last executing test programs: 3.876223793s ago: executing program 2 (id=4908): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d00000000000000000000001004000000000000000000d48f1915a3d7092f8b997a3f81000903000000000000006100"], 0x0, 0x52}, 0x20) unshare(0x22020600) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) (rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r4, r4, 0x0, 0x8) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20048000) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) 3.382510339s ago: executing program 3 (id=4917): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r4, &(0x7f0000000540), 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000009fbe0f0000000095000b000000000010b762213dfa28e384a5ace8c21b333b5f4ddc187d843aa2ced09e1a646a7fbddd817ea427955bbe0438c79f618ac80fd05cfde9b7a3a28f3d5101cb471f9e456c48"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000c80)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x640100fd, 0x1}, @phonet={0x23, 0x1, 0x8, 0x2}, @generic={0x2a, "85424c9251b9f4e60a7f4f9739ca"}, 0x800, 0x0, 0x0, 0x0, 0xff80, 0x0, 0x0, 0x80000000, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={r6, 0x3, 0x10}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r7, &(0x7f00000002c0), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x3, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x40050) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xffffffffffffff63, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc) 3.119133327s ago: executing program 3 (id=4921): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r5], 0x1c}}, 0x40800) splice(0xffffffffffffffff, &(0x7f00000002c0)=0x5202, r6, &(0x7f0000000300)=0x10000, 0x2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r5, 0x0, 0x4}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="18020000022000000000000002000000850000002e000000850000000e00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x15, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000045) 3.02151927s ago: executing program 2 (id=4923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='thermal_temperature\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) (rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x404c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0x8) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async, rerun: 64) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async, rerun: 64) r7 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) (async) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xd, 0x4}, {0xfff3, 0x3}}, ["", "", "", "", ""]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4094}, 0x20000010) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x15, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000009000000ef774cb70040ae5f0d000000ceec945349decf140ecee66482941aa79ba61dd04cf520ec55d41dab19ef52af01dea17d6dc974952f413902d190972c536cf3eb", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183b000003000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xd8, &(0x7f0000000b40)=""/216, 0x41000, 0x14, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0xf, 0x7fff, 0x8}, 0x10, 0x27d38, r0, 0x1, &(0x7f0000000c80)=[r3, r8], &(0x7f0000000cc0)=[{0x3, 0x6, 0x8, 0x8}], 0x10, 0xcda}, 0x94) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) unshare(0x62040200) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095", @ANYRESHEX=r10], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 2.727030076s ago: executing program 2 (id=4927): setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)="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", 0x1000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x73a1b7661d4dbe40}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)=@newchain={0x8c, 0x64, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0x7}, {0x5, 0x6}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x48, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x21}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xec400000}]}, @TCA_FW_MASK={0x8, 0x5, 0x100}, @TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) (async) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000011c0)=""/27, &(0x7f0000001200)=0x1b) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001240)={'mangle\x00', 0xee, "b95611583cf549ec279015890b60ff962759aea173bf5ffd22aa84d387fe6646b87f5bdf27a5eb08dfbb97ff2ba851010defd097149dac9ad9cfe851c5a73222b3605f4c2944722ddbd37212ad1a0945ce83dad841745932a9a5174fc5a74c517325590f3875f42365048c2faa7afc20cd660507be74d1e99c944ceeb44056298362c6db5b2f428030842171abd789f5dd556d3aa6a9ee0196d7337772b74b975bf01b12f6df7b304987af40be2577eafb6d49f1c19df293bd6009e0f4681616aec5571cdd18c6187d3ca8aba61304abc5d841837ed102483f7160c9f71962ab544a8a43162a9c33de509a7ccd12"}, &(0x7f0000001380)=0x112) (async) bpf$ENABLE_STATS(0x20, &(0x7f00000013c0), 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r4) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x88, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x53}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x24, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x3}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x9, 0x8000, 0x8}}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x20, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x16}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44480}, 0x24004000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x9e1441, 0x0) ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000001740)) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000017c0), r6) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x30, r9, 0x308, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3c}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008) (async) bpf$ENABLE_STATS(0x20, &(0x7f00000019c0), 0x4) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c015}, 0x0) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001b00)={0x0, 0x2}, &(0x7f0000001b40)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000001b80)=@assoc_value={r11, 0x5}, 0x8) connect$inet(r8, &(0x7f0000001bc0)={0x2, 0x4e23, @broadcast}, 0x10) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001c00)={0x7, [0x3, 0xa1, 0x5, 0x4, 0x82, 0x6, 0xc4c]}, &(0x7f0000001c40)=0x12) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000001c80)={0x81, 0x1, 0x0, 0x92a, 0x1, 0x0, [{0x7, 0x40, 0x4, '\x00', 0xa0c}]}) 2.604032289s ago: executing program 2 (id=4929): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x6, [@union={0xa, 0x2, 0x0, 0x5, 0x0, 0x1, [{0xb, 0x2, 0x8}, {0x7}]}, @datasec={0xd, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x539e, 0x3b56}], "af"}, @func={0xe, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x30, 0x30, 0x0]}}, &(0x7f0000000380)=""/37, 0x6a, 0x25, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0xce, 0x8001, r0, 0x5, '\x00', r7, r8, 0x4, 0x1, 0x4, 0xb, @value=r2}, 0x50) sendto$packet(r5, &(0x7f0000000440)="0900000000ffbabe0008000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @local}, 0x14) unshare(0x22020400) r9 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x38}, 0x10001) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='afs_cm_no_server\x00', r10}, 0x18) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) unshare(0x24020400) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r12, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x54, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000cc44}, 0x800) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r13, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="b9f6030768045c8c98a89a0b86ddd510e921ff2e03d235c95a9ed6fcff3f99ee9e639038402404d7", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.419331477s ago: executing program 2 (id=4933): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000004c0), 0x10) write$cgroup_int(r5, &(0x7f0000000200)=0x100000, 0x12) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, &(0x7f0000001400)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r7) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000000), &(0x7f0000000180)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendfile(r0, r0, 0x0, 0xf03a0005) 2.292347691s ago: executing program 2 (id=4936): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x41045) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x19, &(0x7f0000001fc0)=""/4096, &(0x7f0000000000)=0x1000) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffebb) shutdown(r8, 0x0) r9 = accept4$bt_l2cap(r8, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r7, @ANYRES8=r9], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4028051) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0xff, 0x20, 0x8369}, {0x6}]}, 0x10) sendmmsg(r11, &(0x7f0000000180), 0x4000190, 0x0) accept4$bt_l2cap(r9, 0x0, 0x0, 0x0) 2.20177139s ago: executing program 0 (id=4938): pipe(&(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfb, {0x80, 0x10, 0x0, 0x2, 0xfe, 0x2, 0xff, 0x7, 0x800}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x60d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0xd) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r11, 0x0, &(0x7f0000000080)) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r12, 0x8932, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x2}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 2.144016947s ago: executing program 3 (id=4940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) r4 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1a000, r4, &(0x7f00000002c0)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x480402, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd31, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x0, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x240490c4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000fc8d9fe300090000000100005e4fc35f00", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='R\x00\x00@', @ANYRES16=r9, @ANYBLOB="08002abd7000fedbdf251000000008000700480e000008000600673b0000080007000400000008000700010001000800060001000000080007007f00000008000700ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000023010000"], 0x48) socket$kcm(0xa, 0x3, 0x87) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.774785905s ago: executing program 0 (id=4943): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000cf3629f8daf8452d1c7d5e2f43a57c9040e669f7a2ec06a3efc1c2bf340537fa1d8a24eb81a7aa946be4158bac50152a31f8ced542b3076fdee5f2a043d36508859b2f533f0de09fb674e38da4ad09"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000100)="4d4e470d6ce1d5c4e3", &(0x7f0000000540)=""/4096}, 0x20) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40084) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket(0x3, 0x0, 0x100) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 1.618719667s ago: executing program 0 (id=4946): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xce}], 0x1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x37b}, {}, {&(0x7f0000000100)="461897c8a6501105d296c9c2e452740acea707a9bca94b2507dbd7eacc1fd75065bc8405e867a3f1bc837126392e1b626cc3c064b516ff91cfe2a3e9f7c7d12660732ba12652a54e59b5d5da75e4b340c94401754bdc969c1844a63b15534e1f579a66a16a2b760ff77a3a99e0d51f4f58f0ba9a828dd05389c04db78a0d803901186240ba7b5d75be413cb9117cad991ccd415861db8f9c991a4b3847d60547651b8180f5a69bd92c8009d80a04a19115cdf2b67ec834de4dcbd8002bd849", 0xbf}], 0x3}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x40004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.528150735s ago: executing program 3 (id=4947): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a80)={0xd4, r0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ff66f49d927622d5a6d4a04c9473cec33f620b70c2eefd6d"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7a81ec91b4768eca0fe004e0b75bac753395671529c26fab"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d385e3941bbef2d5bb063db23c6847aa58423ba3cc32b788"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb88}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r5) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0x2, 0xb}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="25b80000180c", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "475cfbcdae09c4723086e5215b8b056cd495721502b6a9b5", "70e01c7f0c0dce5d4a6e924e0680e0395eaf37b60e9797f4c6b67410989e9ad1"}}}}}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bond0\x00'}) 1.453022954s ago: executing program 4 (id=4949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000001c0)=@fragment={0xc, 0x0, 0x9, 0x1, 0x0, 0x3, 0x65}, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x37, 0xfffffffffffffffe, &(0x7f0000000840)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="0005d8a4ca71a74d19e83e665100", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = accept4(r1, 0x0, &(0x7f0000000040), 0x80800) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ppoll(&(0x7f0000000300)=[{r7, 0x108}], 0x1, &(0x7f0000000340), 0x0, 0x0) recvmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000100)=@ll, 0x80, &(0x7f0000000300)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000080)=""/53, 0x35}], 0x3, &(0x7f0000000340)=""/115, 0x73}, 0x40002103) 1.327859292s ago: executing program 0 (id=4950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0xc014) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000000)=[{0x50, 0x1, 0x2, 0x6}, {0x6, 0x4, 0x3, 0x1}]}) write$ppp(r1, &(0x7f0000000400)="01fd0bd337", 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd2d, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x9, 0x0, 0x0, 0x0, 0x2, 0x10004}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2000000) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.220312732s ago: executing program 4 (id=4951): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x9c000000}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.170713289s ago: executing program 4 (id=4953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000020000008500000020000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @private}, &(0x7f0000000200)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001ac0)={'ip6gre0\x00', &(0x7f0000001a40)={'syztnl0\x00', r3, 0x29, 0x2, 0x0, 0x6, 0x7b, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x40}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1728, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1708, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x57c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "b8623f840c3911e59aa5d2be25a340437560f2579cb31256254c10eabb9f0adbac68f6bd5caa94f9a381975453d0e0f56fe034c981e674f61010ff0ba3ac5fa9107786088e95416804228ba786ca9d847c072121b7f66ec9fe3951a957f855ff87e44c6a08ddb8555dd7d7b583497ce86d757b7724676b4937358d53af3d7a74244bd52f2162764cb443174c40ce26d3c21a0fc4fcdf21cec29e04052aaff919b43d541c46b6b47d21b6d0a9bcaab6113aab7fe4d827eb"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x7c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x58, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x867a}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}]}}}]}, @NFTA_SET_ELEM_DATA={0x344, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "ae926c52f8539791e8bb9f9f512794471d2fe5e393a60c46e4168820bd982b33c03552ff18e760fbf8dbd7535566100cacc4610527412aa59b2345c61d9e9b86aa24ecbf2b9c92a56b34ae6e6481efbae9ba3489e404dc61c21a6a10bdeb8359c198ec881ced60eefa1e7ecdb689982fe0dcb5abc9652bf36367aabe8debfdfea73c89e02757f80455ef3cdd87ac7de7cc1552c32c7e9e7870db1d206ade6186c42da448b30484bacec97123b1ce3a869108e4fbe958cb81b0344a96fd2f84711ebc17d80e0b19a464b9313bb354b633ebe245992aea4f9ec51b63d5"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb, 0x1, "b70bd0f5e39eac"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "0f3f6a4af287c9596dbcb52ee9683318fdbd289753f7ca14b8e41756741bd9cde605f4e1d4edc78b455489bf7493fa7e10d1d34269d5a06057a830480ce137c7adab3793aa008ec553fc13b0ab86f86af8ae947c07e4e153f8fe71d4d3599496262efdb70e162847cfc38011b130c8d5469bfe2bb33ead"}]}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz1\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xcb6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}]}}}]}, {0x10e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x34, 0x1, "6f8511b757aebdbf9d8237905b5bcb7f927c243c95df166880a69d9b3fdda533c6a3baf7f101c975a844d3290f5c7f71"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "f2022eba95d9e1f306e900163dcb17"}]}]}]}, 0x1728}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.066310447s ago: executing program 0 (id=4954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000fcc9df250c00ee00080005000000006c"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x3, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x82, 0x5, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) 996.354884ms ago: executing program 4 (id=4955): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xd}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 5) 925.601525ms ago: executing program 0 (id=4956): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1eec926e090000000000000000000000000000200000000000000000000000a1574aa4573827b819a182d4dbae279acfd974d2c4cbf24a0c314d7978e1ff293d55750c340f60e074ce565ebed70f8da9123349af2a87acfdcdebff7685", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000000000000000000000000000000000000000000002000000000000000000000007000000000000100000000000000000000000003000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000002abd7000000000000a0001060000000000000000480003006465666c61746500"/240], 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90) 848.891341ms ago: executing program 1 (id=4957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x300, 0x0, 0x4004840}, 0x40804) 733.792426ms ago: executing program 1 (id=4958): unshare(0x5a000000) 595.91712ms ago: executing program 1 (id=4959): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"05b7e34d7065c210a3ba1e0fddd72eb5", r1, r2, {0x4, 0x7}, {0x9, 0x40}, 0xffffffffffffec29, [0x101000, 0x9, 0x5, 0xfffffffffffffffc, 0x7dc, 0xcf, 0x4, 0x7, 0x1, 0x3, 0xfff, 0x9, 0x7, 0x7, 0x1, 0x3]}) r3 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@generic, &(0x7f0000000440)=0x80, 0x80000) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10001002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7bb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc0}}, 0x48044) (async) r5 = syz_init_net_socket$ax25(0x3, 0x4, 0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x3a8, 0xf, 0x5, 0x101, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x9}, [@nested={0x8c, 0xc, 0x0, 0x1, [@nested={0x4, 0xf4}, @typed={0x82, 0x45, 0x0, 0x0, @binary="22a8f580da4dad14ba8841b22abe123ce40d84d19f8ab02719eaee685b3d2bb4c240770564bc052d5277aa36bd4bcd09302ab38e063384cf1aa7f4fba3a4f396a9be7e69dcd782a16f3b770fb46b5350b73863c03b9c0112c1aed50d6475625bf7ffae0bbf1aab86e9d016679cff1ee7d72f7a478ef8bc37ee569a004856"}]}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r3}, @nested={0xc, 0xb5, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0x138}]}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r5}, @nested={0x38, 0xa0, 0x0, 0x1, [@typed={0x8, 0x28, 0x0, 0x0, @fd=r3}, @generic="ff08f29832e7a7b17857467e8135a84b26b14c827add4025", @nested={0x4, 0x10}, @typed={0x8, 0xe1, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x11d, 0x0, 0x0, @u32=0x80000001}]}, @nested={0xec, 0x149, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x110}, @generic="8b26e8f69e603e48c6488ca3dac4fa955040c9e17a2a26d745a0b7df4c962c31a48ff0a69425db0b9cd0b0499df5dcc1fc22c2e7c9f47d8500d7dd40f4957eee1a653dd5f1dc67d1f0c26c8b6daaad944c74da9c8a0683da964b2026634e8d76cf8adfc14fdaee52b0cd85436a77e6f3907600124b0d1d911bb43833adfb31282ceefe3ef553334b339c91b11adc2cedaf000d43d0a8435dc69d16cae696a1da2c87e9b3f60ff59199913cf635eca86138caeb41836d66956040f260e7b3b4896dd99f2473205509e33063cfedc01e9ba2326a4a25f38710123ceaae", @nested={0x4, 0xf8}]}, @generic="d0c971d3f21b28d6083da836818fb85441a674c493f4a20cd7917f528b3c73122c1de96341472b1649160a7406111695d40478889b84c499fc211f227be9944d890b14950e7c129115d09deac008230000d6599cfd9823d5a877ca8aea76393838f4438aae3510c3bfc1f3cf6df0e153629d25f4224430118ae1a08422ed6fda6e8e0bf9b7ebe84571f37ad07453d6d27f00b5ded26c0186dd8d793392a01a306d627f50b6b9e7e5eed3944e34af9c8ea20c2bf206fb82ec93ce50", @typed={0x103, 0x45, 0x0, 0x0, @binary="76c012ef8231499d558b7e73536a9983fd54eddfe003e7187875f412b3503f219dc306fe3ac9a4b55d35a84d63c54f2822a9bc1773bccc291244dc47435ed224b8d6037e881f930b3e536a3d4ba7b2f9b6caa25a718bf340ea7f46f7600bde33c953a9762b9a71c92670eba8713000c2c29e7302f250413da53b4113afb8b21f18f4e631fc1dcd24b797b5cadc23e210d0cac7f89a266d91d765bcf0f3c9c38ee257ca6692a7c8d147e016ab97d0cfb0972caf24fe0ab917f993bc185d327635ec26ab3bb1b9e624daccbb709bc0b089a7917d6a4dff17a0249d74c75bc2b1009553ca7a5a137a0b70e00fc5eb5199b5f38fd8c255a58411a13a09384fa078"}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r0}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) (async) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000b40)={0x0, r5, 