last executing test programs: 10.323080029s ago: executing program 4 (id=6385): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f00000001c0)={0x10001, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 9.15142335s ago: executing program 4 (id=6393): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000140)={@local, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000280)={@mcast1, @local, @empty, 0x2, 0x7, 0x5, 0x0, 0x7, 0x80000000, r11}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r13, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x1, {0x7a, 0x0, 0x0, 0x0, 0x9c12, 0x8081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.290540255s ago: executing program 4 (id=6410): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0x9, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010100000000000008fdfc0817100c000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xd}, 0x94) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x10002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x9, 0x0, 0x1, 0x2, 0x1}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1e, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc55a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xba2000, 0xbc, &(0x7f00000003c0)=""/188, 0x40f00, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x4, 0x4, 0x8, 0x2}, {0x3, 0x4, 0x7}, {0x2, 0x5, 0x1, 0x7}, {0x2, 0x4, 0xe, 0x5}], 0x10, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000005c0)={r3, r10}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8143, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.742415864s ago: executing program 4 (id=6436): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r0, 0x0, 0x0, 0x80800) (async) r3 = accept4(r0, 0x0, 0x0, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r5) r6 = socket(0x2, 0x3, 0xff) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x3, 0x1ff, 0x8, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x1ffe1, 0x7, 0x2}}) sendmmsg$inet(r6, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680), 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x4, [{@empty, 0x100}]}, @rr={0x7, 0x7, 0xb8, [@rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0x52, 0x1, 0xf, [{@remote, 0x8}]}, @timestamp={0x44, 0x20, 0x5c, 0x0, 0xc, [0x10000, 0xdcd, 0x6, 0x9, 0xa773, 0x9, 0xffff7fff]}, @ssrr={0x89, 0x7, 0x77, [@multicast1]}, @lsrr={0x83, 0x27, 0xf1, [@rand_addr=0x64010100, @broadcast, @loopback, @empty, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102]}]}}}], 0x80}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x2, 0x20044000) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 2.546670922s ago: executing program 3 (id=6439): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = epoll_create1(0x80000) sendmmsg$unix(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x400c880) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0x2}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x528, 0x318, 0x18c, 0x203, 0x318, 0x19030000, 0x458, 0x2e0, 0x2e0, 0x458, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x318, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x8, 0x1, 0x9, 0x3, 0x9, 0x5, 0xffffffff]}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000010401010000000000000000000000080a000200000000080100000005000100010000000800044069f90610"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r7], 0x7c}}, 0x0) getsockname$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x20) 2.532592193s ago: executing program 1 (id=6440): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f00000001c0)={0x10001, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.347915092s ago: executing program 3 (id=6442): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{r0}, &(0x7f0000000000), &(0x7f0000001a00)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x43f7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000dd0000000a0000000000000040c23ad61f2e410cced4d27e721ba68bd3a016f608c49c2aaa29e28459ad05c0808cd3710b1e81fe4e3eccae90af94ba569b053df2f04bce5161d60ef60919336812c31c502f7c7d703b13ac5bd429638a2b6cc8fae7af2d8a41b9fbbcb8857bb01910ba7f8c5a3b7fe1db8125355f2722f22a4a32042d965a8dc6eca00ea05d549766e9b9f6764e16ff62360edc59bac26305d0942c4ff2a2d1e72b7d36f396295912ebea7e3f1c3dc5d4d29d327bb0b470d551f8f079", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x5, 0x5}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x40) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000500000000000000000004000000000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x26e}, [@map_fd={0x18, 0x8, 0x1, 0x0, r8}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) 2.345565298s ago: executing program 1 (id=6443): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r1 = socket(0x11, 0x3, 0x0) bind$packet(r1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d2980dc18050e3580009f0001140000002f0600ac141414e000"], 0xdd12}], 0x1}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x80800) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000006c0)='ns/time_for_children\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006040)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000180)=0xfffff595, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xfffffffffffffe65, 0x0, 0x0, &(0x7f0000001940)=""/21, 0x15}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.269510785s ago: executing program 4 (id=6445): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10003) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.930536915s ago: executing program 1 (id=6447): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="6f3ca283bd809a67b64f2d172af6958ace41b8c6bac31a11f7ffe841e6074b311f2c6de520a076bd53694a7c83a345281de897f3e9451206f6bd16b1fce30bdf33b0041240fabd93a6f15be80dc63019ff030000a87c844cc2b198d400000000000100000000", @ANYRES8=r0], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8401000010000100feffffbf00dcdf25ac1414bb000000000000000000000000f9d4551b698e68844ac5d95514fe8800000000008aa5005c46abcc00000101000103", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8401000010000100feffffbf00dcdf25ac1414bb000000000000000000000000f9d4551b698e68844ac5d95514fe8800000000008aa5005c46abcc00000101000103", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) socketpair(0x27, 0x2, 0x4, &(0x7f0000000080)) (async) socketpair(0x27, 0x2, 0x4, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="720ba2d1d4952c79c8ad48ecb19a968adcae647ad105a11a961ef169f13950fc93c8db152b483105fdeb14cf4ae971a8652de82dface87b4d06c4074ce26bf85ea44de33e069a8ab03ed679cb121ceb26fae079156df7422c74cef9a6d5d1415439d6ab8efee430e51a9b98e5ba27b6445966f3daccc5f5d0239a764dc6ae0b1033265e0a92cd386d07d7b470fe036393d348d714911953def3bdc0f9a624a9d5a7ee4a43bb33ae2b8fa5c673a2c70a441813a25d5c1b171985f49cd804907ee563ec77ee07fe5c0d22eef34ee53b114010ba982b7aa713e8d4985be2664e0f0cbf2908aeb58219c", @ANYBLOB="100024bd5000fcdbdf25320000000800", @ANYRES32=r3, @ANYRES16=r1], 0x1c}}, 0x8005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20448b8}, 0x804) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000080)=0xffffff01, 0x4) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000340)) (async) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000340)=0x2c) r7 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r8, 0x8000}, {r5, 0x40c2}, {r5, 0x7303}], 0x3, 0x2) splice(r5, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r5, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) close(r8) (async) close(r8) close(r7) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r9, &(0x7f0000000180)=0x2, 0x12) (async) write$cgroup_int(r9, &(0x7f0000000180)=0x2, 0x12) socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000100)=0x30) splice(r5, 0x0, r7, 0x0, 0x1100000000f336, 0x0) (async) splice(r5, 0x0, r7, 0x0, 0x1100000000f336, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.768368729s ago: executing program 0 (id=6448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0xfffff000, 0xd5, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r7, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400017f2a3ef004d25501a47dd5c80160efc61bed1aef4a0bfe053db40484116f711c75b4cbe98868d912bd5cccc978fbc1d920fa2fd674be144535337992a69e2cb293d13570bae37c2b16e095bcd40f32b199806bdb6cc45d43d3060ebd72e004ffb0a86dd7b0487f0307fa28fe6c076ce722b30f00ce9cbab7795899e0", @ANYRESHEX=r6, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) 1.569433829s ago: executing program 4 (id=6449): unshare(0x2c000680) (async) unshare(0x2c000680) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0xfeb7}, {&(0x7f0000000480)="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", 0x137}, {0x0, 0x48}, {&(0x7f00000003c0)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000002540)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e356730bd5f16d03bd49200bb34d64d2a7b86ba5aef9f82143803c2eff377d13191b2201bbdcd953a6f40365c42d1dba0dbd4f199ab5447ff3d4a43c90cb5cebf0b33851e3e7e1d8fc9c23470ed8b99af94d0e2fa928c92ad57b8a411d39e08d6a347154ba5714dae3e3e5f6f2e634006b9bed44a08df2050dd90a4fab00e368fe552ebd1c3ec9884f7ced36521d94cb7462c54e1e6150445d75535d7777cdd4bd21cbebe7aa6c97866613122b8b938fc003f4e9196f75611c7c16e2354554fce9d84c21b7c1adcfdb51a1e3df4d167ca6c934564fef3929531eb1cc3ce256fb03fced3d8838def483c40a0d60b346848e8ce72ca24d3bbd9938ec7ae7be11631bccb7627edd71f7d0d4328d7dd1d264ae863bd7e272976ac6c56d3cce490e8863bfd04e3a100d02a589d2632ab53a3131a5e7770f33cd51ddc49374db0b9b9bb32fd4f5e41ca242a04f54cca872d1bbfe8c791d04ddec5b2974622f5fab7dc51888c804d84f360788a4102fe183976bc88ccf9f6640370aac22aef9c6817376031d9750943d8f71dadf79ee97f922cdf352353f67dc8caaaac0d995fde8723ec54021840fe07d7cdb5cf9cc0e1e7081366deff4c2347554fb2bdd5a5f04b9a42fbf8fb3a1f4a95692dc658f5c8ba3d2660538462b78bbf67870cfea19ba5d3ac585c20e16c64d44e929375705272072f3914ac5427e8f527b3f5e60440cdf319947f3620c53df87ffad5bdcc97d1ad678958a18653be882e6ff1ce896f29fab9f934ad1d8db2bb7f35a14180e31ea843b0ca26855d81278848e66006c77d10a4298d55d3c872b27feef422fc3556396d61baa441e87aa036fe5215eae3716b51171984e0f72e0a9a54980167dc47d247e832d76fdd0717a87c5d30f675e970800eb8d8a7b4094ddfeaf887227e43c803352373206d9bd83457f1c0abaf3e412802ca4192748b48947ce07e86db6826b8cd46fcaacd80b52f8669d1605eeabdab5a8c2aa4bd60e5838e021d041930525401c04304194f9b6309c2b10903ff4a22794c35485f5000a7365a62208ae85d29d8ad3e070670aabba3c86afced2fcdd93bf7c3170af1616b88f528aecd89ca0348d310dd281b5fb04169091221d7903afc4b741da130bc3d388e3fb35ad6e4574d4ea9ac012047fd5a52651fb642ced81284a2ba034cd963c8e9cc7b3b3fc5f9629c478aa7844c55feb692aeed5b97f638e7e2822907f7bd8a1729e3081a6c53c4d497ac1a6dda76e13864e5f8b4ce0e34ed267870bd217035a28fec5a28fc8566f629cbd489171a29224637dc37fefb007481b4fa81c5dd39a4bc47c8cafe29ff949a8f613a4ddfdaafd6793ea7b9bf355d8471ae3e093f708957e9a9d5a7466854728ea82e0bb7ae6dae852b5090843d76d986dd005d495aa8bc209b20de8f45dd42a31129fabcb4cfaa30a7aed4b12be0fe2c0ede3e608b30895cd3e54324b83b43f66e504124195e9b18fa57ccb60c341d2017bd847d869a5ec1cc5efe008e70be2ba95098334a372fcb593e833ca36e301610e56eea80dfc2b781bd7207fcbee8da9308648d59befe0d493e495a78a8cd1cc8aff4472bbc833a708ab3115eda7e3640a12667bf58a0990cf2c3a59871e2155ed5dd101822b94804a0f87ed86b72840998356a66a5a947596acd2602ccc9f24e9709060e4c1e7b8e159560b5b4c66a3f9ac8b43f4f8fafc9342c0533747581ad7bd49277dc07b2c110ff91f21cbd6188c5d6759ca18fcdd314ee25ff410c3687e60df6a025901cc8e353c5b7b0974722a544b53b1b446b6edc48d149877fb72e59be779d33467598de6791f8188bbbbcb3fdb4ca5c90e8379180adb0d2dff15743d3cf263652b4495cbbce864f38267fb3108e40379362c10681774cc3c90d8bba07de8dbc67aab3b6585be9e1753686cba112a2ebccafe74f96be0fcfd5f3cc0463ed72726dbb970331823d8985e528286035a024cea50210b5bf6cc2f81f76fcee5ee5ef0c0b6ff14a10f4321df335a6c337628d426f9ad3890b037b1575c0d30c0e542310d4871f543fb25a5761769afcf7bca0fb0bc7160bde589846ff62375852db693297b97587e0d9db109fff87e2b5cadcc200678f2f348f18852e1eaa361c182c8dd9e6dfaa551c291cd0cfaef02718e66d6c44c7ee644a397591c8e8828e59f7631d265cf64875d416d0f17c39892773bc752d529dacef7c9a39e9b5f36e4e22464acdeed7f8f23361782f62fb822cd4cb7e04e9e0e9455fd61526dcfc7b270c682e839f85c7549f66da377666cc9e27ed1f598867844ce80d8404c53c2c433c38a0952a745ee943b634541d288d4c1d8b581353c93dc64ab9ad92bca5e6d00ef69b04001144301aee91700f20289615ba6539e33dfd8f24483ed8a48144073534c42d1cdb75c9ec45b88e355055bd52305a12c079ccd88f7710117ae218b43fdb6b868a375ab8c6de8790989f07ab8bf24f8a7d2b1052cbe07f65dc980ae88424c6a16ffdf79ff1ac8ec64414acc1c173e734b3f5bd11d61b5b77c8a50e733761eb81ea38942910a3a53c91acb1cde9973c41426239bcfb65c45cc61ea1553f267d861ce48fb9acde12ffc03b900fcdf0295fac14c739fe79f96e2d69abb7bce1946168bf98a9ec96f8ba7b8237967b67c70adc70cf5ec4569533e5fdf3fa33b310aae9b391987fe4ad85fdc11a5f9cd893ca47f279f688e414703215c83521b9451d8837dc5ec3aec1d4a4cf224f8d0e612950b33af62e6361b79185876e1809287a5b87edadd4fdc07e2b924f27def45adefa89b7343fc3e52c13c3caeb35afe011bcf212d2d82b0dc76d4452a7465e649f4871b0824d72e4ed8c4c39941da0d645748ee784f6b7875240d49e1f4270bf162629140a882af3bf9a3a6b0172b5777d61c24268cfd295fb0698e3b817694791f664c061bf6e4329018dc8812c600015ec84f4881b008140a1c9233c14dd8b654c4f8be97e173f9dfca54173a84edafccd35dc53bc9d97d70909f130e046df39986e5472921529366c4fdcf9d21f7e6fd13cf9ec2ef9888e240114f6a375a548016d6f1577bc69cad88b6e09dc37028d803b50b828df2ed26f1a1eca689331747083ba09239f2cd6be85b867af531398065d2e61f28691f557275cdbfd7ed35ff0b2548bd5c20d19f693168c0fec785f9436b5fa6068647a569812a42efbe4342ed58f6ee05373112b368218f20ffc074bee688091440de8fd9d9079af0c425654a4a78d9ab11cc1457ed21d439abf97baa77d1b4fccff20cc75a034edc86df5a2c2280fcb003ca8bb7055bc378e89691cd88d74919ad9c9b338d87157fae7a0ae7b9c90041d501bcddcd98607f54ce141d44a646d92ede0fdfaace16554dd9130d1d2ae152084dc9b0eb713170ba247024d7cc7b9f3f0bb10a4d3f61a85b4ab018dfec7d5c625d9d0864ad1e21939f21e200ec4449e29ffe7cd1b27a6ba5a025dcbdb608619088e8e73d148b8d28caf91da3f71c605238e3f6e2e5254465bde138884b4ed6a5d9cc1c7f6bba054141735eeb654608357faeb10e2b354a3b6b0421e2d3ede84e8a6902ecd446d74097c6c0b34430db23827e05d861f2763295cba86d486f402fbaf6e750ba872d7769dee32528c7b5b2f486384a6b1119e79aa1171dbacef24f902e49750e5e4cdea1af7c594f02ac8c7a9fd0e27ac1aac2dc1eadd6adaf776885615fcdcf6123e406c2f95f093479b7f90e05bfc2c06b71b631a55eed29f6152781b68fc1f96ecc23f63834aa270bb1b8b657ec6ce7c5e9da8bbc2af3c25fd2d0238e92600561a9b913ff60619d85706d79303c25faf7d7e8631aa098ceb842c16a52930b36681a725b83a2f880e2df001888fb4c19f981c250de65cc186ff4b8fde1c67f061c2b63d1b0d74b3be65f871ade6beaa21459c2574a5042e00da4e2086492acefa572136fba2d6561e0d6747b0bee935d7aee889f0260457d23a98e6bd98c525724afb2fa9d8f8d71d85f852d6cb5109275627675032be285e887525db7a00a69d89ee0dd0c76c4c1553af4faaf74b8fe1c90208f077248553a", 0xbfa}, {0x0}, {0x0}, {0x0}], 0x6c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r1, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x10}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290100003e0000000200000000000000"], 0x18}, 0xc4) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x4008844) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r6, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r2], 0x68}}, 0x0) 1.319690426s ago: executing program 3 (id=6450): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff3f7a, 0x56}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "129849b38a1ce02b9dfe507541567402"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084881) (async) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff3f7a, 0x56}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "129849b38a1ce02b9dfe507541567402"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084881) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x2, 0x4, 0x0, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000500)=r5, 0x4) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000500)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x15, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1.182428517s ago: executing program 0 (id=6451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000404000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0xffffffffffffffb0, 0x8, 0x8af9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x74}}, 0x4000010) 1.069002026s ago: executing program 0 (id=6452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000c40)="e8e6e2a21806861c0a4f47d74b411ba2e1b2e173a6f4775693fc287581ecbfdd89a9577a95cdba2af8febf1d32ecccc8348ed031782bcd10dc78933c1ba259f4317667139f58efb7db9cf8195b382e7e89b4e66ef1c31dc32859386e8093f57f6b970f889d66bdbe098e2480600bc0b5f3bbb80591df571140a9f424dfb5276d2efa69c8c155d5f0cc37b27f829404fb70e70763c6b2449f251b6b833403a77639f9d11bff9b5c2d70462ad5045b085c161a31c14daba9333e423cdbd89afd19cb5676150f2a6b87b537f88dfe3df26867673e567d69ae0624e8bf185b1f6074a1964d84313a39e8f2565fde2cec19623853a9bfbcb0df8dab3a5a82ad567d950b5f453cf4014bbddf2668470c1f85302bc5206f358c2dc52d7b59e3c9df73e11a37013215e20d66f7a25207ada5c22641f1002da1b4b068828466d8ea3efa8d8818e9c1d97bb66df6e30e9b391d7245a1881703defbe63f8706346a3ce06492e554fc4b35805869f5cfd74c7370a2e820165ac52ee9e5430c14ca7c3ce9ef77016ce583656b7db8feaa498afad7c0f66f5579afd1ae21d753dc37e6b8987e7fd2646f3c67c36d7856578bfebc2abf77ff3743e67002377c2a349f131ae956d8b6894090543940ae058be1f931833d0c67afb971fe2dccda27648ef67ac4acd125471ee9147b41bf167833fe68667139fbe99c27df7c6a7fbd33a3f348ce83a2f0355b03365eb25e3c7f52577fb6e76856be350bca20e5103daa3f8a9e0c051d4def564f2ab1c1adbfdd1563a79d861a47e6f7d7b67e2d617a5c441c1dea290456c476fc6b6a995f7a2c6bca15a299aa67b7f2a84d97b6a33f4fb89d7634e55a2c842a300a6417f18ecedd80ac58834645c7c7a240add7eb661e455939334e2b927791f093e814dd42cc31fd6808b12306d29e5daf327c5a3092e7642d53cbf16cd7681807c065fd734cf6931fe7160733b8d260ff858795d18fc60b92b1aa2a0f0ebfe14c2dc0400a4fb4ff1fda9f49936f8fd170ac4a8058fab0c1af59f06b07d1777ac7d31e9912dae3108a7ebf1cb92dabe59c581b66db81fc680210dcab33cd049bc33ba9dac5e809a84f512b9abd22f6a9afe091f1a1785a2af27ccfb2becdd4453535a79b4835383ec890746d858c46d3b8d9b7e5957ef57083081228b1956b2812ef6720b7d93b7109374d6158ff8433ad4af7449ad5af18219237a509acf3e7a9995495caa896c5bcfb6510204df360bc3729446ce8b1a65f1f3a9d7e46f9dd854e13cf8db826f2fefc59901d92a532a544509761a8a51b3b6295393cef9377d965a0733d3f2d20829f996d7984da4613eeffec03a8b73273847afb5b2f0408e057ee7d65a9dc3a7c349aca416ad4edcb3171cd55d5cbf0e80e52a0b679f3f43dee64492ba185aa986f4f60c080804928e9aa71754ac19ca809fe9281286912a909d072be6680b893c188dce277b3749efbb7d40e64fc2391a529e123fdb24be2ef8e977c82718cad2f893761773ed272020fcf00d62cb202746299b4a3755a4ff999cd5dc97c5ed7f4420e124dbd4aa47c6f24535bcd843f8dd93e97b303bb925fa933c4ec2c2ecf08fa8e633fb7be078faa92400a3234d1c219b2ff779c1e117ee5e821824c5944e6398283751eb05bb3af8d2cd2d544dd2700b055948f109c3ea4cbc3cd73babed50cfdf02e97e00f8f09dfc2f6dca45467fac5f1a4b4e5aa2adf8ebbe128638bf6cbbfc223d245b5b843559baa02156dca602c42d25a68d6df0fb39a87d234f99932587354d6a226b94895db1306b2fd6461bb372999880a8ee61dbd6bdde184bf10314b54886997309fa2018471126a3dec97eba258ffa25e3cc223c3641bfe30efbd51b2ce23f72d70e7912c4420e59e9b9008d9f206a6909b22aae4e6b731c2911bc65f8912b36b60744e59327e6fb3a075db17e980864e57340c5d031cd56a2797608e5db39b24504aac1e161eaa9fbbb85b3885edf3af2bf2c87848fbc5462f9e3e454a54f8c8637a6617f3cf62570feb17ef9e30a0c2d367666744de7b2a8958b0d9c83c5b94833ea073e6954df57b16a9e415417a6324d38758bc999fba781b12e504711cd46f4c776d878882c6934906bc015893c987d10dc29d0112c75b7ebfe80500ac2677705c3fa20d968fd36e4806ccaf08c62c86d40933885297d1da40126fac760a7beac5749e5065febb6c614f5c69c086ad044cdebeed4704082d01bf8f2331142c9197efb34c2a50d1a53645a70b115c769b8816d6dc9034fe5b1089231bf05002116c6b808fc12f5512432f71321b84de1edace12c540f79083ec8e8c877c3d226599098095c2fe4c4a9413d93fa22abbcccd1daac44e33d61d309a0af7ef037f2bc9f52b4b6f27dfe342b4a09a4e9196c044e375cac4a4652138d43a43ad0fe727c233eb846b5568200cb3955b9c04c8472acca1b59d4883de5561a21dd124f665ddba8d8e5bb96c7792af0315ef02bc90cec3c6cc6ebc4817bf246c5c0b4257b3a4e3067b281278b0124ef8a13f50f13b3ecffa61e3a38cc49ddfe7db3e11a6ee7db0ad88f04d5cc27ff5f71ad7569937cbeed82a4731bd7d903495122104db49af4ff42cb8a8314b005c27650340c7c6186924ade65ca944fa0de7cec55af151af8ec9d441f1ef3684a9112daad76ec07d494c044fd161a067cc980962bb27e0a34ce17d022c8e7b25458e2fe5b8004629fd247fc5b2bc9efd6336d16d12114df9113e8f62e9c4dff722a0b0888b25290fb0ad5c0e0142a643cbc65406ae05e51a7662e57e651a41382155c0910443f484c650c0ee93ecc8af6a67317fec4f746641eb4c555901de17da4e96cdfc17bfde26b553d48b57abbddd03fbde527d23a8c29328237ea760065d550c1fdea9be1be8c281a5b16b288adb8b5435c28f91ae246448565eba35a9b220613f63e42d4739494d4368696fa8836714ee46a310a452765af0da7bc43a918c28dba9d5e90b4d5006f41326f033055cd48c7bb12406bb77bb3cbacbf14bc7bdf095f1e1c55ae2171b6b12cc3049f456883725c134351c9ab2030a3ec2f0c33559900fc073be623929820a5a903bb569c04311499736dd4a4ecf9758f3e3a56f482de3ae9a63cfeecfc36144d5691a3d91018b9d929590406e8b631486d6b5fde2d9e4cde0b42d3ba2dc0ee806d0c4a9d1feb46addfd045c13bf3bde80db88a9095b3bb91c92110539802c77317821d23e9a4d27e0b50972257ab46f9a5f5e78528d7513c1071e8c58cd899fe03541a1021c07056cf2066c2ed60dd277dc20362758fd0ab95e4fda0290da3d10964bd0f28636c9c2e8d5c7a506afdffc1eab995616