "8e00fc1cfc685a6704f0e447c177f2d4b5860f1109088e563b573fbf38a80d2da3199f84434c7e883a92d48fe401c93e0ea00869421f1485d6f03b82203582838fe71fcc0bf75885a815f999dd29ad70336474c5cc8c436d56d28e1b04"}, 0x70, 0x4}, 0x4800) 286.776583ms ago: executing program 1 (id=6339): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0xcbf, 0x4e, @private0={0xfc, 0x0, '\x00', 0xfc}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x8, 0x101, 0x7}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r0, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x2dda, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566913ef2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000000c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000000b40)="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", 0x335}], 0x5}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="8ff6d6b6276f", 0x6}, {&(0x7f0000000580)="e0a1350a7b81", 0x6}], 0x2}}], 0x2, 0x40080a0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) 199.17829ms ago: executing program 5 (id=6340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_emit_ethernet(0x1fe, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb1d710154d25344dc4b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34cb64994c78f38f5c966190288a11b5c7c3830af6b26868600f042ff7778f02de78c461feec2dbc7777f3c1648da649b02ab84887d321d98ce20c8e1998b380ba10bc62d1f3965f657d607a0b5dc8c3a0b319b563b758f3368982151727decc966d3971da04a3de762195acbe67019b828d036a19da5c13890cac99197cc8195d6e1db4c557b4278675e1bcd19b8e7cf05330356af6db28c3535b1aef3a597df0a00ac7bbc"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {0x9, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd700000f900000400000004000e0004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000030101010000000000000000020000060800154000000003080003400000240008001b"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r11 = accept4$inet(r7, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80000) sendto$inet(r11, &(0x7f0000000380)="79ea820a9e4612b150a8f152ef65132b2bd587a468b07d3fc1db5f8e761e3001cc4d95f899426147a0c2cc10882dfb7fd073f68c504e01c20ad90ef1030ae3a4652406527899c1ecb78f040992f7f8e0f5f2372c4228", 0x56, 0x20000044, 0x0, 0x0) 193.273813ms ago: executing program 6 (id=6341): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="1a5a84648bc61793438471d9944ff3c663c84c45f64cff7ebf12d81d1a2008c10dcf4e661c88eb7c3989651fb8a51c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f", 0x66}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000900a5d08099894300000f000000000000020500000000306100301e615f00"], &(0x7f0000000100)=""/178, 0x2d, 0xb2, 0x1, 0x3}, 0x28) 42.630687ms ago: executing program 2 (id=6342): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000100"/17], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf25020100000000010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000023000000000000020000000000000000008ce5e81a13701ba1bc2eaaedc709253a500d21578658712b1ed0bc9c7d17ea94", @ANYRES32, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xb3, 0x0, &(0x7f0000000680)="6300008666dc3f0adf33c92741b69e9224af2fec2381189d1056c7ee7e04ea092b94c35d31168711b994fd2ae69d9c032c4932c675ddf2acc2abc5cc93ed2b96fbcea291af35f87a0b0544205b39dd47595fb57b1e3abf0cab721a10c53d5cb422ca913d76bdf955cc7fcc3c4955ea06443497e575a8184e7602e850da737db826b29c2a4d51f54e9d475ceab64ba00cc649a32424dfc149a5abbb73efa7fbf6ec574ff52372572277b56aaf00000000000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=6343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000007000000000000001f00080091114c000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r1, &(0x7f0000000140)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x4}, 0x4) kernel console output (not intermixed with test programs): [ 1016.460138][T29959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5545'. [ 1016.480226][T29971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5547'. [ 1016.500709][T29971] netlink: 'syz.2.5547': attribute type 32 has an invalid length. [ 1016.665889][T29973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5543'. [ 1016.703670][T29979] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5548'. [ 1016.758146][T29976] veth3: entered allmulticast mode [ 1016.778552][T29976] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1017.000692][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1017.011195][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1017.447894][T29995] netlink: 'syz.3.5552': attribute type 2 has an invalid length. [ 1017.493120][T29995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5552'. [ 1017.793098][T30006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5557'. [ 1018.079225][T30026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5561'. [ 1018.234776][T30033] FAULT_INJECTION: forcing a failure. [ 1018.234776][T30033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1018.235256][T30033] CPU: 1 UID: 0 PID: 30033 Comm: syz.5.5562 Not tainted syzkaller #0 PREEMPT(full) [ 1018.235332][T30033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.235365][T30033] Call Trace: [ 1018.235415][T30033] [ 1018.235455][T30033] dump_stack_lvl+0xe8/0x150 [ 1018.235544][T30033] should_fail_ex+0x410/0x560 [ 1018.235636][T30033] prepare_alloc_pages+0x223/0x600 [ 1018.235746][T30033] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1018.235824][T30033] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1018.235894][T30033] ? __pfx_policy_nodemask+0x10/0x10 [ 1018.235986][T30033] alloc_pages_mpol+0x21e/0x390 [ 1018.236075][T30033] folio_alloc_mpol_noprof+0x39/0x160 [ 1018.236158][T30033] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1018.236230][T30033] ? filemap_get_entry+0xcd/0x3f0 [ 1018.236360][T30033] ? __pfx_filemap_get_entry+0x10/0x10 [ 1018.236448][T30033] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1018.236559][T30033] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1018.236660][T30033] shmem_get_folio_gfp+0x5da/0x16d0 [ 1018.236773][T30033] shmem_fault+0x179/0x390 [ 1018.236865][T30033] __do_fault+0x138/0x2a0 [ 1018.236960][T30033] do_pte_missing+0x684/0x34b0 [ 1018.237077][T30033] ? handle_mm_fault+0xf1/0x3750 [ 1018.237152][T30033] handle_mm_fault+0x1a53/0x3750 [ 1018.237259][T30033] ? handle_mm_fault+0xf1/0x3750 [ 1018.237360][T30033] ? __pfx_handle_mm_fault+0x10/0x10 [ 1018.237439][T30033] ? follow_page_pte+0x748/0xf10 [ 1018.237533][T30033] ? __pfx_follow_page_pte+0x10/0x10 [ 1018.237645][T30033] __get_user_pages+0x1675/0x2750 [ 1018.237828][T30033] __gup_longterm_locked+0x115b/0x15c0 [ 1018.237936][T30033] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1018.238026][T30033] gup_fast_fallback+0x1d92/0x20e0 [ 1018.238179][T30033] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1018.238258][T30033] ? rds_info_getsockopt+0x259/0x770 [ 1018.238311][T30033] ? rcu_is_watching+0x16/0xb0 [ 1018.238381][T30033] ? is_valid_gup_args+0x11f/0x200 [ 1018.238462][T30033] ? pin_user_pages_fast+0x4d/0xb0 [ 1018.238538][T30033] iov_iter_extract_pages+0x3a1/0x690 [ 1018.238616][T30033] rds_info_getsockopt+0x28b/0x770 [ 1018.238724][T30033] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1018.238797][T30033] ? irqentry_exit+0x218/0x910 [ 1018.238863][T30033] ? lock_acquire+0x115/0x350 [ 1018.238936][T30033] rds_getsockopt+0x38b/0x600 [ 1018.238988][T30033] ? __pfx_rds_getsockopt+0x10/0x10 [ 1018.239090][T30033] do_sock_getsockopt+0x6ae/0x7e0 [ 1018.239203][T30033] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1018.239306][T30033] ? do_sys_openat2+0x14e/0x200 [ 1018.239367][T30033] ? kmem_cache_free+0x182/0x650 [ 1018.239469][T30033] ? ksys_write+0x1fc/0x270 [ 1018.239561][T30033] __x64_sys_getsockopt+0x1a4/0x240 [ 1018.239678][T30033] do_syscall_64+0x166/0x520 [ 1018.239756][T30033] ? trace_irq_disable+0x3b/0x140 [ 1018.239807][T30033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.239867][T30033] ? clear_bhb_loop+0x70/0xc0 [ 1018.239939][T30033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.239999][T30033] RIP: 0033:0x7fe7ecf9e159 [ 1018.240055][T30033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.240106][T30033] RSP: 002b:00007fe7eb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1018.240162][T30033] RAX: ffffffffffffffda RBX: 00007fe7ed225fa0 RCX: 00007fe7ecf9e159 [ 1018.240202][T30033] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 1018.240244][T30033] RBP: 00007fe7eb1f6090 R08: 0000200000000000 R09: 0000000000000000 [ 1018.240282][T30033] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1018.240322][T30033] R13: 00007fe7ed226038 R14: 00007fe7ed225fa0 R15: 00007fff9e73fc08 [ 1018.240412][T30033] [ 1020.260155][T30071] xfrm0 speed is unknown, defaulting to 1000 [ 1020.523529][T30071] lo speed is unknown, defaulting to 1000 [ 1020.531716][T30071] lo speed is unknown, defaulting to 1000 [ 1021.177223][T30028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.153859][T30079] __nla_validate_parse: 1 callbacks suppressed [ 1022.160746][T30079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5573'. [ 1022.170222][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5573'. [ 1022.185840][T30090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5577'. [ 1022.477110][T30101] bond6: (slave dummy0): Releasing active interface [ 1022.646478][T30096] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5579'. [ 1023.024661][T30115] sctp: [Deprecated]: syz.0.5583 (pid 30115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1023.024661][T30115] Use struct sctp_sack_info instead [ 1023.263561][T30122] netlink: 'syz.2.5586': attribute type 4 has an invalid length. [ 1023.263613][T30122] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1023.493081][T30129] netlink: 'syz.2.5588': attribute type 29 has an invalid length. [ 1024.131034][T30151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5595'. [ 1024.248782][T30156] C: renamed from veth1_to_team [ 1024.286820][T30158] netlink: 'syz.0.5598': attribute type 1 has an invalid length. [ 1024.395975][T30161] netlink: 'syz.0.5598': attribute type 1 has an invalid length. [ 1024.450077][T30165] FAULT_INJECTION: forcing a failure. [ 1024.450077][T30165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1024.450138][T30165] CPU: 0 UID: 0 PID: 30165 Comm: syz.5.5599 Not tainted syzkaller #0 PREEMPT(full) [ 1024.450163][T30165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.450175][T30165] Call Trace: [ 1024.450226][T30165] [ 1024.450258][T30165] dump_stack_lvl+0xe8/0x150 [ 1024.450373][T30165] should_fail_ex+0x410/0x560 [ 1024.450475][T30165] prepare_alloc_pages+0x223/0x600 [ 1024.450596][T30165] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1024.450668][T30165] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1024.450741][T30165] ? __pfx_policy_nodemask+0x10/0x10 [ 1024.450840][T30165] alloc_pages_mpol+0x21e/0x390 [ 1024.450923][T30165] folio_alloc_mpol_noprof+0x39/0x160 [ 1024.450995][T30165] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1024.451081][T30165] ? filemap_get_entry+0xcd/0x3f0 [ 1024.451182][T30165] ? __pfx_filemap_get_entry+0x10/0x10 [ 1024.451252][T30165] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1024.451340][T30165] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1024.451422][T30165] shmem_get_folio_gfp+0x5da/0x16d0 [ 1024.451532][T30165] shmem_fault+0x179/0x390 [ 1024.451633][T30165] __do_fault+0x138/0x2a0 [ 1024.451746][T30165] do_pte_missing+0x684/0x34b0 [ 1024.451871][T30165] ? handle_mm_fault+0xf1/0x3750 [ 1024.451954][T30165] handle_mm_fault+0x1a53/0x3750 [ 1024.452058][T30165] ? handle_mm_fault+0xf1/0x3750 [ 1024.452162][T30165] ? __pfx_handle_mm_fault+0x10/0x10 [ 1024.452236][T30165] ? follow_page_pte+0x748/0xf10 [ 1024.452335][T30165] ? __pfx_follow_page_pte+0x10/0x10 [ 1024.452438][T30165] __get_user_pages+0x1675/0x2750 [ 1024.452616][T30165] __gup_longterm_locked+0x115b/0x15c0 [ 1024.452729][T30165] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1024.452818][T30165] gup_fast_fallback+0x1d92/0x20e0 [ 1024.452984][T30165] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1024.453051][T30165] ? rds_info_getsockopt+0x259/0x770 [ 1024.453148][T30165] ? rcu_is_watching+0x16/0xb0 [ 1024.453221][T30165] ? is_valid_gup_args+0x11f/0x200 [ 1024.453304][T30165] ? pin_user_pages_fast+0x4d/0xb0 [ 1024.453386][T30165] iov_iter_extract_pages+0x3a1/0x690 [ 1024.453471][T30165] rds_info_getsockopt+0x28b/0x770 [ 1024.453564][T30165] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1024.453647][T30165] ? irqentry_exit+0x218/0x910 [ 1024.453739][T30165] ? lock_acquire+0x115/0x350 [ 1024.453823][T30165] rds_getsockopt+0x38b/0x600 [ 1024.453930][T30165] ? __pfx_rds_getsockopt+0x10/0x10 [ 1024.454040][T30165] do_sock_getsockopt+0x6ae/0x7e0 [ 1024.454137][T30165] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1024.454226][T30165] ? do_sys_openat2+0x14e/0x200 [ 1024.454286][T30165] ? kmem_cache_free+0x182/0x650 [ 1024.454386][T30165] ? ksys_write+0x1fc/0x270 [ 1024.454497][T30165] __x64_sys_getsockopt+0x1a4/0x240 [ 1024.454632][T30165] do_syscall_64+0x166/0x520 [ 1024.454691][T30165] ? trace_irq_disable+0x3b/0x140 [ 1024.454755][T30165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.454832][T30165] ? clear_bhb_loop+0x70/0xc0 [ 1024.454899][T30165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.454961][T30165] RIP: 0033:0x7fe7ecf9e159 [ 1024.455014][T30165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.455069][T30165] RSP: 002b:00007fe7eb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1024.455131][T30165] RAX: ffffffffffffffda RBX: 00007fe7ed225fa0 RCX: 00007fe7ecf9e159 [ 1024.455172][T30165] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 1024.455213][T30165] RBP: 00007fe7eb1f6090 R08: 0000200000000000 R09: 0000000000000000 [ 1024.455254][T30165] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1024.455288][T30165] R13: 00007fe7ed226038 R14: 00007fe7ed225fa0 R15: 00007fff9e73fc08 [ 1024.455387][T30165] [ 1024.880681][T30156] netlink: 'syz.2.5597': attribute type 1 has an invalid length. [ 1024.880732][T30156] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5597'. [ 1024.881942][T30156] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1025.095242][T30158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1025.299167][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1025.308916][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1025.505696][T30178] netlink: 'syz.5.5604': attribute type 29 has an invalid length. [ 1025.754081][T30193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5609'. [ 1026.115050][T30200] gretap0: left promiscuous mode [ 1026.351079][T30213] netlink: 'syz.2.5614': attribute type 1 has an invalid length. [ 1026.359191][T30213] netlink: 'syz.2.5614': attribute type 1 has an invalid length. [ 1026.370823][T30214] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 1026.454658][T30218] syzkaller0: entered promiscuous mode [ 1026.462908][T30218] syzkaller0: entered allmulticast mode [ 1026.980510][T30229] netlink: 'syz.0.5618': attribute type 29 has an invalid length. [ 1027.398561][T30242] netlink: 'syz.0.5620': attribute type 6 has an invalid length. [ 1027.439258][T30230] syzkaller1: entered allmulticast mode [ 1027.625745][T30241] __nla_validate_parse: 2 callbacks suppressed [ 1027.625848][T30241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5622'. [ 1027.994398][T30261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1027.994464][T30261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1028.020733][T30261] geneve3: entered promiscuous mode [ 1028.026221][T30261] geneve3: entered allmulticast mode [ 1028.359049][ T31] audit: type=1804 audit(1788008183.840:29): pid=30269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5628" name="/newroot/542/memory.events" dev="tmpfs" ino=2793 res=1 errno=0 [ 1028.360917][T30272] validate_nla: 1 callbacks suppressed [ 1028.360960][T30272] netlink: 'syz.0.5629': attribute type 21 has an invalid length. [ 1028.455770][T30275] netlink: 'syz.5.5630': attribute type 29 has an invalid length. [ 1028.583002][T30284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5630'. [ 1028.732358][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1029.140250][T30291] tipc: Enabled bearer , priority 0 [ 1029.155155][T30298] syzkaller0: entered promiscuous mode [ 1029.155199][T30298] syzkaller0: entered allmulticast mode [ 1029.379771][T30282] tipc: Resetting bearer [ 1029.455262][T30282] tipc: Disabling