last executing test programs: 5m9.041167784s ago: executing program 2 (id=917): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x4010, r0, 0x2fa23000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x55, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000090ff00000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000cd0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500010000000000000000002d000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 5m8.611211875s ago: executing program 4 (id=918): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000580), 0x58}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @loopback, 0xd6}}]}, 0x290) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 5m8.46778774s ago: executing program 0 (id=919): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0) close(0x3) 5m7.972740858s ago: executing program 2 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x3c, 0x10, 0x439, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xb881, 0x4014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x4040844) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x35, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000c02}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000000, 0x45}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b8973b40eb25fa17961ce2e93c"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "17aba6a796"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd59e86016"}]}, 0x70}, 0x1, 0x0, 0x0, 0x40884}, 0x8040) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r10}, 0x10) 5m5.735240328s ago: executing program 3 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r11, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5m5.593761071s ago: executing program 2 (id=926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 5m5.433204446s ago: executing program 2 (id=927): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) close(0x3) 5m5.08861163s ago: executing program 2 (id=928): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000580), 0x58}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @loopback, 0xd6}}]}, 0x290) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 5m3.57583601s ago: executing program 4 (id=929): r0 = socket(0x1, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x2c}}, 0x40) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x40d0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) unshare(0x26020480) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x7}, 0x38) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x103}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x120}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m2.52123831s ago: executing program 4 (id=930): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 5m1.611754613s ago: executing program 3 (id=931): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xa, 0x5}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x200048c1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f80010001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f0000000540)="d9e48adaa14d8e01172c76a8c465b874e2b2c3b9ebace0a9335184af03af3ccdce5898d449fd85d206e2e34c7a2d011bbf04e89065ac6f3aa7e6e07f7f16c132caa906e249abaf3ad262559188a4aabffc3d48048d6cfe0facb57444791167d0727cabee102b27aa2591f0461eae98c9fde731d9628f800a55f425035ff00a0c9df222a28563f5dbfeee93abeea6c44bf31fbdd4d3d2ee64dd90e369ae4024142f1df4f236ed79164636f2c36afd61270560145aa76423f7993a349e", &(0x7f0000000600)=""/1, &(0x7f0000000640)="27d4e6f3a793f5433d62c697dedf5ca200f16df183de1411577a6265731d669bdf65be6626afb8ef005d6db652b084ce1a97529df2908edabb7319c69c215c1ed9649973bad8878eec63274cdc9dbf5f0759d02abb970c5ae18962ae09d6e287a24bf44a803d9879fed5504184e9e2d3e63facf89ecc5b17a6794c8ac7d6363bc0ae2b793825b274b5cc4d98433c5283a78791c3b5eca67b40c715105ba53762250096ca9d7bc11b9b96161fed35ab4bcf21ce199cb8358ef7e8b5a032116e3bf169c73c93abb949b0c6327ed046cb4600e4320d9cb38de971006d6c6a68de", &(0x7f00000007c0)="75b8f2ed9cd2655740f4e70d9b4d3805d04dc121be8a63f2a3d0b7d1f1fcd3691fbdf2cb693a91477c63e90982ac8e2154a0ec85dfefdc4c6fb6c5c293a0d5f7edba4e0667f060bfefa2fad00d2f99e95020062faa5d62826a4393e891a826d84251cad0905bb92f9d87504ba9335f4d3a6ae2982e9872a2b51454916e37ced468b45700023e6c390656a4572a6f630787fe0b32c9947c728536b37d16407a676f8fd9b4cef31bf12b48a25b55beb087d521ab07644b86550300551d21", 0x0, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(r2, r1, 0x0, 0xf03a0005) close(0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) 5m1.473262044s ago: executing program 0 (id=932): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x4010, r0, 0x2fa23000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x55, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000090ff0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000cd0000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500010000000000000000002d000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 5m0.537046195s ago: executing program 3 (id=935): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593", 0xca}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e45", 0x10}], 0x3}, 0x0) 5m0.256950594s ago: executing program 3 (id=936): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x3c, 0x10, 0x439, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xb881, 0x4014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x4040844) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x35, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000c02}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000000, 0x45}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b8973b40eb25fa17961ce2e93c"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "17aba6a796"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd59e86016"}]}, 0x70}, 0x1, 0x0, 0x0, 0x40884}, 0x8040) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r10}, 0x10) 5m0.157717989s ago: executing program 0 (id=937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 5m0.095663272s ago: executing program 1 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf0db}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf976}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4e79}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x28000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000002600090123bd4ceaf2b27640626000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4m59.868658668s ago: executing program 0 (id=939): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x31) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff00fc040000000000000000000000000000ff02000000000000000000000000000100000000ff00000000002000000000000400"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1d, 0x1, 0x6, &(0x7f0000000b80)=[0x0], 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000b80), &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x148, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x946}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_LABELS_MASK={0x4}, @CTA_NAT_SRC={0xac, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x54}, 0x20000880) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000c00)={@void, @val={0x3, 0x4, 0xa614, 0x401, 0x800, 0x5}, @ipv6=@icmpv6={0x9, 0x6, "0db318", 0x1fa, 0x3a, 0x0, @local, @mcast1, {[@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xbc}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts, @srh={0x2e, 0x12, 0x4, 0x9, 0x3, 0x20, 0x9, [@dev={0xfe, 0x80, '\x00', 0x20}, @empty, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @loopback, @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x32, 0x2, 0x0, 0x4, 0x0, [@mcast1]}, @routing={0x21, 0xe, 0x1, 0x5, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback]}], @ndisc_ns={0x87, 0x0, 0x0, @remote, [{0x19, 0x11, "ea05f70cd530abf6a3c5c061520505d6f45aeed654f36574c648d82904d3633c36b1d66d5eaf8174eac70db1d04704434e29595a718daed03c496a797d61cf23b2d74e5997a9450fdfc7ea7a34822c31b3afda860ce5efd8f366b63df86fac0b7c85e51713e1d989a0a0fda4f40dc51014cab5dc750c6377ed3be2ba94ddecf66ec3ced758402fa7a9a6b7b6"}]}}}}, 0x22c) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000fc0)={0xffffffffffffff90, 0x0, 0x1, 0x70ad25, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0xa0}, @NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0x84}, @NFC_ATTR_PROTOCOLS, @NFC_ATTR_DEVICE_INDEX, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 4m59.396167097s ago: executing program 4 (id=940): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x40000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000180)=""/70, 0x46, 0x0, &(0x7f0000000380)=""/200, 0xc8}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r4, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002b40)=""/4081, 0xff1}, {&(0x7f00000001c0)=""/249, 0xf9}], 0x2}, 0x10002) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08003f0086fc"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x1695, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000d40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e20, @remote}, {0x306, @broadcast}, 0x2, {0x2, 0x4e21, @local}, 'vlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000640)={'sit0\x00', &(0x7f00000002c0)={@loopback, 0x1, 0x0, 0x40, 0x0, [{@empty}, {@initdev}, {@remote}, {@private}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4m59.383191648s ago: executing program 3 (id=941): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000200)={r3, &(0x7f0000000000)='devices.list\x00', 0x8000, &(0x7f00000000c0)={@align=0x6, {0x9, 0x877, 0x7867, 0x6}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x67}) accept4$bt_l2cap(r4, 0x0, &(0x7f0000000240), 0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000000000000000000000000000000000001000000020000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0x6d, 0x0, &(0x7f0000000040)="c1df07000000930a30997b15298ee68886dd2070df63fe23574eb003d4718da32138fae8449530b482f0a650c59c966356fc8a63d20c33f0c934a593e03a40ed1972909b9b598e009beccfb92eb7642049cae939e852eae2302a69f779ed46f7f7fec865ead16a0eea3e891ae9", 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x50) 4m59.341326642s ago: executing program 1 (id=942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c76436ffffff8700", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m59.325642329s ago: executing program 2 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=r1], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095767a000000000047945bb4b78315bb61bdd61a9284e1ee0fcebdd417ec7c1346ab12bfafda704d954771a347ce97baf8093fe5061560fd2a8f3cb0d15c42d0c65b025f551878d0d185dfa24281a428b6fcf650aa3394bcb8085079612df552f2cce28dd2c877f9977eaad3e976042c599d98498d8bd60441bb49acc878a9969038c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYRES8=r3, @ANYBLOB="040027bd7000fcdbdf2505", @ANYBLOB="6c35041d0c26c8c763f89ba2de9eb65be4b34eeffeaa56bf981127ed49d3fd0d7ebefa859631"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = socket(0x10, 0x4, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r4}, 0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="188a00150000000000000000fb00000026456d95000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r11, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000280e0000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0080000000000000b702000014000000b7030000000000008500020083000000bf09009a7b9d8ce1f141ed0000000000950000000008000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000070000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x3a4, 0xd4, &(0x7f0000000d00)=""/212, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x4, 0x8, 0x9}, 0x10, r12, r4, 0x4, &(0x7f0000000a80)=[r2, r2], &(0x7f0000000ac0)=[{0x3, 0x4, 0xd, 0x8}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0xc, 0x5}, {0x3, 0x5, 0x0, 0x2}]}, 0x94) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c"], 0xfdef) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r13, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 4m59.098406529s ago: executing program 0 (id=944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRES8=r2, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16=0x0], 0x114}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000007400)=ANY=[@ANYBLOB="c4240000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32, @ANYRES8=r2], 0x24c4}}, 0xc0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffe8c, &(0x7f0000000440)={&(0x7f00000007c0)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xeb7a, 0x46}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x3c}}, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r5}, 0x38) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="38000000180000000000cc98658e40291000", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r11, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25060000001400018008000300020000000800e6ff00000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$SMC_PNETID_GET(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6000000000002d9300000c0001", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000500)={@local, 0x48, r9}) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 4m58.447918198s ago: executing program 0 (id=945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x5, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x3, 0x7, 0x28, 0x8, 0xfe, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="2e9b5b00ace03dd6d1", 0x9}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r2}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r2}, 0x38) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)={r1}, &(0x7f00000005c0)=0x8) 4m58.016254965s ago: executing program 4 (id=946): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x48004) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) 4m57.881493757s ago: executing program 1 (id=947): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c55932625", 0xcc}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e45", 0x10}], 0x3}, 0x0) 4m57.409533951s ago: executing program 4 (id=948): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x4010, r0, 0x2fa23000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x55, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000090ff0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000cd0000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500010000000000000000002d000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 4m57.351604426s ago: executing program 1 (id=949): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 4m56.363673459s ago: executing program 1 (id=950): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 4m53.178224961s ago: executing program 3 (id=951): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10}, 0x94) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m43.940584392s ago: executing program 1 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) 4m42.098931732s ago: executing program 32 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=r1], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095767a000000000047945bb4b78315bb61bdd61a9284e1ee0fcebdd417ec7c1346ab12bfafda704d954771a347ce97baf8093fe5061560fd2a8f3cb0d15c42d0c65b025f551878d0d185dfa24281a428b6fcf650aa3394bcb8085079612df552f2cce28dd2c877f9977eaad3e976042c599d98498d8bd60441bb49acc878a9969038c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYRES8=r3, @ANYBLOB="040027bd7000fcdbdf2505", @ANYBLOB="6c35041d0c26c8c763f89ba2de9eb65be4b34eeffeaa56bf981127ed49d3fd0d7ebefa859631"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = socket(0x10, 0x4, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r4}, 0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="188a00150000000000000000fb00000026456d95000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r11, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000280e0000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0080000000000000b702000014000000b7030000000000008500020083000000bf09009a7b9d8ce1f141ed0000000000950000000008000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000070000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x3a4, 0xd4, &(0x7f0000000d00)=""/212, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x4, 0x8, 0x9}, 0x10, r12, r4, 0x4, &(0x7f0000000a80)=[r2, r2], &(0x7f0000000ac0)=[{0x3, 0x4, 0xd, 0x8}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0xc, 0x5}, {0x3, 0x5, 0x0, 0x2}]}, 0x94) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c"], 0xfdef) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r13, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 4m36.975215821s ago: executing program 33 (id=945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x5, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x3, 0x7, 0x28, 0x8, 0xfe, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="2e9b5b00ace03dd6d1", 0x9}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r2}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r2}, 0x38) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)={r1}, &(0x7f00000005c0)=0x8) 4m26.787694581s ago: executing program 34 (id=948): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x4010, r0, 0x2fa23000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x55, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000090ff0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000cd0000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500010000000000000000002d000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 