abd772d46b1fe41639f23ae8a7ee976a335d7acd11c878186cc4393e2ca69b257db6f0f3001c5b5fc87e68d133a3fc013be05e76086b0769c7d54b25400e2ddfd15d8c220d46e1e3c088cef685d5575e6c5870c2b28ef2d1b3565aec631a6c010bd862005a8a31ab79dc5301cb7334a31f355d282ca32fc0b398c97e7a48e7686f4b1adbe1958f40ec037b526fbf609d00c4712c95aa3ece6b8a0d4c5ef38e8afefb93da228321c57cd9dbe31259171c6c89b22ed1a06822440b6e5419d25bcabf77379062668026bd5ab26526b37e01925a2e3769030abde7cad8028b01320760fb893343c75bc1c2d681e24351b614a77271fb4a9c305c91b854ebe5e29eee9df6a7e99d289b305e5b9dda22a777a993ce7f3468944262be99f9983eb30e7613f178638f936d2a83944f14ca80dc5eb40f6515584973b919fd271bf295e360e5692897c055ae6fd2377dce8c55fc7483e101df986737bb5e85c26082adb101345663bd13b88206f8a389604937a7e7b32fde1d7816c6eb776b271abebb082584e4904040480f428de3e1bed503800d29a38136759498997eaff33f87c94f6f5e7483d366bf2d4929fbc5c3b51f37a0d3953270257153b91d6fbd80535a87facb06ec821da064ca6719748992aad3e667520cc7d1d0f1e33b43316763098c63ce730e5b730bdf19a5ee9a9dab5d00e7713df98e8f5687979f43b10a8b4dacf2cec4048200841c5cd3c33176bd247ceb157eabb15bc2a3509ff8bafc527434edbd55d69dc0c061cb029ecf3a3940d0157b80e47fcfbd697bfdfb716f4bf2d8da696e6eb5f05ad94df6299473ece41b1a29a851fd5f655c5e4fce562968e36ca74bf5b66cfe7d7e71ae996d694e1a18e55eae2375868bd1efcb32e2b507e55d259ea422df3ad3758e6adf3c5bbebbbc4306e35b98ac48b1d717d80922cc02e3516ab6c58e7d567859214da57914df27bcc8ce3735615890e09f84e828de2220427836968dfb561ccd95707088f487fea62f292f19264d6118623198efd27a134232822dee5c6011dee7b795a026c3a68d273f9fa406b2da4aa3b33af9913ae7fee305171b12b01c03707b27c364a36a197b80f2d62369a7616842174b4819ef3c624d0f0d17dbe960aa515ee1afd175c747ec8d3fa0cb7e4896dba05a3c6c48301105b327472b7e2c517fddb4c00106804cda69b95120b66a064b147a558ad2b910d191ee26fb95bab9eda878d1e08d0076ca291e0041e03c0ba731ab1d5d902cd7d711b208f4b655831a46ad36e344113403b97b28ad8d8e8c92fb2ef0a21ba2ac2e7b1bed5bb7840e94a79677c97666336c965df6b412d6dee4ae2826c6e05b122c8c4aeee45f898428e43260850ad47157530fa3c1429339bd8b2f43fcad828bbf6a7062358feefb44f06df352883ce6b3b9a382f5fa908edbf61d6976330501aa13056334fb03466876f018c8daba9415763d8c666a3a722efc7a1eec9d352067030f7687330f7bdccca9f61bff578e6f14e0de09bf25a3dbb9c1ea3b34443a5548004b7fe5243630794cb73c53b96d0a93427ecec21e70038969016df3d444515d6a3d6e7c8a2d37c1d29fd175e837bb82edb1c94b34b374e9fbed06cd4a554c68eadf610ce2dbdae16aeced720bacbb57e16f726fb350f489919f0fbeae80a3b8a9d501fa84b82105e7130cbc454afe2cda8149b9075264be0f79e470c25ce9d895db7525c06f4c4dfc423fab3e0a35a112d6bfd32abb66deeb18bdaaa87894368ee31850ac7375184aeaff40b365e65816b8130ca6c60566bc70d7a4f3f3ac4136fafa4f1cde33540afc9132fbd338e0755ef4149a872e915412390b53f12ba37193a934ffaae3b6f0021c92cd5e5081295dd79f964113cc9e23095e32d9bb5d7141f0e8a7dc397cdf8591c95c84daf94eb325ca89d8712a0a869e3a37bf8526a6f39ad1339998c7ee0c6c866e55372880d3e4cfe4cc458309ec8e0dd83547c99ac99b29f686115598cc62cd1436e28c08b65daaa2be7b341dd7341d83115fe29e0dee9fc1332ea94a92a58f0b89ea5c09c98c6c01cfcc9b5a71e5c5cc17dcec52d6160473f5fbdd8fef06e4e78c8607d9d6bbb13068a1f86a5ad36b82161be8aa068c145744021314cf5ccfdfac310f5e3b70a7dd3e6fa409ec06a2ede2e102467170971a3b6d9bde85e73ed75f890a38eb0cd12d008c5c7bd1dded45275f83ce59bd7d99c36c60f1da1d0e7daa443a4633d53d6dbd3612f9ecaf9f1e8dc9c0e35eecc69bda3181c0f0ab4545e5925fe0673b807683d257e656b896ca0797df5c83ae2910f24e6143d36059cf4d35c2b30c5dd444619512e5daaaa1a6d658479e0807f44ac198ee7925ece59b484a27a8a388c1cdd23fd340d401a6086a7ee3d7889b81e1d337c7ec592aee8b8ea5a1616dd00c0fc4bc98", 0x1000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x6, 0x4, 0x64, 0x5}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x1000000}, 0x14}, 0x1, 0xff07}, 0x2000000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40040) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000002c0)={0x1, 0xffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20) 1.060985073s ago: executing program 3 (id=6453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) unshare(0x20400) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008001}, 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000015c0)={0x1, 0x207, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x2}, @generic={0x6, 0x1000, "6858a1e98f7c11b5789d3bb4a3569692e2a6d919f5f4025261351cffb8d6ea043ccf8678e8ec84eac630fbb4c8f9df15b1fc632585bed5ef42bfc2c0d578b96b379b84981673506839eb481f2bd6ba19bf6e11824b748f8d970cb212a2c74957a14917a22a8ccd5d527d6c7503773982bec5e81b9c47b27b9193c4550ef2cf79c2ad411f9b353be7f0a4933809be80420c86b818dcf7f0b1c078abee11c995c0a0e75e798de01fca6f6dcf9685bb5f6bd5f55c54b1c7a7e4c8ed5b500b1c35a050efe158467baebc858f2e7650e410f8baaab0d8e9519e4b2738b90c1a65842fa889cbed1f1c3bfdb60fdbf0355edfc25eb1c356f8b7a0dfa9da68947e2d068aad2650128e62537fa14fc8334c970034e88c75ec654e5049ef661c94c92f20b62e22d22a793f06f1c5fc86758957cbb9808f238954b4bc6bdebb2a0e0394d67bba52732714a3606a5453453e9f5ef8054f6a2120c985138f18220bfee7e528dd453f1bea60d384fe5cbfde925511d279378c9a121a4784eb8e26b3a210e9c9d0e590e4fcd0000ec83abb3140ccdee39bbff76400a4dc0aee426d95611e01e1726f9ad0788cf2f9385e71575f8e6cb5ed82e2d262c2848766ba83095a87637792aee65a16a97f211a26c63b728b49fd86830ec2ee5712e9ad5c8baa6bec8f612e446845e69b53cfe648b3a791d7510183146155c839109c105034e16b73994f9fb4267d7f335d8596e9dc16c2ca34e0f88f070e93825e51afdb81ae99ee545a161a7344e7334579eedc434f706f03dac83cfa171d69d28c1358b02ece3eb974ae82365d6c4b0450903efd9f0b759857a7b18b13e04ebc8ff263383d6964141a615df053b19dda3b8b2d53d7af557d770a841e5910df6326e53479be96683f160f48bd0483ff9f324a1b89da7b9befff7acc49b66abaa6f05187fd7c06b9854a1a3643907b73f44543da8a8dc138d91aa1e1811d1ced1c8091441084fa27d7c356369985fcee8fe1dae326f80dd1c1e636589601f65d5bfbb3adea1b49645bc3bf33c42e5d2493f9d951f0c4b3296cd26db4fd8122de8b058f5ef4a2b85a6d11a26b73dbe3a959da0b7d20ca6727d3042495117b2e47db424d83452c21deffd531e7705f540e301ad63f09f7ff7eff4d14c0cb4b2e38d291a126955069d5f333825207e8373aa5d0432234a1632c1e7bd35f458c5524ece3f96aa6911d387c2205ce019ea243a23c31422c6b8a00644903eed3ddb8ffed242af249e8a1df7533a62c5648d24fe555ebe1baee48ee34f8969e6b475937bc0a11054697dd10726ab9cd4070ca0d1b1145a4cd3b1b65b28b99845864590087845d66e68874a760b75fe1fc6b7def711bdc5023a2d90cfa51fae3d1ac9f44727a6f0097c908f69b91cbc63d92d2f76c23356edf2be72847f682b798c5d33a2e823b47e751e2b50bde410884760e15d8c46301b65331250f5a94843dd59d6730bf948e877a51ca9f66b30af02824ae68f56814bfb7b76bdc865840a95eb766f8dd7762e974e38fdf2d927d06b2e68107b8d955ce2628bbd77747e4a8d02147d6b52178049f15fd7bbe30f9ddc5c0b3a982cdd681695c521974b10cdc952000945217b2f1c55adf5a7b647633ba10fe79db006d41ba57a5b93e70a14474b2a5dcf8ae9c0f882c0162e37bccfcd8925d884c480ea5520d75671a1c45e020bf879d0e747de236a0308014e98ad80901343b13b2b13e95def11f6a3b7d3b0d4ae116564f550fb90b1922099ab8e754ab3f77bd96f9da1265f7f6165e147ca74d78e8bdab33eae6e46d72612dc6471339c87f725dc6d4a889bccfadbfc225a0632a9569097486b17b08e866912d093ac32c480ba3bb87944c12b0d5be4a0ce78680a91ba3532f081c122e9bb91c6f07824b60d22e67269d9e4f614de28ffe289072879717cef7868195cd7ae2babf8b797b22e13341426bc6e8029f5342750b0c9bf6f7061202a3475c284a5c226c30a4501b6b9121aaf044592c6f3b2fc261f3e38f1a0296beaa8f4bd83c9078897bae5775201be23e73b44b7d3543c05952fc7f4182b7efa0c38a89986ce81ee3826361c4ce50a0e96c3705798302bc679109ef586505fc99df745325c59792c50d5d30370238094357a84012b8a80600408c674988c3dd91b723d762afe39e8547b5688a2d62796e064c96f80ce6852aa013c04dddd9434e484fe9732f8ebc2ea390d54571b92c175fbd755ae34963daa97e36a7b80b3a848f8be8a47c9bfcdddedef2a4df89827e17316309b05351e24241b1ce9b1915b90952a92ea35666050c3d6837ea99cd2128ab91f061fe20905df3a93bb770babc9436654fb5a9446b99b975905f0bc5caba0e24e2808b058024979c2d92ce7a958d7f2486beec42e2a9e3fb9b696fd0bce66567c220203948abc3850d96981f8254702f09ae2f20861905a6020e583958fd16a4fe4a79c4b40383f8b3db814166434b9280ddfa3577788f82ca59d346b6f1852e929566db0778b23a28e59e489170580a238d85a4de939e14b49296682f9e2d8af17ff5c4be44ce5276ffab44b00e36ccaae196bf8f2cd54fd3ff8e17d92d3a6e54afadcaca7984a72b94c7c8e62279e07ff49c31b886e8f5f33eb2e64dea8782fe029018a32a57c7af501274696284a4c536769a651b0bc0232b61eebe42c52257ee667b076937d3d1405f1f7e9d3194f7818f085a538a3cb5de73f74f08a7e63b0effb52bf11a639033b23bcee6cc3cc09b9dfa0d0370f76e5cfaf41733dde172684dea6b721c6a92b23867573e7b33e1a5dbe0c4c126e66740d7db8b483c72cf5df0a42b93b4fc9e08215adca0593eee5a6ce6f558549e6345fc2b31ab9c7701bc0dbc976a5b1f9dcdef91f1463c5d6a230ef057b5cf285a44c8ddbb46bcd540674edef6db12e0966c81372cba28c5f7da9ed84722a69221c7a094b1e713af50ad9efe50991b2db4d8fb28f74e815f34ec4273d727a9bca9649e0a1f8e638b9827fb9c7244ee327db61b439e70c2ea31e2a1155f5893e1f412c9817ab5f97db0acbca13b79db589efc6fb0360e2c3951e6ab941e983e7c458a6d767f3c128c7841e569b2d88a32f4c118f787dbf04c63d60adc940ae4be421ab63052ff4ad6ec13ed7f3c4eb43e938872b3fd6add0c84c8cf53f7a9da53552b80599003d06b94e0c56b3eb76b619dd7fb9470c1ae8c2878a25c3ee508455ba9ceec15eac43bbf7960ed0b8df4813131c092b9b1cf2335edfeef667a65f7890d9eac7757adfe7e8b5c579b1b3bdcbef3644a312c76c5837087d5f7fc8114eeefa6d934435e270f719e52dcca1a5a6ea30806d7fc79948d4be31576df1ce686881fb2197c7c13f59bc749eb8a62d2a248ac307b779987191dccd92f1059a2c4141f4be2cbfbb46927a6605a2eaa0ae1a0567990b182a35f476b4cce10c8ae582c1448dd707d81e9ffb0750ea3406a110c535399f81c918115729def9ace7d70a7a765e20f5def4ff4efad07ebd1940e558f1f92d7a4100d63ad529a480fd86af57630f6c38c34faea44d7bd2e7cac94b44bfef7c198c7ed23e81fbfc8f4214010cf4b9d18a7e99a282ecd4d584898790de49dd3e12685d75c746df07b8563de2c26d8c59692418c83d86a6282e4f8a9c174f6eaf38a8fa45a6c2118c101a21d96cfef936e9f45237414b368acf91f1d104a827a8d824c817b5894aa30697e9f6bce3ab174747b509b087a80d2feb9b4761910f855dae736038b1fffbbb2bc176a256776374dd9ee67fcc3b542f1f00f464c4c050a91f28e07ffed8200c1ccd181340861a361d251fe45bbe6e93e7d8754550c975ed0b16d2b72889db860e9ceb01772e2fc84b5b97cb2e4e2ddcd4c348cea46d6a4f98fd1f00a4e069acdc5a6d8d609d58b5554bcca05e9cb75a0add4d9a5ac3e22fddd1ba57f6270fcabc137012bca3b094e1109d28d9af849fae8e2590857278d640bc0a405c2d732178ab32f3e379d1eb81398c5dbb0bca5ba18eb50df2442a3a317095cd7cf133dd63a24291b05faba5f1e6f69c6aad984239f7a182a3fb041fac7bec5d0539871f254c9ecfd5f6c3fc941c6e26963219fb29baf5ffd88ec8198aa684f8b6ef4e6c988c752229167a6545972935b263a3a9871b07bb45693ecfdd049753cf3bf3657dfdfb620808f6332a1642c5adcb89c5b2f6fd9880c05db38ee1d3413bc9a02d0c405a6066f881472c54c34745e13ff8b02327be092ea7b849dd38556e2f53c80916054d7cd12d15862b67750647db1a4ae65fd5166ba572fb49c2716d3f99424f9dae922831dbca3e6dccb1b8d06b066bcce8a55c4c3579bcf267b707d35c6c76b908abfeb66857db3ffaf520caea8c625e0424fd10f412ec577461875f9cc7d240d6181d5e7ced89d014e3494fd8fe96aee6f2812c692824c4257898573cda564b04964c758582b94f0ec931eabe0096b62ae89d04193c4a19d3a4f5adfa60290c7d537c31f7fc2252e41b9edf0d9de72493c490d85f135f9b3deb473e73cdcb507806a47c5323221455e29a5a0b85674f02a389a0e12b0b31dbcc1040c221afa9b3e143a817956888a25ae948e99bc843b1fb7ffc463fba9c9d8547319c5bca26c57e256ca37547205cf480b24e62c90d7ada0ddd8a3c4e66ab665d2653e7d76309a05b30a1b2a80b2e1e2fcbd3811ac4e30f5bae2ee6d10114f53b846679a356ce5fc37c1470c544bd860535b0212fbf77ad0958f5f144ea309fe58a77c6e6cfdb74c255d6496ea8f7d2fe4eb9a7a52feb30ec0f8e4abf34381b0a490a851206c1a3a641b14a38b1fd0f281cf6db687bdb9a08b55bc63ec38f5af6a50c26bbd9ba0e526eef9a75c6778eb0cff99bfeee0a6fa7a66c296cc810510cc2ac713039c644143c7e410a56279898df80bdc56ce32bf1a89bffaf0e715b2c116920d1f61ed89a5d9d85377958620e2a3bebdca5a98c600bb1924bfd71594a37a572283d75db11ea519bc6e3c24fe8faeb1376c1d20ae7643c8089ee841c208417bc60c46f82d30400a442813c4921e6fc06eed4fb8a70a8e430a48b5c69e7dff8efc1753549f7ece54b3ba4586ad66b7d169ccb04d78e6b345e5dfdaa1ba568fdc94734fcf47e267e8c2cbc6f46d7b094c2ad46a4f1e077d8c193212a65029780f93543b20362c7c9bcb88be5f0eb755f7651faac2defebbb7e4ca07904d274896d946117ca40610d270629b8b025d1316e84cffeb72f4671cbe1fa37feee4d87dbdcc4f627ce1483f60981ab59a0e5c14320273c57608d54a3152fdecfffc5b9d6f8ca032f91873b453eadd7a335ea220fe70ceeabeca399e7af0b1e5e0ff89a64f84a0925ce5807e3f52009003857c58ca6bbf206a3610db12704df098e6cb8b663eec886873a976e94dfd11e763c198f0b7367f923c42f0be62e5d4c99f408abb092b64f32884e5cb956d645a2c17bb1337360a5464e1c9fd7d929afac72c7373d52493a4431e07b8eaae23acdf3dbc6d6c20f0ac1f862bce2d822cc6d3ba87c25b6f6f022922a70dcb14f4a30e6189bce18530da191ae9acdcd81217541ef02cd205a7faa046c80b2fa368e3a92a5a92d1c1e21234662520146c9ae3a9da8283e6034b10cf59fd074e9cd363da7e52cfbb805e2274c6f432a419cb5a2bb7ad349e1cad29921d79d65023ef6dce6a11252d4641be4ed4d6a08cdf8ce484210edd9910b311acc3e0fae1699df1e0984894302b9a0cc3a8164bc058115d2e4c8f5c67d00163321a208075e9d67e90f2a7e23570aca3f133a466d063afd3"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0xfff7, [0x8000000000000001, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x8001}]}, 0x1048) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xfff6, 0x1, @mcast2={0xff, 0x3}}, 0x68) (async) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000070000000900010073797a30000000002c000000180a03000000000000000000070000090c00054000000000000000010900010073797a0700000000000000001100010000000000000000000200000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) (async) r8 = socket$key(0xf, 0x3, 0x2) setsockopt(r8, 0xcd, 0x10000, &(0x7f0000000200)="3a8fc13f473b6af56a933f500b3d1c3be1ef077d0a0552f5f3ebecbe57d26618d6f871dd0ffba68b1b563f31dd2539bb35b5edfe03b62852332d752c5b771798245827a1b7db4acaacf07f8e727aa6d423826523e19d98c6da581d5dd02d46ad6858d6e1417ec89190d749150f028b7bbfd285de117c42e6ff85d559e2f013d34e28ce02edda99d304799402f2d87dfa6183cb0fa0e0bb6acdfbc27e6d1be2e87d793c075ece4c8b83255f2911390d674c9af17e510a145e9c50a2f63f2cea127b40b069716670161965f70594b627ff2c66dfc3df8b0453c65d98173d33de8d32d540d0b31423840aa78b73c53961dd883e363a7db399a0", 0xf8) 915.034452ms ago: executing program 1 (id=6455): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) vmsplice(r2, &(0x7f0000000e00)=[{&(0x7f00000005c0)="ff37e88520c0e8cb5c5afc46ad871b9784369d8a3d74838bf3fd8278c638814b6afd6aaa1be9cf7ef8fac0f007744dd5141c7ed5ee33c0b528f281a6f77833544b02513b82843d80e81c06ee7294b003361a17daf7f6430dd6dc8e982269f5a8f512c8f9c98537695c5b6d2975b2e69d517261fb6d8d8d669a3e537197506325deac14dd1c9b286cf80a40725649ed3ac99e29edf90a55eeeed96672", 0x9c}, {&(0x7f0000000a00)="7cd7b9394eedcdb70ea4a68e14e754f8f32fe4af15d6c011cd4de9fca422b534593b42691db20fa8e50850c22b172a3f9efd11561a990830286ea494a5baba2c694d56f795097fc5232f16604a113657caf0bdfd914dbdcf268a8af0d6f88c3745a87b9e6c", 0x65}, {&(0x7f0000000a80)="df955b1ef89927ad236a3eb60886c12963d4899096737c4c014fdd0d54a6729d2a7067db46b876e7e806b6dd8740e6e3936584b941b8be00958895685d57631bbe53bfba1d74329a3748574678471c907c0bb693ba64e8483542de020ffc711079412356ddc175c2c5a27c16398e3d94b3f9cd7fb7f8332c51e6db5a56f57d3560436a74d4dd31", 0x87}, {&(0x7f0000000b40)="ca6a954b153d0b26932b0ad9799251dad511a4a6e2f77e0c9aa6833e8d7720d11e5141b054135d143f6c4dcf764d32593ea628b5bb820ecfe357fc28e273914188bf69be196bf291a140a2b92cd834b7146c24a0e3a3c02395b688b4df253c1ef91b1214a71c1927c0e72b0c6cbfab52", 0x70}, {&(0x7f0000000bc0)="8d3c81399ba63896bc6fedc9a7cc697091bbd7843201c624d13d", 0x1a}, {&(0x7f0000000c00)="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", 0xfa}, {&(0x7f0000000d00)="c9280c11ea1c803aa0dfd5f42cde4e10dc77bb5042a1be5d03b6186191e13927118894302df38e45c9322091204b14e6b512e620bd2faa5f7263d0d733d6d5bfdf1bd6e93915b5af8b7e5fd44f46ec6c6e38d8263a63286293bd76679f70bc8e81cfa97a3410b321aa6d6b520a5493fe2bc7e4a093681807f1211167fb76452cdb91d7d5c208aca574861d0de2859ee749cd75f63b4d09aa05a2dcbbe7e586e6bfbfa76e01ad7bac6231f1b278f43faff9d8ea49d3a5595b9bb73d383962152c07f97bfe122f91eca46486c1f7331f1f39781ca7ebb0f242f2abf627dced107ef74076e486a8492575de2b400d4768473a", 0xf1}], 0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) recvmsg$qrtr(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x88010}], 0x1, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@delchain={0x48, 0x65, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x6, 0x1}, {0x4, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x48}}, 0x9000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x7d, &(0x7f00000004c0)={r5, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002a00)={{0x0, 0x101, 0x9, 0x1, 0xfffffffffffffffd, 0xb1fc, 0x0, 0x3, 0x1, 0x1003, 0x5, 0x100000000, 0xc, 0xbb, 0x4000000000001}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001a00)={r6, r7, "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", "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"}) r8 = accept(r4, &(0x7f0000000180)=@ieee802154={0x24, @long}, &(0x7f0000000200)=0x80) setsockopt$inet_int(r8, 0x0, 0x2, &(0x7f0000000280)=0x7, 0x4) 876.687027ms ago: executing program 2 (id=6456): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x2564f36f52a6cf73) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffb}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) 829.16012ms ago: executing program 3 (id=6457): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x10002000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x60, r7, 0x1, 0x270bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7de}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaa8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x28) poll(&(0x7f0000000080)=[{r11, 0x408}], 0x1, 0x40000400) shutdown(r11, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r10, 0x2f, 0x4, 0x7, 0x8, 0x12, @local, @mcast2, 0x7, 0x10, 0x1, 0xac}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4}]}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x1000000, 0x8, 0x2b6}, {0x6, 0x7, 0x4e}, {0x3, 0x8, 0xd83}, {0x1, 0x1000, 0x5}, {0x1, 0x3, 0x2}, {0x2, 0xffff, 0x4}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x60]}}, &(0x7f0000000f40)=""/4089, 0x88, 0xff9, 0x8, 0x80000}, 0x28) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r12}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 783.085333ms ago: executing program 0 (id=6458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB="143aacf667a9a7545bc21018be9c3cc850b279058957c7f0386bcf512f755b557decf8cb69580a2493b0672d4e3b70efce7f6deedbadc8e579221b09d6eead40dc8d05adb986f187c71a1271487e5913850a4c914f761f8b10cee989bd007e510b3c2b476f9d5f382777dd02330aa6b956a39f992fc8328abc3de317559451d918746bd77e36"], 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="000000000000000020001280080001007369740014000280080014000f00000008000100d4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000002000000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000050000000b500feff000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d155054e154364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a962"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 736.080299ms ago: executing program 1 (id=6459): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10003) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 642.238686ms ago: executing program 1 (id=6460): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001b80)=""/4090, 0x0, 0xffa, 0xa}, 0x28) r0 = socket$nl_crypto(0x10, 0x3, 0x15) read(r0, &(0x7f0000000000)=""/65, 0x41) 522.580131ms ago: executing program 2 (id=6461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}}, 0x4000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x68}, 0x1, 0x0, 0x0, 0x2484d1b5769fd4e0}, 0x4000051) 460.375048ms ago: executing program 0 (id=6462): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8121}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095", @ANYBLOB="90b315da3f93e81e877103e4c5aaf0a5bf306148f60ce13ca8846776481128eeb724319c731d4b2b619bb3fc094f335a3189f5255110f071d5a2dab22bc1", @ANYRES32, @ANYRES8=r2, @ANYRES8=r2], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) 379.1643ms ago: executing program 2 (id=6463): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7fff}}, 0x1, 0x4, 0x0, 0x6, 0x28, 0x6, 0x81}, &(0x7f0000000200)=0x9c) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@private=0xa010100, @in=@loopback, 0x4e20, 0x401, 0x4e22, 0x0, 0xa, 0x0, 0x1a0, 0x88}, {0x4, 0x7, 0x100, 0x7, 0x8, 0xfa1, 0x4, 0x6}, {0xffff, 0x2, 0x9, 0x6}, 0x400, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d3, 0x33}, 0x2, @in=@loopback, 0x3500, 0x3, 0x3, 0xff, 0x2, 0x64, 0x91}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) 254.373529ms ago: executing program 2 (id=6464): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2002000030"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 123.13138ms ago: executing program 2 (id=6465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='\t\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="05001e000500000005001d0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x3b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x8010) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) 28.990335ms ago: executing program 2 (id=6466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x42, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x28}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7606}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0xe, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x3}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x0, 0x0, 0x0, 