0x800, 0x401, 0x0, 0x6}) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000b80)={0xf0, 0x0, 0x2, 0xfffffff7}, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000c40)={0x0, @nfc={0x27, r9, 0x1, 0x1}, @ethernet={0x6, @broadcast}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xa, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c00)='ip6gre0\x00', 0x7, 0xffffffffffffffff, 0x2000}) (async) r10 = getpid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001f80)={0x0}, &(0x7f0000001fc0)=0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002000)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000002100)=0xe8) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0, 0x0}, &(0x7f0000002180)=0xc) sendmmsg$unix(r3, &(0x7f0000004680)=[{{&(0x7f0000000cc0)=@file={0x6aeb0fe53d8d07eb, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000d40)="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", 0xff}, {&(0x7f0000000e40)="eed18fe90db745d05a54b0d4d82797fb75dc4da56f3c0c08af0dfad9d47aafe3432dd4a779c0a6a03ea5e50cda422c60eb8ff7037e4e6ed161bd73b95c38afbbdb844840ee3b759fc64605d7094986c6efc7203073925be7e70e01fc28d23709df1410f29b356514802dce4f6c69fd3a290c382524d3dba7a6bc0223bb8fb4ed72ccd4a131446f11cc18a0f6c81b2af233331e8791b232ea275abc12e7656a5b554d", 0xa2}, {&(0x7f0000000f00)="c06b51ed7784aea169561bd5f20a9daad410a94c039760066c8dc516eac14a7cc745dce38bd0efe7fbbe15d3a5309076fadb4dd4dcc88a38c8eae078b6396a78eed80b5427e13b7175e2fdeab1d4dc20973a5fcfed2fe200657945c967d2121b7213c32ae37b49719bb991d14bb8741b12fb9fdd8ee9abe6ee0444713b0bbfb63a6a9c70709edfa7ce7435061188a8dc4979cff6052b16da06de6507399830c29d12946fabde6c79a75c1ab71dc92d3edf801eb9c94f7cd7d9103e15897c4543e78550848e6c45bfe56a292ccea8abbe6fb89a5ecb5788d43cd721e42d74e76f59c1d1bf9d673a3d23a0bedb9f4104a6effbf02b52883389ff312fbdbf219e413e90089b830b276959378c549e02a112de837a5f6fff67cba28277762535c755b984d65129c41690e43e5f9d46fd6a69e1706d39fdd6bcfafe779801d439a17b52d1b090964edebf2ea4d304afd98f96edb0dca6e43ef184227ec1936ea183a4945be71083131f8bce2d54460df76523adefa4e83151be3598a694f62c430f2273882ba15bf37e69baa353f4d9507b706d41da3f88e9e1e58cbd54ec26fcb0a0c9b0e7c229ef925779fd419748ad0df95a2193aa01bfc2f31b494beb4606d7e484afda72699e27a36ed4861a622feb824ff0345d7e6840bf6ec8ae570175226b6510f64044d831cb009dc3b1dc30f235de2b228f3356c473ecde7b4323e030401c8fc1363129927d10c520f6ddf094309c2577169c8033faa16217a165909dd778f203a82ebe6cd1c8dcac84af4b5a9b31602a92544d80a545d1b02c71e82faed9f23d85daf49ed824f1abcb205bca53ae3cf80b4ca835432989fa2183b77e4f013e9d532a93df5adb3e53b49d0b4c57b43da8eba7e3198b1993443e0857732d698ad22fb82039baf4ad7a3927bdb90afdc15d086ae62c46539a1b0a2e44c9694878950220c45b57c78aa806c1031c48db2880d4f10bf0f8d0bfc6a9695ac8800d1e4c76254a305dacac1b97a3bb21e9e0238d695c158416a8b346c12522e526ecec61a5fb5e0f0f34a3cfbfdfa9526be43406fb6b5ab237aa66a5fc490cf28f48729acd6d9fcf6cd00696990d501f0fc03a488a85ae006b8d4edaaa7323347cb6ecaa0683e23f1965cb8fe54a114f0c8f1250cfffb793a8a8eac1d9f896bbb35c0220c8fa8e8aa34604ad506e768f1fa9c91e8f0e0e7d9e0954ae6aecbe9d08e4b6d87c1674128e7bb6de982325c95cd37c9e0c53925f82dd52b479e9656105dc8a8fd1afbe74fdc979318a3c73c1549ed6c4cf06751b38318caf4e73c9380bdbae51f35648a55aea279ecbe3bedbb719251f7a4012487ed5891e16a844a7b0a4c23903e81197be262406d3a1cf7e7670b1067dc8e380c90441a347dbb3dd95720cc5e85dda7e3eb9fca81f12a1935368c72be98fdd439ccc8890f6bc904a1b1cccf630ebfeb22c35ebfdeda957064cb1db1c9b8c2f92ebb51cf2dd9fe434a3bf9badb229ad526f3f13693dd95fa5846cea4a286ec4a2aee21423905b6c7db41c865395a7308293456c9c9e09eacc99de7e92531fbf027681c248d0319fb7abae6bff50b9a08b8d63294a8c5b80ef392e5ccd74fc4a6fb4f192584329c0fd414fd724cdcbbf63285f89d764c443009266061de31e2f64bacf7aa5a2726c229a47db5c9ec3a54d4029dd57cfaa3d1de748d4ba9d9c8b8ccfe4e4482282620edcf6b7784a0e206d23bc283dbb22f49c5cee4cade0e7019cb0516a630f2a15fce70142e1be9e019e74777e7bcb0594bddb56cf142fcf8920d2d8d506d664db0bdbccfec94caeea340a26758f51f9d8d925449ca1e83bdbf682ecfb95674872d8136bfe5242e6bd8d3f98d0b49698c1cd15c74c0509c7adc3fa2286d48f60bf859270cd8f46877ed3d652b2d30339add862e92381bef05a682cfaeb69e6abfc7a140c794cfff3ee2bd27d185b552150ae77e6f7f585feb90b19dc3ed4beaf8ffda626d86251573c63d4808077a25478cd8d54a0a723845e670c122163cffb80f75d9487cf1872a9d3aabe7cca1419018bcc63666a6aac41435694d748438e4745019d2050d011af1a0785c27d6b484bbfe15994c3cbdc6da24a7671a2262183f978e77d1e5d9e5bff662a83f5a082ec6a9abdc512e734ba39d00027cdee943ea0998aa7c36a7874e40bf977a0e9943f922500eb79095ef7680993448b3796a1897de87da089f9d3991ca7f2ce3736c7e948c5717c1a26668792803b188f4a755740218d3562e446eb7cf6caa5e630f312ee599bb71f23ca1aa05fe2a88f9483c9f52edf536dbca2879d18f8d8133eb2492cf02914d92f86dae0ef70f5fb3955f46d1394a91f3251284b2c457bad1d541369917001d115f9ea46e8a310d20fd22cea13a7354e5406f2ad79afbf6cbac71ad5db26dbeed77420556d064dfbb3d0ad3a3763b7230a37cfa680df63a3c47e81745d6b954c1a81630c9ade06a62b458d0eb87e628f8a409502d44dd5676a2115607f04613d8d0315cfe0d025680ca486b2761a64d68c81fa63ad57f6772bb125e86d44455ff60444c8ef419a224ba21c88dc7935872acb1a2532d100ad2b32fd77ca965e878b9683eb870a01f94c33aeeb8ba62f1a1bc4dafe10fc071e240851ad1035bd04ec0418c452fca109c23ccedeec22e8660957d54115ee34a2686da90d92cfc88f48b3257398ae60218616c5b42a426bfb96bdc572b1a3068ebd076bbbba189d71ccf54b4bd101d5db6ca3e6843721b6884fe8cf3cf8bca74a80e734160d956625a9bd33ed98e2956b6835dc264e2726cedd02479d6dc85b6e4c624893322de9b6dd1650abe4559d1333c224a74dc0bcec897e55e48c12805b1ef9d3e2ae5fa2e6eef24ca823371dd1e7627eaae74e1dd3e660add44cabe43f6a9870ea18e1841017cfd88e3af59b85bf71b3c309bd14570e100cca8b6cace26e0a84751da04512f4cc169196d5f8213025abe4f4e8f3fde38bfcae6e7caa84e5b6ce6cb19e8d63d45595db26deea9b5cc4a1db55d39f3579d10f113cf3e535495561cfca652c465d72616986a125ca43f1eb918b3259c262e1cfcc6667e596e8705f8b25a65c91611e4f46aeca33510314478c49ef7b81b7b872411677e805cf7e913f20ef40da536a882e1fa14c3bce49dd62f6610222c8315a4be571f6d41db261cc5063005654b7e3370d63c494c440d05b27db4c1c0706617df16002ba67472bb5184e92d1e673c53e889de48f2d4be3e68ae3aef6ede09fc657e2a3d79801375ad1c23df44806b51ada99a6981017d2a84ecf058f48e676596e9e99600441e6112e9e0a2fd8721da6a89113d828fc193cf47f2fd05289ceeade6c3c624346852be956258100f95add7e94e4b7286c68448615741ae5cfb843321c56164d81ad0e1f9b32963abd9aff53d61631d865de3e49ffec56127797933a864e51fd4169b527eab9e459e6cd56d6686031ca975beb3155c178563c1d6042b5e8575955c257c106f36886d07dc53eb781ab429d5d7d610855493129ab9d1d5343b5a977576f32bef04ad5eda4f3f945927ceae3668c0ebc5f97131a2a95da14f1819c2ffc8a74c54d19125252337ec63b6e5d4dcb63d7cfd7e2b9b5b0bdfb2fe764776161f17bf00958b420ce38a9ed4e0c0d74288681f7901af790a423e33607f2fa58ab04d53786e2a599925aae0bb2cc2229e833d2eb8b93ad2e57a9b828ec31d1fbdfc79c96661dc29f31f122fb3d24c4c1f06d7a06290ce1aecda68863d44f4f995681250a268ce9bd5ef339cea216870144b6cc34f241a74787256cffb9843c5cdafbde8f11e12328082e6832a87f76a8255e9d1be89c6f56943cd381ec46e899030c89beb896cdeb17433e2c50441bfa30172b613c6d3996e2bab824edca00a36d27e38e4eb2bc9392313f421d86a79409e3a18b81532ca5ba0b5bdedc7bec4a6e8b336a4dc1b56260d85f0d65f596e3bb457af04705d2859469aa67cc0aedef8deb5217a92b4d42e4cf5e486bb5ae55c457527e13d2890e6cb4a99fc16bbf6f4178ea824ee5d2dbc7b186a8cbcc32cbb4d3e021548de9071784bab1c619144edf018164bc7107736ddf469db81a7db4e26aab4b8d53fe626589d4c6d3d625fc1cc12fb7fb721297c9a83f2ffbe4672241a4512b9a6f735f17cc92d22ea6576d127355d763cbb3c4ed2fb77fd7e2815599ce7b0e5f646af112e79aa595ebc6fcd40fb4c39ce996c93312d0b83815b251dd8922fdd89e65862e4a6094439ec6c90950b25df7762ad3963591ce55c62fdee2b627cfe460295426cdb88e931bc7104930cd5b6fda39fafc9173bc10a71248359fe1f5e2a4fdd3c3a38d4865be4a583b7d4c6d58cdd54f4ad2202b120fa84b6deff3a760db54f8e00122a1fd142d05c4f61643c9e9bf2e0265f93c1bac4e25fc4f35491a61fffc70a2c6782a67fb2f5528982e3b66df3c3a954bf6202467dfb1b6d059477627b730690f2e02307bdea65e5bb4a34174cd9a0e7722d2e04b4e839eb9c0d1f302b6bbadde4721f53c122717dcd70e3f0805bac6d7449f51cf3fa0e45ee16b11f90b6da658a3b1a9de601d3665e22c22049ce334e3d7c95aadb6694e15ddcf7d976370bc75a40788af09d303944889c25cc379671802aaca9f0b7fd684a59f9ebdb1f903344a5392220adac04639b1078932828f00600e0ac4ed6ee74cb6f8df30cd36cf125f02f9401554be5e998bb090151601d0dd8c80b97a7066de88da9264b80903f60ef512b31673507d42591d6ee62a1f444028a5a836e965819896f58f7a395d44d6b708f7bdb12fba830ad0c460d4d0b02b6dc04bb774cf19e0330deb73a5e4fd18010e13f5ca04cd798494b80c878fb17ae3b0853f36f8dc6e872d50e08144ae388e92508cc76e2007a5a4ceca684255aa1354c0f1e508383064f7471f8a75779e5eb39faf4022491b53728467ebb44410bd2e5ec0cac881f2362b856926b8fbb7adef57c97898051150e215610cb0eb71886eaaf0ad242e2fb7fd22738f0c3a47a90138b17fd5ade7705362abe1b0820c2dd4e7bbd956cfa59d1bf99c1a1c35954cd40798fc22abe89f8ea964e007884b74b54a1e9f76bc3738f136bf5f7696137c534ac3ca23c4d6ff0566faed9ad24bd425f195cd9a2061a3837295b3e3add85bf0b5f267b6c1f172cff08b0bac19557dc9502c5d92259d2708a38704611915eab7198734c03d71ae095c3645c6100f27aa5980e4beab2e54d98d980eaa31af8f11b649354d3ba558475b52467b80c9e5dcb74cdbfcb83b69a5a03f6c2eba80110f83161a7e367396443481b5d66c97c2c5935165117c91927b2ab5d0fae24640390d041e257d2533aaf820789ddbcd98f83ddb673159d7045299d10eebf70d67c581d2088afc3d6fc002dd3a6750d9997941d996deb619f86a5ed052395434b50b3504f13e38fbc8a1b8ddd1fef4fef0f98a70e612007b6637f1192056ac8fd423be1d2234bf46fa94b4b027787941de1b5ec9994fc86375bcb75ffd22e526def72fcc5613d3d1692cb6f425b344bbe21fdd23d9b36db9d1a39d265b1e0b1c4ebedea5ebbb2cb14db71eb989d43fa696a33289ed1349180312c1663a3cd40622dac0ccd06101054bc2c0b8b852ea5a5437479fafb7e5d29be8c194b08b5137d2dc9a697c967fc30b2d0574101d5a27405dc6f8e6335e698082b8d966b2ee6da5d6ba5e55328a01254a87b1448175c6f7c57844fcfa940452848b796426d66960e88404498839fe7bd31c021364950b6228b666da40", 0x1000}, {&(0x7f0000001f00)="b6df8d52b105ae8d382882fce0f90a8b7dd14984964a126314cb00cd73316f264d0bde95ccb5a2ee48c30209eb24505d7b98fec90c", 0x35}], 0x4, &(0x7f00000021c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r8}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r13}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x78}}, {{&(0x7f0000002240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004540)=[{&(0x7f00000022c0)="955b763105d8ae0fae9238a0ed4badd6d1f4e5f0bb461734600001c4a2a31b138931cde4a71be63ed1e510b451a569389563bf49c874208a8e9378718c85b632a14367dd8a4b7118e9264a9865191e6d847c709a4d9b2b242b3462c228a3f74da7e9c1192ffa7f511cf63f8ed23746fa42ac0c3b599c85ef64bb56612fa314a8bbd264b5e51e30caa4475c208113a53f9acf06593a8a1a5a9eec47ff0143399428d5da733ea390b7feb2dbeeedf857349ef7a962c6d758aa004c75155f05d4c90bd1e73265a05be0c6a13ac12cd13fb27c27df210d66282d0362c32a7afb3fb2ceea4c", 0xe3}, {&(0x7f00000023c0)="dfc7f5b22852805eea683ede15cfc9e812e4d20e023ca81f3344f33a747de5f1d9cb27001d06aca29a6b9be846d0853c1f4ebe66780a3bd50c42875c461dc298e081b1f680c5d0d0a98f23a78bf52504e1de2404437935d45e429e48522dee9e2e7ee0c01e7a96d70d677723b92ed550c4b515e4ba4eeae9a598d2ab52d9fa3520306db46d603efcc0f9600b7ecd7c57b1e62b5db0a0c38816d34df3b1bbc992c508ec44b560ecac745e2d521c7618f9ea30971878cb47ce1f84d56684a847834d1c638911975d7ddc375d349d0f71bdb8fcfa4f1552320a009cf1ffb7cca5dca4364a4883aecb376e6dd98c01fa2d2b536303eb5aacae8f9a10c4d77170b0f71e027488fdd071f503bee0b254ccb8c86a5de39da58df505d568995ec6d0c9aa4f0f9184f84a59122ce345ffc21da8f961673218c4c28f6af90e0701128c1a8f67cea42f10d0acc749d882513d151ee5a2d77d522926917f85b3654ddad0d47fe9dc9748a850ec138d5ce2150a6845eef5cd9be121fd554abaa2c3ed54be06845f73484d84a89a98c0778cb89b0e1f126a80316f781004590f492a2eef26e8629582cb3c1202462cc1ac370c3c7a2fe91c539b64b541e5a2df16a2942fa6c28911d357e2b0dde5663ca3004500d14373a77951c54c3a3a54ca83211f4ecc0af00fd5f239dde88979044348fd3b10692bcc08f1a0a9b251e0df29403e41e6185ef6f8ab5f0cdbbf54ce34dfca30acfaca51bcefbb88ff14ab892b93ba259270497f690fbf8c93854c3a736043c08ca82155505c069957502edc37b42c3228be03da27086ddaf193ce1d7636e7221ff342bd6a3168598bcceb7918c3cf386ba4fdad978aa5a5aa857be7c3917b1da3b9e663bbeb9a84516f205780975693f05a1eb91cceb9e8ce9ff0b5568a09bed9fb26d21ed9c058c07da6da47d4d3d55ea7ff931b77b13448e0aee933f0b623152aca40ba870fb548d6a46f5ff489392b185e68fd14badf4c19f30a57395bc305f7863f26b811309bc78afe0f4e521ffb0764a4152dbe268a36fa4d2b8f9fecca24bcd73b32a3d9a071a04c5136fab904a22e33b94da700965fc63e0c7b5cb459e0028f8e11242b54aadfd8a39b6373782f48e7b4460053e57df1e3e76031c99650294579b82511bf9d86e82b72170f66694d579f99dfb5658ebe9cb6c3b62760541267de13631a89802edee14da857d316114531f32f39cb80cfaa59ca179cf1330e5b913430329ab05ae48122584be64e08f6f43fe4e5de649b039d8059743ce9bb86ec35937b773999febd589d96d86962f5774eea910487c67f5d9911e9f34349d7106ea1d8c6c765614f81cb86f89413a6d803305fa25b63015175fff27f190d2c04df35b83496d395cd448d1aca8957fa87743dbacb3387018bc7ea613f0d72e5d584a6ce2be4464478597fc5d52dba3fa27745a520cd324c845d7374e9eebf81cf1d02e9e6393edde0a1ab0377e3f1d6e670c10110bae682d8e99c35b7ebd6c1387a933a8e3a48750407aefed4875ffe38b2960d9b38a1c93129ad2878913656493f439106456ee7dcf4059c3fbe4a0b133e203ed9dd4f63bdab7e54529e68ce35ed7b2e4d7709fb3d14efaa0c3ab3776b50c1c3b8e7eacd44c4e3e4f408a35952fbd83b350d41d3b8cab3813340c4e38e5a0f840f45561035a57bbd8a1b27cd26e0a8755df000de432cd17d8df1f1e061b5144c5d41af29f3ca9e6f3fdff8cf92738881cec2b3e498a808ef4c9dd32afbbdc70457244c2a20d7036716f05c75d447ccfd37720eced55e9c48083fa08e5c87b9efaed9cd7a352e7c94f09f6e74c6b12d8d7bc53c91400e969e8c4756bd9589fd4e02d94495163c64b1fafe22188ff8a15dc99ab8f5d12b08973c1b90ebeff7a11d7189887304a4f47922905e9a31db8c377e3b85f2002be2b2cba7c5efa3f13fdaf0cd847a6338a95e7c424dd81c376974e8b9b5f3fe201ef6839a861d14354061ac3e5bf15b6fde86fa36802c30916180603fd015405bd44a4e415f42f331b03dcaf3a9f7976ef113d546a7a2f7f27499053d23375dddfc4ed49c6159c1551974f52d9a5aa95ac8c3b19b4d821591e8affcb826314c4c1685bd48d5ed0e765866e66ac55064f21c45d90824c05f8e383e3df1230983be6edcd178e5d3c3bed9d185fef26b67e747908c5116b0fdfe5f7fb7143b1cfc00b4742804464778f610cfe8dfc68e07400016b89a745a9ccb4131e5d66f11daa4562f3a51f8aa8dccb26c90509c44bcbb8c48a5af00657096c5cd01b7cd00cc8369c9a7dccf01127680ac04b188094f739fcba08a28940da5da26132faa651c0e3c21426e193449de39792ecf3c8edd9b55d5e25a5cbf98a870cf9cf4b35ff80a6db20e5934b8dfc69ffcb80109013eee844cdc8497a98236c3b78339db85ec9c0a30d12051bae017304e7655a1e0e3dc324fed3c6a96463c8466ebff28d86e9905d5fe6413b8d2d754a097e6866af52f300a8d61a128e8e7b28e73273d7d1b177450859debb31a6f134884930159aefe7bf8f7f8460cb46c3336c186dd35973964d4817d327866114abcc1673d2fe79a6ff45421d3d8ba0078df929cc35f36102f4db48cc46f1863cf9956310190e9dd0b6c1f97c7ccf259caeade9e1e71a259049587453d5dec2a8574a6cf32032e49185a68155195b23f03fb714143c818e6122c13f648be1d0af4dd0057c5c1a181bf371f6587a82cea3b0213e7c40db9e53392f172464bb639c5e1582467b703ec848f426df466936bfe1e383ef4092d21a14ff4a1743a9ac210b48508b43ebe96fb87731ff96ef2498c19072c48a00102d2b6ea735a7fcb879e30a546f184474d1fff0b7f9144493457b5e067fcc6c6c97a7f4beda3945999257d821c1fd5ec0c2a4a962c3fe2a58f081986a8cb5f36ab4d509459510762cde029645ce0869060fc1570ce0048094ec04774e898897bfd202d3c290ee14f13665e4957ed275252550855d84c24fe51a20d8b793a844e57b9dce5056b8b8bcb2a4fe9d10a8658eae990e69df63b5b4baa3c88e2ec2e04e3be415eae5cc98cc30fecda38cf4a0819fccbc78751e48a5f3cd9b36f699f65f8b0fa88180f1474df57cc52b02b81c9462ed841f1d8b7e17c07c7992624343b6db62b6c126e06dc141803cfc047447dcced41da1c3581e074e824e3306dd04dfab73df58c54424d2bc3bbe843ba253b56d8b5104633f2273c563a2458a6e98eb5ff2e594037700ae83110b7e9693bb54b165604e29625cb1d50a8b65da20b71f73dfc6ae7e720fad5dd7f6e2788af3c69fb3a8cffef9844e633cb288c354f1f9536fb7a8487d31f5eef582efa528db9ac07ae8ede51f7c901a1da8587d5083ec6a3daa6418b6793119927a08cd2e982ca50b1d52c121ff7bf02ecd5c606a1c0bdbe6b0e19155c4ca5086ca4c512d3c974d81262318716c904a2a1889d98055b3866b0578bf669485af8920bb4ff537d7065d09250e5026d3fc9356b7121cedacddbb51e7f4ec4e167f0ae97cc2a537d54c71e40bda82046df108a4412895f2b90f9003822db538cd452e87ba9f10e510d31d7a27c34802c882dd7a3ac51740b6fe9c9275792e92ced1eaf5e8c10aad61245429b4da6cbdc0906694eabf2965c579a0af7781c31e7dbd2d6b16a9c61a26d7eb01c6356da6a87eee5abb7c78ab10e1fe5aee67ebb20e316d81219107c9c3f95417a0bc8d1077713cfbf2ac11957332b539c3273ab91ee7e23f6a45cc21569103907e62430f79c2b1fcf6cec0995d01ae40b263474ecd7e86648b64d9702bcd22f390f611fab0ded7d543c4f8dd1eaa1153b7113d62a3062ebf976c5eb58b140bc89a4b0f5bbea67830b45394eaa374d4bd5fddb70cd988eb20775f87ab8c35ec25314baa9108ca4799084fa2e373b9526cd9c8734e355cceac3145c9278285bc0878a0665b2c8ae0558e54856060208baefb291a95f83558087cf2d1aba39472aba000e746533b5b7d583c04c188c3db154095483e0f40cd62a96ef7063499874272dfafda6d000b6061e3bea5c5aaa743d70a5a3052d42d72966dc03e089c42f2be2d9a6f7761e3b31b9039f329c6dee82b27bd3ba3888cbb9286577646d89303533583fc9e297358199b0ceb952667b21ef061f05d41b9947571b2872900aa7e3fabf795a20a311f37d056d2c38b84cb3c1e2817e9b651b78a7ca0839d8982ff48d69dcd8cb0ae773cf7e04b1fb8ce6fe140c430654120810de2fbc19fae82377e81cd32fd08563790d17b837772e6ddb6971074f19f8483fa257c4a20f4ef85854b3503886f755885c19b8cadfd9b34c7ef44fbfab5ab9ba5838c5c76cd29a0bd5b5ffe829b9c0f1a99d08e895ef66aa09c4f0db56e14c83ffd63da0dfab7d6ffd2a9a63f07f50e8b3f61b005d49d097028086d1f8b97b5ff72d8cf88e314df171f1d22c3305e5837adbe872c953ec87becb059315267dc74163dab177de093b297e57dcc1a2d776acbfc2ceff7881a85264401b9bb8489f1efa523b370383de77c971a6f4bac7500ee2cc379175b98d62b6df5c71f9b62b03faa2acc17a32587b93e9f8926b25463ac0213b652c34626738facb57ef018cd091946ec23493cc224403e03174e174fde7c48c33dff349ab5c09ab1836ce1ac6a419750aa6687c3d881d143d964d858e3029ae44248a6a6c2bdd819a71f0cb4e4772690b9c6257fd73af3a272f66fff4a7e3fd15b7a898e745829777dcc035ea2455cb4757427a64b2d57c80d071d07e2e0d793606781af6310ef02fdb426445456f435b1ed15a9e68334e80fe1161a74e348f00492100821b505681b38cb4b1959522baf40eec9532313849cdfc00878e7b66ee2933138fac5e4ce897cd6d661c220b67739faea24f0a101b51be66da0956ade6ab40f3841acf9fe8cbe32e2d11c256fbc1a19b6608ae567aac2a6f2ea32d3e1aaffce4d34e4d22815d244eacb2258fc5956168baa701dc628c719a3d9e4ae6d43d5583d3424ad8fbcbbb3990265a5497dac2ee0924b7294e29294c1f34d1512d57592a5fbe06b97a580ff44f966a0246731817d34904a98b82e5c04a52f86ef5f29a7663417a034c2f40442eb0c0dde5382e90b4ba75531dda55ce4da25bcdfab533abec6b02ee75c80f142842d01dc72e5ecdcd476994e784639e7efd0f4e1c0f6a504fed28dea83ab96a996d16a0619b54f6b581047a0f41a53552b97e2b11209e17b1850e88199651fbd7c52e5b116c98303e2a0f4ecb397f8064811d7f55380aa22f282103ca97b0b6936701e4df339db2e5564702a4ce4f5e0915848caae8485f676c9cc37cf7746cd30954a51d24eb25622b2a0ec558d4d10d6e802407463eb4ccfac29d95aa2c8f9590d982ea571bcd4d45e83e92c21cc91b5c5debca516824a4e881282305542d46c2e093cb5fafd5bd48b798259f9f49b571d2cf2e7bd58050ce145b988c0fb552dec0baa389bfbdba6721ac782da33d2cf33df3bcd982daecbe668d89ebf51c7366176673623270330a803f85c24d9d4451f114415198caf9abc80406d850b2e6f1671bea7e6668c4fe274f0e0f39ad117c6a2b5709333b3c38197b56d0778f5aa885c683539b03ca86028e588b67d02ae53e65628a868f624d1a3e290e9ec5c6d3c4799d2793a80b6377a201dbf85805c8f6022d01341fce36adc8b5318301f39f383e81b8d4de9299a4e59178f8fcfa4f6f43ce50387bd2c17813a692c63aed307ae898a7f5e004d70addee54110799eb3dc02e2b4ba0e81d", 0x1000}, {&(0x7f00000033c0)="76f049dbddb359ad6bed", 0xa}, {&(0x7f0000003400)="3efcd54e7583d07400fb43c84483230a6b38f549ee4bfbdb0097658fe48f2751aa76e709274c539cc595f8f90d92ff043f1c78336633638648d4ce7fc88bffa3e8b4b6b337145045b844bdcd8c912f3ac3fb", 0x52}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="9e075d303cdae272066fb228a0a8d8e0d316b6050992f95431e78f85e86e4885a6716b31095bd2163d272b262da7ae52af758bb4011fa77bc425271de0a5ba8bdc0e1fd1fda695ec22757734e0f645939697d3b7ec0c4fdcb49f0cc061c4e172dc4cbd851d640019b9c2ed4f2d2fa412fed28706f4756757fd616572cbcb642b25ad54606d", 0x85}], 0x6, &(0x7f00000045c0)=[@rights={{0x1c, 0x1, 0x1, [r5, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb8, 0x4000000}}], 0x2, 0x1) (async) sendmsg$kcm(r3, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004700)="faf24670d2e627806c1b131e656f53", 0xf}, {&(0x7f0000004740)="ad81250118683d49f7ab1810bba4d1e07017dbd0b737", 0x16}, {&(0x7f0000004780)="b5f7ab237cb6cedea3b4348a40b9618c675434d81e15d85f12ccf8765f0aab9ec8363c101cc81a4497343b2ba401cbe3ccdc1a13d0f386fc32f780746a9aa9bcf34a4b54db4f751f25bde7eb5b16f3205ab76042fddf2e430ef4cb9d6431b4893ed8ece71332907f9e6f48526a2bbf90136a5aa83612efd7bd47f5293728b18e417699f4a2fc527159f0b24afa7ec9232b649780cbfc91e15ca812293ad30c0aeaa0658e4564756cf16faba8a9ec340e043c5fb2c3a7c8ec912c61794f2ea960780517ffdd17deb38e8c44dae77cd353d837fd967c2d18a6310b063de001d955abc01bcbad9e7f", 0xe7}, {&(0x7f0000004880)="588c98eb9e256ff07cac7a8e5444543078b18ef4f24b165294d4e0cbefc116d166adc656370e8e4ae4cd98f3eaafd5e948ca2114714e99b731e8782ad63924f33ed4c21d90c902c84ff5d2091848743c4739fd2b08bf5834341775356651c79623a622befa163a9173b25f5dbe400478e0a456f7f0226bfdfc17d9dcb69036f9f9ce34e075aa3d9ab2b8aee2807de7453a17323f78f2aa45ba014d921795dfa54fd7fcad4bc978317753dc0eff63f01ea3b9c1671815486e", 0xb8}], 0x4, &(0x7f0000004980)=[{0xd0, 0x84, 0x1, "7aab8e3ab491302460acd40db7f989f904148941098722e8ad6ea7f0b9f0d4111ea64929af6297c162263e197cdbf5a6f1d773531cc118fcc98b768cd1a3d65d34e62a1df4895cabade5e4826f2f8c18016d2c3ebc2c84fd882e622e7a1ac8bcd8d8adac4fd93430918052b18550dd548b991d585fbd9f7c1ed53fb3939e6d2c3815337c40e26a70470c0a1bbf41de31ae2e721cb223e8b79a6e7554b0774623b3d869efd9e956a67d2d984e5a0b33a6b00ee5b4f0692e3c62f53803215eb8"}, {0x40, 