last executing test programs: 4.23226643s ago: executing program 3 (id=818): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082c0120410000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) recvmmsg(r0, &(0x7f000000a680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x9}}], 0x1, 0x60, 0x0) 4.032936776s ago: executing program 3 (id=821): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) (fail_nth: 1) 3.911833384s ago: executing program 3 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x800002}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x10008, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x2}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, 0x0, &(0x7f0000000500)=0x39) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0012221e9ce6d230acbe1c8b0000d7509a027e2ca177d2dcc6a9476ba2634faeca", @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000800a000ea08000008009f000d000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(r0) 3.74510751s ago: executing program 2 (id=827): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}], 0x10, 0x8a2}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) 3.679004669s ago: executing program 2 (id=829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000002c0)='jbd2_write_superblock\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xac, 0x0, &(0x7f0000000340)="87eae04b2420ff5a9a013a86f9a46a603e285f9919e638f0fe056a3b8cad64da874297098f9c95b70e35c3c2ff01000000000000663ec0d0fd4d01993118bb30a0daeb9ba07929204f2e53784bca2a4a5b10b7812aa601c7cd6899aa70c94bbc838c2e1432f0d278c9655eb91fac1bbeb4869be176f713afc66b7e6b67f6b5a6c473bcf0c295a91f0fd08b4f2224464537fca0c790a294452ebffc0c907f8424261dfe8762d42b8445127c6c", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001580)={0x1d, r4, 0xfffffffffffffffd, {0x2, 0xff, 0x6}, 0xff}, 0x18) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80020}, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x86, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6a4b}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pB \x00'}, 0x20) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffeddf7f, 0x1000, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="18dd5c98e76e0232433328f6660f76cdbf000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000185500000a0000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x7d, &(0x7f0000000500)=""/125, 0x40f00, 0xe, '\x00', r7, 0x25, r9, 0x8, &(0x7f00000005c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xb, 0x22e9a79, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x1, r10], &(0x7f0000000740)=[{0x2, 0x4, 0xe, 0x6}], 0x10, 0x4}, 0x94) getsockname(r0, 0x0, &(0x7f00000004c0)) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r12, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b51a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0x1e, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000840)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) 2.94065456s ago: executing program 0 (id=835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0x20000006}]}}}}}}}, 0x0) 2.856131392s ago: executing program 0 (id=836): socket$kcm(0xa, 0x3, 0x87) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d02"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000002000000000001"], 0xfdef) 2.55007767s ago: executing program 3 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000040000000000000000008500000041000000950000000000000062293f449cde632706d6160bf85b8b9d96e5143a57df2c8276ecdad12dcf4ee1f519b7d3150780706223a72beaa3f97558629ca633"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) close(r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) write$tun(0xffffffffffffffff, 0x0, 0x3e) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r5}) ioctl$int_in(r0, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000100)={{{@in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x2, 0x4e22, 0x0, 0x2, 0x80, 0x20, 0x1d}, {0x9, 0x9, 0x4, 0x0, 0x5, 0x100000001, 0x9, 0x1}, {0xffffffffffffffff, 0x0, 0x7, 0x5}, 0x80, 0x6e6bbf, 0xbfb506424203eb84, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d2, 0x3c}, 0xa, @in6=@local, 0x0, 0x1, 0x0, 0x21, 0x2e400, 0x5, 0x6707d3dd}}, 0xe8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}], 0x1}}], 0x48}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c) 2.373523958s ago: executing program 2 (id=842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f00000020c0)=[@hopopts_2292={{0x1100, 0x29, 0x36, {0x2b, 0x21c, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x7ff, [0x7fffffff, 0xfffffffffffffff7]}}, @ra, @generic={0x3, 0x9b, "0c31e6e6f0d36f8dc64cf45c7495a67602eee81cc66f9af203c0b94f68f0422a69935394390759ed1ec8681fb34d8950c203436d62e6bc0f4014b544dbab9d2d96cdb2be2b3f62ca0107d271c500469d6384b920f3e88a3e3cfbfe7a26ef673377c8b5fbd714532c2471debd827d902e92c0f4333301906f920dd186c7b56df7e8eac1d14d5e1058d14361f60d1f30bbf7e36a43b5c1a74aa48d1d"}, @generic={0x2, 0x1000, "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"}, @hao={0xc9, 0x10, @empty}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4d1a}}], 0x1170}}], 0x2, 0x2400c044) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}}) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r8, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r9, 0x0, 0x4010) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000001000000002000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 2.032727819s ago: executing program 0 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x94) 1.909893446s ago: executing program 0 (id=846): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r0, 0x0, 0x0, 0x40000023, 0x0) 1.668669516s ago: executing program 4 (id=849): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) 1.49277724s ago: executing program 4 (id=851): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) 1.405245044s ago: executing program 4 (id=852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x47845287495d7c0a}}, @call={0x85, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) unshare(0x20000400) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x2}, {0xa}, {0x4, 0x1}, {0x9, 0x5}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @func_proto]}, {0x0, [0x30, 0x61, 0x61]}}, &(0x7f0000000240)=""/94, 0x8d, 0x5e, 0x0, 0xfff}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000fd0900008400000005"], 0x48) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000040)=0xd9) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) close(r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000002c0)=0x4, 0x4) recvfrom(r0, 0x0, 0xfffffffffffffd1e, 0x40000002, 0x0, 0x19) 1.373994197s ago: executing program 3 (id=853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x2, [@int={0x400004}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xa, 0xc8}, {0x2, 0xfffffffd}, {0x3, 0x2}, {0x1, 0x401}, {0xe, 0x4}, {0x9, 0xf7}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0xb, 0x9cad}, {0xa, 0x401}, {0x8, 0xf}, {0xa, 0x4}, {0x6, 0x7}, {0xe, 0x1}]}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x2}, {0x8, 0x3, 0x7}, {0x0, 0x0, 0x1a2396c0}, {0x8, 0x2, 0x5}, {0x5, 0x2, 0x3}]}]}}, 0x0, 0xf2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@exit, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000001}, @generic={0x3, 0xa, 0x5, 0x4641, 0xfffff75b}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x0, 0xfffffffd}, 0xfffffffffffffe11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa) r6 = socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r9, &(0x7f0000001300)=[{0x0}, {&(0x7f00000010c0)="985485c5", 0xfdef}], 0x2) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}, {&(0x7f0000000b00)=';', 0x1}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r8) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x8000) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x9, 0x6, @broadcast}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000100)=0x18, 0x4) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 1.268535461s ago: executing program 1 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004000000890b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newtaction={0x14, 0x30, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x0) 1.140699398s ago: executing program 1 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3010000}, 0x94) 993.0438ms ago: executing program 1 (id=857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0x20000006}]}}}}}}}, 0x0) 992.185496ms ago: executing program 4 (id=858): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x5, 0xc0, @empty}}}}}}, 0x0) 975.724065ms ago: executing program 1 (id=859): socket(0x1e, 0x4, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0x4, 0x49) (async) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0x4, 0x49) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}], 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24c8000003010104000000000000000002312f9c0000"], 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x8081) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0}, {0x3, 0x5}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x4000010) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0}, {0x3, 0x5}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x4000010) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x23, 0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5}) bind$bt_l2cap(r6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) pipe(0x0) (async) pipe(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) 944.958906ms ago: executing program 0 (id=860): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 907.266112ms ago: executing program 3 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r7) syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$NL80211_CMD_START_AP(r7, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 763.283729ms ago: executing program 4 (id=862): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) 704.96791ms ago: executing program 2 (id=863): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000091e7472e0a42607ca19bb532c7d24c296030a56a4100000000d0e153", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00a66a04000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x4}, 0x10) bind$bt_l2cap(r2, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) (async) unshare(0x2040400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket(0x10, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0xb) (async) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0xb) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x6, 0x0, 0xd1, 0x2, 