0xc}, {}, {0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x10001}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0xfff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001180)=0x0, &(0x7f00000011c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001280)={'sit0\x00', &(0x7f0000001200)={'syztnl1\x00', r12, 0x80, 0x40, 0x7fff, 0x5, {{0xd, 0x4, 0x3, 0x13, 0x34, 0x66, 0x0, 0x5, 0x2f, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x20, 0x3, [{0x1, 0x11, "098cbe3fe15e94ac05642d9fcc365c"}, {0x6, 0x9, "0be2c78890f8c1"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000012c0)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2907059}, 0xc, &(0x7f0000001600)={&(0x7f0000001300)={0x2d4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r15}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x6008090}, 0x0) 16.351541ms ago: executing program 0 (id=6467): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x7}, {0x10}, {0xe, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400) 0s ago: executing program 3 (id=6468): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e22, 0x1000002, @empty, 0x19}}, 0x7, 0x8000}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e23, 0xfffffffc, @loopback, 0x5}}, 0x1, 0x3, 0x7, 0x8, 0x12, 0x101, 0x4}, 0x9c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be004c2ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x82) kernel console output (not intermixed with test programs): t 6081 - 0 [ 738.237623][T27271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5421'. [ 738.254132][T27273] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 738.477656][T27277] bridge0: port 1(batadv1) entered blocking state [ 738.486073][T27277] bridge0: port 1(batadv1) entered disabled state [ 738.494190][T27277] batadv1: entered allmulticast mode [ 738.515424][T27277] batadv1: entered promiscuous mode [ 739.035629][ T14] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 739.045808][ T14] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 739.218704][T27288] netlink: 'syz.4.5423': attribute type 1 has an invalid length. [ 739.558459][T27288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 739.753187][T27307] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 739.868810][T27313] netlink: 'syz.1.5433': attribute type 15 has an invalid length. [ 739.955929][T27317] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 739.967798][T27317] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 740.029888][T27322] __nla_validate_parse: 3 callbacks suppressed [ 740.029908][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5435'. [ 740.098798][T27325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5436'. [ 740.548135][T27344] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 741.244584][T27363] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5446'. [ 741.708386][T27373] FAULT_INJECTION: forcing a failure. [ 741.708386][T27373] name failslab, interval 1, probability 0, space 0, times 0 [ 741.736631][T27373] CPU: 0 UID: 0 PID: 27373 Comm: syz.2.5449 Not tainted syzkaller #0 PREEMPT(full) [ 741.736670][T27373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.736683][T27373] Call Trace: [ 741.736692][T27373] [ 741.736701][T27373] dump_stack_lvl+0xe8/0x150 [ 741.736751][T27373] should_fail_ex+0x40c/0x560 [ 741.736787][T27373] should_failslab+0xa8/0x100 [ 741.736815][T27373] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 741.736852][T27373] ? local_lock_release+0x9c/0x160 [ 741.736886][T27373] ? __alloc_skb+0x1d7/0x7a0 [ 741.736904][T27373] ? __alloc_skb+0x1d7/0x7a0 [ 741.736931][T27373] __alloc_skb+0x1d7/0x7a0 [ 741.736955][T27373] netlink_ack+0x136/0xb30 [ 741.736977][T27373] ? kasan_quarantine_put+0xbb/0x1f0 [ 741.737010][T27373] ? lockdep_hardirqs_on+0x7a/0x110 [ 741.737057][T27373] nfnetlink_rcv+0x260c/0x28c0 [ 741.737117][T27373] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 741.737186][T27373] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.737222][T27373] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.737251][T27373] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.737279][T27373] netlink_unicast+0x7bb/0x940 [ 741.737313][T27373] netlink_sendmsg+0x813/0xb40 [ 741.737349][T27373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.737379][T27373] ? aa_sock_msg_perm+0xf1/0x1b0 [ 741.737412][T27373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.737436][T27373] sock_sendmsg_nosec+0x13a/0x180 [ 741.737468][T27373] ____sys_sendmsg+0x54e/0x850 [ 741.737499][T27373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.737531][T27373] ? import_iovec+0x73/0xa0 [ 741.737556][T27373] ___sys_sendmsg+0x2a5/0x360 [ 741.737576][T27373] ? __lock_acquire+0x683/0x2cf0 [ 741.737604][T27373] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.737667][T27373] ? __fget_files+0x2a/0x420 [ 741.737687][T27373] ? __fget_files+0x3a2/0x420 [ 741.737720][T27373] __x64_sys_sendmsg+0x1b1/0x290 [ 741.737748][T27373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.737793][T27373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.737817][T27373] do_syscall_64+0x174/0x580 [ 741.737838][T27373] ? trace_irq_disable+0x3b/0x140 [ 741.737860][T27373] ? clear_bhb_loop+0x40/0x90 [ 741.737887][T27373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.737910][T27373] RIP: 0033:0x7f910759de59 [ 741.737931][T27373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.737949][T27373] RSP: 002b:00007f9108424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.737973][T27373] RAX: ffffffffffffffda RBX: 00007f9107825fa0 RCX: 00007f910759de59 [ 741.737989][T27373] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 741.738015][T27373] RBP: 00007f9108424090 R08: 0000000000000000 R09: 0000000000000000 [ 741.738028][T27373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.738041][T27373] R13: 00007f9107826038 R14: 00007f9107825fa0 R15: 00007ffe80134018 [ 741.738075][T27373] [ 742.214151][T27378] netlink: 'syz.2.5451': attribute type 1 has an invalid length. [ 742.243925][ T7401] IPVS: starting estimator thread 0... [ 742.299363][T27380] bond9: (slave geneve4): making interface the new active one [ 742.309370][T27380] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 742.319238][ T57] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.327692][ T57] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.336330][ T57] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.345145][ T57] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.365480][T27388] IPVS: using max 32 ests per chain, 76800 per kthread [ 742.441477][T27378] bond9 (unregistering): (slave geneve4): Releasing active interface [ 742.454708][T27395] netlink: 'syz.1.5450': attribute type 1 has an invalid length. [ 742.551531][T27378] bond9 (unregistering): Released all slaves [ 742.613025][ T57] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 742.621658][ T57] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 742.640671][ T57] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 742.654442][ T57] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 742.840492][T27415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5460'. [ 742.850635][T27413] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5460'. [ 742.876078][T27416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5459'. [ 742.887026][T27413] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.5460'. [ 742.906725][T27415] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.5460'. [ 742.933618][T27413] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.5460'. [ 742.982032][T27416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.000517][T27410] "syz.0.5459" (27410) uses obsolete ecb(arc4) skcipher [ 743.015372][T27416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.031548][T27416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.068842][T27416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 743.127882][ T9684] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.137355][ T9684] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.166265][ T14] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.193766][ T14] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.348814][T27424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.370958][T27430] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 743.436597][T27435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5465'. [ 743.437726][T27436] netlink: 'syz.0.5465': attribute type 46 has an invalid length. [ 743.789567][T27451] syzkaller0: entered promiscuous mode [ 743.795995][T27451] syzkaller0: entered allmulticast mode [ 743.807990][T27451] tipc: Started in network mode [ 743.813213][T27451] tipc: Node identity fac658a60125, cluster identity 4711 [ 743.828321][T27451] tipc: Enabled bearer , priority 0 [ 743.857125][T27450] tipc: Resetting bearer [ 743.889685][T27450] tipc: Disabling bearer [ 744.381359][T20342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.396325][T20342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.405491][T20342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.416567][T20342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.424580][T20342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.031068][T27488] syzkaller0: entered promiscuous mode [ 745.037518][T27488] syzkaller0: entered allmulticast mode [ 745.251718][T27468] lo speed is unknown, defaulting to 1000 [ 745.286144][T27468] wlan0 speed is unknown, defaulting to 1000 [ 745.308423][T27468] lo speed is unknown, defaulting to 1000 [ 745.330486][T27505] netlink: 'syz.2.5488': attribute type 1 has an invalid length. [ 745.411132][T27509] netlink: 'syz.1.5487': attribute type 83 has an invalid length. [ 745.436676][T27505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 745.625141][T27522] ipt_REJECT: ECHOREPLY no longer supported. [ 746.041400][T27533] syzkaller0: entered promiscuous mode [ 746.059578][T27533] syzkaller0: entered allmulticast mode [ 746.097394][T27541] tipc: Enabled bearer , priority 0 [ 746.259324][T27549] __nla_validate_parse: 71 callbacks suppressed [ 746.259344][T27549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5498'. [ 746.339635][T27549] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 746.400258][T27532] tipc: Resetting bearer [ 746.474933][T27532] tipc: Disabling bearer [ 746.526068][T20342] Bluetooth: hci5: command tx timeout [ 746.763323][ T9681] wlan0: Trigger new scan to find an IBSS to join [ 746.825940][T27468] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.836528][T27468] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.845096][T27468] bridge_slave_0: entered allmulticast mode [ 746.854970][T27468] bridge_slave_0: entered promiscuous mode [ 746.866604][T27468] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.873989][T27468] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.881278][T27468] bridge_slave_1: entered allmulticast mode [ 746.889904][T27468] bridge_slave_1: entered promiscuous mode [ 746.939416][T27468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.965670][T27468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.077246][T27468] team0: Port device team_slave_0 added [ 747.099246][T27468] team0: Port device team_slave_1 added [ 747.169053][T27468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.181430][T27468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.208753][T27468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.222851][T27468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.229961][T27468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.286664][T27468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.304969][T27592] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.343482][T27601] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5508'. [ 747.353437][T27601] nbd: must specify a size in bytes for the device [ 747.520206][T27468] hsr_slave_0: entered promiscuous mode [ 747.543454][T27468] hsr_slave_1: entered promiscuous mode [ 747.565896][T27468] debugfs: 'hsr0' already exists in 'hsr' [ 747.584586][T27468] Cannot create hsr debugfs directory [ 747.840367][T27617] bridge5: entered allmulticast mode [ 747.968980][T27614] lo speed is unknown, defaulting to 1000 [ 748.009554][T27614] wlan0 speed is unknown, defaulting to 1000 [ 748.025679][T27614] lo speed is unknown, defaulting to 1000 [ 748.340307][T27468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.351762][T27468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.565309][T27468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.601971][T27468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.612342][T20342] Bluetooth: hci5: command tx timeout [ 748.850239][T27468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.875972][T27468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.130374][T27468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.167281][T27468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.333990][T27654] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5520'. [ 749.648103][T27673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5523'. [ 749.705500][T27666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.790822][T27675] syzkaller0: entered promiscuous mode [ 749.796585][T27675] syzkaller0: entered allmulticast mode [ 749.803012][T13512] wlan0: Trigger new scan to find an IBSS to join [ 749.839248][T27468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 749.854112][T27468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.866924][T27468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 749.885722][T27468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.903391][T27468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 749.936392][T27468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.947710][T27468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 749.978193][T27468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.046528][T27686] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5527'. [ 750.105693][T27686] bond0: entered promiscuous mode [ 750.132684][T27686] bond0: left promiscuous mode [ 750.179241][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5527'. [ 750.264229][T27699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5528'. [ 750.355930][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5530'. [ 750.463603][T27468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.546096][T27468] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.561762][T27710] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 750.602164][T27707] vlan8: entered promiscuous mode [ 750.672713][T27717] x_tables: duplicate underflow at hook 1 [ 750.683548][T20342] Bluetooth: hci5: command tx timeout [ 750.696349][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.703629][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.739215][T13525] wlan0: Creating new IBSS network, BSSID 2e:05:ed:90:59:4f [ 750.784277][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.791507][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.903576][T27723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5534'. [ 751.036256][T27726] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5535'. [ 751.477745][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5540'. [ 751.571417][T27468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.646401][T27468] veth0_vlan: entered promiscuous mode [ 751.665524][T27468] veth1_vlan: entered promiscuous mode [ 751.711250][T27468] veth0_macvtap: entered promiscuous mode [ 751.750951][T27468] veth1_macvtap: entered promiscuous mode [ 751.798032][T27468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.817016][T27468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.855849][ T9681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.866183][ T9681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.884260][ T9681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.895658][ T9681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.179933][T21573] block nbd10: Receive control failed (result -32) [ 752.186806][T20342] block nbd10: Receive control failed (result -32) [ 752.331585][T13525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.340212][T13525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.365668][T27784] xt_hashlimit: size too large, truncated to 1048576 [ 752.440032][T13526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.465202][T13526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.762945][T20342] Bluetooth: hci5: command tx timeout [ 752.827551][T27793] xt_hashlimit: max too large, truncated to 1048576 [ 752.863726][T27797] netlink: 'syz.3.5476': attribute type 1 has an invalid length. [ 752.872703][T27793] No such timeout policy "syz1" [ 752.878198][T27797] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5476'. [ 753.049212][T27808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5554'. [ 753.265313][T27816] gre1: entered promiscuous mode [ 753.615293][T27836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5563'. [ 753.678376][T27836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5563'. [ 753.689218][T27836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5563'. [ 755.978697][T27804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.153289][T27851] syzkaller0: entered promiscuous mode [ 756.159049][T27851] syzkaller0: entered allmulticast mode [ 756.189032][T27859] sctp: [Deprecated]: syz.3.5570 (pid 27859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.189032][T27859] Use struct sctp_sack_info instead [ 756.229328][T27862] sctp: [Deprecated]: syz.3.5570 (pid 27862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.229328][T27862] Use struct sctp_sack_info instead [ 756.357058][T27870] syzkaller0: entered promiscuous mode [ 756.373147][T27870] syzkaller0: entered allmulticast mode [ 756.594840][T27881] netlink: 'syz.4.5572': attribute type 23 has an invalid length. [ 756.623015][T27880] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5574'. [ 756.632711][T27880] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5574'. [ 756.647338][T27880] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5574'. [ 756.784254][T27890] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5576'. [ 756.797483][T27893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5577'. [ 756.871894][T27893] bond1: Invalid ad_actor_system MAC address. [ 756.878569][T27893] bond1: option ad_actor_system: invalid value (7) [ 756.890331][T27893] bond1 (unregistering): Released all slaves [ 756.948018][T27899] ip6tnl5: entered allmulticast mode [ 757.421379][T27919] netlink: 732 bytes leftover after parsing attributes in process `syz.3.5583'. [ 757.452245][T27919] netlink: 732 bytes leftover after parsing attributes in process `syz.3.5583'. [ 759.651876][T27885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.791083][T27930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5588'. [ 759.805410][T27930] openvswitch: netlink: Missing key (keys=40, expected=80) [ 759.997445][T27933] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5590'. [ 760.018650][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5590'. [ 760.255779][T27950] syzkaller0: entered promiscuous mode [ 760.261599][T27950] syzkaller0: entered allmulticast mode [ 760.278271][T27950] openvswitch: netlink: Message has 4 unknown bytes. [ 760.286877][T27950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.611373][T27959] bridge0: port 4(veth1_to_bridge) entered blocking state [ 760.619444][T27959] bridge0: port 4(veth1_to_bridge) entered disabled state [ 760.710363][T27959] veth1_to_bridge: entered allmulticast mode [ 760.718815][T27959] veth1_to_bridge: entered promiscuous mode [ 760.797818][T27965] netlink: 'syz.0.5599': attribute type 10 has an invalid length. [ 761.035155][T27973] netlink: 'syz.3.5603': attribute type 29 has an invalid length. [ 761.055830][T27975] netlink: 'syz.0.5604': attribute type 2 has an invalid length. [ 761.086055][T27975] : entered promiscuous mode [ 761.410298][T27866] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 761.672773][T27995] netlink: 'syz.2.5610': attribute type 1 has an invalid length. [ 761.743709][T27997] __nla_validate_parse: 11 callbacks suppressed [ 761.743730][T27997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5610'. [ 761.782963][T28000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5611'. [ 761.848884][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5612'. [ 761.899080][T27997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5610'. [ 761.931949][T27997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5610'. [ 762.216367][T21573] Bluetooth: hci5: command 0x0405 tx timeout [ 762.218692][T28019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5617'. [ 762.350814][T28027] netlink: 'syz.2.5618': attribute type 39 has an invalid length. [ 