bearer [ 1029.498128][T30311] netlink: 'syz.0.5637': attribute type 2 has an invalid length. [ 1029.568014][T30311] : entered promiscuous mode [ 1030.084494][T30326] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5640'. [ 1030.112538][T30326] tunl0: left promiscuous mode [ 1030.113031][T30326] ip_vti0: left promiscuous mode [ 1030.113170][T30326] ip6_vti0: left promiscuous mode [ 1030.124722][T30326] sit0: left promiscuous mode [ 1030.124951][T30326] ip6tnl0: left promiscuous mode [ 1030.125082][T30326] ip6gre0: left promiscuous mode [ 1030.152041][T30326] ip6gretap0: left promiscuous mode [ 1030.160301][T30326] bond0: left promiscuous mode [ 1030.171054][T30326] team0: left promiscuous mode [ 1030.179374][T30326] nlmon0: left promiscuous mode [ 1030.187347][T30326] vxcan0: left promiscuous mode [ 1030.193579][T30326] –: left promiscuous mode [ 1030.199168][T30326] veth1: left promiscuous mode [ 1030.205320][T30326] wg0: left promiscuous mode [ 1030.211753][T30326] wg1: left promiscuous mode [ 1030.211922][T30326] wg2: left promiscuous mode [ 1030.225176][T30326] veth0_to_bridge: left promiscuous mode [ 1030.231329][T30326] veth1_to_bridge: left promiscuous mode [ 1030.239266][T30326] veth0_to_bond: left promiscuous mode [ 1030.246318][T30326] bond_slave_0: left promiscuous mode [ 1030.262729][T30326] veth1_to_bond: left promiscuous mode [ 1030.262910][T30326] bond_slave_1: left promiscuous mode [ 1030.263099][T30326] veth0_to_team: left promiscuous mode [ 1030.263261][T30326] team_slave_0: left promiscuous mode [ 1030.263425][T30326] C: left promiscuous mode [ 1030.263590][T30326] team_slave_1: left promiscuous mode [ 1030.263770][T30326] veth0_to_batadv: left promiscuous mode [ 1030.263939][T30326] batadv_slave_0: left promiscuous mode [ 1030.264088][T30326] xfrm0: left promiscuous mode [ 1030.276394][T30326] veth0_to_hsr: left promiscuous mode [ 1030.276966][T30326] hsr0: left promiscuous mode [ 1030.277397][T30326] vlan1: left promiscuous mode [ 1030.277718][T30326] macvlan0: left promiscuous mode [ 1030.277895][T30326] macvlan1: left promiscuous mode [ 1030.278034][T30326] ipvlan0: left promiscuous mode [ 1030.278177][T30326] ipvlan1: left promiscuous mode [ 1030.278578][T30326] macvtap0: left promiscuous mode [ 1030.278943][T30326] geneve1: left promiscuous mode [ 1030.279090][T30326] mac80211_hwsim hwsim49 wlan1: left promiscuous mode [ 1030.279232][T30326] mac80211_hwsim hwsim50 wlan2: left promiscuous mode [ 1030.279368][T30326] bridge1: left promiscuous mode [ 1030.279491][T30326] vlan0: left promiscuous mode [ 1030.279505][T30326] geneve0: left promiscuous mode [ 1030.279799][T30326] bond1: left promiscuous mode [ 1030.280033][T30326] gretap1: left promiscuous mode [ 1030.280143][T30326] gre1: left promiscuous mode [ 1030.280258][T30326] macsec1: left promiscuous mode [ 1030.280369][T30326] bridge2: left promiscuous mode [ 1030.280486][T30326] vrf0: left promiscuous mode [ 1030.280631][T30326] ipip0: left promiscuous mode [ 1030.280772][T30326] wireguard0: left promiscuous mode [ 1030.280910][T30326] ip6erspan0: left promiscuous mode [ 1030.281020][T30326] wireguard1: left promiscuous mode [ 1030.281284][T30326] mac80211_hwsim hwsim57 wlan0: left promiscuous mode [ 1030.281303][T30326] mac80211_hwsim hwsim57 wlan0: left allmulticast mode [ 1030.469695][T30326] bridge3: left promiscuous mode [ 1030.469741][T30326] bridge3: left allmulticast mode [ 1030.469912][T30326] ip6gretap1: left allmulticast mode [ 1030.488383][T30326] veth3: left allmulticast mode [ 1030.495515][T30326] bond5: left promiscuous mode [ 1030.500435][T30326] bridge5: left promiscuous mode [ 1030.505909][T30326] bond5: left allmulticast mode [ 1030.510869][T30326] bridge5: left allmulticast mode [ 1030.517172][T30326] bond7: left promiscuous mode [ 1030.950903][T30340] syzkaller0: entered promiscuous mode [ 1030.950944][T30340] syzkaller0: entered allmulticast mode [ 1030.973734][T28281] syzkaller0: tun_net_xmit 70 [ 1031.613866][T30365] netlink: 'syz.0.5648': attribute type 29 has an invalid length. [ 1031.887476][T30365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5648'. [ 1033.434869][T30405] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1033.436805][T30405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1034.591348][T30421] netlink: 'syz.3.5663': attribute type 29 has an invalid length. [ 1034.875599][T30372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1034.876611][T30398] netlink: 'syz.1.5655': attribute type 1 has an invalid length. [ 1034.876653][T30398] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1034.876677][T30398] netlink: 'syz.1.5655': attribute type 1 has an invalid length. [ 1035.361442][T30440] ip_tables: iptables: counters copy to user failed while replacing table [ 1035.608181][T30447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5668'. [ 1036.545629][T30474] netlink: 'syz.3.5676': attribute type 29 has an invalid length. [ 1036.556512][T30473] netlink: 'syz.1.5675': attribute type 1 has an invalid length. [ 1036.633031][T30481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5677'. [ 1036.674839][T30485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5674'. [ 1036.727353][T30474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1037.550691][T30498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1037.593118][T30503] netlink: 'syz.3.5680': attribute type 29 has an invalid length. [ 1037.665440][T30505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5680'. [ 1038.010958][T30510] netlink: 'syz.1.5681': attribute type 12 has an invalid length. [ 1038.024534][T30510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5681'. [ 1038.296623][T30521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5684'. [ 1038.454885][T30515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5683'. [ 1038.502701][T30521] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1038.556311][T30534] vlan3: entered promiscuous mode [ 1038.561729][T30534] gretap0: entered promiscuous mode [ 1038.928051][T30550] netlink: 'syz.3.5690': attribute type 29 has an invalid length. [ 1039.275109][T28281] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1039.309685][T30563] ipvlan0: entered promiscuous mode [ 1039.321271][T30563] ipvlan0: left promiscuous mode [ 1039.387612][T30573] Unknown options in mask 6 [ 1039.743646][T30578] netlink: 'syz.2.5695': attribute type 12 has an invalid length. [ 1041.056330][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1042.201532][T30565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1042.525126][T30611] __nla_validate_parse: 7 callbacks suppressed [ 1042.525612][T30611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5703'. [ 1042.525839][T30611] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5703'. [ 1042.555404][T30613] netlink: 'syz.5.5704': attribute type 29 has an invalid length. [ 1042.724463][T30622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5704'. [ 1042.769479][T30624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1042.979812][T30630] sctp: [Deprecated]: syz.2.5709 (pid 30630) Use of int in max_burst socket option. [ 1042.979812][T30630] Use struct sctp_assoc_value instead [ 1043.284361][T30634] netlink: 'syz.2.5711': attribute type 7 has an invalid length. [ 1043.401946][T30634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5711'. [ 1043.527526][T30636] tipc: Started in network mode [ 1043.533382][T30636] tipc: Node identity 3a19c25b444f, cluster identity 4711 [ 1043.540868][T30636] tipc: Enabled bearer , priority 0 [ 1043.759782][T30636] syzkaller0: entered promiscuous mode [ 1043.760692][T30636] syzkaller0: entered allmulticast mode [ 1043.766443][T30636] tipc: Resetting bearer [ 1043.767280][T30641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5714'. [ 1044.116065][T30651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5716'. [ 1044.575152][T30659] FAULT_INJECTION: forcing a failure. [ 1044.575152][T30659] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1044.589255][T30659] CPU: 0 UID: 0 PID: 30659 Comm: syz.2.5717 Not tainted syzkaller #0 PREEMPT(full) [ 1044.589289][T30659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1044.589304][T30659] Call Trace: [ 1044.589314][T30659] [ 1044.589325][T30659] dump_stack_lvl+0xe8/0x150 [ 1044.589366][T30659] should_fail_ex+0x410/0x560 [ 1044.589410][T30659] prepare_alloc_pages+0x223/0x600 [ 1044.589455][T30659] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1044.589486][T30659] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1044.589525][T30659] ? __pfx_policy_nodemask+0x10/0x10 [ 1044.589564][T30659] alloc_pages_mpol+0x21e/0x390 [ 1044.589600][T30659] folio_alloc_mpol_noprof+0x39/0x160 [ 1044.589632][T30659] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1044.589663][T30659] ? filemap_get_entry+0xcd/0x3f0 [ 1044.589703][T30659] ? __pfx_filemap_get_entry+0x10/0x10 [ 1044.589733][T30659] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1044.589769][T30659] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1044.589806][T30659] shmem_get_folio_gfp+0x5da/0x16d0 [ 1044.589855][T30659] shmem_fault+0x179/0x390 [ 1044.589896][T30659] __do_fault+0x138/0x2a0 [ 1044.589933][T30659] do_pte_missing+0x684/0x34b0 [ 1044.589982][T30659] ? handle_mm_fault+0xf1/0x3750 [ 1044.590018][T30659] handle_mm_fault+0x1a53/0x3750 [ 1044.590060][T30659] ? handle_mm_fault+0xf1/0x3750 [ 1044.590103][T30659] ? __pfx_handle_mm_fault+0x10/0x10 [ 1044.590135][T30659] ? follow_page_pte+0x748/0xf10 [ 1044.590176][T30659] ? __pfx_follow_page_pte+0x10/0x10 [ 1044.590220][T30659] __get_user_pages+0x1675/0x2750 [ 1044.590286][T30659] __gup_longterm_locked+0x115b/0x15c0 [ 1044.590331][T30659] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1044.590368][T30659] gup_fast_fallback+0x1d92/0x20e0 [ 1044.590433][T30659] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1044.590462][T30659] ? rds_info_getsockopt+0x259/0x770 [ 1044.590487][T30659] ? rcu_is_watching+0x16/0xb0 [ 1044.590523][T30659] ? is_valid_gup_args+0x11f/0x200 [ 1044.590555][T30659] ? pin_user_pages_fast+0x4d/0xb0 [ 1044.590588][T30659] iov_iter_extract_pages+0x3a1/0x690 [ 1044.590623][T30659] rds_info_getsockopt+0x28b/0x770 [ 1044.590656][T30659] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1044.590690][T30659] ? irqentry_exit+0x218/0x910 [ 1044.590725][T30659] ? lock_acquire+0x115/0x350 [ 1044.590756][T30659] rds_getsockopt+0x38b/0x600 [ 1044.590793][T30659] ? __pfx_rds_getsockopt+0x10/0x10 [ 1044.590837][T30659] do_sock_getsockopt+0x6ae/0x7e0 [ 1044.590882][T30659] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1044.590919][T30659] ? do_sys_openat2+0x14e/0x200 [ 1044.590945][T30659] ? kmem_cache_free+0x182/0x650 [ 1044.590986][T30659] ? ksys_write+0x1fc/0x270 [ 1044.591025][T30659] __x64_sys_getsockopt+0x1a4/0x240 [ 1044.591074][T30659] do_syscall_64+0x166/0x520 [ 1044.591104][T30659] ? trace_irq_disable+0x3b/0x140 [ 1044.591127][T30659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.591151][T30659] ? clear_bhb_loop+0x70/0xc0 [ 1044.591181][T30659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.591205][T30659] RIP: 0033:0x7f507479e159 [ 1044.591228][T30659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.591250][T30659] RSP: 002b:00007f5075586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1044.591276][T30659] RAX: ffffffffffffffda RBX: 00007f5074a25fa0 RCX: 00007f507479e159 [ 1044.591294][T30659] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 1044.591311][T30659] RBP: 00007f5075586090 R08: 0000200000000000 R09: 0000000000000000 [ 1044.591327][T30659] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1044.591343][T30659] R13: 00007f5074a26038 R14: 00007f5074a25fa0 R15: 00007ffda4647208 [ 1044.591382][T30659] [ 1045.201230][T28279] tipc: Resetting bearer [ 1045.215605][T30649] netlink: 'syz.1.5716': attribute type 29 has an invalid length. [ 1045.228144][T30636] tipc: Resetting bearer [ 1046.604879][T30681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5722'. [ 1048.355734][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1048.378579][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1048.390458][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1048.403201][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1048.411462][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1049.500253][T30636] tipc: Disabling bearer [ 1049.514307][ T6849] tipc: Node number set to 2119615067 [ 1049.523247][T30678] netlink: 'syz.2.5722': attribute type 29 has an invalid length. [ 1049.533297][T30679] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1049.777862][ T31] audit: type=1804 audit(1788008205.260:30): pid=30700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5725" name="/newroot/570/memory.events" dev="tmpfs" ino=2938 res=1 errno=0 [ 1049.808800][ T31] audit: type=1800 audit(1788008205.290:31): pid=30700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5725" name="memory.events" dev="tmpfs" ino=2938 res=0 errno=0 [ 1049.853906][ T31] audit: type=1804 audit(1788008205.320:32): pid=30704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5725" name="/newroot/570/memory.events" dev="tmpfs" ino=2938 res=1 errno=0 [ 1050.005200][T30707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5724'. [ 1050.124152][T30713] FAULT_INJECTION: forcing a failure. [ 1050.124152][T30713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1050.124217][T30713] CPU: 0 UID: 0 PID: 30713 Comm: syz.3.5728 Not tainted syzkaller #0 PREEMPT(full) [ 1050.124245][T30713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1050.124260][T30713] Call Trace: [ 1050.124271][T30713] [ 1050.124281][T30713] dump_stack_lvl+0xe8/0x150 [ 1050.124321][T30713] should_fail_ex+0x410/0x560 [ 1050.124361][T30713] prepare_alloc_pages+0x223/0x600 [ 1050.124417][T30713] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1050.124473][T30713] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1050.124574][T30713] ? __pfx_policy_nodemask+0x10/0x10 [ 1050.124694][T30713] alloc_pages_mpol+0x21e/0x390 [ 1050.124806][T30713] folio_alloc_mpol_noprof+0x39/0x160 [ 1050.124890][T30713] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1050.124969][T30713] ? filemap_get_entry+0xcd/0x3f0 [ 1050.125055][T30713] ? __pfx_filemap_get_entry+0x10/0x10 [ 1050.125120][T30713] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1050.125228][T30713] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1050.125323][T30713] shmem_get_folio_gfp+0x5da/0x16d0 [ 1050.125451][T30713] shmem_fault+0x179/0x390 [ 1050.125551][T30713] __do_fault+0x138/0x2a0 [ 1050.125642][T30713] do_pte_missing+0x684/0x34b0 [ 1050.125754][T30713] ? handle_mm_fault+0xf1/0x3750 [ 1050.125836][T30713] handle_mm_fault+0x1a53/0x3750 [ 1050.125939][T30713] ? handle_mm_fault+0xf1/0x3750 [ 1050.126068][T30713] ? __pfx_handle_mm_fault+0x10/0x10 [ 1050.126135][T30713] ? follow_page_pte+0x748/0xf10 [ 1050.126234][T30713] ? __pfx_follow_page_pte+0x10/0x10 [ 1050.126340][T30713] __get_user_pages+0x1675/0x2750 [ 1050.126508][T30713] __gup_longterm_locked+0x115b/0x15c0 [ 1050.126625][T30713] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1050.126703][T30713] gup_fast_fallback+0x1d92/0x20e0 [ 1050.126839][T30713] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1050.126900][T30713] ? rds_info_getsockopt+0x259/0x770 [ 1050.126976][T30713] ? rcu_is_watching+0x16/0xb0 [ 1050.127034][T30713] ? is_valid_gup_args+0x11f/0x200 [ 1050.127113][T30713] ? pin_user_pages_fast+0x4d/0xb0 [ 1050.127188][T30713] iov_iter_extract_pages+0x3a1/0x690 [ 1050.127278][T30713] rds_info_getsockopt+0x28b/0x770 [ 1050.127359][T30713] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1050.127473][T30713] ? irqentry_exit+0x218/0x910 [ 1050.127556][T30713] ? lock_acquire+0x115/0x350 [ 1050.127636][T30713] rds_getsockopt+0x38b/0x600 [ 1050.127724][T30713] ? __pfx_rds_getsockopt+0x10/0x10 [ 1050.127826][T30713] do_sock_getsockopt+0x6ae/0x7e0 [ 1050.127921][T30713] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1050.128005][T30713] ? do_sys_openat2+0x14e/0x200 [ 1050.128072][T30713] ? kmem_cache_free+0x182/0x650 [ 1050.128184][T30713] ? ksys_write+0x1fc/0x270 [ 1050.128277][T30713] __x64_sys_getsockopt+0x1a4/0x240 [ 1050.128377][T30713] do_syscall_64+0x166/0x520 [ 1050.128469][T30713] ? trace_irq_disable+0x3b/0x140 [ 1050.128518][T30713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.128573][T30713] ? clear_bhb_loop+0x70/0xc0 [ 