0x40, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0x9, 0xc1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x6, 0x0, 0xd1, 0x2, 0x40, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0x9, 0xc1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="0000000500"/20, @ANYRES16=r2, @ANYRES8, @ANYBLOB="03000000010000000500"/28], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000240), 0x4) (async) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000240), 0x4) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00158b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00158b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4, @broadcast}, 0x10, &(0x7f0000000640)}, 0x14000000) (async) sendmsg$rds(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4, @broadcast}, 0x10, &(0x7f0000000640)}, 0x14000000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) 533.004383ms ago: executing program 4 (id=864): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000002700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x7f, 0x0, @val=0x80}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2, 0x0) readv(r0, &(0x7f0000000200), 0x0) 395.465368ms ago: executing program 2 (id=865): socket$inet_sctp(0x2, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 152.897253ms ago: executing program 1 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004000000890b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newtaction={0x14, 0x30, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x0) 89.643556ms ago: executing program 2 (id=867): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000020000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, r1, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000100)="d1e6ad05800be0dfd495cde8e809ebab68d94b115dc5c17954ea141a3608b03e9ab0045113d99f85601c9de58b2837e6a64f65645f283f514c9cfbdaaaee726e8910aeaf234fe4533d2440f4a74993851927cc8e04d2ff89c2de09de741beb7f09344fa3194eeb1914166c44117fcd254643d5644b98481b09e26e5351f6040b5eee75ee5e8411cfeffe9d34f49c343204234efb12d3bd149c0b480719388dc27f2b8ac2d883e21d76bc5b369fcaa5b056677512155c1845cb038aa61dc9dfc6968c65f826f68b55ee0cd50cd9d50cee9feb7146d82803a027850d55b3e666ed5138491312446a7ffc2f24a9434421", &(0x7f0000000200)=""/67, &(0x7f0000000280)="b00d4ee6aabf204e475e64dd4aa37e14879e9a20d0a08a6dc2d4bb99cc8da7804882fa8e3d30f1a1e042741d0b8c47252daec809d5662a28fb2c7acb74d1c33d8c82e9678a1f4740b43f59d0963202ecda0ae8018af248", &(0x7f0000000080)="319c0b24b4c469a45ec2073e24bebe05cec77de0ef0044ab55babd7ee475b50c901eee2216cb5d4b1b6766e830727d36702dd58fbbe593ad355bd2274f", 0x0, r2}, 0x38) syz_emit_ethernet(0x122d, &(0x7f00000013c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x11f7, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x4, 0x13, "fb83a9e89e7efd446528a723cb539ad188650f47c8422b9e72360d9c5d94653a866b95b45dd5515b4f0dcb7e1f70456edcd54830538e49fdb49d191933768afd70e47e9a16faefa73f76bb789feaee80e671b7fa2034fc26d29332f765aec686d0a050c98b656f493ce77e3d4ab8b3ab17d33a54b8db7e6f621e239fc566b2a109cabedf6cb94212401e890b231d09fbb851175b509a38c6b70901a3"}, {0x3, 0x4, "196a690e174a10a4bfa44879f38fef272daa696da7128f3eb5c2bdff40ced8b5ec25f4"}, {0x22, 0x200, "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"}, {0x22, 0x11, "d74fa267456de930fd6355f85d6a6838e497afccd2115f35738cc1123de2496d229726d7f959f1f4bd064c3a38183dc0f7fd050b9796b3fb0bf13fe1294fcb26e08c7d60305fac7a4b3ce247789fd5422cfd9263b8dc3ab1e84a30ab3e63af8ebaf003239fe55a4533bad301cce230e78ea911f3971ef7a22231bfd0e4fca7e1dc16ec7eb4324971eefd1e6c"}, {0x7, 0xf, "55fe3317e49715bbbb5ee2fe9afd2270c0912495c24506a39dfd9b4478d5467e7b295c67f4cd8cf73b2e2a9d5d9a3b8b62518c620fc6cd5f6ebb783a0731426d971de31d74a0ed95094c3dc8966e308e1718f28308fc155269107045c51b57d51732f8ac03923641b7dfd55c4de55c9a167eab4cb261b757628a"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000000000000a00000004"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r5, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x2c, 0x0, 0x802e2e, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x401}}) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x20, r9, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4010) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r7], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5}}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0xfffffffffffffff4, 0x10}], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002600)=""/4096, 0x41000, 0x10, '\x00', r7, 0x0, r1, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000480)=[{0x5, 0x5, 0x10, 0x7}, {0x3, 0x2, 0x10, 0xc}, {0x5, 0x1, 0x5, 0x8}, {0x0, 0x1, 0xfff, 0xc}, {0x3, 0x3, 0x9, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x4, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x5}, {0x3, 0x4, 0x10, 0x1}, {0x5, 0x5, 0x4}], 0x10, 0x4}, 0x94) 70.784307ms ago: executing program 1 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) 0s ago: executing program 0 (id=869): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. [ 93.785481][ T5848] cgroup: Unknown subsys name 'net' [ 93.963458][ T5848] cgroup: Unknown subsys name 'cpuset' [ 93.976542][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.800963][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.652775][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.664262][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.672725][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.680696][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.690338][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.698593][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.699553][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.720303][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.739301][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.747003][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.758940][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.768391][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.778184][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.783355][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.786228][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.797128][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.800777][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.807266][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.818107][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.829299][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.840575][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.852719][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.863348][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.863730][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.885966][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.582861][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 99.742121][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 99.862859][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 99.881323][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 99.913161][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 100.043115][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.052742][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.061199][ T5861] bridge_slave_0: entered allmulticast mode [ 100.070918][ T5861] bridge_slave_0: entered promiscuous mode [ 100.135935][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.144245][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.154255][ T5859] bridge_slave_0: entered allmulticast mode [ 100.162929][ T5859] bridge_slave_0: entered promiscuous mode [ 100.173459][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.181405][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.190795][ T5861] bridge_slave_1: entered allmulticast mode [ 100.200218][ T5861] bridge_slave_1: entered promiscuous mode [ 100.243582][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.251311][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.262594][ T5859] bridge_slave_1: entered allmulticast mode [ 100.270898][ T5859] bridge_slave_1: entered promiscuous mode [ 100.320460][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.382707][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.425005][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.501442][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.542508][ T5861] team0: Port device team_slave_0 added [ 100.595252][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.604761][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.614259][ T5863] bridge_slave_0: entered allmulticast mode [ 100.622274][ T5863] bridge_slave_0: entered promiscuous mode [ 100.633493][ T5861] team0: Port device team_slave_1 added [ 100.640387][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.648006][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.655814][ T5869] bridge_slave_0: entered allmulticast mode [ 100.665227][ T5869] bridge_slave_0: entered promiscuous mode [ 100.673329][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.681893][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.689738][ T5870] bridge_slave_0: entered allmulticast mode [ 100.697537][ T5870] bridge_slave_0: entered promiscuous mode [ 100.707185][ T5859] team0: Port device team_slave_0 added [ 100.715065][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.723210][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.732383][ T5863] bridge_slave_1: entered allmulticast mode [ 100.741209][ T5863] bridge_slave_1: entered promiscuous mode [ 100.764034][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.771721][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.780326][ T5869] bridge_slave_1: entered allmulticast mode [ 100.788434][ T5869] bridge_slave_1: entered promiscuous mode [ 100.808308][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.816334][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.824552][ T5870] bridge_slave_1: entered allmulticast mode [ 100.832763][ T5870] bridge_slave_1: entered promiscuous mode [ 100.863599][ T5859] team0: Port device team_slave_1 added [ 100.919775][ T5867] Bluetooth: hci4: command tx timeout [ 100.920047][ T5874] Bluetooth: hci0: command tx timeout [ 100.926143][ T5862] Bluetooth: hci1: command tx timeout [ 100.932525][ T5877] Bluetooth: hci2: command tx timeout [ 100.983982][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.991813][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.020593][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.029397][ T5877] Bluetooth: hci3: command tx timeout [ 