762.376432][T28029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5619'. [ 762.394927][T28029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5619'. [ 762.404842][T28027] netlink: 'syz.2.5618': attribute type 39 has an invalid length. [ 763.040432][T28049] lo speed is unknown, defaulting to 1000 [ 763.072008][T28049] wlan0 speed is unknown, defaulting to 1000 [ 763.101746][T28049] lo speed is unknown, defaulting to 1000 [ 763.234238][T28055] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5622'. [ 763.258483][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5620'. [ 764.117489][T28082] tipc: Invalid UDP bearer configuration [ 764.117541][T28082] tipc: Enabling of bearer rejected, failed to enable media [ 764.148248][T28080] ip6gre1: entered promiscuous mode [ 764.154135][T28080] ip6gre1: entered allmulticast mode [ 764.804368][T13525] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.815340][T13525] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.833749][T13525] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.862924][T13525] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.880167][T28110] tap0: tun_chr_ioctl cmd 1074025672 [ 764.894428][T28110] tap0: ignored: set checksum disabled [ 765.404771][T28139] netlink: 'syz.3.5651': attribute type 3 has an invalid length. [ 765.483915][T28141] syzkaller0: entered promiscuous mode [ 765.495166][T28141] syzkaller0: entered allmulticast mode [ 765.593558][T28153] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 765.670034][T28160] netlink: 'syz.3.5657': attribute type 9 has an invalid length. [ 766.200807][T28167] bridge0: port 3(syz_tun) entered disabled state [ 766.244698][T28167] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.374580][T28167] bond1: left promiscuous mode [ 767.490436][T13512] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.526591][T13512] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.567409][T13512] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.606615][T13512] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.627635][T13512] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.659628][T13512] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.680716][T13512] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.692738][T13512] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.718308][T28204] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 767.756316][T28209] __nla_validate_parse: 9 callbacks suppressed [ 767.756335][T28209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5665'. [ 767.885935][T28209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 767.893654][T28211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5669'. [ 770.678659][T28201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.690120][T28216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5671'. [ 770.833183][T28231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5674'. [ 770.897273][T28231] syzkaller1: entered promiscuous mode [ 770.913550][T28231] syzkaller1: entered allmulticast mode [ 771.025861][T28242] syz_tun: entered allmulticast mode [ 771.191305][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5680'. [ 771.208787][T13512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.218922][T13512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.261432][T28255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.314431][T28255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5682'. [ 771.577331][T28269] siw: device registration error -23 [ 771.781544][T28278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5686'. [ 771.792587][T28278] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5686'. [ 771.835612][T28281] x_tables: duplicate underflow at hook 3 [ 771.976462][T28283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 771.986981][T28285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5689'. [ 772.276561][T28294] netlink: 'syz.0.5692': attribute type 1 has an invalid length. [ 772.381963][T28294] 8021q: adding VLAN 0 to HW filter on device bond9 [ 772.389860][T28296] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5691'. [ 772.399914][ T24] bridge0: entered promiscuous mode [ 772.430824][T28310] netlink: 'syz.3.5697': attribute type 2 has an invalid length. [ 772.439265][T28310] nbd: must specify at least one socket [ 772.471530][T28306] bond9: (slave ip6gretap1): making interface the new active one [ 772.484548][T28306] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 772.695423][T28322] netlink: 'syz.2.5698': attribute type 2 has an invalid length. [ 772.719365][T28317] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 772.755231][T28317] bond1 (unregistering): Released all slaves [ 772.850324][T28329] netlink: 'syz.2.5702': attribute type 1 has an invalid length. [ 772.862647][T28307] bond0: Error: CAN devices cannot be enslaved [ 772.911969][T28329] bond11: entered promiscuous mode [ 772.917743][T28329] 8021q: adding VLAN 0 to HW filter on device bond11 [ 772.939244][T28329] __nla_validate_parse: 1 callbacks suppressed [ 772.939264][T28329] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5702'. [ 773.022331][T28338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5704'. [ 773.052603][T28329] bond11: (slave bridge7): making interface the new active one [ 773.084174][T28329] bridge7: entered promiscuous mode [ 773.101846][T28329] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 773.115603][T28338] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 773.291437][T28330] syzkaller1: entered promiscuous mode [ 773.298084][T28330] syzkaller1: entered allmulticast mode [ 773.622729][T21573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.638546][T21573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.650559][T21573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.661062][T21573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.672553][T21573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.441696][T28380] SET target dimension over the limit! [ 774.591685][T28390] bond0: entered promiscuous mode [ 774.607130][T28390] bond_slave_0: entered promiscuous mode [ 774.613421][T28390] bond_slave_1: entered promiscuous mode [ 774.621855][T28390] batadv0: entered promiscuous mode [ 774.630763][T28390] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 774.642679][T28390] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 774.654309][T28390] bond0: left promiscuous mode [ 774.659200][T28390] bond_slave_0: left promiscuous mode [ 774.665682][T28395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5716'. [ 774.675359][T28390] bond_slave_1: left promiscuous mode [ 774.694796][T28390] batadv0: left promiscuous mode [ 774.724981][T28392] netlink: 'syz.0.5716': attribute type 1 has an invalid length. [ 774.787217][T28394] syzkaller0: entered promiscuous mode [ 774.795088][T28394] syzkaller0: entered allmulticast mode [ 774.879650][T28355] lo speed is unknown, defaulting to 1000 [ 774.891043][T28355] wlan0 speed is unknown, defaulting to 1000 [ 774.906157][T28355] lo speed is unknown, defaulting to 1000 [ 774.928109][T28401] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5719'. [ 775.098616][T28408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5718'. [ 775.210681][T28415] nbd: couldn't find device at index 1694498816 [ 775.299879][T28419] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5724'. [ 775.466205][T28424] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 775.550654][T28428] xt_hashlimit: invalid rate [ 775.670228][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5718'. [ 775.725539][T20342] Bluetooth: hci0: command tx timeout [ 775.780053][T28438] netlink: 'syz.1.5730': attribute type 4 has an invalid length. [ 775.796188][T28440] xt_hashlimit: size too large, truncated to 1048576 [ 775.809441][T28438] netlink: 'syz.1.5730': attribute type 4 has an invalid length. [ 775.894621][T28442] Cannot find add_set index 0 as target [ 776.019763][T28355] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.027549][T28355] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.034964][T28355] bridge_slave_0: entered allmulticast mode [ 776.043930][T28355] bridge_slave_0: entered promiscuous mode [ 776.058271][T28355] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.066060][T28355] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.077278][T28355] bridge_slave_1: entered allmulticast mode [ 776.086640][T28355] bridge_slave_1: entered promiscuous mode [ 776.156805][T28355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.170903][T28355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.229085][T28355] team0: Port device team_slave_0 added [ 776.238117][T28355] team0: Port device team_slave_1 added [ 776.280546][T28355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.288600][T28355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.315057][T28355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.328876][T28355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.337607][T28355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.385002][T28355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.400295][T28452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5734'. [ 776.616461][T28355] hsr_slave_0: entered promiscuous mode [ 776.623612][T28355] hsr_slave_1: entered promiscuous mode [ 776.630191][T28355] debugfs: 'hsr0' already exists in 'hsr' [ 776.636106][T28355] Cannot create hsr debugfs directory [ 776.901219][T28355] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.033836][T13525] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 777.046899][T28474] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 777.105448][T28355] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.226621][T28355] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.317466][T28355] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.580453][T28355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 777.598073][T28355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.609351][T28355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 777.622432][T28355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.630529][T28355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 777.655487][T28355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.664676][T28355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 777.675788][T28355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.715834][T28498] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5747'. [ 777.802730][T21573] Bluetooth: hci0: command tx timeout [ 777.865912][T28355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.898931][T28355] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.914299][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.921642][T13520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.951596][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.958923][T13520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.463059][T28518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5752'. [ 778.612215][T28526] netlink: 'syz.3.5754': attribute type 2 has an invalid length. [ 778.621808][T28526] nbd: must specify at least one socket [ 778.704907][T28355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.838879][T28355] veth0_vlan: entered promiscuous mode [ 778.879162][T28355] veth1_vlan: entered promiscuous mode [ 779.000306][T28546] lo speed is unknown, defaulting to 1000 [ 779.055202][T28546] wlan0 speed is unknown, defaulting to 1000 [ 779.073339][T28355] veth0_macvtap: entered promiscuous mode [ 779.091745][T28546] lo speed is unknown, defaulting to 1000 [ 779.100637][T28355] veth1_macvtap: entered promiscuous mode [ 779.184636][T28355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.219201][T28355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.244364][T28550] netlink: 'syz.0.5759': attribute type 25 has an invalid length. [ 779.256517][ T9681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.275457][ T9681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.285958][ T9681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.297360][ T9681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.700237][T13525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.728557][T13525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.858659][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.869650][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.883571][T21573] Bluetooth: hci0: command 0x040f tx timeout [ 779.952976][T28571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5766'. [ 780.008593][T28574] netlink: 'syz.3.5767': attribute type 2 has an invalid length. [ 780.033317][T28574] nbd: must specify at least one socket [ 780.154460][T28578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5708'. [ 780.363262][T28593] openvswitch: netlink: Missing valid actions attribute. [ 780.390254][T28593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.082994][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.491994][T28619] netlink: 'syz.4.5768': attribute type 1 has an invalid length. [ 781.963830][T20342] Bluetooth: hci0: command 0x040f tx timeout [ 782.272659][T28626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5774'. [ 782.290756][T28626] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5774'. [ 782.322224][T28626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5774'. [ 782.678823][T28643] netlink: 'syz.2.5780': attribute type 2 has an invalid length. [ 782.696990][T28643] nbd: must specify at least one socket [ 782.840476][T28650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5783'. [ 782.918806][T28650] lo speed is unknown, defaulting to 1000 [ 782.950919][T28650] wlan0 speed is unknown, defaulting to 1000 [ 782.980675][T28650] lo speed is unknown, defaulting to 1000 [ 783.005689][ T3284] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 783.026954][T28660] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5783'. [ 783.279451][T21573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 783.291712][T21573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 783.300885][T21573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 783.316057][T21573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 783.326806][T21573] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 783.376847][T28659] syzkaller0: entered promiscuous mode [ 783.382551][T28659] syzkaller0: entered allmulticast mode [ 783.808963][T17561] syz_tun (unregistering): left allmulticast mode [ 784.028247][T28684] netlink: 'syz.1.5789': attribute type 1 has an invalid length. [ 784.044352][T21573] Bluetooth: hci0: command 0x040f tx timeout [ 784.069061][T28684] netlink: 'syz.1.5789': attribute type 2 has an invalid length. [ 784.218110][T28668] lo speed is unknown, defaulting to 1000 [ 784.239686][T28668] wlan0 speed is unknown, defaulting to 1000 [ 784.273169][T28668] lo speed is unknown, defaulting to 1000 [ 784.766443][T28695] ip6tnl2: entered allmulticast mode [ 784.813625][T13520] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 784.834867][T22735] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 784.845065][T13520] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 785.032769][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 785.353920][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 785.405518][T21573] Bluetooth: hci2: command tx timeout [ 785.680541][T28720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.828037][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5798'. [ 786.264308][T28668] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.297019][T28668] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.322533][T28668] bridge_slave_0: entered allmulticast mode [ 786.347556][T28668] bridge_slave_0: entered promiscuous mode [ 786.394679][T28668] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.419281][T28668] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.438739][T28668] bridge_slave_1: entered allmulticast mode [ 786.464199][T28668] bridge_slave_1: entered promiscuous mode [ 786.481865][T28739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5803'. [ 786.571258][T28668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.582461][T28739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5803'. [ 786.899294][T28668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.007705][T28668] team0: Port device team_slave_0 added [ 787.017836][T28668] team0: Port device team_slave_1 added [ 787.060569][T28668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.067962][T28668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.097230][T28668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.144178][T28668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.151334][T28668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.187965][T28668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.299554][T28668] hsr_slave_0: entered promiscuous mode [ 787.332914][T28752] netlink: 'syz.2.5808': attribute type 1 has an invalid length. [ 787.343715][T28668] hsr_slave_1: entered promiscuous mode [ 787.359121][T28668] debugfs: 'hsr0' already exists in 'hsr' [ 787.366826][T28668] Cannot create hsr debugfs directory [ 787.497385][T21573] Bluetooth: hci2: command tx timeout [ 787.541558][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5806'. [ 787.596618][T28754] macvtap1: entered allmulticast mode [ 787.635493][T28752] macvtap2: entered allmulticast mode [ 787.695773][T28755] bond1: (slave bridge1): making interface the new active one [ 787.708340][T28755] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 787.851022][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5809'. [ 787.861215][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5809'. [ 787.895849][T28758] sch_fq: defrate 0 ignored. [ 788.248684][T28668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.273399][T28668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.297781][T28664] Set syz1 is full, maxelem 65536 reached [ 788.317365][T28760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5810'. [ 788.431303][T28668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.443840][T28668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.501119][T28777] netlink: 'syz.2.5812': attribute type 9 has an invalid length. [ 788.558235][T28668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.571685][T28668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.676523][T28668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.693115][T28668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.065228][T28791] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5817'. [ 789.065227][T28792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'. [ 789.093021][T28792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'. [ 789.162359][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 789.402580][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 789.572323][T21573] Bluetooth: hci2: command tx timeout [ 791.119608][T28766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 791.137591][T28668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 791.205305][T28668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.223078][T28668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 791.257649][T28668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.267819][T28668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 791.315030][T28668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.345319][T28668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 791.367041][T28668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 791.459859][T28832] __nla_validate_parse: 43 callbacks suppressed [ 791.459878][T28832] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5827'. [ 791.507858][T28834] tipc: Failed to remove unknown binding: 66,1,1/0:3621660043/3621660045 [ 791.519447][T28834] tipc: Failed to remove unknown binding: 66,1,1/0:3621660043/3621660045 [ 791.630507][T28668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.642341][T21573] Bluetooth: hci2: command tx timeout [ 791.669377][T28668] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.690333][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.697543][T13525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.773975][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.781228][T13525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.834068][T28841] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5832'. [ 791.876267][T28847] bridge0: entered allmulticast mode [ 791.948957][T28852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5833'. [ 792.103658][T28862] FAULT_INJECTION: forcing a failure. [ 792.103658][T28862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.128894][T28862] CPU: 0 UID: 0 PID: 28862 Comm: syz.1.5835 Not tainted