0x10b, 0x10, "6f59d8df7e3de179aacf81c92618b22271de19fd2245cfc4598af5d38e4a8c601ab972a5693e14c48652a2512d25"}, {0xb0, 0x119, 0xfe000, "55c5b07167e1a56821fe5398764ee722b0c2d0f52678e3b9190c6e6e31771b76f9a5f563d028e1a1635395403ecbabb4081a52d88814faa519d1566ef31e1852f959729e9fc6a5afe048d54bb86258fec99d1c908d2b5c649b1c3dccde0163f5708fb58fdb7ea8c32935def0ac8a66b7e8bf1dc52d990123312dc296b3d58cd645ae29db7c949478c3d8f930fe2adf624525ff6497b3abdf03a09fab1e"}, {0xb8, 0x1, 0x3, "699239056d3dd0a4d917bd4f934614b1424134fbf2b24de454dd114c3d032536d0061d0fa8874d4504eb60bc9b03327769a88106306f7dd999129a54f95c6e0a21bc7b7904dccec05b2556e0af063c776dbca4cf8876e5b06192319d027c60f7c0d7f270c8c08acac72d8cbeaa3f9cc21b135f990650243068a097080a0d58b75cacc452296f7e0a320bd94b443bcdd52c6bdc850c931ad9ab18f939f692497b13bb624046"}, {0x68, 0x102, 0x6, "5f642a8bd610004a937c5f75712a4786b55568afa57ed665244ba3df36a649cc53b9e2d07f079f0f21271a0efd3742098fa81508a016b374ed89a0d124b6ad206af1adaa02162487878b0f2a0a82d4c740c3e0"}], 0x2e0}, 0x8804) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000004cc0), 0x0) (async) r14 = accept4$inet6(r3, &(0x7f0000004d00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000004d40)=0x1c, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000004d80)={'batadv_slave_1\x00'}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000004dc0), 0xc0000, 0x0) write$tun(r15, &(0x7f0000004e00)={@void, @void, @mpls={[{0x0, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}], @generic="d944d5d1ed578052ba79e82655daa17b88abb36551987c983a65feae723f6b7fa00b5f366b06d039d143f562fe0386870bf034b2ff8795bf108bd0b9bc81637e234c5ee76d433f2f6b97a22a3fcf62d71dd6f6f1dc1ef1984307ce2b6db60d7711bdd24ac32a426ce7864b3daea87a6c779334ccc7e7e31370c47c52d04a3982f5bb797d8650282cba97ad302bdbdf1d3dabdfca408cceb6eb4a780805d696205a943c22cfed95895d3d9a1aba233391710529df47320f9b8ecd94651a573b024c4fb6c7cdfddb4b5c028b06241348b78212ba240c929dff66388c4f3c4767da022239829f3c2428e53444bb54b15218be3cd15d"}}, 0x100) (async) clock_gettime(0x0, &(0x7f0000005380)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004f00)=""/148, 0x94}, {&(0x7f0000004fc0)=""/39, 0x27}, {&(0x7f0000005000)=""/37, 0x25}, {&(0x7f0000005040)=""/123, 0x7b}, {&(0x7f00000050c0)=""/194, 0xc2}], 0x5, &(0x7f0000005240)=""/193, 0xc1}, 0x4}], 0x1, 0x40000020, &(0x7f00000053c0)={r16, r17+60000000}) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000005400)={@private, @private, @empty}, &(0x7f0000005440)=0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000005480)) 483.134981ms ago: executing program 3 (id=4960): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xce}], 0x1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x37b}, {}, {&(0x7f0000000100)="461897c8a6501105d296c9c2e452740acea707a9bca94b2507dbd7eacc1fd75065bc8405e867a3f1bc837126392e1b626cc3c064b516ff91cfe2a3e9f7c7d12660732ba12652a54e59b5d5da75e4b340c94401754bdc969c1844a63b15534e1f579a66a16a2b760ff77a3a99e0d51f4f58f0ba9a828dd05389c04db78a0d803901186240ba7b5d75be413cb9117cad991ccd415861db8f9c991a4b3847d60547651b8180f5a69bd92c8009d80a04a19115cdf2b67ec834de4dcbd8002bd849", 0xbf}], 0x3}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x40004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 462.667914ms ago: executing program 1 (id=4961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x114, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xc8, 0x8, 0x0, 0x1, [{0xc4, 0x100, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffd7d, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 200.171244ms ago: executing program 4 (id=4962): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfffffffffffffffe}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18011}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}]}}]}, 0x54}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) (rerun: 64) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000280), &(0x7f0000000480)=""/159, 0xfffffffffffffffe, &(0x7f00000002c0)="9431348c0eeb6203f3ae7ec50358c0", 0x3, 0xffffffffffffffff, 0x4}, 0x38) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r11, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800f6000000000018000000180000000a000000080000000100000fffffffff01000000030000f7acc175593000000000000300000400000000000000002e00"], 0x0, 0x3a, 0x0, 0x6}, 0x28) (async) splice(r0, 0x0, r10, 0x0, 0x10d00, 0xf) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 182.677605ms ago: executing program 1 (id=4963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xd0ffffff}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.863776ms ago: executing program 3 (id=4964): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 229.076µs ago: executing program 1 (id=4965): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)={0x84, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x48040) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x0, 0x0, 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) (async) unshare(0x6a040000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r9}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8a1}, 0x20000084) 0s ago: executing program 4 (id=4966): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r2, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB="070000003410000000000000", @ANYRES32=r4, @ANYRES64=r3], 0x20) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x8001, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback=r5, r0, 0x1, 0x20, 0x0, @void, @void, @void, @value=r6, r3}, 0x20) kernel console output (not intermixed with test programs): 'syz.1.3501': attribute type 10 has an invalid length. [ 498.259876][T18145] bridge0: port 3(macsec0) entered blocking state [ 498.282645][T18145] bridge0: port 3(macsec0) entered disabled state [ 498.292381][T18145] macsec0: entered allmulticast mode [ 498.302013][T18145] veth1_macvtap: entered allmulticast mode [ 498.314003][T18145] macsec0: entered promiscuous mode [ 498.324433][T18154] FAULT_INJECTION: forcing a failure. [ 498.324433][T18154] name failslab, interval 1, probability 0, space 0, times 0 [ 498.349481][T18145] bridge0: port 3(macsec0) entered blocking state [ 498.356017][T18145] bridge0: port 3(macsec0) entered forwarding state [ 498.367675][T18154] CPU: 1 UID: 0 PID: 18154 Comm: syz.2.3502 Not tainted syzkaller #0 PREEMPT(full) [ 498.367698][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.367713][T18154] Call Trace: [ 498.367721][T18154] [ 498.367728][T18154] dump_stack_lvl+0x189/0x250 [ 498.367753][T18154] ? __pfx____ratelimit+0x10/0x10 [ 498.367775][T18154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.367794][T18154] ? __pfx__printk+0x10/0x10 [ 498.367819][T18154] ? __pfx___might_resched+0x10/0x10 [ 498.367841][T18154] ? fs_reclaim_acquire+0x7d/0x100 [ 498.367864][T18154] should_fail_ex+0x414/0x560 [ 498.367885][T18154] should_failslab+0xa8/0x100 [ 498.367908][T18154] kmem_cache_alloc_node_noprof+0x77/0x710 [ 498.367927][T18154] ? __alloc_skb+0x112/0x2d0 [ 498.367950][T18154] ? netlink_autobind+0xdb/0x300 [ 498.367974][T18154] __alloc_skb+0x112/0x2d0 [ 498.367993][T18154] netlink_sendmsg+0x5c6/0xb30 [ 498.368021][T18154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.368043][T18154] ? aa_sock_msg_perm+0xf1/0x1d0 [ 498.368065][T18154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.368086][T18154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.368105][T18154] __sock_sendmsg+0x21c/0x270 [ 498.368128][T18154] ____sys_sendmsg+0x505/0x830 [ 498.368150][T18154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.368176][T18154] ? import_iovec+0x74/0xa0 [ 498.368201][T18154] ___sys_sendmsg+0x21f/0x2a0 [ 498.368222][T18154] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.368268][T18154] ? __fget_files+0x2a/0x420 [ 498.368287][T18154] ? __fget_files+0x3a0/0x420 [ 498.368313][T18154] __x64_sys_sendmsg+0x19b/0x260 [ 498.368334][T18154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.368362][T18154] ? __pfx_ksys_write+0x10/0x10 [ 498.368383][T18154] ? do_syscall_64+0xbe/0xfa0 [ 498.368407][T18154] do_syscall_64+0xfa/0xfa0 [ 498.368426][T18154] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.368446][T18154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.368463][T18154] ? clear_bhb_loop+0x60/0xb0 [ 498.368484][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.368506][T18154] RIP: 0033:0x7fa66338efc9 [ 498.368522][T18154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.368535][T18154] RSP: 002b:00007fa6642c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.368554][T18154] RAX: ffffffffffffffda RBX: 00007fa6635e6090 RCX: 00007fa66338efc9 [ 498.368567][T18154] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004 [ 498.368579][T18154] RBP: 00007fa6642c1090 R08: 0000000000000000 R09: 0000000000000000 [ 498.368590][T18154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.368600][T18154] R13: 00007fa6635e6128 R14: 00007fa6635e6090 R15: 00007fff12489e88 [ 498.368632][T18154] [ 498.698448][T18152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3503'. [ 498.956224][T18158] wg1 speed is unknown, defaulting to 1000 [ 499.082720][T18171] netlink: 'syz.3.3507': attribute type 1 has an invalid length. [ 499.139895][T18173] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3510'. [ 499.193007][T18171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.251084][T18164] veth3: entered promiscuous mode [ 499.265450][T18164] bond1: (slave veth3): Enslaving as an active interface with a down link [ 499.279551][T18181] xt_l2tp: missing protocol rule (udp|l2tpip) [ 499.330461][T18185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3515'. [ 499.342297][T18185] netlink: 'syz.2.3515': attribute type 10 has an invalid length. [ 499.361304][T18171] erspan0: entered allmulticast mode [ 499.412574][T18171] bond1: (slave erspan0): making interface the new active one [ 499.446561][T18171] erspan0: entered promiscuous mode [ 499.453164][T18171] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 499.463187][T18185] dummy0: entered promiscuous mode [ 499.469035][T18185] team0: Device dummy0 is up. Set it down before adding it as a team port [ 499.483229][T18188] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3516'. [ 499.613108][T18196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3520'. [ 499.750699][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 499.785830][T18206] wg1 speed is unknown, defaulting to 1000 [ 499.822163][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3521'. [ 499.994566][T18217] ip6_tunnel: non-ECT from fc00:0000:0000:0000:10e3:2801:0000:0000 with DS=0x3 [ 500.051390][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 500.134960][T18218] wg1 speed is unknown, defaulting to 1000 [ 500.563749][T18234] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 500.577798][T18235] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 500.589901][T18233] netlink: 'syz.4.3533': attribute type 2 has an invalid length. [ 500.997131][T18255] netlink: 'syz.4.3540': attribute type 13 has an invalid length. [ 501.010075][T18255] netlink: 'syz.4.3540': attribute type 17 has an invalid length. [ 501.060058][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'. [ 501.119983][T18255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.242085][T18256] wg1 speed is unknown, defaulting to 1000 [ 501.342300][T18260] wg1 speed is unknown, defaulting to 1000 [ 501.574215][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.974983][T18302] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 501.995572][T18302] bond1 (unregistering): Released all slaves [ 502.064523][T18310] validate_nla: 1 callbacks suppressed [ 502.064540][T18310] netlink: 'syz.1.3558': attribute type 1 has an invalid length. [ 502.115307][T18310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.179712][T18315] bond1: (slave ip6gretap1): making interface the new active one [ 502.189797][T18315] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 502.437267][T18330] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.577689][T18337] Bluetooth: MGMT ver 1.23 [ 502.595646][T18337] geneve2: entered promiscuous mode [ 502.670372][T18339] netlink: 'syz.2.3566': attribute type 4 has an invalid length. [ 503.331342][T18353] tipc: Enabled bearer , priority 0 [ 503.379812][T18353] syzkaller0: entered promiscuous mode [ 503.398305][T18353] syzkaller0: entered allmulticast mode [ 503.422252][T18352] __nla_validate_parse: 3 callbacks suppressed [ 503.422267][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'. [ 503.655580][T18348] tipc: Resetting bearer [ 503.699825][T18347] tipc: Resetting bearer [ 503.710580][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 503.721220][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 503.721826][T18347] tipc: Disabling bearer [ 504.075023][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 504.102715][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 504.139290][T18389] wg1 speed is unknown, defaulting to 1000 [ 504.512865][T18412] tipc: Enabled bearer , priority 0 [ 504.567830][T18412] syzkaller0: entered promiscuous mode [ 504.583202][T18412] syzkaller0: entered allmulticast mode [ 504.706981][T18412] syzkaller0: mtu less than device minimum [ 504.788152][T18425] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3596'. [ 504.797239][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3596'. [ 504.910501][T18412] tipc: Resetting bearer [ 504.958904][T18412] tipc: Disabling bearer [ 505.231035][T18450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3605'. [ 505.264396][T18450] netlink: 'syz.2.3605': attribute type 4 has an invalid length. [ 505.301526][T18450] netlink: 'syz.2.3605': attribute type 4 has an invalid length. [ 505.379618][T18457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.439490][T18450] syzkaller0: entered promiscuous mode [ 505.445092][T18450] syzkaller0: entered allmulticast mode [ 505.456662][T18462] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 505.533148][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'. [ 505.571900][T18465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3612'. [ 505.688278][T18467] veth1: entered promiscuous mode [ 505.696945][T18467] veth1: left promiscuous mode [ 505.788650][T18475] FAULT_INJECTION: forcing a failure. [ 505.788650][T18475] name failslab, interval 1, probability 0, space 0, times 0 [ 505.823119][T18475] CPU: 1 UID: 0 PID: 18475 Comm: syz.0.3615 Not tainted syzkaller #0 PREEMPT(full) [ 505.823145][T18475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 505.823156][T18475] Call Trace: [ 505.823163][T18475] [ 505.823171][T18475] dump_stack_lvl+0x189/0x250 [ 505.823195][T18475] ? __pfx____ratelimit+0x10/0x10 [ 505.823218][T18475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.823236][T18475] ? __pfx__printk+0x10/0x10 [ 505.823252][T18475] ? __sock_sendmsg+0x21c/0x270 [ 505.823275][T18475] ? do_syscall_64+0xfa/0xfa0 [ 505.823307][T18475] should_fail_ex+0x414/0x560 [ 505.823331][T18475] should_failslab+0xa8/0x100 [ 505.823355][T18475] kmem_cache_alloc_noprof+0x74/0x6e0 [ 505.823375][T18475] ? skb_clone+0x212/0x3a0 [ 505.823400][T18475] skb_clone+0x212/0x3a0 [ 505.823423][T18475] __netlink_deliver_tap+0x404/0x850 [ 505.823454][T18475] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.823480][T18475] netlink_deliver_tap+0x19c/0x1b0 [ 505.823500][T18475] netlink_sendskb+0x68/0x140 [ 505.823527][T18475] netlink_unicast+0x397/0x9e0 [ 505.823549][T18475] ? __asan_memcpy+0x40/0x70 [ 505.823575][T18475] ? __pfx_netlink_unicast+0x10/0x10 [ 505.823610][T18475] netlink_rcv_skb+0x28c/0x470 [ 505.823630][T18475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.823657][T18475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.823687][T18475] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.823714][T18475] netlink_unicast+0x82f/0x9e0 [ 505.823751][T18475] ? __pfx_netlink_unicast+0x10/0x10 [ 505.823776][T18475] ? netlink_sendmsg+0x642/0xb30 [ 505.823790][T18475] ? skb_put+0x11b/0x210 [ 505.823811][T18475] netlink_sendmsg+0x805/0xb30 [ 505.823839][T18475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.823860][T18475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 505.823883][T18475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.823905][T18475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.823924][T18475] __sock_sendmsg+0x21c/0x270 [ 505.823951][T18475] ____sys_sendmsg+0x505/0x830 [ 505.823977][T18475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.824006][T18475] ? import_iovec+0x74/0xa0 [ 505.824032][T18475] ___sys_sendmsg+0x21f/0x2a0 [ 505.824055][T18475] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.824114][T18475] ? __fget_files+0x2a/0x420 [ 505.824134][T18475] ? __fget_files+0x3a0/0x420 [ 505.824167][T18475] __x64_sys_sendmsg+0x19b/0x260 [ 505.824190][T18475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.824220][T18475] ? __pfx_ksys_write+0x10/0x10 [ 505.824244][T18475] ? do_syscall_64+0xbe/0xfa0 [ 505.824269][T18475] do_syscall_64+0xfa/0xfa0 [ 505.824288][T18475] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.824310][T18475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.824327][T18475] ? clear_bhb_loop+0x60/0xb0 [ 505.824349][T18475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.824366][T18475] RIP: 0033:0x7fb6c938efc9 [ 505.824383][T18475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.824397][T18475] RSP: 002b:00007fb6ca146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.824417][T18475] RAX: ffffffffffffffda RBX: 00007fb6c95e5fa0 RCX: 00007fb6c938efc9 [ 505.824430][T18475] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004 [ 505.824442][T18475] RBP: 00007fb6ca146090 R08: 0000000000000000 R09: 0000000000000000 [ 505.824453][T18475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.824464][T18475] R13: 00007fb6c95e6038 R14: 00007fb6c95e5fa0 R15: 00007ffe796f8b08 [ 505.824501][T18475] [ 506.928749][T18530] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 507.575843][T18552] FAULT_INJECTION: forcing a failure. [ 507.575843][T18552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.603087][T18552] CPU: 1 UID: 0 PID: 18552 Comm: syz.2.3638 Not tainted syzkaller #0 PREEMPT(full) [ 507.603112][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.603122][T18552] Call Trace: [ 507.603128][T18552] [ 507.603135][T18552] dump_stack_lvl+0x189/0x250 [ 507.603159][T18552] ? __pfx____ratelimit+0x10/0x10 [ 507.603180][T18552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.603198][T18552] ? __pfx__printk+0x10/0x10 [ 507.603229][T18552] should_fail_ex+0x414/0x560 [ 507.603252][T18552] _copy_to_user+0x31/0xb0 [ 507.603277][T18552] simple_read_from_buffer+0xe1/0x170 [ 507.603303][T18552] proc_fail_nth_read+0x1b3/0x220 [ 507.603324][T18552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.603346][T18552] ? rw_verify_area+0x2a6/0x4d0 [ 507.603363][T18552] ? __lock_acquire+0xab9/0xd20 [ 507.603383][T18552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.603401][T18552] vfs_read+0x200/0xa30 [ 507.603418][T18552] ? fdget_pos+0x247/0x320 [ 507.603441][T18552] ? __pfx___mutex_lock+0x10/0x10 [ 507.603465][T18552] ? __pfx_vfs_read+0x10/0x10 [ 507.603485][T18552] ? __fget_files+0x2a/0x420 [ 507.603509][T18552] ? __fget_files+0x3a0/0x420 [ 507.603527][T18552] ? __fget_files+0x2a/0x420 [ 507.603555][T18552] ksys_read+0x145/0x250 [ 507.603576][T18552] ? __pfx_ksys_read+0x10/0x10 [ 507.603598][T18552] ? do_syscall_64+0xbe/0xfa0 [ 507.603625][T18552] do_syscall_64+0xfa/0xfa0 [ 507.603645][T18552] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.603667][T18552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.603684][T18552] ? clear_bhb_loop+0x60/0xb0 [ 507.603706][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.603724][T18552] RIP: 0033:0x7fa66338d9dc [ 507.603740][T18552] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 507.603754][T18552] RSP: 002b:00007fa6642e2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.603773][T18552] RAX: ffffffffffffffda RBX: 00007fa6635e5fa0 RCX: 00007fa66338d9dc [ 507.603786][T18552] RDX: 000000000000000f RSI: 00007fa6642e20a0 RDI: 0000000000000007 [ 507.603797][T18552] RBP: 00007fa6642e2090 R08: 0000000000000000 R09: 0000000000000000 [ 507.603807][T18552] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.603817][T18552] R13: 00007fa6635e6038 R14: 00007fa6635e5fa0 R15: 00007fff12489e88 [ 507.603850][T18552] [ 508.064402][T18578] FAULT_INJECTION: forcing a failure. [ 508.064402][T18578] name failslab, interval 1, probability 0, space 0, times 0 [ 508.077832][T18578] CPU: 1 UID: 0 PID: 18578 Comm: syz.0.3646 Not tainted syzkaller #0 PREEMPT(full) [ 508.077857][T18578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.077867][T18578] Call Trace: [ 508.077874][T18578] [ 