1050.128640][T30713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.128696][T30713] RIP: 0033:0x7f154859e159 [ 1050.128755][T30713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.128816][T30713] RSP: 002b:00007f15493ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1050.128873][T30713] RAX: ffffffffffffffda RBX: 00007f1548825fa0 RCX: 00007f154859e159 [ 1050.128923][T30713] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 1050.128953][T30713] RBP: 00007f15493ea090 R08: 0000200000000000 R09: 0000000000000000 [ 1050.129010][T30713] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1050.129043][T30713] R13: 00007f1548826038 R14: 00007f1548825fa0 R15: 00007ffcc1a65228 [ 1050.129140][T30713] [ 1050.493434][ T5622] Bluetooth: hci5: command tx timeout [ 1050.626498][T30719] netlink: 'syz.3.5730': attribute type 29 has an invalid length. [ 1050.641511][T30719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5730'. [ 1050.658134][T30719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5730'. [ 1050.833448][T30687] xfrm0 speed is unknown, defaulting to 1000 [ 1051.406250][T30687] lo speed is unknown, defaulting to 1000 [ 1051.414555][T30687] lo speed is unknown, defaulting to 1000 [ 1051.487685][T30747] netlink: 'syz.1.5736': attribute type 29 has an invalid length. [ 1051.769379][T30755] FAULT_INJECTION: forcing a failure. [ 1051.769379][T30755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1051.789742][T30755] CPU: 0 UID: 0 PID: 30755 Comm: syz.2.5739 Not tainted syzkaller #0 PREEMPT(full) [ 1051.789776][T30755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.789792][T30755] Call Trace: [ 1051.789802][T30755] [ 1051.789812][T30755] dump_stack_lvl+0xe8/0x150 [ 1051.789852][T30755] should_fail_ex+0x410/0x560 [ 1051.789893][T30755] prepare_alloc_pages+0x223/0x600 [ 1051.789939][T30755] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1051.789970][T30755] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1051.789999][T30755] ? __pfx_policy_nodemask+0x10/0x10 [ 1051.790039][T30755] alloc_pages_mpol+0x21e/0x390 [ 1051.790076][T30755] folio_alloc_mpol_noprof+0x39/0x160 [ 1051.790108][T30755] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1051.790140][T30755] ? filemap_get_entry+0xcd/0x3f0 [ 1051.790194][T30755] ? __pfx_filemap_get_entry+0x10/0x10 [ 1051.790225][T30755] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1051.790261][T30755] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1051.790298][T30755] shmem_get_folio_gfp+0x5da/0x16d0 [ 1051.790348][T30755] shmem_fault+0x179/0x390 [ 1051.790400][T30755] __do_fault+0x138/0x2a0 [ 1051.790438][T30755] do_pte_missing+0x684/0x34b0 [ 1051.790486][T30755] ? handle_mm_fault+0xf1/0x3750 [ 1051.790520][T30755] handle_mm_fault+0x1a53/0x3750 [ 1051.790562][T30755] ? handle_mm_fault+0xf1/0x3750 [ 1051.790603][T30755] ? __pfx_handle_mm_fault+0x10/0x10 [ 1051.790634][T30755] ? follow_page_pte+0x748/0xf10 [ 1051.790674][T30755] ? __pfx_follow_page_pte+0x10/0x10 [ 1051.790814][T30755] __get_user_pages+0x1675/0x2750 [ 1051.790881][T30755] __gup_longterm_locked+0x115b/0x15c0 [ 1051.790925][T30755] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1051.790961][T30755] gup_fast_fallback+0x1d92/0x20e0 [ 1051.791024][T30755] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1051.791052][T30755] ? rds_info_getsockopt+0x259/0x770 [ 1051.791077][T30755] ? rcu_is_watching+0x16/0xb0 [ 1051.791105][T30755] ? is_valid_gup_args+0x11f/0x200 [ 1051.791136][T30755] ? pin_user_pages_fast+0x4d/0xb0 [ 1051.791169][T30755] iov_iter_extract_pages+0x3a1/0x690 [ 1051.791204][T30755] rds_info_getsockopt+0x28b/0x770 [ 1051.791236][T30755] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1051.791289][T30755] ? irqentry_exit+0x218/0x910 [ 1051.791325][T30755] ? lock_acquire+0x115/0x350 [ 1051.791357][T30755] rds_getsockopt+0x38b/0x600 [ 1051.791392][T30755] ? __pfx_rds_getsockopt+0x10/0x10 [ 1051.791436][T30755] do_sock_getsockopt+0x6ae/0x7e0 [ 1051.791479][T30755] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1051.791516][T30755] ? do_sys_openat2+0x14e/0x200 [ 1051.791541][T30755] ? kmem_cache_free+0x182/0x650 [ 1051.791582][T30755] ? ksys_write+0x1fc/0x270 [ 1051.791621][T30755] __x64_sys_getsockopt+0x1a4/0x240 [ 1051.791675][T30755] do_syscall_64+0x166/0x520 [ 1051.791706][T30755] ? trace_irq_disable+0x3b/0x140 [ 1051.791727][T30755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.791752][T30755] ? clear_bhb_loop+0x70/0xc0 [ 1051.791780][T30755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.791804][T30755] RIP: 0033:0x7f507479e159 [ 1051.791827][T30755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.791848][T30755] RSP: 002b:00007f5075586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1051.791873][T30755] RAX: ffffffffffffffda RBX: 00007f5074a25fa0 RCX: 00007f507479e159 [ 1051.791904][T30755] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 1051.791920][T30755] RBP: 00007f5075586090 R08: 0000200000000000 R09: 0000000000000000 [ 1051.791936][T30755] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1051.791952][T30755] R13: 00007f5074a26038 R14: 00007f5074a25fa0 R15: 00007ffda4647208 [ 1051.791989][T30755] [ 1051.928169][T30757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5736'. [ 1052.575640][ T52] Bluetooth: hci5: command tx timeout [ 1052.994540][T30787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1053.168797][T30797] netlink: 'syz.3.5744': attribute type 6 has an invalid length. [ 1053.850667][T30687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.871291][T30687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.887010][T30687] bridge_slave_0: entered allmulticast mode [ 1053.897208][T30687] bridge_slave_0: entered promiscuous mode [ 1053.910999][T30687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.919024][T30687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.926600][T30687] bridge_slave_1: entered allmulticast mode [ 1053.935116][T30687] bridge_slave_1: entered promiscuous mode [ 1054.048477][T30687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.066760][T30687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.211420][T30687] team0: Port device team_slave_0 added [ 1054.218471][T30818] netlink: 'syz.3.5750': attribute type 29 has an invalid length. [ 1054.233125][T30687] team0: Port device team_slave_1 added [ 1054.290012][T30821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1054.481121][T30687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.488979][T30687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.520165][T30687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.541996][T30687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.550146][T30687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.550182][T30687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.631544][T30829] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5753'. [ 1054.653298][ T52] Bluetooth: hci5: command tx timeout [ 1054.874391][T30687] hsr_slave_0: entered promiscuous mode [ 1054.887873][T30687] hsr_slave_1: entered promiscuous mode [ 1054.895540][T30687] debugfs: 'hsr0' already exists in 'hsr' [ 1054.895562][T30687] Cannot create hsr debugfs directory [ 1055.006508][T30833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1055.477468][T30849] ip_tables: iptables: counters copy to user failed while replacing table [ 1055.490437][T30849] ip_tables: iptables: counters copy to user failed while replacing table [ 1055.814861][T30857] FAULT_INJECTION: forcing a failure. [ 1055.814861][T30857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1055.815321][T30857] CPU: 1 UID: 0 PID: 30857 Comm: syz.5.5760 Not tainted syzkaller #0 PREEMPT(full) [ 1055.815389][T30857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1055.815431][T30857] Call Trace: [ 1055.815469][T30857] [ 1055.815500][T30857] dump_stack_lvl+0xe8/0x150 [ 1055.815600][T30857] should_fail_ex+0x410/0x560 [ 1055.815714][T30857] prepare_alloc_pages+0x223/0x600 [ 1055.815834][T30857] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1055.815909][T30857] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1055.815992][T30857] ? __pfx_policy_nodemask+0x10/0x10 [ 1055.816089][T30857] alloc_pages_mpol+0x21e/0x390 [ 1055.816175][T30857] folio_alloc_mpol_noprof+0x39/0x160 [ 1055.816252][T30857] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1055.816336][T30857] ? filemap_get_entry+0xcd/0x3f0 [ 1055.816433][T30857] ? __pfx_filemap_get_entry+0x10/0x10 [ 1055.816525][T30857] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1055.816634][T30857] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1055.816734][T30857] shmem_get_folio_gfp+0x5da/0x16d0 [ 1055.816855][T30857] shmem_fault+0x179/0x390 [ 1055.816960][T30857] __do_fault+0x138/0x2a0 [ 1055.817060][T30857] do_pte_missing+0x684/0x34b0 [ 1055.817177][T30857] ? handle_mm_fault+0xf1/0x3750 [ 1055.817250][T30857] handle_mm_fault+0x1a53/0x3750 [ 1055.817355][T30857] ? handle_mm_fault+0xf1/0x3750 [ 1055.817462][T30857] ? __pfx_handle_mm_fault+0x10/0x10 [ 1055.817541][T30857] ? follow_page_pte+0x748/0xf10 [ 1055.817646][T30857] ? __pfx_follow_page_pte+0x10/0x10 [ 1055.817766][T30857] __get_user_pages+0x1675/0x2750 [ 1055.817950][T30857] __gup_longterm_locked+0x115b/0x15c0 [ 1055.818071][T30857] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1055.818167][T30857] gup_fast_fallback+0x1d92/0x20e0 [ 1055.818333][T30857] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1055.818409][T30857] ? rds_info_getsockopt+0x259/0x770 [ 1055.818473][T30857] ? rcu_is_watching+0x16/0xb0 [ 1055.818540][T30857] ? is_valid_gup_args+0x11f/0x200 [ 1055.818625][T30857] ? pin_user_pages_fast+0x4d/0xb0 [ 1055.818711][T30857] iov_iter_extract_pages+0x3a1/0x690 [ 1055.818809][T30857] rds_info_getsockopt+0x28b/0x770 [ 1055.818887][T30857] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1055.819001][T30857] ? irqentry_exit+0x218/0x910 [ 1055.819084][T30857] ? lock_acquire+0x115/0x350 [ 1055.819157][T30857] rds_getsockopt+0x38b/0x600 [ 1055.819238][T30857] ? __pfx_rds_getsockopt+0x10/0x10 [ 1055.819375][T30857] do_sock_getsockopt+0x6ae/0x7e0 [ 1055.819500][T30857] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1055.819606][T30857] ? do_sys_openat2+0x14e/0x200 [ 1055.819670][T30857] ? kmem_cache_free+0x182/0x650 [ 1055.819795][T30857] ? ksys_write+0x1fc/0x270 [ 1055.819897][T30857] __x64_sys_getsockopt+0x1a4/0x240 [ 1055.820011][T30857] do_syscall_64+0x166/0x520 [ 1055.820089][T30857] ? trace_irq_disable+0x3b/0x140 [ 1055.820142][T30857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.820205][T30857] ? clear_bhb_loop+0x70/0xc0 [ 1055.820273][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.820333][T30857] RIP: 0033:0x7fe7ecf9e159 [ 1055.820390][T30857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.820442][T30857] RSP: 002b:00007fe7eb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1055.820506][T30857] RAX: ffffffffffffffda RBX: 00007fe7ed225fa0 RCX: 00007fe7ecf9e159 [ 1055.820550][T30857] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 1055.820591][T30857] RBP: 00007fe7eb1f6090 R08: 0000200000000000 R09: 0000000000000000 [ 1055.820632][T30857] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1055.820679][T30857] R13: 00007fe7ed226038 R14: 00007fe7ed225fa0 R15: 00007fff9e73fc08 [ 1055.820790][T30857] [ 1056.692472][T30866] netlink: 'syz.3.5763': attribute type 29 has an invalid length. [ 1056.733776][ T52] Bluetooth: hci5: command tx timeout [ 1056.761822][T30868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5762'. [ 1056.798891][T30876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1056.811834][T30687] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1056.837338][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.849842][T30687] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1056.868554][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.986563][T30687] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1057.048548][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1057.060610][T30687] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1057.087004][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1057.098014][T30872] syzkaller1: entered promiscuous mode [ 1057.098055][T30872] syzkaller1: entered allmulticast mode [ 1057.521757][T30687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.587104][T30687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.619075][T28279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.619232][T28279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.680028][T28277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.680154][T28277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.775495][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 1057.838057][T30896] syzkaller0: entered promiscuous mode [ 1057.846692][T30896] syzkaller0: entered allmulticast mode [ 1057.879143][T30896] tipc: Enabled bearer , priority 0 [ 1057.966678][T30899] gre0: entered promiscuous mode [ 1057.971944][T30899] gre0: entered allmulticast mode [ 1057.998297][T30895] tipc: Resetting bearer [ 1058.250178][T30895] tipc: Disabling bearer [ 1059.204850][T30924] syz_tun: entered allmulticast mode [ 1059.248973][T30928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5778'. [ 1059.335590][T30934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1059.355760][T30924] dvmrp8: entered allmulticast mode [ 1059.361889][T30932] netlink: 'syz.3.5775': attribute type 29 has an invalid length. [ 1059.468002][T30934] bridge7: port 1(veth9) entered blocking state [ 1059.468195][T30934] bridge7: port 1(veth9) entered disabled state [ 1059.468382][T30934] veth9: entered allmulticast mode [ 1059.491190][T30934] veth9: entered promiscuous mode [ 1059.509948][T30935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5775'. [ 1059.605032][T30934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1059.605076][T30934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1059.605117][T30934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1059.605312][T30934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1059.681280][T30937] bridge7: port 2(veth11) entered blocking state [ 1059.700707][T30937] bridge7: port 2(veth11) entered disabled state [ 1059.700904][T30937] veth11: entered allmulticast mode [ 1059.720205][T30937] veth11: entered promiscuous mode [ 1059.876298][T30923] syz_tun: left allmulticast mode [ 1060.257206][T30687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.353235][T30983] pim6reg1: entered allmulticast mode [ 1061.561210][T30987] netlink: 'syz.3.5790': attribute type 29 has an invalid length. [ 1061.676443][T30687] veth0_vlan: entered promiscuous mode [ 1061.707926][T30687] veth1_vlan: entered promiscuous mode [ 1061.903959][T30687] veth0_macvtap: entered promiscuous mode [ 1061.933542][T30687] veth1_macvtap: entered promiscuous mode [ 1062.096250][T30687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.133347][T30687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.401821][T30999] tc_dump_action: action bad kind [ 1062.426698][T28277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.426933][T28277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.427092][T28277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.427168][T28277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.854594][T30994] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1063.791687][T28277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.791729][T28277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.907936][T28281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.908345][T28281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.045691][T31020] FAULT_INJECTION: forcing a failure. [ 1064.045691][T31020] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1064.062802][T31020] CPU: 0 UID: 0 PID: 31020 Comm: syz.1.5799 Not tainted syzkaller #0 PREEMPT(full) [ 1064.062834][T31020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1064.062849][T31020] Call Trace: [ 1064.062859][T31020] [ 1064.062869][T31020] dump_stack_lvl+0xe8/0x150 [ 1064.062910][T31020] should_fail_ex+0x410/0x560 [ 1064.062950][T31020] prepare_alloc_pages+0x223/0x600 [ 1064.062996][T31020] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1064.063024][T31020] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1064.063053][T31020] ? __pfx_policy_nodemask+0x10/0x10 [ 1064.063099][T31020] alloc_pages_mpol+0x21e/0x390 [ 1064.063136][T31020] folio_alloc_mpol_noprof+0x39/0x160 [ 1064.063167][T31020] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1064.063199][T31020] ? filemap_get_entry+0xcd/0x3f0 [ 1064.063239][T31020] ? __pfx_filemap_get_entry+0x10/0x10 [ 1064.063265][T31020] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1064.063298][T31020] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1064.063333][T31020] shmem_get_folio_gfp+0x5da/0x16d0 [ 1064.063379][T31020] shmem_fault+0x179/0x390 [ 1064.063416][T31020] __do_fault+0x138/0x2a0 [ 1064.063451][T31020] do_pte_missing+0x684/0x34b0 [ 1064.063495][T31020] ? handle_mm_fault+0xf1/0x3750 [ 1064.063527][T31020] handle_mm_fault+0x1a53/0x3750 [ 1064.063569][T31020] ? handle_mm_fault+0xf1/0x3750 [ 1064.063610][T31020] ? __pfx_handle_mm_fault+0x10/0x10 [ 1064.063644][T31020] ? follow_page_pte+0x748/0xf10 [ 1064.063685][T31020] ? __pfx_follow_page_pte+0x10/0x10 [ 1064.063729][T31020] __get_user_pages+0x1675/0x2750 [ 1064.063794][T31020] __gup_longterm_locked+0x115b/0x15c0 [ 1064.063837][T31020] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1064.063871][T31020] gup_fast_fallback+0x1d92/0x20e0 [ 1064.063940][T31020] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1064.063965][T31020] ? rds_info_getsockopt+0x259/0x770 [ 1064.063985][T31020] ? rcu_is_watching+0x16/0xb0 [ 1064.064010][T31020] ? is_valid_gup_args+0x11f/0x200 [ 1064.064037][T31020] ? pin_user_pages_fast+0x4d/0xb0 [ 1064.064066][T31020] iov_iter_extract_pages+0x3a1/0x690 [ 1064.064099][T31020] rds_info_getsockopt+0x28b/0x770 [ 1064.064122][T31020] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1064.064145][T31020] ? irqentry_exit+0x218/0x910 [ 1064.064170][T31020] ? lock_acquire+0x115/0x350 [ 1064.064191][T31020] rds_getsockopt+0x38b/0x600 [ 1064.064216][T31020] ? __pfx_rds_getsockopt+0x10/0x10 [ 1064.064247][T31020] do_sock_getsockopt+0x6ae/0x7e0 [ 1064.064279][T31020] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1064.064307][T31020] ? do_sys_openat2+0x14e/0x200 [ 1064.064326][T31020] ? kmem_cache_free+0x182/0x650 [ 1064.064354][T31020] ? ksys_write+0x1fc/0x270 [ 1064.064382][T31020] __x64_sys_getsockopt+0x1a4/0x240 [ 1064.064415][T31020] do_syscall_64+0x166/0x520 [ 1064.064436][T31020] ? trace_irq_disable+0x3b/0x140 [ 1064.064452][T31020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.064474][T31020] ? clear_bhb_loop+0x70/0xc0 [ 1064.064501][T31020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.064523][T31020] RIP: 0033:0x7fa7a639e159 [ 1064.064544][T31020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.064563][T31020] RSP: 002b:00007fa7a71d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1064.064587][T31020] RAX: ffffffffffffffda RBX: 00007fa7a6625fa0 RCX: 00007fa7a639e159 [ 1064.064603][T31020] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 1064.064618][T31020] RBP: 00007fa7a71d0090 R08: 0000200000000000 R09: 0000000000000000 [ 1064.064633][T31020] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1064.064647][T31020] R13: 00007fa7a6626038 R14: 00007fa7a6625fa0 R15: 00007fff3dce6698 [ 1064.064672][T31020] [ 1064.581322][T31028] __nla_validate_parse: 2 callbacks suppressed [ 1064.593825][T31028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5800'. [ 1064.871194][T31033] ip6tnl2: entered allmulticast mode [ 1064.887602][T28302] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1064.887862][T28302] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1064.912933][T27706] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1065.164951][T31036] netlink: 'syz.6.5723': attribute type 1 has an invalid length. [ 1065.256347][T31040] netlink: 'syz.6.5723': attribute type 10 has an invalid length. [ 1065.264505][T31040] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5723'. [ 1065.309187][T31039] netlink: 'syz.1.5804': attribute type 29 has an invalid length. [ 1065.318821][T31040] dummy0: entered promiscuous mode [ 1065.373559][ T5883] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1065.425525][T31042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5803'. [ 1065.773313][ T5883] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1065.964524][T31059] xt_cluster: node mask cannot exceed total number of nodes [ 1065.990152][T31059] bridge_slave_0: left allmulticast mode [ 1065.991345][T31059] bridge_slave_0: left promiscuous mode [ 1065.994013][T31059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.064392][T31070] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5810'. [ 1066.099456][T31059] bridge_slave_1: left allmulticast mode [ 1066.100490][T31059] bridge_slave_1: left promiscuous mode [ 1066.111135][T31059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.120209][T31064] openvswitch: netlink: Message has 8 unknown bytes. [ 1066.218991][T31059] .`: (slave 30ì): Releasing backup interface [ 1066.361648][T31059] .`: (slave bond_slave_1): Releasing backup interface [ 1066.381665][T31059] team0: Port device team_slave_0 removed [ 1066.395471][T31059] team0: Port device team_slave_1 removed [ 1066.407162][T31059] bond1: (slave bridge1): Releasing active interface [ 1066.425153][T31059] bond0: (slave geneve4): Releasing active interface [ 1066.451920][T31059] batman_adv: batadv0: Removing interface: ip6gretap0 [ 1066.478486][T31059] bond3: (slave veth13): Releasing active interface [ 1066.486309][T31059] bond3: (slave veth13): the permanent HWaddr of slave - 06:5b:f3:60:b8:cd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1066.487354][T31059] batadv1: entered promiscuous mode [ 1066.530842][T31059] bond3: (slave batadv1): Releasing active interface [ 1066.532024][T31059] batadv1: left promiscuous mode [ 1066.561259][T31059] team0: Port device veth15 removed [ 1066.578268][T31059] bond4: (slave veth17): Releasing active interface [ 1066.578711][T31059] bond4: (slave veth17): the permanent HWaddr of slave - 1e:7f:41:b7:e7:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1066.609500][T31059] bond4: (slave batadv2): Releasing active interface [ 1066.610064][T31059] batadv2: left promiscuous mode [ 1066.663256][T27706] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1066.713833][T22539] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1066.775461][T31082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5811'. [ 1066.891974][T31084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5812'. [ 1066.904823][T22539] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1067.131035][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5814'. [ 1067.131551][T31091] netlink: 'syz.2.5814': attribute type 30 has an invalid length. [ 1067.221580][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5814'. [ 1067.233046][T31096] netlink: 'syz.2.5814': attribute type 30 has an invalid length. [ 1067.298801][T31091] vxlan0: entered promiscuous mode [ 1067.313649][T31091] vxlan0: entered allmulticast mode [ 1067.362662][T28277] nci: nci_rx_work: unknown MT 0x6 [ 1067.379655][T31096] vxlan1: entered promiscuous mode [ 1067.386964][T31104] netlink: 'syz.5.5816': attribute type 4 has an invalid length. [ 1067.387001][T31104] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5816'. [ 1067.406902][T31096] vxlan1: entered allmulticast mode [ 1067.418250][T31105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 1067.431103][T31105] vlan0: entered promiscuous mode [ 1067.468401][T31104] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1067.655643][T31108] netlink: 'syz.2.5818': attribute type 29 has an invalid length. [ 1068.061929][T31119] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1068.812350][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1070.087342][T31131] __nla_validate_parse: 2 callbacks suppressed [ 1070.099499][T31131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5825'. [ 1070.171220][T31097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1070.294511][T31132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5825'. [ 1070.518699][T31138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5826'. [ 1070.706712][T31144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5828'. [ 1070.820609][T31148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5830'. [ 1070.981792][T31156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5830'. [ 1070.994592][T26722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1071.000739][T26722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1071.001581][T26722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1071.028693][T26722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1071.042981][T26722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1071.103986][T31156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1071.324373][T31152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1071.401019][T31152] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1072.550257][T31192] netlink: 'syz.5.5837': attribute type 29 has an invalid length. [ 1072.640701][T31197] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5838'. [ 1072.651664][T31197] netlink: 'syz.6.5838': attribute type 1 has an invalid length. [ 1072.738316][T31193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5836'. [ 1073.134606][T26722] Bluetooth: hci6: command tx timeout [ 1073.479676][T31208] bond0: entered promiscuous mode [ 1073.490837][T31208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.641944][T31210] bond8: entered promiscuous mode [ 1073.653756][T31210] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1073.664021][T31154] xfrm0 speed is unknown, defaulting to 1000 [ 1073.908091][T31222] netlink: 'syz.3.5843': attribute type 1 has an invalid length. [ 1073.908136][T31222] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1074.242567][T31223] team_slave_0: entered promiscuous mode [ 1074.242607][T31223] team_slave_0: entered allmulticast mode [ 1074.245688][T28279] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.265970][T28279] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.266103][T28279] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.934006][T28281] dvmrp8: left allmulticast mode [ 1075.222943][T26722] Bluetooth: hci6: command tx timeout [ 1075.256379][T31239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5844'. [ 1076.068063][T28281] .` (unregistering): Released all slaves [ 1076.158605][T28281] bond1 (unregistering): Released all slaves [ 1076.161119][T31252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5846'. [ 1076.219946][T28281] bond0 (unregistering): Released all slaves [ 1076.282865][T28281] bond2 (unregistering): Released all slaves [ 1076.325648][T28281] bond3 (unregistering): Released all slaves [ 1076.351055][T28281] bond4 (unregistering): Released all slaves [ 1076.452615][T28295] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.577984][T31154] lo speed is unknown, defaulting to 1000 [ 1076.588940][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1076.598672][T31154] lo speed is unknown, defaulting to 1000 [ 1077.131195][T31267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5849'. [ 1077.151536][T28281] : left promiscuous mode [ 1077.320606][T26722] Bluetooth: hci6: command tx timeout [ 1077.339159][T28281] þ: left promiscuous mode [ 1077.626921][T28281] : left promiscuous mode [ 1077.729692][T31272] netlink: 'syz.5.5850': attribute type 29 has an invalid length. [ 1077.751673][T31276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5851'. [ 1077.884246][T28281] tipc: Disabling bearer [ 1077.885150][T28281] tipc: Left network mode [ 1078.044768][T28281] IPVS: stopping backup sync thread 23321 ... [ 1078.307031][T31293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5854'. [ 1078.320626][T31297] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1078.390224][T31305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5854'. [ 1078.449822][T31306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5855'. [ 1079.306752][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1079.328331][T31315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.376291][T26722] Bluetooth: hci6: command tx timeout [ 1079.710517][T31334] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5861'. [ 1079.819437][T31334] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5861'. [ 1079.898664][T31154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.898792][T31154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.898963][T31154] bridge_slave_0: entered allmulticast mode [ 1079.921227][T31154] bridge_slave_0: entered promiscuous mode [ 1079.996717][T31339] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5862'. [ 1080.029181][T31154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.031837][T31154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.034879][T31154] bridge_slave_1: entered allmulticast mode [ 1080.046595][T31154] bridge_slave_1: entered promiscuous mode [ 1080.405314][T31154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.481084][T31154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.705807][T31365] tipc: Enabling of bearer rejected, failed to enable media [ 1080.721985][T31354] netlink: 'syz.3.5865': attribute type 29 has an invalid length. [ 1080.851901][T31154] team0: Port device team_slave_0 added [ 1081.019205][T31154] team0: Port device team_slave_1 added [ 1081.206251][T31384] __nla_validate_parse: 1 callbacks suppressed [ 1081.217388][T31384] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5869'. [ 1081.222354][T31154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.222397][T31154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.222469][T31154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.237942][T31154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.237982][T31154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.238049][T31154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.629072][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1082.019292][T31154] hsr_slave_0: entered promiscuous mode [ 1082.029446][T31154] hsr_slave_1: entered promiscuous mode [ 1082.039458][T31154] debugfs: 'hsr0' already exists in 'hsr' [ 1082.045495][T31154] Cannot create hsr debugfs directory [ 1082.680043][T31415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5877'. [ 1082.827245][T31413] tc_dump_action: action bad kind [ 1083.316372][T31436] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5879'. [ 1083.316420][T31436] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5879'. [ 1083.445850][T31449] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5879'. [ 1083.446070][T31449] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5879'. [ 1085.392423][T28301] smbdirect: ib_dev[syz2] removed [ 1085.532695][T28279] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.532828][T28279] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.532887][T28279] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.532934][T28279] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.596296][T31453] netlink: 'syz.3.5880': attribute type 29 has an invalid length. [ 1085.606357][T31455] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1085.777756][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1086.788908][T31154] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.299303][T31154] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.440069][T31515] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1087.781709][T31154] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.242261][T31154] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.475558][T31542] netlink: 'syz.6.5893': attribute type 29 has an invalid length. [ 1088.509604][T31535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5890'. [ 1091.260836][T31612] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5906'. [ 1091.303320][T31612] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5906'. [ 1091.391141][T31154] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1091.476187][T31154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1091.568737][T31154] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1091.615746][T31154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1091.651173][T31154] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1091.688730][T31154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.703274][T31154] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1091.760291][T31154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1092.236326][T28281] IPVS: stop unused estimator thread 0... [ 