syzkaller #0 PREEMPT(full) [ 792.128925][T28862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 792.128940][T28862] Call Trace: [ 792.128949][T28862] [ 792.128959][T28862] dump_stack_lvl+0xe8/0x150 [ 792.128992][T28862] should_fail_ex+0x40c/0x560 [ 792.129030][T28862] _copy_from_user+0x2d/0xb0 [ 792.129055][T28862] do_sock_getsockopt+0x200/0x7e0 [ 792.129088][T28862] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 792.129139][T28862] ? __fget_files+0x3a2/0x420 [ 792.129161][T28862] ? __fget_files+0x2a/0x420 [ 792.129192][T28862] __x64_sys_getsockopt+0x1a4/0x240 [ 792.129223][T28862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.129248][T28862] do_syscall_64+0x174/0x580 [ 792.129269][T28862] ? trace_irq_disable+0x3b/0x140 [ 792.129292][T28862] ? clear_bhb_loop+0x40/0x90 [ 792.129321][T28862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.129343][T28862] RIP: 0033:0x7f719dd9de59 [ 792.129365][T28862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.129384][T28862] RSP: 002b:00007f719ed52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 792.129408][T28862] RAX: ffffffffffffffda RBX: 00007f719e025fa0 RCX: 00007f719dd9de59 [ 792.129425][T28862] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 792.129439][T28862] RBP: 00007f719ed52090 R08: 00002000000000c0 R09: 0000000000000000 [ 792.129466][T28862] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.129480][T28862] R13: 00007f719e026038 R14: 00007f719e025fa0 R15: 00007ffe1b7adbb8 [ 792.129528][T28862] [ 792.895570][T28668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.056525][T28668] veth0_vlan: entered promiscuous mode [ 793.074484][T28668] veth1_vlan: entered promiscuous mode [ 793.135980][T28668] veth0_macvtap: entered promiscuous mode [ 793.172823][T28668] veth1_macvtap: entered promiscuous mode [ 793.209738][T28900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5841'. [ 793.220650][T28900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5841'. [ 793.231790][T28668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.284993][T28668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.307084][T13525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.337164][T13525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.349930][T13525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.420257][T13525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.450279][T28902] "syz.3.5843" (28902) uses obsolete ecb(arc4) skcipher [ 793.473803][T28907] FAULT_INJECTION: forcing a failure. [ 793.473803][T28907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.513951][T28907] CPU: 1 UID: 0 PID: 28907 Comm: syz.1.5845 Not tainted syzkaller #0 PREEMPT(full) [ 793.513976][T28907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.513987][T28907] Call Trace: [ 793.513994][T28907] [ 793.514001][T28907] dump_stack_lvl+0xe8/0x150 [ 793.514028][T28907] should_fail_ex+0x40c/0x560 [ 793.514085][T28907] _copy_from_user+0x2d/0xb0 [ 793.514107][T28907] mptcp_getsockopt+0x12a6/0x1ed0 [ 793.514146][T28907] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 793.514169][T28907] ? process_measurement+0x7b2/0x1c10 [ 793.514201][T28907] ? up_write+0x19f/0x4a0 [ 793.514230][T28907] ? process_measurement+0x14fb/0x1c10 [ 793.514262][T28907] ? kasan_quarantine_put+0xbb/0x1f0 [ 793.514295][T28907] ? __lock_acquire+0x683/0x2cf0 [ 793.514318][T28907] ? __lock_acquire+0x683/0x2cf0 [ 793.514347][T28907] ? unwind_next_frame+0x8f/0x2550 [ 793.514374][T28907] ? __lock_acquire+0x683/0x2cf0 [ 793.514412][T28907] ? aa_file_perm+0x18b/0x15f0 [ 793.514441][T28907] ? aa_label_sk_perm+0x532/0x6e0 [ 793.514469][T28907] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 793.514492][T28907] ? _parse_integer_limit+0x192/0x1e0 [ 793.514526][T28907] ? __lock_acquire+0x683/0x2cf0 [ 793.514546][T28907] ? kstrtouint+0x6e/0xe0 [ 793.514589][T28907] ? __might_fault+0xaf/0x130 [ 793.514615][T28907] ? __might_fault+0xaf/0x130 [ 793.514653][T28907] ? sock_common_getsockopt+0x2d/0xb0 [ 793.514680][T28907] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 793.514706][T28907] do_sock_getsockopt+0x51d/0x7e0 [ 793.514731][T28907] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 793.514765][T28907] ? __fget_files+0x3a2/0x420 [ 793.514782][T28907] ? __fget_files+0x2a/0x420 [ 793.514804][T28907] __x64_sys_getsockopt+0x1a4/0x240 [ 793.514830][T28907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.514850][T28907] do_syscall_64+0x174/0x580 [ 793.514872][T28907] ? clear_bhb_loop+0x40/0x90 [ 793.514893][T28907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.514910][T28907] RIP: 0033:0x7f719dd9de59 [ 793.514927][T28907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.514942][T28907] RSP: 002b:00007f719ed52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 793.514961][T28907] RAX: ffffffffffffffda RBX: 00007f719e025fa0 RCX: 00007f719dd9de59 [ 793.514974][T28907] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 793.514985][T28907] RBP: 00007f719ed52090 R08: 00002000000000c0 R09: 0000000000000000 [ 793.514997][T28907] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.515008][T28907] R13: 00007f719e026038 R14: 00007f719e025fa0 R15: 00007ffe1b7adbb8 [ 793.515037][T28907] [ 793.871293][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.894054][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.957811][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.979076][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.073182][T28913] netlink: 516 bytes leftover after parsing attributes in process `syz.2.5848'. [ 794.213500][T28927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5849'. [ 794.232553][T28927] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5849'. [ 794.428714][T28923] netlink: 'syz.0.5785': attribute type 1 has an invalid length. [ 794.449271][T28923] netlink: 'syz.0.5785': attribute type 2 has an invalid length. [ 794.526482][ T50] Bluetooth: hci2: command 0x0405 tx timeout [ 794.743699][T28939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5855'. [ 794.769335][T28941] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5854'. [ 794.830727][T28943] FAULT_INJECTION: forcing a failure. [ 794.830727][T28943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.876685][T28943] CPU: 0 UID: 0 PID: 28943 Comm: syz.0.5856 Not tainted syzkaller #0 PREEMPT(full) [ 794.876716][T28943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 794.876729][T28943] Call Trace: [ 794.876739][T28943] [ 794.876748][T28943] dump_stack_lvl+0xe8/0x150 [ 794.876792][T28943] should_fail_ex+0x40c/0x560 [ 794.876827][T28943] _copy_to_user+0x31/0xb0 [ 794.876858][T28943] mptcp_getsockopt+0x195e/0x1ed0 [ 794.876896][T28943] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 794.876920][T28943] ? process_measurement+0x7b2/0x1c10 [ 794.876956][T28943] ? up_write+0x19f/0x4a0 [ 794.876988][T28943] ? process_measurement+0x14fb/0x1c10 [ 794.877023][T28943] ? kasan_quarantine_put+0xbb/0x1f0 [ 794.877059][T28943] ? __lock_acquire+0x683/0x2cf0 [ 794.877088][T28943] ? __lock_acquire+0x683/0x2cf0 [ 794.877124][T28943] ? unwind_next_frame+0x8f/0x2550 [ 794.877155][T28943] ? __lock_acquire+0x683/0x2cf0 [ 794.877202][T28943] ? aa_file_perm+0x18b/0x15f0 [ 794.877262][T28943] ? __lock_acquire+0x683/0x2cf0 [ 794.877314][T28943] ? __might_fault+0xaf/0x130 [ 794.877360][T28943] ? sock_common_getsockopt+0x2d/0xb0 [ 794.877390][T28943] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 794.877419][T28943] do_sock_getsockopt+0x51d/0x7e0 [ 794.877447][T28943] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 794.877486][T28943] ? __fget_files+0x3a2/0x420 [ 794.877506][T28943] ? __fget_files+0x2a/0x420 [ 794.877551][T28943] __x64_sys_getsockopt+0x1a4/0x240 [ 794.877582][T28943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.877606][T28943] do_syscall_64+0x174/0x580 [ 794.877642][T28943] ? trace_irq_disable+0x3b/0x140 [ 794.877662][T28943] ? clear_bhb_loop+0x40/0x90 [ 794.877706][T28943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.877728][T28943] RIP: 0033:0x7f6a1679de59 [ 794.877748][T28943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.877768][T28943] RSP: 002b:00007f6a1761c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 794.877792][T28943] RAX: ffffffffffffffda RBX: 00007f6a16a25fa0 RCX: 00007f6a1679de59 [ 794.877809][T28943] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 794.877822][T28943] RBP: 00007f6a1761c090 R08: 00002000000000c0 R09: 0000000000000000 [ 794.877844][T28943] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.877858][T28943] R13: 00007f6a16a26038 R14: 00007f6a16a25fa0 R15: 00007ffe7196fc28 [ 794.877895][T28943] [ 795.378807][T28934] sctp: [Deprecated]: syz.2.5852 (pid 28934) Use of int in max_burst socket option. [ 795.378807][T28934] Use struct sctp_assoc_value instead [ 795.474115][T28961] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 795.659342][T28961] bond1 (unregistering): Released all slaves [ 795.717628][T28968] netlink: 'syz.2.5861': attribute type 2 has an invalid length. [ 795.733652][T28968] nbd: must specify at least one socket [ 796.146920][T28988] FAULT_INJECTION: forcing a failure. [ 796.146920][T28988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.173511][T28988] CPU: 0 UID: 0 PID: 28988 Comm: syz.0.5869 Not tainted syzkaller #0 PREEMPT(full) [ 796.173540][T28988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 796.173555][T28988] Call Trace: [ 796.173564][T28988] [ 796.173573][T28988] dump_stack_lvl+0xe8/0x150 [ 796.173604][T28988] should_fail_ex+0x40c/0x560 [ 796.173639][T28988] _copy_to_user+0x31/0xb0 [ 796.173666][T28988] mptcp_getsockopt+0x1ba4/0x1ed0 [ 796.173705][T28988] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 796.173731][T28988] ? process_measurement+0x7b2/0x1c10 [ 796.173769][T28988] ? up_write+0x19f/0x4a0 [ 796.173803][T28988] ? process_measurement+0x14fb/0x1c10 [ 796.173844][T28988] ? kasan_quarantine_put+0xbb/0x1f0 [ 796.173882][T28988] ? __lock_acquire+0x683/0x2cf0 [ 796.173913][T28988] ? __lock_acquire+0x683/0x2cf0 [ 796.173950][T28988] ? unwind_next_frame+0x8f/0x2550 [ 796.173984][T28988] ? __lock_acquire+0x683/0x2cf0 [ 796.174032][T28988] ? aa_file_perm+0x18b/0x15f0 [ 796.174095][T28988] ? __lock_acquire+0x683/0x2cf0 [ 796.174148][T28988] ? __might_fault+0xaf/0x130 [ 796.174222][T28988] ? sock_common_getsockopt+0x2d/0xb0 [ 796.174256][T28988] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 796.174289][T28988] do_sock_getsockopt+0x51d/0x7e0 [ 796.174320][T28988] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 796.174361][T28988] ? __fget_files+0x3a2/0x420 [ 796.174382][T28988] ? __fget_files+0x2a/0x420 [ 796.174412][T28988] __x64_sys_getsockopt+0x1a4/0x240 [ 796.174443][T28988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.174468][T28988] do_syscall_64+0x174/0x580 [ 796.174489][T28988] ? trace_irq_disable+0x3b/0x140 [ 796.174510][T28988] ? clear_bhb_loop+0x40/0x90 [ 796.174538][T28988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.174560][T28988] RIP: 0033:0x7f6a1679de59 [ 796.174580][T28988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.174599][T28988] RSP: 002b:00007f6a1761c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 796.174631][T28988] RAX: ffffffffffffffda RBX: 00007f6a16a25fa0 RCX: 00007f6a1679de59 [ 796.174648][T28988] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 796.174661][T28988] RBP: 00007f6a1761c090 R08: 00002000000000c0 R09: 0000000000000000 [ 796.174676][T28988] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.174691][T28988] R13: 00007f6a16a26038 R14: 00007f6a16a25fa0 R15: 00007ffe7196fc28 [ 796.174726][T28988] [ 796.987730][T29001] syzkaller0: entered promiscuous mode [ 796.995535][T29001] syzkaller0: entered allmulticast mode [ 797.008442][T29008] netlink: 'syz.3.5876': attribute type 2 has an invalid length. [ 797.028741][T29008] nbd: must specify at least one socket [ 797.176905][T29012] __nla_validate_parse: 3 callbacks suppressed [ 797.176927][T29012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5877'. [ 797.210346][T29004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5865'. [ 797.293899][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5865'. [ 797.304272][T29009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5865'. [ 797.314657][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5865'. [ 797.325020][T29009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5865'. [ 797.728855][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 799.868354][T29038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 800.086606][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5888'. [ 800.098400][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5888'. [ 800.296353][T29022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.548250][T29062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5889'. [ 800.754513][T29070] xt_TCPMSS: Only works on TCP SYN packets [ 800.850299][T29070] bridge_slave_1: left allmulticast mode [ 800.857846][T29070] bridge_slave_1: left promiscuous mode [ 800.864130][T29070] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.881808][T29070] bridge_slave_0: left allmulticast mode [ 800.888297][T29070] bridge_slave_0: left promiscuous mode [ 800.895785][T29070] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.989572][T29078] --map-set only usable from mangle table [ 801.166985][T29084] netlink: 'syz.2.5897': attribute type 2 has an invalid length. [ 801.231244][T29086] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 801.453900][T29095] netlink: 'syz.1.5903': attribute type 2 has an invalid length. [ 801.474374][T29095] nbd: must specify at least one socket [ 802.024307][T29126] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 802.189316][T29137] xt_TCPMSS: Only works on TCP SYN packets [ 802.228890][T29139] netlink: 'syz.1.5916': attribute type 2 has an invalid length. [ 802.269229][T29139] nbd: must specify at least one socket [ 802.432765][T29148] bond1: entered promiscuous mode [ 802.611125][T29151] syzkaller0: entered promiscuous mode [ 802.626051][T29151] syzkaller0: entered allmulticast mode [ 802.670584][T29160] xt_TCPMSS: Only works on TCP SYN packets [ 802.802740][T29168] __nla_validate_parse: 11 callbacks suppressed [ 802.802761][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5926'. [ 802.879478][T29171] IPv6: NLM_F_CREATE should be specified when creating new route [ 802.894167][T29171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5928'. [ 803.186410][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5927'. [ 803.212548][T29180] netlink: 'syz.0.5931': attribute type 1 has an invalid length. [ 803.307099][T29183] netlink: 'syz.4.5927': attribute type 10 has an invalid length. [ 803.315903][T29183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5927'. [ 805.266837][T29181] batman_adv: batadv0: Interface deactivated: dummy0 [ 805.274607][T29181] batman_adv: batadv0: Removing interface: dummy0 [ 805.281882][T29181] bridge1: port 1(dummy0) entered blocking state [ 805.302375][T29181] bridge1: port 1(dummy0) entered disabled state [ 805.309112][T29181] dummy0: entered allmulticast mode [ 805.318173][T29181] dummy0: entered promiscuous mode [ 805.327139][T29182] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.337496][T29182] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.358205][T29183] bridge1: port 1(dummy0) entered blocking state [ 805.364769][T29183] bridge1: port 1(dummy0) entered forwarding state [ 805.377790][T29183] dummy0: left allmulticast mode [ 805.384885][T29183] bridge1: port 1(dummy0) entered disabled state [ 805.397993][T29184] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 805.406842][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.418584][T29184] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 805.704044][T29203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5935'. [ 805.718379][T29210] netlink: 'syz.3.5936': attribute type 1 has an invalid length. [ 805.737245][T29210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5936'. [ 805.759878][T29210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5936'. [ 806.029107][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5941'. [ 806.041967][T29222] syzkaller0: entered promiscuous mode [ 806.072471][T29222] syzkaller0: entered allmulticast mode [ 808.623497][T29218] veth1_to_hsr: entered promiscuous mode [ 808.629323][T29218] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5939'. [ 808.641092][T29218] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 808.767119][T29244] IPVS: length: 15 != 8 [ 808.929137][T29258] netlink: 'syz.0.5950': attribute type 13 has an invalid length. [ 808.980662][T29261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5950'. [ 809.555420][T29292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5960'. [ 809.569712][T29285] syzkaller0: entered promiscuous mode [ 809.587534][T29285] syzkaller0: entered allmulticast mode [ 810.172460][T29318] Bluetooth: MGMT ver 1.23 [ 810.262566][T29320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5966'. [ 812.203239][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 812.233739][T29315] ip6tnl2: entered allmulticast mode [ 812.397263][T29324] IPv6: addrconf: prefix option has invalid lifetime [ 812.420965][T29326] sctp: [Deprecated]: syz.1.5969 (pid 29326) Use of int in max_burst socket option. [ 812.420965][T29326] Use struct sctp_assoc_value instead [ 812.450692][T29329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5971'. [ 812.710152][T29347] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5967'. [ 812.725243][T29336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.747033][T29336] bond1: entered allmulticast mode [ 812.753748][T29336] bridge1: entered allmulticast mode [ 812.764106][T29336] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 812.785308][T29336] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 812.804260][T29336] bridge1: entered promiscuous mode [ 813.011131][T29354] syzkaller1: entered promiscuous mode [ 813.022258][T29354] syzkaller1: entered allmulticast mode [ 813.065740][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5978'. [ 813.156675][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5979'. [ 813.190221][T29357] netlink: 732 bytes leftover after parsing attributes in process `syz.0.5970'. [ 813.222815][T29357] netlink: 732 bytes leftover after parsing attributes in process `syz.0.5970'. [ 813.717106][ T9681] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 813.741748][ T9681] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 813.751800][T27577] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 813.970699][T29369] syzkaller0: entered promiscuous mode [ 813.981413][T29369] syzkaller0: entered allmulticast mode [ 814.005327][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5982'. [ 814.130916][T29382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5984'. [ 814.191056][T29384] FAULT_INJECTION: forcing a failure. [ 814.191056][T29384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.206724][T29384] CPU: 0 UID: 0 PID: 29384 Comm: syz.0.5986 Not tainted syzkaller #0 PREEMPT(full) [ 814.206753][T29384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.206766][T29384] Call Trace: [ 814.206776][T29384] [ 814.206785][T29384] dump_stack_lvl+0xe8/0x150 [ 814.206817][T29384] should_fail_ex+0x40c/0x560 [ 814.206853][T29384] _copy_from_user+0x2d/0xb0 [ 814.206878][T29384] do_ip_setsockopt+0x3be/0x2e30 [ 814.206910][T29384] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 814.206942][T29384] ? reacquire_held_locks+0x104/0x190 [ 814.206969][T29384] ? release_sock+0x2f/0x260 [ 814.207009][T29384] ? mptcp_setsockopt+0xc94/0x3550 [ 814.207043][T29384] ip_setsockopt+0x66/0x110 [ 814.207071][T29384] mptcp_setsockopt+0xec7/0x3550 [ 814.207109][T29384] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 814.207141][T29384] ? __pfx_aa_sk_perm+0x10/0x10 [ 814.207170][T29384] ? __fget_files+0x2a/0x420 [ 814.207190][T29384] ? aa_sock_opt_perm+0xff/0x1a0 [ 814.207219][T29384] ? sock_common_setsockopt+0x36/0xc0 [ 814.207250][T29384] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 814.207283][T29384] do_sock_setsockopt+0x17c/0x1b0 [ 814.207312][T29384] __x64_sys_setsockopt+0x13d/0x1b0 [ 814.207339][T29384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.207368][T29384] do_syscall_64+0x174/0x580 [ 814.207388][T29384] ? trace_irq_disable+0x3b/0x140 [ 814.207410][T29384] ? clear_bhb_loop+0x40/0x90 [ 814.207438][T29384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.207460][T29384] RIP: 0033:0x7f6a1679de59 [ 814.207492][T29384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.207517][T29384] RSP: 002b:00007f6a1761c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 814.207540][T29384] RAX: ffffffffffffffda RBX: 00007f6a16a25fa0 RCX: 00007f6a1679de59 [ 814.207555][T29384] RDX: 