last executing test programs: 11m46.312181242s ago: executing program 1 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002008cff00000000000000009500000000000000da84d34098ec449c08b1c02b44080bcf09215183b43cfcda35baaf676de58e681cba4a4f527b5fe7f279b362accf2927164d04923bafade78320b0d387184d71a8e1fe2c64a7f8189fd3ec4374320c543dc1c3c1379d90dda4645385ad0d69b011204361c14a850b3789c9f811961e589fe21dec76d4e60430c8bae43653c3cd74d5305fae4c030098ce19df43fed51644ebda685d68f2185008"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}}, 0x2000c050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}}, 0x0) 11m46.269790137s ago: executing program 1 (id=251): r0 = socket(0x28, 0x80000, 0x80) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1d00}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'rdma'}, {0x2d, 'io'}]}, 0xa) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x200, 0x0, 0x25dfdbfe, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000002c0)=0x81, 0x4) recvmsg(r2, &(0x7f0000001800)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/125, 0x7d}, {&(0x7f0000001580)=""/7, 0x7}, {&(0x7f00000015c0)=""/205, 0xcd}, {&(0x7f00000016c0)=""/62, 0x3e}], 0x7, &(0x7f0000001780)=""/106, 0x6a}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001840)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x86880, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000018c0)) socket$igmp(0x2, 0x3, 0x2) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000001900)={0x0, 0x4, 0x5, 0x9}) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xaac}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc93e40b83caf764d}, 0x80) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001b00), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x38, r8, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8815) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001c00)={0x1ff, {{0xa, 0x4e24, 0x8, @remote, 0x9}}, 0x0, 0x6, [{{0xa, 0x4e23, 0xaf, @mcast2, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0xfffffc00}}, {{0xa, 0x4e24, 0x3, @mcast2, 0x9}}, {{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}}, {{0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00', 0x9}}, {{0xa, 0x4e23, 0xf, @mcast1, 0x7}}]}, 0x390) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001fc0)) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000002000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040)) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000002480)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000002100)={0x30c, r9, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdf6f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1800000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd15c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3f6cacf3f64962a203a1979f5896442abcca29651f0"}}, @TIPC_NLA_NODE_ID={0x69, 0x3, "1b32687920828b3caafc1dc8280556eb0358b684929c5f64da46afdd94f2f53a174247c16d2f1d765c559c21cbf25923f377433424e3394c9fb6d7b8df7eb9d152d08f78d892d6be2c9341b0a4fbebe1aee993c901ae2932db77a9571828afb0fbcef3ad38"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "549d587e20db2d43cc3a26b17fd648e397bb79687e59"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffe01}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x78}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x137}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bb}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30c}}, 0x800) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f00000024c0)=0x3, 0x4) setsockopt$inet6_int(r10, 0x29, 0x46, &(0x7f0000002500)=0x7, 0x4) 11m46.150035756s ago: executing program 1 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x1, 0xd, 0x6, 0x9}, {0x2, 0xe, 0x87, 0x6}, {0x0, 0x3, 0x1, 0x1}, {0x1000, 0x40, 0x8, 0x7fff}]}) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) 11m45.323297969s ago: executing program 3 (id=262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001f000000000000007e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000002007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) 11m45.255817551s ago: executing program 3 (id=263): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002500000001000000180000000000020000002000000000009500000000000000a70300000000020095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) 11m45.156041503s ago: executing program 3 (id=265): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xd0, 0x6, "03d403aa239b0c56fb4a18c77a589f9d045f3c96f3484854447862ea3d9f5e3bee8e8b84a51ec98a35d9302bedf40262c4078b1173dafdaeb132819853cff968f47f5bc298548e7c70cef149cff5642a0408c79ab2c46fb872cba093b2bc181b47ed7fd6e605214aea6f71e4df518a5d1a33cf4d5ba7f59071b3d236381305033cca0a00d7161b2011fceb18551a086a7dc65386ddaa71b5a601ef9aa80cb9cb828f70f02865e3bc7df667ea1f5c6a5cd0428962e2d71c62c9da5488ec16f673422531a9eb263629f87e7716"}]}, @NFT_MSG_NEWCHAIN={0x105, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe5, 0xc, "b0209831664371287cb9f53f917ff4c5e41d42df62829fcb746ade08870261d6c35c54f0070a9afbdb2508a4f53f516fb0ded67b25676209cdcb7b97d2ccef6daf0504fab68e6cb3ac5c81ee2db359a24a7cde7d695e46a77dd80cab84e1d96fb051fb92b157cb5580030a235ecbb26314b1b297312a5bb8e9ef587c78115ea67bcbabd745f30836a9b6b777194dbb0cb1b441e306aa536412a85b3dbf76ec723b538d99817bddfdacc7b147976beee208269b44a8647c3595eb3920bc0be4b346d47c9bfec89e37c5e3cc2f47fffe75b5d48edc99ac3852311ad424dee9ed26f1"}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x25c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r3, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf253700000408000300", @ANYRES32=r7], 0x30}}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611034002000000063012c00001b000095000000ebff0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ppoll(&(0x7f0000000000)=[{r1, 0x2000}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11m45.041350965s ago: executing program 1 (id=266): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8, 0x8000, 0xa, 0xfffffff9, {{0x2b, 0x4, 0x1, 0x8, 0xac, 0x64, 0x0, 0x81, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x28, 0x3, [{0x1, 0x11, "3b47a36f6823d9fc797cb9cd36838d"}, {0x1, 0x11, "b59b6b206ff6c7e9f65fe5b3a5be43"}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x6, 0x10, "c8eeab772281165d9bb6fe3c4b92"}, {0x5, 0x11, "8d06af43462748df53d08d3107683f"}]}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x6d, [@empty, @multicast1, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp={0x44, 0x8, 0x5b, 0x0, 0x3, [0x7]}, @timestamp={0x44, 0x24, 0xc2, 0x0, 0x0, [0x5, 0xbd, 0x0, 0xfffffffc, 0x101, 0x6, 0x0, 0x7fff]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x8000}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) shutdown(r3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x5, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x4041014) 11m44.742171233s ago: executing program 2 (id=269): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff020000000001a800000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000004900000000000000003c000000000000000a"], 0xcc}}, 0x0) 11m44.630744511s ago: executing program 2 (id=270): unshare(0x22020600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) 11m44.556721654s ago: executing program 2 (id=271): unshare(0x22020600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) (fail_nth: 1) 11m44.130381565s ago: executing program 2 (id=273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001f000000000000007e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000003007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) 11m44.12952292s ago: executing program 3 (id=274): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @mcast2, 0x81}, @in6={0xa, 0x4e22, 0x0, @local, 0xe}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b706, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) close(r2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) unshare(0x100) 11m44.060833879s ago: executing program 1 (id=275): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) socketpair(0x23, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x54, 0x200, 0x70bd29, 0x25dfdbfb, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x31}, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40) 11m43.984240537s ago: executing program 2 (id=276): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000c00b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 11m43.966991853s ago: executing program 3 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@mcast2, 0x4, r2}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}]}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000560001002ebd7000f8dbdf2507000000", @ANYRES32=r7], 0x18}, 0x1, 0x0, 0x0, 0x20040100}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0xf0, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x5}, [@generic="cc6dc7480c66023eb510dc07f47ec2ef7b9314bf79ed3d010c35eca75b81c598a027ed73a97f095a77cb9d1a974125ddbd36675250c1788c36c9fcf3d44de951a4ac2c59363ad015490f2cbdc54dcb584815b26c07ae3cbd846696293455476aa48ff0b00ffbad9d76dbf99f947586c2b8e3f3ccc09c006cb0ebc902a63b3bb6e71197d79da6ab8eab741ad33b39dc16c990da1eeacbd2fb9d2da9650777688f4f02d9b84df2883bdcd3b76d497e26315dc1814a5d422ac096ddbee51353ccc5a114951ac23b1330bc48860503aa25b202cd33bbea37dc7a1186"]}, 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) close(0x3) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000400)={r13, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r6, 0xd, 0x30}, &(0x7f0000000140)=0xffffffffffffff6a) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000100000000001000000040000040003000400018000"], 0x20}}, 0x0) 11m43.847654981s ago: executing program 3 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xcf020000, 0x2}, 0x48) 11m43.689788892s ago: executing program 32 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xcf020000, 0x2}, 0x48) 11m43.643837074s ago: executing program 1 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='xen_mc_flush_reason\x00', r0}, 0x18) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d00000004000000020000009ced0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x2, 0x20000002, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 11m43.391089914s ago: executing program 33 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='xen_mc_flush_reason\x00', r0}, 0x18) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d00000004000000020000009ced0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x2, 0x20000002, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 11m43.347651811s ago: executing program 2 (id=286): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 11m43.292127967s ago: executing program 34 (id=286): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1m18.352475319s ago: executing program 6 (id=7947): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002500000001000000180000000000020000000000000000009500000000000000a70300000000020095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xa00}, 0x94) 1m18.251004781s ago: executing program 6 (id=7950): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000c3008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1m18.121348814s ago: executing program 6 (id=7953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0xba01}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) 1m17.931615477s ago: executing program 6 (id=7962): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x76, 0x0, 0x16bf, 0xc0, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1m17.067071718s ago: executing program 6 (id=7984): r0 = socket$netlink(0x10, 0x3, 0xc) socket(0x0, 0xa, 0xfffffff7) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x43ca10337ab2e290, r1}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r2, 0xffffffffffffffff, 0xb, 0xd, 0xffffffffffffffff, @void, @value=r4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000070000000700002c"], 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x62, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x24044080) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) 1m16.612213238s ago: executing program 6 (id=7988): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x5, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @multicast1, @broadcast, @remote, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 1m16.209733621s ago: executing program 35 (id=7988): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x5, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @multicast1, @broadcast, @remote, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 3.22786013s ago: executing program 4 (id=9215): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r3, 0x9}, &(0x7f0000000240)=0x8) 3.135366318s ago: executing program 4 (id=9217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newlink={0x80, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1ff}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, r2}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x258}], 0x1, 0x0, 0x6b}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x18, 0x110, 0xc, ')'}], 0x18}, 0x20004000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="000088b5fffffffff96c9e7f698d438a08004500001ce000002f907800001fe1ac1414aaa000a3dd00089078069f12764503fe33bb8820b95a76dbf0b04940bbd5cc918e2be58e4388dfbe7f3160cd9a2f51c93f56975b3861f5b35ad5ea4f7eccda258a856f6b7df79807250d3255dd4ef9c65fd64a"], 0x2e) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@newtaction={0x2d8, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x2c4, 0x1, [@m_ife={0x150, 0xf, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="2f2d2c4bee69"}]}, {0xed, 0x6, "1b1dd5652054ad5923f19b143c26a995c20f0fcbd2c617dbcade361738bf910dbc4ad6b0713a36ef40ca5e0b6e7ffda8ba0997c3363e53a8507de4a4b0cc4178c3b59201479260137b1ed9ba5420b72e41837e9e320e74e07872865adf7ed411c839e8f116121b30a2da6726f6f718e91c2c3b3020cbd9751ec315bad5f6e3292f8ab224f21bf11c031fa0f8eafabae3adce31d9588aa0296ffaa1cb144eea52134812364ecce68de82c324520d4fdfdc4b0d47e33c377432eeb0efcfa76402a9a8421bf2b9fa3cfc73eef463364b452c524cc254b1ed863587a1480d521c9c516d7e4ba0d90ba33d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x170, 0xd, 0x0, 0x0, {{0xa}, {0xc0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x85, 0x6, "ffa449d9761ef16726776dec6241caa3f22d0d9342f80236f936bd3ef1e79546997569dfbd790cbe522afd4bdf460831192b2853ef4df2135f9b6b5af1ffb28ee7336385111fbf0e1c765859b2bdf9e1537a4456fc0734a7191bc790125b398f04f1fbe7d3747c05cd4ff46816004908d8a0a74e1faf0b4b6d152f699610ce759a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r12, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.900121942s ago: executing program 4 (id=9224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r2, 0x5, 0xffffffffffffff3c, 0x100000001}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121) 2.874414115s ago: executing program 7 (id=9226): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002500000001000000180000000000020000000000000000009500000000000000a70300000000020095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xff000000}, 0x94) 2.756103178s ago: executing program 0 (id=9228): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x4c, 0xf5, 0x8, 0x0, @remote, @mcast1, 0x80, 0x4091, 0xffff, 0x8}}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f00000001c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @multicast1}}) 2.742299794s ago: executing program 7 (id=9229): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x8800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x5, r4, 0x1d}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000003197f11497fe6399871c3000109000000e5ffff837661d0f497ca4b21b47a"], 0x24}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r6, 0x3, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0xc004) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200)=0x2, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) 2.679507622s ago: executing program 0 (id=9231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) socket(0x25, 0x4, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860188a8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r2], 0x1ec}}, 0x8054) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000048de8dd00000008009f945909103300000100", @ANYRES32=0x1, @ANYBLOB='H\b\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) 1.564649644s ago: executing program 4 (id=9232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @void, @ipv4=@icmp={{0xa, 0x4, 0x0, 0x14, 0x30, 0x64, 0x0, 0x76, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_prespec={0x44, 0xc, 0x3f, 0x3, 0xb, [{@loopback, 0x80000000}]}]}}, @info_reply={0x10, 0x0, 0x0, 0xf, 0x6}}}, 0x34) 1.563941373s ago: executing program 8 (id=9233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="b5", 0x1}, {&(0x7f00000002c0)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x4, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001080)="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", 0x155}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000cc0)}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000480)="7cb4ed8d75b2bf3112799fd6df65ec2e59789849019ba02cf53691cc6a3861c12a7561473f42faa934fbade4b821748f020274d96c341c767249d5c73a686846b2277104adaec1988872649bfc0b166d57f560d39595e97c35abc2e5ab6e198601eb33839b2423b4ddfda82faca046d05d68", 0x72}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 1.562720189s ago: executing program 7 (id=9234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x23, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x3}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, &(0x7f00000007c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.562329504s ago: executing program 0 (id=9235): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x20000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="71030907040609f34002b72cfef4195e1b02"], 0x12) (async) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="71030907040609f34002b72cfef4195e1b02"], 0x12) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1=0x3000000}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1=0x3000000}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040004) (async) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040004) 1.515625873s ago: executing program 8 (id=9237): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20000400) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0x6f2, @mcast2, 0x935}}}, 0x32) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1.419714037s ago: executing program 8 (id=9239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0x2f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000068009753d74093eaf656df2500000000000000000c0002000100000006000000080001"], 0x2c}}, 0x4000) 1.381606666s ago: executing program 4 (id=9241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002e00000008002300610033f70fb3681174f9f09f94ff012afa74f29577", @ANYRES32=r11, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x1f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 