4m19.739671568s ago: executing program 35 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) 4m16.990275447s ago: executing program 36 (id=951): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10}, 0x94) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m41.654772478s ago: executing program 6 (id=954): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000580), 0x58}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @loopback, 0xd6}}]}, 0x290) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 3m36.536133078s ago: executing program 7 (id=955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRES8=r2, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16=0x0], 0x114}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000007400)=ANY=[@ANYBLOB="c4240000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32, @ANYRES8=r2], 0x24c4}}, 0xc0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffe8c, &(0x7f0000000440)={&(0x7f00000007c0)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xeb7a, 0x46}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x3c}}, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r5}, 0x38) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="38000000180000000000cc98658e40291000", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r11, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25060000001400018008000300020000000800e6ff00000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$SMC_PNETID_GET(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6000000000002d9300000c0001", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000500)={@local, 0x48, r9}) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3m27.066364097s ago: executing program 9 (id=957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c76436ffffff8700", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.557170161s ago: executing program 6 (id=954): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000580), 0x58}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @loopback, 0xd6}}]}, 0x290) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 0s ago: executing program 9 (id=957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90a"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c76436ffffff8700", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ogle Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.413365][ T7063] Call Trace: [ 145.413373][ T7063] [ 145.413382][ T7063] dump_stack_lvl+0xe8/0x150 [ 145.413421][ T7063] should_fail_ex+0x40c/0x560 [ 145.413482][ T7063] should_failslab+0xa8/0x100 [ 145.413517][ T7063] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 145.413544][ T7063] ? skb_clone+0x212/0x3a0 [ 145.413575][ T7063] ? skb_clone+0x212/0x3a0 [ 145.413615][ T7063] skb_clone+0x212/0x3a0 [ 145.413647][ T7063] ? nfnetlink_rcv+0x4b0/0x28c0 [ 145.413680][ T7063] nfnetlink_rcv+0x4de/0x28c0 [ 145.413714][ T7063] ? kernel_text_address+0xa5/0xe0 [ 145.413748][ T7063] ? __kernel_text_address+0xd/0x30 [ 145.413782][ T7063] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 145.413809][ T7063] ? arch_stack_walk+0xfb/0x150 [ 145.413845][ T7063] ? stack_trace_save+0xa9/0x100 [ 145.413874][ T7063] ? __lock_acquire+0x683/0x2cf0 [ 145.413904][ T7063] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 145.413956][ T7063] ? __lock_acquire+0x683/0x2cf0 [ 145.413998][ T7063] ? __netlink_lookup+0xc6/0x8b0 [ 145.414030][ T7063] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.414064][ T7063] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.414107][ T7063] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.414139][ T7063] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.414178][ T7063] netlink_unicast+0x7bb/0x940 [ 145.414220][ T7063] netlink_sendmsg+0x813/0xb40 [ 145.414264][ T7063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.414302][ T7063] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.414329][ T7063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.414361][ T7063] sock_sendmsg_nosec+0x13a/0x180 [ 145.414390][ T7063] ____sys_sendmsg+0x54e/0x850 [ 145.414428][ T7063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.414478][ T7063] ? import_iovec+0x73/0xa0 [ 145.414513][ T7063] ___sys_sendmsg+0x2a5/0x360 [ 145.414544][ T7063] ? __lock_acquire+0x683/0x2cf0 [ 145.414577][ T7063] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.414648][ T7063] ? __fget_files+0x2a/0x420 [ 145.414676][ T7063] ? __fget_files+0x3a2/0x420 [ 145.414715][ T7063] __x64_sys_sendmsg+0x1b1/0x290 [ 145.414751][ T7063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.414803][ T7063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.414827][ T7063] do_syscall_64+0x174/0x580 [ 145.414856][ T7063] ? trace_irq_disable+0x3b/0x140 [ 145.414883][ T7063] ? clear_bhb_loop+0x40/0x90 [ 145.414910][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.414932][ T7063] RIP: 0033:0x7fae4d39de59 [ 145.414952][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.414969][ T7063] RSP: 002b:00007fae4e302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.414992][ T7063] RAX: ffffffffffffffda RBX: 00007fae4d625fa0 RCX: 00007fae4d39de59 [ 145.415020][ T7063] RDX: 0000000020004090 RSI: 0000200000009b40 RDI: 0000000000000003 [ 145.415033][ T7063] RBP: 00007fae4e302090 R08: 0000000000000000 R09: 0000000000000000 [ 145.415046][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.415058][ T7063] R13: 00007fae4d626038 R14: 00007fae4d625fa0 R15: 00007fffb4fa55f8 [ 145.415092][ T7063] [ 145.982052][ T7067] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 146.236080][ T7078] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 146.424833][ T7087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.353'. [ 146.492753][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 146.602077][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'. [ 146.724491][ T7095] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 146.786772][ T7095] macvlan2: entered promiscuous mode [ 146.792964][ T7095] macvlan2: entered allmulticast mode [ 146.799323][ T7095] bond1: entered promiscuous mode [ 146.804628][ T7095] bridge1: entered promiscuous mode [ 146.812350][ T7095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.832538][ T7095] bond1: left promiscuous mode [ 146.842178][ T7095] bridge1: left promiscuous mode [ 146.921584][ T7108] FAULT_INJECTION: forcing a failure. [ 146.921584][ T7108] name failslab, interval 1, probability 0, space 0, times 0 [ 146.934669][ T7108] CPU: 0 UID: 0 PID: 7108 Comm: syz.0.357 Not tainted syzkaller #0 PREEMPT(full) [ 146.934698][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.934711][ T7108] Call Trace: [ 146.934720][ T7108] [ 146.934728][ T7108] dump_stack_lvl+0xe8/0x150 [ 146.934765][ T7108] should_fail_ex+0x40c/0x560 [ 146.934795][ T7108] should_failslab+0xa8/0x100 [ 146.934829][ T7108] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 146.934855][ T7108] ? local_lock_release+0x9c/0x160 [ 146.934885][ T7108] ? __alloc_skb+0x1d7/0x7a0 [ 146.934911][ T7108] ? __alloc_skb+0x1d7/0x7a0 [ 146.934946][ T7108] __alloc_skb+0x1d7/0x7a0 [ 146.934979][ T7108] alloc_skb_with_frags+0xc6/0x760 [ 146.935024][ T7108] tcp_send_rcvq+0x14b/0x520 [ 146.935058][ T7108] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 146.935085][ T7108] ? is_bpf_text_address+0x26/0x2b0 [ 146.935128][ T7108] tcp_sendmsg_locked+0x4e53/0x55c0 [ 146.935161][ T7108] ? __lock_acquire+0x683/0x2cf0 [ 146.935190][ T7108] ? tcp_sendmsg_locked+0x691/0x55c0 [ 146.935231][ T7108] ? kernel_text_address+0xa5/0xe0 [ 146.935272][ T7108] ? __lock_acquire+0x683/0x2cf0 [ 146.935330][ T7108] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 146.935370][ T7108] ? tcp_sendmsg+0x21/0x50 [ 146.935404][ T7108] ? __local_bh_enable_ip+0xd0/0x130 [ 146.935433][ T7108] tcp_sendmsg+0x2f/0x50 [ 146.935465][ T7108] ? __pfx_inet_sendmsg+0x10/0x10 [ 146.935490][ T7108] sock_sendmsg_nosec+0x10e/0x180 [ 146.935518][ T7108] sock_sendmsg+0x1ca/0x2d0 [ 146.935545][ T7108] ? __pfx_sock_sendmsg+0x10/0x10 [ 146.935581][ T7108] ? __asan_memset+0x22/0x50 [ 146.935619][ T7108] ? iov_iter_bvec+0xb8/0x180 [ 146.935652][ T7108] splice_to_socket+0xb5e/0x12a0 [ 146.935704][ T7108] ? __pfx_splice_to_socket+0x10/0x10 [ 146.935784][ T7108] ? __pfx_splice_to_socket+0x10/0x10 [ 146.935816][ T7108] direct_splice_actor+0x101/0x160 [ 146.935853][ T7108] splice_direct_to_actor+0x57b/0xcb0 [ 146.935907][ T7108] ? __pfx_direct_splice_actor+0x10/0x10 [ 146.935937][ T7108] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 146.935980][ T7108] do_splice_direct+0x195/0x290 [ 146.936014][ T7108] ? __pfx_do_splice_direct+0x10/0x10 [ 146.936045][ T7108] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 146.936080][ T7108] ? bpf_lsm_file_permission+0x9/0x20 [ 146.936104][ T7108] ? security_file_permission+0x75/0x260 [ 146.936136][ T7108] ? rw_verify_area+0x203/0x4c0 [ 146.936173][ T7108] do_sendfile+0x52e/0x7c0 [ 146.936209][ T7108] ? __pfx_do_sendfile+0x10/0x10 [ 146.936234][ T7108] ? __fget_files+0x3a2/0x420 [ 146.936273][ T7108] __se_sys_sendfile64+0x144/0x1a0 [ 146.936298][ T7108] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 146.936330][ T7108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.936354][ T7108] do_syscall_64+0x174/0x580 [ 146.936382][ T7108] ? trace_irq_disable+0x3b/0x140 [ 146.936408][ T7108] ? clear_bhb_loop+0x40/0x90 [ 146.936435][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.936457][ T7108] RIP: 0033:0x7f9f9df9de59 [ 146.936477][ T7108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.936494][ T7108] RSP: 002b:00007f9f9ef4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 146.936517][ T7108] RAX: ffffffffffffffda RBX: 00007f9f9e225fa0 RCX: 00007f9f9df9de59 [ 146.936532][ T7108] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 146.936544][ T7108] RBP: 00007f9f9ef4d090 R08: 0000000000000000 R09: 0000000000000000 [ 146.936557][ T7108] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000001 [ 146.936570][ T7108] R13: 00007f9f9e226038 R14: 00007f9f9e225fa0 R15: 00007fff1a64f368 [ 146.936616][ T7108] [ 147.769726][ T7127] nbd: must specify a size in bytes for the device [ 147.872082][ T7105] can: request_module (can-proto-0) failed. [ 148.033113][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 148.368960][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.365'. [ 148.406822][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.365'. [ 148.492140][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 148.875245][ T7164] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 149.070298][ T7172] erspan0: left promiscuous mode [ 149.087515][ T7172] erspan0: left allmulticast mode [ 149.615100][ T7192] Cannot find add_set index 1 as target [ 149.630342][ T7192] __nla_validate_parse: 1 callbacks suppressed [ 149.630363][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.378'. [ 149.781908][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 149.791848][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'. [ 150.265259][ T7208] erspan0: entered promiscuous mode [ 150.286739][ T7208] erspan0: entered allmulticast mode [ 150.593136][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 151.095526][ T7240] erspan0: entered promiscuous mode [ 151.106387][ T7240] erspan0: entered allmulticast mode [ 151.368822][ T7250] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.491340][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.498935][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.515588][ T7255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.399'. [ 151.743757][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.763265][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.068540][ T772] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.091192][ T772] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 1792 - 0 [ 152.112501][ T772] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.128498][ T772] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 1792 - 0 [ 152.138109][ T7269] erspan0: entered promiscuous mode [ 152.143511][ T7269] erspan0: entered allmulticast mode [ 152.167400][ T772] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.180598][ T772] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 1792 - 0 [ 152.199957][ T772] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.225162][ T7271] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 152.233172][ T772] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 1792 - 0 [ 152.334724][ T7271] team0: Port device dummy0 added [ 152.345283][ T7275] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 152.360406][ T7275] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 152.379396][ T5761] lo speed is unknown, defaulting to 1000 [ 152.394703][ T5761] syz2: Port: 1 Link ACTIVE [ 152.515536][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 152.608077][ T7281] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 152.631976][ T7281] macvlan2: entered promiscuous mode [ 152.637447][ T7281] macvlan2: entered allmulticast mode [ 152.643658][ T7281] bond2: entered promiscuous mode [ 152.649305][ T7281] bridge2: entered promiscuous mode [ 152.655749][ T7281] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.679104][ T7281] bond2: left promiscuous mode [ 152.690529][ T7281] bridge2: left promiscuous mode [ 153.103796][ T7299] erspan0: entered allmulticast mode [ 153.124444][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 153.528400][ T7313] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 154.573878][ T7006] IPVS: starting estimator thread 0... [ 154.666609][ T7344] IPVS: using max 27 ests per chain, 64800 per kthread [ 154.877116][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 155.036017][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 155.107002][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 155.200748][ T7371] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.756829][ T7401] FAULT_INJECTION: forcing a failure. [ 155.756829][ T7401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.776476][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.3.450 Not tainted syzkaller #0 PREEMPT(full) [ 155.776505][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.776518][ T7401] Call Trace: [ 155.776528][ T7401] [ 155.776537][ T7401] dump_stack_lvl+0xe8/0x150 [ 155.776575][ T7401] should_fail_ex+0x40c/0x560 [ 155.776606][ T7401] _copy_to_user+0x31/0xb0 [ 155.776640][ T7401] simple_read_from_buffer+0xe1/0x170 [ 155.776676][ T7401] proc_fail_nth_read+0x1bb/0x230 [ 155.776709][ T7401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.776741][ T7401] ? rw_verify_area+0x24a/0x4c0 [ 155.776776][ T7401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.776804][ T7401] vfs_read+0x213/0xa80 [ 155.776842][ T7401] ? __pfx___mutex_lock+0x10/0x10 [ 155.776873][ T7401] ? __pfx_vfs_read+0x10/0x10 [ 155.776912][ T7401] ? __fget_files+0x2a/0x420 [ 155.776945][ T7401] ? __fget_files+0x3a2/0x420 [ 155.776971][ T7401] ? __fget_files+0x2a/0x420 [ 155.777010][ T7401] ksys_read+0x150/0x270 [ 155.777044][ T7401] ? __pfx_ksys_read+0x10/0x10 [ 155.777085][ T7401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.777110][ T7401] do_syscall_64+0x174/0x580 [ 155.777139][ T7401] ? trace_irq_disable+0x3b/0x140 [ 155.777166][ T7401] ? clear_bhb_loop+0x40/0x90 [ 155.777193][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.777215][ T7401] RIP: 0033:0x7f881655e68e [ 155.777236][ T7401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.777254][ T7401] RSP: 002b:00007f8817497fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.777276][ T7401] RAX: ffffffffffffffda RBX: 00007f88174986c0 RCX: 00007f881655e68e [ 155.777292][ T7401] RDX: 000000000000000f RSI: 00007f88174980a0 RDI: 0000000000000004 [ 155.777324][ T7401] RBP: 00007f8817498090 R08: 0000000000000000 R09: 0000000000000000 [ 155.777337][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.777349][ T7401] R13: 00007f8816826038 R14: 00007f8816825fa0 R15: 00007ffcff313b68 [ 155.777384][ T7401] [ 156.341097][ T7416] netlink: 525 bytes leftover after parsing attributes in process `syz.4.457'. [ 156.481281][ T7422] FAULT_INJECTION: forcing a failure. [ 156.481281][ T7422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.496470][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.0.460 Not tainted syzkaller #0 PREEMPT(full) [ 156.496498][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.496511][ T7422] Call Trace: [ 156.496520][ T7422] [ 156.496529][ T7422] dump_stack_lvl+0xe8/0x150 [ 156.496565][ T7422] should_fail_ex+0x40c/0x560 [ 156.496595][ T7422] _copy_from_iter+0x1d3/0x1660 [ 156.496630][ T7422] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 156.496657][ T7422] ? rcu_is_watching+0x15/0xb0 [ 156.496690][ T7422] ? trace_kmem_cache_alloc+0x29/0xe0 [ 156.496716][ T7422] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 156.496741][ T7422] ? __pfx__copy_from_iter+0x10/0x10 [ 156.496767][ T7422] ? __alloc_skb+0x276/0x7a0 [ 156.496791][ T7422] ? __alloc_skb+0x276/0x7a0 [ 156.496823][ T7422] ? netlink_sendmsg+0x650/0xb40 [ 156.496854][ T7422] ? skb_put+0x112/0x210 [ 156.496885][ T7422] netlink_sendmsg+0x6c0/0xb40 [ 156.496927][ T7422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.496964][ T7422] ? aa_sock_msg_perm+0xf1/0x1b0 [ 156.496991][ T7422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.497021][ T7422] sock_sendmsg_nosec+0x13a/0x180 [ 156.497066][ T7422] ____sys_sendmsg+0x54e/0x850 [ 156.497104][ T7422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.497147][ T7422] ? import_iovec+0x73/0xa0 [ 156.497181][ T7422] ___sys_sendmsg+0x2a5/0x360 [ 156.497212][ T7422] ? __lock_acquire+0x683/0x2cf0 [ 156.497258][ T7422] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.497326][ T7422] ? __fget_files+0x2a/0x420 [ 156.497352][ T7422] ? __fget_files+0x3a2/0x420 [ 156.497390][ T7422] __x64_sys_sendmsg+0x1b1/0x290 [ 156.497424][ T7422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.497474][ T7422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.497497][ T7422] do_syscall_64+0x174/0x580 [ 156.497525][ T7422] ? trace_irq_disable+0x3b/0x140 [ 156.497551][ T7422] ? clear_bhb_loop+0x40/0x90 [ 156.497577][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.497597][ T7422] RIP: 0033:0x7f9f9df9de59 [ 156.497624][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.497641][ T7422] RSP: 002b:00007f9f9ef4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.497663][ T7422] RAX: ffffffffffffffda RBX: 00007f9f9e225fa0 RCX: 00007f9f9df9de59 [ 156.497678][ T7422] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 156.497691][ T7422] RBP: 00007f9f9ef4d090 R08: 0000000000000000 R09: 0000000000000000 [ 156.497704][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.497716][ T7422] R13: 00007f9f9e226038 R14: 00007f9f9e225fa0 R15: 00007fff1a64f368 [ 156.497750][ T7422] [ 156.943187][ T7429] syzkaller0: entered promiscuous mode [ 156.949288][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 156.964356][ T7429] syzkaller0: entered allmulticast mode [ 157.202786][ T7441] FAULT_INJECTION: forcing a failure. [ 157.202786][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 157.277111][ T7447] syz_tun: entered allmulticast mode [ 157.282659][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.3.466 Not tainted syzkaller #0 PREEMPT(full) [ 157.282688][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.282701][ T7441] Call Trace: [ 157.282709][ T7441] [ 157.282718][ T7441] dump_stack_lvl+0xe8/0x150 [ 157.282756][ T7441] should_fail_ex+0x40c/0x560 [ 157.282786][ T7441] should_failslab+0xa8/0x100 [ 157.282819][ T7441] __kmalloc_cache_noprof+0xa8/0x660 [ 157.282865][ T7441] ? ip_set_pernet+0x23/0x240 [ 157.282893][ T7441] ? ip_set_create+0x38f/0x1a40 [ 157.282920][ T7441] ? ip_set_create+0x38f/0x1a40 [ 157.282958][ T7441] ip_set_create+0x38f/0x1a40 [ 157.282995][ T7441] ? rcu_is_watching+0x15/0xb0 [ 157.283036][ T7441] ? __pfx_ip_set_create+0x10/0x10 [ 157.283102][ T7441] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 157.283135][ T7441] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 157.283196][ T7441] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 157.283275][ T7441] netlink_rcv_skb+0x226/0x4a0 [ 157.283310][ T7441] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 157.283341][ T7441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.283384][ T7441] ? bpf_lsm_capable+0x9/0x20 [ 157.283408][ T7441] ? security_capable+0x7e/0x2c0 [ 157.283447][ T7441] nfnetlink_rcv+0x2b9/0x28c0 [ 157.283478][ T7441] ? kernel_text_address+0xa5/0xe0 [ 157.283511][ T7441] ? __kernel_text_address+0xd/0x30 [ 157.283542][ T7441] ? unwind_get_return_address+0x4d/0x90 [ 157.283563][ T7441] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 157.283589][ T7441] ? arch_stack_walk+0xfb/0x150 [ 157.283672][ T7441] ? stack_trace_save+0xa9/0x100 [ 157.283701][ T7441] ? __lock_acquire+0x683/0x2cf0 [ 157.283731][ T7441] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 157.283765][ T7441] ? kasan_save_track+0x4f/0x80 [ 157.283790][ T7441] ? kasan_save_track+0x3e/0x80 [ 157.283815][ T7441] ? __kasan_slab_alloc+0x6c/0x80 [ 157.283842][ T7441] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 157.283866][ T7441] ? __alloc_skb+0x276/0x7a0 [ 157.283892][ T7441] ? netlink_sendmsg+0x5d4/0xb40 [ 157.283923][ T7441] ? sock_sendmsg_nosec+0x13a/0x180 [ 157.283945][ T7441] ? ____sys_sendmsg+0x54e/0x850 [ 157.283988][ T7441] ? __lock_acquire+0x683/0x2cf0 [ 157.284031][ T7441] ? __netlink_lookup+0xc6/0x8b0 [ 157.284063][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.284097][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.284147][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.284178][ T7441] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.284215][ T7441] netlink_unicast+0x7bb/0x940 [ 157.284256][ T7441] netlink_sendmsg+0x813/0xb40 [ 157.284298][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.284335][ T7441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 157.284362][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.284425][ T7441] sock_sendmsg_nosec+0x13a/0x180 [ 157.284452][ T7441] ____sys_sendmsg+0x54e/0x850 [ 157.284509][ T7441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.284551][ T7441] ? import_iovec+0x73/0xa0 [ 157.284587][ T7441] ___sys_sendmsg+0x2a5/0x360 [ 157.284625][ T7441] ? __lock_acquire+0x683/0x2cf0 [ 157.284659][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.284732][ T7441] ? __fget_files+0x2a/0x420 [ 157.284759][ T7441] ? __fget_files+0x3a2/0x420 [ 157.284799][ T7441] __x64_sys_sendmsg+0x1b1/0x290 [ 157.284835][ T7441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.284887][ T7441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.284911][ T7441] do_syscall_64+0x174/0x580 [ 157.284952][ T7441] ? trace_irq_disable+0x3b/0x140 [ 157.284978][ T7441] ? clear_bhb_loop+0x40/0x90 [ 157.285004][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.285025][ T7441] RIP: 0033:0x7f881659de59 [ 157.285044][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.285062][ T7441] RSP: 002b:00007f8817498028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.285084][ T7441] RAX: ffffffffffffffda RBX: 00007f8816825fa0 RCX: 00007f881659de59 [ 157.285099][ T7441] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 157.285112][ T7441] RBP: 00007f8817498090 R08: 0000000000000000 R09: 0000000000000000 [ 157.285125][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.285137][ T7441] R13: 00007f8816826038 R14: 00007f8816825fa0 R15: 00007ffcff313b68 [ 157.285170][ T7441] [ 157.293972][ T7445] FAULT_INJECTION: forcing a failure. [ 157.293972][ T7445] name failslab, interval 1, probability 0, space 0, times 0 [ 157.397165][ T7447] netlink: 480 bytes leftover after parsing attributes in process `syz.1.469'. [ 157.637035][ T7445] CPU: 1 UID: 0 PID: 7445 Comm: syz.4.468 Not tainted syzkaller #0 PREEMPT(full) [ 157.637104][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.637135][ T7445] Call Trace: [ 157.637144][ T7445] [ 157.637166][ T7445] dump_stack_lvl+0xe8/0x150 [ 157.637267][ T7445] should_fail_ex+0x40c/0x560 [ 157.637344][ T7445] should_failslab+0xa8/0x100 [ 157.637436][ T7445] __kmalloc_noprof+0xfe/0x720 [ 157.637509][ T7445] ? security_sk_alloc+0x52/0x360 [ 157.637588][ T7445] ? security_sk_alloc+0x52/0x360 [ 157.637667][ T7445] ? __kmalloc_noprof+0x1ad/0x720 [ 157.637767][ T7445] security_sk_alloc+0x52/0x360 [ 157.637847][ T7445] sk_prot_alloc+0x101/0x210 [ 157.637923][ T7445] ? sk_alloc+0x27/0x390 [ 157.638008][ T7445] sk_alloc+0x3a/0x390 [ 157.638089][ T7445] bpf_prog_test_run_skb+0x3a6/0x2230 [ 157.638222][ T7445] ? __fget_files+0x3a2/0x420 [ 157.638298][ T7445] ? __fget_files+0x2a/0x420 [ 157.638381][ T7445] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 157.638465][ T7445] bpf_prog_test_run+0x2c5/0x340 [ 157.638533][ T7445] __sys_bpf+0xa22/0xd90 [ 157.638630][ T7445] ? __pfx___sys_bpf+0x10/0x10 [ 157.638732][ T7445] ? __fget_files+0x2a/0x420 [ 157.638848][ T7445] ? ksys_write+0x242/0x270 [ 157.638943][ T7445] ? __pfx_ksys_write+0x10/0x10 [ 157.639039][ T7445] __x64_sys_bpf+0xba/0xd0 [ 157.639130][ T7445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.639199][ T7445] do_syscall_64+0x174/0x580 [ 157.639267][ T7445] ? trace_irq_disable+0x3b/0x140 [ 157.639334][ T7445] ? clear_bhb_loop+0x40/0x90 [ 157.639404][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.639459][ T7445] RIP: 0033:0x7fa947f9de59 [ 157.639518][ T7445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.639570][ T7445] RSP: 002b:00007fa948ed3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.639633][ T7445] RAX: ffffffffffffffda RBX: 00007fa948225fa0 RCX: 00007fa947f9de59 [ 157.639674][ T7445] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 157.639708][ T7445] RBP: 00007fa948ed3090 R08: 0000000000000000 R09: 0000000000000000 [ 157.639747][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.639783][ T7445] R13: 00007fa948226038 R14: 00007fa948225fa0 R15: 00007ffc0c62da18 [ 157.639868][ T7445] [ 157.828255][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 158.029867][ T7446] syz_tun: left allmulticast mode [ 158.210589][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 158.234336][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 158.308229][ T7469] gretap0: entered promiscuous mode [ 158.319060][ T7472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.478'. [ 158.328731][ T7469] debugfs: 'hsr1' already exists in 'hsr' [ 158.341651][ T7469] Cannot create hsr debugfs directory [ 158.356953][ T7469] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 158.367539][ T7469] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 158.385814][ T7476] lo: entered allmulticast mode [ 158.392206][ T7476] tunl0: entered allmulticast mode [ 158.399336][ T7476] gre0: entered allmulticast mode [ 158.404705][ T7476] gretap0: entered allmulticast mode [ 158.411025][ T7476] ip_vti0: entered allmulticast mode [ 158.416934][ T7476] ip6_vti0: entered allmulticast mode [ 158.422843][ T7476] sit0: entered allmulticast mode [ 158.428778][ T7476] ip6tnl0: entered allmulticast mode [ 158.435454][ T7476] ip6gre0: entered allmulticast mode [ 158.441460][ T7472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.451968][ T7476] syz_tun: entered allmulticast mode [ 158.458874][ T7476] ip6gretap0: entered allmulticast mode [ 158.464972][ T7476] bridge0: entered allmulticast mode [ 158.471170][ T7476] vcan0: entered allmulticast mode [ 158.477045][ T7476] bond0: entered allmulticast mode [ 158.482296][ T7476] bond_slave_0: entered allmulticast mode [ 158.490154][ T7476] bond_slave_1: entered allmulticast mode [ 158.496262][ T7476] team0: entered allmulticast mode [ 158.507936][ T7476] team_slave_0: entered allmulticast mode [ 158.520562][ T7476] team_slave_1: entered allmulticast mode [ 158.526832][ T7476] dummy0: entered allmulticast mode [ 158.536771][ T7476] nlmon0: entered allmulticast mode [ 158.542263][ T7476] batadv0: entered allmulticast mode [ 158.548763][ T7476] vxcan0: entered allmulticast mode [ 158.554292][ T7476] vxcan1: entered allmulticast mode [ 158.560649][ T7476] veth0: entered allmulticast mode [ 158.566860][ T7476] veth1: entered allmulticast mode [ 158.572397][ T7476] wg0: entered allmulticast mode [ 158.578465][ T7476] wg1: entered allmulticast mode [ 158.583804][ T7476] wg2: entered allmulticast mode [ 158.590198][ T7476] veth0_to_bridge: entered allmulticast mode [ 158.599229][ T7476] veth1_to_bridge: entered allmulticast mode [ 158.605901][ T7476] veth0_to_bond: entered allmulticast mode [ 158.612747][ T7476] veth1_to_bond: entered allmulticast mode [ 158.613408][ T7485] siw: device registration error -23 [ 158.620779][ T7476] veth0_to_team: entered allmulticast mode [ 158.630560][ T7476] veth1_to_team: entered allmulticast mode [ 158.636963][ T7476] veth0_to_batadv: entered allmulticast mode [ 158.644014][ T7476] batadv_slave_0: entered allmulticast mode [ 158.652210][ T7476] veth1_to_batadv: entered allmulticast mode [ 158.659671][ T7476] batadv_slave_1: entered allmulticast mode [ 158.668729][ T7476] xfrm0: entered allmulticast mode [ 158.674037][ T7476] veth0_to_hsr: entered allmulticast mode [ 158.680075][ T7476] hsr_slave_0: entered allmulticast mode [ 158.685883][ T7476] veth1_to_hsr: entered allmulticast mode [ 158.691971][ T7476] hsr_slave_1: entered allmulticast mode [ 158.698059][ T7476] hsr0: entered allmulticast mode [ 158.703322][ T7476] veth1_virt_wifi: entered allmulticast mode [ 158.709720][ T7476] veth0_virt_wifi: entered allmulticast mode [ 158.715938][ T7476] virt_wifi0: entered allmulticast mode [ 158.722482][ T7476] veth1_vlan: entered allmulticast mode [ 158.728556][ T7476] veth0_vlan: entered allmulticast mode [ 158.734364][ T7476] vlan0: entered allmulticast mode [ 158.739985][ T7476] vlan1: entered allmulticast mode [ 158.745389][ T7476] macvlan0: entered allmulticast mode [ 158.751273][ T7476] macvlan1: entered allmulticast mode [ 158.756999][ T7476] ipvlan0: entered allmulticast mode [ 158.762560][ T7476] ipvlan1: entered allmulticast mode [ 158.768202][ T7476] geneve0: entered allmulticast mode [ 158.773740][ T7476] geneve1: entered allmulticast mode [ 158.779443][ T7476] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 158.787185][ T7476] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 158.794779][ T7476] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 158.807186][ T7476] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 158.814882][ T7476] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 158.822524][ T7476] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 158.830246][ T7476] geneve2: entered allmulticast mode [ 158.835873][ T7476] netdevsim0.0: entered allmulticast mode [ 158.842260][ T7476] bond1: entered allmulticast mode [ 158.847906][ T7476] bridge1: entered allmulticast mode [ 158.853551][ T7476] hsr1: entered allmulticast mode [ 158.867123][ T7476] bond2: entered allmulticast mode [ 158.872936][ T7476] bridge2: entered allmulticast mode [ 159.132916][ T7499] erspan0: left promiscuous mode [ 159.145013][ T7499] erspan0: left allmulticast mode [ 159.172533][ T7501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.233229][ T7501] batadv1: entered promiscuous mode [ 159.239937][ T7501] batadv1: entered allmulticast mode [ 160.163698][ T7527] __nla_validate_parse: 6 callbacks suppressed [ 160.163713][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'. [ 160.477193][ T7539] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.666661][ T7542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.703674][ T7542] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.719440][ T7542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.761052][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.773625][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.789166][ T7542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.800057][ T7542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.851443][ T7542] veth1_vlan: left promiscuous mode [ 160.884100][ T7542] veth0_vlan: left promiscuous mode [ 160.905600][ T7542] veth0_vlan: entered promiscuous mode [ 160.930076][ T7542] veth1_vlan: entered promiscuous mode [ 160.951429][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 161.024984][ T7542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.109076][ T7542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.132931][ T7542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.145423][ T7542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.178466][ T7542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.189269][ T7574] netlink: 52 bytes leftover after parsing attributes in process `syz.3.504'. [ 161.203547][ T7574] netlink: 6 bytes leftover after parsing attributes in process `syz.3.504'. [ 161.219556][ T7574] netlink: 52 bytes leftover after parsing attributes in process `syz.3.504'. [ 161.237002][ T7574] netlink: 6 bytes leftover after parsing attributes in process `syz.3.504'. [ 161.250475][ T7574] netlink: 52 bytes leftover after parsing attributes in process `syz.3.504'. [ 161.260912][ T7542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.300092][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.307399][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.342613][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.349944][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.438603][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.451723][ T37] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 1792 - 0 [ 161.489500][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.501123][ T37] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 1792 - 0 [ 161.510356][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.519442][ T37] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 1792 - 0 [ 161.623374][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.645430][ T37] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 1792 - 0 [ 161.742404][ T7580] netlink: 'syz.1.506': attribute type 13 has an invalid length. [ 162.022686][ T7592] netlink: 'syz.1.511': attribute type 23 has an invalid length. [ 162.149595][ T7597] FAULT_INJECTION: forcing a failure. [ 162.149595][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 162.206477][ T7597] CPU: 0 UID: 0 PID: 7597 Comm: syz.4.513 Not tainted syzkaller #0 PREEMPT(full) [ 162.206507][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.206519][ T7597] Call Trace: [ 162.206528][ T7597] [ 162.206537][ T7597] dump_stack_lvl+0xe8/0x150 [ 162.206575][ T7597] should_fail_ex+0x40c/0x560 [ 162.206605][ T7597] should_failslab+0xa8/0x100 [ 162.206638][ T7597] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 162.206665][ T7597] ? skb_clone+0x212/0x3a0 [ 162.206696][ T7597] ? skb_clone+0x212/0x3a0 [ 162.206735][ T7597] skb_clone+0x212/0x3a0 [ 162.206768][ T7597] ? nfnetlink_rcv+0x4b0/0x28c0 [ 162.206806][ T7597] nfnetlink_rcv+0x4de/0x28c0 [ 162.206839][ T7597] ? kernel_text_address+0xa5/0xe0 [ 162.206873][ T7597] ? __kernel_text_address+0xd/0x30 [ 162.206906][ T7597] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 162.206934][ T7597] ? arch_stack_walk+0xfb/0x150 [ 162.206969][ T7597] ? stack_trace_save+0xa9/0x100 [ 162.206998][ T7597] ? __lock_acquire+0x683/0x2cf0 [ 162.207029][ T7597] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 162.207090][ T7597] ? __lock_acquire+0x683/0x2cf0 [ 162.207134][ T7597] ? __netlink_lookup+0xc6/0x8b0 [ 162.207166][ T7597] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.207200][ T7597] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.207240][ T7597] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.207273][ T7597] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.207323][ T7597] netlink_unicast+0x7bb/0x940 [ 162.207364][ T7597] netlink_sendmsg+0x813/0xb40 [ 162.207426][ T7597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.207464][ T7597] ? aa_sock_msg_perm+0xf1/0x1b0 [ 162.207492][ T7597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.207524][ T7597] sock_sendmsg_nosec+0x13a/0x180 [ 162.207552][ T7597] ____sys_sendmsg+0x54e/0x850 [ 162.207603][ T7597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.207644][ T7597] ? import_iovec+0x73/0xa0 [ 162.207677][ T7597] ___sys_sendmsg+0x2a5/0x360 [ 162.207706][ T7597] ? __lock_acquire+0x683/0x2cf0 [ 162.207739][ T7597] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.207806][ T7597] ? __fget_files+0x2a/0x420 [ 162.207832][ T7597] ? __fget_files+0x3a2/0x420 [ 162.207870][ T7597] __x64_sys_sendmsg+0x1b1/0x290 [ 162.207903][ T7597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.207972][ T7597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.207997][ T7597] do_syscall_64+0x174/0x580 [ 162.208026][ T7597] ? trace_irq_disable+0x3b/0x140 [ 162.208053][ T7597] ? clear_bhb_loop+0x40/0x90 [ 162.208087][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.208109][ T7597] RIP: 0033:0x7fa947f9de59 [ 162.208130][ T7597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.208147][ T7597] RSP: 002b:00007fa948ed3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.208169][ T7597] RAX: ffffffffffffffda RBX: 00007fa948225fa0 RCX: 00007fa947f9de59 [ 162.208184][ T7597] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 162.208198][ T7597] RBP: 00007fa948ed3090 R08: 0000000000000000 R09: 0000000000000000 [ 162.208211][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.208223][ T7597] R13: 00007fa948226038 R14: 00007fa948225fa0 R15: 00007ffc0c62da18 [ 162.208258][ T7597] [ 162.971487][ T7610] erspan0: entered promiscuous mode [ 162.997985][ T7610] erspan0: entered allmulticast mode [ 163.017519][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 163.369759][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 163.440814][ T7629] IPVS: length: 15 != 8 [ 163.457560][ T7629] syzkaller1: entered promiscuous mode [ 163.463818][ T7629] syzkaller1: entered allmulticast mode [ 163.498165][ T7629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.524'. [ 163.871967][ T7636] siw: device registration error -23 [ 163.943310][ T7640] netlink: 'syz.1.529': attribute type 23 has an invalid length. [ 163.996532][ T7638] tipc: Started in network mode [ 164.010996][ T7638] tipc: Node identity , cluster identity 4711 [ 164.036504][ T7638] tipc: Failed to obtain node identity [ 164.057286][ T7638] tipc: Enabling of bearer rejected, failed to enable media [ 164.230826][ T7645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.505020][ T7655] erspan0: entered promiscuous mode [ 164.550028][ T7655] erspan0: entered allmulticast mode [ 165.046130][ T7675] siw: device registration error -23 [ 165.136999][ T7680] FAULT_INJECTION: forcing a failure. [ 165.136999][ T7680] name failslab, interval 1, probability 0, space 0, times 0 [ 165.150670][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.0.543 Not tainted syzkaller #0 PREEMPT(full) [ 165.150716][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.150729][ T7680] Call Trace: [ 165.150737][ T7680] [ 165.150747][ T7680] dump_stack_lvl+0xe8/0x150 [ 165.150784][ T7680] should_fail_ex+0x40c/0x560 [ 165.150815][ T7680] should_failslab+0xa8/0x100 [ 165.150849][ T7680] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 165.150874][ T7680] ? skb_clone+0x212/0x3a0 [ 165.150906][ T7680] ? skb_clone+0x212/0x3a0 [ 165.150945][ T7680] skb_clone+0x212/0x3a0 [ 165.150975][ T7680] ? nfnetlink_rcv+0x4b0/0x28c0 [ 165.151008][ T7680] nfnetlink_rcv+0x4de/0x28c0 [ 165.151042][ T7680] ? __dev_queue_xmit+0x29b/0x37f0 [ 165.151067][ T7680] ? __local_bh_enable_ip+0xd0/0x130 [ 165.151092][ T7680] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.151119][ T7680] ? __dev_queue_xmit+0x29b/0x37f0 [ 165.151139][ T7680] ? __local_bh_enable_ip+0xd0/0x130 [ 165.151161][ T7680] ? __dev_queue_xmit+0x29b/0x37f0 [ 165.151181][ T7680] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 165.151200][ T7680] ? do_syscall_64+0x174/0x580 [ 165.151232][ T7680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.151267][ T7680] ? __dev_queue_xmit+0x29b/0x37f0 [ 165.151288][ T7680] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 165.151345][ T7680] ? ref_tracker_free+0x689/0x830 [ 165.151376][ T7680] ? __pfx_ref_tracker_free+0x10/0x10 [ 165.151402][ T7680] ? __asan_memcpy+0x40/0x70 [ 165.151424][ T7680] ? __skb_clone+0x5c/0x6c0 [ 165.151460][ T7680] ? __skb_clone+0x449/0x6c0 [ 165.151520][ T7680] ? skb_clone+0x246/0x3a0 [ 165.151556][ T7680] ? __netlink_deliver_tap+0x811/0x860 [ 165.151588][ T7680] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.151627][ T7680] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.151659][ T7680] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.151698][ T7680] netlink_unicast+0x7bb/0x940 [ 165.151739][ T7680] netlink_sendmsg+0x813/0xb40 [ 165.151783][ T7680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.151821][ T7680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 165.151849][ T7680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.151882][ T7680] sock_sendmsg_nosec+0x13a/0x180 [ 165.151910][ T7680] ____sys_sendmsg+0x54e/0x850 [ 165.151948][ T7680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.151990][ T7680] ? import_iovec+0x73/0xa0 [ 165.152025][ T7680] ___sys_sendmsg+0x2a5/0x360 [ 165.152055][ T7680] ? __lock_acquire+0x683/0x2cf0 [ 165.152089][ T7680] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.152159][ T7680] ? __fget_files+0x2a/0x420 [ 165.152186][ T7680] ? __fget_files+0x3a2/0x420 [ 165.152223][ T7680] __x64_sys_sendmsg+0x1b1/0x290 [ 165.152253][ T7680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.152297][ T7680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.152316][ T7680] do_syscall_64+0x174/0x580 [ 165.152350][ T7680] ? trace_irq_disable+0x3b/0x140 [ 165.152376][ T7680] ? clear_bhb_loop+0x40/0x90 [ 165.152397][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.152418][ T7680] RIP: 0033:0x7f9f9df9de59 [ 165.152438][ T7680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.152457][ T7680] RSP: 002b:00007f9f9ef4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.152480][ T7680] RAX: ffffffffffffffda RBX: 00007f9f9e225fa0 RCX: 00007f9f9df9de59 [ 165.152495][ T7680] RDX: 0000000020004090 RSI: 0000200000009b40 RDI: 0000000000000003 [ 165.152509][ T7680] RBP: 00007f9f9ef4d090 R08: 0000000000000000 R09: 0000000000000000 [ 165.152523][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.152535][ T7680] R13: 00007f9f9e226038 R14: 00007f9f9e225fa0 R15: 00007fff1a64f368 [ 165.152570][ T7680] [ 165.543141][ T7681] FAULT_INJECTION: forcing a failure. [ 165.543141][ T7681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.561095][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.3.542 Not tainted syzkaller #0 PREEMPT(full) [ 165.561125][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.561141][ T7681] Call Trace: [ 165.561150][ T7681] [ 165.561159][ T7681] dump_stack_lvl+0xe8/0x150 [ 165.561196][ T7681] should_fail_ex+0x40c/0x560 [ 165.561226][ T7681] _copy_to_user+0x31/0xb0 [ 165.561259][ T7681] simple_read_from_buffer+0xe1/0x170 [ 165.561293][ T7681] proc_fail_nth_read+0x1bb/0x230 [ 165.561325][ T7681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.561357][ T7681] ? rw_verify_area+0x24a/0x4c0 [ 165.561390][ T7681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.561418][ T7681] vfs_read+0x213/0xa80 [ 165.561454][ T7681] ? __pfx___mutex_lock+0x10/0x10 [ 165.561485][ T7681] ? __pfx_vfs_read+0x10/0x10 [ 165.561517][ T7681] ? __fget_files+0x2a/0x420 [ 165.561549][ T7681] ? __fget_files+0x3a2/0x420 [ 165.561575][ T7681] ? __fget_files+0x2a/0x420 [ 165.561611][ T7681] ksys_read+0x150/0x270 [ 165.561645][ T7681] ? __pfx_ksys_read+0x10/0x10 [ 165.561685][ T7681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.561715][ T7681] do_syscall_64+0x174/0x580 [ 165.561743][ T7681] ? trace_irq_disable+0x3b/0x140 [ 165.561769][ T7681] ? clear_bhb_loop+0x40/0x90 [ 165.561795][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.561817][ T7681] RIP: 0033:0x7f881655e68e [ 165.561838][ T7681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.561856][ T7681] RSP: 002b:00007f8817455fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.561878][ T7681] RAX: ffffffffffffffda RBX: 00007f88174566c0 RCX: 00007f881655e68e [ 165.561894][ T7681] RDX: 000000000000000f RSI: 00007f88174560a0 RDI: 0000000000000005 [ 165.561925][ T7681] RBP: 00007f8817456090 R08: 0000000000000000 R09: 0000000000000000 [ 165.561939][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.561952][ T7681] R13: 00007f8816826218 R14: 00007f8816826180 R15: 00007ffcff313b68 [ 165.561989][ T7681] [ 165.935685][ T7685] __nla_validate_parse: 5 callbacks suppressed [ 165.935723][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 166.169400][ T7690] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 166.221297][ T7691] macvlan2: entered promiscuous mode [ 166.236446][ T7691] macvlan2: entered allmulticast mode [ 166.258506][ T7691] bond3: entered promiscuous mode [ 166.289707][ T7691] bridge4: entered promiscuous mode [ 166.323402][ T7691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.355804][ T7691] bond3: left promiscuous mode [ 166.366880][ T7691] bridge4: left promiscuous mode [ 166.520256][ T7711] erspan0: left allmulticast mode [ 166.584603][ T7012] lo speed is unknown, defaulting to 1000 [ 166.592346][ T7012] syz2: Port: 1 Link DOWN [ 166.825761][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 166.935314][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.560'. [ 166.991328][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 167.020100][ T7740] FAULT_INJECTION: forcing a failure. [ 167.020100][ T7740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.046486][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.1.562 Not tainted syzkaller #0 PREEMPT(full) [ 167.046519][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.046533][ T7740] Call Trace: [ 167.046541][ T7740] [ 167.046550][ T7740] dump_stack_lvl+0xe8/0x150 [ 167.046596][ T7740] should_fail_ex+0x40c/0x560 [ 167.046626][ T7740] _copy_from_user+0x2d/0xb0 [ 167.046660][ T7740] generic_map_update_batch+0x651/0x9a0 [ 167.046692][ T7740] ? __pfx_generic_map_update_batch+0x10/0x10 [ 167.046715][ T7740] ? __fget_files+0x2a/0x420 [ 167.046750][ T7740] ? __pfx_generic_map_update_batch+0x10/0x10 [ 167.046770][ T7740] bpf_map_do_batch+0x391/0x630 [ 167.046806][ T7740] __sys_bpf+0xbe5/0xd90 [ 167.046842][ T7740] ? __pfx___sys_bpf+0x10/0x10 [ 167.046882][ T7740] ? __fget_files+0x2a/0x420 [ 167.046927][ T7740] ? ksys_write+0x242/0x270 [ 167.046961][ T7740] ? __pfx_ksys_write+0x10/0x10 [ 167.046996][ T7740] __x64_sys_bpf+0xba/0xd0 [ 167.047021][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.047046][ T7740] do_syscall_64+0x174/0x580 [ 167.047074][ T7740] ? trace_irq_disable+0x3b/0x140 [ 167.047103][ T7740] ? clear_bhb_loop+0x40/0x90 [ 167.047129][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.047152][ T7740] RIP: 0033:0x7f2d2d39de59 [ 167.047173][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.047192][ T7740] RSP: 002b:00007f2d2e231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.047215][ T7740] RAX: ffffffffffffffda RBX: 00007f2d2d625fa0 RCX: 00007f2d2d39de59 [ 167.047232][ T7740] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001a [ 167.047246][ T7740] RBP: 00007f2d2e231090 R08: 0000000000000000 R09: 0000000000000000 [ 167.047260][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.047273][ T7740] R13: 00007f2d2d626038 R14: 00007f2d2d625fa0 R15: 00007ffcf6e738a8 [ 167.047309][ T7740] [ 167.509704][ T7751] FAULT_INJECTION: forcing a failure. [ 167.509704][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 167.538685][ T7751] CPU: 1 UID: 0 PID: 7751 Comm: syz.0.565 Not tainted syzkaller #0 PREEMPT(full) [ 167.538713][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.538726][ T7751] Call Trace: [ 167.538733][ T7751] [ 167.538742][ T7751] dump_stack_lvl+0xe8/0x150 [ 167.538780][ T7751] should_fail_ex+0x40c/0x560 [ 167.538810][ T7751] should_failslab+0xa8/0x100 [ 167.538843][ T7751] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 167.538867][ T7751] ? local_lock_release+0x9c/0x160 [ 167.538897][ T7751] ? __alloc_skb+0x1d7/0x7a0 [ 167.538921][ T7751] ? __alloc_skb+0x1d7/0x7a0 [ 167.538956][ T7751] __alloc_skb+0x1d7/0x7a0 [ 167.538989][ T7751] netlink_sendmsg+0x5d4/0xb40 [ 167.539037][ T7751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.539075][ T7751] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.539104][ T7751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.539136][ T7751] sock_sendmsg_nosec+0x13a/0x180 [ 167.539164][ T7751] ____sys_sendmsg+0x54e/0x850 [ 167.539201][ T7751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.539244][ T7751] ? import_iovec+0x73/0xa0 [ 167.539279][ T7751] ___sys_sendmsg+0x2a5/0x360 [ 167.539310][ T7751] ? __lock_acquire+0x683/0x2cf0 [ 167.539343][ T7751] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.539413][ T7751] ? __fget_files+0x2a/0x420 [ 167.539440][ T7751] ? __fget_files+0x3a2/0x420 [ 167.539481][ T7751] __x64_sys_sendmsg+0x1b1/0x290 [ 167.539525][ T7751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.539578][ T7751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.539603][ T7751] do_syscall_64+0x174/0x580 [ 167.539632][ T7751] ? trace_irq_disable+0x3b/0x140 [ 167.539660][ T7751] ? clear_bhb_loop+0x40/0x90 [ 167.539688][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.539709][ T7751] RIP: 0033:0x7f9f9df9de59 [ 167.539731][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.539748][ T7751] RSP: 002b:00007f9f9ef4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.539771][ T7751] RAX: ffffffffffffffda RBX: 00007f9f9e225fa0 RCX: 00007f9f9df9de59 [ 167.539787][ T7751] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 167.539800][ T7751] RBP: 00007f9f9ef4d090 R08: 0000000000000000 R09: 0000000000000000 [ 167.539813][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.539826][ T7751] R13: 00007f9f9e226038 R14: 00007f9f9e225fa0 R15: 00007fff1a64f368 [ 167.539860][ T7751] [ 167.928759][ T7759] lo: left allmulticast mode [ 167.998434][ T7759] tunl0: left allmulticast mode [ 168.050448][ T7759] gre0: left allmulticast mode [ 168.102106][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 168.135282][ T7759] ip_vti0: left allmulticast mode [ 168.146203][ T7759] ip6_vti0: left allmulticast mode [ 168.172689][ T7759] sit0: left allmulticast mode [ 168.198012][ T7759] ip6tnl0: left allmulticast mode [ 168.219576][ T7759] ip6gre0: left allmulticast mode [ 168.245683][ T7759] syz_tun: left allmulticast mode [ 168.268181][ T7759] ip6gretap0: left allmulticast mode [ 168.278013][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.285675][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.296285][ T7759] bridge0: left allmulticast mode [ 168.307813][ T7759] vcan0: left allmulticast mode [ 168.328779][ T7759] bond0: left allmulticast mode [ 168.347926][ T7759] team0: left allmulticast mode [ 168.355784][ T7759] dummy0: left allmulticast mode [ 168.367162][ T7759] nlmon0: left allmulticast mode [ 168.373659][ T7759] batadv0: left allmulticast mode [ 168.381225][ T7759] vxcan0: left allmulticast mode [ 168.387304][ T7759] vxcan1: left allmulticast mode [ 168.393192][ T7759] veth0: left allmulticast mode [ 168.400388][ T7759] veth1: left allmulticast mode [ 168.407741][ T7759] wg0: left allmulticast mode [ 168.415542][ T7759] wg1: left allmulticast mode [ 168.424758][ T7759] wg2: left allmulticast mode [ 168.431509][ T7759] veth0_to_bridge: left allmulticast mode [ 168.443394][ T7759] veth1_to_bridge: left allmulticast mode [ 168.454887][ T7759] veth0_to_bond: left allmulticast mode [ 168.463937][ T7759] bond_slave_0: left allmulticast mode [ 168.470800][ T7759] veth1_to_bond: left allmulticast mode [ 168.486740][ T7759] bond_slave_1: left allmulticast mode [ 168.493370][ T7759] veth0_to_team: left allmulticast mode [ 168.504003][ T7759] team_slave_0: left allmulticast mode [ 168.513604][ T7759] veth1_to_team: left allmulticast mode [ 168.523584][ T7759] team_slave_1: left allmulticast mode [ 168.538988][ T7759] veth0_to_batadv: left allmulticast mode [ 168.559636][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.578985][ T7759] batadv_slave_0: left allmulticast mode [ 168.590301][ T7759] veth1_to_batadv: left allmulticast mode [ 168.598847][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.603888][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 168.610570][ T7759] batadv_slave_1: left allmulticast mode [ 168.627174][ T7759] xfrm0: left allmulticast mode [ 168.634828][ T7759] veth0_to_hsr: left allmulticast mode [ 168.646158][ T7759] veth1_to_hsr: left allmulticast mode [ 168.662557][ T7759] hsr0: left allmulticast mode [ 168.671168][ T7759] hsr_slave_0: left allmulticast mode [ 168.677364][ T7759] hsr_slave_1: left allmulticast mode [ 168.686170][ T7759] veth1_virt_wifi: left allmulticast mode [ 168.697759][ T7759] veth0_virt_wifi: left allmulticast mode [ 168.708274][ T7759] virt_wifi0: left allmulticast mode [ 168.727488][ T7759] vlan0: left allmulticast mode [ 168.734168][ T7759] vlan1: left allmulticast mode [ 168.741982][ T7759] macvlan0: left allmulticast mode [ 168.749154][ T7759] veth1_vlan: left allmulticast mode [ 168.754609][ T7759] macvlan1: left allmulticast mode [ 168.762279][ T7759] ipvlan0: left allmulticast mode [ 168.769884][ T7759] ipvlan1: left allmulticast mode [ 168.775090][ T7759] veth0_vlan: left allmulticast mode [ 168.782766][ T7759] geneve0: left allmulticast mode [ 168.790472][ T7759] geneve1: left allmulticast mode [ 168.799519][ T7759] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 168.808580][ T7759] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 168.817357][ T7759] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 168.829679][ T7759] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 168.840267][ T7759] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 168.848934][ T7759] geneve2: left allmulticast mode [ 168.855951][ T7759] netdevsim0.0: left allmulticast mode [ 168.861744][ T7759] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 168.872754][ T7759] bond1: left allmulticast mode [ 168.880165][ T7759] bridge1: left allmulticast mode [ 168.886214][ T7759] hsr1: left allmulticast mode [ 168.892093][ T7759] erspan0: left allmulticast mode [ 168.897352][ T7759] gretap0: left allmulticast mode [ 168.904153][ T7759] bond2: left allmulticast mode [ 168.912253][ T7759] bridge2: left allmulticast mode [ 169.014226][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.036686][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 1792 - 0 [ 169.073177][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.093994][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 1792 - 0 [ 169.115477][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.138368][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 1792 - 0 [ 169.197756][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.228126][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 1792 - 0 [ 169.258086][ T7794] erspan0: entered allmulticast mode [ 169.320519][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.577'. [ 169.368186][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.577'. [ 169.399535][ T7800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.798379][ T7826] erspan0: left promiscuous mode [ 169.803555][ T7826] erspan0: left allmulticast mode [ 169.900249][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 169.999902][ T7833] dvmrp0: entered allmulticast mode [ 170.014107][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 170.285792][ T7852] erspan0: left promiscuous mode [ 170.291396][ T7852] erspan0: left allmulticast mode [ 170.601212][ T7865] erspan0: left promiscuous mode [ 170.610991][ T7865] erspan0: left allmulticast mode [ 170.847336][ T7877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.169585][ T7893] FAULT_INJECTION: forcing a failure. [ 171.169585][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 171.195578][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.3.609 Not tainted syzkaller #0 PREEMPT(full) [ 171.195608][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.195622][ T7893] Call Trace: [ 171.195631][ T7893] [ 171.195639][ T7893] dump_stack_lvl+0xe8/0x150 [ 171.195676][ T7893] should_fail_ex+0x40c/0x560 [ 171.195707][ T7893] should_failslab+0xa8/0x100 [ 171.195747][ T7893] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 171.195772][ T7893] ? local_lock_release+0x9c/0x160 [ 171.195802][ T7893] ? __alloc_skb+0x1d7/0x7a0 [ 171.195826][ T7893] ? __alloc_skb+0x1d7/0x7a0 [ 171.195861][ T7893] __alloc_skb+0x1d7/0x7a0 [ 171.195894][ T7893] netlink_ack+0x136/0xb30 [ 171.195943][ T7893] netlink_rcv_skb+0x2a4/0x4a0 [ 171.195976][ T7893] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 171.196008][ T7893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.196052][ T7893] ? bpf_lsm_capable+0x9/0x20 [ 171.196078][ T7893] ? security_capable+0x7e/0x2c0 [ 171.196119][ T7893] nfnetlink_rcv+0x2b9/0x28c0 [ 171.196152][ T7893] ? kernel_text_address+0xa5/0xe0 [ 171.196186][ T7893] ? __kernel_text_address+0xd/0x30 [ 171.196217][ T7893] ? unwind_get_return_address+0x4d/0x90 [ 171.196239][ T7893] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.196264][ T7893] ? arch_stack_walk+0xfb/0x150 [ 171.196302][ T7893] ? stack_trace_save+0xa9/0x100 [ 171.196330][ T7893] ? __lock_acquire+0x683/0x2cf0 [ 171.196360][ T7893] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.196393][ T7893] ? kasan_save_track+0x4f/0x80 [ 171.196419][ T7893] ? kasan_save_track+0x3e/0x80 [ 171.196445][ T7893] ? __kasan_slab_alloc+0x6c/0x80 [ 171.196471][ T7893] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 171.196496][ T7893] ? __alloc_skb+0x276/0x7a0 [ 171.196522][ T7893] ? netlink_sendmsg+0x5d4/0xb40 [ 171.196553][ T7893] ? sock_sendmsg_nosec+0x13a/0x180 [ 171.196575][ T7893] ? ____sys_sendmsg+0x54e/0x850 [ 171.196614][ T7893] ? __lock_acquire+0x683/0x2cf0 [ 171.196657][ T7893] ? __netlink_lookup+0xc6/0x8b0 [ 171.196689][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.196723][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.196772][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.196804][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.196842][ T7893] netlink_unicast+0x7bb/0x940 [ 171.196883][ T7893] netlink_sendmsg+0x813/0xb40 [ 171.196925][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.196963][ T7893] ? aa_sock_msg_perm+0xf1/0x1b0 [ 171.196991][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.197024][ T7893] sock_sendmsg_nosec+0x13a/0x180 [ 171.197052][ T7893] ____sys_sendmsg+0x54e/0x850 [ 171.197090][ T7893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.197132][ T7893] ? import_iovec+0x73/0xa0 [ 171.197167][ T7893] ___sys_sendmsg+0x2a5/0x360 [ 171.197197][ T7893] ? __lock_acquire+0x683/0x2cf0 [ 171.197230][ T7893] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.197301][ T7893] ? __fget_files+0x2a/0x420 [ 171.197329][ T7893] ? __fget_files+0x3a2/0x420 [ 171.197368][ T7893] __x64_sys_sendmsg+0x1b1/0x290 [ 171.197403][ T7893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.197456][ T7893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.197480][ T7893] do_syscall_64+0x174/0x580 [ 171.197509][ T7893] ? trace_irq_disable+0x3b/0x140 [ 171.197536][ T7893] ? clear_bhb_loop+0x40/0x90 [ 171.197563][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.197586][ T7893] RIP: 0033:0x7f881659de59 [ 171.197607][ T7893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.197625][ T7893] RSP: 002b:00007f8817477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.197654][ T7893] RAX: ffffffffffffffda RBX: 00007f8816826090 RCX: 00007f881659de59 [ 171.197670][ T7893] RDX: 0000000020008c04 RSI: 0000200000000140 RDI: 0000000000000004 [ 171.197697][ T7893] RBP: 00007f8817477090 R08: 0000000000000000 R09: 0000000000000000 [ 171.197710][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.197722][ T7893] R13: 00007f8816826128 R14: 00007f8816826090 R15: 00007ffcff313b68 [ 171.197785][ T7893] [ 171.693983][ T7899] __nla_validate_parse: 2 callbacks suppressed [ 171.694003][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 171.798375][ T7902] FAULT_INJECTION: forcing a failure. [ 171.798375][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 171.862675][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT(full) [ 171.862705][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.862719][ T7902] Call Trace: [ 171.862727][ T7902] [ 171.862737][ T7902] dump_stack_lvl+0xe8/0x150 [ 171.862775][ T7902] should_fail_ex+0x40c/0x560 [ 171.862806][ T7902] should_failslab+0xa8/0x100 [ 171.862839][ T7902] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 171.862865][ T7902] ? local_lock_release+0x9c/0x160 [ 171.862895][ T7902] ? __alloc_skb+0x1d7/0x7a0 [ 171.862921][ T7902] ? __alloc_skb+0x1d7/0x7a0 [ 171.862957][ T7902] __alloc_skb+0x1d7/0x7a0 [ 171.862991][ T7902] netlink_ack+0x136/0xb30 [ 171.863021][ T7902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.863052][ T7902] ? __pfx_nl80211_post_doit+0x10/0x10 [ 171.863092][ T7902] netlink_rcv_skb+0x2a4/0x4a0 [ 171.863125][ T7902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.863153][ T7902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.863203][ T7902] ? down_read+0x2be/0x330 [ 171.863239][ T7902] genl_rcv+0x28/0x40 [ 171.863263][ T7902] netlink_unicast+0x7bb/0x940 [ 171.863305][ T7902] netlink_sendmsg+0x813/0xb40 [ 171.863349][ T7902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.863388][ T7902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 171.863416][ T7902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.863447][ T7902] sock_sendmsg_nosec+0x13a/0x180 [ 171.863476][ T7902] ____sys_sendmsg+0x54e/0x850 [ 171.863515][ T7902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.863558][ T7902] ? import_iovec+0x73/0xa0 [ 171.863601][ T7902] ___sys_sendmsg+0x2a5/0x360 [ 171.863632][ T7902] ? __lock_acquire+0x683/0x2cf0 [ 171.863666][ T7902] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.863738][ T7902] ? __fget_files+0x2a/0x420 [ 171.863765][ T7902] ? __fget_files+0x3a2/0x420 [ 171.863805][ T7902] __x64_sys_sendmsg+0x1b1/0x290 [ 171.863841][ T7902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.863894][ T7902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.863918][ T7902] do_syscall_64+0x174/0x580 [ 171.863947][ T7902] ? trace_irq_disable+0x3b/0x140 [ 171.863974][ T7902] ? clear_bhb_loop+0x40/0x90 [ 171.864001][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.864024][ T7902] RIP: 0033:0x7f2d2d39de59 [ 171.864044][ T7902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.864063][ T7902] RSP: 002b:00007f2d2e231028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.864087][ T7902] RAX: ffffffffffffffda RBX: 00007f2d2d625fa0 RCX: 00007f2d2d39de59 [ 171.864103][ T7902] RDX: 0000000000008004 RSI: 0000200000001700 RDI: 0000000000000005 [ 171.864117][ T7902] RBP: 00007f2d2e231090 R08: 0000000000000000 R09: 0000000000000000 [ 171.864130][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.864143][ T7902] R13: 00007f2d2d626038 R14: 00007f2d2d625fa0 R15: 00007ffcf6e738a8 [ 171.864178][ T7902] [ 172.287584][ T7910] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.616'. [ 172.350691][ T7910] netlink: 'syz.1.616': attribute type 4 has an invalid length. [ 173.051343][ T7938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.626'. [ 173.124470][ T7942] netlink: 'syz.0.626': attribute type 12 has an invalid length. [ 173.280985][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 173.370008][ T7944] erspan0: entered allmulticast mode [ 173.448815][ T7938] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 173.527804][ T7938] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 173.656615][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 173.687826][ T7951] siw: device registration error -23 [ 173.943474][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 173.956488][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'. [ 174.025864][ T7970] erspan0: entered promiscuous mode [ 174.065711][ T7970] erspan0: entered allmulticast mode [ 174.548674][ T7981] block nbd0: not configured, cannot reconfigure [ 174.596095][ T7981] pim6reg1: entered promiscuous mode [ 174.611748][ T7981] pim6reg1: entered allmulticast mode [ 174.653016][ T7981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.637'. [ 174.672184][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 174.793529][ T7987] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 175.805628][ T8009] siw: device registration error -23 [ 175.851297][ T8015] erspan0: left allmulticast mode [ 175.889438][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 175.978770][ T8019] erspan0: entered promiscuous mode [ 176.000311][ T8019] erspan0: entered allmulticast mode [ 176.072453][ T8023] erspan0: left promiscuous mode [ 176.084471][ T8023] erspan0: left allmulticast mode [ 176.173882][ T8025] erspan0: entered allmulticast mode [ 176.834065][ T8039] erspan0: left allmulticast mode [ 176.891374][ T8042] __nla_validate_parse: 1 callbacks suppressed [ 176.891392][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 177.043073][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.657'. [ 177.053944][ T8047] siw: device registration error -23 [ 177.085510][ T7918] Set syz1 is full, maxelem 65536 reached [ 177.263362][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.658'. [ 177.745320][ T8072] FAULT_INJECTION: forcing a failure. [ 177.745320][ T8072] name failslab, interval 1, probability 0, space 0, times 0 [ 177.759210][ T8072] CPU: 1 UID: 0 PID: 8072 Comm: syz.1.666 Not tainted syzkaller #0 PREEMPT(full) [ 177.759240][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.759253][ T8072] Call Trace: [ 177.759262][ T8072] [ 177.759272][ T8072] dump_stack_lvl+0xe8/0x150 [ 177.759309][ T8072] should_fail_ex+0x40c/0x560 [ 177.759339][ T8072] should_failslab+0xa8/0x100 [ 177.759372][ T8072] __kmalloc_noprof+0xfe/0x720 [ 177.759400][ T8072] ? is_bpf_text_address+0x26/0x2b0 [ 177.759431][ T8072] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 177.759458][ T8072] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 177.759494][ T8072] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 177.759530][ T8072] genl_family_rcv_msg_doit+0xda/0x340 [ 177.759568][ T8072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.759603][ T8072] ? apparmor_capable+0x126/0x170 [ 177.759633][ T8072] ? bpf_lsm_capable+0x9/0x20 [ 177.759660][ T8072] ? security_capable+0x7e/0x2c0 [ 177.759699][ T8072] genl_rcv_msg+0x614/0x7a0 [ 177.759732][ T8072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.759756][ T8072] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 177.759778][ T8072] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 177.759804][ T8072] ? __pfx_nl80211_post_doit+0x10/0x10 [ 177.759844][ T8072] netlink_rcv_skb+0x226/0x4a0 [ 177.759877][ T8072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.759905][ T8072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.759955][ T8072] ? down_read+0x2be/0x330 [ 177.759999][ T8072] genl_rcv+0x28/0x40 [ 177.760022][ T8072] netlink_unicast+0x7bb/0x940 [ 177.760067][ T8072] netlink_sendmsg+0x813/0xb40 [ 177.760111][ T8072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.760151][ T8072] ? aa_sock_msg_perm+0xf1/0x1b0 [ 177.760180][ T8072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.760211][ T8072] sock_sendmsg_nosec+0x13a/0x180 [ 177.760240][ T8072] ____sys_sendmsg+0x54e/0x850 [ 177.760279][ T8072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.760330][ T8072] ? import_iovec+0x73/0xa0 [ 177.760366][ T8072] ___sys_sendmsg+0x2a5/0x360 [ 177.760396][ T8072] ? __lock_acquire+0x683/0x2cf0 [ 177.760431][ T8072] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.760498][ T8072] ? __fget_files+0x2a/0x420 [ 177.760525][ T8072] ? __fget_files+0x3a2/0x420 [ 177.760565][ T8072] __x64_sys_sendmsg+0x1b1/0x290 [ 177.760599][ T8072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.760653][ T8072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.760678][ T8072] do_syscall_64+0x174/0x580 [ 177.760706][ T8072] ? trace_irq_disable+0x3b/0x140 [ 177.760734][ T8072] ? clear_bhb_loop+0x40/0x90 [ 177.760761][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.760783][ T8072] RIP: 0033:0x7f2d2d39de59 [ 177.760804][ T8072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.760823][ T8072] RSP: 002b:00007f2d2e231028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.760846][ T8072] RAX: ffffffffffffffda RBX: 00007f2d2d625fa0 RCX: 00007f2d2d39de59 [ 177.760863][ T8072] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 177.760877][ T8072] RBP: 00007f2d2e231090 R08: 0000000000000000 R09: 0000000000000000 [ 177.760890][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.760903][ T8072] R13: 00007f2d2d626038 R14: 00007f2d2d625fa0 R15: 00007ffcf6e738a8 [ 177.760940][ T8072] [ 178.136952][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 178.399453][ T8083] FAULT_INJECTION: forcing a failure. [ 178.399453][ T8083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.451097][ T8083] CPU: 1 UID: 0 PID: 8083 Comm: syz.1.671 Not tainted syzkaller #0 PREEMPT(full) [ 178.451129][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.451143][ T8083] Call Trace: [ 178.451159][ T8083] [ 178.451169][ T8083] dump_stack_lvl+0xe8/0x150 [ 178.451206][ T8083] should_fail_ex+0x40c/0x560 [ 178.451237][ T8083] _copy_to_user+0x31/0xb0 [ 178.451272][ T8083] simple_read_from_buffer+0xe1/0x170 [ 178.451308][ T8083] proc_fail_nth_read+0x1bb/0x230 [ 178.451342][ T8083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.451375][ T8083] ? rw_verify_area+0x24a/0x4c0 [ 178.451409][ T8083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.451437][ T8083] vfs_read+0x213/0xa80 [ 178.451476][ T8083] ? __pfx___mutex_lock+0x10/0x10 [ 178.451506][ T8083] ? __pfx_vfs_read+0x10/0x10 [ 178.451540][ T8083] ? __fget_files+0x2a/0x420 [ 178.451573][ T8083] ? __fget_files+0x3a2/0x420 [ 178.451600][ T8083] ? __fget_files+0x2a/0x420 [ 178.451639][ T8083] ksys_read+0x150/0x270 [ 178.451674][ T8083] ? __pfx_ksys_read+0x10/0x10 [ 178.451716][ T8083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.451740][ T8083] do_syscall_64+0x174/0x580 [ 178.451768][ T8083] ? trace_irq_disable+0x3b/0x140 [ 178.451796][ T8083] ? clear_bhb_loop+0x40/0x90 [ 178.451823][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.451845][ T8083] RIP: 0033:0x7f2d2d35e68e [ 178.451865][ T8083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.451884][ T8083] RSP: 002b:00007f2d2e230fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.451914][ T8083] RAX: ffffffffffffffda RBX: 00007f2d2e2316c0 RCX: 00007f2d2d35e68e [ 178.451931][ T8083] RDX: 000000000000000f RSI: 00007f2d2e2310a0 RDI: 0000000000000004 [ 178.451945][ T8083] RBP: 00007f2d2e231090 R08: 0000000000000000 R09: 0000000000000000 [ 178.451958][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.451971][ T8083] R13: 00007f2d2d626038 R14: 00007f2d2d625fa0 R15: 00007ffcf6e738a8 [ 178.452007][ T8083] [ 178.683084][ T8087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.944614][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.679'. [ 179.000556][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'. [ 179.027307][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 179.197979][ T8114] erspan0: left promiscuous mode [ 179.228423][ T8114] erspan0: left allmulticast mode [ 179.269332][ T8122] syz_tun: entered allmulticast mode [ 179.282399][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 179.301965][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 179.310998][ T8120] syz_tun: left allmulticast mode [ 179.328194][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 179.719204][ T8141] syzkaller0: entered promiscuous mode [ 179.732695][ T8141] syzkaller0: entered allmulticast mode [ 179.875221][ T8142] erspan0: entered allmulticast mode [ 180.331883][ T8170] erspan0: left allmulticast mode [ 180.661757][ T8181] syzkaller0: entered promiscuous mode [ 180.678521][ T8181] syzkaller0: entered allmulticast mode [ 180.766855][ T8187] bridge2: port 1(vlan2) entered blocking state [ 180.773515][ T8187] bridge2: port 1(vlan2) entered disabled state [ 180.784775][ T8187] vlan2: entered allmulticast mode [ 180.795494][ T8187] bridge2: entered allmulticast mode [ 180.806643][ T8187] vlan2: left allmulticast mode [ 180.824392][ T8187] bridge2: left allmulticast mode [ 180.832178][ T8190] xt_socket: unknown flags 0x8 [ 181.142390][ T8204] batadv_slave_1: entered promiscuous mode [ 181.198099][ T8204] bond2: option primary_reselect: invalid value (6) [ 181.212914][ T8204] bond2 (unregistering): Released all slaves [ 181.312006][ T8206] tipc: Started in network mode [ 181.334901][ T8206] tipc: Node identity d6fe990b0f4e, cluster identity 4711 [ 181.352393][ T8206] tipc: Enabled bearer , priority 0 [ 181.360699][ T8203] batadv_slave_1: left promiscuous mode [ 181.511257][ T8206] syzkaller0: entered promiscuous mode [ 181.525288][ T8206] syzkaller0: entered allmulticast mode [ 181.535948][ T8206] tipc: Resetting bearer [ 181.651573][ T8205] tipc: Resetting bearer [ 183.191385][ T8205] tipc: Disabling bearer [ 183.210591][ T7717] tipc: Node number set to 3652229387 [ 183.600927][ T8254] erspan0: entered promiscuous mode [ 183.631624][ T8254] erspan0: entered allmulticast mode [ 183.761577][ T8260] syzkaller0: entered promiscuous mode [ 183.769757][ T8260] syzkaller0: entered allmulticast mode [ 183.800705][ T8263] rdma_rxe: rxe_newlink: failed to add batadv0 [ 183.908555][ T8268] __nla_validate_parse: 4 callbacks suppressed [ 183.908576][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 184.033155][ T8274] bond0: option arp_validate: invalid value (55553) [ 184.062513][ T8275] erspan0: entered promiscuous mode [ 184.092501][ T8275] erspan0: entered allmulticast mode [ 184.268387][ T8283] netlink: 'syz.3.741': attribute type 23 has an invalid length. [ 184.473210][ T8289] siw: device registration error -23 [ 184.516854][ T8293] erspan0: left allmulticast mode [ 194.428190][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434640][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.871712][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 211.872507][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 211.878062][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 214.759937][ T8311] block nbd0: Unsupported socket: should be TCP or UNIX. [ 214.956782][ T8318] block nbd0: Unsupported socket: should be TCP or UNIX. [ 215.987601][ T8361] block nbd0: Unsupported socket: should be TCP or UNIX. [ 216.210441][ T8366] netlink: 'syz.0.760': attribute type 1 has an invalid length. [ 216.470743][ T8381] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 218.262365][ T8453] erspan0: left promiscuous mode [ 218.283285][ T8453] erspan0: left allmulticast mode [ 218.923914][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 218.946637][ T8480] FAULT_INJECTION: forcing a failure. [ 218.946637][ T8480] name failslab, interval 1, probability 0, space 0, times 0 [ 218.995260][ T8480] CPU: 0 UID: 0 PID: 8480 Comm: syz.1.781 Not tainted syzkaller #0 PREEMPT(full) [ 218.995290][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.995305][ T8480] Call Trace: [ 218.995313][ T8480] [ 218.995323][ T8480] dump_stack_lvl+0xe8/0x150 [ 218.995368][ T8480] should_fail_ex+0x40c/0x560 [ 218.995399][ T8480] should_failslab+0xa8/0x100 [ 218.995432][ T8480] __kmalloc_cache_noprof+0xa8/0x660 [ 218.995458][ T8480] ? nft_pernet+0x23/0x240 [ 218.995486][ T8480] ? nft_delchain+0x54/0x4b0 [ 218.995514][ T8480] ? nft_delchain+0x54/0x4b0 [ 218.995551][ T8480] nft_delchain+0x54/0x4b0 [ 218.995588][ T8480] nf_tables_delchain+0xe06/0x1050 [ 218.995633][ T8480] ? __pfx_nf_tables_delchain+0x10/0x10 [ 218.995673][ T8480] ? __nla_parse+0x40/0x60 [ 218.995706][ T8480] nfnetlink_rcv+0x1288/0x28c0 [ 218.995776][ T8480] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 218.995859][ T8480] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.995904][ T8480] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.995937][ T8480] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.995976][ T8480] netlink_unicast+0x7bb/0x940 [ 218.996019][ T8480] netlink_sendmsg+0x813/0xb40 [ 218.996063][ T8480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.996101][ T8480] ? aa_sock_msg_perm+0xf1/0x1b0 [ 218.996129][ T8480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.996162][ T8480] sock_sendmsg_nosec+0x13a/0x180 [ 218.996191][ T8480] ____sys_sendmsg+0x54e/0x850 [ 218.996229][ T8480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.996277][ T8480] ? import_iovec+0x73/0xa0 [ 218.996311][ T8480] ___sys_sendmsg+0x2a5/0x360 [ 218.996340][ T8480] ? __lock_acquire+0x683/0x2cf0 [ 218.996381][ T8480] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.996451][ T8480] ? __fget_files+0x2a/0x420 [ 218.996479][ T8480] ? __fget_files+0x3a2/0x420 [ 218.996519][ T8480] __x64_sys_sendmsg+0x1b1/0x290 [ 218.996554][ T8480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.996608][ T8480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.996632][ T8480] do_syscall_64+0x174/0x580 [ 218.996660][ T8480] ? trace_irq_disable+0x3b/0x140 [ 218.996688][ T8480] ? clear_bhb_loop+0x40/0x90 [ 218.996714][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.996746][ T8480] RIP: 0033:0x7f2d2d39de59 [ 218.996766][ T8480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.996785][ T8480] RSP: 002b:00007f2d2e231028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.996807][ T8480] RAX: ffffffffffffffda RBX: 00007f2d2d625fa0 RCX: 00007f2d2d39de59 [ 218.996823][ T8480] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 218.996836][ T8480] RBP: 00007f2d2e231090 R08: 0000000000000000 R09: 0000000000000000 [ 218.996848][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.996862][ T8480] R13: 00007f2d2d626038 R14: 00007f2d2d625fa0 R15: 00007ffcf6e738a8 [ 218.996897][ T8480] [ 219.375309][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.421098][ T8487] FAULT_INJECTION: forcing a failure. [ 219.421098][ T8487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.441224][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.466483][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.3.784 Not tainted syzkaller #0 PREEMPT(full) [ 219.466512][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.466526][ T8487] Call Trace: [ 219.466534][ T8487] [ 219.466544][ T8487] dump_stack_lvl+0xe8/0x150 [ 219.466580][ T8487] should_fail_ex+0x40c/0x560 [ 219.466612][ T8487] _copy_from_user+0x2d/0xb0 [ 219.466645][ T8487] ___sys_sendmsg+0x1c6/0x360 [ 219.466676][ T8487] ? __lock_acquire+0x683/0x2cf0 [ 219.466710][ T8487] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.466776][ T8487] ? __fget_files+0x2a/0x420 [ 219.466809][ T8487] ? __fget_files+0x3a2/0x420 [ 219.466856][ T8487] __x64_sys_sendmsg+0x1b1/0x290 [ 219.466892][ T8487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.466944][ T8487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.466968][ T8487] do_syscall_64+0x174/0x580 [ 219.466998][ T8487] ? trace_irq_disable+0x3b/0x140 [ 219.467025][ T8487] ? clear_bhb_loop+0x40/0x90 [ 219.467052][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.467074][ T8487] RIP: 0033:0x7f881659de59 [ 219.467095][ T8487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.467114][ T8487] RSP: 002b:00007f8817498028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.467137][ T8487] RAX: ffffffffffffffda RBX: 00007f8816825fa0 RCX: 00007f881659de59 [ 219.467153][ T8487] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 219.467167][ T8487] RBP: 00007f8817498090 R08: 0000000000000000 R09: 0000000000000000 [ 219.467180][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.467192][ T8487] R13: 00007f8816826038 R14: 00007f8816825fa0 R15: 00007ffcff313b68 [ 219.467228][ T8487] [ 219.473064][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.824697][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.862268][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.905167][ T8484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.936794][ T8484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.982954][ T8484] veth1_vlan: left promiscuous mode [ 219.999443][ T8484] veth0_vlan: left promiscuous mode [ 220.016960][ T8484] veth0_vlan: entered promiscuous mode [ 220.036833][ T8484] veth1_vlan: entered promiscuous mode [ 220.084509][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.103692][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.125769][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.153601][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.217605][ T8484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.288086][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.295320][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.318334][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.325608][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.365142][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.383689][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.398272][ T8516] FAULT_INJECTION: forcing a failure. [ 220.398272][ T8516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.426915][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 220.426945][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.426959][ T8516] Call Trace: [ 220.426967][ T8516] [ 220.426976][ T8516] dump_stack_lvl+0xe8/0x150 [ 220.427015][ T8516] should_fail_ex+0x40c/0x560 [ 220.427049][ T8516] _copy_from_user+0x2d/0xb0 [ 220.427082][ T8516] ___sys_sendmsg+0x1c6/0x360 [ 220.427114][ T8516] ? __lock_acquire+0x683/0x2cf0 [ 220.427148][ T8516] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.427221][ T8516] ? __fget_files+0x2a/0x420 [ 220.427248][ T8516] ? __fget_files+0x3a2/0x420 [ 220.427286][ T8516] __x64_sys_sendmsg+0x1b1/0x290 [ 220.427322][ T8516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.427375][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.427399][ T8516] do_syscall_64+0x174/0x580 [ 220.427428][ T8516] ? trace_irq_disable+0x3b/0x140 [ 220.427455][ T8516] ? clear_bhb_loop+0x40/0x90 [ 220.427482][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.427503][ T8516] RIP: 0033:0x7fae4d39de59 [ 220.427524][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.427543][ T8516] RSP: 002b:00007fae4e302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.427566][ T8516] RAX: ffffffffffffffda RBX: 00007fae4d625fa0 RCX: 00007fae4d39de59 [ 220.427582][ T8516] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 220.427596][ T8516] RBP: 00007fae4e302090 R08: 0000000000000000 R09: 0000000000000000 [ 220.427609][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.427622][ T8516] R13: 00007fae4d626038 R14: 00007fae4d625fa0 R15: 00007fffb4fa55f8 [ 220.427657][ T8516] [ 220.617167][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.626400][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.695519][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 221.730677][ T8545] FAULT_INJECTION: forcing a failure. [ 221.730677][ T8545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.768779][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.1.805 Not tainted syzkaller #0 PREEMPT(full) [ 221.768811][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.768825][ T8545] Call Trace: [ 221.768834][ T8545] [ 221.768843][ T8545] dump_stack_lvl+0xe8/0x150 [ 221.768883][ T8545] should_fail_ex+0x40c/0x560 [ 221.768913][ T8545] _copy_from_user+0x2d/0xb0 [ 221.768946][ T8545] generic_map_update_batch+0x6a3/0x9a0 [ 221.768980][ T8545] ? __pfx_generic_map_update_batch+0x10/0x10 [ 221.769003][ T8545] ? __fget_files+0x2a/0x420 [ 221.769038][ T8545] ? __pfx_generic_map_update_batch+0x10/0x10 [ 221.769059][ T8545] bpf_map_do_batch+0x391/0x630 [ 221.769094][ T8545] __sys_bpf+0xbe5/0xd90 [ 221.769131][ T8545] ? __pfx___sys_bpf+0x10/0x10 [ 221.769170][ T8545] ? __fget_files+0x2a/0x420 [ 221.769214][ T8545] ? ksys_write+0x242/0x270 [ 221.769249][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 221.769287][ T8545] __x64_sys_bpf+0xba/0xd0 [ 221.769313][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.769337][ T8545] do_syscall_64+0x174/0x580 [ 221.769366][ T8545] ? trace_irq_disable+0x3b/0x140 [ 221.769393][ T8545] ? clear_bhb_loop+0x40/0x90 [ 221.769419][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.769441][ T8545] RIP: 0033:0x7f2d2d39de59 [ 221.769462][ T8545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.769480][ T8545] RSP: 002b:00007f2d2e231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.769502][ T8545] RAX: ffffffffffffffda RBX: 00007f2d2d625fa0 RCX: 00007f2d2d39de59 [ 221.769518][ T8545] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001a [ 221.769531][ T8545] RBP: 00007f2d2e231090 R08: 0000000000000000 R09: 0000000000000000 [ 221.769544][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.769570][ T8545] R13: 00007f2d2d626038 R14: 00007f2d2d625fa0 R15: 00007ffcf6e738a8 [ 221.769605][ T8545] [ 222.461791][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.813'. [ 222.520300][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.528023][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.744185][ T8572] block nbd0: Unsupported socket: should be TCP or UNIX. [ 222.767502][ T8556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.812656][ T8556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.211334][ T8560] erspan0: left promiscuous mode [ 223.221039][ T8560] erspan0: left allmulticast mode [ 223.274043][ T14] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.310825][ T14] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.369672][ T14] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.403979][ T14] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.837463][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 224.100472][ T8600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.823'. [ 224.110973][ T8600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.823'. [ 224.121662][ T8600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.929288][ T8626] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 224.947439][ T8626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.239403][ T8643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.697285][ T8629] netlink: 120 bytes leftover after parsing attributes in process `syz.0.831'. [ 225.716908][ T8629] netlink: 120 bytes leftover after parsing attributes in process `syz.0.831'. [ 226.390182][ T8665] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 227.248646][ T8689] syzkaller0: entered promiscuous mode [ 227.259591][ T8689] syzkaller0: entered allmulticast mode [ 227.312413][ T8554] Set syz1 is full, maxelem 65536 reached [ 227.444409][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 227.528494][ T8696] syzkaller0: entered promiscuous mode [ 227.534210][ T8696] syzkaller0: entered allmulticast mode [ 227.668950][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 228.240596][ T8725] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 228.340579][ T8730] netlink: zone id is out of range [ 228.345937][ T8730] netlink: zone id is out of range [ 228.351763][ T8730] netlink: zone id is out of range [ 228.361593][ T8730] netlink: zone id is out of range [ 228.367201][ T8730] netlink: zone id is out of range [ 228.824602][ T8746] syzkaller0: entered promiscuous mode [ 228.837236][ T8746] syzkaller0: entered allmulticast mode [ 229.000724][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 229.040460][ T8758] block nbd0: Unsupported socket: should be TCP or UNIX. [ 229.395586][ T8771] syzkaller0: entered promiscuous mode [ 229.402339][ T8771] syzkaller0: entered allmulticast mode [ 230.125687][ T8801] FAULT_INJECTION: forcing a failure. [ 230.125687][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 230.178700][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.1.881 Not tainted syzkaller #0 PREEMPT(full) [ 230.178730][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.178744][ T8801] Call Trace: [ 230.178753][ T8801] [ 230.178762][ T8801] dump_stack_lvl+0xe8/0x150 [ 230.178801][ T8801] should_fail_ex+0x40c/0x560 [ 230.178832][ T8801] should_failslab+0xa8/0x100 [ 230.178866][ T8801] __kmalloc_noprof+0xfe/0x720 [ 230.178892][ T8801] ? is_bpf_text_address+0x26/0x2b0 [ 230.178923][ T8801] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.178951][ T8801] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.178988][ T8801] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.179024][ T8801] genl_family_rcv_msg_doit+0xda/0x340 [ 230.179059][ T8801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 230.179095][ T8801] ? apparmor_capable+0x126/0x170 [ 230.179124][ T8801] ? bpf_lsm_capable+0x9/0x20 [ 230.179150][ T8801] ? security_capable+0x7e/0x2c0 [ 230.179194][ T8801] genl_rcv_msg+0x614/0x7a0 [ 230.179236][ T8801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.179261][ T8801] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 230.179284][ T8801] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 230.179312][ T8801] ? __pfx_nl80211_post_doit+0x10/0x10 [ 230.179351][ T8801] netlink_rcv_skb+0x226/0x4a0 [ 230.179386][ T8801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.179414][ T8801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.179464][ T8801] ? down_read+0x2be/0x330 [ 230.179534][ T8801] genl_rcv+0x28/0x40 [ 230.179590][ T8801] netlink_unicast+0x7bb/0x940 [ 230.179633][ T8801] netlink_sendmsg+0x813/0xb40 [ 230.179678][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.179717][ T8801] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.179745][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.179779][ T8801] sock_sendmsg_nosec+0x13a/0x180 [ 230.179808][ T8801] ____sys_sendmsg+0x54e/0x850 [ 230.179847][ T8801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.179890][ T8801] ? import_iovec+0x73/0xa0 [ 230.179926][ T8801] ___sys_sendmsg+0x2a5/0x360 [ 230.179956][ T8801] ? __lock_acquire+0x683/0x2cf0 [ 230.179991][ T8801] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.180065][ T8801] ? __fget_files+0x2a/0x420 [ 230.180092][ T8801] ? __fget_files+0x3a2/0x420 [ 230.180133][ T8801] __x64_sys_sendmsg+0x1b1/0x290 [ 230.180169][ T8801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.180222][ T8801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.180255][ T8801] do_syscall_64+0x174/0x580 [ 230.180284][ T8801] ? trace_irq_disable+0x3b/0x140 [ 230.180311][ T8801] ? clear_bhb_loop+0x40/0x90 [ 230.180339][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.180362][ T8801] RIP: 0033:0x7f2d2d39de59 [ 230.180382][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.180401][ T8801] RSP: 002b:00007f2d2e231028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.180424][ T8801] RAX: ffffffffffffffda RBX: 00007f2d2d625fa0 RCX: 00007f2d2d39de59 [ 230.180441][ T8801] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 230.180454][ T8801] RBP: 00007f2d2e231090 R08: 0000000000000000 R09: 0000000000000000 [ 230.180468][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.180481][ T8801] R13: 00007f2d2d626038 R14: 00007f2d2d625fa0 R15: 00007ffcf6e738a8 [ 230.180518][ T8801] [ 230.549942][ T8805] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 230.639269][ T8808] syzkaller0: entered promiscuous mode [ 230.655835][ T8808] syzkaller0: entered allmulticast mode [ 230.860553][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 230.977483][ T8828] FAULT_INJECTION: forcing a failure. [ 230.977483][ T8828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.020852][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.2.887 Not tainted syzkaller #0 PREEMPT(full) [ 231.020882][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.020895][ T8828] Call Trace: [ 231.020904][ T8828] [ 231.020913][ T8828] dump_stack_lvl+0xe8/0x150 [ 231.020952][ T8828] should_fail_ex+0x40c/0x560 [ 231.020983][ T8828] _copy_to_user+0x31/0xb0 [ 231.021018][ T8828] simple_read_from_buffer+0xe1/0x170 [ 231.021054][ T8828] proc_fail_nth_read+0x1bb/0x230 [ 231.021087][ T8828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.021121][ T8828] ? rw_verify_area+0x24a/0x4c0 [ 231.021155][ T8828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.021184][ T8828] vfs_read+0x213/0xa80 [ 231.021221][ T8828] ? __pfx___mutex_lock+0x10/0x10 [ 231.021253][ T8828] ? __pfx_vfs_read+0x10/0x10 [ 231.021287][ T8828] ? __fget_files+0x2a/0x420 [ 231.021319][ T8828] ? __fget_files+0x3a2/0x420 [ 231.021346][ T8828] ? __fget_files+0x2a/0x420 [ 231.021383][ T8828] ksys_read+0x150/0x270 [ 231.021417][ T8828] ? __pfx_ksys_read+0x10/0x10 [ 231.021457][ T8828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.021481][ T8828] do_syscall_64+0x174/0x580 [ 231.021510][ T8828] ? trace_irq_disable+0x3b/0x140 [ 231.021538][ T8828] ? clear_bhb_loop+0x40/0x90 [ 231.021565][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.021587][ T8828] RIP: 0033:0x7fae4d35e68e [ 231.021608][ T8828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.021627][ T8828] RSP: 002b:00007fae4e301fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.021650][ T8828] RAX: ffffffffffffffda RBX: 00007fae4e3026c0 RCX: 00007fae4d35e68e [ 231.021666][ T8828] RDX: 000000000000000f RSI: 00007fae4e3020a0 RDI: 0000000000000008 [ 231.021680][ T8828] RBP: 00007fae4e302090 R08: 0000000000000000 R09: 0000000000000000 [ 231.021703][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.021716][ T8828] R13: 00007fae4d626038 R14: 00007fae4d625fa0 R15: 00007fffb4fa55f8 [ 231.021752][ T8828] [ 231.451616][ T8845] FAULT_INJECTION: forcing a failure. [ 231.451616][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 231.464521][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.4.892 Not tainted syzkaller #0 PREEMPT(full) [ 231.464545][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.464556][ T8845] Call Trace: [ 231.464562][ T8845] [ 231.464569][ T8845] dump_stack_lvl+0xe8/0x150 [ 231.464601][ T8845] should_fail_ex+0x40c/0x560 [ 231.464633][ T8845] should_failslab+0xa8/0x100 [ 231.464660][ T8845] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 231.464682][ T8845] ? skb_clone+0x212/0x3a0 [ 231.464708][ T8845] ? skb_clone+0x212/0x3a0 [ 231.464739][ T8845] skb_clone+0x212/0x3a0 [ 231.464767][ T8845] bpf_clone_redirect+0x170/0x4b0 [ 231.464795][ T8845] ? bpf_test_run+0x1d1/0x830 [ 231.464822][ T8845] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 231.464865][ T8845] ? __kernel_text_address+0xd/0x30 [ 231.464892][ T8845] ? unwind_get_return_address+0x4d/0x90 [ 231.464911][ T8845] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.464933][ T8845] ? arch_stack_walk+0xfb/0x150 [ 231.464957][ T8845] ? ktime_get+0x45/0x220 [ 231.464985][ T8845] ? ktime_get+0x45/0x220 [ 231.465007][ T8845] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 231.465029][ T8845] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.465052][ T8845] ? ktime_get+0x45/0x220 [ 231.465071][ T8845] ? seqcount_lockdep_reader_access+0xea/0x100 [ 231.465094][ T8845] ? ktime_get+0x1f5/0x220 [ 231.465124][ T8845] bpf_test_run+0x354/0x830 [ 231.465175][ T8845] ? __pfx_bpf_test_run+0x10/0x10 [ 231.465223][ T8845] ? __kasan_krealloc+0xec/0x110 [ 231.465261][ T8845] ? skb_dst_set+0x72/0x140 [ 231.465295][ T8845] bpf_prog_test_run_skb+0xe35/0x2230 [ 231.465349][ T8845] ? __fget_files+0x3a2/0x420 [ 231.465376][ T8845] ? __fget_files+0x2a/0x420 [ 231.465408][ T8845] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 231.465439][ T8845] bpf_prog_test_run+0x2c5/0x340 [ 231.465474][ T8845] __sys_bpf+0xa22/0xd90 [ 231.465510][ T8845] ? __pfx___sys_bpf+0x10/0x10 [ 231.465548][ T8845] ? __fget_files+0x2a/0x420 [ 231.465595][ T8845] ? ksys_write+0x242/0x270 [ 231.465642][ T8845] ? __pfx_ksys_write+0x10/0x10 [ 231.465680][ T8845] __x64_sys_bpf+0xba/0xd0 [ 231.465706][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.465731][ T8845] do_syscall_64+0x174/0x580 [ 231.465759][ T8845] ? trace_irq_disable+0x3b/0x140 [ 231.465785][ T8845] ? clear_bhb_loop+0x40/0x90 [ 231.465813][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.465835][ T8845] RIP: 0033:0x7fa947f9de59 [ 231.465856][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.465875][ T8845] RSP: 002b:00007fa948ed3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.465898][ T8845] RAX: ffffffffffffffda RBX: 00007fa948225fa0 RCX: 00007fa947f9de59 [ 231.465914][ T8845] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 231.465928][ T8845] RBP: 00007fa948ed3090 R08: 0000000000000000 R09: 0000000000000000 [ 231.465941][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.465954][ T8845] R13: 00007fa948226038 R14: 00007fa948225fa0 R15: 00007ffc0c62da18 [ 231.465989][ T8845] [ 232.257135][ T8868] x_tables: duplicate entry at hook 1 [ 232.304251][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 232.335948][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.895'. [ 232.376049][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.896'. [ 232.388963][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 232.397236][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.896'. [ 232.509043][ T8874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.897'. [ 232.779535][ T8883] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 233.172289][ T8905] syzkaller0: entered promiscuous mode [ 233.178174][ T8905] syzkaller0: entered allmulticast mode [ 233.303355][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 234.546198][ T8969] netlink: 'syz.3.916': attribute type 5 has an invalid length. [ 234.630769][ T8974] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 234.884586][ T8984] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.110046][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.189783][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.352628][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.162437][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.321960][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.951047][ T8986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.091212][ T8986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.239335][ T8986] net_ratelimit: 17 callbacks suppressed [ 237.239357][ T8986] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 237.644396][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.651727][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.716915][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.724261][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.123412][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 238.243545][ T9042] syzkaller0: entered promiscuous mode [ 238.271896][ T9042] syzkaller0: entered allmulticast mode [ 239.102886][ T9070] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.352841][ T9071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.381927][ T9071] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.419824][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.832754][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.964834][ T9083] block nbd0: Unsupported socket: should be TCP or UNIX. [ 240.010033][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.144197][ T9071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.196661][ T9071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.282891][ T9071] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 240.622747][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.630042][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.641510][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.648829][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.588476][ T9130] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 244.428002][ T9164] syzkaller1: entered promiscuous mode [ 244.455611][ T9164] syzkaller1: entered allmulticast mode [ 256.224723][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.242121][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 299.944392][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.595425][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.676197][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.790840][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.903124][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.143024][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 304.834208][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.845323][ T9209] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 305.036134][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.242833][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.981721][ T50] Bluetooth: hci5: command tx timeout [ 306.171533][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.319503][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.264237][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.417507][ T4939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.442769][ T4939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.532988][ T4939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.659159][ T4939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.938931][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.036953][ T5635] Bluetooth: hci5: command tx timeout [ 308.182668][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.227271][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.715559][ T5635] Bluetooth: hci0: command tx timeout [ 309.990784][ T9233] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 310.009806][ T4939] Bluetooth: hci6: command 0x0c1a tx timeout [ 310.151753][ T4939] Bluetooth: hci5: command tx timeout [ 310.400352][ T5632] Bluetooth: hci7: Opcode 0x0c23 failed: -110 [ 311.903324][ T4939] Bluetooth: hci0: command tx timeout [ 311.921983][ T4939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.941099][ T4939] Bluetooth: hci7: unexpected event for opcode 0x0c23 [ 312.302403][ T4939] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.333432][ T5632] Bluetooth: hci5: command tx timeout [ 312.802165][ T9240] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 314.331095][ T5632] Bluetooth: hci0: command tx timeout [ 314.484074][ T5632] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 314.545197][ T5632] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 315.245033][ T5632] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 315.532292][ C0] sched: DL replenish lagged too much [ 315.923245][ T5632] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 316.448451][ T5632] Bluetooth: hci0: command tx timeout [ 316.984466][ T5632] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 318.348440][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.365023][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.394957][ T4939] Bluetooth: hci8: Opcode 0x0c16 failed: -110 [ 320.984964][ T4939] Bluetooth: hci8: unexpected event for opcode 0x0c16 [ 321.024875][ T4939] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 322.461719][ T9245] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 342.123108][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.285869][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.389969][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.572803][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.639838][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.472445][ T5632] Bluetooth: hci1: command tx timeout [ 347.653414][ T5632] Bluetooth: hci1: command tx timeout [ 349.670180][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.735735][ T5635] Bluetooth: hci1: command tx timeout [ 349.781149][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.008231][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.232151][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.294811][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.722330][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.778124][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.961750][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.039148][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.119256][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.198730][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.935085][ T5627] Bluetooth: hci1: command tx timeout [ 