508.077881][T18578] dump_stack_lvl+0x189/0x250 [ 508.077905][T18578] ? __pfx____ratelimit+0x10/0x10 [ 508.077928][T18578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.077947][T18578] ? __pfx__printk+0x10/0x10 [ 508.077962][T18578] ? __sock_sendmsg+0x21c/0x270 [ 508.077998][T18578] ? do_syscall_64+0xfa/0xfa0 [ 508.078030][T18578] should_fail_ex+0x414/0x560 [ 508.078052][T18578] should_failslab+0xa8/0x100 [ 508.078077][T18578] kmem_cache_alloc_noprof+0x74/0x6e0 [ 508.078096][T18578] ? skb_clone+0x212/0x3a0 [ 508.078121][T18578] skb_clone+0x212/0x3a0 [ 508.078144][T18578] __netlink_deliver_tap+0x404/0x850 [ 508.078176][T18578] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.078196][T18578] netlink_deliver_tap+0x19c/0x1b0 [ 508.078213][T18578] netlink_sendskb+0x68/0x140 [ 508.078239][T18578] netlink_unicast+0x397/0x9e0 [ 508.078261][T18578] ? __asan_memcpy+0x40/0x70 [ 508.078287][T18578] ? __pfx_netlink_unicast+0x10/0x10 [ 508.078320][T18578] netlink_rcv_skb+0x28c/0x470 [ 508.078337][T18578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.078364][T18578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.078393][T18578] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.078419][T18578] netlink_unicast+0x82f/0x9e0 [ 508.078453][T18578] ? __pfx_netlink_unicast+0x10/0x10 [ 508.078479][T18578] ? netlink_sendmsg+0x642/0xb30 [ 508.078495][T18578] ? skb_put+0x11b/0x210 [ 508.078516][T18578] netlink_sendmsg+0x805/0xb30 [ 508.078545][T18578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.078567][T18578] ? aa_sock_msg_perm+0xf1/0x1d0 [ 508.078589][T18578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.078611][T18578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.078630][T18578] __sock_sendmsg+0x21c/0x270 [ 508.078656][T18578] ____sys_sendmsg+0x505/0x830 [ 508.078682][T18578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.078712][T18578] ? import_iovec+0x74/0xa0 [ 508.078738][T18578] ___sys_sendmsg+0x21f/0x2a0 [ 508.078761][T18578] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.078820][T18578] ? __fget_files+0x2a/0x420 [ 508.078840][T18578] ? __fget_files+0x3a0/0x420 [ 508.078873][T18578] __x64_sys_sendmsg+0x19b/0x260 [ 508.078896][T18578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.078925][T18578] ? __pfx_ksys_write+0x10/0x10 [ 508.078949][T18578] ? do_syscall_64+0xbe/0xfa0 [ 508.078975][T18578] do_syscall_64+0xfa/0xfa0 [ 508.079002][T18578] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.079024][T18578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.079041][T18578] ? clear_bhb_loop+0x60/0xb0 [ 508.079063][T18578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.079080][T18578] RIP: 0033:0x7fb6c938efc9 [ 508.079096][T18578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.079111][T18578] RSP: 002b:00007fb6ca146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.079130][T18578] RAX: ffffffffffffffda RBX: 00007fb6c95e5fa0 RCX: 00007fb6c938efc9 [ 508.079143][T18578] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004 [ 508.079154][T18578] RBP: 00007fb6ca146090 R08: 0000000000000000 R09: 0000000000000000 [ 508.079165][T18578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.079175][T18578] R13: 00007fb6c95e6038 R14: 00007fb6c95e5fa0 R15: 00007ffe796f8b08 [ 508.079206][T18578] [ 508.520254][T18584] __nla_validate_parse: 7 callbacks suppressed [ 508.520271][T18584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3648'. [ 508.551294][T18587] netlink: 'syz.2.3649': attribute type 4 has an invalid length. [ 508.560065][T18587] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3649'. [ 508.601611][T18587] .`: renamed from bond0 (while UP) [ 508.634369][T18581] bridge: RTM_NEWNEIGH with invalid ether address [ 508.936004][T18603] wg1 speed is unknown, defaulting to 1000 [ 508.998204][T18604] tipc: Enabled bearer , priority 0 [ 509.043442][T18604] syzkaller0: entered promiscuous mode [ 509.052690][T18604] syzkaller0: entered allmulticast mode [ 509.130060][T18604] tipc: Resetting bearer [ 509.161877][T18602] tipc: Resetting bearer [ 509.205619][T18602] tipc: Disabling bearer [ 509.516372][T18631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3662'. [ 509.546466][T18631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3662'. [ 509.601383][T18631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3662'. [ 509.666098][T18636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3665'. [ 509.697589][T18636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3665'. [ 509.739025][T18638] netlink: 'syz.4.3666': attribute type 21 has an invalid length. [ 509.812936][T18638] netlink: 'syz.4.3666': attribute type 6 has an invalid length. [ 509.823013][T18638] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3666'. [ 509.887499][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 510.012439][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3671'. [ 510.058831][T18654] team1: entered promiscuous mode [ 510.075822][T18654] team1: entered allmulticast mode [ 510.378364][T18663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3673'. [ 510.494648][T18669] veth0: entered promiscuous mode [ 511.330087][T18713] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 511.361839][T12260] erspan0: left promiscuous mode [ 511.611724][T18714] tipc: Started in network mode [ 511.616747][T18714] tipc: Node identity 2a9231556158, cluster identity 4711 [ 511.624197][T18714] tipc: Enabled bearer , priority 0 [ 511.632218][T18714] syzkaller0: entered promiscuous mode [ 511.669619][T18714] syzkaller0: entered allmulticast mode [ 511.743350][T18727] netem: change failed [ 512.299609][T18710] tipc: Resetting bearer [ 512.489742][T18710] tipc: Disabling bearer [ 512.695381][T18758] netlink: 'syz.4.3703': attribute type 12 has an invalid length. [ 512.735393][T18758] netlink: 'syz.4.3703': attribute type 4 has an invalid length. [ 512.955104][T18764] wg1 speed is unknown, defaulting to 1000 [ 513.795426][T18804] wg1 speed is unknown, defaulting to 1000 [ 513.870933][T18811] xt_TCPMSS: Only works on TCP SYN packets [ 513.979190][ T5893] wg1 speed is unknown, defaulting to 1000 [ 514.525566][T18838] __nla_validate_parse: 10 callbacks suppressed [ 514.525584][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3723'. [ 514.595230][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3723'. [ 514.620482][T18842] netlink: 'syz.0.3725': attribute type 13 has an invalid length. [ 514.665107][T18842] netlink: 'syz.0.3725': attribute type 17 has an invalid length. [ 514.946846][T18842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.067620][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 515.084532][T18853] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3728'. [ 515.226417][T18865] netlink: 'syz.3.3731': attribute type 10 has an invalid length. [ 515.243744][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'. [ 515.274931][T18865] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 515.652391][T18889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3739'. [ 515.673301][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'. [ 515.714153][T18876] "syz.3.3736" (18876) uses obsolete ecb(arc4) skcipher [ 516.071695][T18897] wg1 speed is unknown, defaulting to 1000 [ 516.095823][T18906] netlink: 'syz.3.3744': attribute type 1 has an invalid length. [ 516.107392][T18906] netlink: 'syz.3.3744': attribute type 2 has an invalid length. [ 516.119174][T18906] netlink: 'syz.3.3744': attribute type 1 has an invalid length. [ 516.128051][T18906] netlink: 'syz.3.3744': attribute type 2 has an invalid length. [ 516.166010][T18893] wg1 speed is unknown, defaulting to 1000 [ 516.228252][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 516.280365][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3745'. [ 516.745096][T18934] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 516.745596][T18929] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3753'. [ 516.945777][T18942] bridge_slave_0: left allmulticast mode [ 516.952193][T18942] bridge_slave_0: left promiscuous mode [ 516.962787][T18942] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.968451][T18934] x_tables: duplicate underflow at hook 1 [ 516.992021][T18942] bridge_slave_1: left allmulticast mode [ 517.005410][T18934] netlink: 'syz.4.3754': attribute type 10 has an invalid length. [ 517.017590][T18942] bridge_slave_1: left promiscuous mode [ 517.024239][T18942] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.054669][T18942] bond0: (slave bond_slave_0): Releasing backup interface [ 517.085599][T18942] bond0: (slave bond_slave_1): Releasing backup interface [ 517.099674][T18942] team0: Port device team_slave_0 removed [ 517.111501][T18942] team0: Port device team_slave_1 removed [ 517.118309][T18942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.125682][T18942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.134621][T18942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.142744][T18942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.153449][T18942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 517.189304][T18934] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 517.212659][T18934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.227250][T18934] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 518.279995][T19018] wg1 speed is unknown, defaulting to 1000 [ 518.505133][T19017] wg1 speed is unknown, defaulting to 1000 [ 518.546487][T19025] wg1 speed is unknown, defaulting to 1000 [ 518.611307][T19003] wg1 speed is unknown, defaulting to 1000 [ 518.674422][T19037] lo speed is unknown, defaulting to 1000 [ 518.806172][T19037] lo speed is unknown, defaulting to 1000 [ 518.821163][T19037] lo speed is unknown, defaulting to 1000 [ 518.860789][T19037] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 519.060331][T19049] netlink: 'syz.1.3787': attribute type 10 has an invalid length. [ 519.081257][T19037] lo speed is unknown, defaulting to 1000 [ 519.093955][T19037] lo speed is unknown, defaulting to 1000 [ 519.129670][T19037] lo speed is unknown, defaulting to 1000 [ 519.154389][T19037] lo speed is unknown, defaulting to 1000 [ 519.170417][T19037] lo speed is unknown, defaulting to 1000 [ 519.193424][T19037] lo speed is unknown, defaulting to 1000 [ 519.210201][T19037] lo speed is unknown, defaulting to 1000 [ 519.231790][T19037] lo speed is unknown, defaulting to 1000 [ 519.243482][T19037] lo speed is unknown, defaulting to 1000 [ 519.281317][T19037] lo speed is unknown, defaulting to 1000 [ 519.289628][T19037] lo speed is unknown, defaulting to 1000 [ 519.301923][T19037] lo speed is unknown, defaulting to 1000 [ 519.844354][T19079] __nla_validate_parse: 6 callbacks suppressed [ 519.844371][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 519.941731][T19074] wg1 speed is unknown, defaulting to 1000 [ 519.982526][T19081] wg1 speed is unknown, defaulting to 1000 [ 519.993622][T19074] lo speed is unknown, defaulting to 1000 [ 520.043414][T19081] lo speed is unknown, defaulting to 1000 [ 520.728977][T19103] netlink: 'syz.4.3805': attribute type 3 has an invalid length. [ 520.748849][T19103] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3805'. [ 521.724403][T19147] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 521.786175][T19147] bond1 (unregistering): Released all slaves [ 521.790316][T19158] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3823'. [ 521.836028][T12260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.839494][T19158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3823'. [ 521.887661][T12260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.992295][T19155] wg1 speed is unknown, defaulting to 1000 [ 522.008795][T19155] lo speed is unknown, defaulting to 1000 [ 522.107582][T19163] wg1 speed is unknown, defaulting to 1000 [ 522.198250][T19163] lo speed is unknown, defaulting to 1000 [ 522.270660][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3827'. [ 522.751624][T19197] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3833'. [ 523.021811][T19211] netem: incorrect ge model size [ 523.027191][T19211] netem: change failed [ 523.074887][T19211] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 523.218338][T19220] Cannot find del_set index 0 as target [ 523.241339][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3842'. [ 523.506849][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 523.598574][T19252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3847'. [ 524.096902][T19266] wg1 speed is unknown, defaulting to 1000 [ 524.124958][T19266] lo speed is unknown, defaulting to 1000 [ 524.159369][T19272] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3856'. [ 524.207069][T19279] wg1 speed is unknown, defaulting to 1000 [ 524.238706][T19279] lo speed is unknown, defaulting to 1000 [ 524.244586][T19283] wg1 speed is unknown, defaulting to 1000 [ 524.266494][T19283] lo speed is unknown, defaulting to 1000 [ 524.838767][T19301] syz_tun: entered allmulticast mode [ 524.858263][T19301] __nla_validate_parse: 1 callbacks suppressed [ 524.858281][T19301] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3863'. [ 524.913754][T19307] syz_tun: left allmulticast mode [ 524.966807][T19301] dvmrp1: entered allmulticast mode [ 525.157689][T19322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3865'. [ 525.280950][T19301] wg1 speed is unknown, defaulting to 1000 [ 525.427084][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 525.465148][T19301] lo speed is unknown, defaulting to 1000 [ 525.562867][T19325] wg1 speed is unknown, defaulting to 1000 [ 525.596991][T19325] lo speed is unknown, defaulting to 1000 [ 525.889367][T19340] wg1 speed is unknown, defaulting to 1000 [ 526.057825][T19340] lo speed is unknown, defaulting to 1000 [ 526.080296][T19351] wg1 speed is unknown, defaulting to 1000 [ 526.165317][T19351] lo speed is unknown, defaulting to 1000 [ 526.224177][T19357] wg1 speed is unknown, defaulting to 1000 [ 526.262768][T19357] lo speed is unknown, defaulting to 1000 [ 526.302818][T19362] vxcan3: entered allmulticast mode [ 526.713202][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'. [ 527.250458][T19419] netlink: 'syz.1.3893': attribute type 3 has an invalid length. [ 527.267421][T19419] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3893'. [ 527.512325][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 527.546338][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3897'. [ 527.615784][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'. [ 527.681993][T19433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3898'. [ 527.843791][T19448] netlink: 'syz.0.3903': attribute type 12 has an invalid length. [ 527.896142][T19448] netlink: 'syz.0.3903': attribute type 12 has an invalid length. [ 527.929177][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3905'. [ 528.109716][T19459] syzkaller0: entered promiscuous mode [ 528.120349][T19459] syzkaller0: entered allmulticast mode [ 528.137103][T19444] wg1 speed is unknown, defaulting to 1000 [ 528.137213][T19459] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 528.228052][T19444] lo speed is unknown, defaulting to 1000 [ 530.077199][T19541] bond_slave_1: entered promiscuous mode [ 530.083869][T19541] bond_slave_1: entered allmulticast mode [ 530.258311][T19556] sch_tbf: peakrate 7 is lower than or equals to rate 9675163233977606466 ! [ 530.395579][T19562] __nla_validate_parse: 4 callbacks suppressed [ 530.395595][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 530.425514][T19562] veth0: entered promiscuous mode [ 530.434703][T19562] veth0: left promiscuous mode [ 530.715577][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'. [ 530.760740][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 531.272182][T19595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3954'. [ 531.346533][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 531.746793][T19621] netlink: 'syz.1.3964': attribute type 3 has an invalid length. [ 531.806425][T19623] netlink: 'syz.4.3965': attribute type 13 has an invalid length. [ 531.826934][T19623] netlink: 'syz.4.3965': attribute type 17 has an invalid length. [ 531.842682][T19623] netlink: 'syz.4.3965': attribute type 27 has an invalid length. [ 531.967203][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3969'. [ 531.995314][T19635] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 532.040022][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3972'. [ 532.254025][T19650] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3975'. [ 532.501292][T19664] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3980'. [ 532.538297][T19656] tipc: Enabled bearer , priority 0 [ 532.556588][T19656] syzkaller0: entered promiscuous mode [ 532.587672][T19656] syzkaller0: entered allmulticast mode [ 532.610283][T19656] tipc: Resetting bearer [ 532.631190][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'. [ 532.640614][T19655] tipc: Resetting bearer [ 532.662216][T19655] tipc: Disabling bearer [ 532.718248][T19674] wg1 speed is unknown, defaulting to 1000 [ 532.741072][T19674] lo speed is unknown, defaulting to 1000 [ 532.939528][T19685] tipc: Enabled bearer , priority 10 [ 533.290826][T19697] wg1 speed is unknown, defaulting to 1000 [ 533.322474][T19697] lo speed is unknown, defaulting to 1000 [ 533.996091][T19724] FAULT_INJECTION: forcing a failure. [ 533.996091][T19724] name failslab, interval 1, probability 0, space 0, times 0 [ 534.009238][T19724] CPU: 1 UID: 0 PID: 19724 Comm: syz.1.4006 Not tainted syzkaller #0 PREEMPT(full) [ 534.009263][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.009273][T19724] Call Trace: [ 534.009281][T19724] [ 534.009288][T19724] dump_stack_lvl+0x189/0x250 [ 534.009313][T19724] ? __pfx____ratelimit+0x10/0x10 [ 534.009335][T19724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.009354][T19724] ? __pfx__printk+0x10/0x10 [ 534.009379][T19724] ? __pfx___might_resched+0x10/0x10 [ 534.009413][T19724] ? fs_reclaim_acquire+0x7d/0x100 [ 534.009440][T19724] should_fail_ex+0x414/0x560 [ 534.009463][T19724] should_failslab+0xa8/0x100 [ 534.009487][T19724] __kmalloc_cache_noprof+0x6f/0x6f0 [ 534.009505][T19724] ? __genradix_ptr_alloc+0x463/0x4a0 [ 534.009528][T19724] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 534.009558][T19724] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 534.009590][T19724] sctp_association_new+0x15d3/0x25f0 [ 534.009624][T19724] sctp_connect_new_asoc+0x2c5/0x690 [ 534.009646][T19724] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 534.009661][T19724] ? __local_bh_enable_ip+0x12d/0x1c0 [ 534.009691][T19724] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 534.009714][T19724] ? security_sctp_bind_connect+0x7e/0x2e0 [ 534.009741][T19724] sctp_sendmsg+0x155c/0x2810 [ 534.009780][T19724] ? __pfx_sctp_sendmsg+0x10/0x10 [ 534.009809][T19724] ? aa_sk_perm+0x81e/0x950 [ 534.009832][T19724] ? __pfx_aa_sk_perm+0x10/0x10 [ 534.009853][T19724] ? sock_rps_record_flow+0x19/0x410 [ 534.009870][T19724] ? inet_sendmsg+0x2f4/0x370 [ 534.009890][T19724] __sock_sendmsg+0x19c/0x270 [ 534.009917][T19724] __sys_sendto+0x3bd/0x520 [ 534.009938][T19724] ? __pfx___sys_sendto+0x10/0x10 [ 534.009953][T19724] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 534.009990][T19724] ? __fget_files+0x3a0/0x420 [ 534.010023][T19724] ? ksys_write+0x22a/0x250 [ 534.010045][T19724] ? __pfx_ksys_write+0x10/0x10 [ 534.010068][T19724] __x64_sys_sendto+0xde/0x100 [ 534.010090][T19724] do_syscall_64+0xfa/0xfa0 [ 534.010111][T19724] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.010132][T19724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.010150][T19724] ? clear_bhb_loop+0x60/0xb0 [ 534.010171][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.010188][T19724] RIP: 0033:0x7f16b6b8efc9 [ 534.010205][T19724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.010219][T19724] RSP: 002b:00007f16b7a03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 534.010240][T19724] RAX: ffffffffffffffda RBX: 00007f16b6de5fa0 RCX: 00007f16b6b8efc9 [ 534.010253][T19724] RDX: 000000000000ff04 RSI: 0000200000000000 RDI: 000000000000000b [ 534.010265][T19724] RBP: 00007f16b7a03090 R08: 0000200000000280 R09: 0000000000000010 [ 534.010277][T19724] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000001 [ 534.010288][T19724] R13: 00007f16b6de6038 R14: 00007f16b6de5fa0 R15: 00007ffc9796a268 [ 534.010328][T19724] [ 534.099750][ T983] tipc: Node number set to 1271542101 [ 534.966724][T19773] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 535.450047][T19804] __nla_validate_parse: 12 callbacks suppressed [ 535.450064][T19804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4035'. [ 535.630813][T19812] netlink: 'syz.0.4037': attribute type 13 has an invalid length. [ 535.652573][T19812] netlink: 'syz.0.4037': attribute type 17 has an invalid length. [ 