1092.381644][T31154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.484491][T31154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.505352][T31642] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1092.517150][T28276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.517283][T28276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.566012][T28301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.566278][T28301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.724461][T31645] netlink: 'syz.6.5911': attribute type 29 has an invalid length. [ 1093.779449][T31678] netlink: 'syz.3.5917': attribute type 23 has an invalid length. [ 1093.865737][T31679] netlink: Failed to add helper -22 [ 1093.865816][T31679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.158525][T31692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1094.434990][T31692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1094.851177][T31719] netlink: 'syz.2.5923': attribute type 29 has an invalid length. [ 1095.028497][T31154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.140535][T31727] syzkaller0: entered promiscuous mode [ 1095.148988][T31727] syzkaller0: entered allmulticast mode [ 1095.158379][T31727] tipc: Enabled bearer , priority 0 [ 1095.172810][T31726] tipc: Resetting bearer [ 1095.211669][T31726] tipc: Disabling bearer [ 1095.552945][T31154] veth0_vlan: entered promiscuous mode [ 1095.637983][T31154] veth1_vlan: entered promiscuous mode [ 1095.823642][T31154] veth0_macvtap: entered promiscuous mode [ 1095.861657][T31154] veth1_macvtap: entered promiscuous mode [ 1095.941228][T31736] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5926'. [ 1095.976340][T31736] dummy0: left promiscuous mode [ 1096.033755][T31154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.057530][T31736] netlink: 'syz.6.5926': attribute type 10 has an invalid length. [ 1096.057568][T31736] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5926'. [ 1096.125525][T31736] dummy0: entered promiscuous mode [ 1096.151579][T31154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.214828][T28281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.242311][T28276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.253279][T28276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.413482][T28301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.602733][T31751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5929'. [ 1096.936752][T31762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1096.952833][T28277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.953064][T28277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.989007][T31762] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1097.509888][T31767] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5932'. [ 1097.687252][T11142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.687291][T11142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.894583][T31794] netlink: 'syz.5.5936': attribute type 29 has an invalid length. [ 1098.475894][T31815] syzkaller0: entered promiscuous mode [ 1098.486417][T31815] syzkaller0: entered allmulticast mode [ 1098.517566][T31815] tap0: tun_chr_ioctl cmd 1074025692 [ 1098.630670][T31821] bridge0: entered allmulticast mode [ 1099.081978][T31839] netlink: 'syz.3.5944': attribute type 2 has an invalid length. [ 1099.324507][T31839] ´: entered promiscuous mode [ 1099.339602][T31847] netlink: 'syz.3.5944': attribute type 2 has an invalid length. [ 1099.736418][T31865] netlink: 'syz.1.5947': attribute type 29 has an invalid length. [ 1099.866803][T31865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1099.990964][T31877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5950'. [ 1100.063286][T31879] netlink: 'syz.5.5950': attribute type 1 has an invalid length. [ 1100.220424][T31877] macvtap1: entered allmulticast mode [ 1100.326223][T31881] netlink: 'syz.3.5951': attribute type 29 has an invalid length. [ 1100.472232][T31888] syzkaller0: entered promiscuous mode [ 1100.472618][T31888] syzkaller0: entered allmulticast mode [ 1100.815040][T28294] wlan0: Trigger new scan to find an IBSS to join [ 1101.659882][T31924] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5958'. [ 1101.669566][T31924] lo speed is unknown, defaulting to 1000 [ 1101.669833][T31924] lo speed is unknown, defaulting to 1000 [ 1101.670891][T31924] lo speed is unknown, defaulting to 1000 [ 1101.680293][T31924] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1101.680386][T31924] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1101.680490][T31924] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1102.011841][T31924] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1102.071901][T31941] netlink: 'syz.1.5963': attribute type 29 has an invalid length. [ 1102.284230][T31941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1102.337313][T31924] lo speed is unknown, defaulting to 1000 [ 1102.363672][T31924] lo speed is unknown, defaulting to 1000 [ 1102.378657][T31924] lo speed is unknown, defaulting to 1000 [ 1102.424034][T31924] lo speed is unknown, defaulting to 1000 [ 1102.447129][T31924] lo speed is unknown, defaulting to 1000 [ 1102.462580][T31924] lo speed is unknown, defaulting to 1000 [ 1102.479377][T31924] lo speed is unknown, defaulting to 1000 [ 1102.491156][T31924] lo speed is unknown, defaulting to 1000 [ 1102.515600][T31924] lo speed is unknown, defaulting to 1000 [ 1102.530361][T31924] lo speed is unknown, defaulting to 1000 [ 1102.548979][T31924] lo speed is unknown, defaulting to 1000 [ 1102.666920][T31950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1103.541606][T31978] sch_fq: defrate 4294967293 ignored. [ 1103.556805][T31979] netlink: 'syz.3.5972': attribute type 1 has an invalid length. [ 1103.557268][T31979] netlink: 'syz.3.5972': attribute type 2 has an invalid length. [ 1103.655163][T31982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1103.665585][T31982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1103.750125][T31987] netlink: 'syz.5.5979': attribute type 29 has an invalid length. [ 1103.775628][T28277] wlan0: Trigger new scan to find an IBSS to join [ 1103.819801][T31987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5979'. [ 1103.898751][T31994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.944374][T31994] bridge_slave_1: left allmulticast mode [ 1103.951902][T31994] bridge_slave_1: left promiscuous mode [ 1103.952393][T31994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.000985][T31994] bond0: (slave bond_slave_0): Releasing backup interface [ 1104.063448][ T31] audit: type=1800 audit(1788008259.550:33): pid=32006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5982" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3067 res=0 errno=0 [ 1104.099439][T31994] bond0: (slave bond_slave_1): Releasing backup interface [ 1104.121036][T31994] team0: Port device team_slave_0 removed [ 1104.132388][T31994] team0: Port device team_slave_1 removed [ 1104.139560][T31994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1104.292690][T32011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1104.302018][T32011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1104.312643][T32011] tc_dump_action: action bad kind [ 1104.568590][T32020] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 1104.927526][T32029] mac80211_hwsim hwsim84 wlan0: entered promiscuous mode [ 1104.927576][T32029] mac80211_hwsim hwsim84 wlan0: entered allmulticast mode [ 1104.944410][T32034] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5988'. [ 1104.972844][T32029] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1105.005061][T32036] netlink: 'syz.5.5991': attribute type 29 has an invalid length. [ 1105.083386][T32036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5991'. [ 1105.343111][T32043] tipc: Enabling of bearer rejected, failed to enable media [ 1105.600823][T32062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5996'. [ 1105.646425][T32061] ip6t_srh: unknown srh match flags 4000 [ 1105.842316][T32067] netlink: 712 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1105.842355][T32067] netlink: 5504 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1105.842392][T32067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1105.842557][T32067] netlink: 712 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1105.842578][T32067] netlink: 5504 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1105.842595][T32067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1105.842771][T32067] netlink: 712 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1105.983044][T32063] bond0: Error: Cannot enslave bond to itself. [ 1106.012931][T26722] block nbd9: Receive control failed (result -32) [ 1106.065739][T32073] netlink: 'syz.2.6002': attribute type 29 has an invalid length. [ 1106.378310][T32081] netlink: 'syz.5.6005': attribute type 29 has an invalid length. [ 1106.517375][T32080] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1106.560309][T32080] bond1 (unregistering): Released all slaves [ 1107.472831][T32115] netlink: 'syz.5.6013': attribute type 1 has an invalid length. [ 1107.855008][T32123] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1107.918424][T32125] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1108.353180][T32141] ip6tnl1: entered promiscuous mode [ 1108.453182][T32147] netlink: 'syz.5.6021': attribute type 29 has an invalid length. [ 1108.530998][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1108.554502][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1108.563449][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1108.583383][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1108.591248][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1110.138389][T32191] xfrm0 speed is unknown, defaulting to 1000 [ 1110.422341][T32217] netlink: 'syz.3.6035': attribute type 29 has an invalid length. [ 1110.444347][T32217] __nla_validate_parse: 198 callbacks suppressed [ 1110.451264][T32217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6035'. [ 1110.568648][T32219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6034'. [ 1110.659479][T26722] Bluetooth: hci2: command tx timeout [ 1110.926075][T32228] ip_tables: iptables: counters copy to user failed while replacing table [ 1111.029639][T32191] lo speed is unknown, defaulting to 1000 [ 1111.054342][T32191] lo speed is unknown, defaulting to 1000 [ 1111.112426][T32203] siw: device registration error -23 [ 1111.129814][T32148] xfrm0 speed is unknown, defaulting to 1000 [ 1111.428979][T32239] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6038'. [ 1111.699440][T32248] netlink: 'syz.1.6040': attribute type 1 has an invalid length. [ 1111.701255][T32248] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1111.863818][T32148] lo speed is unknown, defaulting to 1000 [ 1111.871103][T32193] xfrm0 speed is unknown, defaulting to 1000 [ 1111.882906][T32148] lo speed is unknown, defaulting to 1000 [ 1112.592335][T32260] netlink: 'syz.3.6045': attribute type 29 has an invalid length. [ 1112.671464][T32260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1112.718522][T32262] netlink: 'syz.1.6046': attribute type 29 has an invalid length. [ 1112.718565][T32262] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6046'. [ 1112.741458][T26722] Bluetooth: hci2: command tx timeout [ 1112.745268][T32262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6046'. [ 1112.760521][T32263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6046'. [ 1112.791587][T32262] veth3: entered allmulticast mode [ 1112.847589][T32263] veth5: entered allmulticast mode [ 1112.859750][T32193] lo speed is unknown, defaulting to 1000 [ 1112.897929][T32193] lo speed is unknown, defaulting to 1000 [ 1113.098669][T32199] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1113.118289][T32199] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1113.138438][T32199] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1113.180899][T32199] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1113.999674][T32268] mac80211_hwsim hwsim84 wlan0: left promiscuous mode [ 1114.009546][T32268] mac80211_hwsim hwsim84 wlan0: left allmulticast mode [ 1114.229742][T32148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.244469][T32148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.251851][T32148] bridge_slave_0: entered allmulticast mode [ 1114.269123][T32148] bridge_slave_0: entered promiscuous mode [ 1114.298926][T32148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.304604][T32148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.305309][T32148] bridge_slave_1: entered allmulticast mode [ 1114.321308][T32148] bridge_slave_1: entered promiscuous mode [ 1114.399077][T32148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.416755][T32148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.609752][T32318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1114.658284][T32148] team0: Port device team_slave_0 added [ 1114.668996][T32315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1114.746040][T32148] team0: Port device team_slave_1 added [ 1114.816384][T26722] Bluetooth: hci2: command tx timeout [ 1115.118181][T32148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.127792][T32148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.157685][T32148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.181937][T32148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.189935][T32148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.217086][T32148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.345124][T32336] netlink: 'syz.6.6058': attribute type 29 has an invalid length. [ 1115.531084][T32344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.544486][T32344] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1115.694078][T32148] hsr_slave_0: entered promiscuous mode [ 1115.711335][T32148] hsr_slave_1: entered promiscuous mode [ 1115.722484][T32148] debugfs: 'hsr0' already exists in 'hsr' [ 1115.728572][T32148] Cannot create hsr debugfs directory [ 1116.746179][T32361] bridge0: entered promiscuous mode [ 1116.753543][T32361] bridge0: entered allmulticast mode [ 1116.767499][T32361] team0: Port device bridge0 added [ 1116.778145][T32370] bridge0: port 1(team0) entered blocking state [ 1116.779712][T32370] bridge0: port 1(team0) entered disabled state [ 1116.780531][T32370] team0: entered allmulticast mode [ 1116.780582][T32370] team_slave_0: entered allmulticast mode [ 1116.787204][T32370] team_slave_1: entered allmulticast mode [ 1116.840654][T32370] team0: left allmulticast mode [ 1116.846157][T32370] team_slave_0: left allmulticast mode [ 1116.851762][T32370] team_slave_1: left allmulticast mode [ 1116.899271][T26722] Bluetooth: hci2: command tx timeout [ 1117.018023][T32148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1117.041082][T32148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1117.049757][T32148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1117.083601][T32148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1117.093119][T32148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1117.119756][T32148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1117.128784][T32148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1117.167912][T32148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1117.340769][T32394] netlink: 'syz.3.6069': attribute type 29 has an invalid length. [ 1117.427305][T32394] __nla_validate_parse: 2 callbacks suppressed [ 1117.444770][T32394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6069'. [ 1117.711293][T32404] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6071'. [ 1117.865164][T32148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.922682][T32148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.012150][T28301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.012279][T28301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.091065][T28301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.091328][T28301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.551556][T32426] netlink: 'syz.3.6078': attribute type 3 has an invalid length. [ 1118.603042][T32426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6078'. [ 1119.086761][T32438] lo: entered allmulticast mode [ 1119.119762][T32442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1120.099485][T32435] lo: left allmulticast mode [ 1120.119140][T32451] netlink: 'syz.6.6082': attribute