352.246065][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.803888][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.907887][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.314198][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.929319][ T50] Bluetooth: hci3: command tx timeout [ 355.824155][ T50] Bluetooth: hci2: command tx timeout [ 356.201322][ T50] Bluetooth: hci4: command tx timeout [ 357.037462][ T50] Bluetooth: hci3: command tx timeout [ 357.971087][ T50] Bluetooth: hci2: command tx timeout [ 358.709762][ T50] Bluetooth: hci4: command tx timeout [ 359.126626][ T50] Bluetooth: hci3: command tx timeout [ 360.051163][ T5632] Bluetooth: hci2: command tx timeout [ 360.084462][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.190471][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.782678][ T5632] Bluetooth: hci4: command tx timeout [ 360.798791][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.941906][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.058370][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.158959][ T5632] Bluetooth: hci3: command tx timeout [ 362.573237][ T5632] Bluetooth: hci2: command tx timeout [ 362.849843][ T5632] Bluetooth: hci4: command tx timeout [ 366.090940][ T50] Bluetooth: hci5: command tx timeout [ 368.248933][ T50] Bluetooth: hci5: command tx timeout [ 371.949446][ T50] Bluetooth: hci5: command tx timeout [ 374.911670][ T50] Bluetooth: hci5: command tx timeout [ 379.368851][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.382852][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.805468][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.978726][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.075057][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.400143][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.463291][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.514521][ T50] Bluetooth: hci0: command tx timeout [ 423.435114][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 423.772256][ T50] Bluetooth: hci0: command tx timeout [ 424.768271][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 424.859129][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.145405][ T50] Bluetooth: hci0: command tx timeout [ 427.424862][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 427.905534][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.298524][ T5627] Bluetooth: hci0: command tx timeout [ 428.402371][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 428.565597][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 431.307008][ T50] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 431.361055][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 431.850476][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 432.007806][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 432.679719][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 434.833838][ T5627] Bluetooth: hci6: command tx timeout [ 435.757009][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 436.292206][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 436.915503][ T5627] Bluetooth: hci6: command tx timeout [ 439.514669][ T50] Bluetooth: hci6: command tx timeout [ 440.673404][ T50] Bluetooth: hci7: command tx timeout [ 440.763370][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.829180][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.844490][ T5627] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 440.875692][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 441.703163][ T50] Bluetooth: hci6: command tx timeout [ 442.440695][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 443.335821][ T5627] Bluetooth: hci7: command tx timeout [ 443.354128][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 443.473495][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 443.746949][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 444.025073][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 444.424135][ T5627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 444.762814][ T5632] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 444.818111][ T5632] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 444.902221][ T5632] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 445.038066][ T5632] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 445.414815][ T5632] Bluetooth: hci7: command tx timeout [ 447.500127][ T5632] Bluetooth: hci7: command tx timeout [ 462.915614][ T5627] Bluetooth: hci9: command tx timeout [ 462.922447][ T50] Bluetooth: hci8: command tx timeout [ 465.005139][ T5627] Bluetooth: hci8: command tx timeout [ 465.097545][ T5627] Bluetooth: hci9: command tx timeout [ 467.069322][ T5632] Bluetooth: hci8: command tx timeout [ 467.356898][ T5632] Bluetooth: hci9: command tx timeout [ 469.524025][ T5632] Bluetooth: hci8: command tx timeout [ 469.538432][ T5632] Bluetooth: hci9: command tx timeout [ 493.242770][ T5627] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 501.984703][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.998701][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.918019][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.142822][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.178199][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.594075][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.764971][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.337869][ T5632] Bluetooth: hci0: command tx timeout [ 512.635386][ T5632] Bluetooth: hci0: command tx timeout [ 514.140451][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.202709][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.319332][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.403682][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.094362][ T5627] Bluetooth: hci0: command tx timeout [ 516.187502][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 517.175829][ T5627] Bluetooth: hci0: command tx timeout [ 518.278203][ T50] Bluetooth: hci2: command 0x0c39 tx timeout [ 518.285006][ T5632] Bluetooth: hci2: Opcode 0x0c39 failed: -110 [ 518.542050][ T9365] Bluetooth: hci2: Opcode 0x0c03 failed: -4 [ 519.612982][ T5627] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 520.254956][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 520.274841][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 521.768484][ T9367] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 522.168177][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.634327][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.709745][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.151107][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.349810][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.257555][ T5632] Bluetooth: hci4: command tx timeout [ 531.334188][ T5632] Bluetooth: hci4: command tx timeout [ 533.454274][ T5632] Bluetooth: hci4: command tx timeout [ 535.989765][ T5632] Bluetooth: hci4: command tx timeout [ 540.878959][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.972735][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.064388][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.277248][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.360075][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.824971][ T5632] Bluetooth: hci1: command tx timeout [ 545.281755][ T1132] bridge_slave_1: left allmulticast mode [ 545.353461][ T1132] bridge_slave_1: left promiscuous mode [ 545.540000][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.884481][ T5632] Bluetooth: hci1: command tx timeout [ 547.239128][ T1132] bridge_slave_0: left allmulticast mode [ 547.294084][ T1132] bridge_slave_0: left promiscuous mode [ 547.504683][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.973254][ T5632] Bluetooth: hci1: command tx timeout [ 549.999242][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 550.055628][ T5627] Bluetooth: hci1: command tx timeout [ 550.679052][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 550.834569][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 550.837968][ T4939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 550.894357][ T4939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 551.056889][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 551.171514][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 551.223283][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 551.284865][ T4939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.362464][ T4939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.074875][ T5627] Bluetooth: hci3: command tx timeout [ 555.090009][ T5627] Bluetooth: hci2: command tx timeout [ 557.236407][ T5627] Bluetooth: hci3: command tx timeout [ 557.241903][ T5627] Bluetooth: hci2: command tx timeout [ 559.378656][ T5627] Bluetooth: hci3: command tx timeout [ 559.378964][ T50] Bluetooth: hci2: command tx timeout [ 560.624739][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 560.671014][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 560.783395][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 560.875631][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 560.938305][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 561.061894][ T4939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 561.180437][ T4939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 561.276629][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 561.445023][ T5632] Bluetooth: hci3: command tx timeout [ 561.571168][ T5632] Bluetooth: hci2: command tx timeout [ 561.622363][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.361675][ T4939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 563.161212][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.260037][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.725685][ T4939] Bluetooth: hci6: command tx timeout [ 565.480085][ T4939] Bluetooth: hci5: command tx timeout [ 565.848580][ T4939] Bluetooth: hci6: command tx timeout [ 567.791748][ T50] Bluetooth: hci5: command tx timeout [ 567.884694][ T50] Bluetooth: hci6: command tx timeout [ 569.967928][ T4939] Bluetooth: hci6: command tx timeout [ 569.982209][ T50] Bluetooth: hci5: command tx timeout [ 572.200436][ T4939] Bluetooth: hci5: command tx timeout [ 609.772993][ T1132] erspan0 (unregistering): left promiscuous mode [ 615.419319][ T1132] gretap0 (unregistering): left promiscuous mode [ 624.608886][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.623135][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.189142][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.274290][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.321407][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.456900][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.518195][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 643.730768][ T5627] Bluetooth: hci0: command tx timeout [ 646.166368][ T4939] Bluetooth: hci0: command tx timeout [ 647.020358][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 647.086992][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 647.123482][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 647.228630][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 647.269873][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 647.339925][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.426923][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 647.475772][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 647.693471][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 648.180078][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 648.196743][ T50] Bluetooth: hci0: command tx timeout [ 649.613118][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 649.813268][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 649.861505][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 650.385266][ T5627] Bluetooth: hci0: command tx timeout [ 650.448372][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 650.893818][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 651.470476][ T5627] Bluetooth: hci7: command tx timeout [ 651.515402][ T4939] Bluetooth: hci4: command tx timeout [ 652.987045][ T5632] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 653.323212][ T5632] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 653.340417][ T4939] Bluetooth: hci8: command tx timeout [ 653.392350][ T5632] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 653.566482][ T5632] Bluetooth: hci4: command tx timeout [ 653.635628][ T5632] Bluetooth: hci7: command tx timeout [ 653.772292][ T5632] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 653.850910][ T5632] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 655.390841][ T5632] Bluetooth: hci8: command tx timeout [ 655.626874][ T5632] Bluetooth: hci4: command tx timeout [ 655.782698][ T5632] Bluetooth: hci7: command tx timeout [ 656.106591][ T5632] Bluetooth: hci9: command tx timeout [ 657.492218][ T5632] Bluetooth: hci8: command tx timeout [ 657.710363][ T5632] Bluetooth: hci4: command tx timeout [ 657.890466][ T5632] Bluetooth: hci7: command tx timeout [ 658.189674][ T5632] Bluetooth: hci9: command tx timeout [ 659.918787][ T5632] Bluetooth: hci8: command tx timeout [ 660.355012][ T5632] Bluetooth: hci9: command tx timeout [ 662.439003][ T5632] Bluetooth: hci9: command tx timeout [ 667.901696][ T4939] Bluetooth: hci1: command 0x0406 tx timeout [ 676.123675][ T1132] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 678.361563][ T9453] Bluetooth: hci2: command 0x0406 tx timeout [ 678.376526][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 680.470769][ T1132] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 683.484029][ T4939] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 683.548178][ T4939] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 683.597859][ T4939] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 683.692042][ T4939] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 683.771153][ T4939] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 686.112319][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.126484][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.075195][ T50] Bluetooth: hci10: command tx timeout [ 688.453555][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 688.468852][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 689.220025][ T4939] Bluetooth: hci10: command tx timeout [ 689.570028][ T5627] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 689.693824][ T5627] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 691.351133][ T5627] Bluetooth: hci10: command tx timeout [ 691.389796][ T9453] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 691.803762][ T9453] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 691.939020][ T9453] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 693.518238][ T1132] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 693.715425][ T4939] Bluetooth: hci10: command tx timeout [ 694.201755][ T4939] Bluetooth: hci11: command tx timeout [ 696.687769][ T4939] Bluetooth: hci11: command tx timeout [ 697.487414][ T31] INFO: task kworker/u8:8:776 blocked for more than 142 seconds. [ 697.495230][ T31] Not tainted syzkaller #0 [ 697.874909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.097937][ T31] task:kworker/u8:8 state:D stack:21952 pid:776 tgid:776 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 698.459422][ T31] Workqueue: events_unbound linkwatch_event [ 698.685377][ T31] Call Trace: [ 699.205040][ T4939] Bluetooth: hci11: command tx timeout [ 699.307498][ T31] [ 699.310557][ T31] __schedule+0x17d9/0x56c0 [ 699.315123][ T31] ? __lock_acquire+0x683/0x2cf0 [ 699.792688][ T31] ? __lock_acquire+0x683/0x2cf0 [ 700.176757][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 700.181900][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 700.980306][ T31] ? schedule+0x90/0x2b0 [ 700.993232][ T31] schedule+0x164/0x2b0 [ 701.472669][ T4939] Bluetooth: hci11: command tx timeout [ 701.575464][ T31] schedule_preempt_disabled+0x13/0x30 [ 701.589668][ T31] __mutex_lock+0x7bf/0x1550 [ 701.594349][ T31] ? __mutex_lock+0x5d4/0x1550 [ 703.015788][ T31] ? linkwatch_event+0xe/0x60 [ 703.029261][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 703.034381][ T31] ? rcu_is_watching+0x15/0xb0 [ 703.524109][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 703.539078][ T31] linkwatch_event+0xe/0x60 [ 703.543652][ T31] process_scheduled_works+0xa8e/0x14e0 [ 703.883765][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 704.149346][ T9453] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 704.187381][ T9453] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 704.223788][ T9453] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 704.337636][ T9453] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 704.390651][ T9453] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 705.015689][ T31] ? assign_work+0x3cf/0x5d0 [ 705.029067][ T31] worker_thread+0xa47/0xfb0 [ 705.033770][ T31] ? __kthread_parkme+0x71/0x1f0 [ 705.757383][ T31] kthread+0x388/0x470 [ 705.761575][ T31] ? __pfx_worker_thread+0x10/0x10 [ 706.224736][ T31] ? __pfx_kthread+0x10/0x10 [ 706.467230][ T31] ret_from_fork+0x514/0xb70 [ 706.471930][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 707.011503][ T31] ? __switch_to+0xc89/0x1420 [ 707.170584][ T31] ? __pfx_kthread+0x10/0x10 [ 707.184285][ T31] ret_from_fork_asm+0x1a/0x30 [ 707.265988][ T31] [ 707.278103][ T31] INFO: task dhcpcd:5283 blocked for more than 152 seconds.