535.710596][T19812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.825096][T19812] wg1 speed is unknown, defaulting to 1000 [ 535.833234][T19812] lo speed is unknown, defaulting to 1000 [ 535.910109][T19831] bridge_slave_0: left allmulticast mode [ 535.915792][T19831] bridge_slave_0: left promiscuous mode [ 535.961868][T19831] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.984897][T19831] bridge_slave_1: left allmulticast mode [ 535.997419][T19831] bridge_slave_1: left promiscuous mode [ 536.003736][T19831] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.016211][T19839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4045'. [ 536.027940][T19839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4045'. [ 536.037248][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4045'. [ 536.059035][T19831] bond0: (slave bond_slave_0): Releasing backup interface [ 536.076090][T19840] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.088645][T19831] bond0: (slave bond_slave_1): Releasing backup interface [ 536.119667][T19831] team0: Port device team_slave_0 removed [ 536.147802][T19831] team0: Port device team_slave_1 removed [ 536.156635][T19831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.165096][T19831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.175099][T19831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.183995][T19831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.196727][T19831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 536.289657][T19840] team0: Mode changed to "loadbalance" [ 536.306612][T19833] wg1 speed is unknown, defaulting to 1000 [ 536.324317][T19833] lo speed is unknown, defaulting to 1000 [ 536.936191][T19856] wg1 speed is unknown, defaulting to 1000 [ 536.943946][T19856] lo speed is unknown, defaulting to 1000 [ 536.968733][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 537.180480][T19885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4058'. [ 537.222649][T19885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4058'. [ 537.247930][T19885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4058'. [ 537.521737][T19905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4062'. [ 537.566294][T19909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4065'. [ 537.584048][T19910] xt_ecn: cannot match TCP bits for non-tcp packets [ 537.741321][T19911] bridge0: port 3(macsec0) entered disabled state [ 538.038686][T19911] bond_slave_1: left promiscuous mode [ 538.044450][T19911] bond_slave_1: left allmulticast mode [ 538.192922][T19911] veth1_macvtap: left allmulticast mode [ 538.277156][T19911] geneve2: left promiscuous mode [ 538.322304][T19920] hsr_slave_0: left promiscuous mode [ 538.331512][T19920] hsr_slave_1: left promiscuous mode [ 538.392991][T12255] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.408124][T12255] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.447721][T12255] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.461285][T12255] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.192913][T19984] gtp0: entered promiscuous mode [ 539.198466][T19984] gtp0: entered allmulticast mode [ 539.880673][T20014] wg1 speed is unknown, defaulting to 1000 [ 539.888519][T20014] lo speed is unknown, defaulting to 1000 [ 539.985118][T20017] wg1 speed is unknown, defaulting to 1000 [ 540.005108][T20017] lo speed is unknown, defaulting to 1000 [ 540.115081][T20021] netlink: 'syz.3.4098': attribute type 30 has an invalid length. [ 540.296830][T20039] siw: device registration error -23 [ 540.498060][T20046] __nla_validate_parse: 12 callbacks suppressed [ 540.498078][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4105'. [ 540.589624][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4105'. [ 540.709925][T20051] wg1 speed is unknown, defaulting to 1000 [ 540.729637][T20051] lo speed is unknown, defaulting to 1000 [ 540.762190][T20052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 540.989892][T20061] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4109'. [ 541.252762][T20078] sctp: [Deprecated]: syz.1.4115 (pid 20078) Use of int in max_burst socket option deprecated. [ 541.252762][T20078] Use struct sctp_assoc_value instead [ 542.923503][T20096] kthread_run failed with err -4 [ 542.929934][T20100] netlink: 'syz.1.4121': attribute type 3 has an invalid length. [ 542.942729][T20100] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4121'. [ 543.053601][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4122'. [ 543.075370][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 543.116376][T20110] netlink: 'syz.1.4124': attribute type 3 has an invalid length. [ 543.125616][T20110] netlink: 'syz.1.4124': attribute type 1 has an invalid length. [ 543.138971][T20110] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4124'. [ 543.400490][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'. [ 543.432106][T20131] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 543.449850][T20131] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 543.494915][T20131] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 543.562620][T20122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4127'. [ 543.712306][T20149] netlink: 'syz.1.4131': attribute type 12 has an invalid length. [ 543.749589][T20155] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4135'. [ 544.044781][T20168] bridge_slave_1: left allmulticast mode [ 544.052557][T20168] bridge_slave_1: left promiscuous mode [ 544.060514][T20168] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.071052][T20168] bridge_slave_0: left allmulticast mode [ 544.076774][T20168] bridge_slave_0: left promiscuous mode [ 544.082668][T20168] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.264133][T20172] : renamed from bond_slave_0 [ 544.635703][T20194] FAULT_INJECTION: forcing a failure. [ 544.635703][T20194] name failslab, interval 1, probability 0, space 0, times 0 [ 544.662609][T20194] CPU: 0 UID: 0 PID: 20194 Comm: syz.0.4149 Not tainted syzkaller #0 PREEMPT(full) [ 544.662636][T20194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.662647][T20194] Call Trace: [ 544.662654][T20194] [ 544.662662][T20194] dump_stack_lvl+0x189/0x250 [ 544.662687][T20194] ? __pfx____ratelimit+0x10/0x10 [ 544.662709][T20194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.662728][T20194] ? __pfx__printk+0x10/0x10 [ 544.662753][T20194] ? __pfx___might_resched+0x10/0x10 [ 544.662781][T20194] should_fail_ex+0x414/0x560 [ 544.662805][T20194] should_failslab+0xa8/0x100 [ 544.662829][T20194] kmem_cache_alloc_noprof+0x74/0x6e0 [ 544.662850][T20194] ? security_file_alloc+0x34/0x330 [ 544.662879][T20194] security_file_alloc+0x34/0x330 [ 544.662905][T20194] init_file+0x93/0x2f0 [ 544.662931][T20194] alloc_empty_file+0x6e/0x1d0 [ 544.662956][T20194] alloc_file_pseudo+0x13d/0x210 [ 544.662983][T20194] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 544.663004][T20194] ? __local_bh_enable_ip+0x12d/0x1c0 [ 544.663028][T20194] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.663052][T20194] ? __local_bh_enable_ip+0x12d/0x1c0 [ 544.663074][T20194] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 544.663103][T20194] sock_alloc_file+0xb8/0x2e0 [ 544.663130][T20194] kcm_ioctl+0x2c5/0xff0 [ 544.663153][T20194] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 544.663178][T20194] ? __pfx_kcm_ioctl+0x10/0x10 [ 544.663198][T20194] ? do_vfs_ioctl+0xbe8/0x1430 [ 544.663214][T20194] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 544.663252][T20194] sock_do_ioctl+0xdc/0x300 [ 544.663277][T20194] ? __pfx_sock_do_ioctl+0x10/0x10 [ 544.663317][T20194] sock_ioctl+0x576/0x790 [ 544.663342][T20194] ? __pfx_sock_ioctl+0x10/0x10 [ 544.663368][T20194] ? __fget_files+0x3a0/0x420 [ 544.663388][T20194] ? __fget_files+0x2a/0x420 [ 544.663413][T20194] ? bpf_lsm_file_ioctl+0x9/0x20 [ 544.663436][T20194] ? __pfx_sock_ioctl+0x10/0x10 [ 544.663457][T20194] __se_sys_ioctl+0xfc/0x170 [ 544.663477][T20194] do_syscall_64+0xfa/0xfa0 [ 544.663498][T20194] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.663519][T20194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.663536][T20194] ? clear_bhb_loop+0x60/0xb0 [ 544.663561][T20194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.663578][T20194] RIP: 0033:0x7fb6c938efc9 [ 544.663600][T20194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.663614][T20194] RSP: 002b:00007fb6ca146038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.663634][T20194] RAX: ffffffffffffffda RBX: 00007fb6c95e5fa0 RCX: 00007fb6c938efc9 [ 544.663647][T20194] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 544.663659][T20194] RBP: 00007fb6ca146090 R08: 0000000000000000 R09: 0000000000000000 [ 544.663670][T20194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.663681][T20194] R13: 00007fb6c95e6038 R14: 00007fb6c95e5fa0 R15: 00007ffe796f8b08 [ 544.663713][T20194] [ 545.153502][T20204] wg1 speed is unknown, defaulting to 1000 [ 545.163859][T20204] lo speed is unknown, defaulting to 1000 [ 545.259618][T20207] wg1 speed is unknown, defaulting to 1000 [ 545.271184][T20207] lo speed is unknown, defaulting to 1000 [ 545.566347][T20205] wg1 speed is unknown, defaulting to 1000 [ 545.585298][T20205] lo speed is unknown, defaulting to 1000 [ 545.661465][T20225] __nla_validate_parse: 6 callbacks suppressed [ 545.661483][T20225] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4156'. [ 545.713976][T20222] bond0 (unregistering): Released all slaves [ 545.869664][T20225] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.888727][T20225] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.906705][T20225] .` (unregistering): Released all slaves [ 546.278808][T20239] siw: device registration error -23 [ 546.358628][T20246] netlink: 'syz.3.4164': attribute type 6 has an invalid length. [ 546.370611][T20247] FAULT_INJECTION: forcing a failure. [ 546.370611][T20247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.386783][T20247] CPU: 1 UID: 0 PID: 20247 Comm: syz.1.4163 Not tainted syzkaller #0 PREEMPT(full) [ 546.386810][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.386820][T20247] Call Trace: [ 546.386827][T20247] [ 546.386834][T20247] dump_stack_lvl+0x189/0x250 [ 546.386858][T20247] ? __pfx____ratelimit+0x10/0x10 [ 546.386881][T20247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.386909][T20247] ? __pfx__printk+0x10/0x10 [ 546.386930][T20247] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 546.386961][T20247] should_fail_ex+0x414/0x560 [ 546.386985][T20247] _copy_to_user+0x31/0xb0 [ 546.387010][T20247] kcm_ioctl+0x573/0xff0 [ 546.387033][T20247] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 546.387059][T20247] ? __pfx_kcm_ioctl+0x10/0x10 [ 546.387078][T20247] ? do_vfs_ioctl+0xbe8/0x1430 [ 546.387095][T20247] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 546.387132][T20247] sock_do_ioctl+0xdc/0x300 [ 546.387158][T20247] ? __pfx_sock_do_ioctl+0x10/0x10 [ 546.387198][T20247] sock_ioctl+0x576/0x790 [ 546.387222][T20247] ? __pfx_sock_ioctl+0x10/0x10 [ 546.387247][T20247] ? __fget_files+0x3a0/0x420 [ 546.387270][T20247] ? __fget_files+0x2a/0x420 [ 546.387293][T20247] ? bpf_lsm_file_ioctl+0x9/0x20 [ 546.387316][T20247] ? __pfx_sock_ioctl+0x10/0x10 [ 546.387336][T20247] __se_sys_ioctl+0xfc/0x170 [ 546.387355][T20247] do_syscall_64+0xfa/0xfa0 [ 546.387374][T20247] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.387396][T20247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.387412][T20247] ? clear_bhb_loop+0x60/0xb0 [ 546.387439][T20247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.387456][T20247] RIP: 0033:0x7f16b6b8efc9 [ 546.387473][T20247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.387487][T20247] RSP: 002b:00007f16b79e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.387507][T20247] RAX: ffffffffffffffda RBX: 00007f16b6de6090 RCX: 00007f16b6b8efc9 [ 546.387520][T20247] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 546.387531][T20247] RBP: 00007f16b79e2090 R08: 0000000000000000 R09: 0000000000000000 [ 546.387541][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.387552][T20247] R13: 00007f16b6de6128 R14: 00007f16b6de6090 R15: 00007ffc9796a268 [ 546.387583][T20247] [ 546.699942][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 546.824493][T20256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4167'. [ 547.215247][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 547.234466][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'. [ 547.279610][T20284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.288994][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'. [ 547.393739][T20291] netlink: 'syz.3.4177': attribute type 13 has an invalid length. [ 547.402827][T20291] netlink: 'syz.3.4177': attribute type 17 has an invalid length. [ 547.514620][T20291] erspan0: left allmulticast mode [ 547.753689][T20291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.848578][T20302] wg1 speed is unknown, defaulting to 1000 [ 547.856287][T20302] lo speed is unknown, defaulting to 1000 [ 547.868925][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'. [ 547.892678][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'. [ 548.532163][T20355] FAULT_INJECTION: forcing a failure. [ 548.532163][T20355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.558426][T20355] CPU: 0 UID: 0 PID: 20355 Comm: syz.2.4196 Not tainted syzkaller #0 PREEMPT(full) [ 548.558450][T20355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.558461][T20355] Call Trace: [ 548.558469][T20355] [ 548.558477][T20355] dump_stack_lvl+0x189/0x250 [ 548.558502][T20355] ? __pfx____ratelimit+0x10/0x10 [ 548.558524][T20355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.558543][T20355] ? __pfx__printk+0x10/0x10 [ 548.558576][T20355] should_fail_ex+0x414/0x560 [ 548.558600][T20355] _copy_to_user+0x31/0xb0 [ 548.558624][T20355] simple_read_from_buffer+0xe1/0x170 [ 548.558649][T20355] proc_fail_nth_read+0x1b3/0x220 [ 548.558669][T20355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 548.558689][T20355] ? rw_verify_area+0x2a6/0x4d0 [ 548.558705][T20355] ? __lock_acquire+0xab9/0xd20 [ 548.558724][T20355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 548.558741][T20355] vfs_read+0x200/0xa30 [ 548.558758][T20355] ? fdget_pos+0x247/0x320 [ 548.558780][T20355] ? __pfx___mutex_lock+0x10/0x10 [ 548.558804][T20355] ? __pfx_vfs_read+0x10/0x10 [ 548.558824][T20355] ? __fget_files+0x2a/0x420 [ 548.558848][T20355] ? __fget_files+0x3a0/0x420 [ 548.558866][T20355] ? __fget_files+0x2a/0x420 [ 548.558893][T20355] ksys_read+0x145/0x250 [ 548.558914][T20355] ? __pfx_ksys_read+0x10/0x10 [ 548.558936][T20355] ? do_syscall_64+0xbe/0xfa0 [ 548.558959][T20355] do_syscall_64+0xfa/0xfa0 [ 548.558979][T20355] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.559000][T20355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.559018][T20355] ? clear_bhb_loop+0x60/0xb0 [ 548.559039][T20355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.559057][T20355] RIP: 0033:0x7fa66338d9dc [ 548.559073][T20355] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 548.559089][T20355] RSP: 002b:00007fa6642c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 548.559107][T20355] RAX: ffffffffffffffda RBX: 00007fa6635e6090 RCX: 00007fa66338d9dc [ 548.559120][T20355] RDX: 000000000000000f RSI: 00007fa6642c10a0 RDI: 0000000000000006 [ 548.559130][T20355] RBP: 00007fa6642c1090 R08: 0000000000000000 R09: 0000000000000000 [ 548.559140][T20355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.559151][T20355] R13: 00007fa6635e6128 R14: 00007fa6635e6090 R15: 00007fff12489e88 [ 548.559182][T20355] [ 548.611804][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4198'. [ 548.716599][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4199'. [ 548.797542][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 548.989733][T20378] netlink: 'syz.3.4203': attribute type 2 has an invalid length. [ 549.008644][T20378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.028505][T20378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.105137][T20388] netlink: 'syz.0.4207': attribute type 3 has an invalid length. [ 549.214286][T20392] wg1 speed is unknown, defaulting to 1000 [ 549.223229][T20392] lo speed is unknown, defaulting to 1000 [ 549.755845][T20420] tipc: Enabling of bearer rejected, failed to enable media [ 549.828048][T20427] netlink: 'syz.4.4218': attribute type 3 has an invalid length. [ 550.178430][T20439] bond1: option all_slaves_active: invalid value (13) [ 550.227040][T20439] bond1 (unregistering): Released all slaves [ 550.363668][T20444] wg1 speed is unknown, defaulting to 1000 [ 550.379501][T20444] lo speed is unknown, defaulting to 1000 [ 550.945540][T20455] __nla_validate_parse: 76 callbacks suppressed [ 550.945558][T20455] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.4226'. [ 551.198558][T20475] netlink: 'syz.4.4229': attribute type 3 has an invalid length. [ 551.218611][T20475] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4229'. [ 551.368283][T20463] wg1 speed is unknown, defaulting to 1000 [ 551.368778][T20485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4233'. [ 551.375777][T20463] lo speed is unknown, defaulting to 1000 [ 551.461811][T20490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4232'. [ 551.471741][T20485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4233'. [ 551.495361][T20485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4233'. [ 551.571540][T20494] Cannot find add_set index 0 as target [ 551.763913][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4238'. [ 552.053235][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4244'. [ 552.101661][T20520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4244'. [ 552.225761][T20517] wg1 speed is unknown, defaulting to 1000 [ 552.248385][T20517] lo speed is unknown, defaulting to 1000 [ 552.350170][T20530] netlink: 'syz.0.4247': attribute type 16 has an invalid length. [ 552.365608][T20530] netlink: 'syz.0.4247': attribute type 17 has an invalid length. [ 552.422660][T20530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.521691][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'. [ 552.594034][T20540] syzkaller1: entered promiscuous mode [ 552.599761][T20540] syzkaller1: entered allmulticast mode [ 552.729264][T20541] wg1 speed is unknown, defaulting to 1000 [ 552.752936][T20541] lo speed is unknown, defaulting to 1000 [ 552.789004][T20542] wg1 speed is unknown, defaulting to 1000 [ 552.796725][T20542] lo speed is unknown, defaulting to 1000 [ 553.700197][T20587] FAULT_INJECTION: forcing a failure. [ 553.700197][T20587] name failslab, interval 1, probability 0, space 0, times 0 [ 553.714221][T20587] CPU: 0 UID: 0 PID: 20587 Comm: syz.1.4268 Not tainted syzkaller #0 PREEMPT(full) [ 553.714247][T20587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 553.714258][T20587] Call Trace: [ 553.714265][T20587] [ 553.714273][T20587] dump_stack_lvl+0x189/0x250 [ 553.714296][T20587] ? __pfx____ratelimit+0x10/0x10 [ 553.714317][T20587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.714332][T20587] ? __pfx__printk+0x10/0x10 [ 553.714355][T20587] ? __pfx___might_resched+0x10/0x10 [ 553.714376][T20587] ? fs_reclaim_acquire+0x7d/0x100 [ 553.714400][T20587] should_fail_ex+0x414/0x560 [ 553.714420][T20587] should_failslab+0xa8/0x100 [ 553.714450][T20587] kmem_cache_alloc_node_noprof+0x77/0x710 [ 553.714469][T20587] ? __alloc_skb+0x112/0x2d0 [ 553.714484][T20587] ? netlink_autobind+0xdb/0x300 [ 553.714506][T20587] __alloc_skb+0x112/0x2d0 [ 553.714526][T20587] netlink_sendmsg+0x5c6/0xb30 [ 553.714551][T20587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.714571][T20587] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.714591][T20587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.714611][T20587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.714629][T20587] __sock_sendmsg+0x21c/0x270 [ 553.714654][T20587] ____sys_sendmsg+0x505/0x830 [ 553.714676][T20587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.714702][T20587] ? import_iovec+0x74/0xa0 [ 553.714727][T20587] ___sys_sendmsg+0x21f/0x2a0 [ 553.714746][T20587] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.714797][T20587] ? __fget_files+0x2a/0x420 [ 553.714816][T20587] ? __fget_files+0x3a0/0x420 [ 553.714844][T20587] __x64_sys_sendmsg+0x19b/0x260 [ 553.714865][T20587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.714892][T20587] ? __pfx_ksys_write+0x10/0x10 [ 553.714913][T20587] ? do_syscall_64+0xbe/0xfa0 [ 553.714938][T20587] do_syscall_64+0xfa/0xfa0 [ 553.714957][T20587] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.714977][T20587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.714993][T20587] ? clear_bhb_loop+0x60/0xb0 [ 553.715012][T20587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.715028][T20587] RIP: 0033:0x7f16b6b8efc9 [ 