101.043199][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.057922][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.087741][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.098986][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.106744][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.136919][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.162745][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.176785][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.203743][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.212900][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.244049][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.260181][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.331412][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.342089][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.370129][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.392754][ T5863] team0: Port device team_slave_0 added [ 101.415714][ T5870] team0: Port device team_slave_0 added [ 101.424878][ T5870] team0: Port device team_slave_1 added [ 101.464281][ T5863] team0: Port device team_slave_1 added [ 101.490074][ T5869] team0: Port device team_slave_0 added [ 101.575324][ T5869] team0: Port device team_slave_1 added [ 101.582779][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.591273][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.618882][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.637162][ T5859] hsr_slave_0: entered promiscuous mode [ 101.644009][ T5859] hsr_slave_1: entered promiscuous mode [ 101.669744][ T5861] hsr_slave_0: entered promiscuous mode [ 101.676914][ T5861] hsr_slave_1: entered promiscuous mode [ 101.684085][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 101.690092][ T5861] Cannot create hsr debugfs directory [ 101.696995][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.704955][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.733392][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.763805][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.774287][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.802329][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.835292][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.845073][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.880233][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.986426][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.994158][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.023736][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.051037][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.058245][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.092123][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.249314][ T5863] hsr_slave_0: entered promiscuous mode [ 102.256384][ T5863] hsr_slave_1: entered promiscuous mode [ 102.263787][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 102.269823][ T5863] Cannot create hsr debugfs directory [ 102.285518][ T5870] hsr_slave_0: entered promiscuous mode [ 102.293522][ T5870] hsr_slave_1: entered promiscuous mode [ 102.301028][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 102.307464][ T5870] Cannot create hsr debugfs directory [ 102.432562][ T5869] hsr_slave_0: entered promiscuous mode [ 102.443288][ T1211] cfg80211: failed to load regulatory.db [ 102.451371][ T5869] hsr_slave_1: entered promiscuous mode [ 102.458613][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 102.465408][ T5869] Cannot create hsr debugfs directory [ 103.005350][ T5877] Bluetooth: hci1: command tx timeout [ 103.008953][ T5862] Bluetooth: hci2: command tx timeout [ 103.011762][ T5877] Bluetooth: hci0: command tx timeout [ 103.017439][ T5874] Bluetooth: hci4: command tx timeout [ 103.043327][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.065585][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.078981][ T5874] Bluetooth: hci3: command tx timeout [ 103.091778][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.104979][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.205115][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.230186][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.242633][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.257659][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.359933][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.375357][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.395164][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.424785][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.503371][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.518543][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.560228][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.577849][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.711694][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.720524][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.742374][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.762578][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.796610][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.876163][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.890363][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.919956][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.928541][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.965817][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.974210][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.046255][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.066160][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.122213][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.130406][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.161391][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.192472][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.200691][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.215031][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.224257][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.258607][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.267356][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.348426][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.464994][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.520184][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.543749][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.553323][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.634089][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.685002][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.694457][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.771546][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.809489][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.816997][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.935516][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.943798][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.025666][ T5869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.045737][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.088947][ T5874] Bluetooth: hci0: command tx timeout [ 105.095248][ T5874] Bluetooth: hci4: command tx timeout [ 105.096809][ T5877] Bluetooth: hci2: command tx timeout [ 105.101723][ T5867] Bluetooth: hci1: command tx timeout [ 105.171265][ T5867] Bluetooth: hci3: command tx timeout [ 105.194192][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.238130][ T5870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.253865][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.313173][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.338002][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.591383][ T5859] veth0_vlan: entered promiscuous mode [ 105.645180][ T5859] veth1_vlan: entered promiscuous mode [ 105.675248][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.694638][ T5861] veth0_vlan: entered promiscuous mode [ 105.778433][ T5861] veth1_vlan: entered promiscuous mode [ 105.807282][ T5859] veth0_macvtap: entered promiscuous mode [ 105.835726][ T5859] veth1_macvtap: entered promiscuous mode [ 105.955607][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.990542][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.015925][ T5861] veth0_macvtap: entered promiscuous mode [ 106.028383][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.069501][ T1107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.081530][ T1107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.093205][ T5869] veth0_vlan: entered promiscuous mode [ 106.113790][ T5861] veth1_macvtap: entered promiscuous mode [ 106.127846][ T1107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.139763][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.181870][ T5869] veth1_vlan: entered promiscuous mode [ 106.205729][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.242459][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.286537][ T1012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.297444][ T1012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.323710][ T5863] veth0_vlan: entered promiscuous mode [ 106.334260][ T1012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.345779][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.401396][ T5863] veth1_vlan: entered promiscuous mode [ 106.458551][ T5870] veth0_vlan: entered promiscuous mode [ 106.507843][ T5869] veth0_macvtap: entered promiscuous mode [ 106.509306][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.534854][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.587517][ T5869] veth1_macvtap: entered promiscuous mode [ 106.617432][ T5870] veth1_vlan: entered promiscuous mode [ 106.638589][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.650580][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.743500][ T5863] veth0_macvtap: entered promiscuous mode [ 106.773510][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.782146][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.790189][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.806632][ T5863] veth1_macvtap: entered promiscuous mode [ 106.865574][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.882918][ T5870] veth0_macvtap: entered promiscuous mode [ 106.897711][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.914436][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.985076][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.996790][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.025868][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.038122][ T5870] veth1_macvtap: entered promiscuous mode [ 