0000000000000033 RSI: 0000000000000000 RDI: 0000000000000003 [ 814.207568][T29384] RBP: 00007f6a1761c090 R08: 0000000000000004 R09: 0000000000000000 [ 814.207581][T29384] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 814.207595][T29384] R13: 00007f6a16a26038 R14: 00007f6a16a25fa0 R15: 00007ffe7196fc28 [ 814.207630][T29384] [ 814.265797][T27577] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 814.452493][ T57] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 814.468887][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5985'. [ 814.491084][T27577] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 814.648086][T29389] syzkaller0: entered promiscuous mode [ 814.678669][T29389] syzkaller0: entered allmulticast mode [ 814.700501][T29400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5990'. [ 814.870206][T29405] bond4: entered promiscuous mode [ 814.911053][T29407] syz_tun: left allmulticast mode [ 814.941064][T29407] syz_tun: left promiscuous mode [ 814.958129][T29407] bridge0: port 3(syz_tun) entered disabled state [ 814.971026][T29414] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:0 [ 815.004621][T29414] No such timeout policy "syz0" [ 815.016864][T29407] bridge_slave_0: left allmulticast mode [ 815.024815][T29407] bridge_slave_0: left promiscuous mode [ 815.030707][T29407] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.043506][T29414] x_tables: duplicate underflow at hook 3 [ 815.051326][T29407] bridge_slave_1: left allmulticast mode [ 815.058229][T29407] bridge_slave_1: left promiscuous mode [ 815.074686][T29407] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.106501][T29407] bond0: (slave bond_slave_0): Releasing backup interface [ 815.124044][T29407] bond0: (slave bond_slave_1): Releasing backup interface [ 815.139004][T29407] team0: Port device team_slave_0 removed [ 815.147205][T29407] team0: Port device team_slave_1 removed [ 815.155737][T29407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 815.208102][T29399] bond4: left promiscuous mode [ 815.260642][T29422] syzkaller0: entered promiscuous mode [ 815.270681][T29422] syzkaller0: entered allmulticast mode [ 815.329423][T29431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6000'. [ 815.356061][T29433] FAULT_INJECTION: forcing a failure. [ 815.356061][T29433] name failslab, interval 1, probability 0, space 0, times 0 [ 815.370701][T29433] CPU: 0 UID: 0 PID: 29433 Comm: syz.1.6001 Not tainted syzkaller #0 PREEMPT(full) [ 815.370729][T29433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.370741][T29433] Call Trace: [ 815.370754][T29433] [ 815.370763][T29433] dump_stack_lvl+0xe8/0x150 [ 815.370795][T29433] should_fail_ex+0x40c/0x560 [ 815.370839][T29433] should_failslab+0xa8/0x100 [ 815.370867][T29433] __kmalloc_cache_noprof+0xa8/0x660 [ 815.370898][T29433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 815.370929][T29433] ? nfulnl_recv_config+0xd98/0x1680 [ 815.370955][T29433] ? nfulnl_recv_config+0xd98/0x1680 [ 815.370991][T29433] nfulnl_recv_config+0xd98/0x1680 [ 815.371031][T29433] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 815.371055][T29433] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 815.371097][T29433] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 815.371174][T29433] netlink_rcv_skb+0x226/0x4a0 [ 815.371199][T29433] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 815.371225][T29433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 815.371263][T29433] ? bpf_lsm_capable+0x9/0x20 [ 815.371282][T29433] ? security_capable+0x7e/0x2c0 [ 815.371316][T29433] nfnetlink_rcv+0x2b9/0x28c0 [ 815.371339][T29433] ? kernel_text_address+0xa5/0xe0 [ 815.371366][T29433] ? __kernel_text_address+0xd/0x30 [ 815.371390][T29433] ? unwind_get_return_address+0x4d/0x90 [ 815.371418][T29433] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 815.371449][T29433] ? arch_stack_walk+0xfb/0x150 [ 815.371490][T29433] ? stack_trace_save+0xa9/0x100 [ 815.371525][T29433] ? __lock_acquire+0x683/0x2cf0 [ 815.371547][T29433] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 815.371573][T29433] ? kasan_save_track+0x4f/0x80 [ 815.371592][T29433] ? kasan_save_track+0x3e/0x80 [ 815.371610][T29433] ? __kasan_slab_alloc+0x6c/0x80 [ 815.371631][T29433] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 815.371661][T29433] ? __alloc_skb+0x276/0x7a0 [ 815.371679][T29433] ? netlink_sendmsg+0x5d4/0xb40 [ 815.371702][T29433] ? sock_sendmsg_nosec+0x13a/0x180 [ 815.371729][T29433] ? ____sys_sendmsg+0x54e/0x850 [ 815.371761][T29433] ? __lock_acquire+0x683/0x2cf0 [ 815.371797][T29433] ? __netlink_lookup+0xc6/0x8b0 [ 815.371842][T29433] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.371867][T29433] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.371899][T29433] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.371923][T29433] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.371953][T29433] netlink_unicast+0x7bb/0x940 [ 815.371986][T29433] netlink_sendmsg+0x813/0xb40 [ 815.372020][T29433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.372050][T29433] ? aa_sock_msg_perm+0xf1/0x1b0 [ 815.372083][T29433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.372107][T29433] sock_sendmsg_nosec+0x13a/0x180 [ 815.372139][T29433] ____sys_sendmsg+0x54e/0x850 [ 815.372169][T29433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.372203][T29433] ? import_iovec+0x73/0xa0 [ 815.372241][T29433] ___sys_sendmsg+0x2a5/0x360 [ 815.372261][T29433] ? __lock_acquire+0x683/0x2cf0 [ 815.372286][T29433] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.372346][T29433] ? __fget_files+0x2a/0x420 [ 815.372365][T29433] ? __fget_files+0x3a2/0x420 [ 815.372394][T29433] __x64_sys_sendmsg+0x1b1/0x290 [ 815.372419][T29433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.372458][T29433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.372480][T29433] do_syscall_64+0x174/0x580 [ 815.372498][T29433] ? trace_irq_disable+0x3b/0x140 [ 815.372516][T29433] ? clear_bhb_loop+0x40/0x90 [ 815.372541][T29433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.372561][T29433] RIP: 0033:0x7f719dd9de59 [ 815.372579][T29433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.372597][T29433] RSP: 002b:00007f719ed52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.372618][T29433] RAX: ffffffffffffffda RBX: 00007f719e025fa0 RCX: 00007f719dd9de59 [ 815.372633][T29433] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 815.372646][T29433] RBP: 00007f719ed52090 R08: 0000000000000000 R09: 0000000000000000 [ 815.372660][T29433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.372672][T29433] R13: 00007f719e026038 R14: 00007f719e025fa0 R15: 00007ffe1b7adbb8 [ 815.372706][T29433] [ 815.780343][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 815.993755][T29437] netlink: 'syz.0.5999': attribute type 1 has an invalid length. [ 816.606618][T29469] batadv0: Caught tx_queue_len zero misconfig [ 816.739383][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6008'. [ 816.836888][T29476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.858652][T29474] hsr_slave_1 (unregistering): left promiscuous mode [ 816.877410][T29478] syzkaller0: entered promiscuous mode [ 816.878317][T29476] netlink: 'syz.4.6003': attribute type 1 has an invalid length. [ 816.891520][T29478] syzkaller0: entered allmulticast mode [ 816.901848][T29477] tipc: Started in network mode [ 816.907531][T29477] tipc: Node identity b61d0397d63c, cluster identity 4711 [ 816.917539][T29477] tipc: Enabled bearer , priority 0 [ 816.943021][T29486] netlink: 'syz.3.6010': attribute type 1 has an invalid length. [ 816.990466][T29488] bond5 (unregistering): Released all slaves [ 817.046596][T29494] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.6011'. [ 817.056625][T29495] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.6011'. [ 817.066068][T29495] openvswitch: netlink: Message has 16 unknown bytes. [ 817.074253][T29494] openvswitch: netlink: Message has 16 unknown bytes. [ 817.105987][T29477] tipc: Resetting bearer [ 817.148763][T29499] FAULT_INJECTION: forcing a failure. [ 817.148763][T29499] name failslab, interval 1, probability 0, space 0, times 0 [ 817.150921][T29477] tipc: Disabling bearer [ 817.161699][T29499] CPU: 0 UID: 0 PID: 29499 Comm: syz.2.6012 Not tainted syzkaller #0 PREEMPT(full) [ 817.161771][T29499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 817.161821][T29499] Call Trace: [ 817.161844][T29499] [ 817.161865][T29499] dump_stack_lvl+0xe8/0x150 [ 817.161950][T29499] should_fail_ex+0x40c/0x560 [ 817.162062][T29499] should_failslab+0xa8/0x100 [ 817.162139][T29499] __kmalloc_cache_noprof+0xa8/0x660 [ 817.162225][T29499] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 817.162309][T29499] ? nfulnl_recv_config+0xd98/0x1680 [ 817.162377][T29499] ? nfulnl_recv_config+0xd98/0x1680 [ 817.162472][T29499] nfulnl_recv_config+0xd98/0x1680 [ 817.162585][T29499] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 817.162646][T29499] ? unwind_get_return_address+0x4d/0x90 [ 817.162729][T29499] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 817.162844][T29499] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 817.163080][T29499] netlink_rcv_skb+0x226/0x4a0 [ 817.163158][T29499] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 817.163229][T29499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.163328][T29499] ? bpf_lsm_capable+0x9/0x20 [ 817.163381][T29499] ? security_capable+0x7e/0x2c0 [ 817.163467][T29499] nfnetlink_rcv+0x2b9/0x28c0 [ 817.163540][T29499] ? __dev_queue_xmit+0x29b/0x37f0 [ 817.163634][T29499] ? __local_bh_enable_ip+0xd0/0x130 [ 817.163719][T29499] ? lockdep_hardirqs_on+0x7a/0x110 [ 817.163797][T29499] ? __dev_queue_xmit+0x29b/0x37f0 [ 817.163869][T29499] ? __local_bh_enable_ip+0xd0/0x130 [ 817.163945][T29499] ? __dev_queue_xmit+0x29b/0x37f0 [ 817.164015][T29499] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 817.164078][T29499] ? do_syscall_64+0x174/0x580 [ 817.164134][T29499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.164227][T29499] ? __dev_queue_xmit+0x29b/0x37f0 [ 817.164298][T29499] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 817.164375][T29499] ? __pfx___dev_queue_xmit+0x10/0x10 [ 817.164502][T29499] ? ref_tracker_free+0x689/0x830 [ 817.164589][T29499] ? __pfx_ref_tracker_free+0x10/0x10 [ 817.164729][T29499] ? __skb_clone+0x449/0x6c0 [ 817.164822][T29499] ? skb_clone+0x246/0x3a0 [ 817.164902][T29499] ? __netlink_deliver_tap+0x811/0x860 [ 817.164964][T29499] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.165040][T29499] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.165109][T29499] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.165186][T29499] netlink_unicast+0x7bb/0x940 [ 817.165277][T29499] netlink_sendmsg+0x813/0xb40 [ 817.165373][T29499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.165457][T29499] ? aa_sock_msg_perm+0xf1/0x1b0 [ 817.165535][T29499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.165590][T29499] sock_sendmsg_nosec+0x13a/0x180 [ 817.165675][T29499] ____sys_sendmsg+0x54e/0x850 [ 817.165764][T29499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.165893][T29499] ? import_iovec+0x73/0xa0 [ 817.165965][T29499] ___sys_sendmsg+0x2a5/0x360 [ 817.166026][T29499] ? __lock_acquire+0x683/0x2cf0 [ 817.166101][T29499] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.166270][T29499] ? __fget_files+0x2a/0x420 [ 817.166317][T29499] ? __fget_files+0x3a2/0x420 [ 817.166410][T29499] __x64_sys_sendmsg+0x1b1/0x290 [ 817.166503][T29499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 817.166605][T29499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.166668][T29499] do_syscall_64+0x174/0x580 [ 817.166719][T29499] ? trace_irq_disable+0x3b/0x140 [ 817.166776][T29499] ? clear_bhb_loop+0x40/0x90 [ 817.166861][T29499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.166922][T29499] RIP: 0033:0x7f7d7519de59 [ 817.166977][T29499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.167028][T29499] RSP: 002b:00007f7d76091028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.167084][T29499] RAX: ffffffffffffffda RBX: 00007f7d75425fa0 RCX: 00007f7d7519de59 [ 817.167134][T29499] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 817.167168][T29499] RBP: 00007f7d76091090 R08: 0000000000000000 R09: 0000000000000000 [ 817.167207][T29499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.167229][T29499] R13: 00007f7d75426038 R14: 00007f7d75425fa0 R15: 00007ffc0982c6d8 [ 817.167264][T29499] [ 817.403327][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 817.900443][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'. [ 818.019779][T29524] netlink: 'syz.0.6016': attribute type 1 has an invalid length. [ 818.090172][T29526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6019'. [ 818.989532][T29554] FAULT_INJECTION: forcing a failure. [ 818.989532][T29554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.157731][T29554] CPU: 0 UID: 0 PID: 29554 Comm: syz.4.6026 Not tainted syzkaller #0 PREEMPT(full) [ 819.157760][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.157773][T29554] Call Trace: [ 819.157781][T29554] [ 819.157790][T29554] dump_stack_lvl+0xe8/0x150 [ 819.157821][T29554] should_fail_ex+0x40c/0x560 [ 819.157855][T29554] _copy_from_user+0x2d/0xb0 [ 819.157883][T29554] generic_map_update_batch+0x6a3/0x9a0 [ 819.157921][T29554] ? __pfx_generic_map_update_batch+0x10/0x10 [ 819.157949][T29554] ? __fget_files+0x2a/0x420 [ 819.157984][T29554] ? __pfx_generic_map_update_batch+0x10/0x10 [ 819.158012][T29554] bpf_map_do_batch+0x391/0x630 [ 819.158041][T29554] __sys_bpf+0xbe5/0xd90 [ 819.158070][T29554] ? __pfx___sys_bpf+0x10/0x10 [ 819.158104][T29554] ? __fget_files+0x2a/0x420 [ 819.158160][T29554] ? ksys_write+0x242/0x270 [ 819.158206][T29554] ? __pfx_ksys_write+0x10/0x10 [ 819.158238][T29554] __x64_sys_bpf+0xba/0xd0 [ 819.158270][T29554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.158295][T29554] do_syscall_64+0x174/0x580 [ 819.158316][T29554] ? trace_irq_disable+0x3b/0x140 [ 819.158337][T29554] ? clear_bhb_loop+0x40/0x90 [ 819.158364][T29554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.158387][T29554] RIP: 0033:0x7f254299de59 [ 819.158407][T29554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.158426][T29554] RSP: 002b:00007f254390f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 819.158449][T29554] RAX: ffffffffffffffda RBX: 00007f2542c25fa0 RCX: 00007f254299de59 [ 819.158466][T29554] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 819.158481][T29554] RBP: 00007f254390f090 R08: 0000000000000000 R09: 0000000000000000 [ 819.158495][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.158509][T29554] R13: 00007f2542c26038 R14: 00007f2542c25fa0 R15: 00007ffd3cf8b208 [ 819.158545][T29554] [ 819.372883][T29564] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 819.378249][T29563] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 819.785407][T29583] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6035'. [ 819.888100][T29588] nbd: socks must be embedded in a SOCK_ITEM attr [ 819.909842][T29588] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6038'. [ 820.314044][T29612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6044'. [ 820.438642][T29618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6046'. [ 820.577868][T29625] batadv_slave_1: entered promiscuous mode [ 820.594536][T29624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6049'. [ 820.611466][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6049'. [ 820.615204][T29625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6048'. [ 820.634414][T29624] netlink: 'syz.0.6049': attribute type 12 has an invalid length. [ 820.700163][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.700481][T29624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6049'. [ 820.711096][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.745062][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.784599][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.803785][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6049'. [ 820.822435][T29624] netlink: 'syz.0.6049': attribute type 12 has an invalid length. [ 820.848599][T29625] batadv_slave_1: left promiscuous mode [ 820.856831][T29630] netlink: 'syz.3.6052': attribute type 3 has an invalid length. [ 821.109408][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.123187][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.149774][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.167100][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.177063][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.186665][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.196999][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.213129][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.223548][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.253893][T29637] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 821.363019][T29649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6059'. [ 821.638787][ T5821] IPVS: starting estimator thread 0... [ 821.700180][T29666] xt_hashlimit: invalid rate [ 821.733232][T29663] IPVS: using max 27 ests per chain, 64800 per kthread [ 821.795613][T29671] FAULT_INJECTION: forcing a failure. [ 821.795613][T29671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.850815][T29671] CPU: 0 UID: 0 PID: 29671 Comm: syz.2.6064 Not tainted syzkaller #0 PREEMPT(full) [ 821.850847][T29671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 821.850859][T29671] Call Trace: [ 821.850868][T29671] [ 821.850876][T29671] dump_stack_lvl+0xe8/0x150 [ 821.850904][T29671] should_fail_ex+0x40c/0x560 [ 821.850936][T29671] _copy_from_user+0x2d/0xb0 [ 821.850959][T29671] generic_map_update_batch+0x6a3/0x9a0 [ 821.850996][T29671] ? __pfx_generic_map_update_batch+0x10/0x10 [ 821.851023][T29671] ? __fget_files+0x2a/0x420 [ 821.851050][T29671] ? __pfx_generic_map_update_batch+0x10/0x10 [ 821.851078][T29671] bpf_map_do_batch+0x391/0x630 [ 821.851106][T29671] __sys_bpf+0xbe5/0xd90 [ 821.851134][T29671] ? __pfx___sys_bpf+0x10/0x10 [ 821.851165][T29671] ? __fget_files+0x2a/0x420 [ 821.851202][T29671] ? ksys_write+0x242/0x270 [ 821.851230][T29671] ? __pfx_ksys_write+0x10/0x10 [ 821.851260][T29671] __x64_sys_bpf+0xba/0xd0 [ 821.851288][T29671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.851311][T29671] do_syscall_64+0x174/0x580 [ 821.851328][T29671] ? trace_irq_disable+0x3b/0x140 [ 821.851348][T29671] ? clear_bhb_loop+0x40/0x90 [ 821.851371][T29671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.851391][T29671] RIP: 0033:0x7f7d7519de59 [ 821.851410][T29671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.851427][T29671] RSP: 002b:00007f7d76091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 821.851448][T29671] RAX: ffffffffffffffda RBX: 00007f7d75425fa0 RCX: 00007f7d7519de59 [ 821.851462][T29671] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 821.851474][T29671] RBP: 00007f7d76091090 R08: 0000000000000000 R09: 0000000000000000 [ 821.851487][T29671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.851499][T29671] R13: 00007f7d75426038 R14: 00007f7d75425fa0 R15: 00007ffc0982c6d8 [ 821.851530][T29671] [ 823.249840][T29721] FAULT_INJECTION: forcing a failure. [ 823.249840][T29721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.265293][T29721] CPU: 0 UID: 0 PID: 29721 Comm: syz.3.6077 Not tainted syzkaller #0 PREEMPT(full) [ 823.265324][T29721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.265337][T29721] Call Trace: [ 823.265345][T29721] [ 823.265355][T29721] dump_stack_lvl+0xe8/0x150 [ 823.265399][T29721] should_fail_ex+0x40c/0x560 [ 823.265454][T29721] _copy_from_user+0x2d/0xb0 [ 823.265479][T29721] generic_map_update_batch+0x651/0x9a0 [ 823.265522][T29721] ? __pfx_generic_map_update_batch+0x10/0x10 [ 823.265554][T29721] ? __fget_files+0x2a/0x420 [ 823.265585][T29721] ? __pfx_generic_map_update_batch+0x10/0x10 [ 823.265615][T29721] bpf_map_do_batch+0x391/0x630 [ 823.265647][T29721] __sys_bpf+0xbe5/0xd90 [ 823.265679][T29721] ? __pfx___sys_bpf+0x10/0x10 [ 823.265714][T29721] ? __fget_files+0x2a/0x420 [ 823.265757][T29721] ? ksys_write+0x242/0x270 [ 823.265788][T29721] ? __pfx_ksys_write+0x10/0x10 [ 823.265821][T29721] __x64_sys_bpf+0xba/0xd0 [ 823.265855][T29721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.265880][T29721] do_syscall_64+0x174/0x580 [ 823.265903][T29721] ? clear_bhb_loop+0x40/0x90 [ 823.265932][T29721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.265954][T29721] RIP: 0033:0x7f48cd59de59 [ 823.265975][T29721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.265995][T29721] RSP: 002b:00007f48ce4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 823.266019][T29721] RAX: ffffffffffffffda RBX: 00007f48cd825fa0 RCX: 00007f48cd59de59 [ 823.266036][T29721] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 823.266051][T29721] RBP: 00007f48ce4d9090 R08: 0000000000000000 R09: 0000000000000000 [ 823.266073][T29721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.266088][T29721] R13: 00007f48cd826038 R14: 00007f48cd825fa0 R15: 00007ffee17dbd18 [ 823.266128][T29721] [ 823.700762][T29736] ip6gre1: entered promiscuous mode [ 823.706528][T29736] ip6gre1: entered allmulticast mode [ 823.715339][ T9674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 823.718892][T29736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 823.725602][ T9674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 823.742345][T13238] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.015026][ T5821] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.392855][T13238] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.545587][T29767] FAULT_INJECTION: forcing a failure. [ 824.545587][T29767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.571168][T29767] CPU: 1 UID: 0 PID: 29767 Comm: syz.3.6091 Not tainted syzkaller #0 PREEMPT(full) [ 824.571199][T29767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.571213][T29767] Call Trace: [ 824.571222][T29767] [ 824.571232][T29767] dump_stack_lvl+0xe8/0x150 [ 824.571277][T29767] should_fail_ex+0x40c/0x560 [ 824.571312][T29767] _copy_from_user+0x2d/0xb0 [ 824.571337][T29767] generic_map_update_batch+0x6a3/0x9a0 [ 824.571376][T29767] ? __pfx_generic_map_update_batch+0x10/0x10 [ 824.571406][T29767] ? __fget_files+0x2a/0x420 [ 824.571435][T29767] ? __pfx_generic_map_update_batch+0x10/0x10 [ 824.571464][T29767] bpf_map_do_batch+0x391/0x630 [ 824.571494][T29767] __sys_bpf+0xbe5/0xd90 [ 824.571525][T29767] ? __pfx___sys_bpf+0x10/0x10 [ 824.571559][T29767] ? __fget_files+0x2a/0x420 [ 824.571600][T29767] ? ksys_write+0x242/0x270 [ 824.571628][T29767] ? __pfx_ksys_write+0x10/0x10 [ 824.571660][T29767] __x64_sys_bpf+0xba/0xd0 [ 824.571693][T29767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.571716][T29767] do_syscall_64+0x174/0x580 [ 824.571737][T29767] ? trace_irq_disable+0x3b/0x140 [ 824.571756][T29767] ? clear_bhb_loop+0x40/0x90 [ 824.571782][T29767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.571804][T29767] RIP: 0033:0x7f48cd59de59 [ 824.571823][T29767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.571841][T29767] RSP: 002b:00007f48ce4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.571873][T29767] RAX: ffffffffffffffda RBX: 00007f48cd825fa0 RCX: 00007f48cd59de59 [ 824.571888][T29767] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 824.571902][T29767] RBP: 00007f48ce4d9090 R08: 0000000000000000 R09: 0000000000000000 [ 824.571916][T29767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.571929][T29767] R13: 00007f48cd826038 R14: 00007f48cd825fa0 R15: 00007ffee17dbd18 [ 824.571963][T29767] [ 824.832582][T29771] __nla_validate_parse: 8 callbacks suppressed [ 824.832603][T29771] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6093'. [ 824.850926][T29771] .