553.715042][T20587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.715056][T20587] RSP: 002b:00007f16b7a03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.715074][T20587] RAX: ffffffffffffffda RBX: 00007f16b6de5fa0 RCX: 00007f16b6b8efc9 [ 553.715086][T20587] RDX: 0000000004000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 553.715097][T20587] RBP: 00007f16b7a03090 R08: 0000000000000000 R09: 0000000000000000 [ 553.715107][T20587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.715117][T20587] R13: 00007f16b6de6038 R14: 00007f16b6de5fa0 R15: 00007ffc9796a268 [ 553.715146][T20587] [ 554.191424][T20596] syzkaller0: entered promiscuous mode [ 554.213527][T20596] syzkaller0: entered allmulticast mode [ 554.565774][T20608] netlink: 'syz.3.4276': attribute type 3 has an invalid length. [ 555.154650][T20640] netlink: 'syz.3.4289': attribute type 3 has an invalid length. [ 555.361891][T20654] netlink: 'syz.3.4292': attribute type 13 has an invalid length. [ 555.380477][T20654] netlink: 'syz.3.4292': attribute type 17 has an invalid length. [ 555.431910][T20654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.468200][T20649] wg1 speed is unknown, defaulting to 1000 [ 555.484006][T20649] lo speed is unknown, defaulting to 1000 [ 556.505436][T20691] netlink: 'syz.0.4302': attribute type 3 has an invalid length. [ 556.513556][T20691] __nla_validate_parse: 16 callbacks suppressed [ 556.513572][T20691] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4302'. [ 556.561975][T20692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 556.646460][T20694] wg1 speed is unknown, defaulting to 1000 [ 556.679284][T20694] lo speed is unknown, defaulting to 1000 [ 556.776015][T20705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4303'. [ 556.786180][T20696] wg1 speed is unknown, defaulting to 1000 [ 556.799268][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'. [ 556.829185][T20706] No such timeout policy "syz1" [ 556.900606][T20696] lo speed is unknown, defaulting to 1000 [ 556.953035][T20714] vxcan1: entered allmulticast mode [ 557.627004][T20715] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4306'. [ 557.628960][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 557.753735][T20713] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4306'. [ 557.767882][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4309'. [ 557.870112][T20722] wg1 speed is unknown, defaulting to 1000 [ 557.936376][T20722] lo speed is unknown, defaulting to 1000 [ 558.195461][T20735] netlink: 'syz.4.4313': attribute type 3 has an invalid length. [ 558.217039][T20735] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4313'. [ 558.495830][T20753] netlink: 'syz.1.4318': attribute type 3 has an invalid length. [ 559.050109][T20771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.102070][T20771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.190148][T20776] veth0_to_bond: entered allmulticast mode [ 559.270652][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4326'. [ 559.305192][T12256] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.315096][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4326'. [ 559.327695][T12256] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.732257][T12256] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.768531][T12256] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.919750][T20874] tipc: Enabled bearer , priority 0 [ 560.933418][T20874] syzkaller0: entered promiscuous mode [ 560.951429][T20876] netlink: 'syz.3.4353': attribute type 7 has an invalid length. [ 560.959484][T20874] syzkaller0: entered allmulticast mode [ 560.967411][T20876] netlink: 'syz.3.4353': attribute type 8 has an invalid length. [ 561.023802][T20876] dummy0: entered promiscuous mode [ 561.038849][T20876] bond0: entered promiscuous mode [ 561.054880][T20876] bond_slave_0: entered promiscuous mode [ 561.072412][T20876] bond_slave_1: entered promiscuous mode [ 561.079509][T20876] syz_tun: entered promiscuous mode [ 561.086084][T20876] erspan0: entered promiscuous mode [ 561.094756][T20876] erspan0: left promiscuous mode [ 561.101384][T20876] dummy0: left promiscuous mode [ 561.107983][T20876] bond0: left promiscuous mode [ 561.112762][T20876] bond_slave_0: left promiscuous mode [ 561.118693][T20876] bond_slave_1: left promiscuous mode [ 561.124194][T20876] syz_tun: left promiscuous mode [ 561.161929][T20874] wg1 speed is unknown, defaulting to 1000 [ 561.198196][T20874] lo speed is unknown, defaulting to 1000 [ 561.312925][T20873] tipc: Resetting bearer [ 561.365658][T20873] tipc: Disabling bearer [ 561.390983][T20891] macvlan1: entered promiscuous mode [ 561.401306][T20891] macvlan1: entered allmulticast mode [ 561.422086][T20900] veth1_vlan: entered allmulticast mode [ 561.726873][T20918] __nla_validate_parse: 19 callbacks suppressed [ 561.726892][T20918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4366'. [ 561.814671][T20918] macsec1: entered allmulticast mode [ 561.825593][T20918] erspan0: entered allmulticast mode [ 561.862391][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'. [ 562.081412][T20918] erspan0: left allmulticast mode [ 562.187018][T20917] wg1 speed is unknown, defaulting to 1000 [ 562.220669][T20917] lo speed is unknown, defaulting to 1000 [ 562.395248][T20933] wg1 speed is unknown, defaulting to 1000 [ 562.430157][T20933] lo speed is unknown, defaulting to 1000 [ 562.453103][T20931] wg1 speed is unknown, defaulting to 1000 [ 562.469456][T20931] lo speed is unknown, defaulting to 1000 [ 562.724747][T20945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4374'. [ 562.740856][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 562.757575][T20945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4374'. [ 562.787122][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4373'. [ 562.797116][T20945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4374'. [ 562.818559][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 562.901706][T20946] wg1 speed is unknown, defaulting to 1000 [ 562.939188][T20946] lo speed is unknown, defaulting to 1000 [ 563.027689][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.125820][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4381'. [ 563.317857][T20976] syzkaller1: entered promiscuous mode [ 563.323366][T20976] syzkaller1: entered allmulticast mode [ 563.548322][T20990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4388'. [ 563.736667][T20983] wg1 speed is unknown, defaulting to 1000 [ 563.745410][T20983] lo speed is unknown, defaulting to 1000 [ 564.576216][T21026] bond3: option updelay: invalid value (18446744073709551607) [ 564.599121][T21026] bond3: option updelay: allowed values 0 - 2147483647 [ 564.610825][T21026] bond3 (unregistering): Released all slaves [ 566.202460][T21087] wg1 speed is unknown, defaulting to 1000 [ 566.228834][T21087] lo speed is unknown, defaulting to 1000 [ 566.266023][T21100] syzkaller0: entered promiscuous mode [ 566.271845][T21100] syzkaller0: entered allmulticast mode [ 566.780301][T21124] __nla_validate_parse: 10 callbacks suppressed [ 566.780319][T21124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4429'. [ 566.842722][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4429'. [ 566.937474][T21122] wg1 speed is unknown, defaulting to 1000 [ 566.945284][T21122] lo speed is unknown, defaulting to 1000 [ 566.992562][T21126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4431'. [ 567.034631][T21134] delete_channel: no stack [ 567.277140][T21143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4436'. [ 567.447462][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 567.517214][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4439'. [ 567.563608][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4440'. [ 567.629914][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'. [ 567.631530][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4440'. [ 567.639365][T21158] FAULT_INJECTION: forcing a failure. [ 567.639365][T21158] name failslab, interval 1, probability 0, space 0, times 0 [ 567.700954][T21162] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4443'. [ 567.727616][T21158] CPU: 1 UID: 0 PID: 21158 Comm: syz.2.4442 Not tainted syzkaller #0 PREEMPT(full) [ 567.727641][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.727652][T21158] Call Trace: [ 567.727659][T21158] [ 567.727667][T21158] dump_stack_lvl+0x189/0x250 [ 567.727690][T21158] ? __pfx____ratelimit+0x10/0x10 [ 567.727711][T21158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.727731][T21158] ? __pfx__printk+0x10/0x10 [ 567.727756][T21158] ? __pfx___might_resched+0x10/0x10 [ 567.727785][T21158] should_fail_ex+0x414/0x560 [ 567.727807][T21158] should_failslab+0xa8/0x100 [ 567.727832][T21158] __kmalloc_noprof+0xcb/0x7f0 [ 567.727851][T21158] ? nft_obj_init+0x1e0/0x360 [ 567.727867][T21158] ? __nla_parse+0x40/0x60 [ 567.727889][T21158] nft_obj_init+0x1e0/0x360 [ 567.727911][T21158] nf_tables_newobj+0xade/0x1c30 [ 567.727947][T21158] ? __pfx_nf_tables_newobj+0x10/0x10 [ 567.727974][T21158] ? __nla_parse+0x40/0x60 [ 567.727997][T21158] nfnetlink_rcv+0x11d9/0x2590 [ 567.728057][T21158] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 567.728099][T21158] ? ref_tracker_free+0x63a/0x7d0 [ 567.728145][T21158] ? __netlink_deliver_tap+0x807/0x850 [ 567.728163][T21158] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.728199][T21158] netlink_unicast+0x82f/0x9e0 [ 567.728233][T21158] ? __pfx_netlink_unicast+0x10/0x10 [ 567.728257][T21158] ? netlink_sendmsg+0x642/0xb30 [ 567.728273][T21158] ? skb_put+0x11b/0x210 [ 567.728292][T21158] netlink_sendmsg+0x805/0xb30 [ 567.728328][T21158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.728351][T21158] ? aa_sock_msg_perm+0xf1/0x1d0 [ 567.728370][T21158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 567.728392][T21158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.728411][T21158] __sock_sendmsg+0x21c/0x270 [ 567.728434][T21158] ____sys_sendmsg+0x505/0x830 [ 567.728458][T21158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.728485][T21158] ? import_iovec+0x74/0xa0 [ 567.728511][T21158] ___sys_sendmsg+0x21f/0x2a0 [ 567.728533][T21158] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.728588][T21158] ? __fget_files+0x2a/0x420 [ 567.728613][T21158] ? __fget_files+0x3a0/0x420 [ 567.728645][T21158] __x64_sys_sendmsg+0x19b/0x260 [ 567.728668][T21158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.728697][T21158] ? __pfx_ksys_write+0x10/0x10 [ 567.728722][T21158] ? do_syscall_64+0xbe/0xfa0 [ 567.728747][T21158] do_syscall_64+0xfa/0xfa0 [ 567.728768][T21158] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.728788][T21158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.728805][T21158] ? clear_bhb_loop+0x60/0xb0 [ 567.728825][T21158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.728841][T21158] RIP: 0033:0x7fa66338efc9 [ 567.728858][T21158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.728872][T21158] RSP: 002b:00007fa6642e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.728892][T21158] RAX: ffffffffffffffda RBX: 00007fa6635e5fa0 RCX: 00007fa66338efc9 [ 567.728905][T21158] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 567.728915][T21158] RBP: 00007fa6642e2090 R08: 0000000000000000 R09: 0000000000000000 [ 567.728926][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.728936][T21158] R13: 00007fa6635e6038 R14: 00007fa6635e5fa0 R15: 00007fff12489e88 [ 567.728968][T21158] [ 567.803490][T21162] wg1 speed is unknown, defaulting to 1000 [ 568.152754][T21162] lo speed is unknown, defaulting to 1000 [ 614.221921][T12256] bond3: left allmulticast mode [ 614.226793][T12256] bond3: left promiscuous mode [ 614.233023][T12256] bridge0: port 2(bond3) entered disabled state [ 614.241240][T12256] veth0_to_team: left allmulticast mode [ 614.246784][T12256] veth0_to_team: left promiscuous mode [ 614.252452][T12256] bridge0: port 1(veth0_to_team) entered disabled state [ 614.742916][T12256] bond0 (unregistering): Released all slaves [ 614.834145][T12256] bond1 (unregistering): Released all slaves [ 614.928771][T12256] bond2 (unregistering): Released all slaves [ 615.016784][T12256] bond3 (unregistering): Released all slaves [ 615.115343][T12256] : left promiscuous mode [ 615.145943][T12256] tipc: Left network mode [ 615.162482][T12256] IPVS: stopping backup sync thread 15172 ... [ 616.068194][T12256] IPVS: stop unused estimator thread 0... [ 624.452969][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.422671][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 627.436030][T21175] delete_channel: no stack [ 627.662564][T21195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4453'. [ 627.741049][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4456'. [ 627.751165][T21202] FAULT_INJECTION: forcing a failure. [ 627.751165][T21202] name failslab, interval 1, probability 0, space 0, times 0 [ 627.772777][T21202] CPU: 1 UID: 0 PID: 21202 Comm: syz.3.4456 Not tainted syzkaller #0 PREEMPT(full) [ 627.772803][T21202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 627.772813][T21202] Call Trace: [ 627.772820][T21202] [ 627.772828][T21202] dump_stack_lvl+0x189/0x250 [ 627.772853][T21202] ? __pfx____ratelimit+0x10/0x10 [ 627.772875][T21202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.772894][T21202] ? __pfx__printk+0x10/0x10 [ 627.772914][T21202] ? __pfx___might_resched+0x10/0x10 [ 627.772945][T21202] ? fs_reclaim_acquire+0x7d/0x100 [ 627.772970][T21202] should_fail_ex+0x414/0x560 [ 627.772993][T21202] should_failslab+0xa8/0x100 [ 627.773017][T21202] __kmalloc_cache_noprof+0x6f/0x6f0 [ 627.773037][T21202] ? nfnetlink_rcv+0xf97/0x2590 [ 627.773059][T21202] ? __nla_parse+0x40/0x60 [ 627.773090][T21202] nfnetlink_rcv+0xf97/0x2590 [ 627.773148][T21202] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 627.773189][T21202] ? ref_tracker_free+0x63a/0x7d0 [ 627.773237][T21202] ? __netlink_deliver_tap+0x807/0x850 [ 627.773255][T21202] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.773289][T21202] netlink_unicast+0x82f/0x9e0 [ 627.773323][T21202] ? __pfx_netlink_unicast+0x10/0x10 [ 627.773348][T21202] ? netlink_sendmsg+0x642/0xb30 [ 627.773363][T21202] ? skb_put+0x11b/0x210 [ 627.773385][T21202] netlink_sendmsg+0x805/0xb30 [ 627.773411][T21202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.773432][T21202] ? aa_sock_msg_perm+0xf1/0x1d0 [ 627.773455][T21202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.773476][T21202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.773496][T21202] __sock_sendmsg+0x21c/0x270 [ 627.773523][T21202] ____sys_sendmsg+0x505/0x830 [ 627.773549][T21202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.773579][T21202] ? import_iovec+0x74/0xa0 [ 627.773605][T21202] ___sys_sendmsg+0x21f/0x2a0 [ 627.773627][T21202] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.773684][T21202] ? __fget_files+0x2a/0x420 [ 627.773704][T21202] ? __fget_files+0x3a0/0x420 [ 627.773735][T21202] __x64_sys_sendmsg+0x19b/0x260 [ 627.773757][T21202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.773789][T21202] ? __pfx_ksys_write+0x10/0x10 [ 627.773813][T21202] ? do_syscall_64+0xbe/0xfa0 [ 627.773851][T21202] do_syscall_64+0xfa/0xfa0 [ 627.773871][T21202] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.773893][T21202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.773911][T21202] ? clear_bhb_loop+0x60/0xb0 [ 627.773949][T21202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.773967][T21202] RIP: 0033:0x7f54dd78efc9 [ 627.773984][T21202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.774000][T21202] RSP: 002b:00007f54de6e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.774020][T21202] RAX: ffffffffffffffda RBX: 00007f54dd9e5fa0 RCX: 00007f54dd78efc9 [ 627.774034][T21202] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 627.774045][T21202] RBP: 00007f54de6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 627.774057][T21202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.774068][T21202] R13: 00007f54dd9e6038 R14: 00007f54dd9e5fa0 R15: 00007ffdf3b97d68 [ 627.774108][T21202] [ 628.532298][T21218] xt_TCPMSS: Only works on TCP SYN packets [ 629.313485][T21245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4469'. [ 629.325561][T21237] delete_channel: no stack [ 629.663160][T21262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'. [ 629.915577][T21273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.957832][T21273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.238617][T21273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.253348][T21273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.682510][T21273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.730371][T21273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.031586][T21273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.052632][T21273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.319246][T21303] netlink: 'syz.1.4483': attribute type 21 has an invalid length. [ 631.351895][T12258] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.360575][T12258] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.369562][T12258] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.387454][T12258] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.405895][T21303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4483'. [ 631.483942][T12258] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.493314][T12258] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.516973][T12258] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.525550][T12258] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.567136][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'. [ 631.594881][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'. [ 631.674790][T21307] netlink: 'syz.1.4486': attribute type 83 has an invalid length. [ 631.688062][T21313] netlink: 'syz.1.4486': attribute type 83 has an invalid length. [ 631.710968][T21322] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4489'. [ 631.863284][T21331] wg1 speed is unknown, defaulting to 1000 [ 631.872082][T21331] lo speed is unknown, defaulting to 1000 [ 631.953698][T21333] wg1 speed is unknown, defaulting to 1000 [ 632.019352][T21333] lo speed is unknown, defaulting to 1000 [ 632.578749][T21351] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.586217][T21351] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.613867][T21351] dummy0: left promiscuous mode [ 632.685419][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4498'. [ 632.716162][T21360] FAULT_INJECTION: forcing a failure. [ 632.716162][T21360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.767594][T21360] CPU: 0 UID: 0 PID: 21360 Comm: syz.3.4500 Not tainted syzkaller #0 PREEMPT(full) [ 632.767670][T21360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.767684][T21360] Call Trace: [ 632.767693][T21360] [ 632.767701][T21360] dump_stack_lvl+0x189/0x250 [ 632.767721][T21360] ? __pfx____ratelimit+0x10/0x10 [ 632.767740][T21360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.767759][T21360] ? __pfx__printk+0x10/0x10 [ 632.767779][T21360] ? __might_fault+0xb0/0x130 [ 632.767810][T21360] should_fail_ex+0x414/0x560 [ 632.767833][T21360] _copy_from_user+0x2d/0xb0 [ 632.767883][T21360] ___sys_sendmsg+0x158/0x2a0 [ 632.767907][T21360] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.767966][T21360] ? __fget_files+0x2a/0x420 [ 632.767986][T21360] ? __fget_files+0x3a0/0x420 [ 632.768018][T21360] __x64_sys_sendmsg+0x19b/0x260 [ 632.768041][T21360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.768072][T21360] ? __pfx_ksys_write+0x10/0x10 [ 632.768096][T21360] ? do_syscall_64+0xbe/0xfa0 [ 632.768123][T21360] do_syscall_64+0xfa/0xfa0 [ 632.768143][T21360] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.768165][T21360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.768183][T21360] ? clear_bhb_loop+0x60/0xb0 [ 632.768206][T21360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.768222][T21360] RIP: 0033:0x7f54dd78efc9 [ 632.768237][T21360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.768252][T21360] RSP: 002b:00007f54de6e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.768270][T21360] RAX: ffffffffffffffda RBX: 00007f54dd9e5fa0 RCX: 00007f54dd78efc9 [ 632.768283][T21360] RDX: 0000000020008040 RSI: 0000200000001000 RDI: 0000000000000003 [ 632.768294][T21360] RBP: 00007f54de6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 632.768304][T21360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.768314][T21360] R13: 00007f54dd9e6038 R14: 00007f54dd9e5fa0 R15: 00007ffdf3b97d68 [ 632.768342][T21360] [ 632.772366][T21351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.003452][T21351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.369592][T21354] netlink: 'syz.4.4499': attribute type 3 has an invalid length. [ 633.387786][T21358] hsr_slave_0: left promiscuous mode [ 633.398816][T21358] hsr_slave_1: left promiscuous mode [ 633.457074][T12256] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.477344][T12256] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.491802][T12256] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.505048][T12256] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.516863][T12256] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.526097][T12256] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.561453][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4505'. [ 633.584181][T21375] FAULT_INJECTION: forcing a failure. [ 633.584181][T21375] name failslab, interval 1, probability 0, space 0, times 0 [ 633.614113][T21375] CPU: 1 UID: 0 PID: 21375 Comm: syz.0.4505 Not tainted syzkaller #0 PREEMPT(full) [ 633.614138][T21375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 633.614148][T21375] Call Trace: [ 633.614155][T21375] [ 633.614163][T21375] dump_stack_lvl+0x189/0x250 [ 633.614188][T21375] ? __pfx____ratelimit+0x10/0x10 [ 633.614211][T21375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.614230][T21375] ? __pfx__printk+0x10/0x10 [ 633.614246][T21375] ? __sock_sendmsg+0x21c/0x270 [ 633.614270][T21375] ? do_syscall_64+0xfa/0xfa0 [ 633.614302][T21375] should_fail_ex+0x414/0x560 [ 633.614326][T21375] should_failslab+0xa8/0x100 [ 633.614350][T21375] kmem_cache_alloc_noprof+0x74/0x6e0 [ 633.614370][T21375] ? skb_clone+0x212/0x3a0 [ 633.614396][T21375] skb_clone+0x212/0x3a0 [ 633.614420][T21375] __netlink_deliver_tap+0x404/0x850 [ 633.614452][T21375] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.614472][T21375] netlink_deliver_tap+0x19c/0x1b0 [ 633.614498][T21375] netlink_sendskb+0x68/0x140 [ 633.614524][T21375] netlink_unicast+0x397/0x9e0 [ 633.614545][T21375] ? __asan_memcpy+0x40/0x70 [ 633.614570][T21375] ? __pfx_netlink_unicast+0x10/0x10 [ 633.614605][T21375] nfnetlink_rcv+0x2309/0x2590 [ 633.614667][T21375] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 633.614709][T21375] ? ref_tracker_free+0x63a/0x7d0 [ 633.614757][T21375] ? __netlink_deliver_tap+0x807/0x850 [ 633.614776][T21375] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.614813][T21375] netlink_unicast+0x82f/0x9e0 [ 633.614846][T21375] ? __pfx_netlink_unicast+0x10/0x10 [ 633.614873][T21375] ? netlink_sendmsg+0x642/0xb30 [ 633.614889][T21375] ? skb_put+0x11b/0x210 [ 633.614911][T21375] netlink_sendmsg+0x805/0xb30 [ 633.614939][T21375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.614962][T21375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 633.614983][T21375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.615005][T21375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.615024][T21375] __sock_sendmsg+0x21c/0x270 [ 633.615051][T21375] ____sys_sendmsg+0x505/0x830 [ 633.615077][T21375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.615108][T21375] ? import_iovec+0x74/0xa0 [ 633.615134][T21375] ___sys_sendmsg+0x21f/0x2a0 [ 633.615157][T21375] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.615215][T21375] ? __fget_files+0x2a/0x420 [ 633.615236][T21375] ? __fget_files+0x3a0/0x420 [ 633.615268][T21375] __x64_sys_sendmsg+0x19b/0x260 [ 633.615291][T21375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.615321][T21375] ? __pfx_ksys_write+0x10/0x10 [ 633.615344][T21375] ? do_syscall_64+0xbe/0xfa0 [ 633.615370][T21375] do_syscall_64+0xfa/0xfa0 [ 633.615390][T21375] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.615412][T21375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.615429][T21375] ? clear_bhb_loop+0x60/0xb0 [ 633.615451][T21375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.615468][T21375] RIP: 0033:0x7fb6c938efc9 [ 633.615490][T21375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.615505][T21375] RSP: 002b:00007fb6ca146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.615524][T21375] RAX: ffffffffffffffda RBX: 00007fb6c95e5fa0 RCX: 00007fb6c938efc9 [ 633.615538][T21375] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 633.615549][T21375] RBP: 00007fb6ca146090 R08: 0000000000000000 R09: 0000000000000000 [ 633.615560][T21375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.615571][T21375] R13: 00007fb6c95e6038 R14: 00007fb6c95e5fa0 R15: 00007ffe796f8b08 [ 633.615601][T21375] [ 633.971001][T12256] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.980946][T12256] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.293105][T21381] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4507'. [ 634.325584][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 634.341790][T21383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4506'. [ 634.367422][T21381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4507'. [ 634.498966][T21387] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 634.652051][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4511'. [ 634.760988][T21397] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 634.811168][ T10] lo speed is unknown, defaulting to 1000 [ 634.816943][ T10] syz1: Port: 1 Link ACTIVE [ 634.881594][T21394] wg1 speed is unknown, defaulting to 1000 [ 634.903110][T21394] lo speed is unknown, defaulting to 1000 [ 635.546855][T21418] can: request_module (can-proto-0) failed. [ 635.614586][T21423] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.632271][T21423] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.724686][T21423] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.739737][T21423] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.824334][T21423] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.834271][T21423] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.914069][T21423] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.940660][T21423] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.128734][T12258] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.157461][T12258] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.165675][T12258] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.191631][T12258] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.208755][T12258] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.237435][T12258] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.245653][T12258] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.264619][T12258] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.279925][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4521'. [ 636.415427][T21438] wg1 speed is unknown, defaulting to 1000 [ 636.443540][T21438] lo speed is unknown, defaulting to 1000 [ 636.498072][T21442] netlink: 'syz.0.4524': attribute type 10 has an invalid length. [ 636.720939][T21442] team0: Port device dummy0 added [ 636.965413][T21462] wg1 speed is unknown, defaulting to 1000 [ 636.973599][T21462] lo speed is unknown, defaulting to 1000 [ 637.023810][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4529'. [ 637.093554][T21467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4529'. [ 637.265209][T21478] xt_TCPMSS: Only works on TCP SYN packets [ 637.638689][T21488] netlink: 'syz.2.4535': attribute type 1 has an invalid length. [ 637.881955][T21496] dvmrp0: entered allmulticast mode [ 637.938362][T21503] FAULT_INJECTION: forcing a failure. [ 637.938362][T21503] name failslab, interval 1, probability 0, space 0, times 0 [ 637.955816][T21503] CPU: 0 UID: 0 PID: 21503 Comm: syz.1.4538 Not tainted syzkaller #0 PREEMPT(full) [ 637.955842][T21503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 637.955853][T21503] Call Trace: [ 637.955860][T21503] [ 637.955868][T21503] dump_stack_lvl+0x189/0x250 [ 637.955893][T21503] ? __pfx____ratelimit+0x10/0x10 [ 637.955914][T21503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.955932][T21503] ? __pfx__printk+0x10/0x10 [ 637.955954][T21503] ? __pfx___might_resched+0x10/0x10 [ 637.955975][T21503] ? fs_reclaim_acquire+0x7d/0x100 [ 637.956000][T21503] should_fail_ex+0x414/0x560 [ 637.956029][T21503] should_failslab+0xa8/0x100 [ 637.956052][T21503] __kmalloc_noprof+0xcb/0x7f0 [ 637.956074][T21503] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 637.956093][T21503] ? rcu_is_watching+0x15/0xb0 [ 637.956117][T21503] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 637.956141][T21503] genl_family_rcv_msg_doit+0xb8/0x300 [ 637.956165][T21503] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 637.956189][T21503] ? apparmor_capable+0x137/0x1b0 [ 637.956210][T21503] ? bpf_lsm_capable+0x9/0x20 [ 637.956222][T21503] ? security_capable+0x7e/0x2e0 [ 637.956243][T21503] genl_rcv_msg+0x60e/0x790 [ 637.956265][T21503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.956282][T21503] ? __pfx_wg_set_device+0x10/0x10 [ 637.956315][T21503] netlink_rcv_skb+0x208/0x470 [ 637.956339][T21503] ? __lock_acquire+0xab9/0xd20 [ 637.956358][T21503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.956377][T21503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.956411][T21503] ? down_read+0x1ad/0x2e0 [ 637.956433][T21503] genl_rcv+0x28/0x40 [ 637.956448][T21503] netlink_unicast+0x82f/0x9e0 [ 637.956482][T21503] ? __pfx_netlink_unicast+0x10/0x10 [ 637.956508][T21503] ? netlink_sendmsg+0x642/0xb30 [ 637.956521][T21503] ? skb_put+0x11b/0x210 [ 637.956538][T21503] netlink_sendmsg+0x805/0xb30 [ 637.956561][T21503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.956578][T21503] ? aa_sock_msg_perm+0xf1/0x1d0 [ 637.956595][T21503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 637.956612][T21503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.956627][T21503] __sock_sendmsg+0x21c/0x270 [ 637.956648][T21503] ____sys_sendmsg+0x505/0x830 [ 637.956669][T21503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.956692][T21503] ? import_iovec+0x74/0xa0 [ 637.956714][T21503] ___sys_sendmsg+0x21f/0x2a0 [ 637.956731][T21503] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.956778][T21503] ? __fget_files+0x2a/0x420 [ 637.956794][T21503] ? __fget_files+0x3a0/0x420 [ 637.956820][T21503] __x64_sys_sendmsg+0x19b/0x260 [ 637.956838][T21503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.956862][T21503] ? __pfx_ksys_write+0x10/0x10 [ 637.956880][T21503] ? do_syscall_64+0xbe/0xfa0 [ 637.956901][T21503] do_syscall_64+0xfa/0xfa0 [ 637.956917][T21503] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.956935][T21503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.956948][T21503] ? clear_bhb_loop+0x60/0xb0 [ 637.956965][T21503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.956979][T21503] RIP: 0033:0x7f16b6b8efc9 [ 637.956992][T21503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.957003][T21503] RSP: 002b:00007f16b7a03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.957019][T21503] RAX: ffffffffffffffda RBX: 00007f16b6de5fa0 RCX: 00007f16b6b8efc9 [ 637.957029][T21503] RDX: 0000000020008040 RSI: 0000200000001000 RDI: 0000000000000003 [ 637.957038][T21503] RBP: 00007f16b7a03090 R08: 0000000000000000 R09: 0000000000000000 [ 637.957047][T21503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.957055][T21503] R13: 00007f16b6de6038 R14: 00007f16b6de5fa0 R15: 00007ffc9796a268 [ 637.957085][T21503] [ 638.349012][T21491] delete_channel: no stack [ 638.588555][T21514] __nla_validate_parse: 4 callbacks suppressed [ 638.588572][T21514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4541'. [ 638.761164][T21529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4547'. [ 639.215417][T21548] FAULT_INJECTION: forcing a failure. [ 639.215417][T21548] name failslab, interval 1, probability 0, space 0, times 0 [ 639.228649][T21548] CPU: 0 UID: 0 PID: 21548 Comm: syz.4.4550 Not tainted syzkaller #0 PREEMPT(full) [ 639.228674][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 639.228685][T21548] Call Trace: [ 639.228692][T21548] [ 639.228700][T21548] dump_stack_lvl+0x189/0x250 [ 639.228725][T21548] ? __pfx____ratelimit+0x10/0x10 [ 639.228747][T21548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.228767][T21548] ? __pfx__printk+0x10/0x10 [ 639.228792][T21548] ? __pfx___might_resched+0x10/0x10 [ 639.228813][T21548] ? fs_reclaim_acquire+0x7d/0x100 [ 639.228840][T21548] should_fail_ex+0x414/0x560 [ 639.228864][T21548] should_failslab+0xa8/0x100 [ 639.228889][T21548] __kmalloc_noprof+0xcb/0x7f0 [ 639.228907][T21548] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 639.228932][T21548] ? rcu_is_watching+0x15/0xb0 [ 639.228960][T21548] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 639.228991][T21548] genl_family_rcv_msg_doit+0xb8/0x300 [ 639.229021][T21548] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 639.229053][T21548] ? apparmor_capable+0x137/0x1b0 [ 639.229078][T21548] ? bpf_lsm_capable+0x9/0x20 [ 639.229094][T21548] ? security_capable+0x7e/0x2e0 [ 639.229121][T21548] genl_rcv_msg+0x60e/0x790 [ 639.229150][T21548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.229171][T21548] ? __pfx_wg_set_device+0x10/0x10 [ 639.229217][T21548] netlink_rcv_skb+0x208/0x470 [ 639.229233][T21548] ? __lock_acquire+0xab9/0xd20 [ 639.229255][T21548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.229279][T21548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.229319][T21548] ? down_read+0x1ad/0x2e0 [ 639.229346][T21548] genl_rcv+0x28/0x40 [ 639.229365][T21548] netlink_unicast+0x82f/0x9e0 [ 639.229399][T21548] ? __pfx_netlink_unicast+0x10/0x10 [ 639.229425][T21548] ? netlink_sendmsg+0x642/0xb30 [ 639.229440][T21548] ? skb_put+0x11b/0x210 [ 639.229464][T21548] netlink_sendmsg+0x805/0xb30 [ 639.229492][T21548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.229514][T21548] ? aa_sock_msg_perm+0xf1/0x1d0 [ 639.229536][T21548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.229557][T21548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.229576][T21548] __sock_sendmsg+0x21c/0x270 [ 639.229607][T21548] ____sys_sendmsg+0x505/0x830 [ 639.229633][T21548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.229664][T21548] ? import_iovec+0x74/0xa0 [ 639.229692][T21548] ___sys_sendmsg+0x21f/0x2a0 [ 639.229714][T21548] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.229774][T21548] ? __fget_files+0x2a/0x420 [ 639.229795][T21548] ? __fget_files+0x3a0/0x420 [ 639.229828][T21548] __x64_sys_sendmsg+0x19b/0x260 [ 639.229851][T21548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.229881][T21548] ? __pfx_ksys_write+0x10/0x10 [ 639.229905][T21548] ? do_syscall_64+0xbe/0xfa0 [ 639.229931][T21548] do_syscall_64+0xfa/0xfa0 [ 639.229951][T21548] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.229972][T21548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.229989][T21548] ? clear_bhb_loop+0x60/0xb0 [ 639.230011][T21548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.230028][T21548] RIP: 0033:0x7f0b6b58efc9 [ 639.230045][T21548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.230060][T21548] RSP: 002b:00007f0b6c49f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.230080][T21548] RAX: ffffffffffffffda RBX: 00007f0b6b7e5fa0 RCX: 00007f0b6b58efc9 [ 639.230094][T21548] RDX: 0000000020008040 RSI: 0000200000001000 RDI: 0000000000000003 [ 639.230106][T21548] RBP: 00007f0b6c49f090 R08: 0000000000000000 R09: 0000000000000000 [ 639.230117][T21548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.230128][T21548] R13: 00007f0b6b7e6038 R14: 00007f0b6b7e5fa0 R15: 00007ffca803cff8 [ 639.230163][T21548] [ 639.754070][T21522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4545'. [ 639.946245][T21553] xt_TCPMSS: Only works on TCP SYN packets [ 640.009414][T21557] xt_hashlimit: size too large, truncated to 1048576 [ 640.217862][T21565] netlink: 'syz.1.4556': attribute type 96 has an invalid length. [ 640.546277][ T30] audit: type=1107 audit(1761006097.797:5): pid=21577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 640.792923][T21552] delete_channel: no stack [ 640.829557][T21599] netlink: 'syz.2.4564': attribute type 1 has an invalid length. [ 640.866702][T21599] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4564'. [ 641.014536][T21609] netlink: 'syz.2.4569': attribute type 1 has an invalid length. [ 641.078216][T21609] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 641.089528][T21609] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 641.221037][T21620] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 641.311892][T21618] wg1 speed is unknown, defaulting to 1000 [ 641.343198][T21609] bond1: (slave gretap6): making interface the new active one [ 641.356113][T21609] bond1: (slave gretap6): Enslaving as an active interface with an up link [ 641.365105][T21626] wg1 speed is unknown, defaulting to 1000 [ 641.373068][T21614] wg1 speed is unknown, defaulting to 1000 [ 641.380008][T21618] lo speed is unknown, defaulting to 1000 [ 641.396336][T21613] macvlan2: entered promiscuous mode [ 641.404966][T21613] macvlan2: entered allmulticast mode [ 641.411589][T21613] bond1: entered promiscuous mode [ 641.416742][T21613] gretap6: entered promiscuous mode [ 641.423685][T21613] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 641.438193][T21613] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap6 [ 641.453444][T21613] bond1: left promiscuous mode [ 641.459363][T21613] gretap6: left promiscuous mode [ 641.504023][T21626] lo speed is unknown, defaulting to 1000 [ 641.516859][T21630] wg1 speed is unknown, defaulting to 1000 [ 641.541871][T21614] lo speed is unknown, defaulting to 1000 [ 641.592725][T21630] lo speed is unknown, defaulting to 1000 [ 641.713063][T21628] wg1 speed is unknown, defaulting to 1000 [ 641.857892][T21628] lo speed is unknown, defaulting to 1000 [ 642.129488][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 642.381464][T21663] xt_TCPMSS: Only works on TCP SYN packets [ 642.959494][ T983] IPVS: starting estimator thread 0... [ 642.977466][T21679] IPVS: length: 24 != 119185342488 [ 643.088777][T21683] IPVS: using max 28 ests per chain, 67200 per kthread [ 643.155909][T21659] delete_channel: no stack [ 643.167000][T21691] tipc: Enabled bearer , priority 0 [ 643.186500][T21691] tipc: Resetting bearer [ 643.208890][T21690] tipc: Disabling bearer [ 643.321887][T21696] wg1 speed is unknown, defaulting to 1000 [ 643.344721][T21696] lo speed is unknown, defaulting to 1000 [ 643.380357][T21698] wg1 speed is unknown, defaulting to 1000 [ 643.394626][T21698] lo speed is unknown, defaulting to 1000 [ 643.504870][T21705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4596'. [ 643.524541][T21705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4596'. [ 643.544415][T21705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4596'. [ 643.772363][T21722] wg1 speed is unknown, defaulting to 1000 [ 643.899090][T21722] lo speed is unknown, defaulting to 1000 [ 643.901842][T21728] wg1 speed is unknown, defaulting to 1000 [ 644.047040][T21728] lo speed is unknown, defaulting to 1000 [ 644.166004][T21737] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20004 [ 644.210306][T21732] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 644.222667][T21732] tipc: Enabled bearer , priority 10 [ 644.415105][T21738] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4604'. [ 644.454392][T21743] xt_TCPMSS: Only works on TCP SYN packets [ 644.573950][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4608'. [ 645.093941][T21766] netlink: 'syz.0.4614': attribute type 11 has an invalid length. [ 645.121407][T21766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4614'. [ 645.217561][ T2153] tipc: Node number set to 1540313740 [ 645.295191][T21740] delete_channel: no stack [ 645.363588][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4616'. [ 645.425084][T21775] pim6reg: entered allmulticast mode [ 645.554947][T21775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4616'. [ 645.675591][ T3521] tipc: Subscription rejected, illegal request [ 645.693770][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 645.802179][T21787] wg1 speed is unknown, defaulting to 1000 [ 645.816570][T21792] wg1 speed is unknown, defaulting to 1000 [ 645.837939][T21787] lo speed is unknown, defaulting to 1000 [ 645.860137][T21792] lo speed is unknown, defaulting to 1000 [ 646.072540][T21809] tipc: Enabling of bearer rejected, failed to enable media [ 646.221559][T21816] xt_TCPMSS: Only works on TCP SYN packets [ 646.333739][T21821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4632'. [ 646.699452][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4636'. [ 647.003659][T21816] delete_channel: no stack [ 647.044962][T21844] siw: device registration error -23 [ 647.414338][T21856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4646'. [ 647.680920][T21868] netlink: 'syz.3.4650': attribute type 2 has an invalid length. [ 647.699540][T21868] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4650'. [ 648.033443][T21895] netlink: 'syz.4.4663': attribute type 2 has an invalid length. [ 648.037947][T21892] FAULT_INJECTION: forcing a failure. [ 