type 29 has an invalid length. [ 1120.279513][T32451] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6082'. [ 1120.732957][T32470] FAULT_INJECTION: forcing a failure. [ 1120.732957][T32470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1120.746671][T32470] CPU: 0 UID: 0 PID: 32470 Comm: syz.6.6085 Not tainted syzkaller #0 PREEMPT(full) [ 1120.746701][T32470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1120.746716][T32470] Call Trace: [ 1120.746726][T32470] [ 1120.746737][T32470] dump_stack_lvl+0xe8/0x150 [ 1120.746776][T32470] should_fail_ex+0x410/0x560 [ 1120.746820][T32470] prepare_alloc_pages+0x223/0x600 [ 1120.746883][T32470] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1120.746918][T32470] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1120.746948][T32470] ? __pfx_policy_nodemask+0x10/0x10 [ 1120.746982][T32470] ? lock_acquire+0x115/0x350 [ 1120.747008][T32470] alloc_pages_mpol+0x21e/0x390 [ 1120.747043][T32470] folio_alloc_mpol_noprof+0x39/0x160 [ 1120.747076][T32470] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1120.747108][T32470] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1120.747150][T32470] do_wp_page+0x117d/0x4b80 [ 1120.747201][T32470] ? __pfx_do_wp_page+0x10/0x10 [ 1120.747228][T32470] ? do_raw_spin_lock+0x12b/0x2f0 [ 1120.747263][T32470] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1120.747308][T32470] handle_mm_fault+0x15d7/0x3750 [ 1120.747351][T32470] ? handle_mm_fault+0xf1/0x3750 [ 1120.747395][T32470] ? __pfx_handle_mm_fault+0x10/0x10 [ 1120.747449][T32470] ? lock_mm_and_find_vma+0xa7/0x340 [ 1120.747486][T32470] do_user_addr_fault+0x746/0x1340 [ 1120.747529][T32470] exc_page_fault+0x6a/0xc0 [ 1120.747562][T32470] asm_exc_page_fault+0x26/0x30 [ 1120.747586][T32470] RIP: 0010:__put_user_nocheck_4+0x3/0x20 [ 1120.747624][T32470] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 47 94 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1120.747646][T32470] RSP: 0018:ffffc900037af8d8 EFLAGS: 00050206 [ 1120.747668][T32470] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000066f0 [ 1120.747684][T32470] RDX: 0000000000000000 RSI: 000000000000f5ff RDI: 00000000ffffffff [ 1120.747700][T32470] RBP: ffffc900037afa50 R08: ffffffff907a027f R09: 1ffffffff20f404f [ 1120.747719][T32470] R10: dffffc0000000000 R11: fffffbfff20f4050 R12: 1ffff920006f5f28 [ 1120.747737][T32470] R13: 000000000000f5ff R14: 00002000000066c0 R15: dffffc0000000000 [ 1120.747778][T32470] ____sys_recvmsg+0x2be/0x4a0 [ 1120.747815][T32470] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1120.747857][T32470] ? import_iovec+0x73/0xa0 [ 1120.747898][T32470] ___sys_recvmsg+0x213/0x5a0 [ 1120.747929][T32470] ? __pfx____sys_recvmsg+0x10/0x10 [ 1120.747959][T32470] ? lock_acquire+0x115/0x350 [ 1120.748002][T32470] ? __fget_files+0x3a2/0x420 [ 1120.748045][T32470] do_recvmmsg+0x31a/0x7f0 [ 1120.748080][T32470] ? __pfx_do_recvmmsg+0x10/0x10 [ 1120.748130][T32470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1120.748163][T32470] ? __fget_files+0x3a2/0x420 [ 1120.748204][T32470] __x64_sys_recvmmsg+0x198/0x250 [ 1120.748232][T32470] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1120.748270][T32470] do_syscall_64+0x166/0x520 [ 1120.748300][T32470] ? trace_irq_disable+0x3b/0x140 [ 1120.748321][T32470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.748345][T32470] ? clear_bhb_loop+0x70/0xc0 [ 1120.748374][T32470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.748397][T32470] RIP: 0033:0x7f7488f9e159 [ 1120.748417][T32470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.748437][T32470] RSP: 002b:00007f7489dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1120.748459][T32470] RAX: ffffffffffffffda RBX: 00007f7489225fa0 RCX: 00007f7488f9e159 [ 1120.748476][T32470] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1120.748491][T32470] RBP: 00007f7489dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.748505][T32470] R10: 000000000000f5ff R11: 0000000000000246 R12: 0000000000000001 [ 1120.748520][T32470] R13: 00007f7489226038 R14: 00007f7489225fa0 R15: 00007ffcc3d0e348 [ 1120.748556][T32470] [ 1120.880575][T32427] bond0: (slave netdevsim1): Releasing backup interface [ 1121.701885][T32482] dummy0: left promiscuous mode [ 1121.996779][T32482] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1122.019906][T27706] lo speed is unknown, defaulting to 1000 [ 1122.040706][T32148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.681902][T32148] veth0_vlan: entered promiscuous mode [ 1122.774589][T32514] netlink: 'syz.1.6094': attribute type 29 has an invalid length. [ 1122.798536][T32148] veth1_vlan: entered promiscuous mode [ 1122.858919][T32148] veth0_macvtap: entered promiscuous mode [ 1122.874673][T32148] veth1_macvtap: entered promiscuous mode [ 1122.906533][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6095'. [ 1122.937461][T32521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6096'. [ 1122.988620][T32148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.008116][T32148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.032982][T32518] x_tables: duplicate underflow at hook 3 [ 1123.082578][T28294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.092496][T28281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.093036][T28281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.093148][T28281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.172120][T32527] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1123.183063][T32527] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1123.395478][T32535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.395512][T32535] IPv6: NLM_F_CREATE should be set when creating new route [ 1123.395579][T32535] IPv6: NLM_F_CREATE should be set when creating new route [ 1123.395637][T32535] IPv6: NLM_F_CREATE should be set when creating new route [ 1123.504187][T32525] syzkaller1: entered promiscuous mode [ 1123.505060][T32525] syzkaller1: entered allmulticast mode [ 1124.202920][T28276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.203148][T28276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.418199][T28281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.418416][T28281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.573076][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6102'. [ 1124.749207][T32564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6102'. [ 1125.573233][T32574] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6022'. [ 1125.668421][T32588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6107'. [ 1126.312741][T32596] ipip0: entered promiscuous mode [ 1126.519980][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1126.541397][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1126.556202][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1126.568554][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1126.580221][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1126.840355][T32611] netlink: 8210 bytes leftover after parsing attributes in process `syz.5.6112'. [ 1126.914282][T32605] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6110'. [ 1126.924956][T32605] tipc: Started in network mode [ 1126.933735][T32605] tipc: Node identity ac1414aa, cluster identity 4711 [ 1126.941271][T32605] tipc: New replicast peer: 172.20.20.187 [ 1126.980915][T32605] tipc: Enabled bearer , priority 10 [ 1127.831211][T32620] netlink: 'syz.1.6113': attribute type 9 has an invalid length. [ 1127.831371][T32620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.831744][T32620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.831904][T32620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.891841][T32628] RDS: rds_bind could not find a transport for ::a:2800:0, load rds_tcp or rds_rdma? [ 1128.240334][T10315] tipc: Node number set to 2886997162 [ 1128.276262][T32633] __nla_validate_parse: 1 callbacks suppressed [ 1128.283467][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6115'. [ 1128.653076][ T52] Bluetooth: hci0: command tx timeout [ 1128.766802][T32645] RDS: rds_bind could not find a transport for ::ffff:172.30.253.6, load rds_tcp or rds_rdma? [ 1129.050338][T32606] xfrm0 speed is unknown, defaulting to 1000 [ 1129.335009][T28301] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.492593][T28279] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.599169][ T31] audit: type=1804 audit(1788008285.080:34): pid=32657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6122" name="/newroot/72/cgroup.controllers" dev="tmpfs" ino=389 res=1 errno=0 [ 1129.626244][ T31] audit: type=1800 audit(1788008285.110:35): pid=32657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6122" name="cgroup.controllers" dev="tmpfs" ino=389 res=0 errno=0 [ 1129.741209][T28301] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.823496][T28276] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.178217][T32677] FAULT_INJECTION: forcing a failure. [ 1130.178217][T32677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.194132][T32677] CPU: 0 UID: 0 PID: 32677 Comm: syz.1.6125 Not tainted syzkaller #0 PREEMPT(full) [ 1130.194165][T32677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1130.194180][T32677] Call Trace: [ 1130.194190][T32677] [ 1130.194200][T32677] dump_stack_lvl+0xe8/0x150 [ 1130.194241][T32677] should_fail_ex+0x410/0x560 [ 1130.194280][T32677] _copy_from_user+0x2d/0xb0 [ 1130.194306][T32677] ___sys_recvmsg+0x173/0x5a0 [ 1130.194337][T32677] ? __pfx____sys_recvmsg+0x10/0x10 [ 1130.194369][T32677] ? lock_acquire+0x115/0x350 [ 1130.194426][T32677] do_recvmmsg+0x31a/0x7f0 [ 1130.194461][T32677] ? __pfx_do_recvmmsg+0x10/0x10 [ 1130.194500][T32677] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1130.194535][T32677] ? __fget_files+0x3a2/0x420 [ 1130.194585][T32677] __x64_sys_recvmmsg+0x198/0x250 [ 1130.194614][T32677] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1130.194654][T32677] do_syscall_64+0x166/0x520 [ 1130.194684][T32677] ? trace_irq_disable+0x3b/0x140 [ 1130.194706][T32677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.194735][T32677] ? clear_bhb_loop+0x70/0xc0 [ 1130.194764][T32677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.194788][T32677] RIP: 0033:0x7f7e0019e159 [ 1130.194810][T32677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.194832][T32677] RSP: 002b:00007f7e010cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1130.194857][T32677] RAX: ffffffffffffffda RBX: 00007f7e00425fa0 RCX: 00007f7e0019e159 [ 1130.194876][T32677] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1130.194892][T32677] RBP: 00007f7e010cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.194907][T32677] R10: 000000000000f5ff R11: 0000000000000246 R12: 0000000000000001 [ 1130.194922][T32677] R13: 00007f7e00426038 R14: 00007f7e00425fa0 R15: 00007ffcbde58868 [ 1130.194959][T32677] [ 1130.516028][T32606] lo speed is unknown, defaulting to 1000 [ 1130.732628][ T52] Bluetooth: hci0: command tx timeout [ 1131.730253][T32709] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6136'. [ 1131.820894][T32708] Cannot find add_set index 0 as target [ 1132.512511][T32716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6139'. [ 1132.816246][ T52] Bluetooth: hci0: command tx timeout [ 1132.884337][T32726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6140'. [ 1133.129650][T28294] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 1133.470642][T28294] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 1133.631808][T28294] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1133.656010][T28294] bond1 (unregistering): Released all slaves [ 1133.678717][T28294] bond2 (unregistering): Released all slaves [ 1133.701826][T28294] bond3 (unregistering): Released all slaves [ 1133.897635][T28294] bond4 (unregistering): Released all slaves [ 1133.911856][T32733] netlink: 'syz.6.6142': attribute type 10 has an invalid length. [ 1133.977718][T28294] bond5 (unregistering): Released all slaves [ 1134.017758][T32734] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6142'. [ 1134.041313][T28294] bond6 (unregistering): Released all slaves [ 1134.091991][T28294] bond7 (unregistering): (slave veth5): Releasing active interface [ 1134.114529][T28294] bond7 (unregistering): (slave veth7): Releasing active interface [ 1134.128244][T28294] bond7 (unregistering): Released all slaves [ 1134.277533][T28294] bond0 (unregistering): Released all slaves [ 1134.433282][T28294] bond8 (unregistering): Released all slaves [ 1134.480561][T32606] lo speed is unknown, defaulting to 1000 [ 1134.515287][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1134.899952][ T52] Bluetooth: hci0: command tx timeout [ 1134.936275][T32726] bond1: option lacp_active: invalid value (5) [ 1134.949467][T32726] bond1 (unregistering): Released all slaves [ 1135.137178][T32733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1135.150906][T32733] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1135.284386][T28294] ´: left promiscuous mode [ 1135.628754][T32751] FAULT_INJECTION: forcing a failure. [ 1135.628754][T32751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.644089][T32751] CPU: 0 UID: 0 PID: 32751 Comm: syz.6.6146 Not tainted syzkaller #0 PREEMPT(full) [ 1135.644121][T32751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1135.644136][T32751] Call Trace: [ 1135.644146][T32751] [ 1135.644157][T32751] dump_stack_lvl+0xe8/0x150 [ 1135.644196][T32751] should_fail_ex+0x410/0x560 [ 1135.644235][T32751] _copy_from_user+0x2d/0xb0 [ 1135.644259][T32751] ___sys_recvmsg+0x173/0x5a0 [ 1135.644291][T32751] ? __pfx____sys_recvmsg+0x10/0x10 [ 1135.644321][T32751] ? lock_acquire+0x115/0x350 [ 1135.644390][T32751] do_recvmmsg+0x31a/0x7f0 [ 1135.644422][T32751] ? __pfx_do_recvmmsg+0x10/0x10 [ 1135.644460][T32751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1135.644493][T32751] ? __fget_files+0x3a2/0x420 [ 1135.644534][T32751] __x64_sys_recvmmsg+0x198/0x250 [ 1135.644562][T32751] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1135.644599][T32751] do_syscall_64+0x166/0x520 [ 1135.644629][T32751] ? trace_irq_disable+0x3b/0x140 [ 1135.644650][T32751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.644675][T32751] ? clear_bhb_loop+0x70/0xc0 [ 1135.644703][T32751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.644726][T32751] RIP: 0033:0x7f7488f9e159 [ 1135.644749][T32751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.644769][T32751] RSP: 002b:00007f7489dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1135.644794][T32751] RAX: ffffffffffffffda RBX: 00007f7489225fa0 RCX: 00007f7488f9e159 [ 1135.644812][T32751] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1135.644827][T32751] RBP: 00007f7489dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.644860][T32751] R10: 000000000000f5ff R11: 0000000000000246 R12: 0000000000000002 [ 1135.644876][T32751] R13: 00007f7489226038 R14: 00007f7489225fa0 R15: 00007ffcc3d0e348 [ 1135.644915][T32751] [ 1135.697088][T28294] tipc: Left network mode [ 1137.748063][ T319] netlink: 'syz.6.6152': attribute type 6 has an invalid length. [ 1138.528398][ T338] veth7: entered allmulticast mode [ 1138.719766][T32606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.729484][T32606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.729681][T32606] bridge_slave_0: entered allmulticast mode [ 1138.779279][T32606] bridge_slave_0: entered promiscuous mode [ 1138.794118][T32606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.794748][T32606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.795430][T32606] bridge_slave_1: entered allmulticast mode [ 1138.801613][T32606] bridge_slave_1: entered promiscuous mode [ 1138.903703][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1138.953788][ T365] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1138.963998][ T365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6159'. [ 1139.420520][T32606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.445530][T32606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.549920][ T376] netlink: 'syz.2.6162': attribute type 29 has an invalid length. [ 1139.809916][T32606] team0: Port device team_slave_0 added [ 1139.884320][T32606] team0: Port device team_slave_1 added [ 1140.067663][ T386] syzkaller0: entered promiscuous mode [ 1140.073723][ T386] syzkaller0: entered allmulticast mode [ 1140.194571][ T384] xfrm0 speed is unknown, defaulting to 1000 [ 