107.051222][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.064333][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.075998][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.092525][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.117877][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.159444][ T5867] Bluetooth: hci2: command tx timeout [ 107.165578][ T5867] Bluetooth: hci0: command tx timeout [ 107.173930][ T5874] Bluetooth: hci1: command tx timeout [ 107.182573][ T5862] Bluetooth: hci4: command tx timeout [ 107.214674][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.239228][ T5867] Bluetooth: hci3: command tx timeout [ 107.246503][ T1107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.341783][ T1107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.390913][ T1107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.407758][ T1107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.470222][ T1107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.490077][ T1107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.517884][ T1107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.529233][ T1107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.585692][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.632673][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.833347][ T5994] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 107.844166][ T5992] bridge_slave_0: left allmulticast mode [ 107.858494][ T5995] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9'. [ 107.858607][ T5992] bridge_slave_0: left promiscuous mode [ 107.875279][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.902830][ T5992] bridge_slave_1: left allmulticast mode [ 107.909029][ T5992] bridge_slave_1: left promiscuous mode [ 107.915767][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.933554][ T5992] bond0: (slave bond_slave_0): Releasing backup interface [ 107.947708][ T5992] bond0: (slave bond_slave_1): Releasing backup interface [ 107.971557][ T5992] team0: Port device team_slave_0 removed [ 107.984414][ T5992] team0: Port device team_slave_1 removed [ 107.992403][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.001432][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.013268][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.021241][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.084576][ T5994] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.097390][ T5995] 0ªX¹¦À: renamed from caif0 [ 108.112423][ T5995] 0ªX¹¦À: entered allmulticast mode [ 108.118470][ T5995] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.162177][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.178897][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.197147][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.229069][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.359717][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.368600][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.382146][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.432379][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.748360][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.784375][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.204928][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 111.261021][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 111.316392][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 111.397436][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 111.973031][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 112.026535][ T6073] tipc: Started in network mode [ 112.041459][ T6073] tipc: Node identity ac14140f, cluster identity 4711 [ 112.065827][ T6073] tipc: New replicast peer: 255.255.255.255 [ 112.087335][ T6073] tipc: Enabled bearer , priority 10 [ 112.208351][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 112.234399][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 112.396862][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 112.438435][ T6082] bridge0: entered promiscuous mode [ 112.492277][ T6082] bridge0: port 3(macvlan2) entered blocking state [ 112.516738][ T6082] bridge0: port 3(macvlan2) entered disabled state [ 112.527277][ T6082] macvlan2: entered allmulticast mode [ 112.535922][ T6082] bridge0: entered allmulticast mode [ 112.556992][ T6082] macvlan2: left allmulticast mode [ 112.568119][ T6082] bridge0: left allmulticast mode [ 112.576626][ T6082] bridge0: left promiscuous mode [ 112.642168][ T6087] gretap0: entered promiscuous mode [ 112.664854][ T6087] vlan2: entered promiscuous mode [ 112.985659][ T6102] netlink: 256 bytes leftover after parsing attributes in process `syz.4.42'. [ 113.023087][ T6102] ksmbd: Unknown IPC event: 3, ignore. [ 113.091413][ T5952] tipc: Node number set to 2886997007 [ 113.135993][ T6107] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.645431][ T5935] IPVS: starting estimator thread 0... [ 113.769424][ T6125] IPVS: using max 25 ests per chain, 60000 per kthread [ 113.895266][ T6133] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 113.927557][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 113.944955][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'. [ 114.271300][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.61'. [ 114.351143][ T6148] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 114.389411][ T6148] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 115.080629][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.74'. [ 115.344832][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 115.459608][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.80'. [ 115.507866][ T6184] netlink: 'syz.3.80': attribute type 2 has an invalid length. [ 115.537346][ T6185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.559727][ T6184] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 115.592143][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 116.223117][ T6199] openvswitch: netlink: Message has 8 unknown bytes. [ 116.399032][ T6205] sctp: [Deprecated]: syz.0.87 (pid 6205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.399032][ T6205] Use struct sctp_sack_info instead [ 116.971446][ T6227] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 117.008912][ T6227] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 117.446579][ T6245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.530468][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 117.561136][ T6243] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.652250][ T6243] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.741127][ T6247] hsr_slave_1 (unregistering): left promiscuous mode [ 118.208392][ T6264] ipvlan2: entered promiscuous mode [ 118.315983][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 118.341485][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 118.351578][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 118.829604][ T6288] netlink: 'syz.3.126': attribute type 13 has an invalid length. [ 118.873904][ T6293] pimreg: entered allmulticast mode [ 119.045474][ T6288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.064466][ T6295] pimreg: left allmulticast mode [ 119.214479][ T6305] netlink: 'syz.2.133': attribute type 10 has an invalid length. [ 119.566801][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 119.576182][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 119.970615][ T6344] tipc: Started in network mode [ 119.975674][ T6344] tipc: Node identity ac14140f, cluster identity 4711 [ 119.985231][ T6344] tipc: New replicast peer: 255.255.255.255 [ 119.992780][ T6344] tipc: Enabled bearer , priority 10 [ 120.409226][ T6364] tipc: Started in network mode [ 120.414216][ T6364] tipc: Node identity , cluster identity 4711 [ 120.420823][ T6364] tipc: Failed to obtain node identity [ 120.426582][ T6364] tipc: Enabling of bearer rejected, failed to enable media [ 120.446445][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 120.505914][ T6364] syzkaller0: entered promiscuous mode [ 120.519180][ T6364] syzkaller0: entered allmulticast mode [ 120.751779][ T6377] netlink: 268 bytes leftover after parsing attributes in process `syz.2.168'. [ 120.796138][ T6377] unsupported nla_type 65024 [ 120.936630][ T6385] atomic_op ffff88807f748198 conn xmit_atomic 0000000000000000 [ 121.082732][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 121.109812][ T6005] tipc: Node number set to 2886997007 [ 121.180357][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 122.627496][ T6409] ip6gretap0: entered promiscuous mode [ 122.633609][ T6409] vlan2: entered promiscuous mode [ 122.652927][ T6420] netlink: 96 bytes leftover after parsing attributes in process `syz.4.186'. [ 122.781728][ T6428] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 122.914967][ T6428] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 123.295546][ T6454] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 123.318171][ T6454] veth0_macvtap: left promiscuous mode [ 123.677957][ T6473] __nla_validate_parse: 1 callbacks suppressed [ 123.677979][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 123.702330][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 123.844354][ T6481] veth0_to_team: entered promiscuous mode [ 123.856849][ T6477] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.864968][ T6481] veth0_to_team: entered allmulticast mode [ 124.017718][ T6491] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 124.100740][ T6491] bond1: entered promiscuous mode [ 124.106433][ T6491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.178761][ T6493] bond1: (slave bridge1): making interface the new active one [ 124.208885][ T6493] bridge1: entered promiscuous mode [ 124.215887][ T6493] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 124.547940][ T6510] vlan2: entered promiscuous mode [ 124.752783][ T6522] siw: device registration error -23 [ 125.183881][ T6541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.238'. [ 126.139173][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 127.485634][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.694802][ T6607] netlink: 'syz.4.265': attribute type 10 has an invalid length. [ 127.751837][ T6607] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 127.887209][ T6616] siw: device registration error -23 [ 127.903831][ T6619] (unnamed net_device) (uninitialized): peer notification delay (4095) is not a multiple of miimon (4), value rounded to 4092 ms [ 127.984382][ T6619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.745080][ T6709] syzkaller0: entered promiscuous mode [ 129.775261][ T6709] syzkaller0: entered allmulticast mode [ 130.404503][ T6742] netlink: 'syz.0.325': attribute type 10 has an invalid length. [ 130.494285][ T6742] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 130.534341][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.326'. [ 130.555448][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.326'. [ 130.947017][ T6764] bridge_slave_0: left allmulticast mode [ 130.953501][ T6764] bridge_slave_0: left promiscuous mode [ 130.960777][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.010355][ T6764] bridge_slave_1: left allmulticast mode [ 131.031730][ T6764] bridge_slave_1: left promiscuous mode [ 131.044859][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.104546][ T6764] bond0: (slave bond_slave_0): Releasing backup interface [ 131.125145][ T6764] bond0: (slave bond_slave_1): Releasing backup interface [ 131.178520][ T6764] team0: Port device team_slave_0 removed [ 131.210311][ T6764] team0: Port device team_slave_1 removed [ 131.219995][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.227477][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.243429][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.253880][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.293267][ T6784] netlink: 68 bytes leftover after parsing attributes in process `syz.2.340'. [ 131.784676][ T6798] openvswitch: netlink: Missing valid actions attribute. [ 131.811647][ T6798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.016423][ T6811] syzkaller1: entered promiscuous mode [ 132.027404][ T6811] syzkaller1: entered allmulticast mode [ 132.210716][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'. [ 132.244257][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'. [ 132.286388][ T6811] Zero length message leads to an empty skb [ 132.823307][ T6845] netlink: 'syz.4.366': attribute type 12 has an invalid length. [ 133.070361][ T6845] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 133.152486][ T6845] team0: Port device dummy0 added [ 133.202734][ T6853] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 133.327767][ T6853] team0: Port device dummy0 removed [ 133.375835][ T6853] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.801239][ T6895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.387'. [ 133.968638][ T6903] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 134.187977][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 134.325496][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 134.792175][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 134.837682][ T6937] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 134.891299][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 135.071711][ T6943] wg2: entered allmulticast mode [ 135.999926][ T6991] __nla_validate_parse: 1 callbacks suppressed [ 135.999947][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.425'. [ 136.707704][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 137.075374][ T7039] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 137.088869][ T7039] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 137.096696][ T7039] netlink: 216 bytes leftover after parsing attributes in process `syz.0.433'. [ 137.179182][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 137.313735][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'. [ 137.707785][ T7070] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 137.995853][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.464'. [ 138.294540][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.304084][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.636027][ T7131] siw: device registration error -23 [ 138.827566][ T7144] : entered promiscuous mode [ 138.838317][ T7144] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 139.202529][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 139.244252][ T7153] netlink: ct family unspecified [ 139.255613][ T7156] ip6gretap0: entered promiscuous mode [ 139.261411][ T7153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.272265][ T7156] vlan2: entered promiscuous mode [ 139.498911][ T7162] netlink: 200 bytes leftover after parsing attributes in process `syz.2.494'. [ 139.508587][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 139.586407][ T7164] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 139.648149][ T7166] siw: device registration error -23 [ 140.045966][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 140.113480][ T7197] ip6gretap0: entered promiscuous mode [ 140.125108][ T7197] vlan2: entered promiscuous mode [ 140.346508][ T7210] siw: device registration error -23 [ 140.573204][ T7222] FAULT_INJECTION: forcing a failure. [ 140.573204][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.588601][ T7222] CPU: 1 UID: 0 PID: 7222 Comm: syz.1.516 Not tainted syzkaller #0 PREEMPT(full) [ 140.588631][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.588651][ T7222] Call Trace: [ 140.588664][ T7222] [ 140.588674][ T7222] dump_stack_lvl+0x189/0x250 [ 140.588714][ T7222] ? __pfx____ratelimit+0x10/0x10 [ 140.588745][ T7222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.588785][ T7222] ? __pfx__printk+0x10/0x10 [ 140.588816][ T7222] ? __might_fault+0xb0/0x130 [ 140.588857][ T7222] should_fail_ex+0x414/0x560 [ 140.588890][ T7222] _copy_from_iter+0x1db/0x16f0 [ 140.588909][ T7222] ? __bfs+0x151/0x2a0 [ 140.588936][ T7222] ? __lock_acquire+0xab9/0xd20 [ 140.588969][ T7222] ? __pfx__copy_from_iter+0x10/0x10 [ 140.589001][ T7222] ? page_copy_sane+0x4e/0x280 [ 140.589023][ T7222] copy_page_from_iter+0xdd/0x170 [ 140.589048][ T7222] tun_get_user+0x1d7b/0x3e20 [ 140.589079][ T7222] ? tun_get_user+0x6f6/0x3e20 [ 140.589109][ T7222] ? aa_file_perm+0x44d/0x1550 [ 140.589130][ T7222] ? __pfx_tun_get_user+0x10/0x10 [ 140.589149][ T7222] ? _parse_integer_limit+0x1ae/0x1f0 [ 140.589198][ T7222] ? __lock_acquire+0xab9/0xd20 [ 140.589233][ T7222] ? ref_tracker_alloc+0x318/0x460 [ 140.589259][ T7222] ? __lock_acquire+0xab9/0xd20 [ 140.589290][ T7222] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 140.589326][ T7222] ? tun_get+0x1c/0x2f0 [ 140.589351][ T7222] ? tun_get+0x1c/0x2f0 [ 140.589370][ T7222] ? tun_get+0x1c/0x2f0 [ 140.589395][ T7222] tun_chr_write_iter+0x113/0x200 [ 140.589418][ T7222] vfs_write+0x5c9/0xb30 [ 140.589453][ T7222] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 140.589474][ T7222] ? __pfx_vfs_write+0x10/0x10 [ 140.589514][ T7222] ? __fget_files+0x2a/0x420 [ 140.589556][ T7222] ksys_write+0x145/0x250 [ 140.589587][ T7222] ? __pfx_ksys_write+0x10/0x10 [ 140.589613][ T7222] ? rcu_is_watching+0x15/0xb0 [ 140.589640][ T7222] ? do_syscall_64+0xbe/0x3b0 [ 140.589676][ T7222] do_syscall_64+0xfa/0x3b0 [ 140.589707][ T7222] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.589737][ T7222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.589758][ T7222] ? clear_bhb_loop+0x60/0xb0 [ 140.589783][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.589803][ T7222] RIP: 0033:0x7f564018d69f [ 140.589840][ T7222] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 140.589858][ T7222] RSP: 002b:00007f5640fb1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 140.589884][ T7222] RAX: ffffffffffffffda RBX: 00007f56403b5fa0 RCX: 00007f564018d69f [ 140.589900][ T7222] RDX: 000000000000005e RSI: 0000200000001340 RDI: 00000000000000c8 [ 140.589913][ T7222] RBP: 00007f5640fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 140.589925][ T7222] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 140.589937][ T7222] R13: 00007f56403b6038 R14: 00007f56403b5fa0 R15: 00007ffe98c02748 [ 140.589970][ T7222] [ 140.951295][ T7221] Bluetooth: MGMT ver 1.23 [ 141.027889][ T7228] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 141.151293][ T7236] siw: device registration error -23 [ 141.650869][ T7265] siw: device registration error -23 [ 141.826830][ T7274] vlan2: entered promiscuous mode [ 141.967237][ T7281] __nla_validate_parse: 1 callbacks suppressed [ 141.967259][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 142.173023][ T7281] syz.1.542 (7281) used greatest stack depth: 17864 bytes left [ 142.275501][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.549'. [ 142.296777][ T7296] siw: device registration error -23 [ 142.581038][ T7317] FAULT_INJECTION: forcing a failure. [ 142.581038][ T7317] name failslab, interval 1, probability 0, space 0, times 1 [ 142.609018][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.1.557 Not tainted syzkaller #0 PREEMPT(full) [ 142.609048][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.609060][ T7317] Call Trace: [ 142.609068][ T7317] [ 142.609077][ T7317] dump_stack_lvl+0x189/0x250 [ 142.609107][ T7317] ? __pfx____ratelimit+0x10/0x10 [ 142.609139][ T7317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.609164][ T7317] ? __pfx__printk+0x10/0x10 [ 142.609199][ T7317] ? __pfx___might_resched+0x10/0x10 [ 142.609217][ T7317] ? fs_reclaim_acquire+0x7d/0x100 [ 142.609257][ T7317] should_fail_ex+0x414/0x560 [ 142.609303][ T7317] should_failslab+0xa8/0x100 [ 142.609337][ T7317] kmem_cache_alloc_noprof+0x73/0x3c0 [ 142.609366][ T7317] ? __pmd_alloc+0xc6/0x3b0 [ 142.609397][ T7317] __pmd_alloc+0xc6/0x3b0 [ 142.609430][ T7317] __handle_mm_fault+0x9ad/0x5440 [ 142.609477][ T7317] ? __pfx___handle_mm_fault+0x10/0x10 [ 142.609528][ T7317] ? find_vma+0xe7/0x160 [ 142.609554][ T7317] ? __pfx_find_vma+0x10/0x10 [ 142.609584][ T7317] handle_mm_fault+0x40a/0x8e0 [ 142.609625][ T7317] do_user_addr_fault+0x764/0x1390 [ 142.609677][ T7317] exc_page_fault+0x76/0xf0 [ 142.609710][ T7317] asm_exc_page_fault+0x26/0x30 [ 142.609731][ T7317] RIP: 0010:__put_user_4+0xd/0x20 [ 142.609762][ T7317] Code: 66 89 01 31 c9 0f 01 ca e9 10 45 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 142.609779][ T7317] RSP: 0018:ffffc9000acff6f8 EFLAGS: 00050202 [ 142.609799][ T7317] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000240 [ 142.609812][ T7317] RDX: dffffc0000000000 RSI: ffffffff8dba6315 RDI: ffffffff8be33300 [ 142.609828][ T7317] RBP: ffffc9000acff870 R08: 0000000000000000 R09: ffffffff820b7b90 [ 142.609842][ T7317] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 0000000000000000 [ 142.609856][ T7317] R13: ffffffff8f756928 R14: 1ffff9200159fee4 R15: ffff888027885780 [ 142.609879][ T7317] ? __might_fault+0xb0/0x130 [ 142.609918][ T7317] sk_ioctl+0x406/0x600 [ 142.609952][ T7317] ? __pfx_sk_ioctl+0x10/0x10 [ 142.609985][ T7317] ? is_bpf_text_address+0x292/0x2b0 [ 142.610016][ T7317] ? is_bpf_text_address+0x26/0x2b0 [ 142.610051][ T7317] ? kernel_text_address+0xa5/0xe0 [ 142.610082][ T7317] ? __kernel_text_address+0xd/0x40 [ 142.610110][ T7317] ? unwind_get_return_address+0x4d/0x90 [ 142.610134][ T7317] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 142.610161][ T7317] ? arch_stack_walk+0xfc/0x150 [ 142.610198][ T7317] inet_ioctl+0x416/0x4c0 [ 142.610229][ T7317] ? __pfx_inet_ioctl+0x10/0x10 [ 142.610314][ T7317] ? do_syscall_64+0xfa/0x3b0 [ 142.610345][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.610381][ T7317] sock_do_ioctl+0xd9/0x300 [ 142.610411][ T7317] ? __pfx_sock_do_ioctl+0x10/0x10 [ 142.610458][ T7317] sock_ioctl+0x576/0x790 [ 142.610488][ T7317] ? __pfx_sock_ioctl+0x10/0x10 [ 142.610521][ T7317] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 142.610553][ T7317] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 142.610585][ T7317] ? __pfx_sock_ioctl+0x10/0x10 [ 142.610608][ T7317] do_vfs_ioctl+0xe67/0x1430 [ 142.610639][ T7317] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 142.610681][ T7317] ? __lock_acquire+0xab9/0xd20 [ 142.610735][ T7317] ? __fget_files+0x2a/0x420 [ 142.610771][ T7317] ? __fget_files+0x2a/0x420 [ 142.610801][ T7317] ? __fget_files+0x3a0/0x420 [ 142.610832][ T7317] ? __fget_files+0x2a/0x420 [ 142.610868][ T7317] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.610898][ T7317] __se_sys_ioctl+0x82/0x170 [ 142.610927][ T7317] do_syscall_64+0xfa/0x3b0 [ 142.610957][ T7317] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.610987][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.611007][ T7317] ? clear_bhb_loop+0x60/0xb0 [ 142.611034][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.611054][ T7317] RIP: 0033:0x7f564018ebe9 [ 142.611073][ T7317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.611090][ T7317] RSP: 002b:00007f5640fb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.611112][ T7317] RAX: ffffffffffffffda RBX: 00007f56403b5fa0 RCX: 00007f564018ebe9 [ 142.611127][ T7317] RDX: 0000200000000240 RSI: 000000000000541b RDI: 0000000000000003 [ 142.611140][ T7317] RBP: 00007f5640fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 142.611153][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.611165][ T7317] R13: 00007f56403b6038 R14: 00007f56403b5fa0 R15: 00007ffe98c02748 [ 142.611200][ T7317] [ 143.614540][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 143.907855][ T7352] FAULT_INJECTION: forcing a failure. [ 143.907855][ T7352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.958728][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(full) [ 143.958758][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.958770][ T7352] Call Trace: [ 143.958779][ T7352] [ 143.958788][ T7352] dump_stack_lvl+0x189/0x250 [ 143.958818][ T7352] ? __pfx____ratelimit+0x10/0x10 [ 143.958850][ T7352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.958875][ T7352] ? __pfx__printk+0x10/0x10 [ 143.958919][ T7352] should_fail_ex+0x414/0x560 [ 143.958952][ T7352] _copy_to_user+0x31/0xb0 [ 143.958979][ T7352] simple_read_from_buffer+0xe1/0x170 [ 143.959015][ T7352] proc_fail_nth_read+0x1b3/0x220 [ 143.959043][ T7352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.959071][ T7352] ? rw_verify_area+0x2a6/0x4d0 [ 143.959096][ T7352] ? __lock_acquire+0xab9/0xd20 [ 143.959132][ T7352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.959158][ T7352] vfs_read+0x200/0xa30 [ 143.959184][ T7352] ? fdget_pos+0x247/0x320 [ 143.959207][ T7352] ? __pfx___mutex_lock+0x10/0x10 [ 143.959249][ T7352] ? __pfx_vfs_read+0x10/0x10 [ 143.959279][ T7352] ? __fget_files+0x2a/0x420 [ 143.959317][ T7352] ? __fget_files+0x3a0/0x420 [ 143.959352][ T7352] ? __fget_files+0x2a/0x420 [ 143.959393][ T7352] ksys_read+0x145/0x250 [ 143.959423][ T7352] ? __pfx_ksys_read+0x10/0x10 [ 143.959457][ T7352] ? do_syscall_64+0xbe/0x3b0 [ 143.959493][ T7352] do_syscall_64+0xfa/0x3b0 [ 143.959524][ T7352] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.959554][ T7352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.959575][ T7352] ? clear_bhb_loop+0x60/0xb0 [ 143.959601][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.959621][ T7352] RIP: 0033:0x7fc038b8d5fc [ 143.959640][ T7352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.959658][ T7352] RSP: 002b:00007fc039a73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.959681][ T7352] RAX: ffffffffffffffda RBX: 00007fc038db5fa0 RCX: 00007fc038b8d5fc [ 143.959696][ T7352] RDX: 000000000000000f RSI: 00007fc039a730a0 RDI: 0000000000000003 [ 143.959709][ T7352] RBP: 00007fc039a73090 R08: 0000000000000000 R09: 0000000000000000 [ 143.959722][ T7352] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 143.959734][ T7352] R13: 00007fc038db6038 R14: 00007fc038db5fa0 R15: 00007ffc0f4d9af8 [ 143.959769][ T7352] [ 144.343708][ T7360] siw: device registration error -23 [ 144.904709][ T7395] siw: device registration error -23 [ 145.187553][ T7411] vlan2: entered promiscuous mode [ 145.242923][ T7413] tipc: Enabled bearer , priority 1 [ 145.392250][ T7419] siw: device registration error -23 [ 147.030798][ T7502] ip6gretap0: entered promiscuous mode [ 147.036428][ T7502] vlan2: entered promiscuous mode [ 147.309970][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 147.360818][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.648'. [ 147.373168][ T7526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 147.388274][ T7522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.648'. [ 147.418550][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 147.762879][ T7546] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.656'. [ 147.783575][ T7548] vlan2: entered promiscuous mode [ 148.007893][ T7558] FAULT_INJECTION: forcing a failure. [ 148.007893][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 148.024973][ T7558] CPU: 1 UID: 0 PID: 7558 Comm: syz.2.662 Not tainted syzkaller #0 PREEMPT(full) [ 148.025003][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.025016][ T7558] Call Trace: [ 148.025024][ T7558] [ 148.025034][ T7558] dump_stack_lvl+0x189/0x250 [ 148.025065][ T7558] ? __pfx____ratelimit+0x10/0x10 [ 148.025096][ T7558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.025122][ T7558] ? __pfx__printk+0x10/0x10 [ 148.025156][ T7558] ? __pfx___might_resched+0x10/0x10 [ 148.025176][ T7558] ? fs_reclaim_acquire+0x7d/0x100 [ 148.025216][ T7558] should_fail_ex+0x414/0x560 [ 148.025250][ T7558] should_failslab+0xa8/0x100 [ 148.025284][ T7558] kmem_cache_alloc_noprof+0x73/0x3c0 [ 148.025312][ T7558] ? __anon_vma_prepare+0x117/0x4a0 [ 148.025348][ T7558] __anon_vma_prepare+0x117/0x4a0 [ 148.025376][ T7558] ? __pte_alloc+0x15e/0x1a0 [ 148.025401][ T7558] __handle_mm_fault+0x4b2d/0x5440 [ 148.025448][ T7558] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.025515][ T7558] ? find_vma+0xe7/0x160 [ 148.025541][ T7558] ? __pfx_find_vma+0x10/0x10 [ 148.025571][ T7558] handle_mm_fault+0x40a/0x8e0 [ 148.025610][ T7558] do_user_addr_fault+0x764/0x1390 [ 148.025663][ T7558] exc_page_fault+0x76/0xf0 [ 148.025697][ T7558] asm_exc_page_fault+0x26/0x30 [ 148.025718][ T7558] RIP: 0010:__put_user_4+0xd/0x20 [ 148.025749][ T7558] Code: 66 89 01 31 c9 0f 01 ca e9 10 45 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 148.025766][ T7558] RSP: 0018:ffffc9000b5576f8 EFLAGS: 00050202 [ 148.025785][ T7558] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000240 [ 148.025798][ T7558] RDX: dffffc0000000000 RSI: ffffffff8dba6315 RDI: ffffffff8be33300 [ 148.025814][ T7558] RBP: ffffc9000b557870 R08: 0000000000000000 R09: ffffffff820b7b90 [ 148.025827][ T7558] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 0000000000000000 [ 148.025842][ T7558] R13: ffffffff8f756928 R14: 1ffff920016aaee4 R15: ffff888021f1d780 [ 148.025865][ T7558] ? __might_fault+0xb0/0x130 [ 148.025909][ T7558] sk_ioctl+0x406/0x600 [ 148.025942][ T7558] ? __pfx_sk_ioctl+0x10/0x10 [ 148.025973][ T7558] ? is_bpf_text_address+0x292/0x2b0 [ 148.026004][ T7558] ? is_bpf_text_address+0x26/0x2b0 [ 148.026040][ T7558] ? kernel_text_address+0xa5/0xe0 [ 148.026070][ T7558] ? __kernel_text_address+0xd/0x40 [ 148.026098][ T7558] ? unwind_get_return_address+0x4d/0x90 [ 148.026122][ T7558] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.026149][ T7558] ? arch_stack_walk+0xfc/0x150 [ 148.026185][ T7558] inet_ioctl+0x416/0x4c0 [ 148.026217][ T7558] ? __pfx_inet_ioctl+0x10/0x10 [ 148.026266][ T7558] ? do_syscall_64+0xfa/0x3b0 [ 148.026297][ T7558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.026332][ T7558] sock_do_ioctl+0xd9/0x300 [ 148.026363][ T7558] ? __pfx_sock_do_ioctl+0x10/0x10 [ 148.026410][ T7558] sock_ioctl+0x576/0x790 [ 148.026440][ T7558] ? __pfx_sock_ioctl+0x10/0x10 [ 148.026480][ T7558] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 148.026512][ T7558] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 148.026543][ T7558] ? __pfx_sock_ioctl+0x10/0x10 [ 148.026567][ T7558] do_vfs_ioctl+0xe67/0x1430 [ 148.026597][ T7558] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.026639][ T7558] ? __lock_acquire+0xab9/0xd20 [ 148.026695][ T7558] ? __fget_files+0x2a/0x420 [ 148.026732][ T7558] ? __fget_files+0x2a/0x420 [ 148.026762][ T7558] ? __fget_files+0x3a0/0x420 [ 148.026793][ T7558] ? __fget_files+0x2a/0x420 [ 148.026829][ T7558] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.026857][ T7558] __se_sys_ioctl+0x82/0x170 [ 148.026884][ T7558] do_syscall_64+0xfa/0x3b0 [ 148.026915][ T7558] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.026945][ T7558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.026964][ T7558] ? clear_bhb_loop+0x60/0xb0 [ 148.026990][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.027010][ T7558] RIP: 0033:0x7fc038b8ebe9 [ 148.027029][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.027045][ T7558] RSP: 002b:00007fc039a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.027065][ T7558] RAX: ffffffffffffffda RBX: 00007fc038db5fa0 RCX: 00007fc038b8ebe9 [ 148.027080][ T7558] RDX: 0000200000000240 RSI: 000000000000541b RDI: 0000000000000003 [ 148.027094][ T7558] RBP: 00007fc039a73090 R08: 0000000000000000 R09: 0000000000000000 [ 148.027106][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.027118][ T7558] R13: 00007fc038db6038 R14: 00007fc038db5fa0 R15: 00007ffc0f4d9af8 [ 148.027151][ T7558] [ 148.671754][ T7570] netlink: 'syz.1.670': attribute type 12 has an invalid length. [ 149.325660][ T7603] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 149.428822][ T7611] netlink: 'syz.2.682': attribute type 15 has an invalid length. [ 150.526288][ T7668] Illegal XDP return value 4294967274 on prog (id 187) dev N/A, expect packet loss! [ 150.611619][ T7673] warning: `syz.1.707' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.700557][ T7673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.809263][ T7673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.901730][ T7673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.104261][ T7673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.318184][ T1148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.327721][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 151.370823][ T1012] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.378981][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.720'. [ 151.413530][ T1107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.467631][ T3507] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.643472][ T7718] syz_tun: entered promiscuous mode [ 151.847467][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 151.865566][ T7724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.729'. [ 152.371777][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.741'. [ 152.382101][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 152.393386][ T7755] netlink: 31 bytes leftover after parsing attributes in process `syz.3.741'. [ 152.402519][ T7755] netlink: 'syz.3.741': attribute type 3 has an invalid length. [ 152.410563][ T7755] netlink: 'syz.3.741': attribute type 2 has an invalid length. [ 152.418235][ T7755] netlink: 31 bytes leftover after parsing attributes in process `syz.3.741'. [ 152.427494][ T7755] netlink: 'syz.3.741': attribute type 2 has an invalid length. [ 152.826303][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 153.217269][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 153.227318][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 153.413844][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 153.895188][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 154.102834][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.765'. [ 154.281594][ T7827] FAULT_INJECTION: forcing a failure. [ 154.281594][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.333890][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) [ 154.333922][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.333935][ T7827] Call Trace: [ 154.333943][ T7827] [ 154.333952][ T7827] dump_stack_lvl+0x189/0x250 [ 154.333982][ T7827] ? __pfx____ratelimit+0x10/0x10 [ 154.334014][ T7827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.334040][ T7827] ? __pfx__printk+0x10/0x10 [ 154.334070][ T7827] ? __might_fault+0xb0/0x130 [ 154.334112][ T7827] should_fail_ex+0x414/0x560 [ 154.334145][ T7827] _copy_from_iter+0x1db/0x16f0 [ 154.334177][ T7827] ? policy_nodemask+0x27c/0x720 [ 154.334206][ T7827] ? __pfx__copy_from_iter+0x10/0x10 [ 154.334234][ T7827] ? set_page_refcounted+0xa0/0x1e0 [ 154.334264][ T7827] ? page_copy_sane+0x4e/0x280 [ 154.334286][ T7827] copy_page_from_iter+0xdd/0x170 [ 154.334312][ T7827] tun_get_user+0x1d7b/0x3e20 [ 154.334342][ T7827] ? tun_get_user+0x6f6/0x3e20 [ 154.334372][ T7827] ? aa_file_perm+0x44d/0x1550 [ 154.334393][ T7827] ? __pfx_tun_get_user+0x10/0x10 [ 154.334412][ T7827] ? _parse_integer_limit+0x1ae/0x1f0 [ 154.334453][ T7827] ? __lock_acquire+0xab9/0xd20 [ 154.334492][ T7827] ? ref_tracker_alloc+0x318/0x460 [ 154.334520][ T7827] ? __lock_acquire+0xab9/0xd20 [ 154.334553][ T7827] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 154.334589][ T7827] ? tun_get+0x1c/0x2f0 [ 154.334616][ T7827] ? tun_get+0x1c/0x2f0 [ 154.334635][ T7827] ? tun_get+0x1c/0x2f0 [ 154.334660][ T7827] tun_chr_write_iter+0x113/0x200 [ 154.334684][ T7827] vfs_write+0x5c9/0xb30 [ 154.334718][ T7827] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 154.334740][ T7827] ? __pfx_vfs_write+0x10/0x10 [ 154.334786][ T7827] ? __fget_files+0x2a/0x420 [ 154.334829][ T7827] ksys_write+0x145/0x250 [ 154.334860][ T7827] ? __pfx_ksys_write+0x10/0x10 [ 154.334885][ T7827] ? rcu_is_watching+0x15/0xb0 [ 154.334917][ T7827] ? do_syscall_64+0xbe/0x3b0 [ 154.334953][ T7827] do_syscall_64+0xfa/0x3b0 [ 154.334985][ T7827] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.335015][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.335036][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 154.335062][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.335082][ T7827] RIP: 0033:0x7fc8ff78d69f [ 154.335101][ T7827] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 154.335118][ T7827] RSP: 002b:00007fc9005ab000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 154.335140][ T7827] RAX: ffffffffffffffda RBX: 00007fc8ff9b5fa0 RCX: 00007fc8ff78d69f [ 154.335155][ T7827] RDX: 000000000000005e RSI: 0000200000000740 RDI: 00000000000000c8 [ 154.335168][ T7827] RBP: 00007fc9005ab090 R08: 0000000000000000 R09: 0000000000000000 [ 154.335181][ T7827] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 154.335193][ T7827] R13: 00007fc8ff9b6038 R14: 00007fc8ff9b5fa0 R15: 00007ffe0a2f8c88 [ 154.335226][ T7827] [ 155.104705][ T7852] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.700304][ T7888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 155.907381][ T7893] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 156.004272][ T7893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.051120][ T7902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.058633][ T7902] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 156.073833][ T7902] bond1: (slave vcan1): Error -95 calling set_mac_address [ 156.156383][ T7893] gretap1: entered promiscuous mode [ 156.166537][ T7893] bond1: (slave gretap1): making interface the new active one [ 156.183141][ T7893] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 156.241243][ T7902] macvlan2: entered promiscuous mode [ 156.246921][ T7902] macvlan2: entered allmulticast mode [ 156.254425][ T7902] bond1: entered promiscuous mode [ 156.268868][ T7902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.308974][ T7902] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 156.322506][ T7902] bond1: left promiscuous mode [ 157.518634][ T7976] __nla_validate_parse: 13 callbacks suppressed [ 157.549117][ T7976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.820'. [ 157.831423][ T7991] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 157.852592][ T7991] netlink: 2 bytes leftover after parsing attributes in process `syz.3.824'. [ 157.930873][ T7996] FAULT_INJECTION: forcing a failure. [ 157.930873][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 157.946895][ T7996] CPU: 1 UID: 0 PID: 7996 Comm: syz.0.828 Not tainted syzkaller #0 PREEMPT(full) [ 157.946925][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.946939][ T7996] Call Trace: [ 157.946948][ T7996] [ 157.946957][ T7996] dump_stack_lvl+0x189/0x250 [ 157.946988][ T7996] ? __pfx____ratelimit+0x10/0x10 [ 157.947019][ T7996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.947045][ T7996] ? __pfx__printk+0x10/0x10 [ 157.947082][ T7996] ? __pfx___might_resched+0x10/0x10 [ 157.947102][ T7996] ? fs_reclaim_acquire+0x7d/0x100 [ 157.947141][ T7996] should_fail_ex+0x414/0x560 [ 157.947174][ T7996] should_failslab+0xa8/0x100 [ 157.947208][ T7996] __kmalloc_cache_noprof+0x70/0x3d0 [ 157.947236][ T7996] ? rtnl_newlink+0xed/0x1c70 [ 157.947266][ T7996] ? kasan_save_free_info+0x46/0x50 [ 157.947292][ T7996] rtnl_newlink+0xed/0x1c70 [ 157.947321][ T7996] ? netlink_sendmsg+0x805/0xb30 [ 157.947351][ T7996] ? __sock_sendmsg+0x21c/0x270 [ 157.947375][ T7996] ? ____sys_sendmsg+0x505/0x830 [ 157.947394][ T7996] ? ___sys_sendmsg+0x21f/0x2a0 [ 157.947413][ T7996] ? __x64_sys_sendmsg+0x19b/0x260 [ 157.947433][ T7996] ? do_syscall_64+0xfa/0x3b0 [ 157.947463][ T7996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.947493][ T7996] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.947552][ T7996] ? kasan_quarantine_put+0xdd/0x220 [ 157.947578][ T7996] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.947616][ T7996] ? nlmon_xmit+0xb0/0x100 [ 157.947635][ T7996] ? kmem_cache_free+0x18f/0x400 [ 157.947672][ T7996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 157.947694][ T7996] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.947725][ T7996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 157.947746][ T7996] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 157.947788][ T7996] ? __dev_queue_xmit+0x27b/0x3b50 [ 157.947813][ T7996] ? __dev_queue_xmit+0x27b/0x3b50 [ 157.947835][ T7996] ? __dev_queue_xmit+0x27b/0x3b50 [ 157.947884][ T7996] ? __dev_queue_xmit+0x1d79/0x3b50 [ 157.947915][ T7996] ? __lock_acquire+0xab9/0xd20 [ 157.947975][ T7996] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.948005][ T7996] rtnetlink_rcv_msg+0x7cf/0xb70 [ 157.948040][ T7996] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 157.948070][ T7996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.948098][ T7996] ? ref_tracker_free+0x63a/0x7d0 [ 157.948128][ T7996] ? __asan_memcpy+0x40/0x70 [ 157.948150][ T7996] ? __pfx_ref_tracker_free+0x10/0x10 [ 157.948177][ T7996] ? __skb_clone+0x63/0x7a0 [ 157.948210][ T7996] netlink_rcv_skb+0x208/0x470 [ 157.948243][ T7996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.948277][ T7996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.948320][ T7996] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.948361][ T7996] netlink_unicast+0x82f/0x9e0 [ 157.948398][ T7996] ? __pfx_netlink_unicast+0x10/0x10 [ 157.948429][ T7996] ? netlink_sendmsg+0x642/0xb30 [ 157.948458][ T7996] ? skb_put+0x11b/0x210 [ 157.948482][ T7996] netlink_sendmsg+0x805/0xb30 [ 157.948524][ T7996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.948561][ T7996] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.948597][ T7996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.948620][ T7996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.948654][ T7996] __sock_sendmsg+0x21c/0x270 [ 157.948685][ T7996] ____sys_sendmsg+0x505/0x830 [ 157.948714][ T7996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.948747][ T7996] ? import_iovec+0x74/0xa0 [ 157.948783][ T7996] ___sys_sendmsg+0x21f/0x2a0 [ 157.948808][ T7996] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.948872][ T7996] ? __fget_files+0x2a/0x420 [ 157.948904][ T7996] ? __fget_files+0x3a0/0x420 [ 157.948949][ T7996] __x64_sys_sendmsg+0x19b/0x260 [ 157.948975][ T7996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.949007][ T7996] ? __pfx_ksys_write+0x10/0x10 [ 157.949033][ T7996] ? rcu_is_watching+0x15/0xb0 [ 157.949060][ T7996] ? do_syscall_64+0xbe/0x3b0 [ 157.949097][ T7996] do_syscall_64+0xfa/0x3b0 [ 157.949128][ T7996] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.949158][ T7996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.949179][ T7996] ? clear_bhb_loop+0x60/0xb0 [ 157.949205][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.949226][ T7996] RIP: 0033:0x7fc8ff78ebe9 [ 157.949246][ T7996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.949263][ T7996] RSP: 002b:00007fc9005ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.949286][ T7996] RAX: ffffffffffffffda RBX: 00007fc8ff9b5fa0 RCX: 00007fc8ff78ebe9 [ 157.949301][ T7996] RDX: 0000000000000814 RSI: 0000200000000080 RDI: 0000000000000003 [ 157.949315][ T7996] RBP: 00007fc9005ab090 R08: 0000000000000000 R09: 0000000000000000 [ 157.949328][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.949340][ T7996] R13: 00007fc8ff9b6038 R14: 00007fc8ff9b5fa0 R15: 00007ffe0a2f8c88 [ 157.949375][ T7996] [ 158.021766][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 158.517929][ T7991] team0: entered promiscuous mode [ 158.525625][ T7991] team_slave_0: entered promiscuous mode [ 158.545881][ T7991] team_slave_1: entered promiscuous mode [ 158.549479][ T8011] FAULT_INJECTION: forcing a failure. [ 158.549479][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.565304][ T8011] CPU: 0 UID: 0 PID: 8011 Comm: syz.0.834 Not tainted syzkaller #0 PREEMPT(full) [ 158.565333][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.565356][ T8011] Call Trace: [ 158.565365][ T8011] [ 158.565374][ T8011] dump_stack_lvl+0x189/0x250 [ 158.565406][ T8011] ? __pfx____ratelimit+0x10/0x10 [ 158.565436][ T8011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.565462][ T8011] ? __pfx__printk+0x10/0x10 [ 158.565492][ T8011] ? __might_fault+0xb0/0x130 [ 158.565534][ T8011] should_fail_ex+0x414/0x560 [ 158.565567][ T8011] _copy_from_iter+0x1db/0x16f0 [ 158.565600][ T8011] ? policy_nodemask+0x27c/0x720 [ 158.565629][ T8011] ? __pfx__copy_from_iter+0x10/0x10 [ 158.565657][ T8011] ? set_page_refcounted+0xa0/0x1e0 [ 158.565687][ T8011] ? page_copy_sane+0x4e/0x280 [ 158.565709][ T8011] copy_page_from_iter+0xdd/0x170 [ 158.565735][ T8011] tun_get_user+0x1d7b/0x3e20 [ 158.565765][ T8011] ? tun_get_user+0x6f6/0x3e20 [ 158.565796][ T8011] ? aa_file_perm+0x44d/0x1550 [ 158.565817][ T8011] ? __pfx_tun_get_user+0x10/0x10 [ 158.565836][ T8011] ? _parse_integer_limit+0x1ae/0x1f0 [ 158.565877][ T8011] ? __lock_acquire+0xab9/0xd20 [ 158.565915][ T8011] ? ref_tracker_alloc+0x318/0x460 [ 158.565942][ T8011] ? __lock_acquire+0xab9/0xd20 [ 158.565974][ T8011] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 158.566010][ T8011] ? tun_get+0x1c/0x2f0 [ 158.566036][ T8011] ? tun_get+0x1c/0x2f0 [ 158.566062][ T8011] ? tun_get+0x1c/0x2f0 [ 158.566088][ T8011] tun_chr_write_iter+0x113/0x200 [ 158.566111][ T8011] vfs_write+0x5c9/0xb30 [ 158.566145][ T8011] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 158.566166][ T8011] ? __pfx_vfs_write+0x10/0x10 [ 158.566206][ T8011] ? __fget_files+0x2a/0x420 [ 158.566248][ T8011] ksys_write+0x145/0x250 [ 158.566279][ T8011] ? __pfx_ksys_write+0x10/0x10 [ 158.566304][ T8011] ? rcu_is_watching+0x15/0xb0 [ 158.566350][ T8011] ? do_syscall_64+0xbe/0x3b0 [ 158.566387][ T8011] do_syscall_64+0xfa/0x3b0 [ 158.566418][ T8011] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.566448][ T8011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.566468][ T8011] ? clear_bhb_loop+0x60/0xb0 [ 158.566500][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.566521][ T8011] RIP: 0033:0x7fc8ff78d69f [ 158.566539][ T8011] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 158.566556][ T8011] RSP: 002b:00007fc9005ab000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 158.566578][ T8011] RAX: ffffffffffffffda RBX: 00007fc8ff9b5fa0 RCX: 00007fc8ff78d69f [ 158.566593][ T8011] RDX: 000000000000005e RSI: 00002000000003c0 RDI: 00000000000000c8 [ 158.566607][ T8011] RBP: 00007fc9005ab090 R08: 0000000000000000 R09: 0000000000000000 [ 158.566619][ T8011] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 158.566631][ T8011] R13: 00007fc8ff9b6038 R14: 00007fc8ff9b5fa0 R15: 00007ffe0a2f8c88 [ 158.566665][ T8011] [ 158.576671][ T7991] bridge0: port 3(team0) entered blocking state [ 158.638167][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 158.645699][ T7991] bridge0: port 3(team0) entered disabled state [ 158.888405][ T7991] team0: entered allmulticast mode [ 158.893732][ T7991] team_slave_0: entered allmulticast mode [ 158.904264][ T7991] team_slave_1: entered allmulticast mode [ 158.913605][ T7991] bridge0: port 3(team0) entered blocking state [ 158.920736][ T7991] bridge0: port 3(team0) entered forwarding state [ 158.970691][ T7998] syz_tun: entered promiscuous mode [ 158.986759][ T7998] syz_tun: left promiscuous mode [ 159.250669][ T8031] netlink: 52 bytes leftover after parsing attributes in process `syz.4.841'. [ 159.367337][ T8038] netlink: 'syz.2.842': attribute type 13 has an invalid length. [ 159.439811][ T8038] netlink: 'syz.2.842': attribute type 17 has an invalid length. [ 159.733444][ T8038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.223693][ T8032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.782940][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 160.810065][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 161.274680][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 161.331820][ T8111] vlan2: entered promiscuous mode [ 161.351826][ T8111] bridge0: entered promiscuous mode [ 161.589873][ T8115] [ 161.592268][ T8115] ============================================ [ 161.598474][ T8115] WARNING: possible recursive locking detected [ 161.604648][ T8115] syzkaller #0 Not tainted [ 161.609081][ T8115] -------------------------------------------- [ 161.615248][ T8115] syz.2.867/8115 is trying to acquire lock: [ 161.621162][ T8115] ffff888058674d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 161.632185][ T8115] [ 161.632185][ T8115] but task is already holding lock: [ 161.639651][ T8115] ffff888058674d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 161.649539][ T8115] and the lock comparison function returns 0: [ 161.655624][ T8115] [ 161.655624][ T8115] other info that might help us debug this: [ 161.663709][ T8115] Possible unsafe locking scenario: [ 161.663709][ T8115] [ 161.671185][ T8115] CPU0 [ 161.674481][ T8115] ---- [ 161.677770][ T8115] lock(&dev_instance_lock_key#20); [ 161.683120][ T8115] lock(&dev_instance_lock_key#20); [ 161.688435][ T8115] [ 161.688435][ T8115] *** DEADLOCK *** [ 161.688435][ T8115] [ 161.696586][ T8115] May be due to missing lock nesting notation [ 161.696586][ T8115] [ 161.704916][ T8115] 2 locks held by syz.2.867/8115: [ 161.709956][ T8115] #0: ffffffff8f537c48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 161.718954][ T8115] #1: ffff888058674d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 161.729824][ T8115] [ 161.729824][ T8115] stack backtrace: [ 161.735737][ T8115] CPU: 1 UID: 0 PID: 8115 Comm: syz.2.867 Not tainted syzkaller #0 PREEMPT(full) [ 161.735762][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.735773][ T8115] Call Trace: [ 161.735781][ T8115] [ 161.735789][ T8115] dump_stack_lvl+0x189/0x250 [ 161.735818][ T8115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.735839][ T8115] ? __pfx__printk+0x10/0x10 [ 161.735864][ T8115] ? print_lock_name+0xde/0x100 [ 161.735889][ T8115] print_deadlock_bug+0x28b/0x2a0 [ 161.735910][ T8115] validate_chain+0x1a3f/0x2140 [ 161.735931][ T8115] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 161.735955][ T8115] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.735985][ T8115] __lock_acquire+0xab9/0xd20 [ 161.736019][ T8115] ? __netdev_update_features+0xcb1/0x1be0 [ 161.736039][ T8115] lock_acquire+0x120/0x360 [ 161.736064][ T8115] ? __netdev_update_features+0xcb1/0x1be0 [ 161.736084][ T8115] ? kasan_save_free_info+0x46/0x50 [ 161.736103][ T8115] ? kmem_cache_free+0x18f/0x400 [ 161.736126][ T8115] ? ethnl_multicast+0xb6/0x100 [ 161.736155][ T8115] __mutex_lock+0x187/0x1360 [ 161.736181][ T8115] ? __netdev_update_features+0xcb1/0x1be0 [ 161.736203][ T8115] ? do_raw_spin_lock+0x121/0x290 [ 161.736225][ T8115] ? __netdev_update_features+0xcb1/0x1be0 [ 161.736245][ T8115] ? __pfx___mutex_lock+0x10/0x10 [ 161.736270][ T8115] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 161.736293][ T8115] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.736324][ T8115] __netdev_update_features+0xcb1/0x1be0 [ 161.736350][ T8115] ? __pfx___netdev_update_features+0x10/0x10 [ 161.736371][ T8115] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 161.736402][ T8115] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 161.736442][ T8115] ? __lock_acquire+0xab9/0xd20 [ 161.736469][ T8115] ? do_raw_spin_lock+0x121/0x290 [ 161.736491][ T8115] netdev_update_features+0x6d/0xe0 [ 161.736516][ T8115] ? __pfx_netdev_update_features+0x10/0x10 [ 161.736545][ T8115] macsec_notify+0x2f5/0x660 [ 161.736565][ T8115] ? __pfx_macsec_notify+0x10/0x10 [ 161.736590][ T8115] notifier_call_chain+0x1b3/0x3e0 [ 161.736611][ T8115] netdev_features_change+0x85/0xc0 [ 161.736635][ T8115] ? __pfx_netdev_features_change+0x10/0x10 [ 161.736659][ T8115] ? security_capable+0x7e/0x2e0 [ 161.736687][ T8115] dev_ethtool+0x1536/0x19b0 [ 161.736709][ T8115] ? __pfx_dev_ethtool+0x10/0x10 [ 161.736731][ T8115] ? dev_load+0x21/0x1f0 [ 161.736755][ T8115] dev_ioctl+0x392/0x1150 [ 161.736780][ T8115] sock_do_ioctl+0x22c/0x300 [ 161.736802][ T8115] ? __pfx_sock_do_ioctl+0x10/0x10 [ 161.736821][ T8115] ? __lock_acquire+0xab9/0xd20 [ 161.736851][ T8115] sock_ioctl+0x576/0x790 [ 161.736871][ T8115] ? __pfx_sock_ioctl+0x10/0x10 [ 161.736908][ T8115] ? __fget_files+0x2a/0x420 [ 161.736933][ T8115] ? __fget_files+0x3a0/0x420 [ 161.736958][ T8115] ? __fget_files+0x2a/0x420 [ 161.736985][ T8115] ? bpf_lsm_file_ioctl+0x9/0x20 [ 161.737015][ T8115] ? __pfx_sock_ioctl+0x10/0x10 [ 161.737035][ T8115] __se_sys_ioctl+0xfc/0x170 [ 161.737057][ T8115] do_syscall_64+0xfa/0x3b0 [ 161.737084][ T8115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.737100][ T8115] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.737117][ T8115] ? clear_bhb_loop+0x60/0xb0 [ 161.737136][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.737153][ T8115] RIP: 0033:0x7fc038b8ebe9 [ 161.737170][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.737185][ T8115] RSP: 002b:00007fc039a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.737204][ T8115] RAX: ffffffffffffffda RBX: 00007fc038db5fa0 RCX: 00007fc038b8ebe9 [ 161.737217][ T8115] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000007 [ 161.737228][ T8115] RBP: 00007fc038c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 161.737239][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.737249][ T8115] R13: 00007fc038db6038 R14: 00007fc038db5fa0 R15: 00007ffc0f4d9af8 [ 161.737270][ T8115]