1.234764006s ago: executing program 8 (id=9242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1f, &(0x7f0000000700)={@broadcast, @random="4ccb9831e888", @void, {@llc_tr={0x11, {@llc={0xaa, 0x0, 'o', "4cddd689f527e6cafe5005ed64e6"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8e}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8008000, &(0x7f0000000180)={0xa, 0x4e23, 0xcc09, @dev={0xfe, 0x80, '\x00', 0x15}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="183f000000000000000000000000000004000000f0ffffffc3a20000a10000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f00000002c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x28}, 0x22) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'gretap0\x00', @multicast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x48) r9 = accept4$vsock_stream(r7, &(0x7f0000000380)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) connect$vsock_stream(r9, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ef, @local}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x40010, r4, 0x78ebc000) close(r8) 1.004780599s ago: executing program 8 (id=9243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x3) getsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000280)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x100, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0xffff, 0x4, 0x2, 0x9, 0x9, 0xa}}, {0x18, 0x2, [0x5, 0x6, 0x800, 0xd, 0x9, 0x8, 0x5, 0x40, 0x6, 0x1000]}}, {{0x1c, 0x1, {0x8, 0x0, 0x8000, 0x80000001, 0x2, 0x2, 0x7, 0x6}}, {0x10, 0x2, [0x0, 0x6, 0x5a1, 0x9, 0x6, 0x1]}}, {{0x1c, 0x1, {0x7, 0x7, 0x1, 0xfffffffc, 0x2, 0x0, 0x3, 0x6}}, {0x10, 0x2, [0x1cd0, 0x8, 0xe, 0x1000, 0x3, 0x9]}}, {{0x1c, 0x1, {0x0, 0xa8, 0x0, 0x3ff, 0x2, 0x9, 0x0, 0x3}}, {0xa, 0x2, [0x4, 0x0, 0x8]}}, {{0x1c, 0x1, {0x3e, 0x1, 0x8, 0x6a, 0x0, 0x9, 0x101, 0x2}}, {0x8, 0x2, [0x3, 0x7]}}]}]}, 0x100}}, 0x8005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a44010000080a0300000000000000000005000007fe000740fa3ec36b56398938c458ce72af321480c24b56ce29f9a186af23c3285c479b34a4d1e14237b1bcd17d898bf608f0b922bc4170e52bd41b300a011dab4051ac4e281d6033bdf016f4587cfc3328d5ad5f636ef20b8cfcceed1616e3d0008f890f156487759545013e803a9db0a3aca01dbc2ebc7847850ebed1d2730adc80f853388f4b81e00c99ffd45ff94a15218729a590fb089e2d5ee729bb83e315855be2a9b6c67765cadd38c42635c35003746340b84ae570f413b6f6e3457fae9a2583acc444e0f3159b5bd2b75e6162dbdf9aef3f9cf3d1e50486a125b0ae48e52d5a9d939fdfd9892345f236c08d83040d9b0c2522ed073bd931b3a200000c00058008000140000000000900010073797a30000000000c00064000000000000000040900010073797a310000000020000000180a010207000000000000000200000a0c000540000000000000000320000000050a01020000000000f0ffff040000010b00070066696c746572000009000000180a010200000000000000000100000908000740000000030900020073797a3000000000a8000380a40003801400010070696d72656700000000000000000000140001000000001400010069703665727370616e300000000000001400010076657468305f766c616e0000000000001400010076657468305f6d6163767461700000001400010076657468315f746f5f6261746164760014000100776731000000000000000000000000001400010076657468305f746f5f7465616d00000044000000050a01080000000000000000010000010900030073797a32000000000900010073797a30000000000c00024000000000000000020a000700726f757465000000140000001100010000000000000000000a00000a00"/704], 0x2c0}, 0x1, 0x0, 0x0, 0xd1}, 0x40000) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121) 653.377066ms ago: executing program 0 (id=9244): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000600}}) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/197, 0xc5}], 0x5) 652.951744ms ago: executing program 7 (id=9245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 590.22759ms ago: executing program 0 (id=9247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="b5", 0x1}, {&(0x7f00000002c0)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x4, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001080)="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", 0x155}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000cc0)}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000480)="7cb4ed8d75b2bf3112799fd6df65ec2e59789849019ba02cf53691cc6a3861c12a7561473f42faa934fbade4b821748f020274d96c341c767249d5c73a686846b2277104adaec1988872649bfc0b166d57f560d39595e97c35abc2e5ab6e198601eb33839b2423b4ddfda82faca046d05d68", 0x72}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 554.783276ms ago: executing program 0 (id=9248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000003c0)="00000000f1417854bea02219212f078365b410965953d07a63cd13b76922a018810c3362015bbaf453ebe908fae737094c544c105f3697928584cc0ddf596fae8be46df8050a3842973c677cf217d5ca6c569b871b25640b66a2", 0x5a}], 0x2) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000080), 0x4) socket$alg(0x26, 0x5, 0x0) unshare(0x22020600) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/51, 0x33}], 0x1}, 0x120) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xc00) accept4(r1, 0x0, 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400200000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002140000001000010000000000000000000084000a606fe9d3a6800a"], 0x100}}, 0x0) 444.108122ms ago: executing program 5 (id=9249): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f000060b000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x4, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 404.021526ms ago: executing program 5 (id=9250): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 359.20417ms ago: executing program 5 (id=9251): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3ea00fe00335b82d4385f43160000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 312.655164ms ago: executing program 7 (id=9252): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28fae8c0c90a2ed9a62073ca09b91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f81", 0x3a}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f0f54f2d4b0d52e7afb07cc615c06699f53aadaf1073cbc7e40477acad0a92ec51ee421524bc082abb17cd85d21caf69dafb65e4896f5879c8c4e5a1ac91d4b9529da9cab44e27a88a1d446d5e59f6e186083d7b10ba0cee1933f62e8326fac01b12bdf3e6f7b9e18d729eb65d6e61bc29380e282347311220f54c7b52c3760a194a7a74f9aa418ce", 0x337}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r5, r6}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r7, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) close(0x3) sendmmsg$inet(r1, &(0x7f0000003500)=[{{0x0, 0xffffffffffffffeb, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x98}}], 0x1, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r10, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) 311.751479ms ago: executing program 5 (id=9253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000036c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x15bc, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1594, 0x3, 0x0, 0x1, [{0x1590, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x11fc, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x1140, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1130, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}, @NFTA_TARGET_INFO={0x12, 0x3, "b2e87c207c91742937f2592c1d45"}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_INFO={0x100, 0x3, "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"}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_DATA={0x364, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xee, 0x1, "5d28c10dbf26450c76657212ffcce05b7efae9d1b93edab2b8de5547a47cd9128790a41f9a4146a88c71db5c9fd81d94a7e46187d5b9da1ddb6e36855a1a9b2b1a655e0ee40460b2c9da8a0bc1ace5871a6d33e695ae4869bff3656b93dda71a1d79355aab04f58bbacc7f44838314024f7155b9952161e382f65ce3091f9b88c73201ed30be2ac1d1d79902564baf4a9abc290319025aef451ae0504b5a522889c88707a321aa3e08a973337b6c78cc52498393951c9f61bed5b51b782112d07eab15a61161b388afa68c40125a6c58acaf7f44a8ccd8d04ee7ceb2b95a715cc53378d24e88d1becd98"}, @NFTA_DATA_VALUE={0xb3, 0x1, "9195ebf41796df5164cc87853176fc607521d51ba9290c282870154be9128115ed8915bdaa3de9907f0368842325a933564e04e760cf8c9e91da5276771e8a81c96989c7a038215b729c45ea091723f25041436aec3acfad92702912b55e56db11de95725b912049dc2a7cbd6b0caf5873215bfcbe5bf90a26d9d8149a17b061b50c8303e8e39abaa884b07c25e4d25b7bddcae469e3b69bcb8627b92b963641862441eedb40f035c723c67cfcd949"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "c69101576e8fa27be8eb0feb86a553c0cef09a050e289cf2965b97600ca2a0ad5b80cf1bd2712466d6e6a16c8699e1cba8f88dfada9d140172751cbd0761e4c8c8c6ce9da348409fcf4d46449f7b2eeb75819db0dcc14eb812f30c227a1559baf5f8b111037f180ebbc60b7c03b08e6c7ff66bfb5447b18f2ae6a4ade01d2ea51b8c4406b849f35eca55ac8d7cde0960040f5dfd83c4e868da5f2f363d198f959382311d9916d360a03380be7c574553e4c7379f8c3bf3989b1bf5f3a1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1624}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 180.227972ms ago: executing program 5 (id=9254): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) accept4(r0, 0x0, 0x0, 0x0) 153.722915ms ago: executing program 5 (id=9255): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="5e1c852ad831882b"], 0x20}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) recvfrom$ax25(r4, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xb1, 0x80}, 0xc) accept$inet(r4, 0x0, &(0x7f0000000180)) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 129.646135ms ago: executing program 7 (id=9256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r9 = socket(0x8, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfa, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x8, 0x1c, 0xd, 0x0, 0x8, 0x4000002}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0) r11 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x618f, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 89.035371ms ago: executing program 4 (id=9257): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080036573b4d1e96", 0x8}], 0x1, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}]}}}], 0x18}, 0x24000044) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac000000080001400000080908000240000000010900010073797a30"], 0xcc}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000162dabe9a7e7", 0x2e}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x900, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 8 (id=9258): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async) write$tun(r1, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x36) (async) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) kernel console output (not intermixed with test programs): ] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 721.713231][T32071] RBP: 00007f4b45a73090 R08: 0000000000000000 R09: 0000000000000000 [ 721.713243][T32071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.713254][T32071] R13: 00007f4b44db6038 R14: 00007f4b44db5fa0 R15: 00007ffe82f0b038 [ 721.713274][T32071] [ 721.713306][T32067] ±ÿ: renamed from batadv_slave_1 [ 721.904590][ T5183] Bluetooth: hci3: command tx timeout [ 722.060088][T32072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 722.069827][T11975] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.079037][T32087] Bluetooth: MGMT ver 1.23 [ 722.093442][T32076] bond3: (slave veth5): Enslaving as an active interface with a down link [ 722.151414][T32089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8033'. [ 722.187444][T32087] geneve2: entered promiscuous mode [ 722.286258][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.300997][ T5183] Bluetooth: hci4: command tx timeout [ 722.324306][T32097] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8035'. [ 722.331349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.369606][T32094] vlan3: entered promiscuous mode [ 722.381109][T32094] bond0: entered promiscuous mode [ 722.389686][T32094] vlan3: entered allmulticast mode [ 722.403258][T32094] bond0: entered allmulticast mode [ 722.419266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.438189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.523839][T32106] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8038'. [ 722.603902][T32111] FAULT_INJECTION: forcing a failure. [ 722.603902][T32111] name failslab, interval 1, probability 0, space 0, times 0 [ 722.622755][T32111] CPU: 0 UID: 0 PID: 32111 Comm: syz.5.8040 Not tainted syzkaller #0 PREEMPT(full) [ 722.622791][T32111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 722.622802][T32111] Call Trace: [ 722.622809][T32111] [ 722.622816][T32111] dump_stack_lvl+0x189/0x250 [ 722.622840][T32111] ? __pfx____ratelimit+0x10/0x10 [ 722.622861][T32111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.622879][T32111] ? __pfx__printk+0x10/0x10 [ 722.622906][T32111] should_fail_ex+0x414/0x560 [ 722.622928][T32111] should_failslab+0xa8/0x100 [ 722.622951][T32111] kmem_cache_alloc_noprof+0x73/0x3c0 [ 722.622971][T32111] ? skb_clone+0x212/0x3a0 [ 722.622991][T32111] skb_clone+0x212/0x3a0 [ 722.623009][T32111] __netlink_deliver_tap+0x404/0x850 [ 722.623038][T32111] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.623063][T32111] netlink_deliver_tap+0x19c/0x1b0 [ 722.623086][T32111] netlink_unicast+0x7fa/0x9e0 [ 722.623111][T32111] ? __pfx_netlink_unicast+0x10/0x10 [ 722.623131][T32111] ? netlink_sendmsg+0x642/0xb30 [ 722.623144][T32111] ? skb_put+0x11b/0x210 [ 722.623161][T32111] netlink_sendmsg+0x805/0xb30 [ 722.623179][T32111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.623197][T32111] ? aa_sock_msg_perm+0xf1/0x1d0 [ 722.623214][T32111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 722.623233][T32111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.623249][T32111] __sock_sendmsg+0x219/0x270 [ 722.623271][T32111] ____sys_sendmsg+0x505/0x830 [ 722.623293][T32111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.623314][T32111] ? import_iovec+0x74/0xa0 [ 722.623332][T32111] ___sys_sendmsg+0x21f/0x2a0 [ 722.623350][T32111] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.623383][T32111] ? __fget_files+0x2a/0x420 [ 722.623398][T32111] ? __fget_files+0x3a0/0x420 [ 722.623417][T32111] __x64_sys_sendmsg+0x19b/0x260 [ 722.623437][T32111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 722.623460][T32111] ? __pfx_ksys_write+0x10/0x10 [ 722.623481][T32111] ? rcu_is_watching+0x15/0xb0 [ 722.623501][T32111] ? rcu_is_watching+0x15/0xb0 [ 722.623518][T32111] do_syscall_64+0xfa/0x3b0 [ 722.623535][T32111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.623552][T32111] ? clear_bhb_loop+0x60/0xb0 [ 722.623570][T32111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.623587][T32111] RIP: 0033:0x7f4b44b8ebe9 [ 722.623604][T32111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.623618][T32111] RSP: 002b:00007f4b45a73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.623639][T32111] RAX: ffffffffffffffda RBX: 00007f4b44db5fa0 RCX: 00007f4b44b8ebe9 [ 722.623654][T32111] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 722.623665][T32111] RBP: 00007f4b45a73090 R08: 0000000000000000 R09: 0000000000000000 [ 722.623677][T32111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.623688][T32111] R13: 00007f4b44db6038 R14: 00007f4b44db5fa0 R15: 00007ffe82f0b038 [ 722.623709][T32111] [ 722.623852][T32111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8040'. [ 723.087872][T27104] hid-generic 0005:16BF:00C0.0003: unknown main item tag 0x0 [ 723.096201][T27104] hid-generic 0005:16BF:00C0.0003: unknown main item tag 0x0 [ 723.117946][T27104] hid-generic 0005:16BF:00C0.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 723.520973][T32159] netlink: 788 bytes leftover after parsing attributes in process `syz.8.8057'. [ 723.583554][T32164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.678722][T32171] netlink: 'syz.0.8061': attribute type 13 has an invalid length. [ 723.688481][T32171] netlink: 'syz.0.8061': attribute type 17 has an invalid length. [ 723.734740][T32171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 723.779903][T32173] lo speed is unknown, defaulting to 1000 [ 723.787156][T32173] wg1 speed is unknown, defaulting to 1000 [ 723.795045][T32173] wg1 speed is unknown, defaulting to 1000 [ 723.862927][T32176] netlink: 'syz.7.8062': attribute type 10 has an invalid length. [ 723.875317][T32177] netlink: 'syz.7.8062': attribute type 10 has an invalid length. [ 723.915203][T32177] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 723.980948][ T5183] Bluetooth: hci3: command tx timeout [ 724.213157][T32184] netlink: 'syz.4.8064': attribute type 6 has an invalid length. [ 724.233005][T32184] netlink: 'syz.4.8064': attribute type 12 has an invalid length. [ 724.241333][T32184] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.8064'. [ 724.380798][ T5183] Bluetooth: hci4: command tx timeout [ 724.474543][T32194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8068'. [ 724.492848][T32192] lo: entered allmulticast mode [ 724.498200][T32192] lo: left allmulticast mode [ 724.606258][T32200] netlink: 'syz.8.8070': attribute type 13 has an invalid length. [ 724.615479][T32200] netlink: 'syz.8.8070': attribute type 17 has an invalid length. [ 724.666379][T32200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 724.766300][T32197] lo speed is unknown, defaulting to 1000 [ 724.774156][T32197] wg1 speed is unknown, defaulting to 1000 [ 724.783182][T32197] wg1 speed is unknown, defaulting to 1000 [ 725.078108][ T7134] hid-generic 0005:16BF:00C0.0004: unknown main item tag 0x0 [ 725.087067][ T7134] hid-generic 0005:16BF:00C0.0004: unknown main item tag 0x0 [ 725.105088][ T7134] hid-generic 0005:16BF:00C0.