`: renamed from bond0 [ 824.919031][T29771] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6093'. [ 825.242290][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 825.272100][T29787] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 825.291377][T29789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6097'. [ 825.323232][T29769] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 826.040177][T29828] FAULT_INJECTION: forcing a failure. [ 826.040177][T29828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.083495][T29828] CPU: 1 UID: 0 PID: 29828 Comm: syz.1.6104 Not tainted syzkaller #0 PREEMPT(full) [ 826.083524][T29828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.083537][T29828] Call Trace: [ 826.083546][T29828] [ 826.083555][T29828] dump_stack_lvl+0xe8/0x150 [ 826.083586][T29828] should_fail_ex+0x40c/0x560 [ 826.083619][T29828] _copy_from_user+0x2d/0xb0 [ 826.083644][T29828] generic_map_update_batch+0x651/0x9a0 [ 826.083684][T29828] ? __pfx_generic_map_update_batch+0x10/0x10 [ 826.083712][T29828] ? __fget_files+0x2a/0x420 [ 826.083741][T29828] ? __pfx_generic_map_update_batch+0x10/0x10 [ 826.083770][T29828] bpf_map_do_batch+0x391/0x630 [ 826.083800][T29828] __sys_bpf+0xbe5/0xd90 [ 826.083832][T29828] ? __pfx___sys_bpf+0x10/0x10 [ 826.083885][T29828] ? __fget_files+0x2a/0x420 [ 826.083927][T29828] ? ksys_write+0x242/0x270 [ 826.083960][T29828] ? __pfx_ksys_write+0x10/0x10 [ 826.083993][T29828] __x64_sys_bpf+0xba/0xd0 [ 826.084025][T29828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.084049][T29828] do_syscall_64+0x174/0x580 [ 826.084070][T29828] ? trace_irq_disable+0x3b/0x140 [ 826.084090][T29828] ? clear_bhb_loop+0x40/0x90 [ 826.084119][T29828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.084146][T29828] RIP: 0033:0x7f719dd9de59 [ 826.084167][T29828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.084186][T29828] RSP: 002b:00007f719ed52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 826.084217][T29828] RAX: ffffffffffffffda RBX: 00007f719e025fa0 RCX: 00007f719dd9de59 [ 826.084233][T29828] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 826.084248][T29828] RBP: 00007f719ed52090 R08: 0000000000000000 R09: 0000000000000000 [ 826.084261][T29828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 826.084274][T29828] R13: 00007f719e026038 R14: 00007f719e025fa0 R15: 00007ffe1b7adbb8 [ 826.084310][T29828] [ 826.337154][T29824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6103'. [ 826.382532][T29831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6103'. [ 826.633428][T29840] batman_adv: batadv0: Adding interface: dummy0 [ 826.642504][T29844] validate_nla: 37 callbacks suppressed [ 826.642522][T29844] netlink: 'syz.1.6111': attribute type 8 has an invalid length. [ 826.644597][T29840] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.690453][T29844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6111'. [ 826.759883][T29840] batman_adv: batadv0: Interface activated: dummy0 [ 827.026295][T29863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6115'. [ 827.036089][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6115'. [ 827.051396][T29862] : renamed from bond_slave_0 (while UP) [ 827.096429][T29873] sock: sock_set_timeout: `syz.0.6117' (pid 29873) tries to set negative timeout [ 827.200668][T29878] netlink: 'syz.1.6118': attribute type 11 has an invalid length. [ 827.304261][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6119'. [ 827.402353][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 827.490799][T29893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6109'. [ 827.531627][T29889] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 827.540484][T29889] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 827.716984][T29895] netlink: 'syz.3.6123': attribute type 83 has an invalid length. [ 828.034692][T29914] netlink: 'syz.2.6130': attribute type 4 has an invalid length. [ 828.173369][T29922] ip6t_REJECT: ECHOREPLY is not supported [ 828.199476][T29922] lo: Caught tx_queue_len zero misconfig [ 828.709862][T29934] netlink: 'syz.2.6135': attribute type 2 has an invalid length. [ 828.869767][T29936] xt_hashlimit: size too large, truncated to 1048576 [ 828.928604][T29937] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.950107][T29937] bridge_slave_0 (unregistering): left allmulticast mode [ 828.957646][T29937] bridge_slave_0 (unregistering): left promiscuous mode [ 828.967626][T29937] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.978280][T29939] netlink: 'syz.3.6136': attribute type 11 has an invalid length. [ 829.196462][T29946] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 829.362899][T29937] ip6_vti0: entered promiscuous mode [ 829.391701][T29937] ip6_vti0: entered allmulticast mode [ 830.149879][T29994] __nla_validate_parse: 15 callbacks suppressed [ 830.149900][T29994] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6147'. [ 830.321056][T30008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6147'. [ 830.407774][T30028] netlink: 'syz.1.6154': attribute type 1 has an invalid length. [ 830.449982][T30012] bond2: option lacp_rate: invalid value (3) [ 830.463405][T30029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6154'. [ 830.474711][T30012] bond2 (unregistering): Released all slaves [ 830.593908][T30028] bond0: entered promiscuous mode [ 830.599805][T30028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.757919][T30046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.774868][T30046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.917707][T30052] netlink: 'syz.1.6160': attribute type 2 has an invalid length. [ 830.934412][T30052] ´: entered promiscuous mode [ 832.534941][T30107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6171'. [ 833.031613][T29994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.261771][T30114] netlink: 'syz.0.6172': attribute type 3 has an invalid length. [ 833.297957][T30116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6174'. [ 833.424042][T30123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 833.478228][T30126] TC_ACT_REPEAT abuse ? [ 833.631566][T30135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6180'. [ 833.656383][T30136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6180'. [ 833.907187][T30140] pim6reg: entered allmulticast mode [ 833.933072][T30140] pim6reg: left allmulticast mode [ 833.991082][T30145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6182'. [ 834.126103][T30147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6178'. [ 834.842326][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 835.470511][T30185] __nla_validate_parse: 1 callbacks suppressed [ 835.470532][T30185] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6194'. [ 835.553513][T30188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6195'. [ 835.618038][T30188] bridge3: port 1(vlan2) entered blocking state [ 835.638542][T30188] bridge3: port 1(vlan2) entered disabled state [ 835.662679][T30188] vlan2: entered allmulticast mode [ 835.685459][T30188] batadv0: entered allmulticast mode [ 835.708682][T30188] vlan2: entered promiscuous mode [ 835.717544][T30198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6199'. [ 835.726704][T30188] batadv0: entered promiscuous mode [ 835.733606][T30188] bridge3: port 1(vlan2) entered blocking state [ 835.733743][T30188] bridge3: port 1(vlan2) entered forwarding state [ 835.761653][T30198] nbd: must specify at least one socket [ 835.956704][T30209] netlink: 'syz.3.6202': attribute type 83 has an invalid length. [ 835.990860][T30209] netlink: 'syz.3.6202': attribute type 11 has an invalid length. [ 836.001479][T30209] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6202'. [ 836.275798][T30226] netlink: 2588 bytes leftover after parsing attributes in process `syz.1.6206'. [ 836.606374][T30198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 836.621785][T30198] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 836.971658][T30198] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 837.001229][T30198] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 837.045095][T30235] x_tables: duplicate entry at hook 1 [ 837.078021][T30235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6210'. [ 837.144129][T30235] netlink: 'syz.2.6210': attribute type 1 has an invalid length. [ 837.272623][T30241] sctp: [Deprecated]: syz.3.6212 (pid 30241) Use of int in max_burst socket option. [ 837.272623][T30241] Use struct sctp_assoc_value instead [ 837.328440][T30198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 837.337834][T30241] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 837.346126][T30198] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 837.442656][T30246] netlink: 'syz.2.6214': attribute type 62 has an invalid length. [ 837.503852][T30198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.511854][T30240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6211'. [ 837.525678][T30198] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 837.545633][T30240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6211'. [ 837.556482][T30240] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6211'. [ 837.613963][T30240] smbdirect: ib_dev[syz2] removed [ 837.903781][T30263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6218'. [ 838.682248][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.021102][T30295] netlink: 'syz.3.6228': attribute type 1 has an invalid length. [ 839.235061][T30301] netlink: 'syz.3.6230': attribute type 29 has an invalid length. [ 839.596671][T30319] netlink: 'syz.1.6233': attribute type 29 has an invalid length. [ 839.978012][T30336] veth1_to_bond: Caught tx_queue_len zero misconfig [ 840.602325][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 840.677914][T30366] __nla_validate_parse: 4 callbacks suppressed [ 840.677933][T30366] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6246'. [ 840.750701][T30365] syzkaller1: entered promiscuous mode [ 840.772218][T30365] syzkaller1: entered allmulticast mode [ 840.867785][T30374] netlink: 'syz.3.6245': attribute type 1 has an invalid length. [ 840.896777][T30374] netlink: 'syz.3.6245': attribute type 2 has an invalid length. [ 840.991158][T30375] netlink: 'syz.3.6245': attribute type 1 has an invalid length. [ 841.011256][T30375] netlink: 'syz.3.6245': attribute type 2 has an invalid length. [ 841.404611][T30397] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6251'. [ 841.493562][T30397] 8021q: adding VLAN 0 to HW filter on device .` [ 841.515629][T30397] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.569477][T30401] siw: device registration error -23 [ 841.939595][T30397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 841.950310][T30397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 841.967949][T30397] veth1_vlan: left promiscuous mode [ 841.975432][T30397] veth0_vlan: left promiscuous mode [ 841.984663][T30397] veth0_vlan: entered promiscuous mode [ 841.994653][T30397] veth1_vlan: entered promiscuous mode [ 842.010409][T30397] veth1_macvtap: left promiscuous mode [ 842.027851][T30397] veth0_macvtap: left promiscuous mode [ 842.036314][T30397] veth0_macvtap: entered promiscuous mode [ 842.044809][T30397] veth1_macvtap: entered promiscuous mode [ 842.062497][T30397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.071829][T30397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.082992][T30397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.091381][T30397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.100807][T30397] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 842.178316][T30411] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6253'. [ 842.189545][T30411] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6253'. [ 842.201731][T30411] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 842.221186][ T9674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.242404][ T9674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.268624][ T9674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.297776][ T9674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.441566][T30425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6258'. [ 842.551395][T30430] syzkaller1: entered promiscuous mode [ 842.558911][T30430] syzkaller1: entered allmulticast mode [ 842.954083][T30439] dummy0: left promiscuous mode [ 843.268358][T30456] openvswitch: netlink: Missing valid actions attribute. [ 843.276437][T30454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6266'. [ 843.288175][T30456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.297239][T30454] bond0: option miimon: invalid value (18446744072967730723) [ 843.315871][T30454] bond0: option miimon: allowed values 0 - 2147483647 [ 843.589790][T30464] netlink: 'syz.1.6268': attribute type 3 has an invalid length. [ 843.608041][T30464] netlink: 'syz.1.6268': attribute type 1 has an invalid length. [ 843.655469][T30464] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6268'. [ 843.696436][T30465] syzkaller0: entered promiscuous mode [ 843.702098][T30464] NCSI netlink: No device for ifindex 2147483648 [ 843.729437][T30465] syzkaller0: entered allmulticast mode [ 843.834432][T30486] netlink: 'syz.3.6274': attribute type 12 has an invalid length. [ 843.845731][T30486] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 843.966666][T30492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6274'. [ 844.250567][T30503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 845.179007][T30535] wlan0 speed is unknown, defaulting to 1000 [ 845.189118][T30535] lo speed is unknown, defaulting to 1000 [ 845.203338][T30536] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 845.260019][T30538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6292'. [ 845.360088][T30542] netlink: 'syz.2.6293': attribute type 4 has an invalid length. [ 845.793771][T30545] netlink: 'syz.0.6294': attribute type 1 has an invalid length. [ 845.865781][T30553] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6296'. [ 846.085408][T30557] tipc: Enabling of bearer rejected, media not registered [ 846.318555][T30566] netlink: 'syz.4.6297': attribute type 25 has an invalid length. [ 847.336169][T30596] syzkaller0: entered promiscuous mode [ 847.348004][T30596] syzkaller0: entered allmulticast mode [ 847.677825][T30608] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 847.691609][T30608] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 847.706184][T30608] veth0_virt_wifi: entered allmulticast mode [ 847.716524][T30608] veth0_virt_wifi: entered promiscuous mode [ 847.730803][T30608] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 847.738118][T30608] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 847.969961][T30619] sctp: [Deprecated]: syz.0.6315 (pid 30619) Use of int in max_burst socket option. [ 847.969961][T30619] Use struct sctp_assoc_value instead [ 848.000657][T30630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6316'. [ 848.053288][T30630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6316'. [ 848.085502][T30632] sch_tbf: burst 240 is lower than device lo mtu (1550) ! [ 848.164492][T30632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6318'. [ 848.883196][T30660] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6324'. [ 848.901071][T30660] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6324'. [ 848.911787][T30660] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 848.954411][T30660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6324'. [ 849.028709][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'. [ 849.073641][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6325'. [ 849.355505][T30680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6330'. [ 849.479887][T30685] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 849.562246][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 850.013794][T30704] netlink: 'syz.2.6333': attribute type 1 has an invalid length. [ 850.203125][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 850.227979][T30711] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 850.454738][T30718] bridge4: entered promiscuous mode [ 850.460062][T30718] bridge4: entered allmulticast mode [ 850.471247][T30718] team0: Port device bridge4 added [ 850.750085][T30725] syzkaller0: entered promiscuous mode [ 850.755877][T30725] syzkaller0: entered allmulticast mode [ 850.893314][T30733] __nla_validate_parse: 2 callbacks suppressed [ 850.893337][T30733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6349'. [ 850.929991][T30733] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.937284][T30733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.944930][T30733] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.952171][T30733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.965792][T30733] bridge0: entered promiscuous mode [ 850.988032][T30733] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 851.421371][T30756] netlink: 193 bytes leftover after parsing attributes in process `syz.2.6357'. [ 851.511734][T30764] netlink: 'syz.2.6357': attribute type 83 has an invalid length. [ 851.628323][T30768] syzkaller0: entered promiscuous mode [ 851.687117][T30768] syzkaller0: entered allmulticast mode [ 851.908660][T30777] netlink: 'syz.3.6361': attribute type 11 has an invalid length. [ 851.940903][T30777] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6361'. [ 852.652613][T30803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6366'. [ 853.111097][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6371'. [ 853.123153][T30817] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 853.130207][T30814] syzkaller0: entered promiscuous mode [ 853.140965][T30814] syzkaller0: entered allmulticast mode [ 853.218444][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6370'. [ 853.269004][T30828] netlink: 'syz.0.6374': attribute type 