1140.438301][T32606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.447267][T32606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.474722][T32606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.491055][T32606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.504108][T32606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.504166][T32606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.040736][T11142] IPVS: starting estimator thread 0... [ 1141.122477][ T417] IPVS: using max 27 ests per chain, 64800 per kthread [ 1141.234259][T32606] hsr_slave_0: entered promiscuous mode [ 1141.235349][T32606] hsr_slave_1: entered promiscuous mode [ 1141.256276][T32606] debugfs: 'hsr0' already exists in 'hsr' [ 1141.262685][T32606] Cannot create hsr debugfs directory [ 1141.446597][ T420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1141.655450][ T429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 1141.925294][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6170'. [ 1141.982611][ T435] bond0: option lp_interval: invalid value (0) [ 1141.983124][ T435] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1142.060314][ T384] lo speed is unknown, defaulting to 1000 [ 1142.223734][ T384] lo speed is unknown, defaulting to 1000 [ 1142.267720][ T441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6173'. [ 1142.566113][ T444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6173'. [ 1142.615167][ T443] netlink: 'syz.6.6174': attribute type 29 has an invalid length. [ 1142.689726][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1143.062649][T28294] hsr_slave_0: left promiscuous mode [ 1143.065359][T28294] hsr_slave_1: left promiscuous mode [ 1143.537318][ T458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1144.261226][ T461] netlink: 'syz.5.6177': attribute type 39 has an invalid length. [ 1144.646562][T32606] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.840404][ T457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1144.854021][ T465] netlink: 'syz.6.6179': attribute type 1 has an invalid length. [ 1144.909666][ T466] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6179'. [ 1145.113035][ T466] macvlan2: entered promiscuous mode [ 1145.119281][ T466] macvlan2: entered allmulticast mode [ 1145.145592][ T466] bond1: entered promiscuous mode [ 1145.146381][ T466] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1145.221230][ T466] bond1: left promiscuous mode [ 1145.444904][ T476] openvswitch: netlink: Key 18 has unexpected len 0 expected 2 [ 1145.531915][T32606] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.935772][T32606] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.969037][ T492] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 1145.970915][ T493] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 1146.263382][T32606] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.366740][ T487] tipc: Enabled bearer , priority 0 [ 1146.527016][ T501] netlink: 'syz.2.6185': attribute type 13 has an invalid length. [ 1146.540858][ T484] tipc: Disabling bearer [ 1146.600943][ T503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6185'. [ 1147.020195][ T510] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.6186'. [ 1147.028495][ T510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6186'. [ 1147.641100][ T520] netlink: 'syz.1.6187': attribute type 29 has an invalid length. [ 1147.720325][ T525] netlink: NAT attribute has 5 unknown bytes [ 1147.724330][ T525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.765273][ T513] xfrm0 speed is unknown, defaulting to 1000 [ 1148.178626][T32606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1148.253035][T32606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1148.256899][T32606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1148.303046][T32606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1148.311869][T32606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1148.435736][T32606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1148.438015][T32606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1148.457420][T32606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1148.688250][ T546] Bluetooth: MGMT ver 1.23 [ 1148.798391][ T551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6192'. [ 1148.880924][ T551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6192'. [ 1149.463537][T32606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.508431][T32606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.591906][T28276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.592273][T28276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.690817][T28276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.690949][T28276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.769183][ T513] lo speed is unknown, defaulting to 1000 [ 1149.791941][ T513] lo speed is unknown, defaulting to 1000 [ 1150.784460][ T591] Bluetooth: MGMT ver 1.23 [ 1151.023078][ T584] xfrm0 speed is unknown, defaulting to 1000 [ 1151.500619][ T602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1152.237182][ T620] netlink: 'syz.1.6202': attribute type 29 has an invalid length. [ 1152.305418][ T584] lo speed is unknown, defaulting to 1000 [ 1152.321022][ T584] lo speed is unknown, defaulting to 1000 [ 1152.618696][ T634] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6205'. [ 1152.763695][T32606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.089895][T32606] veth0_vlan: entered promiscuous mode [ 1153.162879][T32606] veth1_vlan: entered promiscuous mode [ 1153.371367][ T645] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1153.460329][T32606] veth0_macvtap: entered promiscuous mode [ 1153.519662][T32606] veth1_macvtap: entered promiscuous mode [ 1153.609954][T32606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.731348][T32606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.876412][T11142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.878849][T11142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.883070][T11142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.973092][ T1172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.646919][T28294] IPVS: stop unused estimator thread 0... [ 1154.687602][ T670] pimreg: entered allmulticast mode [ 1154.768831][T28279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.777204][T28279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.986020][T28294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.986062][T28294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.111000][ T680] netlink: 'syz.6.6215': attribute type 29 has an invalid length. [ 1155.246885][ T680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6215'. [ 1155.478061][ T693] netlink: 'syz.3.6108': attribute type 29 has an invalid length. [ 1155.570855][ T696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6108'. [ 1156.108074][ T703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1156.108591][ T703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1156.273714][ T711] netlink: 'syz.6.6219': attribute type 4 has an invalid length. [ 1156.274253][ T711] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6219'. [ 1156.423783][ T714] ip6gre1: entered promiscuous mode [ 1156.429313][ T714] ip6gre1: entered allmulticast mode [ 1156.489815][ T721] netlink: 'syz.5.6223': attribute type 40 has an invalid length. [ 1156.509252][ T722] netlink: 'syz.5.6223': attribute type 4 has an invalid length. [ 1156.519164][ T724] netlink: 'syz.5.6223': attribute type 3 has an invalid length. [ 1156.638480][ T729] netlink: 'syz.6.6224': attribute type 1 has an invalid length. [ 1157.015630][ T738] netlink: 'syz.3.6226': attribute type 29 has an invalid length. [ 1157.285739][ T738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6226'. [ 1159.056963][ T792] FAULT_INJECTION: forcing a failure. [ 1159.056963][ T792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.070332][ T792] CPU: 0 UID: 0 PID: 792 Comm: syz.5.6235 Not tainted syzkaller #0 PREEMPT(full) [ 1159.070360][ T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.070375][ T792] Call Trace: [ 1159.070384][ T792] [ 1159.070394][ T792] dump_stack_lvl+0xe8/0x150 [ 1159.070432][ T792] should_fail_ex+0x410/0x560 [ 1159.070469][ T792] _copy_from_user+0x2d/0xb0 [ 1159.070491][ T792] ___sys_recvmsg+0x173/0x5a0 [ 1159.070521][ T792] ? __pfx____sys_recvmsg+0x10/0x10 [ 1159.070550][ T792] ? lock_acquire+0x115/0x350 [ 1159.070603][ T792] do_recvmmsg+0x31a/0x7f0 [ 1159.070636][ T792] ? __pfx_do_recvmmsg+0x10/0x10 [ 1159.070679][ T792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1159.070712][ T792] ? __fget_files+0x3a2/0x420 [ 1159.070753][ T792] __x64_sys_recvmmsg+0x198/0x250 [ 1159.070780][ T792] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1159.070818][ T792] do_syscall_64+0x166/0x520 [ 1159.070846][ T792] ? trace_irq_disable+0x3b/0x140 [ 1159.070868][ T792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.070891][ T792] ? clear_bhb_loop+0x70/0xc0 [ 1159.070919][ T792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.070942][ T792] RIP: 0033:0x7fe7ecf9e159 [ 1159.070963][ T792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.070983][ T792] RSP: 002b:00007fe7eb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1159.071007][ T792] RAX: ffffffffffffffda RBX: 00007fe7ed225fa0 RCX: 00007fe7ecf9e159 [ 1159.071023][ T792] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1159.071038][ T792] RBP: 00007fe7eb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.071055][ T792] R10: 000000000000f5ff R11: 0000000000000246 R12: 0000000000000002 [ 1159.071069][ T792] R13: 00007fe7ed226038 R14: 00007fe7ed225fa0 R15: 00007fff9e73fc08 [ 1159.071104][ T792] [ 1159.545705][ T798] netlink: 284 bytes leftover after parsing attributes in process `syz.6.6237'. [ 1159.559332][ T796] smc: removing ib device syz0 [ 1159.907665][ T796] smbdirect: ib_dev[syz0] removed [ 1160.560322][ T812] netlink: 'syz.3.6241': attribute type 29 has an invalid length. [ 1160.649356][ T814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6241'. [ 1161.454690][ T828] netlink: 'syz.5.6245': attribute type 1 has an invalid length. [ 1161.581965][ T832] netlink: 'syz.2.6244': attribute type 2 has an invalid length. [ 1161.933113][ T832] : entered promiscuous mode [ 1162.307917][ T833] veth7: entered allmulticast mode [ 1162.729429][ T845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6247'. [ 1163.188994][ T855] netlink: 'syz.5.6249': attribute type 1 has an invalid length. [ 1163.258933][ T853] netlink: 'syz.3.6250': attribute type 1 has an invalid length. [ 1163.348992][ T855] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1163.453744][ T777] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1163.583510][ T855] bond8: (slave syz_tun): Enslaving as a backup interface with an up link [ 1163.737357][ T865] netlink: 'syz.3.6252': attribute type 29 has an invalid length. [ 1163.830146][ T865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6252'. [ 1164.037901][ T871] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1164.300139][ T882] ip6t_ah: unknown flags 4 [ 1164.319989][ T882] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6255'. [ 1165.734686][T28276] IPVS: starting estimator thread 0... [ 1165.821925][ T930] netlink: 'syz.5.6264': attribute type 1 has an invalid length. [ 1165.831408][ T933] IPVS: using max 28 ests per chain, 67200 per kthread [ 1166.036966][ T942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6264'. [ 1166.200938][ T936] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1166.221900][ T936] bond9: (slave bond10): making interface the new active one [ 1166.239900][ T936] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1166.310254][ T941] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 1166.363483][ T942] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1166.374836][ T945] netlink: 'syz.3.6266': attribute type 29 has an invalid length. [ 1166.580829][ T954] netlink: 'syz.5.6267': attribute type 1 has an invalid length. [ 1167.997638][ T903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1169.112984][ T997] bond1 (unregistering): Released all slaves [ 1169.257570][ T1004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6280'. [ 1169.360063][T28294] nci: nci_rx_work: unknown MT 0x6 [ 1169.509653][ T1004] veth0_macvtap: left promiscuous mode [ 1169.939125][ T1036] netlink: 'syz.3.6284': attribute type 29 has an invalid length. [ 1170.048361][ T1044] netlink: 21 bytes leftover after parsing attributes in process `syz.5.6285'. [ 1170.058460][ T1044] netlink: 'syz.5.6285': attribute type 4 has an invalid length. [ 1170.147482][ T1051] netlink: 21 bytes leftover after parsing attributes in process `syz.5.6285'. [ 1170.164600][ T1052] netlink: 'syz.5.6285': attribute type 4 has an invalid length. [ 1172.091243][ T1003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.450411][ T1077] netlink: 'syz.5.6289': attribute type 1 has an invalid length. [ 1172.620678][ T1077] bond11: entered promiscuous mode [ 1172.640832][ T1077] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1172.689849][ T1087] ip6tnl1: entered allmulticast mode [ 1172.713192][T28279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1172.727392][T28279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1172.746856][ T6849] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1172.884757][ T1077] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1172.895487][ T1077] bond11: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1172.895526][ T1077] bond11: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1172.929737][ T1077] bond11: (slave xfrm1): making interface the new active one [ 1172.929781][ T1077] xfrm1: entered promiscuous mode [ 1172.960350][ T1077] xfrm1: left promiscuous mode [ 1173.115738][ T1115] netlink: 564 bytes leftover after parsing attributes in process `syz.2.6296'. [ 1173.158584][ T6851] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1173.254768][ T6851] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1173.498602][ T1127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1173.616622][ T1136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6302'. [ 1173.728985][ T1130] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6300'. [ 1173.740126][ T1130] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1173.758032][ T1134] netlink: 'syz.3.6301': attribute type 29 has an invalid length. [ 1174.004285][ T1134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1174.173589][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 1174.748431][ T1160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6309'. [ 1175.199286][ T1171] openvswitch: netlink: Missing valid actions attribute. [ 1175.206787][ T1171] openvswitch: netlink: Actions may not be safe on all matching packets [ 1175.207745][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6314'. [ 1175.207785][ T1174] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1175.308085][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6317'. [ 1175.317704][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6317'. [ 1175.341550][ T1173] lo speed is unknown, defaulting to 1000 [ 1175.349980][ T1173] lo speed is unknown, defaulting to 1000 [ 1175.647217][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6317'. [ 1175.647424][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6317'. [ 1176.618072][ T1228] FAULT_INJECTION: forcing a failure. [ 1176.618072][ T1228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.631734][ T1228] CPU: 0 UID: 0 PID: 1228 Comm: syz.1.6323 Not tainted syzkaller #0 PREEMPT(full) [ 1176.631765][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1176.631779][ T1228] Call Trace: [ 1176.631789][ T1228] [ 1176.631799][ T1228] dump_stack_lvl+0xe8/0x150 [ 1176.631837][ T1228] should_fail_ex+0x410/0x560 [ 1176.631876][ T1228] _copy_from_user+0x2d/0xb0 [ 1176.631899][ T1228] ___sys_recvmsg+0x173/0x5a0 [ 1176.631931][ T1228] ? __pfx____sys_recvmsg+0x10/0x10 [ 1176.631961][ T1228] ? lock_acquire+0x115/0x350 [ 1176.632016][ T1228] do_recvmmsg+0x31a/0x7f0 [ 1176.632049][ T1228] ? __pfx_do_recvmmsg+0x10/0x10 [ 1176.632084][ T1228] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1176.632117][ T1228] ? __fget_files+0x3a2/0x420 [ 1176.632156][ T1228] __x64_sys_recvmmsg+0x198/0x250 [ 1176.632183][ T1228] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1176.632219][ T1228] do_syscall_64+0x166/0x520 [ 1176.632247][ T1228] ? trace_irq_disable+0x3b/0x140 [ 1176.632268][ T1228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.632291][ T1228] ? clear_bhb_loop+0x70/0xc0 [ 1176.632319][ T1228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.632341][ T1228] RIP: 0033:0x7f7e0019e159 [ 1176.632361][ T1228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.632380][ T1228] RSP: 002b:00007f7e010cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1176.632411][ T1228] RAX: ffffffffffffffda RBX: 00007f7e00425fa0 RCX: 00007f7e0019e159 [ 1176.632427][ T1228] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1176.632442][ T1228] RBP: 00007f7e010cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.632456][ T1228] R10: 000000000000f5ff R11: 0000000000000246 R12: 0000000000000002 [ 1176.632470][ T1228] R13: 00007f7e00426038 R14: 00007f7e00425fa0 R15: 00007ffcbde58868 [ 1176.632505][ T1228] [ 1176.924648][ T1222] lo speed is unknown, defaulting to 1000 [ 1176.933912][ T1222] lo speed is unknown, defaulting to 1000 [ 1176.939754][ T1225] syzkaller1: entered promiscuous mode [ 1176.940661][ T1225] syzkaller1: entered allmulticast mode [ 1176.986917][ T1224] syzkaller1: entered promiscuous mode [ 1176.994768][ T1224] syzkaller1: entered allmulticast mode [ 1177.052322][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1177.211200][ T1239] netlink: 'syz.1.6327': attribute type 17 has an invalid length. [ 1178.909346][ T1271] FAULT_INJECTION: forcing a failure. [ 1178.909346][ T1271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.928976][ T1271] CPU: 0 UID: 0 PID: 1271 Comm: syz.3.6335 Not tainted syzkaller #0 PREEMPT(full) [ 1178.929005][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.929019][ T1271] Call Trace: [ 1178.929028][ T1271] [ 1178.929038][ T1271] dump_stack_lvl+0xe8/0x150 [ 1178.929074][ T1271] should_fail_ex+0x410/0x560 [ 1178.929110][ T1271] _copy_from_user+0x2d/0xb0 [ 1178.929133][ T1271] ___sys_recvmsg+0x173/0x5a0 [ 1178.929161][ T1271] ? __pfx____sys_recvmsg+0x10/0x10 [ 1178.929197][ T1271] ? lock_acquire+0x115/0x350 [ 1178.929247][ T1271] do_recvmmsg+0x31a/0x7f0 [ 1178.929279][ T1271] ? __pfx_do_recvmmsg+0x10/0x10 [ 1178.929313][ T1271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1178.929345][ T1271] ? __fget_files+0x3a2/0x420 [ 1178.929383][ T1271] __x64_sys_recvmmsg+0x198/0x250 [ 1178.929409][ T1271] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1178.929443][ T1271] do_syscall_64+0x166/0x520 [ 1178.929471][ T1271] ? trace_irq_disable+0x3b/0x140 [ 1178.929491][ T1271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.929513][ T1271] ? clear_bhb_loop+0x70/0xc0 [ 1178.929539][ T1271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.929578][ T1271] RIP: 0033:0x7ff9b459e159 [ 1178.929599][ T1271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.929620][ T1271] RSP: 002b:00007ff9b53c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1178.929647][ T1271] RAX: ffffffffffffffda RBX: 00007ff9b4825fa0 RCX: 00007ff9b459e159 [ 1178.929665][ T1271] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1178.929680][ T1271] RBP: 00007ff9b53c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.929695][ T1271] R10: 000000000000f5ff R11: 0000000000000246 R12: 0000000000000002 [ 1178.929710][ T1271] R13: 00007ff9b4826038 R14: 00007ff9b4825fa0 R15: 00007ffc57141398 [ 1178.929746][ T1271] [ 1179.196932][ T1252] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1179.583862][ T1289] syzkaller0: entered promiscuous mode [ 1179.589615][ T1289] syzkaller0: entered allmulticast mode [ 1179.711039][ T1293] __nla_validate_parse: 1 callbacks suppressed [ 1179.717630][ T1293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6340'. [ 1179.776625][ T32] INFO: task syz.0.5653:30395 blocked for more than 143 seconds. [ 1179.776672][ T32] Not tainted syzkaller #0 [ 1179.776702][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1179.776720][ T32] task:syz.0.5653 state:D stack:27328 pid:30395 tgid:30386 ppid:19471 task_flags:0x400140 flags:0x00080002 [ 1179.776797][ T32] Call Trace: [ 1179.776810][ T32] [ 1179.776829][ T32] __schedule+0x17d4/0x5820 [ 1179.776894][ T32] ? __pfx___schedule+0x10/0x10 [ 1179.776938][ T32] ? schedule+0x90/0x2b0 [ 1179.776973][ T32] schedule+0x164/0x2b0 [ 1179.777009][ T32] schedule_preempt_disabled+0x13/0x30 [ 1179.777041][ T32] __mutex_lock+0x7c1/0x1550 [ 1179.777082][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1179.777121][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1179.777154][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1179.777188][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 1179.777225][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 1179.777252][ T32] ? do_syscall_64+0x166/0x520 [ 1179.777285][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.777324][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1179.777361][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 1179.777524][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1179.777561][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1179.777604][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1179.777645][ T32] ? __nla_parse+0x40/0x60 [ 1179.777677][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1179.777716][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1179.777762][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1179.777808][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1179.777858][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1179.777894][ T32] ? security_capable+0x7e/0x2c0 [ 1179.777970][ T32] genl_rcv_msg+0x614/0x7a0 [ 1179.778014][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1179.778049][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1179.778095][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1179.778126][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1179.778165][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1179.778210][ T32] ? down_read+0x2be/0x330 [ 1179.778253][ T32] genl_rcv+0x28/0x40 [ 1179.778286][ T32] netlink_unicast+0x7bd/0x940 [ 1179.778325][ T32] netlink_sendmsg+0x813/0xb40 [ 1179.778366][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1179.778424][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1179.778463][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1179.778492][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1179.778529][ T32] ____sys_sendmsg+0x54e/0x850 [ 1179.778562][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1179.778600][ T32] ? import_iovec+0x73/0xa0 [ 1179.778654][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1179.778699][ T32] ? __lock_acquire+0x6df/0x2e50 [ 1179.778733][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1179.778770][ T32] ? futex_wait+0x2a2/0x390 [ 1179.778842][ T32] ? __fget_files+0x2a/0x420 [ 1179.778875][ T32] ? __fget_files+0x3a2/0x420 [ 1179.778923][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1179.778954][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1179.779007][ T32] do_syscall_64+0x166/0x520 [ 1179.779042][ T32] ? trace_irq_disable+0x3b/0x140 [ 1179.779070][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.779100][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1179.779133][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.779162][ T32] RIP: 0033:0x7f68f939e159 [ 1179.779189][ T32] RSP: 002b:00007f68f75f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.779223][ T32] RAX: ffffffffffffffda RBX: 00007f68f9626270 RCX: 00007f68f939e159 [ 1179.779245][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 1179.779266][ T32] RBP: 00007f68f9435024 R08: 0000000000000000 R09: 0000000000000000 [ 1179.779286][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.779305][ T32] R13: 00007f68f9626308 R14: 00007f68f9626270 R15: 00007ffec6689cc8 [ 1179.779346][ T32] [ 1179.779435][ T32] [ 1179.779435][ T32] Showing all locks held in the system: [ 1179.779453][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1179.779475][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1179.779581][ T32] locks held by getty/5374: 2, on CPU#1: [ 1179.779602][ T32] #0: ffff8880322200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1179.779689][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1179.779808][ T32] locks held by kworker/u8:43/28276: 2, on CPU#0: [ 1179.779830][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.779917][ T32] #1: ffffc90005b3fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.937603][ T32] locks held by kworker/u8:44/28277: 3, last CPU#1: [ 1179.937687][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.937882][ T32] #1: ffffc900066efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.938031][ T32] #2: ffff88804000c258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1179.938193][ T32] locks held by kworker/u8:48/28281: 4, last CPU#1: [ 1179.938241][ T32] #0: ffff88807ebf7940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.938386][ T32] #1: ffffc90005377c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.938546][ T32] #2: ffff88801b149440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1179.938737][ T32] #3: ffff8880312334b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1179.938898][ T32] locks held by kworker/u8:49/28282: 5, last CPU#1: [ 1179.938941][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.939147][ T32] #1: ffffc90005327c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1179.939299][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1179.939430][ T32] #3: ffffffff8ee38100 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 1179.939570][ T32] #4: ffffffff8ebff620 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1179.939744][ T32] locks held by kworker/u8:58/28292: 3, last CPU#1: [ 1179.939784][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1180.073672][ T32] #1: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1180.073832][ T32] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 1180.074041][ T32] locks held by syz.0.5653/30389: 2, on CPU#0: [ 1180.074086][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1180.074276][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1180.074432][ T32] locks held by syz.0.5653/30395: 2, on CPU#0: [ 1180.074475][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1180.075113][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1180.075299][ T32] locks held by syz-executor/32148: 2, last CPU#1: [ 1180.075341][ T32] #0: ffffffff8ee35b90 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1180.075509][ T32] #1: ffff88802a047678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1180.075691][ T32] locks held by syz.5.6340/1287: 1, last CPU#1: [ 1180.075732][ T32] #0: ffff888039280dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1180.075907][ T32] locks held by syz.6.6341/1290: 1, last CPU#1: [ 1180.075923][ T32] #0: ffff88804a5f69b8 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 1180.075978][ T32] locks held by syz.6.6341/1292: 2, last CPU#1: [ 1180.075994][ T32] #0: ffffffff8fa084c0 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 1180.076048][ T32] #1: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xaef/0x1c00 [ 1180.076133][ T32] locks held by syz.6.6341/1295: 1, on CPU#1: [ 1180.076178][ T32] #0: ffffffff8fa084c0 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 1180.076329][ T32] locks held by modprobe/1297: 1, last CPU#1: [ 1180.076366][ T32] #0: ffffffff8f4eeab8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1180.247399][ T32] [ 1180.247426][ T32] ============================================= [ 1180.247426][ T32] [ 1180.247461][ T32] NMI backtrace for cpu 1 [ 1180.247503][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1180.247557][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1180.247585][ T32] Call Trace: [ 1180.247610][ T32] [ 1180.247629][ T32] dump_stack_lvl+0xe8/0x150 [ 1180.247716][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1180.247773][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1180.247854][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1180.247915][ T32] sys_info+0x135/0x170 [ 1180.247961][ T32] watchdog+0xfd7/0x1030 [ 1180.248024][ T32] ? watchdog+0x1c7/0x1030 [ 1180.248081][ T32] kthread+0x38b/0x480 [ 1180.248133][ T32] ? __pfx_watchdog+0x10/0x10 [ 1180.248186][ T32] ? __pfx_kthread+0x10/0x10 [ 1180.248253][ T32] ret_from_fork+0x514/0xb70 [ 1180.248334][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1180.248407][ T32] ? __switch_to+0xc89/0x1420 [ 1180.248487][ T32] ? __pfx_kthread+0x10/0x10 [ 1180.248539][ T32] ret_from_fork_asm+0x1a/0x30 [ 1180.248649][ T32] [ 1180.249075][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1180.249131][ C0] NMI backtrace for cpu 0 [ 1180.249143][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1180.249161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1180.249172][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1180.249200][ C0] Code: e8 ae 83 56 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 4b c6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1180.249215][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1180.249229][ C0] RAX: 1ffffffff35a5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1180.249241][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1180.249252][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1180.249263][ C0] R10: dffffc0000000000 R11: ffffffff85712fa0 R12: dffffc0000000000 [ 1180.249276][ C0] R13: 0000000000000000 R14: ffffffff9ad2b020 R15: 0000000000000000 [ 1180.249287][ C0] FS: 0000000000000000(0000) GS:ffff888124ce0000(0000) knlGS:0000000000000000 [ 1180.249301][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1180.249312][ C0] CR2: 00007f34d6cccfe8 CR3: 0000000055ae2000 CR4: 00000000003526f0 [ 1180.249327][ C0] Call Trace: [ 1180.249333][ C0] [ 1180.249340][ C0] wait_for_lsr+0x184/0x2f0 [ 1180.249365][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1180.249387][ C0] serial8250_console_write+0xaa1/0x1200 [ 1180.249409][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1180.249434][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1180.249456][ C0] ? __schedule+0x17ea/0x5820 [ 1180.249482][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1180.249508][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1180.249531][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1180.249560][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1180.249581][ C0] nbcon_kthread_func+0x679/0x880 [ 1180.249600][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1180.249616][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1180.249636][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1180.249659][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1180.249684][ C0] kthread+0x38b/0x480 [ 1180.249699][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1180.249715][ C0] ? __pfx_kthread+0x10/0x10 [ 1180.249730][ C0] ret_from_fork+0x514/0xb70 [ 1180.249756][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1180.249781][ C0] ? __switch_to+0xc89/0x1420 [ 1180.249804][ C0] ? __pfx_kthread+0x10/0x10 [ 1180.249820][ C0] ret_from_fork_asm+0x1a/0x30 [ 1180.249852][ C0] [ 1180.293455][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1180.989973][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1180.999093][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.009166][ T32] Call Trace: [ 1181.012461][ T32] [ 1181.015406][ T32] vpanic+0x56d/0xa60 [ 1181.019414][ T32] ? __pfx___schedule+0x10/0x10 [ 1181.024285][ T32] ? __pfx_vpanic+0x10/0x10 [ 1181.028828][ T32] panic+0xc5/0xd0 [ 1181.032609][ T32] ? __pfx_panic+0x10/0x10 [ 1181.037048][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1181.042523][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1181.047911][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1181.054086][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1181.060279][ T32] watchdog+0x1030/0x1030 [ 1181.064667][ T32] ? watchdog+0x1c7/0x1030 [ 1181.069105][ T32] kthread+0x38b/0x480 [ 1181.073196][ T32] ? __pfx_watchdog+0x10/0x10 [ 1181.077886][ T32] ? __pfx_kthread+0x10/0x10 [ 1181.082494][ T32] ret_from_fork+0x514/0xb70 [ 1181.087128][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1181.092268][ T32] ? __switch_to+0xc89/0x1420 [ 1181.096990][ T32] ? __pfx_kthread+0x10/0x10 [ 1181.101587][ T32] ret_from_fork_asm+0x1a/0x30 [ 1181.106383][ T32] [ 1181.110016][ T32] Kernel Offset: disabled [ 1181.114378][ T32] Rebooting in 86400 seconds..