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 725.488847][T32252] netlink: 'syz.4.8088': attribute type 17 has an invalid length. [ 725.507414][T32252] tipc: Resetting bearer [ 725.734794][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.761433][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.775253][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.787146][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.977497][T32275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.062855][ T5183] Bluetooth: hci3: command tx timeout [ 726.092777][T32273] lo speed is unknown, defaulting to 1000 [ 726.101767][T32273] wg1 speed is unknown, defaulting to 1000 [ 726.108623][T32273] wg1 speed is unknown, defaulting to 1000 [ 726.461036][ T5183] Bluetooth: hci4: command tx timeout [ 726.652249][T32294] __nla_validate_parse: 11 callbacks suppressed [ 726.652267][T32294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8101'. [ 726.673320][T32296] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8102'. [ 726.684538][T32294] FAULT_INJECTION: forcing a failure. [ 726.684538][T32294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.701078][T32294] CPU: 0 UID: 0 PID: 32294 Comm: syz.0.8101 Not tainted syzkaller #0 PREEMPT(full) [ 726.701106][T32294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.701116][T32294] Call Trace: [ 726.701123][T32294] [ 726.701131][T32294] dump_stack_lvl+0x189/0x250 [ 726.701160][T32294] ? __pfx____ratelimit+0x10/0x10 [ 726.701184][T32294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.701202][T32294] ? __pfx__printk+0x10/0x10 [ 726.701227][T32294] ? rcu_is_watching+0x15/0xb0 [ 726.701245][T32294] should_fail_ex+0x414/0x560 [ 726.701268][T32294] _copy_to_user+0x31/0xb0 [ 726.701287][T32294] simple_read_from_buffer+0xe1/0x170 [ 726.701311][T32294] proc_fail_nth_read+0x1b3/0x220 [ 726.701330][T32294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 726.701348][T32294] ? rw_verify_area+0x2a6/0x4d0 [ 726.701367][T32294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 726.701386][T32294] vfs_read+0x1fd/0xa30 [ 726.701406][T32294] ? fdget_pos+0x247/0x320 [ 726.701423][T32294] ? __pfx___mutex_lock+0x10/0x10 [ 726.701446][T32294] ? __pfx_vfs_read+0x10/0x10 [ 726.701469][T32294] ? __fget_files+0x3a0/0x420 [ 726.701483][T32294] ? __fget_files+0x2a/0x420 [ 726.701501][T32294] ksys_read+0x145/0x250 [ 726.701523][T32294] ? __pfx_ksys_read+0x10/0x10 [ 726.701540][T32294] ? rcu_is_watching+0x15/0xb0 [ 726.701557][T32294] ? rcu_is_watching+0x15/0xb0 [ 726.701575][T32294] do_syscall_64+0xfa/0x3b0 [ 726.701590][T32294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.701606][T32294] ? clear_bhb_loop+0x60/0xb0 [ 726.701624][T32294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.701640][T32294] RIP: 0033:0x7f180018d5fc [ 726.701655][T32294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 726.701671][T32294] RSP: 002b:00007f1800fef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 726.701690][T32294] RAX: ffffffffffffffda RBX: 00007f18003b5fa0 RCX: 00007f180018d5fc [ 726.701702][T32294] RDX: 000000000000000f RSI: 00007f1800fef0a0 RDI: 0000000000000004 [ 726.701714][T32294] RBP: 00007f1800fef090 R08: 0000000000000000 R09: 0000000000000000 [ 726.701725][T32294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 726.701737][T32294] R13: 00007f18003b6038 R14: 00007f18003b5fa0 R15: 00007ffeffb516f8 [ 726.701757][T32294] [ 727.107951][T32309] erspan0: entered promiscuous mode [ 727.114749][T32309] erspan0: left promiscuous mode [ 727.265772][T32309] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8109'. [ 727.541921][T32333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8115'. [ 727.591447][T32323] lo speed is unknown, defaulting to 1000 [ 727.609521][T32323] wg1 speed is unknown, defaulting to 1000 [ 727.618554][T32335] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8115'. [ 727.634388][T32335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8115'. [ 727.644686][T32323] wg1 speed is unknown, defaulting to 1000 [ 727.663418][T32335] validate_nla: 2 callbacks suppressed [ 727.663437][T32335] netlink: 'syz.7.8115': attribute type 1 has an invalid length. [ 727.686462][T32341] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.778535][T32341] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.915820][T32341] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.984625][T32341] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.098104][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.117647][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.194619][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.230880][T32364] tipc: Enabled bearer , priority 0 [ 728.254019][T32372] syzkaller0: entered promiscuous mode [ 728.273314][T32372] syzkaller0: entered allmulticast mode [ 728.280049][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.326839][T32364] tipc: Resetting bearer [ 728.353313][T32363] tipc: Resetting bearer [ 728.366191][T32363] tipc: Disabling bearer [ 728.430102][T32383] netlink: 'syz.0.8129': attribute type 3 has an invalid length. [ 728.480264][T32383] mac80211_hwsim hwsim92 wlan1: entered promiscuous mode [ 728.487663][T32383] macsec1: entered promiscuous mode [ 728.509931][T32386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8130'. [ 728.509997][T32387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8130'. [ 729.006203][T32416] lo speed is unknown, defaulting to 1000 [ 729.013453][T32416] wg1 speed is unknown, defaulting to 1000 [ 729.019837][T32416] wg1 speed is unknown, defaulting to 1000 [ 729.076919][T32426] FAULT_INJECTION: forcing a failure. [ 729.076919][T32426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.085143][T32422] lo speed is unknown, defaulting to 1000 [ 729.093756][T32426] CPU: 1 UID: 0 PID: 32426 Comm: syz.8.8144 Not tainted syzkaller #0 PREEMPT(full) [ 729.093789][T32426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 729.093800][T32426] Call Trace: [ 729.093808][T32426] [ 729.093816][T32426] dump_stack_lvl+0x189/0x250 [ 729.093841][T32426] ? __pfx____ratelimit+0x10/0x10 [ 729.093867][T32426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.093886][T32426] ? __pfx__printk+0x10/0x10 [ 729.093906][T32426] ? __might_fault+0xb0/0x130 [ 729.093932][T32426] ? rcu_is_watching+0x15/0xb0 [ 729.093951][T32426] should_fail_ex+0x414/0x560 [ 729.093975][T32426] _copy_from_user+0x2d/0xb0 [ 729.093994][T32426] ___sys_recvmsg+0x12e/0x510 [ 729.094017][T32426] ? __pfx____sys_recvmsg+0x10/0x10 [ 729.094038][T32426] ? __fget_files+0x2a/0x420 [ 729.094060][T32426] ? rcu_is_watching+0x15/0xb0 [ 729.094077][T32426] ? lock_release+0x4b/0x3e0 [ 729.094100][T32426] ? __might_fault+0xcc/0x130 [ 729.094122][T32426] do_recvmmsg+0x307/0x770 [ 729.094145][T32426] ? __pfx_do_recvmmsg+0x10/0x10 [ 729.094168][T32426] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 729.094200][T32426] __x64_sys_recvmmsg+0x190/0x240 [ 729.094220][T32426] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 729.094238][T32426] ? rcu_is_watching+0x15/0xb0 [ 729.094256][T32426] ? rcu_is_watching+0x15/0xb0 [ 729.094274][T32426] do_syscall_64+0xfa/0x3b0 [ 729.094290][T32426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.094307][T32426] ? clear_bhb_loop+0x60/0xb0 [ 729.094327][T32426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.094345][T32426] RIP: 0033:0x7f813ab8ebe9 [ 729.094361][T32426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.094383][T32426] RSP: 002b:00007f813b9ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 729.094404][T32426] RAX: ffffffffffffffda RBX: 00007f813adb5fa0 RCX: 00007f813ab8ebe9 [ 729.094417][T32426] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 729.094429][T32426] RBP: 00007f813b9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 729.094441][T32426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.094452][T32426] R13: 00007f813adb6038 R14: 00007f813adb5fa0 R15: 00007ffc5fdea728 [ 729.094471][T32426] [ 729.211337][T32431] tipc: Resetting bearer [ 729.213430][T32425] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8143'. [ 729.236478][T32431] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 729.411376][T32422] wg1 speed is unknown, defaulting to 1000 [ 729.418480][T32422] wg1 speed is unknown, defaulting to 1000 [ 729.485620][T32441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8148'. [ 729.668654][T32430] netlink: 'syz.8.8145': attribute type 21 has an invalid length. [ 730.342947][T32492] mac80211_hwsim hwsim74 wlan1: entered allmulticast mode [ 730.357449][T32492] syzkaller0: entered promiscuous mode [ 730.375448][T32492] syzkaller0: entered allmulticast mode [ 730.416802][T32497] netlink: 'syz.7.8166': attribute type 13 has an invalid length. [ 730.425978][T32497] netlink: 'syz.7.8166': attribute type 17 has an invalid length. [ 730.447201][T32497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 730.502386][T32497] lo speed is unknown, defaulting to 1000 [ 730.509147][T32497] wg1 speed is unknown, defaulting to 1000 [ 730.517389][T32497] wg1 speed is unknown, defaulting to 1000 [ 730.950684][ T30] audit: type=1800 audit(1756352123.593:11): pid=32542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8179" name="memory.events" dev="tmpfs" ino=207 res=0 errno=0 [ 731.137886][T32550] netlink: 'syz.4.8184': attribute type 66 has an invalid length. [ 731.418871][T27103] hid-generic 0005:16BF:00C0.0005: unknown main item tag 0x0 [ 731.429230][T27103] hid-generic 0005:16BF:00C0.0005: unknown main item tag 0x0 [ 731.438077][T27103] hid-generic 0005:16BF:00C0.0005: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 731.607672][T32584] netlink: 'syz.7.8196': attribute type 13 has an invalid length. [ 731.631852][T32584] netlink: 'syz.7.8196': attribute type 17 has an invalid length. [ 731.641913][T32582] netlink: 'syz.0.8195': attribute type 2 has an invalid length. [ 731.666945][T32584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.767386][T32596] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 731.782082][T32596] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 731.801983][T32591] lo speed is unknown, defaulting to 1000 [ 731.810176][T32591] wg1 speed is unknown, defaulting to 1000 [ 731.835488][T32591] wg1 speed is unknown, defaulting to 1000 [ 731.856581][T32601] __nla_validate_parse: 11 callbacks suppressed [ 731.856601][T32601] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8203'. [ 731.863775][T32598] lo speed is unknown, defaulting to 1000 [ 731.892540][T32598] wg1 speed is unknown, defaulting to 1000 [ 731.907559][T32598] wg1 speed is unknown, defaulting to 1000 [ 731.934248][T32605] openvswitch: netlink: Message has 16 unknown bytes. [ 731.979839][T32614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8206'. [ 732.014610][ T9] hid-generic 0005:16BF:00C0.0006: unknown main item tag 0x0 [ 732.023613][ T9] hid-generic 0005:16BF:00C0.0006: unknown main item tag 0x0 [ 732.032160][ T9] hid-generic 0005:16BF:00C0.0006: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 732.040385][T32618] nbd: couldn't find a device at index 4 [ 732.106756][T32614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8206'. [ 732.159728][T32631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8209'. [ 732.166601][T32629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.406046][T32646] team0 (unregistering): Port device team_slave_0 removed [ 732.423537][T32646] team0 (unregistering): Port device team_slave_1 removed [ 732.457541][T32649] bond1 (unregistering): Released all slaves [ 732.484164][T32657] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8216'. [ 732.551487][T32656] sctp: [Deprecated]: syz.4.8218 (pid 32656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.551487][T32656] Use struct sctp_sack_info instead [ 732.599829][T32656] sctp: [Deprecated]: syz.4.8218 (pid 32656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.599829][T32656] Use struct sctp_sack_info instead [ 732.692935][ T9] hid-generic 0005:16BF:00C0.0007: unknown main item tag 0x0 [ 732.700387][ T9] hid-generic 0005:16BF:00C0.0007: unknown main item tag 0x0 [ 732.712070][ T9] hid-generic 0005:16BF:00C0.0007: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 732.712895][T32670] syz.8.8222: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 732.781237][T32670] CPU: 1 UID: 0 PID: 32670 Comm: syz.8.8222 Not tainted syzkaller #0 PREEMPT(full) [ 732.781269][T32670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.781282][T32670] Call Trace: [ 732.781290][T32670] [ 732.781299][T32670] dump_stack_lvl+0x189/0x250 [ 732.781328][T32670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.781350][T32670] ? __pfx__printk+0x10/0x10 [ 732.781382][T32670] ? lock_release+0x4b/0x3e0 [ 732.781409][T32670] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 732.781432][T32670] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 732.781455][T32670] warn_alloc+0x214/0x310 [ 732.781482][T32670] ? stack_depot_save_flags+0x40/0x860 [ 732.781508][T32670] ? __pfx_warn_alloc+0x10/0x10 [ 732.781533][T32670] ? kasan_save_track+0x4f/0x80 [ 732.781556][T32670] ? xskq_create+0x56/0x170 [ 732.781579][T32670] ? xsk_init_queue+0xb0/0x110 [ 732.781600][T32670] ? xsk_setsockopt+0x4dc/0x8d0 [ 732.781621][T32670] ? do_sock_setsockopt+0x17c/0x1b0 [ 732.781640][T32670] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 732.781657][T32670] ? do_syscall_64+0xfa/0x3b0 [ 732.781673][T32670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.781695][T32670] __vmalloc_node_range_noprof+0x125/0x12f0 [ 732.781734][T32670] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 732.781759][T32670] ? xsk_setsockopt+0x462/0x8d0 [ 732.781782][T32670] ? __kasan_kmalloc+0x93/0xb0 [ 732.781806][T32670] vmalloc_user_noprof+0xad/0xf0 [ 732.781830][T32670] ? xskq_create+0xbf/0x170 [ 732.781852][T32670] xskq_create+0xbf/0x170 [ 732.781875][T32670] xsk_init_queue+0xb0/0x110 [ 732.781897][T32670] xsk_setsockopt+0x4dc/0x8d0 [ 732.781922][T32670] ? __pfx_xsk_setsockopt+0x10/0x10 [ 732.781944][T32670] ? __pfx_aa_sk_perm+0x10/0x10 [ 732.781967][T32670] ? lock_release+0x4b/0x3e0 [ 732.781989][T32670] ? aa_sock_opt_perm+0xff/0x1b0 [ 732.782006][T32670] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 732.782023][T32670] ? __pfx_xsk_setsockopt+0x10/0x10 [ 732.782043][T32670] do_sock_setsockopt+0x17c/0x1b0 [ 732.782063][T32670] __x64_sys_setsockopt+0x13f/0x1b0 [ 732.782083][T32670] do_syscall_64+0xfa/0x3b0 [ 732.782100][T32670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.782117][T32670] ? clear_bhb_loop+0x60/0xb0 [ 732.782137][T32670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.782155][T32670] RIP: 0033:0x7f813ab8ebe9 [ 732.782172][T32670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.782189][T32670] RSP: 002b:00007f813b9ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 732.782211][T32670] RAX: ffffffffffffffda RBX: 00007f813adb5fa0 RCX: 00007f813ab8ebe9 [ 732.782225][T32670] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 732.782238][T32670] RBP: 00007f813ac11e19 R08: 0000000000000004 R09: 0000000000000000 [ 732.782250][T32670] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.782262][T32670] R13: 00007f813adb6038 R14: 00007f813adb5fa0 R15: 00007ffc5fdea728 [ 732.782282][T32670] [ 732.782291][T32670] Mem-Info: [ 732.851024][T32681] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8222'. [ 732.862128][T32683] netlink: 'syz.0.8224': attribute type 13 has an invalid length. [ 733.011857][T32670] active_anon:8373 inactive_anon:0 isolated_anon:0 [ 733.011857][T32670] active_file:4151 inactive_file:40118 isolated_file:0 [ 733.011857][T32670] unevictable:768 dirty:370 writeback:0 [ 733.011857][T32670] slab_reclaimable:13448 slab_unreclaimable:270842 [ 733.011857][T32670] mapped:31028 shmem:1381 pagetables:1294 [ 733.011857][T32670] sec_pagetables:0 bounce:0 [ 733.011857][T32670] kernel_misc_reclaimable:0 [ 733.011857][T32670] free:1134864 free_pcp:25861 free_cma:0 [ 733.083605][T32684] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8223'. [ 733.092815][T32670] Node 0 active_anon:33540kB inactive_anon:0kB active_file:16604kB inactive_file:160272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124020kB dirty:1488kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14392kB pagetables:5052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 733.103529][T32683] netlink: 'syz.0.8224': attribute type 17 has an invalid length. [ 733.149631][T32670] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 733.240863][T32670] Node 0 [ 733.243834][T32670] DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 733.243981][T32683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.284162][T32670] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 733.294663][T32670] Node 0 DMA32 free:693228kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33396kB inactive_anon:0kB active_file:16604kB inactive_file:158708kB unevictable:1536kB writepending:1504kB present:3129332kB managed:2557444kB mlocked:0kB bounce:0kB free_pcp:85712kB local_pcp:24664kB free_cma:0kB [ 733.390290][T32690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8224'. [ 733.400385][T32670] lowmem_reserve[]: 0 0 1 1 1 [ 733.405381][T32670] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 733.437506][T32670] lowmem_reserve[]: 0 0 0 0 0 [ 733.450735][T32670] Node 1 Normal free:3834936kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10688kB local_pcp:0kB free_cma:0kB [ 733.483014][T32670] lowmem_reserve[]: 0 0 0 0 0 [ 733.487932][T32670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 733.501124][T32670] Node 0 DMA32: 435*4kB (UME) 536*8kB (UME) 304*16kB (UME) 203*32kB (UME) 256*64kB (UME) 440*128kB (UME) 508*256kB (UME) 264*512kB (UME) 156*1024kB (UME) 3*2048kB (M) 42*4096kB (UM) = 693228kB [ 733.521379][T32670] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 733.533798][T32670] Node 1 Normal: 196*4kB (UME) 47*8kB (UME) 51*16kB (UME) 214*32kB (UME) 67*64kB (UME) 10*128kB (UME) 6*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 3*2048kB (UE) 930*4096kB (UM) = 3834936kB [ 733.552542][T32670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.562445][T32670] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 733.572147][T32670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.580758][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 733.583840][T32670] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 733.597565][T32670] 45647 total pagecache pages [ 733.602437][T32670] 0 pages in swap cache [ 733.606611][T32670] Free swap = 124996kB [ 733.611179][T32670] Total swap = 124996kB [ 733.615362][T32670] 2097051 pages RAM [ 733.619271][T32670] 0 pages HighMem/MovableOnly [ 733.624342][T32670] 425664 pages reserved [ 733.628789][T32670] 0 pages cma reserved [ 733.684351][T32676] lo speed is unknown, defaulting to 1000 [ 733.702349][T32676] wg1 speed is unknown, defaulting to 1000 [ 733.709071][T32676] wg1 speed is unknown, defaulting to 1000 [ 733.776526][T32699] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8229'. [ 733.806333][T32695] lo speed is unknown, defaulting to 1000 [ 733.825611][T32702] netlink: 'syz.4.8230': attribute type 13 has an invalid length. [ 733.827376][T32695] wg1 speed is unknown, defaulting to 1000 [ 733.840348][T32702] netlink: 'syz.4.8230': attribute type 17 has an invalid length. [ 733.852975][T32695] wg1 speed is unknown, defaulting to 1000 [ 733.869874][T32702] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.879790][T32702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.911451][T32707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8231'. [ 733.942610][T32702] lo speed is unknown, defaulting to 1000 [ 733.949641][T32702] wg1 speed is unknown, defaulting to 1000 [ 733.956563][T32702] wg1 speed is unknown, defaulting to 1000 [ 734.397431][T32741] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 734.407155][T32741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 734.533786][T32749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.589064][T32751] IPVS: set_ctl: invalid protocol: 4 172.20.20.66:20003 [ 734.758408][T32764] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.836704][T32764] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.911440][T32764] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.987773][T32764] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.061406][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.076308][T11973] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.087559][T11973] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.105381][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.120296][ T324] lo speed is unknown, defaulting to 1000 [ 735.130288][ T324] wg1 speed is unknown, defaulting to 1000 [ 735.137246][ T324] wg1 speed is unknown, defaulting to 1000 [ 735.392423][ T346] lo speed is unknown, defaulting to 1000 [ 735.408474][ T346] wg1 speed is unknown, defaulting to 1000 [ 735.416631][ T350] netlink: 'syz.4.8269': attribute type 10 has an invalid length. [ 735.429225][ T350] veth0_macvtap: left promiscuous mode [ 735.439326][ T350] team0: Device veth0_macvtap failed to register rx_handler [ 735.460282][ T346] wg1 speed is unknown, defaulting to 1000 [ 736.072221][ T7134] hid-generic 0005:16BF:00C0.0008: unknown main item tag 0x0 [ 736.079839][ T7134] hid-generic 0005:16BF:00C0.0008: unknown main item tag 0x0 [ 736.089712][ T7134] hid-generic 0005:16BF:00C0.0008: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 736.151369][ T390] netlink: 'syz.0.8279': attribute type 1 has an invalid length. [ 736.172721][ T388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.183586][ T398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.194179][ T405] block nbd8: not configured, cannot reconfigure [ 736.234968][ T400] veth3: entered promiscuous mode [ 736.375019][ T419] netlink: 'syz.0.8286': attribute type 21 has an invalid length. [ 736.498270][ T7134] hid-generic 0005:16BF:00C0.0009: unknown main item tag 0x0 [ 736.506308][ T7134] hid-generic 0005:16BF:00C0.0009: unknown main item tag 0x0 [ 736.519661][ T7134] hid-generic 0005:16BF:00C0.0009: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 736.598277][ T445] lo speed is unknown, defaulting to 1000 [ 736.652386][ T445] wg1 speed is unknown, defaulting to 1000 [ 736.679397][ T445] wg1 speed is unknown, defaulting to 1000 [ 736.818121][ T461] tipc: Enabled bearer , priority 0 [ 736.845984][ T461] syzkaller0: entered promiscuous mode [ 736.854689][ T461] syzkaller0: entered allmulticast mode [ 736.868565][ T461] tipc: Resetting bearer [ 736.934106][ T459] tipc: Resetting bearer [ 736.947110][ T459] tipc: Disabling bearer [ 737.069110][ T481] lo speed is unknown, defaulting to 1000 [ 737.075885][ T481] wg1 speed is unknown, defaulting to 1000 [ 737.084367][ T481] wg1 speed is unknown, defaulting to 1000 [ 737.098821][ T486] netlink: 'syz.4.8305': attribute type 5 has an invalid length. [ 737.109613][ T9] hid-generic 0005:16BF:00C0.000A: unknown main item tag 0x0 [ 737.133384][ T9] hid-generic 0005:16BF:00C0.000A: unknown main item tag 0x0 [ 737.143645][T27103] IPVS: starting estimator thread 0... [ 737.150320][ T9] hid-generic 0005:16BF:00C0.000A: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 737.208227][ T481] __nla_validate_parse: 3 callbacks suppressed [ 737.208248][ T481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8305'. [ 737.232849][ T490] IPVS: using max 76 ests per chain, 182400 per kthread [ 737.336657][ T502] netlink: 'syz.7.8311': attribute type 2 has an invalid length. [ 737.345091][ T502] netlink: 116 bytes leftover after parsing attributes in process `syz.7.8311'. [ 737.357591][ T504] netlink: 'syz.4.8312': attribute type 282 has an invalid length. [ 737.403987][ T507] ipvlan2: entered promiscuous mode [ 737.653543][ T529] bpq0: entered promiscuous mode [ 737.939629][ T548] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8327'. [ 737.961532][ T548] validate_nla: 2 callbacks suppressed [ 737.961554][ T548] netlink: 'syz.8.8327': attribute type 1 has an invalid length. [ 737.990141][ T550] netlink: 'syz.5.8328': attribute type 6 has an invalid length. [ 738.066253][ T550] netlink: 'syz.5.8328': attribute type 12 has an invalid length. [ 738.074311][ T550] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.8328'. [ 738.160916][ T559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8331'. [ 738.304865][ T568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8334'. [ 738.557918][ T583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8338'. [ 739.076310][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8346'. [ 739.380636][ T621] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8351'. [ 739.409689][ T630] netlink: 'syz.4.8353': attribute type 23 has an invalid length. [ 739.496902][ T635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8355'. [ 739.510681][ T635] netlink: 'syz.5.8355': attribute type 1 has an invalid length. [ 739.518962][ T635] netlink: 'syz.5.8355': attribute type 1 has an invalid length. [ 739.591228][ T635] netlink: 'syz.5.8355': attribute type 7 has an invalid length. [ 739.678769][ T638] FAULT_INJECTION: forcing a failure. [ 739.678769][ T638] name failslab, interval 1, probability 0, space 0, times 0 [ 739.697538][ T638] CPU: 1 UID: 0 PID: 638 Comm: syz.5.8356 Not tainted syzkaller #0 PREEMPT(full) [ 739.697564][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.697574][ T638] Call Trace: [ 739.697582][ T638] [ 739.697590][ T638] dump_stack_lvl+0x189/0x250 [ 739.697615][ T638] ? __pfx____ratelimit+0x10/0x10 [ 739.697639][ T638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.697671][ T638] ? __pfx__printk+0x10/0x10 [ 739.697695][ T638] ? __pfx___might_resched+0x10/0x10 [ 739.697712][ T638] ? lock_acquire+0x5f/0x360 [ 739.697737][ T638] should_fail_ex+0x414/0x560 [ 739.697761][ T638] should_failslab+0xa8/0x100 [ 739.697785][ T638] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 739.697808][ T638] ? __alloc_skb+0x112/0x2d0 [ 739.697826][ T638] __alloc_skb+0x112/0x2d0 [ 739.697844][ T638] alloc_skb_with_frags+0xca/0x890 [ 739.697863][ T638] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 739.697891][ T638] sock_alloc_send_pskb+0x857/0x990 [ 739.697919][ T638] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 739.697940][ T638] ? mntput_no_expire+0xb9/0x9d0 [ 739.697960][ T638] ? rcu_is_watching+0x15/0xb0 [ 739.697980][ T638] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 739.698002][ T638] unix_dgram_sendmsg+0x461/0x1850 [ 739.698027][ T638] ? unwind_next_frame+0xa5/0x2390 [ 739.698052][ T638] ? lock_release+0x4b/0x3e0 [ 739.698073][ T638] ? lock_release+0x4b/0x3e0 [ 739.698096][ T638] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 739.698117][ T638] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 739.698141][ T638] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 739.698167][ T638] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 739.698192][ T638] __sock_sendmsg+0x219/0x270 [ 739.698215][ T638] ____sys_sendmsg+0x505/0x830 [ 739.698236][ T638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.698258][ T638] ? import_iovec+0x74/0xa0 [ 739.698279][ T638] ___sys_sendmsg+0x21f/0x2a0 [ 739.698298][ T638] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.698332][ T638] ? __fget_files+0x2a/0x420 [ 739.698347][ T638] ? __fget_files+0x3a0/0x420 [ 739.698367][ T638] __x64_sys_sendmsg+0x19b/0x260 [ 739.698386][ T638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.698409][ T638] ? __pfx_ksys_write+0x10/0x10 [ 739.698429][ T638] ? rcu_is_watching+0x15/0xb0 [ 739.698473][ T638] ? rcu_is_watching+0x15/0xb0 [ 739.698491][ T638] do_syscall_64+0xfa/0x3b0 [ 739.698508][ T638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.698526][ T638] ? clear_bhb_loop+0x60/0xb0 [ 739.698545][ T638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.698562][ T638] RIP: 0033:0x7f4b44b8ebe9 [ 739.698578][ T638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.698594][ T638] RSP: 002b:00007f4b45a73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.698615][ T638] RAX: ffffffffffffffda RBX: 00007f4b44db5fa0 RCX: 00007f4b44b8ebe9 [ 739.698629][ T638] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 739.698641][ T638] RBP: 00007f4b45a73090 R08: 0000000000000000 R09: 0000000000000000 [ 739.698652][ T638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.698669][ T638] R13: 00007f4b44db6038 R14: 00007f4b44db5fa0 R15: 00007ffe82f0b038 [ 739.698689][ T638] [ 740.772051][ T652] nbd7: detected capacity change from 0 to 127 [ 740.790583][ T5183] block nbd7: Receive control failed (result -32) [ 740.797906][ T5873] block nbd7: Receive control failed (result -32) [ 741.079234][ T685] nbd: couldn't find a device at index 4 [ 741.282979][ T694] lo speed is unknown, defaulting to 1000 [ 741.296701][ T694] wg1 speed is unknown, defaulting to 1000 [ 741.315367][ T694] wg1 speed is unknown, defaulting to 1000 [ 741.462756][ T704] FAULT_INJECTION: forcing a failure. [ 741.462756][ T704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.482832][ T565] Set syz1 is full, maxelem 65536 reached [ 741.511430][ T704] CPU: 1 UID: 0 PID: 704 Comm: syz.5.8377 Not tainted syzkaller #0 PREEMPT(full) [ 741.511457][ T704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.511468][ T704] Call Trace: [ 741.511475][ T704] [ 741.511482][ T704] dump_stack_lvl+0x189/0x250 [ 741.511506][ T704] ? __pfx____ratelimit+0x10/0x10 [ 741.511528][ T704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.511545][ T704] ? __pfx__printk+0x10/0x10 [ 741.511571][ T704] ? __might_fault+0xb0/0x130 [ 741.511594][ T704] ? vfs_write+0x956/0xb30 [ 741.511616][ T704] ? rcu_is_watching+0x15/0xb0 [ 741.511633][ T704] should_fail_ex+0x414/0x560 [ 741.511657][ T704] _copy_from_user+0x2d/0xb0 [ 741.511676][ T704] __sys_connect+0x123/0x440 [ 741.511700][ T704] ? __pfx___sys_connect+0x10/0x10 [ 741.511727][ T704] ? __pfx_ksys_write+0x10/0x10 [ 741.511746][ T704] ? rcu_is_watching+0x15/0xb0 [ 741.511765][ T704] __x64_sys_connect+0x7a/0x90 [ 741.511789][ T704] do_syscall_64+0xfa/0x3b0 [ 741.511806][ T704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.511823][ T704] ? clear_bhb_loop+0x60/0xb0 [ 741.511839][ T704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.511852][ T704] RIP: 0033:0x7f4b44b8ebe9 [ 741.511866][ T704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.511878][ T704] RSP: 002b:00007f4b45a73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 741.511894][ T704] RAX: ffffffffffffffda RBX: 00007f4b44db5fa0 RCX: 00007f4b44b8ebe9 [ 741.511904][ T704] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000003 [ 741.511913][ T704] RBP: 00007f4b45a73090 R08: 0000000000000000 R09: 0000000000000000 [ 741.511921][ T704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.511929][ T704] R13: 00007f4b44db6038 R14: 00007f4b44db5fa0 R15: 00007ffe82f0b038 [ 741.511944][ T704] [ 742.300815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.352155][ T767] __nla_validate_parse: 8 callbacks suppressed [ 742.352173][ T767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8395'. [ 742.396947][ T769] gretap0: entered promiscuous mode [ 742.407830][ T769] gretap0: left promiscuous mode [ 742.565013][ T781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8401'. [ 742.579639][ T781] batman_adv: batadv0: Adding interface: ipvlan2 [ 742.588791][ T781] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.617085][ T781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.628113][ T781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.638865][ T781] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 742.824835][ T800] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 742.940835][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8409'. [ 743.033341][ T811] FAULT_INJECTION: forcing a failure. [ 743.033341][ T811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.065443][ T811] CPU: 0 UID: 0 PID: 811 Comm: syz.8.8413 Not tainted syzkaller #0 PREEMPT(full) [ 743.065471][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.065484][ T811] Call Trace: [ 743.065491][ T811] [ 743.065500][ T811] dump_stack_lvl+0x189/0x250 [ 743.065526][ T811] ? __pfx____ratelimit+0x10/0x10 [ 743.065550][ T811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.065570][ T811] ? __pfx__printk+0x10/0x10 [ 743.065590][ T811] ? __might_fault+0xb0/0x130 [ 743.065617][ T811] ? rcu_is_watching+0x15/0xb0 [ 743.065636][ T811] should_fail_ex+0x414/0x560 [ 743.065661][ T811] _copy_from_user+0x2d/0xb0 [ 743.065680][ T811] kstrtouint_from_user+0xc4/0x170 [ 743.065705][ T811] ? __might_fault+0xb0/0x130 [ 743.065727][ T811] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 743.065756][ T811] ? vfs_write+0x211/0xb30 [ 743.065777][ T811] ? rcu_is_watching+0x15/0xb0 [ 743.065796][ T811] proc_fail_nth_write+0x88/0x200 [ 743.065815][ T811] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 743.065834][ T811] ? security_file_permission+0x75/0x290 [ 743.065857][ T811] ? preempt_count_add+0x91/0x1a0 [ 743.065882][ T811] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 743.065902][ T811] vfs_write+0x27e/0xb30 [ 743.065927][ T811] ? __pfx_vfs_write+0x10/0x10 [ 743.065953][ T811] ? __fget_files+0x3a0/0x420 [ 743.065968][ T811] ? __fget_files+0x2a/0x420 [ 743.065987][ T811] ksys_write+0x145/0x250 [ 743.066010][ T811] ? __pfx_ksys_write+0x10/0x10 [ 743.066033][ T811] ? rcu_is_watching+0x15/0xb0 [ 743.066052][ T811] do_syscall_64+0xfa/0x3b0 [ 743.066068][ T811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.066087][ T811] ? clear_bhb_loop+0x60/0xb0 [ 743.066106][ T811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.066124][ T811] RIP: 0033:0x7f813ab8d69f [ 743.066141][ T811] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 743.066157][ T811] RSP: 002b:00007f813b9ac030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 743.066177][ T811] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f813ab8d69f [ 743.066190][ T811] RDX: 0000000000000001 RSI: 00007f813b9ac0a0 RDI: 0000000000000005 [ 743.066202][ T811] RBP: 00007f813b9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 743.066214][ T811] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 743.066224][ T811] R13: 00007f813adb6038 R14: 00007f813adb5fa0 R15: 00007ffc5fdea728 [ 743.066245][ T811] [ 743.568275][ T831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8420'. [ 743.611463][ T841] netlink: 'syz.5.8417': attribute type 15 has an invalid length. [ 743.621134][ T841] netlink: 'syz.5.8417': attribute type 9 has an invalid length. [ 743.629084][ T841] netlink: 184 bytes leftover after parsing attributes in process `syz.5.8417'. [ 743.670300][ T845] netlink: 'syz.4.8423': attribute type 15 has an invalid length. [ 743.678519][ T845] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8423'. [ 744.058770][ T868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8429'. [ 744.070529][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 744.534988][ T882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8432'. [ 744.844073][ T892] sctp: [Deprecated]: syz.8.8438 (pid 892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.844073][ T892] Use struct sctp_sack_info instead [ 744.931484][ T898] batman_adv: batadv0: Adding interface: ip6gretap1 [ 744.948107][ T898] batman_adv: batadv0: Interface activated: ip6gretap1 [ 744.965603][ T894] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8440'. [ 746.187474][ T952] netlink: 'syz.5.8454': attribute type 1 has an invalid length. [ 746.197052][ T952] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8454'. [ 746.471366][ T844] Set syz1 is full, maxelem 65536 reached [ 746.869675][ T994] Â: renamed from pim6reg1 [ 747.535775][ T1022] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 747.587391][ T1024] lo speed is unknown, defaulting to 1000 [ 747.596499][ T1024] wg1 speed is unknown, defaulting to 1000 [ 747.615149][ T1024] wg1 speed is unknown, defaulting to 1000 [ 747.807306][ T1039] netlink: 'syz.4.8475': attribute type 4 has an invalid length. [ 747.958690][ T1045] __nla_validate_parse: 1 callbacks suppressed [ 747.958710][ T1045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8477'. [ 748.063552][ T1050] nbd: couldn't find a device at index 5 [ 748.317141][ T1065] netlink: 'syz.5.8481': attribute type 6 has an invalid length. [ 748.353484][ T1064] netlink: 'syz.4.8480': attribute type 1 has an invalid length. [ 748.393213][ T1064] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 748.575761][ T1065] bond3: entered promiscuous mode [ 748.810039][ T1090] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8488'. [ 748.844941][ T1090] netlink: 'syz.7.8488': attribute type 1 has an invalid length. [ 748.878967][ T1090] netlink: 232 bytes leftover after parsing attributes in process `syz.7.8488'. [ 748.983298][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8488'. [ 749.067318][ T1109] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8496'. [ 749.077965][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8496'. [ 749.092214][ T1109] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8496'. [ 749.215680][ T1122] netlink: 'syz.5.8501': attribute type 3 has an invalid length. [ 749.370237][ T1142] nbd: couldn't find a device at index 4 [ 749.526370][ T1157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8514'. [ 749.545584][ T1157] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 749.567959][ T1159] tipc: Enabled bearer , priority 0 [ 749.636980][ T1164] netlink: 'syz.8.8516': attribute type 13 has an invalid length. [ 749.654119][ T1164] netlink: 'syz.8.8516': attribute type 17 has an invalid length. [ 749.681673][ T1165] netlink: 'syz.5.8517': attribute type 13 has an invalid length. [ 749.694690][ T1164] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.695222][ T1165] netlink: 'syz.5.8517': attribute type 17 has an invalid length. [ 749.852351][ T1175] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8516'. [ 750.002201][ T1164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.054552][ T1165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.090319][ T1161] lo speed is unknown, defaulting to 1000 [ 750.126792][ T1161] wg1 speed is unknown, defaulting to 1000 [ 750.158171][ T1161] wg1 speed is unknown, defaulting to 1000 [ 750.187466][ T1168] lo speed is unknown, defaulting to 1000 [ 750.224282][ T1168] wg1 speed is unknown, defaulting to 1000 [ 750.233042][ T1168] wg1 speed is unknown, defaulting to 1000 [ 750.454508][ T1194] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.8525'. [ 750.596803][ T1206] lo speed is unknown, defaulting to 1000 [ 750.605750][ T1206] wg1 speed is unknown, defaulting to 1000 [ 750.613707][ T1206] wg1 speed is unknown, defaulting to 1000 [ 750.874418][ T1217] lo speed is unknown, defaulting to 1000 [ 750.891247][ T1217] wg1 speed is unknown, defaulting to 1000 [ 750.904022][ T1217] wg1 speed is unknown, defaulting to 1000 [ 751.170053][ T1240] netlink: 'syz.5.8540': attribute type 3 has an invalid length. [ 751.196679][ T1240] syz_tun: entered allmulticast mode [ 751.218263][ T1240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 751.267244][ T1238] syz_tun: left allmulticast mode [ 751.975564][ T1289] nbd: couldn't find a device at index 4 [ 751.983184][ T1291] netlink: 'syz.8.8554': attribute type 4 has an invalid length. [ 752.225967][ T1306] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.366784][ T1306] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.450581][ T1306] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.548574][ T1306] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.594921][ T1341] geneve1: mtu less than device minimum [ 752.713289][T11975] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.741388][T11975] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.783311][T11975] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.813666][T11975] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.906821][ T1345] lo speed is unknown, defaulting to 1000 [ 752.926510][ T1345] wg1 speed is unknown, defaulting to 1000 [ 752.996260][ T1362] __nla_validate_parse: 6 callbacks suppressed [ 752.996280][ T1362] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8581'. [ 753.017200][ T1365] tipc: Enabled bearer , priority 0 [ 753.025166][ T1345] wg1 speed is unknown, defaulting to 1000 [ 753.025807][ T1365] syzkaller0: entered promiscuous mode [ 753.036881][ T1365] syzkaller0: entered allmulticast mode [ 753.056627][ T1368] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8584'. [ 753.070689][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8584'. [ 753.087856][ T1365] tipc: Resetting bearer [ 753.099392][ T1364] tipc: Resetting bearer [ 753.115085][ T1364] tipc: Disabling bearer [ 753.408766][ T1394] tipc: Enabled bearer , priority 0 [ 753.417943][ T1394] syzkaller0: entered promiscuous mode [ 753.423541][ T1394] syzkaller0: entered allmulticast mode [ 753.436205][ T1394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8591'. [ 753.449637][ T1393] tipc: Resetting bearer [ 753.457683][ T1393] tipc: Disabling bearer [ 753.647394][ T1404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8594'. [ 753.656884][ C0] vcan0: j1939_session_tx_dat: 0xffff888050dbf000: queue data error: -100 [ 754.298550][ T1431] pim6reg9: entered allmulticast mode [ 754.445391][ T1449] netlink: 'syz.4.8610': attribute type 9 has an invalid length. [ 754.455726][ T1449] netlink: 212160 bytes leftover after parsing attributes in process `syz.4.8610'. [ 754.671439][ T1466] netlink: 'syz.4.8615': attribute type 6 has an invalid length. [ 754.687025][ T1466] xt_HMARK: proto mask must be zero with L3 mode [ 754.731633][ T1471] netlink: 'syz.4.8617': attribute type 3 has an invalid length. [ 754.745431][ T1471] siw: device registration error -23 [ 754.758863][ T1471] tipc: Resetting bearer [ 754.765149][ T1471] tipc: Resetting bearer [ 754.772805][ T1471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.893943][ T1481] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 754.935164][ T1483] openvswitch: netlink: IPv4 tun info is not correct [ 755.082151][ T1487] netlink: 'syz.4.8623': attribute type 13 has an invalid length. [ 755.090344][ T1487] netlink: 'syz.4.8623': attribute type 17 has an invalid length. [ 755.106791][ T1487] tipc: Resetting bearer [ 755.112708][ T1487] tipc: Resetting bearer [ 755.119461][ T1487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 755.177712][ T1486] lo speed is unknown, defaulting to 1000 [ 755.189907][ T1486] wg1 speed is unknown, defaulting to 1000 [ 755.197844][ T1486] wg1 speed is unknown, defaulting to 1000 [ 755.225243][ T1487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8623'. [ 755.323109][ T1492] lo speed is unknown, defaulting to 1000 [ 755.329319][ T1492] wg1 speed is unknown, defaulting to 1000 [ 755.336203][ T1492] wg1 speed is unknown, defaulting to 1000 [ 755.508916][ T1505] lo speed is unknown, defaulting to 1000 [ 755.516098][ T1505] wg1 speed is unknown, defaulting to 1000 [ 755.525650][ T1505] wg1 speed is unknown, defaulting to 1000 [ 755.551442][ T1507] netlink: 360 bytes leftover after parsing attributes in process `syz.8.8629'. [ 755.561709][ T1508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.618234][ T1507] lo speed is unknown, defaulting to 1000 [ 755.621084][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8631'. [ 755.630520][ T1507] wg1 speed is unknown, defaulting to 1000 [ 755.644240][ T1507] wg1 speed is unknown, defaulting to 1000 [ 755.876710][ T1535] syzkaller0: entered promiscuous mode [ 755.884425][ T1535] syzkaller0: entered allmulticast mode [ 755.926627][ T1535] tipc: Enabled bearer , priority 0 [ 755.936622][ T1538] FAULT_INJECTION: forcing a failure. [ 755.936622][ T1538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.950002][ T1538] CPU: 1 UID: 0 PID: 1538 Comm: syz.8.8640 Not tainted syzkaller #0 PREEMPT(full) [ 755.950028][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 755.950039][ T1538] Call Trace: [ 755.950046][ T1538] [ 755.950054][ T1538] dump_stack_lvl+0x189/0x250 [ 755.950080][ T1538] ? __pfx____ratelimit+0x10/0x10 [ 755.950104][ T1538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.950123][ T1538] ? __pfx__printk+0x10/0x10 [ 755.950143][ T1538] ? __might_fault+0xb0/0x130 [ 755.950170][ T1538] ? rcu_is_watching+0x15/0xb0 [ 755.950189][ T1538] should_fail_ex+0x414/0x560 [ 755.950213][ T1538] _copy_from_user+0x2d/0xb0 [ 755.950233][ T1538] ioctl_standard_iw_point+0x59d/0xd40 [ 755.950257][ T1538] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 755.950281][ T1538] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 755.950299][ T1538] ? __pfx___mutex_lock+0x10/0x10 [ 755.950326][ T1538] ? full_name_hash+0x92/0xe0 [ 755.950346][ T1538] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 755.950369][ T1538] ioctl_standard_call+0xaf/0x1b0 [ 755.950387][ T1538] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 755.950410][ T1538] wext_ioctl_dispatch+0xee/0x410 [ 755.950425][ T1538] ? __pfx_ioctl_standard_call+0x10/0x10 [ 755.950446][ T1538] wext_handle_ioctl+0x100/0x1c0 [ 755.950462][ T1538] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 755.950476][ T1538] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 755.950515][ T1538] sock_ioctl+0x15f/0x790 [ 755.950535][ T1538] ? lock_release+0x4b/0x3e0 [ 755.950558][ T1538] ? __pfx_sock_ioctl+0x10/0x10 [ 755.950577][ T1538] ? __fget_files+0x2a/0x420 [ 755.950592][ T1538] ? __fget_files+0x3a0/0x420 [ 755.950607][ T1538] ? __fget_files+0x2a/0x420 [ 755.950623][ T1538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 755.950643][ T1538] ? __pfx_sock_ioctl+0x10/0x10 [ 755.950662][ T1538] __se_sys_ioctl+0xf9/0x170 [ 755.950683][ T1538] do_syscall_64+0xfa/0x3b0 [ 755.950699][ T1538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.950717][ T1538] ? clear_bhb_loop+0x60/0xb0 [ 755.950736][ T1538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.950753][ T1538] RIP: 0033:0x7f813ab8ebe9 [ 755.950768][ T1538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.950784][ T1538] RSP: 002b:00007f813b9ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.950804][ T1538] RAX: ffffffffffffffda RBX: 00007f813adb5fa0 RCX: 00007f813ab8ebe9 [ 755.950818][ T1538] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 755.950830][ T1538] RBP: 00007f813b9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 755.950841][ T1538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.950852][ T1538] R13: 00007f813adb6038 R14: 00007f813adb5fa0 R15: 00007ffc5fdea728 [ 755.950873][ T1538] [ 756.228982][ T1535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 756.251105][ T1535] tipc: Resetting bearer [ 756.307970][ T1543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8642'. [ 756.506146][ T1555] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 756.514735][ T1555] openvswitch: netlink: Message has 1 unknown bytes. [ 756.603308][ T1560] bridge1: entered allmulticast mode [ 757.444515][ T1605] netlink: 'syz.4.8663': attribute type 1 has an invalid length. [ 757.468541][ T1605] netlink: 'syz.4.8663': attribute type 1 has an invalid length. [ 757.477055][ T1605] netlink: 'syz.4.8663': attribute type 3 has an invalid length. [ 757.485447][ T1605] netlink: 'syz.4.8663': attribute type 1 has an invalid length. [ 757.494965][ T1605] NCSI netlink: No device for ifindex 0 [ 757.512614][ T1607] mac80211_hwsim hwsim74 wlan1: left allmulticast mode [ 757.547512][ T1607] netlink: 'syz.5.8664': attribute type 10 has an invalid length. [ 757.570402][ T1607] mac80211_hwsim hwsim74 wlan1: entered promiscuous mode [ 757.585902][ T1607] mac80211_hwsim hwsim74 wlan1: entered allmulticast mode [ 757.596039][ T1607] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 757.702543][ T1624] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 758.111297][T27103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.303590][T27103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.312090][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 758.355179][ T1666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.365540][ T1670] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode [ 758.388245][ T1670] tipc: Resetting bearer [ 758.403376][ T1670] bond3: (slave veth5): Releasing active interface [ 758.416361][ T1670] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 758.424813][ T1670] batman_adv: batadv0: Removing interface: ip6gretap1 [ 758.454425][ T1666] bond1: (slave bridge2): making interface the new active one [ 758.466360][ T1666] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 758.497691][ T1677] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 758.525456][ T1670] mac80211_hwsim hwsim70 wlan1: left allmulticast mode [ 758.555840][ T1670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.570340][ T1670] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 758.855593][ T1702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.888033][ T1705] __nla_validate_parse: 11 callbacks suppressed [ 758.888053][ T1705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8692'. [ 758.911985][ T1705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8692'. [ 758.922576][ T1702] lo speed is unknown, defaulting to 1000 [ 758.929598][ T1702] wg1 speed is unknown, defaulting to 1000 [ 758.932493][ T1705] netlink: 1088 bytes leftover after parsing attributes in process `syz.0.8692'. [ 758.936686][ T1702] wg1 speed is unknown, defaulting to 1000 [ 758.953122][ T1705] openvswitch: netlink: Flow key attr not present in new flow. [ 758.971046][ T1707] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8690'. [ 759.354146][ T1718] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8695'. [ 759.379436][ T1718] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8695'. [ 759.568363][ T1733] macsec0: entered promiscuous mode [ 759.574541][ T1733] mac80211_hwsim hwsim98 wlan0: entered promiscuous mode [ 759.582419][ T1733] macsec0: entered allmulticast mode [ 759.587752][ T1733] mac80211_hwsim hwsim98 wlan0: entered allmulticast mode [ 759.615793][ T1733] validate_nla: 4 callbacks suppressed [ 759.615809][ T1733] netlink: 'syz.5.8699': attribute type 4 has an invalid length. [ 759.629326][ T1733] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8699'. [ 759.638686][ T1733] wlan1: mtu less than device minimum [ 759.811344][ T1746] netlink: 'syz.5.8704': attribute type 4 has an invalid length. [ 759.823105][ T1746] netlink: 'syz.5.8704': attribute type 4 has an invalid length. [ 759.864653][ T1750] lo speed is unknown, defaulting to 1000 [ 759.872324][ T1750] wg1 speed is unknown, defaulting to 1000 [ 759.878742][ T1750] wg1 speed is unknown, defaulting to 1000 [ 759.966363][ T1753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8706'. [ 760.046150][ T1756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8707'. [ 760.056389][ T1756] netlink: 'syz.0.8707': attribute type 10 has an invalid length. [ 760.188819][ T1763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8710'. [ 760.356868][ T1775] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 760.358824][ T1779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 760.370786][ T1775] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 760.457601][ T1787] vlan2: entered promiscuous mode [ 760.463695][ T1787] vlan2: entered allmulticast mode [ 760.468979][ T1787] hsr_slave_1: entered allmulticast mode [ 760.542225][ T1790] netlink: 'syz.0.8720': attribute type 13 has an invalid length. [ 760.550433][ T1790] netlink: 'syz.0.8720': attribute type 17 has an invalid length. [ 760.564650][ T1790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.609000][ T1790] lo speed is unknown, defaulting to 1000 [ 760.619558][ T1790] wg1 speed is unknown, defaulting to 1000 [ 760.627180][ T1790] wg1 speed is unknown, defaulting to 1000 [ 760.658629][ T1796] tipc: Resetting bearer [ 760.894515][ T1796] tipc: Resetting bearer [ 760.983681][ T1796] tipc: Resetting bearer [ 761.007809][T11975] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.033068][T11975] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.129818][ T4716] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.145893][ T4716] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.305233][ T1817] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 761.451487][ T1830] rdma_rxe: rxe_newlink: failed to add lo [ 762.022342][ T1870] nbd: couldn't find a device at index 4 [ 762.124721][ T1879] netlink: 'syz.4.8748': attribute type 3 has an invalid length. [ 762.135784][ T1877] lo speed is unknown, defaulting to 1000 [ 762.220102][ T1877] wg1 speed is unknown, defaulting to 1000 [ 762.274242][ T1877] wg1 speed is unknown, defaulting to 1000 [ 762.653725][ T1914] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 763.228196][ T1953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.322596][ T1960] macvlan2: entered allmulticast mode [ 763.331117][ T1960] veth1_vlan: entered allmulticast mode [ 763.338595][ T1960] veth1_vlan: left allmulticast mode [ 763.487925][ T1973] netlink: 'syz.0.8782': attribute type 39 has an invalid length. [ 763.507281][ T1973] veth0_macvtap: left promiscuous mode [ 764.063086][ T2029] pim6reg1: entered promiscuous mode [ 764.069209][ T2029] pim6reg1: entered allmulticast mode [ 764.075357][ T2032] netlink: 'syz.7.8798': attribute type 13 has an invalid length. [ 764.093461][ T2032] netlink: 'syz.7.8798': attribute type 17 has an invalid length. [ 764.145361][ T2032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 764.194632][ T2033] lo speed is unknown, defaulting to 1000 [ 764.204721][ T2037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.207310][ T2033] wg1 speed is unknown, defaulting to 1000 [ 764.225079][ T2035] __nla_validate_parse: 10 callbacks suppressed [ 764.225099][ T2035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8802'. [ 764.230364][ T2033] wg1 speed is unknown, defaulting to 1000 [ 764.259735][ T2032] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8798'. [ 764.336980][ T2046] bpq0: left promiscuous mode [ 764.361822][ T2049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8804'. [ 764.475595][ T2055] nbd: couldn't find a device at index 8 [ 764.536209][ T2059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8809'. [ 764.557047][ T2059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8809'. [ 764.568005][ T2059] bond0: option arp_all_targets: invalid value (196616) [ 764.725599][ T2069] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 764.732130][ T2069] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 764.868916][ T2087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8818'. [ 764.888985][ T2087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8818'. [ 764.898774][ T2087] validate_nla: 1 callbacks suppressed [ 764.898792][ T2087] netlink: 'syz.5.8818': attribute type 4 has an invalid length. [ 764.925545][ T2079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8815'. [ 764.946714][ T2079] nbd: must specify an index to disconnect [ 764.958114][ T2096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8819'. [ 765.016924][ T2098] nbd: couldn't find a device at index 5 [ 765.190156][ T2110] netlink: 146780 bytes leftover after parsing attributes in process `syz.8.8822'. [ 765.953845][ T2145] netlink: 'syz.5.8833': attribute type 1 has an invalid length. [ 766.006797][ T2151] siw: device registration error -23 [ 766.022848][ T5873] block nbd9: Receive control failed (result -107) [ 766.062361][ T2145] nbd9: detected capacity change from 0 to 32 [ 766.095124][ T2156] IPVS: length: 49 != 24 [ 766.192704][ T2164] lo speed is unknown, defaulting to 1000 [ 766.198946][ T2164] wg1 speed is unknown, defaulting to 1000 [ 766.207496][ T2164] wg1 speed is unknown, defaulting to 1000 [ 766.399848][ T2181] nbd: couldn't find a device at index 4 [ 766.471741][ T2185] lo speed is unknown, defaulting to 1000 [ 766.478861][ T2185] wg1 speed is unknown, defaulting to 1000 [ 766.486024][ T2185] wg1 speed is unknown, defaulting to 1000 [ 767.154085][ T2212] lo speed is unknown, defaulting to 1000 [ 767.233313][ T2212] wg1 speed is unknown, defaulting to 1000 [ 767.287680][ T2212] wg1 speed is unknown, defaulting to 1000 [ 767.294439][ T2216] tipc: Started in network mode [ 767.304604][ T2216] tipc: Node identity , cluster identity 4711 [ 767.316250][ T2216] tipc: Failed to obtain node identity [ 767.331103][ T2216] tipc: Enabling of bearer rejected, failed to enable media [ 767.351093][ T2215] tipc: Started in network mode [ 767.355980][ T2215] tipc: Node identity , cluster identity 4711 [ 767.374078][ T2215] tipc: Failed to obtain node identity [ 767.379637][ T2215] tipc: Enabling of bearer rejected, failed to enable media [ 767.434586][ T2217] syzkaller0: entered promiscuous mode [ 767.440096][ T2217] syzkaller0: entered allmulticast mode [ 767.457941][ T2222] nbd: couldn't find a device at index 5 [ 767.823597][ T2247] rdma_rxe: rxe_newlink: failed to add lo [ 767.833342][ T2247] netlink: 'syz.8.8864': attribute type 39 has an invalid length. [ 768.071329][ T2267] netlink: 'syz.8.8873': attribute type 1 has an invalid length. [ 768.154108][ T2267] bond0: (slave bond_slave_1): Releasing backup interface [ 768.773513][ T2327] netlink: 'syz.0.8888': attribute type 12 has an invalid length. [ 768.791999][ T2327] netlink: 'syz.0.8888': attribute type 14 has an invalid length. [ 769.331170][ T2362] __nla_validate_parse: 23 callbacks suppressed [ 769.331190][ T2362] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8898'. [ 769.907102][ T2388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8905'. [ 770.069621][ T2416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 770.123403][ T2420] lo speed is unknown, defaulting to 1000 [ 770.129667][ T2420] wg1 speed is unknown, defaulting to 1000 [ 770.136670][ T2420] wg1 speed is unknown, defaulting to 1000 [ 770.247947][ T2420] netlink: 'syz.8.8916': attribute type 2 has an invalid length. [ 770.572985][ T2446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8920'. [ 770.807953][ T2398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.886456][ T2465] FAULT_INJECTION: forcing a failure. [ 770.886456][ T2465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.900197][ T2465] CPU: 1 UID: 0 PID: 2465 Comm: syz.4.8925 Not tainted syzkaller #0 PREEMPT(full) [ 770.900223][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 