1 has an invalid length. [ 853.311878][T30830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6375'. [ 853.385872][T30828] bond1: entered promiscuous mode [ 853.391867][T30828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.443726][T30833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.450895][T30833] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 853.463033][T30833] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 853.475710][T30833] bond1: (slave xfrm1): making interface the new active one [ 853.484040][T30833] xfrm1: entered promiscuous mode [ 853.490997][T30833] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 853.542237][T30836] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 853.565105][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6370'. [ 853.901413][T30848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.089494][T30848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.286196][T30848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.492748][T30848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.674437][ T3284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.780310][T13525] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.824911][T13520] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.925704][T30883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6386'. [ 855.230140][T13520] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.251257][T30883] bridge0: Device is already in use. [ 855.351632][T30897] FAULT_INJECTION: forcing a failure. [ 855.351632][T30897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.367797][T30897] CPU: 1 UID: 0 PID: 30897 Comm: syz.2.6389 Not tainted syzkaller #0 PREEMPT(full) [ 855.367827][T30897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.367840][T30897] Call Trace: [ 855.367849][T30897] [ 855.367858][T30897] dump_stack_lvl+0xe8/0x150 [ 855.367891][T30897] should_fail_ex+0x40c/0x560 [ 855.367927][T30897] _copy_from_user+0x2d/0xb0 [ 855.367952][T30897] generic_map_update_batch+0x6a3/0x9a0 [ 855.367993][T30897] ? __pfx_generic_map_update_batch+0x10/0x10 [ 855.368022][T30897] ? __fget_files+0x2a/0x420 [ 855.368051][T30897] ? __pfx_generic_map_update_batch+0x10/0x10 [ 855.368081][T30897] bpf_map_do_batch+0x391/0x630 [ 855.368111][T30897] __sys_bpf+0xbe5/0xd90 [ 855.368142][T30897] ? __pfx___sys_bpf+0x10/0x10 [ 855.368188][T30897] ? __fget_files+0x2a/0x420 [ 855.368226][T30897] ? ksys_write+0x242/0x270 [ 855.368253][T30897] ? __pfx_ksys_write+0x10/0x10 [ 855.368289][T30897] __x64_sys_bpf+0xba/0xd0 [ 855.368320][T30897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.368342][T30897] do_syscall_64+0x174/0x580 [ 855.368361][T30897] ? trace_irq_disable+0x3b/0x140 [ 855.368380][T30897] ? clear_bhb_loop+0x40/0x90 [ 855.368405][T30897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.368425][T30897] RIP: 0033:0x7f7d7519de59 [ 855.368444][T30897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.368461][T30897] RSP: 002b:00007f7d76091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 855.368483][T30897] RAX: ffffffffffffffda RBX: 00007f7d75425fa0 RCX: 00007f7d7519de59 [ 855.368498][T30897] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 855.368511][T30897] RBP: 00007f7d76091090 R08: 0000000000000000 R09: 0000000000000000 [ 855.368524][T30897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 855.368536][T30897] R13: 00007f7d75426038 R14: 00007f7d75425fa0 R15: 00007ffc0982c6d8 [ 855.368568][T30897] [ 855.736464][T30888] syzkaller0: entered promiscuous mode [ 855.743749][T30888] syzkaller0: entered allmulticast mode [ 855.887377][T30903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6390'. [ 855.938859][T30908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6390'. [ 855.975825][T30919] netlink: 'syz.1.6395': attribute type 1 has an invalid length. [ 856.001552][T30919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6395'. [ 856.169063][T30926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6396'. [ 858.378506][T30918] syzkaller0: entered promiscuous mode [ 858.384290][T30918] syzkaller0: entered allmulticast mode [ 858.410302][T30920] bridge2: entered allmulticast mode [ 858.460154][T30929] No such timeout policy "syz0" [ 858.526369][T30931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6398'. [ 858.564747][T30935] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 859.551186][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6409'. [ 859.582718][T30967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6409'. [ 859.625166][T30968] syzkaller0: entered promiscuous mode [ 859.630828][T30968] syzkaller0: entered allmulticast mode [ 859.657388][T30967] gretap0: entered promiscuous mode [ 859.664861][T30967] macvlan0: entered allmulticast mode [ 859.670417][T30967] gretap0: entered allmulticast mode [ 859.717924][T30972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6412'. [ 859.773359][T30974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6413'. [ 859.796243][T30974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6413'. [ 859.811827][T30975] FAULT_INJECTION: forcing a failure. [ 859.811827][T30975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.830118][T30975] CPU: 0 UID: 0 PID: 30975 Comm: syz.1.6412 Not tainted syzkaller #0 PREEMPT(full) [ 859.830147][T30975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 859.830159][T30975] Call Trace: [ 859.830168][T30975] [ 859.830176][T30975] dump_stack_lvl+0xe8/0x150 [ 859.830207][T30975] should_fail_ex+0x40c/0x560 [ 859.830239][T30975] _copy_from_user+0x2d/0xb0 [ 859.830262][T30975] ___sys_sendmsg+0x1c6/0x360 [ 859.830283][T30975] ? __lock_acquire+0x683/0x2cf0 [ 859.830308][T30975] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.830374][T30975] ? __fget_files+0x2a/0x420 [ 859.830393][T30975] ? __fget_files+0x3a2/0x420 [ 859.830441][T30975] __x64_sys_sendmsg+0x1b1/0x290 [ 859.830468][T30975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.830512][T30975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.830536][T30975] do_syscall_64+0x174/0x580 [ 859.830555][T30975] ? trace_irq_disable+0x3b/0x140 [ 859.830575][T30975] ? clear_bhb_loop+0x40/0x90 [ 859.830611][T30975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.830648][T30975] RIP: 0033:0x7f719dd9de59 [ 859.830667][T30975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.830685][T30975] RSP: 002b:00007f719ed31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.830707][T30975] RAX: ffffffffffffffda RBX: 00007f719e026090 RCX: 00007f719dd9de59 [ 859.830722][T30975] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 859.830735][T30975] RBP: 00007f719ed31090 R08: 0000000000000000 R09: 0000000000000000 [ 859.830749][T30975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.830760][T30975] R13: 00007f719e026128 R14: 00007f719e026090 R15: 00007ffe1b7adbb8 [ 859.830794][T30975] [ 860.113549][T30977] netlink: 'syz.0.6414': attribute type 1 has an invalid length. [ 860.144114][T30977] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6414'. [ 860.330976][T30994] sctp: [Deprecated]: syz.3.6419 (pid 30994) Use of int in maxseg socket option. [ 860.330976][T30994] Use struct sctp_assoc_value instead [ 860.806689][T31009] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.825959][T31011] netlink: 'syz.1.6426': attribute type 11 has an invalid length. [ 860.886520][T31012] netlink: 'syz.1.6426': attribute type 11 has an invalid length. [ 860.952300][T31015] tipc: Started in network mode [ 860.957363][T31015] tipc: Node identity ac14140f, cluster identity 4711 [ 860.968696][T31015] tipc: Enabled bearer , priority 26 [ 861.038767][T31011] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 861.070411][T31012] __nla_validate_parse: 2 callbacks suppressed [ 861.070432][T31012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6426'. [ 861.161628][T31011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6426'. [ 861.561352][T31030] netlink: 'syz.1.6432': attribute type 1 has an invalid length. [ 861.845091][T31028] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6429'. [ 861.887628][T31030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.896873][T31031] bond5: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 861.911433][T31031] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 861.966893][T31032] bond5: (slave ip6gretap1): making interface the new active one [ 862.007011][T31032] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 862.067664][T31040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6435'. [ 862.101031][T27577] tipc: Node number set to 2886997007 [ 862.324476][T31051] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 862.394993][T31051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6439'. [ 862.584981][T31064] wlan0 speed is unknown, defaulting to 1000 [ 862.596377][T31064] lo speed is unknown, defaulting to 1000 [ 862.967573][T31079] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6447'. [ 862.999637][T31080] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6447'. [ 863.114651][T31076] netlink: 'syz.2.6446': attribute type 1 has an invalid length. [ 863.214776][T31087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 863.374481][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 863.700399][T31098] tunl0: Caught tx_queue_len zero misconfig [ 863.719409][T31098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6451'. [ 864.214670][T31120] netlink: 'syz.3.6457': attribute type 11 has an invalid length. [ 864.629020][T31137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 865.001723][T31154] netlink: 'syz.2.6466': attribute type 8 has an invalid length. [ 865.014262][ C0] ================================================================== [ 865.022392][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.030427][ C0] Read of size 2 at addr ffff888154e3a0f4 by task syz.3.6468/31148 [ 865.038351][ C0] [ 865.040700][ C0] CPU: 0 UID: 0 PID: 31148 Comm: syz.3.6468 Not tainted syzkaller #0 PREEMPT(full) [ 865.040726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 865.040739][ C0] Call Trace: [ 865.040748][ C0] [ 865.040757][ C0] dump_stack_lvl+0xe8/0x150 [ 865.040785][ C0] print_address_description+0x55/0x1e0 [ 865.040810][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.040835][ C0] print_report+0x58/0x70 [ 865.040856][ C0] kasan_report+0x117/0x150 [ 865.040908][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.040941][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.040977][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 865.041015][ C0] ? lock_acquire+0x106/0x350 [ 865.041041][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 865.041071][ C0] ? lock_acquire+0x106/0x350 [ 865.041104][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.041129][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.041153][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 865.041193][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 865.041224][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.041247][ C0] ? get_random_u32+0x13a/0x8b0 [ 865.041286][ C0] ? lock_acquire+0x106/0x350 [ 865.041308][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 865.041340][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 865.041368][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 865.041397][ C0] ? dev_gro_receive+0x1097/0x2380 [ 865.041425][ C0] napi_complete_done+0x299/0x730 [ 865.041456][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 865.041487][ C0] ? gro_cell_poll+0x175/0x5d0 [ 865.041520][ C0] gro_cell_poll+0x5ab/0x5d0 [ 865.041556][ C0] ? gro_cell_poll+0x175/0x5d0 [ 865.041587][ C0] __napi_poll+0xaa/0x330 [ 865.041617][ C0] net_rx_action+0x61d/0xf50 [ 865.041653][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 865.041682][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 865.041718][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 865.041738][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 865.041766][ C0] ? sched_clock+0x3f/0x60 [ 865.041793][ C0] handle_softirqs+0x225/0x840 [ 865.041825][ C0] ? do_softirq+0x76/0xd0 [ 865.041856][ C0] ? tun_rx_batched+0x185/0x790 [ 865.041887][ C0] do_softirq+0x76/0xd0 [ 865.041943][ C0] [ 865.041951][ C0] [ 865.041960][ C0] __local_bh_enable_ip+0xf8/0x130 [ 865.041990][ C0] ? tun_rx_batched+0x185/0x790 [ 865.042021][ C0] tun_rx_batched+0x616/0x790 [ 865.042059][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 865.042092][ C0] ? tun_get_user+0x2717/0x4370 [ 865.042125][ C0] ? tun_get_user+0x2717/0x4370 [ 865.042158][ C0] ? tun_get_user+0x23cb/0x4370 [ 865.042190][ C0] ? tun_get_user+0x23cb/0x4370 [ 865.042221][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 865.042252][ C0] ? tun_get_user+0x2717/0x4370 [ 865.042283][ C0] ? tun_get_user+0x2717/0x4370 [ 865.042316][ C0] tun_get_user+0x2b44/0x4370 [ 865.042358][ C0] ? aa_file_perm+0x18b/0x15f0 [ 865.042390][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 865.042417][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 865.042451][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.042476][ C0] ? __pfx___futex_wait+0x10/0x10 [ 865.042513][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 865.042547][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 865.042580][ C0] ? tun_get+0x1c/0x2f0 [ 865.042611][ C0] ? tun_get+0x1c/0x2f0 [ 865.042646][ C0] ? tun_get+0x1c/0x2f0 [ 865.042677][ C0] ? tun_get+0x1c/0x2f0 [ 865.042712][ C0] tun_chr_write_iter+0x113/0x200 [ 865.042746][ C0] vfs_write+0x612/0xba0 [ 865.042777][ C0] ? __pfx_vfs_write+0x10/0x10 [ 865.042809][ C0] ? __fget_files+0x2a/0x420 [ 865.042835][ C0] ksys_write+0x150/0x270 [ 865.042863][ C0] ? __pfx_ksys_write+0x10/0x10 [ 865.042920][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.042945][ C0] do_syscall_64+0x174/0x580 [ 865.042966][ C0] ? trace_irq_disable+0x3b/0x140 [ 865.042985][ C0] ? clear_bhb_loop+0x40/0x90 [ 865.043011][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.043034][ C0] RIP: 0033:0x7f48cd59de59 [ 865.043055][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.043088][ C0] RSP: 002b:00007f48ce4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 865.043113][ C0] RAX: ffffffffffffffda RBX: 00007f48cd825fa0 RCX: 00007f48cd59de59 [ 865.043130][ C0] RDX: 0000000000000082 RSI: 00002000000007c0 RDI: 0000000000000006 [ 865.043144][ C0] RBP: 00007f48cd633e6f R08: 0000000000000000 R09: 0000000000000000 [ 865.043159][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.043173][ C0] R13: 00007f48cd826038 R14: 00007f48cd825fa0 R15: 00007ffee17dbd18 [ 865.043201][ C0] [ 865.043210][ C0] [ 865.512577][ C0] The buggy address belongs to the physical page: [ 865.519037][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x154e3a [ 865.527924][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 865.535143][ C0] raw: 057ff00000000000 ffffea0005538e88 ffffea0005538e88 0000000000000000 [ 865.543740][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 865.552338][ C0] page dumped because: kasan: bad access detected [ 865.558791][ C0] page_owner info is not present (never set?) [ 865.564869][ C0] [ 865.567213][ C0] Memory state around the buggy address: [ 865.572873][ C0] ffff888154e39f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 865.580959][ C0] ffff888154e3a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 865.589047][ C0] >ffff888154e3a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 865.597115][ C0] ^ [ 865.604887][ C0] ffff888154e3a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 865.612965][ C0] ffff888154e3a180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 865.621047][ C0] ================================================================== [ 865.629242][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 865.636474][ C0] CPU: 0 UID: 0 PID: 31148 Comm: syz.3.6468 Not tainted syzkaller #0 PREEMPT(full) [ 865.645869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 865.655942][ C0] Call Trace: [ 865.659235][ C0] [ 865.662094][ C0] vpanic+0x56c/0xa60 [ 865.666103][ C0] ? rcu_is_watching+0x15/0xb0 [ 865.670894][ C0] ? __pfx_vpanic+0x10/0x10 [ 865.675429][ C0] panic+0xc5/0xd0 [ 865.679179][ C0] ? __pfx_panic+0x10/0x10 [ 865.683636][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.689298][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.694949][ C0] check_panic_on_warn+0x89/0xb0 [ 865.699907][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.705553][ C0] end_report+0x73/0x170 [ 865.709811][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.715459][ C0] kasan_report+0x128/0x150 [ 865.719994][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.725658][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 865.731136][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 865.736882][ C0] ? lock_acquire+0x106/0x350 [ 865.741664][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 865.747745][ C0] ? lock_acquire+0x106/0x350 [ 865.752500][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.757453][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.762415][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 865.768423][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 865.774941][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.779896][ C0] ? get_random_u32+0x13a/0x8b0 [ 865.784775][ C0] ? lock_acquire+0x106/0x350 [ 865.789471][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 865.795643][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 865.801982][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 865.808686][ C0] ? dev_gro_receive+0x1097/0x2380 [ 865.813903][ C0] napi_complete_done+0x299/0x730 [ 865.818972][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 865.824540][ C0] ? gro_cell_poll+0x175/0x5d0 [ 865.829770][ C0] gro_cell_poll+0x5ab/0x5d0 [ 865.834398][ C0] ? gro_cell_poll+0x175/0x5d0 [ 865.839198][ C0] __napi_poll+0xaa/0x330 [ 865.843570][ C0] net_rx_action+0x61d/0xf50 [ 865.848187][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 865.853313][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 865.858535][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 865.863830][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 865.869050][ C0] ? sched_clock+0x3f/0x60 [ 865.873494][ C0] handle_softirqs+0x225/0x840 [ 865.878302][ C0] ? do_softirq+0x76/0xd0 [ 865.882658][ C0] ? tun_rx_batched+0x185/0x790 [ 865.887705][ C0] do_softirq+0x76/0xd0 [ 865.891899][ C0] [ 865.894847][ C0] [ 865.897792][ C0] __local_bh_enable_ip+0xf8/0x130 [ 865.902925][ C0] ? tun_rx_batched+0x185/0x790 [ 865.907826][ C0] tun_rx_batched+0x616/0x790 [ 865.912538][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 865.917760][ C0] ? tun_get_user+0x2717/0x4370 [ 865.922632][ C0] ? tun_get_user+0x2717/0x4370 [ 865.927506][ C0] ? tun_get_user+0x23cb/0x4370 [ 865.932390][ C0] ? tun_get_user+0x23cb/0x4370 [ 865.937279][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 865.942589][ C0] ? tun_get_user+0x2717/0x4370 [ 865.947464][ C0] ? tun_get_user+0x2717/0x4370 [ 865.952341][ C0] tun_get_user+0x2b44/0x4370 [ 865.957046][ C0] ? aa_file_perm+0x18b/0x15f0 [ 865.961838][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 865.966617][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 865.971666][ C0] ? __lock_acquire+0x683/0x2cf0 [ 865.976617][ C0] ? __pfx___futex_wait+0x10/0x10 [ 865.981665][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 865.986891][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 865.992384][ C0] ? tun_get+0x1c/0x2f0 [ 865.996576][ C0] ? tun_get+0x1c/0x2f0 [ 866.000760][ C0] ? tun_get+0x1c/0x2f0 [ 866.004935][ C0] ? tun_get+0x1c/0x2f0 [ 866.009112][ C0] tun_chr_write_iter+0x113/0x200 [ 866.014157][ C0] vfs_write+0x612/0xba0 [ 866.018436][ C0] ? __pfx_vfs_write+0x10/0x10 [ 866.023221][ C0] ? __fget_files+0x2a/0x420 [ 866.027881][ C0] ksys_write+0x150/0x270 [ 866.032326][ C0] ? __pfx_ksys_write+0x10/0x10 [ 866.037219][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.043301][ C0] do_syscall_64+0x174/0x580 [ 866.047898][ C0] ? trace_irq_disable+0x3b/0x140 [ 866.052941][ C0] ? clear_bhb_loop+0x40/0x90 [ 866.057640][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.063545][ C0] RIP: 0033:0x7f48cd59de59 [ 866.067972][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.087594][ C0] RSP: 002b:00007f48ce4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 866.096204][ C0] RAX: ffffffffffffffda RBX: 00007f48cd825fa0 RCX: 00007f48cd59de59 [ 866.104191][ C0] RDX: 0000000000000082 RSI: 00002000000007c0 RDI: 0000000000000006 [ 866.112200][ C0] RBP: 00007f48cd633e6f R08: 0000000000000000 R09: 0000000000000000 [ 866.120198][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.128271][ C0] R13: 00007f48cd826038 R14: 00007f48cd825fa0 R15: 00007ffee17dbd18 [ 866.136271][ C0] [ 866.139934][ C0] Kernel Offset: disabled [ 866.144269][ C0] Rebooting in 86400 seconds..