648.037947][T21892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.066679][T21892] CPU: 1 UID: 0 PID: 21892 Comm: syz.1.4662 Not tainted syzkaller #0 PREEMPT(full) [ 648.066704][T21892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.066714][T21892] Call Trace: [ 648.066721][T21892] [ 648.066728][T21892] dump_stack_lvl+0x189/0x250 [ 648.066751][T21892] ? __pfx____ratelimit+0x10/0x10 [ 648.066772][T21892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.066789][T21892] ? __pfx__printk+0x10/0x10 [ 648.066818][T21892] should_fail_ex+0x414/0x560 [ 648.066837][T21892] _copy_to_user+0x31/0xb0 [ 648.066862][T21892] simple_read_from_buffer+0xe1/0x170 [ 648.066887][T21892] proc_fail_nth_read+0x1b3/0x220 [ 648.066908][T21892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.066926][T21892] ? rw_verify_area+0x2a6/0x4d0 [ 648.066942][T21892] ? __lock_acquire+0xab9/0xd20 [ 648.066961][T21892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.066979][T21892] vfs_read+0x200/0xa30 [ 648.066996][T21892] ? fdget_pos+0x247/0x320 [ 648.067022][T21892] ? __pfx___mutex_lock+0x10/0x10 [ 648.067046][T21892] ? __pfx_vfs_read+0x10/0x10 [ 648.067106][T21892] ? __fget_files+0x2a/0x420 [ 648.067132][T21892] ? __fget_files+0x3a0/0x420 [ 648.067152][T21892] ? __fget_files+0x2a/0x420 [ 648.067182][T21892] ksys_read+0x145/0x250 [ 648.067204][T21892] ? __pfx_ksys_read+0x10/0x10 [ 648.067228][T21892] ? do_syscall_64+0xbe/0xfa0 [ 648.067252][T21892] do_syscall_64+0xfa/0xfa0 [ 648.067273][T21892] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.067294][T21892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.067312][T21892] ? clear_bhb_loop+0x60/0xb0 [ 648.067333][T21892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.067350][T21892] RIP: 0033:0x7f16b6b8d9dc [ 648.067366][T21892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 648.067380][T21892] RSP: 002b:00007f16b7a03030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.067400][T21892] RAX: ffffffffffffffda RBX: 00007f16b6de5fa0 RCX: 00007f16b6b8d9dc [ 648.067413][T21892] RDX: 000000000000000f RSI: 00007f16b7a030a0 RDI: 0000000000000004 [ 648.067424][T21892] RBP: 00007f16b7a03090 R08: 0000000000000000 R09: 0000000000000000 [ 648.067436][T21892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.067446][T21892] R13: 00007f16b6de6038 R14: 00007f16b6de5fa0 R15: 00007ffc9796a268 [ 648.067479][T21892] [ 648.394633][T21909] sctp: [Deprecated]: syz.1.4668 (pid 21909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.394633][T21909] Use struct sctp_sack_info instead [ 648.849476][T21917] nbd2: detected capacity change from 0 to 63 [ 648.864237][T21927] bond2: entered promiscuous mode [ 648.896307][T21927] bond2: entered allmulticast mode [ 648.933347][T21927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 649.096283][ T5833] block nbd2: Receive control failed (result -32) [ 649.412916][T21948] netlink: 'syz.0.4678': attribute type 3 has an invalid length. [ 649.431901][T21948] __nla_validate_parse: 3 callbacks suppressed [ 649.431917][T21948] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4678'. [ 649.566713][T21956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4681'. [ 649.898452][T21967] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4685'. [ 649.923224][T21967] netlink: 'syz.0.4685': attribute type 9 has an invalid length. [ 649.937300][T21967] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4685'. [ 649.975980][T21967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4685'. [ 650.103582][T21968] wg1 speed is unknown, defaulting to 1000 [ 650.139334][T21968] lo speed is unknown, defaulting to 1000 [ 650.819493][T22008] wg1 speed is unknown, defaulting to 1000 [ 650.829706][T22008] lo speed is unknown, defaulting to 1000 [ 651.113880][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4702'. [ 651.309197][T22020] netlink: 'syz.4.4702': attribute type 1 has an invalid length. [ 651.721396][T22044] netlink: 'syz.3.4709': attribute type 3 has an invalid length. [ 652.472166][T22056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4713'. [ 652.502624][T22056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4713'. [ 652.526333][T22056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4713'. [ 652.722703][T22061] wg1 speed is unknown, defaulting to 1000 [ 652.771759][T22061] lo speed is unknown, defaulting to 1000 [ 652.823879][T22069] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4716'. [ 653.510092][ T5833] Bluetooth: hci2: link tx timeout [ 653.516356][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 653.526580][ T52] Bluetooth: hci2: link tx timeout [ 653.538018][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 653.940521][T22125] netlink: 'syz.1.4738': attribute type 3 has an invalid length. [ 654.148925][T22134] wg1 speed is unknown, defaulting to 1000 [ 654.156597][T22134] lo speed is unknown, defaulting to 1000 [ 655.236300][T22170] sctp: [Deprecated]: syz.3.4752 (pid 22170) Use of int in maxseg socket option. [ 655.236300][T22170] Use struct sctp_assoc_value instead [ 655.544717][T22178] __nla_validate_parse: 4 callbacks suppressed [ 655.545908][T22178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4756'. [ 655.573111][T22177] netlink: 'syz.3.4755': attribute type 13 has an invalid length. [ 655.581534][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 655.581845][T22178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4756'. [ 655.597429][T22178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4756'. [ 655.649925][T22177] tipc: Resetting bearer [ 656.406095][T22177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.450437][T22177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.007929][T22186] netlink: 'syz.4.4759': attribute type 3 has an invalid length. [ 657.015687][T22186] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4759'. [ 657.058468][ T5940] wg1 speed is unknown, defaulting to 1000 [ 657.064308][ T5940] syz0: Port: 1 Link DOWN [ 657.151468][T12255] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.176848][T12255] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.191477][T22217] xt_TCPMSS: Only works on TCP SYN packets [ 657.253483][T22215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 657.268892][T22215] bridge0: port 1(bond1) entered blocking state [ 657.287673][T22215] bridge0: port 1(bond1) entered disabled state [ 657.294159][T22215] bond1: entered allmulticast mode [ 657.351772][T22215] bond1: entered promiscuous mode [ 657.376196][T22215] bridge0: port 1(bond1) entered blocking state [ 657.383034][T22215] bridge0: port 1(bond1) entered forwarding state [ 657.430946][T12255] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.446475][T22217] delete_channel: no stack [ 657.488595][T12260] bridge0: port 1(bond1) entered disabled state [ 657.518136][T12255] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.750726][T22245] netlink: 'syz.2.4774': attribute type 3 has an invalid length. [ 657.782616][T22245] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4774'. [ 657.808678][T22248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4775'. [ 658.024465][ T30] audit: type=1804 audit(1761006115.277:6): pid=22264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4778" name="/newroot/347/x000000000000000f00000000000000000000017" dev="tmpfs" ino=1776 res=1 errno=0 [ 658.101877][ T30] audit: type=1800 audit(1761006115.307:7): pid=22264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4778" name="x000000000000000f00000000000000000000017" dev="tmpfs" ino=1776 res=0 errno=0 [ 658.201253][T22270] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4781'. [ 658.339701][T22282] wg1 speed is unknown, defaulting to 1000 [ 658.348382][T22282] lo speed is unknown, defaulting to 1000 [ 658.404205][T22285] netlink: 'syz.0.4788': attribute type 3 has an invalid length. [ 658.421108][T22285] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4788'. [ 658.462221][T22287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4787'. [ 658.510664][T22288] syzkaller0: mtu less than device minimum [ 658.622985][T22295] siw: device registration error -23 [ 658.771438][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'. [ 658.846031][T22305] netlink: 'syz.1.4796': attribute type 4 has an invalid length. [ 658.856392][T22304] netlink: 'syz.1.4796': attribute type 4 has an invalid length. [ 658.903694][T22308] netlink: 'syz.1.4796': attribute type 4 has an invalid length. [ 659.028645][T22305] veth1_vlan: left allmulticast mode [ 659.070629][T22316] netlink: 'syz.3.4800': attribute type 3 has an invalid length. [ 659.081448][T22304] macsec0: left allmulticast mode [ 659.091032][T22304] macsec0: left promiscuous mode [ 659.096165][T22304] bridge0: port 3(macsec0) entered disabled state [ 659.106226][T22304] bond1: (slave ip6gretap1): Releasing active interface [ 659.128320][T22314] wg1 speed is unknown, defaulting to 1000 [ 659.149055][T22314] lo speed is unknown, defaulting to 1000 [ 659.194504][T22308] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 659.407098][T22336] netlink: 'syz.4.4805': attribute type 1 has an invalid length. [ 659.575684][T22344] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 659.615712][T22344] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 659.875099][T22361] netlink: 'syz.3.4813': attribute type 3 has an invalid length. [ 660.009782][T22370] netlink: 'syz.2.4816': attribute type 13 has an invalid length. [ 660.093693][T22377] ip6gretap0: entered promiscuous mode [ 660.119744][T22374] netlink: 'syz.1.4820': attribute type 7 has an invalid length. [ 660.128187][T22374] netlink: 'syz.1.4820': attribute type 8 has an invalid length. [ 660.308275][T22395] Unsupported xt match [ 660.308293][T22395] unable to load match [ 661.154385][T22447] __nla_validate_parse: 13 callbacks suppressed [ 661.154403][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4843'. [ 661.589655][T22459] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4848'. [ 661.702978][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 661.762753][T22491] tun6: tun_chr_ioctl cmd 1074025675 [ 661.776250][T22491] tun6: persist disabled [ 661.799471][T22491] netlink: 'syz.4.4860': attribute type 5 has an invalid length. [ 662.200943][T22526] netlink: 'syz.0.4871': attribute type 1 has an invalid length. [ 662.209458][T22526] netlink: 'syz.0.4871': attribute type 4 has an invalid length. [ 662.218678][T22526] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4871'. [ 662.231590][T22526] netlink: 'syz.0.4871': attribute type 1 has an invalid length. [ 662.253861][T22526] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4871'. [ 662.518945][T22535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4875'. [ 662.576776][T22537] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 662.661622][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4879'. [ 662.801031][T22539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.816940][T22539] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.839959][T22539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.343523][T22580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4889'. [ 663.405781][T22578] wg1 speed is unknown, defaulting to 1000 [ 663.429785][T22578] lo speed is unknown, defaulting to 1000 [ 663.485064][T22581] wg1 speed is unknown, defaulting to 1000 [ 663.505220][T22581] lo speed is unknown, defaulting to 1000 [ 663.600190][T22585] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4890'. [ 663.680788][T22585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4890'. [ 663.873959][T22593] tc_dump_action: action bad kind [ 664.035198][T22607] sch_tbf: peakrate 7 is lower than or equals to rate 9675163233977606466 ! [ 664.261643][T22619] validate_nla: 7 callbacks suppressed [ 664.261660][T22619] netlink: 'syz.0.4900': attribute type 3 has an invalid length. [ 664.523429][T22637] netlink: 'syz.0.4907': attribute type 13 has an invalid length. [ 664.548900][T22637] netlink: 'syz.0.4907': attribute type 17 has an invalid length. [ 664.624524][T22637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.165407][T22658] wg1 speed is unknown, defaulting to 1000 [ 665.176015][T22661] wg1 speed is unknown, defaulting to 1000 [ 665.183962][T22658] lo speed is unknown, defaulting to 1000 [ 665.200562][T22661] lo speed is unknown, defaulting to 1000 [ 665.566495][T22693] netlink: 'syz.1.4926': attribute type 3 has an invalid length. [ 665.582945][T22693] netlink: 'syz.1.4926': attribute type 3 has an invalid length. [ 665.788633][ T5913] IPVS: starting estimator thread 0... [ 665.889032][T22707] IPVS: using max 25 ests per chain, 60000 per kthread [ 666.013852][T22715] IPVS: Error connecting to the multicast addr [ 666.231949][T22728] netlink: 'syz.0.4938': attribute type 1 has an invalid length. [ 666.307003][T22728] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 666.319061][T22728] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 666.403746][T22739] __nla_validate_parse: 8 callbacks suppressed [ 666.403764][T22739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4938'. [ 666.456510][T22739] macvlan0: entered promiscuous mode [ 666.463727][T22739] macvlan0: entered allmulticast mode [ 666.470957][T22739] bond3: (slave macvlan0): Error -98 calling set_mac_address [ 666.666087][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4943'. [ 666.935560][T22756] wg1 speed is unknown, defaulting to 1000 [ 666.970057][T22756] lo speed is unknown, defaulting to 1000 [ 667.117494][T22759] tipc: Enabled bearer , priority 0 [ 667.150627][T22764] syzkaller0: entered promiscuous mode [ 667.168511][T22764] syzkaller0: entered allmulticast mode [ 667.232893][T22770] macvlan1: left promiscuous mode [ 667.240160][T22770] macvlan1: left allmulticast mode [ 667.273749][T22759] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 667.324434][T22759] tipc: Resetting bearer [ 667.528924][T22755] tipc: Resetting bearer [ 667.551051][T22785] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4956'. [ 667.562433][T22755] tipc: Disabling bearer [ 667.574441][T22784] FAULT_INJECTION: forcing a failure. [ 667.574441][T22784] name failslab, interval 1, probability 0, space 0, times 0 [ 667.590285][T22784] CPU: 0 UID: 0 PID: 22784 Comm: syz.4.4955 Not tainted syzkaller #0 PREEMPT(full) [ 667.590309][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.590320][T22784] Call Trace: [ 667.590328][T22784] [ 667.590336][T22784] dump_stack_lvl+0x189/0x250 [ 667.590368][T22784] ? __pfx____ratelimit+0x10/0x10 [ 667.590390][T22784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.590410][T22784] ? __pfx__printk+0x10/0x10 [ 667.590434][T22784] ? __lock_acquire+0xab9/0xd20 [ 667.590465][T22784] should_fail_ex+0x414/0x560 [ 667.590488][T22784] should_failslab+0xa8/0x100 [ 667.590514][T22784] kmem_cache_alloc_noprof+0x74/0x6e0 [ 667.590534][T22784] ? skb_clone+0x212/0x3a0 [ 667.590559][T22784] skb_clone+0x212/0x3a0 [ 667.590584][T22784] __netlink_deliver_tap+0x404/0x850 [ 667.590617][T22784] ? netlink_deliver_tap+0x2e/0x1b0 [ 667.590637][T22784] netlink_deliver_tap+0x19c/0x1b0 [ 667.590657][T22784] netlink_unicast+0x7fa/0x9e0 [ 667.590691][T22784] ? __pfx_netlink_unicast+0x10/0x10 [ 667.590718][T22784] ? netlink_sendmsg+0x642/0xb30 [ 667.590733][T22784] ? skb_put+0x11b/0x210 [ 667.590755][T22784] netlink_sendmsg+0x805/0xb30 [ 667.590784][T22784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.590807][T22784] ? aa_sock_msg_perm+0xf1/0x1d0 [ 667.590829][T22784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.590850][T22784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.590871][T22784] __sock_sendmsg+0x21c/0x270 [ 667.590898][T22784] ____sys_sendmsg+0x505/0x830 [ 667.590925][T22784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.590961][T22784] ? import_iovec+0x74/0xa0 [ 667.590988][T22784] ___sys_sendmsg+0x21f/0x2a0 [ 667.591011][T22784] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.591070][T22784] ? __fget_files+0x2a/0x420 [ 667.591091][T22784] ? __fget_files+0x3a0/0x420 [ 667.591124][T22784] __x64_sys_sendmsg+0x19b/0x260 [ 667.591147][T22784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.591177][T22784] ? __pfx_ksys_write+0x10/0x10 [ 667.591201][T22784] ? do_syscall_64+0xbe/0xfa0 [ 667.591228][T22784] do_syscall_64+0xfa/0xfa0 [ 667.591248][T22784] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.591270][T22784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.591288][T22784] ? clear_bhb_loop+0x60/0xb0 [ 667.591310][T22784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.591326][T22784] RIP: 0033:0x7f0b6b58efc9 [ 667.591343][T22784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.591362][T22784] RSP: 002b:00007f0b6c49f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.591382][T22784] RAX: ffffffffffffffda RBX: 00007f0b6b7e5fa0 RCX: 00007f0b6b58efc9 [ 667.591395][T22784] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 667.591407][T22784] RBP: 00007f0b6c49f090 R08: 0000000000000000 R09: 0000000000000000 [ 667.591418][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.591428][T22784] R13: 00007f0b6b7e6038 R14: 00007f0b6b7e5fa0 R15: 00007ffca803cff8 [ 667.591461][T22784] [ 667.591495][T22784] netlink: 'syz.4.4955': attribute type 13 has an invalid length. [ 667.629516][T22785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'. [ 667.919490][T22784] netlink: 'syz.4.4955': attribute type 17 has an invalid length. [ 668.034690][T22784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.229559][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4962'. [ 668.374967][T22817] [ 668.377991][T22817] ============================= [ 668.382873][T22817] WARNING: suspicious RCU usage [ 668.387898][T22817] syzkaller #0 Not tainted [ 668.390095][T22819] netlink: 'syz.1.4965': attribute type 2 has an invalid length. [ 668.392307][T22817] ----------------------------- [ 668.392320][T22817] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 668.413884][T22817] [ 668.413884][T22817] other info that might help us debug this: [ 668.413884][T22817] [ 668.424160][T22817] [ 668.424160][T22817] rcu_scheduler_active = 2, debug_locks = 1 [ 668.432323][T22817] 1 lock held by syz.4.4966/22817: [ 668.437632][T22817] #0: ffffffff8e13d4c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 668.447884][T22817] [ 668.447884][T22817] stack backtrace: [ 668.453774][T22817] CPU: 1 UID: 0 PID: 22817 Comm: syz.4.4966 Not tainted syzkaller #0 PREEMPT(full) [ 668.453798][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 668.453810][T22817] Call Trace: [ 668.453817][T22817] [ 668.453826][T22817] dump_stack_lvl+0x189/0x250 [ 668.453855][T22817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.453875][T22817] ? __pfx__printk+0x10/0x10 [ 668.453910][T22817] lockdep_rcu_suspicious+0x140/0x1d0 [ 668.453941][T22817] get_callchain_entry+0x2b6/0x3c0 [ 668.453966][T22817] get_perf_callchain+0xb3/0x6f0 [ 668.453986][T22817] ? __pfx___schedule+0x10/0x10 [ 668.454013][T22817] ? __pfx_get_perf_callchain+0x10/0x10 [ 668.454049][T22817] __bpf_get_stack+0x3fa/0xa60 [ 668.454079][T22817] ? __pfx___bpf_get_stack+0x10/0x10 [ 668.454112][T22817] bpf_get_stack+0x33/0x50 [ 668.454131][T22817] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 668.454150][T22817] bpf_get_stack_raw_tp+0x1a9/0x220 [ 668.454177][T22817] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 668.454195][T22817] bpf_prog_run_pin_on_cpu+0x143/0x470 [ 668.454223][T22817] bpf_prog_test_run_syscall+0x312/0x4b0 [ 668.454247][T22817] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 668.454266][T22817] ? __fget_files+0x2a/0x420 [ 668.454295][T22817] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 668.454317][T22817] bpf_prog_test_run+0x2c7/0x340 [ 668.454352][T22817] __sys_bpf+0x562/0x860 [ 668.454377][T22817] ? __pfx___sys_bpf+0x10/0x10 [ 668.454397][T22817] ? count_memcg_event_mm+0x21/0x260 [ 668.454439][T22817] ? rcu_is_watching+0x15/0xb0 [ 668.454474][T22817] __x64_sys_bpf+0x7c/0x90 [ 668.454495][T22817] do_syscall_64+0xfa/0xfa0 [ 668.454517][T22817] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.454540][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.454558][T22817] ? clear_bhb_loop+0x60/0xb0 [ 668.454581][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.454599][T22817] RIP: 0033:0x7f0b6b58efc9 [ 668.454615][T22817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.454631][T22817] RSP: 002b:00007f0b6c49f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.454650][T22817] RAX: ffffffffffffffda RBX: 00007f0b6b7e5fa0 RCX: 00007f0b6b58efc9 [ 668.454664][T22817] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 668.454676][T22817] RBP: 00007f0b6b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.454688][T22817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.454700][T22817] R13: 00007f0b6b7e6038 R14: 00007f0b6b7e5fa0 R15: 00007ffca803cff8 [ 668.454733][T22817]