770.900234][ T2465] Call Trace: [ 770.900242][ T2465] [ 770.900249][ T2465] dump_stack_lvl+0x189/0x250 [ 770.900275][ T2465] ? __pfx____ratelimit+0x10/0x10 [ 770.900299][ T2465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.900318][ T2465] ? __pfx__printk+0x10/0x10 [ 770.900339][ T2465] ? __might_fault+0xb0/0x130 [ 770.900365][ T2465] ? rcu_is_watching+0x15/0xb0 [ 770.900385][ T2465] should_fail_ex+0x414/0x560 [ 770.900408][ T2465] _copy_from_user+0x2d/0xb0 [ 770.900428][ T2465] ___sys_sendmsg+0x158/0x2a0 [ 770.900448][ T2465] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.900497][ T2465] ? __fget_files+0x2a/0x420 [ 770.900512][ T2465] ? __fget_files+0x3a0/0x420 [ 770.900531][ T2465] __x64_sys_sendmsg+0x19b/0x260 [ 770.900552][ T2465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 770.900574][ T2465] ? __pfx_ksys_write+0x10/0x10 [ 770.900595][ T2465] ? rcu_is_watching+0x15/0xb0 [ 770.900613][ T2465] ? rcu_is_watching+0x15/0xb0 [ 770.900632][ T2465] do_syscall_64+0xfa/0x3b0 [ 770.900648][ T2465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.900666][ T2465] ? clear_bhb_loop+0x60/0xb0 [ 770.900686][ T2465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.900703][ T2465] RIP: 0033:0x7ff0f9b8ebe9 [ 770.900720][ T2465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.900735][ T2465] RSP: 002b:00007ff0fa943038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.900752][ T2465] RAX: ffffffffffffffda RBX: 00007ff0f9db5fa0 RCX: 00007ff0f9b8ebe9 [ 770.900766][ T2465] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 770.900779][ T2465] RBP: 00007ff0fa943090 R08: 0000000000000000 R09: 0000000000000000 [ 770.900791][ T2465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.900802][ T2465] R13: 00007ff0f9db6038 R14: 00007ff0f9db5fa0 R15: 00007fffd06029a8 [ 770.900824][ T2465] [ 771.126777][ T2469] netlink: 'syz.7.8924': attribute type 10 has an invalid length. [ 771.153880][ T2469] bond0: (slave dummy0): Releasing backup interface [ 771.179500][ T2466] netlink: 'syz.7.8924': attribute type 10 has an invalid length. [ 771.197571][ T2469] team0: Port device dummy0 added [ 771.239825][ T2466] team0: Port device dummy0 removed [ 771.259159][ T2466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 771.456470][ T2509] FAULT_INJECTION: forcing a failure. [ 771.456470][ T2509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.476195][ T2514] FAULT_INJECTION: forcing a failure. [ 771.476195][ T2514] name failslab, interval 1, probability 0, space 0, times 0 [ 771.510608][ T2509] CPU: 1 UID: 0 PID: 2509 Comm: syz.4.8936 Not tainted syzkaller #0 PREEMPT(full) [ 771.510634][ T2509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 771.510645][ T2509] Call Trace: [ 771.510652][ T2509] [ 771.510659][ T2509] dump_stack_lvl+0x189/0x250 [ 771.510684][ T2509] ? __pfx____ratelimit+0x10/0x10 [ 771.510709][ T2509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.510728][ T2509] ? __pfx__printk+0x10/0x10 [ 771.510749][ T2509] ? rcu_is_watching+0x15/0xb0 [ 771.510767][ T2509] ? lock_acquire+0x5f/0x360 [ 771.510793][ T2509] ? rcu_is_watching+0x15/0xb0 [ 771.510811][ T2509] should_fail_ex+0x414/0x560 [ 771.510835][ T2509] _copy_from_user+0x2d/0xb0 [ 771.510855][ T2509] copy_from_sockptr+0x48/0x70 [ 771.510878][ T2509] ip6_mroute_setsockopt+0x618/0xf00 [ 771.510899][ T2509] ? is_bpf_text_address+0x26/0x2b0 [ 771.510923][ T2509] ? rcu_is_watching+0x15/0xb0 [ 771.510942][ T2509] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 771.510972][ T2509] ? lock_release+0x4b/0x3e0 [ 771.510994][ T2509] ? __might_fault+0xb0/0x130 [ 771.511016][ T2509] ? __might_fault+0xcc/0x130 [ 771.511040][ T2509] do_ipv6_setsockopt+0x35a/0x2eb0 [ 771.511066][ T2509] ? kstrtoull+0x12f/0x1d0 [ 771.511089][ T2509] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 771.511110][ T2509] ? kstrtouint+0x6e/0xe0 [ 771.511134][ T2509] ? get_pid_task+0x20/0x1f0 [ 771.511153][ T2509] ? rcu_is_watching+0x15/0xb0 [ 771.511168][ T2509] ? aa_label_sk_perm+0x4cd/0x630 [ 771.511192][ T2509] ? get_pid_task+0x20/0x1f0 [ 771.511213][ T2509] ? lock_release+0x4b/0x3e0 [ 771.511235][ T2509] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 771.511258][ T2509] ? get_pid_task+0x20/0x1f0 [ 771.511277][ T2509] ? get_pid_task+0x20/0x1f0 [ 771.511298][ T2509] ? rcu_is_watching+0x15/0xb0 [ 771.511314][ T2509] ? lock_release+0x4b/0x3e0 [ 771.511336][ T2509] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 771.511355][ T2509] ? security_file_permission+0x75/0x290 [ 771.511379][ T2509] ? __pfx___might_resched+0x10/0x10 [ 771.511395][ T2509] ? lock_release+0x4b/0x3e0 [ 771.511417][ T2509] ? vfs_write+0x956/0xb30 [ 771.511441][ T2509] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 771.511470][ T2509] ipv6_setsockopt+0x59/0x170 [ 771.511494][ T2509] rawv6_setsockopt+0x23b/0x5b0 [ 771.511520][ T2509] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 771.511550][ T2509] ? aa_sock_opt_perm+0xff/0x1b0 [ 771.511567][ T2509] ? sock_common_setsockopt+0x36/0xc0 [ 771.511590][ T2509] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 771.511614][ T2509] do_sock_setsockopt+0x17c/0x1b0 [ 771.511634][ T2509] __x64_sys_setsockopt+0x13f/0x1b0 [ 771.511654][ T2509] do_syscall_64+0xfa/0x3b0 [ 771.511671][ T2509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.511689][ T2509] ? clear_bhb_loop+0x60/0xb0 [ 771.511708][ T2509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.511726][ T2509] RIP: 0033:0x7ff0f9b8ebe9 [ 771.511742][ T2509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.511758][ T2509] RSP: 002b:00007ff0fa943038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 771.511778][ T2509] RAX: ffffffffffffffda RBX: 00007ff0f9db5fa0 RCX: 00007ff0f9b8ebe9 [ 771.511899][ T2509] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000005 [ 771.511912][ T2509] RBP: 00007ff0fa943090 R08: 0000000000000004 R09: 0000000000000000 [ 771.511924][ T2509] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 771.511935][ T2509] R13: 00007ff0f9db6038 R14: 00007ff0f9db5fa0 R15: 00007fffd06029a8 [ 771.511959][ T2509] [ 771.865869][ T2514] CPU: 1 UID: 0 PID: 2514 Comm: syz.0.8939 Not tainted syzkaller #0 PREEMPT(full) [ 771.865894][ T2514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 771.865906][ T2514] Call Trace: [ 771.865914][ T2514] [ 771.865921][ T2514] dump_stack_lvl+0x189/0x250 [ 771.865947][ T2514] ? __pfx____ratelimit+0x10/0x10 [ 771.865970][ T2514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.865989][ T2514] ? __pfx__printk+0x10/0x10 [ 771.866010][ T2514] ? fs_reclaim_acquire+0x7d/0x100 [ 771.866034][ T2514] ? rcu_is_watching+0x15/0xb0 [ 771.866051][ T2514] ? __pfx___might_resched+0x10/0x10 [ 771.866067][ T2514] ? lock_acquire+0x5f/0x360 [ 771.866092][ T2514] should_fail_ex+0x414/0x560 [ 771.866115][ T2514] should_failslab+0xa8/0x100 [ 771.866139][ T2514] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 771.866162][ T2514] ? __alloc_skb+0x112/0x2d0 [ 771.866179][ T2514] __alloc_skb+0x112/0x2d0 [ 771.866194][ T2514] netlink_sendmsg+0x5c6/0xb30 [ 771.866214][ T2514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.866231][ T2514] ? aa_sock_msg_perm+0xf1/0x1d0 [ 771.866249][ T2514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.866267][ T2514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.866283][ T2514] __sock_sendmsg+0x219/0x270 [ 771.866307][ T2514] ____sys_sendmsg+0x505/0x830 [ 771.866328][ T2514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.866348][ T2514] ? import_iovec+0x74/0xa0 [ 771.866369][ T2514] ___sys_sendmsg+0x21f/0x2a0 [ 771.866389][ T2514] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.866423][ T2514] ? __fget_files+0x2a/0x420 [ 771.866439][ T2514] ? __fget_files+0x3a0/0x420 [ 771.866459][ T2514] __x64_sys_sendmsg+0x19b/0x260 [ 771.866478][ T2514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.866500][ T2514] ? __pfx_ksys_write+0x10/0x10 [ 771.866520][ T2514] ? rcu_is_watching+0x15/0xb0 [ 771.866539][ T2514] ? rcu_is_watching+0x15/0xb0 [ 771.866557][ T2514] do_syscall_64+0xfa/0x3b0 [ 771.866574][ T2514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.866592][ T2514] ? clear_bhb_loop+0x60/0xb0 [ 771.866611][ T2514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.866628][ T2514] RIP: 0033:0x7f180018ebe9 [ 771.866643][ T2514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.866659][ T2514] RSP: 002b:00007f1800fef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.866679][ T2514] RAX: ffffffffffffffda RBX: 00007f18003b5fa0 RCX: 00007f180018ebe9 [ 771.866693][ T2514] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 771.866705][ T2514] RBP: 00007f1800fef090 R08: 0000000000000000 R09: 0000000000000000 [ 771.866716][ T2514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.866733][ T2514] R13: 00007f18003b6038 R14: 00007f18003b5fa0 R15: 00007ffeffb516f8 [ 771.866765][ T2514] [ 772.279354][ T2518] syzkaller0: entered promiscuous mode [ 772.285615][ T2518] syzkaller0: entered allmulticast mode [ 772.318850][ T2544] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8947'. [ 772.329682][ T2545] netlink: 'syz.5.8945': attribute type 13 has an invalid length. [ 772.338186][ T2545] netlink: 'syz.5.8945': attribute type 17 has an invalid length. [ 772.514615][ T2545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.544018][ T2551] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8945'. [ 772.563982][ T2558] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8949'. [ 772.576380][ T2558] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8949'. [ 772.579856][ T2561] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8950'. [ 772.586664][ T2558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8949'. [ 772.619088][ T2558] Unsupported ieee802154 address type: 0 [ 772.629383][ T2547] lo speed is unknown, defaulting to 1000 [ 772.649622][ T2547] wg1 speed is unknown, defaulting to 1000 [ 772.662648][ T2547] wg1 speed is unknown, defaulting to 1000 [ 772.818314][ T2577] FAULT_INJECTION: forcing a failure. [ 772.818314][ T2577] name failslab, interval 1, probability 0, space 0, times 0 [ 772.856583][ T2577] CPU: 0 UID: 0 PID: 2577 Comm: syz.4.8954 Not tainted syzkaller #0 PREEMPT(full) [ 772.856609][ T2577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 772.856620][ T2577] Call Trace: [ 772.856628][ T2577] [ 772.856635][ T2577] dump_stack_lvl+0x189/0x250 [ 772.856661][ T2577] ? __pfx____ratelimit+0x10/0x10 [ 772.856685][ T2577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.856705][ T2577] ? __pfx__printk+0x10/0x10 [ 772.856733][ T2577] ? rcu_is_watching+0x15/0xb0 [ 772.856752][ T2577] ? rhltable_remove+0xd6d/0x1160 [ 772.856780][ T2577] should_fail_ex+0x414/0x560 [ 772.856804][ T2577] should_failslab+0xa8/0x100 [ 772.856828][ T2577] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 772.856851][ T2577] ? rcu_is_watching+0x15/0xb0 [ 772.856867][ T2577] ? __alloc_skb+0x112/0x2d0 [ 772.856886][ T2577] __alloc_skb+0x112/0x2d0 [ 772.856903][ T2577] mr6_netlink_event+0xb6/0x190 [ 772.856929][ T2577] mroute_clean_tables+0x718/0xb40 [ 772.856955][ T2577] ? __pfx_mroute_clean_tables+0x10/0x10 [ 772.856977][ T2577] ? __might_fault+0xcc/0x130 [ 772.857001][ T2577] ? _copy_from_user+0x94/0xb0 [ 772.857022][ T2577] ip6_mroute_setsockopt+0xa95/0xf00 [ 772.857043][ T2577] ? is_bpf_text_address+0x26/0x2b0 [ 772.857067][ T2577] ? rcu_is_watching+0x15/0xb0 [ 772.857086][ T2577] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 772.857116][ T2577] ? lock_release+0x4b/0x3e0 [ 772.857139][ T2577] ? __might_fault+0xb0/0x130 [ 772.857160][ T2577] ? __might_fault+0xcc/0x130 [ 772.857185][ T2577] do_ipv6_setsockopt+0x35a/0x2eb0 [ 772.857210][ T2577] ? kstrtoull+0x12f/0x1d0 [ 772.857234][ T2577] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 772.857257][ T2577] ? kstrtouint+0x6e/0xe0 [ 772.857280][ T2577] ? get_pid_task+0x20/0x1f0 [ 772.857299][ T2577] ? rcu_is_watching+0x15/0xb0 [ 772.857315][ T2577] ? aa_label_sk_perm+0x4cd/0x630 [ 772.857338][ T2577] ? get_pid_task+0x20/0x1f0 [ 772.857367][ T2577] ? lock_release+0x4b/0x3e0 [ 772.857390][ T2577] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 772.857413][ T2577] ? get_pid_task+0x20/0x1f0 [ 772.857431][ T2577] ? get_pid_task+0x20/0x1f0 [ 772.857452][ T2577] ? rcu_is_watching+0x15/0xb0 [ 772.857468][ T2577] ? lock_release+0x4b/0x3e0 [ 772.857490][ T2577] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 772.857509][ T2577] ? security_file_permission+0x75/0x290 [ 772.857533][ T2577] ? __pfx___might_resched+0x10/0x10 [ 772.857550][ T2577] ? lock_release+0x4b/0x3e0 [ 772.857572][ T2577] ? vfs_write+0x956/0xb30 [ 772.857596][ T2577] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 772.857625][ T2577] ipv6_setsockopt+0x59/0x170 [ 772.857649][ T2577] rawv6_setsockopt+0x23b/0x5b0 [ 772.857675][ T2577] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 772.857698][ T2577] ? aa_sock_opt_perm+0xff/0x1b0 [ 772.857721][ T2577] ? sock_common_setsockopt+0x36/0xc0 [ 772.857744][ T2577] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 772.857768][ T2577] do_sock_setsockopt+0x17c/0x1b0 [ 772.857788][ T2577] __x64_sys_setsockopt+0x13f/0x1b0 [ 772.857809][ T2577] do_syscall_64+0xfa/0x3b0 [ 772.857826][ T2577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.857844][ T2577] ? clear_bhb_loop+0x60/0xb0 [ 772.857864][ T2577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.857881][ T2577] RIP: 0033:0x7ff0f9b8ebe9 [ 772.857898][ T2577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.857914][ T2577] RSP: 002b:00007ff0fa943038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 772.857935][ T2577] RAX: ffffffffffffffda RBX: 00007ff0f9db5fa0 RCX: 00007ff0f9b8ebe9 [ 772.857949][ T2577] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000005 [ 772.857961][ T2577] RBP: 00007ff0fa943090 R08: 0000000000000004 R09: 0000000000000000 [ 772.857973][ T2577] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 772.857985][ T2577] R13: 00007ff0f9db6038 R14: 00007ff0f9db5fa0 R15: 00007fffd06029a8 [ 772.858007][ T2577] [ 773.381111][ T2592] netlink: 'syz.7.8958': attribute type 13 has an invalid length. [ 773.409763][ T2592] netlink: 'syz.7.8958': attribute type 17 has an invalid length. [ 773.410984][ T2593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8956'. [ 773.437699][ T2592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.484842][ T2596] lo speed is unknown, defaulting to 1000 [ 773.494885][ T2596] wg1 speed is unknown, defaulting to 1000 [ 773.502937][ T2596] wg1 speed is unknown, defaulting to 1000 [ 773.657216][ T2608] FAULT_INJECTION: forcing a failure. [ 773.657216][ T2608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.671462][ T2608] CPU: 1 UID: 0 PID: 2608 Comm: syz.4.8962 Not tainted syzkaller #0 PREEMPT(full) [ 773.671488][ T2608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.671499][ T2608] Call Trace: [ 773.671507][ T2608] [ 773.671515][ T2608] dump_stack_lvl+0x189/0x250 [ 773.671540][ T2608] ? __pfx____ratelimit+0x10/0x10 [ 773.671577][ T2608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.671597][ T2608] ? __pfx__printk+0x10/0x10 [ 773.671618][ T2608] ? __might_fault+0xb0/0x130 [ 773.671645][ T2608] ? rcu_is_watching+0x15/0xb0 [ 773.671664][ T2608] should_fail_ex+0x414/0x560 [ 773.671687][ T2608] _copy_from_iter+0x1db/0x16f0 [ 773.671704][ T2608] ? rcu_is_watching+0x15/0xb0 [ 773.671720][ T2608] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 773.671743][ T2608] ? __pfx__copy_from_iter+0x10/0x10 [ 773.671759][ T2608] ? __build_skb_around+0x257/0x3e0 [ 773.671782][ T2608] ? netlink_sendmsg+0x642/0xb30 [ 773.671791][ T2608] ? skb_put+0x11b/0x210 [ 773.671800][ T2608] netlink_sendmsg+0x6b2/0xb30 [ 773.671811][ T2608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.671820][ T2608] ? aa_sock_msg_perm+0xf1/0x1d0 [ 773.671830][ T2608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 773.671841][ T2608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.671853][ T2608] __sock_sendmsg+0x219/0x270 [ 773.671873][ T2608] ____sys_sendmsg+0x505/0x830 [ 773.671892][ T2608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.671915][ T2608] ? import_iovec+0x74/0xa0 [ 773.671933][ T2608] ___sys_sendmsg+0x21f/0x2a0 [ 773.671953][ T2608] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.671986][ T2608] ? __fget_files+0x2a/0x420 [ 773.672002][ T2608] ? __fget_files+0x3a0/0x420 [ 773.672022][ T2608] __x64_sys_sendmsg+0x19b/0x260 [ 773.672036][ T2608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 773.672048][ T2608] ? __pfx_ksys_write+0x10/0x10 [ 773.672060][ T2608] ? rcu_is_watching+0x15/0xb0 [ 773.672071][ T2608] ? rcu_is_watching+0x15/0xb0 [ 773.672081][ T2608] do_syscall_64+0xfa/0x3b0 [ 773.672090][ T2608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.672099][ T2608] ? clear_bhb_loop+0x60/0xb0 [ 773.672110][ T2608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.672120][ T2608] RIP: 0033:0x7ff0f9b8ebe9 [ 773.672130][ T2608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.672139][ T2608] RSP: 002b:00007ff0fa943038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.672151][ T2608] RAX: ffffffffffffffda RBX: 00007ff0f9db5fa0 RCX: 00007ff0f9b8ebe9 [ 773.672158][ T2608] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 773.672165][ T2608] RBP: 00007ff0fa943090 R08: 0000000000000000 R09: 0000000000000000 [ 773.672171][ T2608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.672177][ T2608] R13: 00007ff0f9db6038 R14: 00007ff0f9db5fa0 R15: 00007fffd06029a8 [ 773.672189][ T2608] [ 774.018581][ T2612] lo speed is unknown, defaulting to 1000 [ 774.026254][ T2612] wg1 speed is unknown, defaulting to 1000 [ 774.032958][ T2612] wg1 speed is unknown, defaulting to 1000 [ 774.198068][ T2624] netlink: 'syz.5.8967': attribute type 2 has an invalid length. [ 774.220357][ T2624] k›*·]‘: entered promiscuous mode [ 774.247081][ T2624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.273791][ T2631] tipc: Enabling of bearer rejected, already enabled [ 774.284408][ T2636] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 774.404967][ T2640] bond0: (slave rose0): Error: Device can not be enslaved while up [ 774.495758][ T2653] FAULT_INJECTION: forcing a failure. [ 774.495758][ T2653] name failslab, interval 1, probability 0, space 0, times 0 [ 774.519463][ T2653] CPU: 0 UID: 0 PID: 2653 Comm: syz.4.8974 Not tainted syzkaller #0 PREEMPT(full) [ 774.519487][ T2653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.519497][ T2653] Call Trace: [ 774.519505][ T2653] [ 774.519513][ T2653] dump_stack_lvl+0x189/0x250 [ 774.519538][ T2653] ? __pfx____ratelimit+0x10/0x10 [ 774.519561][ T2653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.519581][ T2653] ? __pfx__printk+0x10/0x10 [ 774.519605][ T2653] ? __pfx___might_resched+0x10/0x10 [ 774.519622][ T2653] ? lock_acquire+0x5f/0x360 [ 774.519647][ T2653] should_fail_ex+0x414/0x560 [ 774.519671][ T2653] should_failslab+0xa8/0x100 [ 774.519696][ T2653] __kmalloc_node_noprof+0xd1/0x4e0 [ 774.519718][ T2653] ? rcu_is_watching+0x15/0xb0 [ 774.519734][ T2653] ? qdisc_alloc+0x97/0xaa0 [ 774.519760][ T2653] qdisc_alloc+0x97/0xaa0 [ 774.519788][ T2653] qdisc_create+0x12c/0xea0 [ 774.519808][ T2653] ? lock_release+0x4b/0x3e0 [ 774.519833][ T2653] tc_modify_qdisc+0x1538/0x20e0 [ 774.519861][ T2653] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 774.519890][ T2653] ? lock_release+0x4b/0x3e0 [ 774.519911][ T2653] ? bpf_lsm_capable+0x9/0x20 [ 774.519938][ T2653] ? security_capable+0x7e/0x2e0 [ 774.519964][ T2653] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 774.519983][ T2653] rtnetlink_rcv_msg+0x77c/0xb70 [ 774.520010][ T2653] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 774.520032][ T2653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 774.520054][ T2653] ? __netlink_lookup+0xbd/0x810 [ 774.520071][ T2653] ? rcu_is_watching+0x15/0xb0 [ 774.520088][ T2653] ? rcu_is_watching+0x15/0xb0 [ 774.520108][ T2653] netlink_rcv_skb+0x205/0x470 [ 774.520132][ T2653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 774.520157][ T2653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.520188][ T2653] netlink_unicast+0x82f/0x9e0 [ 774.520213][ T2653] ? __pfx_netlink_unicast+0x10/0x10 [ 774.520232][ T2653] ? netlink_sendmsg+0x642/0xb30 [ 774.520246][ T2653] ? skb_put+0x11b/0x210 [ 774.520261][ T2653] netlink_sendmsg+0x805/0xb30 [ 774.520286][ T2653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.520302][ T2653] ? aa_sock_msg_perm+0xf1/0x1d0 [ 774.520316][ T2653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.520332][ T2653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.520344][ T2653] __sock_sendmsg+0x219/0x270 [ 774.520365][ T2653] ____sys_sendmsg+0x505/0x830 [ 774.520383][ T2653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.520401][ T2653] ? import_iovec+0x74/0xa0 [ 774.520421][ T2653] ___sys_sendmsg+0x21f/0x2a0 [ 774.520438][ T2653] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.520468][ T2653] ? __fget_files+0x2a/0x420 [ 774.520482][ T2653] ? __fget_files+0x3a0/0x420 [ 774.520498][ T2653] __x64_sys_sendmsg+0x19b/0x260 [ 774.520516][ T2653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.520537][ T2653] ? __pfx_ksys_write+0x10/0x10 [ 774.520557][ T2653] ? rcu_is_watching+0x15/0xb0 [ 774.520577][ T2653] ? rcu_is_watching+0x15/0xb0 [ 774.520596][ T2653] do_syscall_64+0xfa/0x3b0 [ 774.520613][ T2653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.520630][ T2653] ? clear_bhb_loop+0x60/0xb0 [ 774.520648][ T2653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.520664][ T2653] RIP: 0033:0x7ff0f9b8ebe9 [ 774.520681][ T2653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.520696][ T2653] RSP: 002b:00007ff0fa943038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.520717][ T2653] RAX: ffffffffffffffda RBX: 00007ff0f9db5fa0 RCX: 00007ff0f9b8ebe9 [ 774.520731][ T2653] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 774.520744][ T2653] RBP: 00007ff0fa943090 R08: 0000000000000000 R09: 0000000000000000 [ 774.520755][ T2653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.520766][ T2653] R13: 00007ff0f9db6038 R14: 00007ff0f9db5fa0 R15: 00007fffd06029a8 [ 774.520788][ T2653] [ 774.982328][ T2655] tipc: Enabled bearer , priority 0 [ 774.989267][ T2659] sctp: [Deprecated]: syz.4.8978 (pid 2659) Use of int in max_burst socket option deprecated. [ 774.989267][ T2659] Use struct sctp_assoc_value instead [ 775.020340][ T2655] syzkaller0: entered promiscuous mode [ 775.039367][ T2655] syzkaller0: entered allmulticast mode [ 775.057560][ T2661] __nla_validate_parse: 1 callbacks suppressed [ 775.057581][ T2661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8976'. [ 775.194198][ T2668] tipc: Resetting bearer [ 775.249615][ T2655] netlink: 'syz.7.8975': attribute type 10 has an invalid length. [ 775.304717][ T2655] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8975'. [ 775.342542][ T2655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.380878][ T2692] netlink: 'syz.0.8985': attribute type 1 has an invalid length. [ 775.389128][ T2692] netlink: 'syz.0.8985': attribute type 1 has an invalid length. [ 775.401718][ T2692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8985'. [ 775.426381][ T2654] tipc: Resetting bearer [ 775.450843][ T2692] block nbd10: shutting down sockets [ 775.493375][ T2654] tipc: Disabling bearer [ 775.569712][ T2708] batadv0: entered promiscuous mode [ 775.575838][ T2708] debugfs: 'hsr1' already exists in 'hsr' [ 775.586354][ T2708] Cannot create hsr debugfs directory [ 775.595177][ T2709] netlink: 'syz.8.8990': attribute type 9 has an invalid length. [ 775.605458][ T2708] hsr1: entered allmulticast mode [ 775.619513][ T2708] batadv0: entered allmulticast mode [ 775.625432][ T2709] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8990'. [ 775.661043][ T2708] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 775.681229][ T2708] batadv0: left promiscuous mode [ 775.703330][ T2709] bond0: entered promiscuous mode [ 775.708403][ T2709] bond_slave_0: entered promiscuous mode [ 775.721847][ T2709] bond0: left promiscuous mode [ 775.726662][ T2709] bond_slave_0: left promiscuous mode [ 776.306793][ T2752] netlink: 'syz.4.9001': attribute type 39 has an invalid length. [ 776.639516][ T2769] netlink: 'syz.0.9005': attribute type 13 has an invalid length. [ 776.647644][ T2769] netlink: 'syz.0.9005': attribute type 17 has an invalid length. [ 776.659342][ T2769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.732689][ T2767] lo speed is unknown, defaulting to 1000 [ 776.747129][ T2774] netlink: 'syz.7.9007': attribute type 58 has an invalid length. [ 776.748315][ T2767] wg1 speed is unknown, defaulting to 1000 [ 776.758431][ T2774] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9007'. [ 776.786132][ T2767] wg1 speed is unknown, defaulting to 1000 [ 776.788495][ T2769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9005'. [ 776.888802][ T2778] Unsupported ieee802154 address type: 0 [ 776.896842][ T2778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9009'. [ 776.897935][ T2781] netlink: 'syz.7.9008': attribute type 1 has an invalid length. [ 776.930945][ T2781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.951505][ T2781] bond1: (slave ip6gretap3): making interface the new active one [ 776.960840][ T2781] bond1: (slave ip6gretap3): Enslaving as an active interface with an up link [ 776.984901][ T2781] veth3: entered promiscuous mode [ 776.996771][ T2781] bond1: (slave veth3): Enslaving as an active interface with a down link [ 777.023140][ T2781] erspan0: entered allmulticast mode [ 777.047654][ T2781] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 777.066693][ T2790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9011'. [ 777.219593][ T2803] FAULT_INJECTION: forcing a failure. [ 777.219593][ T2803] name failslab, interval 1, probability 0, space 0, times 0 [ 777.232390][ T2803] CPU: 1 UID: 0 PID: 2803 Comm: syz.7.9016 Not tainted syzkaller #0 PREEMPT(full) [ 777.232414][ T2803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.232425][ T2803] Call Trace: [ 777.232432][ T2803] [ 777.232439][ T2803] dump_stack_lvl+0x189/0x250 [ 777.232464][ T2803] ? __pfx____ratelimit+0x10/0x10 [ 777.232488][ T2803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.232505][ T2803] ? __pfx__printk+0x10/0x10 [ 777.232526][ T2803] ? netlink_unicast+0x82f/0x9e0 [ 777.232548][ T2803] ? do_iter_readv_writev+0x619/0x8b0 [ 777.232571][ T2803] ? do_writev+0x14d/0x2d0 [ 777.232586][ T2803] ? do_syscall_64+0xfa/0x3b0 [ 777.232602][ T2803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.232623][ T2803] should_fail_ex+0x414/0x560 [ 777.232648][ T2803] should_failslab+0xa8/0x100 [ 777.232672][ T2803] kmem_cache_alloc_noprof+0x73/0x3c0 [ 777.232694][ T2803] ? skb_clone+0x212/0x3a0 [ 777.232715][ T2803] skb_clone+0x212/0x3a0 [ 777.232735][ T2803] __netlink_deliver_tap+0x404/0x850 [ 777.232764][ T2803] ? netlink_deliver_tap+0x2e/0x1b0 [ 777.232789][ T2803] netlink_deliver_tap+0x19c/0x1b0 [ 777.232813][ T2803] netlink_sendskb+0x68/0x140 [ 777.232836][ T2803] netlink_unicast+0x397/0x9e0 [ 777.232856][ T2803] ? __asan_memcpy+0x40/0x70 [ 777.232878][ T2803] ? __pfx_netlink_unicast+0x10/0x10 [ 777.232904][ T2803] netlink_rcv_skb+0x28c/0x470 [ 777.232928][ T2803] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 777.232951][ T2803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.232984][ T2803] netlink_unicast+0x82f/0x9e0 [ 777.233009][ T2803] ? __pfx_netlink_unicast+0x10/0x10 [ 777.233032][ T2803] ? netlink_sendmsg+0x642/0xb30 [ 777.233047][ T2803] ? skb_put+0x11b/0x210 [ 777.233064][ T2803] netlink_sendmsg+0x805/0xb30 [ 777.233084][ T2803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.233100][ T2803] ? aa_sock_msg_perm+0xf1/0x1d0 [ 777.233118][ T2803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.233136][ T2803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.233152][ T2803] __sock_sendmsg+0x219/0x270 [ 777.233175][ T2803] sock_write_iter+0x258/0x330 [ 777.233196][ T2803] ? __pfx_sock_write_iter+0x10/0x10 [ 777.233221][ T2803] ? kstrtoull+0x12f/0x1d0 [ 777.233248][ T2803] do_iter_readv_writev+0x619/0x8b0 [ 777.233272][ T2803] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 777.233294][ T2803] ? common_file_perm+0x1b5/0x230 [ 777.233320][ T2803] ? bpf_lsm_file_permission+0x9/0x20 [ 777.233340][ T2803] ? security_file_permission+0x75/0x290 [ 777.233362][ T2803] ? rw_verify_area+0x255/0x4d0 [ 777.233394][ T2803] vfs_writev+0x31a/0x960 [ 777.233410][ T2803] ? security_file_permission+0x75/0x290 [ 777.233434][ T2803] ? __pfx_vfs_writev+0x10/0x10 [ 777.233465][ T2803] ? vfs_write+0x956/0xb30 [ 777.233489][ T2803] ? lock_release+0x4b/0x3e0 [ 777.233516][ T2803] ? __fget_files+0x3a0/0x420 [ 777.233532][ T2803] ? __fget_files+0x2a/0x420 [ 777.233550][ T2803] do_writev+0x14d/0x2d0 [ 777.233567][ T2803] ? __pfx_do_writev+0x10/0x10 [ 777.233584][ T2803] ? rcu_is_watching+0x15/0xb0 [ 777.233601][ T2803] do_syscall_64+0xfa/0x3b0 [ 777.233616][ T2803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.233631][ T2803] ? clear_bhb_loop+0x60/0xb0 [ 777.233648][ T2803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.233665][ T2803] RIP: 0033:0x7f8b0eb8ebe9 [ 777.233681][ T2803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.233695][ T2803] RSP: 002b:00007f8b0fa9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 777.233726][ T2803] RAX: ffffffffffffffda RBX: 00007f8b0edb6090 RCX: 00007f8b0eb8ebe9 [ 777.233739][ T2803] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000005 [ 777.233751][ T2803] RBP: 00007f8b0fa9c090 R08: 0000000000000000 R09: 0000000000000000 [ 777.233760][ T2803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.233770][ T2803] R13: 00007f8b0edb6128 R14: 00007f8b0edb6090 R15: 00007fff764f4d08 [ 777.233788][ T2803] [ 777.685944][ T2823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9018'. [ 777.718419][ T2823] lo speed is unknown, defaulting to 1000 [ 777.725553][ T2823] wg1 speed is unknown, defaulting to 1000 [ 777.734537][ T2823] wg1 speed is unknown, defaulting to 1000 [ 777.788765][ T2826] tipc: Enabling of bearer rejected, failed to enable media [ 777.950203][ T2845] dvmrp8: entered allmulticast mode [ 777.996206][ T2845] lo speed is unknown, defaulting to 1000 [ 778.047842][ T2845] wg1 speed is unknown, defaulting to 1000 [ 778.067242][ T2845] wg1 speed is unknown, defaulting to 1000 [ 778.158734][ T2860] netlink: 'syz.8.9024': attribute type 1 has an invalid length. [ 778.219196][ T2861] bond1: entered promiscuous mode [ 778.226498][ T2861] bond1: entered allmulticast mode [ 778.233820][ T2861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.339357][ T2841] dvmrp8: left allmulticast mode [ 778.389700][ T2880] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9029'. [ 778.417522][ T2883] netlink: 'syz.8.9027': attribute type 13 has an invalid length. [ 778.538840][ T2883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.618906][ T2875] lo speed is unknown, defaulting to 1000 [ 778.634632][ T2875] wg1 speed is unknown, defaulting to 1000 [ 778.652533][ T2875] wg1 speed is unknown, defaulting to 1000 [ 779.123019][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 779.137642][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 779.145719][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 779.153977][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 779.163664][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 779.191351][ T2919] lo speed is unknown, defaulting to 1000 [ 779.198804][ T2919] wg1 speed is unknown, defaulting to 1000 [ 779.207913][ T2919] wg1 speed is unknown, defaulting to 1000 [ 779.366357][ T2919] chnl_net:caif_netlink_parms(): no params data found [ 779.522824][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.531663][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.539060][ T2919] bridge_slave_0: entered allmulticast mode [ 779.546469][ T2919] bridge_slave_0: entered promiscuous mode [ 779.571644][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.589082][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.597872][ T2919] bridge_slave_1: entered allmulticast mode [ 779.607646][ T2919] bridge_slave_1: entered promiscuous mode [ 779.656902][ T2949] FAULT_INJECTION: forcing a failure. [ 779.656902][ T2949] name failslab, interval 1, probability 0, space 0, times 0 [ 779.676727][ T2949] CPU: 0 UID: 0 PID: 2949 Comm: syz.7.9047 Not tainted syzkaller #0 PREEMPT(full) [ 779.676753][ T2949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.676764][ T2949] Call Trace: [ 779.676771][ T2949] [ 779.676779][ T2949] dump_stack_lvl+0x189/0x250 [ 779.676804][ T2949] ? __pfx____ratelimit+0x10/0x10 [ 779.676828][ T2949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.676848][ T2949] ? __pfx__printk+0x10/0x10 [ 779.676868][ T2949] ? netlink_unicast+0x82f/0x9e0 [ 779.676890][ T2949] ? ___sys_sendmsg+0x21f/0x2a0 [ 779.676907][ T2949] ? do_syscall_64+0xfa/0x3b0 [ 779.676922][ T2949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.676944][ T2949] should_fail_ex+0x414/0x560 [ 779.676967][ T2949] should_failslab+0xa8/0x100 [ 779.677001][ T2949] kmem_cache_alloc_noprof+0x73/0x3c0 [ 779.677023][ T2949] ? skb_clone+0x212/0x3a0 [ 779.677043][ T2949] skb_clone+0x212/0x3a0 [ 779.677063][ T2949] __netlink_deliver_tap+0x404/0x850 [ 779.677092][ T2949] ? netlink_deliver_tap+0x2e/0x1b0 [ 779.677116][ T2949] netlink_deliver_tap+0x19c/0x1b0 [ 779.677140][ T2949] netlink_sendskb+0x68/0x140 [ 779.677162][ T2949] netlink_unicast+0x397/0x9e0 [ 779.677183][ T2949] ? __asan_memcpy+0x40/0x70 [ 779.677206][ T2949] ? __pfx_netlink_unicast+0x10/0x10 [ 779.677231][ T2949] netlink_rcv_skb+0x28c/0x470 [ 779.677255][ T2949] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 779.677280][ T2949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.677313][ T2949] netlink_unicast+0x82f/0x9e0 [ 779.677338][ T2949] ? __pfx_netlink_unicast+0x10/0x10 [ 779.677359][ T2949] ? netlink_sendmsg+0x642/0xb30 [ 779.677373][ T2949] ? skb_put+0x11b/0x210 [ 779.677389][ T2949] netlink_sendmsg+0x805/0xb30 [ 779.677408][ T2949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.677425][ T2949] ? aa_sock_msg_perm+0xf1/0x1d0 [ 779.677442][ T2949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.677461][ T2949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.677478][ T2949] __sock_sendmsg+0x219/0x270 [ 779.677502][ T2949] ____sys_sendmsg+0x505/0x830 [ 779.677520][ T2949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.677542][ T2949] ? import_iovec+0x74/0xa0 [ 779.677562][ T2949] ___sys_sendmsg+0x21f/0x2a0 [ 779.677580][ T2949] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.677611][ T2949] ? __fget_files+0x2a/0x420 [ 779.677625][ T2949] ? __fget_files+0x3a0/0x420 [ 779.677644][ T2949] __x64_sys_sendmsg+0x19b/0x260 [ 779.677664][ T2949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.677686][ T2949] ? __pfx_ksys_write+0x10/0x10 [ 779.677706][ T2949] ? rcu_is_watching+0x15/0xb0 [ 779.677726][ T2949] ? rcu_is_watching+0x15/0xb0 [ 779.677743][ T2949] do_syscall_64+0xfa/0x3b0 [ 779.677759][ T2949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.677777][ T2949] ? clear_bhb_loop+0x60/0xb0 [ 779.677796][ T2949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.677813][ T2949] RIP: 0033:0x7f8b0eb8ebe9 [ 779.677829][ T2949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.677845][ T2949] RSP: 002b:00007f8b0fabd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.677864][ T2949] RAX: ffffffffffffffda RBX: 00007f8b0edb5fa0 RCX: 00007f8b0eb8ebe9 [ 779.677878][ T2949] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 779.677890][ T2949] RBP: 00007f8b0fabd090 R08: 0000000000000000 R09: 0000000000000000 [ 779.677901][ T2949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.677912][ T2949] R13: 00007f8b0edb6038 R14: 00007f8b0edb5fa0 R15: 00007fff764f4d08 [ 779.677934][ T2949] [ 780.029514][ T2919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.041698][ T2919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.069862][ T2919] team0: Port device team_slave_0 added [ 780.077591][ T2919] team0: Port device team_slave_1 added [ 780.118484][ T2919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.127584][ T2919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.153722][ T2919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.181778][ T2958] gretap0: entered promiscuous mode [ 780.187082][ T2958] vlan2: entered promiscuous mode [ 780.206896][ T2919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.214196][ T2919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.241019][ T2919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.252014][ T2953] lo speed is unknown, defaulting to 1000 [ 780.263181][ T2968] nbd: couldn't find a device at index 8 [ 780.276645][ T2953] wg1 speed is unknown, defaulting to 1000 [ 780.293092][ T2919] hsr_slave_0: entered promiscuous mode [ 780.299453][ T2919] hsr_slave_1: entered promiscuous mode [ 780.306346][ T2919] debugfs: 'hsr0' already exists in 'hsr' [ 780.312425][ T2919] Cannot create hsr debugfs directory [ 780.332696][ T2969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 780.361426][ T2953] wg1 speed is unknown, defaulting to 1000 [ 780.455675][ T2969] lo speed is unknown, defaulting to 1000 [ 780.465252][ T2973] __nla_validate_parse: 4 callbacks suppressed [ 780.465271][ T2973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9051'. [ 780.501733][ T2969] wg1 speed is unknown, defaulting to 1000 [ 780.501826][ T2971] lo speed is unknown, defaulting to 1000 [ 780.517111][ T2969] wg1 speed is unknown, defaulting to 1000 [ 780.545787][ T2971] wg1 speed is unknown, defaulting to 1000 [ 780.582543][ T2974] lo speed is unknown, defaulting to 1000 [ 780.594273][ T2971] wg1 speed is unknown, defaulting to 1000 [ 780.610421][ T2974] wg1 speed is unknown, defaulting to 1000 [ 780.638723][ T2974] wg1 speed is unknown, defaulting to 1000 [ 781.108552][ T2919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 781.165722][ T2919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 781.181151][ T5873] Bluetooth: hci5: command tx timeout [ 781.207631][ T2919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 781.318312][ T2919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 781.331762][ T2996] lo speed is unknown, defaulting to 1000 [ 781.429224][ T2996] wg1 speed is unknown, defaulting to 1000 [ 781.436479][ T2996] wg1 speed is unknown, defaulting to 1000 [ 781.604727][ T2919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.650218][ T2919] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.663963][ T3019] lo speed is unknown, defaulting to 1000 [ 781.676774][ T3019] wg1 speed is unknown, defaulting to 1000 [ 781.686541][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.693748][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.705681][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.712873][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.724159][ T3027] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9064'. [ 781.724212][ T3019] wg1 speed is unknown, defaulting to 1000 [ 781.739146][ T3027] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9064'. [ 781.988383][ T3027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9064'. [ 782.214986][ T3049] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9071'. [ 782.215452][ T2919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.450837][ T3067] netlink: 288 bytes leftover after parsing attributes in process `syz.8.9074'. [ 782.490890][ T3066] lo speed is unknown, defaulting to 1000 [ 782.504248][ T3066] wg1 speed is unknown, defaulting to 1000 [ 782.538334][ T3066] wg1 speed is unknown, defaulting to 1000 [ 782.611226][ T2919] veth0_vlan: entered promiscuous mode [ 782.645886][ T2919] veth1_vlan: entered promiscuous mode [ 782.711534][ T2919] veth0_macvtap: entered promiscuous mode [ 782.727730][ T2919] veth1_macvtap: entered promiscuous mode [ 782.765917][ T2919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.817957][ T2919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.851570][ T3011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.924337][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.953048][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.962726][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.016734][T11978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.026237][T11978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.052127][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.062162][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.093461][ T3082] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9079'. [ 783.151459][ T3086] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9080'. [ 783.262860][ T5183] Bluetooth: hci5: command tx timeout [ 783.580085][ T3108] lo speed is unknown, defaulting to 1000 [ 783.589016][ T3108] wg1 speed is unknown, defaulting to 1000 [ 783.600005][ T3108] wg1 speed is unknown, defaulting to 1000 [ 783.766303][ T3115] nbd: couldn't find a device at index 5 [ 784.126251][ T3128] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9091'. [ 784.333275][ T3134] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9092'. [ 784.439732][ T3139] syzkaller0: entered promiscuous mode [ 784.447351][ T3139] syzkaller0: entered allmulticast mode [ 785.340617][ T5183] Bluetooth: hci5: command tx timeout [ 785.996987][ T3214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.122532][ T3214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.199471][ T3214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.299507][ T3214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.344172][ T3224] __nla_validate_parse: 2 callbacks suppressed [ 786.344185][ T3224] netlink: 172 bytes leftover after parsing attributes in process `syz.5.9119'. [ 786.425919][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.464787][ T3011] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.503730][ T3011] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.524109][ T3011] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.545055][ T3236] nbd: couldn't find a device at index 5 [ 786.707274][ T3246] validate_nla: 3 callbacks suppressed [ 786.707293][ T3246] netlink: 'syz.0.9127': attribute type 13 has an invalid length. [ 786.725711][ T3246] netlink: 'syz.0.9127': attribute type 17 has an invalid length. [ 786.741482][ T3246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 786.834913][ T3249] pim6reg: entered allmulticast mode [ 786.841584][ T3242] lo speed is unknown, defaulting to 1000 [ 786.849264][ T3242] wg1 speed is unknown, defaulting to 1000 [ 786.863432][ T3242] wg1 speed is unknown, defaulting to 1000 [ 786.864422][ T3251] netlink: 248 bytes leftover after parsing attributes in process `syz.4.9130'. [ 786.874802][ T3246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9127'. [ 786.906417][ T3252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 787.067184][ T3255] tipc: Started in network mode [ 787.072546][ T3255] tipc: Node identity 26dc8d341862, cluster identity 4711 [ 787.079840][ T3255] tipc: Enabled bearer , priority 0 [ 787.090323][ T3255] syzkaller0: entered promiscuous mode [ 787.096523][ T3255] syzkaller0: entered allmulticast mode [ 787.116519][ T3255] tipc: Resetting bearer [ 787.125038][ T3254] tipc: Resetting bearer [ 787.133660][ T3254] tipc: Disabling bearer [ 787.295014][ T3270] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9135'. [ 787.372288][ T3274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9139'. [ 787.413655][ T4716] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.424591][ T3274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9139'. [ 787.431985][ T5183] Bluetooth: hci5: command tx timeout [ 787.443742][ T4716] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.454780][ T4716] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.464339][ T4716] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.581768][ T3275] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9139'. [ 787.615985][ T3275] tipc: Invalid UDP bearer configuration [ 787.616027][ T3275] tipc: Enabling of bearer rejected, failed to enable media [ 787.711774][ T3281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9139'. [ 787.744189][ T3282] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9142'. [ 787.771041][ T3286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9143'. [ 788.229720][ T3322] unknown channel width for channel at 909000KHz? [ 788.238733][ T3322] netlink: 'syz.4.9157': attribute type 8 has an invalid length. [ 788.251578][ T3322] bond0: entered promiscuous mode [ 788.276493][ T3322] bond_slave_0: entered promiscuous mode [ 788.288283][ T3322] bond_slave_1: entered promiscuous mode [ 788.308744][ T3322] bond0: left promiscuous mode [ 788.368334][ T3322] bond_slave_0: left promiscuous mode [ 788.376731][ T3322] bond_slave_1: left promiscuous mode [ 788.405882][ T3336] lo speed is unknown, defaulting to 1000 [ 788.412553][ T3336] wg1 speed is unknown, defaulting to 1000 [ 788.419274][ T3336] wg1 speed is unknown, defaulting to 1000 [ 788.467247][ T3342] bridge0: port 3(vlan0) entered blocking state [ 788.474358][ T3342] bridge0: port 3(vlan0) entered disabled state [ 788.481552][ T3342] vlan0: entered allmulticast mode [ 788.486800][ T3342] bridge0: entered allmulticast mode [ 788.494200][ T3342] vlan0: left allmulticast mode [ 788.499149][ T3342] bridge0: left allmulticast mode [ 788.783946][ T3365] lo speed is unknown, defaulting to 1000 [ 788.820158][ T3365] wg1 speed is unknown, defaulting to 1000 [ 788.860246][ T3374] tipc: Enabled bearer , priority 0 [ 788.882389][ T3365] wg1 speed is unknown, defaulting to 1000 [ 788.894339][ T3374] syzkaller0: entered promiscuous mode [ 788.899981][ T3374] syzkaller0: entered allmulticast mode [ 788.988018][ T3374] tipc: Resetting bearer [ 789.070702][ T3373] tipc: Resetting bearer [ 789.089392][ T3373] tipc: Disabling bearer [ 789.418830][ T3414] netlink: 'syz.5.9178': attribute type 12 has an invalid length. [ 789.556234][ T3428] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595) [ 789.569102][ T3428] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 790.143745][ T3445] delete_channel: no stack [ 790.231553][ T3473] sctp: [Deprecated]: syz.5.9196 (pid 3473) Use of int in maxseg socket option. [ 790.231553][ T3473] Use struct sctp_assoc_value instead [ 790.259044][ T3473] netlink: 'syz.5.9196': attribute type 10 has an invalid length. [ 790.276963][ T3473] team0: Port device geneve0 added [ 790.437147][ T3479] tap0: tun_chr_ioctl cmd 1074025677 [ 790.443243][ T3479] tap0: linktype set to 825 [ 790.873348][ T3530] netlink: 'syz.4.9217': attribute type 1 has an invalid length. [ 790.904719][ T3530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 790.920333][ T3530] bond1: (slave geneve2): Opening slave failed [ 790.986207][ T3530] tc_dump_action: action bad kind [ 791.010019][ T3545] veth1_macvtap: left promiscuous mode [ 791.085349][ T3551] netlink: 'syz.0.9223': attribute type 1 has an invalid length. [ 791.366934][ T3570] lo speed is unknown, defaulting to 1000 [ 791.375242][ T3570] wg1 speed is unknown, defaulting to 1000 [ 791.395214][ T3570] wg1 speed is unknown, defaulting to 1000 [ 792.508778][ T3592] erspan0: entered allmulticast mode [ 792.539792][ T3588] syzkaller1: entered promiscuous mode [ 792.549915][ T3588] syzkaller1: entered allmulticast mode [ 792.574366][T11978] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 792.599229][T11978] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 792.748591][ T3615] netlink: 'syz.4.9241': attribute type 13 has an invalid length. [ 792.763859][ T3615] netlink: 'syz.4.9241': attribute type 17 has an invalid length. [ 792.824992][ T3615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 792.853069][ T3611] lo speed is unknown, defaulting to 1000 [ 792.862559][ T3611] wg1 speed is unknown, defaulting to 1000 [ 792.875501][ T3611] wg1 speed is unknown, defaulting to 1000 [ 792.878011][ T3617] tap0: tun_chr_ioctl cmd 1074025677 [ 792.887646][ T3617] tap0: linktype set to 774 [ 792.908203][ T3617] tap0: tun_chr_ioctl cmd 35108 [ 794.034211][ T3666] ------------[ cut here ]------------ [ 794.039844][ T3666] wlan1: Failed check-sdata-in-driver check, flags: 0x1 [ 794.049179][ T3662] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 794.061737][ T3666] WARNING: CPU: 0 PID: 3666 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 794.072625][ T3666] Modules linked in: [ 794.076540][ T3666] CPU: 0 UID: 0 PID: 3666 Comm: syz.5.9255 Not tainted syzkaller #0 PREEMPT(full) [ 794.086149][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.096354][ T3666] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 794.102793][ T3666] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 2b b0 8c e8 96 2e 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 87 8f d7 f6 90 0f 0b 90 42 80 7c 3d [ 794.122658][ T3666] RSP: 0018:ffffc9000f27f910 EFLAGS: 00010246 [ 794.128882][ T3666] RAX: 208db722357c3600 RBX: 0000000000000000 RCX: 0000000000080000 [ 794.137485][ T3666] RDX: ffffc9001265e000 RSI: 0000000000012956 RDI: 0000000000012957 [ 794.147063][ T3666] RBP: ffff88804f169728 R08: 0000000000000003 R09: 0000000000000004 [ 794.155435][ T3666] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88804f16a9d0 [ 794.164423][ T3666] R13: ffff88804f168d80 R14: 1ffff11009e2d2e5 R15: dffffc0000000000 [ 794.172947][ T3666] FS: 00007f4b45a526c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 794.182484][ T3666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.189100][ T3666] CR2: 0000200000008038 CR3: 00000000324b0000 CR4: 00000000003526f0 [ 794.198020][ T3666] Call Trace: [ 794.201666][ T3666] [ 794.201994][ T3678] netlink: 'syz.4.9257': attribute type 10 has an invalid length. [ 794.204632][ T3666] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 794.204677][ T3666] __ieee80211_link_release_channel+0x33b/0x4a0 [ 794.225938][ T3666] ieee80211_if_change_type+0x14c/0x990 [ 794.231890][ T3666] ? cfg80211_mgmt_registrations_update+0x192/0x8d0 [ 794.238512][ T3666] ieee80211_change_iface+0xd5/0x510 [ 794.244302][ T3666] cfg80211_change_iface+0x792/0xef0 [ 794.249625][ T3666] cfg80211_wext_siwmode+0x1db/0x2b0 [ 794.255370][ T3666] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 794.261569][ T3666] ? full_name_hash+0x92/0xe0 [ 794.266634][ T3666] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 794.273190][ T3666] ioctl_standard_call+0xcb/0x1b0 [ 794.276396][ T3679] netlink: 'syz.5.9255': attribute type 10 has an invalid length. [ 794.278235][ T3666] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 794.278269][ T3666] wext_ioctl_dispatch+0xee/0x410 [ 794.298140][ T3666] ? __pfx_ioctl_standard_call+0x10/0x10 [ 794.304478][ T3666] wext_handle_ioctl+0x100/0x1c0 [ 794.309446][ T3666] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 794.315360][ T3666] ? do_futex+0x395/0x420 [ 794.320280][ T3666] sock_ioctl+0x15f/0x790 [ 794.325365][ T3666] ? lock_release+0x4b/0x3e0 [ 794.329997][ T3666] ? __pfx_sock_ioctl+0x10/0x10 [ 794.335377][ T3666] ? __fget_files+0x2a/0x420 [ 794.340012][ T3666] ? __fget_files+0x3a0/0x420 [ 794.345212][ T3666] ? __fget_files+0x2a/0x420 [ 794.349845][ T3666] ? bpf_lsm_file_ioctl+0x9/0x20 [ 794.353696][ T3667] netlink: 'syz.4.9257': attribute type 10 has an invalid length. [ 794.355411][ T3666] ? __pfx_sock_ioctl+0x10/0x10 [ 794.367952][ T3666] __se_sys_ioctl+0xf9/0x170 [ 794.373373][ T3666] do_syscall_64+0xfa/0x3b0 [ 794.378007][ T3666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.384391][ T3666] ? clear_bhb_loop+0x60/0xb0 [ 794.389244][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.395472][ T3666] RIP: 0033:0x7f4b44b8ebe9 [ 794.399885][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.419904][ T3666] RSP: 002b:00007f4b45a52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.428897][ T3666] RAX: ffffffffffffffda RBX: 00007f4b44db6090 RCX: 00007f4b44b8ebe9 [ 794.437639][ T3666] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000009 [ 794.446518][ T3666] RBP: 00007f4b44c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 794.454943][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.463604][ T3666] R13: 00007f4b44db6128 R14: 00007f4b44db6090 R15: 00007ffe82f0b038 [ 794.472355][ T3666] [ 794.475411][ T3666] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 794.482682][ T3666] CPU: 0 UID: 0 PID: 3666 Comm: syz.5.9255 Not tainted syzkaller #0 PREEMPT(full) [ 794.491949][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.502000][ T3666] Call Trace: [ 794.505278][ T3666] [ 794.508206][ T3666] dump_stack_lvl+0x99/0x250 [ 794.513234][ T3666] ? __asan_memcpy+0x40/0x70 [ 794.517847][ T3666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.523128][ T3666] ? __pfx__printk+0x10/0x10 [ 794.527714][ T3666] vpanic+0x281/0x750 [ 794.531781][ T3666] ? __pfx__printk+0x10/0x10 [ 794.536398][ T3666] ? __pfx_vpanic+0x10/0x10 [ 794.540922][ T3666] ? is_bpf_text_address+0x292/0x2b0 [ 794.546235][ T3666] panic+0xb9/0xc0 [ 794.549981][ T3666] ? __pfx_panic+0x10/0x10 [ 794.554419][ T3666] __warn+0x31b/0x4b0 [ 794.558399][ T3666] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 794.564118][ T3666] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 794.569832][ T3666] report_bug+0x2be/0x4f0 [ 794.574175][ T3666] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 794.579923][ T3666] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 794.585655][ T3666] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 794.591393][ T3666] handle_bug+0x84/0x160 [ 794.595636][ T3666] exc_invalid_op+0x1a/0x50 [ 794.600177][ T3666] asm_exc_invalid_op+0x1a/0x20 [ 794.605013][ T3666] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 794.611336][ T3666] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 2b b0 8c e8 96 2e 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 87 8f d7 f6 90 0f 0b 90 42 80 7c 3d [ 794.630956][ T3666] RSP: 0018:ffffc9000f27f910 EFLAGS: 00010246 [ 794.637027][ T3666] RAX: 208db722357c3600 RBX: 0000000000000000 RCX: 0000000000080000 [ 794.644989][ T3666] RDX: ffffc9001265e000 RSI: 0000000000012956 RDI: 0000000000012957 [ 794.653053][ T3666] RBP: ffff88804f169728 R08: 0000000000000003 R09: 0000000000000004 [ 794.661023][ T3666] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88804f16a9d0 [ 794.669004][ T3666] R13: ffff88804f168d80 R14: 1ffff11009e2d2e5 R15: dffffc0000000000 [ 794.676998][ T3666] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 794.682993][ T3666] __ieee80211_link_release_channel+0x33b/0x4a0 [ 794.689242][ T3666] ieee80211_if_change_type+0x14c/0x990 [ 794.694783][ T3666] ? cfg80211_mgmt_registrations_update+0x192/0x8d0 [ 794.701380][ T3666] ieee80211_change_iface+0xd5/0x510 [ 794.706667][ T3666] cfg80211_change_iface+0x792/0xef0 [ 794.711951][ T3666] cfg80211_wext_siwmode+0x1db/0x2b0 [ 794.717236][ T3666] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 794.723039][ T3666] ? full_name_hash+0x92/0xe0 [ 794.727711][ T3666] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 794.733527][ T3666] ioctl_standard_call+0xcb/0x1b0 [ 794.738577][ T3666] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 794.744403][ T3666] wext_ioctl_dispatch+0xee/0x410 [ 794.749430][ T3666] ? __pfx_ioctl_standard_call+0x10/0x10 [ 794.755055][ T3666] wext_handle_ioctl+0x100/0x1c0 [ 794.759992][ T3666] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 794.765438][ T3666] ? do_futex+0x395/0x420 [ 794.769773][ T3666] sock_ioctl+0x15f/0x790 [ 794.774114][ T3666] ? lock_release+0x4b/0x3e0 [ 794.778699][ T3666] ? __pfx_sock_ioctl+0x10/0x10 [ 794.783548][ T3666] ? __fget_files+0x2a/0x420 [ 794.788134][ T3666] ? __fget_files+0x3a0/0x420 [ 794.792818][ T3666] ? __fget_files+0x2a/0x420 [ 794.797412][ T3666] ? bpf_lsm_file_ioctl+0x9/0x20 [ 794.802359][ T3666] ? __pfx_sock_ioctl+0x10/0x10 [ 794.807213][ T3666] __se_sys_ioctl+0xf9/0x170 [ 794.811813][ T3666] do_syscall_64+0xfa/0x3b0 [ 794.816308][ T3666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.822367][ T3666] ? clear_bhb_loop+0x60/0xb0 [ 794.827128][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.833016][ T3666] RIP: 0033:0x7f4b44b8ebe9 [ 794.837431][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.857392][ T3666] RSP: 002b:00007f4b45a52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.865801][ T3666] RAX: ffffffffffffffda RBX: 00007f4b44db6090 RCX: 00007f4b44b8ebe9 [ 794.873764][ T3666] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000009 [ 794.881816][ T3666] RBP: 00007f4b44c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 794.889967][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.898492][ T3666] R13: 00007f4b44db6128 R14: 00007f4b44db6090 R15: 00007ffe82f0b038 [ 794.906574][ T3666] [ 794.909749][ T3666] Kernel Offset: disabled [ 794.914058][ T3666] Rebooting in 86400 seconds..