last executing test programs: 10m20.811763872s ago: executing program 32 (id=65): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r2, @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80100002e00090023bd7000fbdbdf2505000000b40111"], 0x1c8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r9 = socket(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x24008040) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x0, 0xfffffffa, {{0x6, 0x4, 0x2, 0x26, 0x18, 0x65, 0x0, 0x36, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@noop]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r10}, 0xc) close(r9) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40) 9m40.210978796s ago: executing program 5 (id=390): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x200, 0xffffffffffffffff, 0x81}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfffffffffffffe92, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x3, 0x8, &(0x7f00000002c0)="b80000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x4c}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r5, &(0x7f00000000c0)=""/81, 0x51) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x1410, 0x4, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r1, 0x29, 0x8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x61d9, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 9m40.070326284s ago: executing program 2 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x9, 0x900}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}}}}]}, 0x38}}, 0x2000a080) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m39.769689768s ago: executing program 2 (id=397): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r1 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000380)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) (async) shutdown(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xffffffff, 0x0, {0x2, 0x14, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 9m39.694887475s ago: executing program 5 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0x66, [0xc4, 0x7, 0x5, 0x7, 0x7fff, 0x200], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000001c0)=""/102}, &(0x7f0000000080)=0x78) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d", 0x2}], 0x1}}], 0x1, 0x40060) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000340)=@srh={0x21, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5b8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}, 0x28) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="010000400000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="dc005a80d80001800500060002000000050007000000000033000200291938230e220c465429242e2539160a1038382c223e10503b441a4a301e035724af272e1121090200000026412f01000500070001000000050006000200000005000400010000004e0002"], 0xf8}}, 0x0) 9m39.456716357s ago: executing program 5 (id=400): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000580)={'nat\x00', 0x0, [0x5, 0xfffffff7, 0x7e, 0x101, 0xc]}, &(0x7f0000000600)=0x54) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1c, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x502}, 0x28) 9m39.145830415s ago: executing program 2 (id=402): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1b}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x14, 0x2, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) 9m39.029699222s ago: executing program 2 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="5401000018000100299d7000fddbdf251d0105001e010600030660feff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c0237e2fed135f73f92b56d2a5e15c8a95d29e5b2ea000015000400030000a000050000508b276597b6c58b01"], 0x154}, 0x1, 0x0, 0x0, 0x4042044}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$unix(r3, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x400c880) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000300)={r5, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0x7ff}, &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000276f010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b080000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x19) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 9m38.889603183s ago: executing program 5 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x5, 0x8, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x5, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000000120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x20, 0x10, 0xffff, 0x1, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xd8, 0x4, 0x0, @broadcast, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0)="01b4", &(0x7f0000000300)=@tcp=r4, 0x1}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r6, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r6, 0x1}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xff8, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}}, 0x40040d1) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}}, 0x40040d1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0xfffffffffffffffe}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0xfffffffffffffffe}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.kill\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 9m38.633731796s ago: executing program 5 (id=408): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x200, 0xffffffffffffffff, 0x81}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfffffffffffffe92, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x3, 0x8, &(0x7f00000002c0)="b80000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x4c}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r5, &(0x7f00000000c0)=""/81, 0x51) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x1410, 0x4, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r1, 0x29, 0x8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x61d9, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 9m38.364946696s ago: executing program 2 (id=409): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000003386c3656e331705a3b803c1c3c14dbdf250900020073e07a3200000000080041007278650014000500766c616e3000000000000000000000008726c79b7aef2b546d7155da02fb21d49874cb2139a039f47c50a073800cc36b70407cbdcd47870a801cdf"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x6, 0x58273004, 0x4, 0x6}, 0x10) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x10000) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r10, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 9m38.069492563s ago: executing program 5 (id=412): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x28000600) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) shutdown(r1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 9m37.684029871s ago: executing program 33 (id=412): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x28000600) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) shutdown(r1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 9m37.665652425s ago: executing program 2 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=0x0, @ANYBLOB="8cc1866c7ec7c8dca6c805705121dfd9ee2f549a7a0a3af0fe4b439660e7cf"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000065c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080090003400000000020000b801c0001800a0001"], 0xe0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 9m37.584053082s ago: executing program 34 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=0x0, @ANYBLOB="8cc1866c7ec7c8dca6c805705121dfd9ee2f549a7a0a3af0fe4b439660e7cf"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000065c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080090003400000000020000b801c0001800a0001"], 0xe0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4m21.133766351s ago: executing program 6 (id=1789): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "06000000e380ff03", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", '\x00', "b6405ad112e098b1"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x448c4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff85c9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x47}, @ldst={0x2, 0x1, 0x6, 0x9, 0x8, 0xfffffffffffffff0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0xf, 0xe1, &(0x7f00000007c0)=""/225, 0x40f00, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r3, r2, r1, r1, r6, r4, r1], &(0x7f0000000900)=[{0x5, 0x4, 0x1, 0xb}, {0x0, 0x4, 0xe, 0x8}], 0x10, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f000094d000/0x2000)=nil, 0x2000, 0xba0c29e690d41d4b, 0x10010, 0xffffffffffffffff, 0x1c1ab000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="1875b49b8e8c678d1248e5670159e3", @ANYRES16=r7, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4m20.367854598s ago: executing program 7 (id=1796): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x20, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, {{0xa, 0x0, 0x1, @mcast1}}}, 0x108) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x29, 0x3a, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) recvmsg$can_j1939(r1, &(0x7f0000000600)={&(0x7f0000000240)=@x25, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/23, 0x17}], 0x3, &(0x7f0000000500)=""/215, 0xd7}, 0x40000100) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) r7 = socket$kcm(0x2, 0xa, 0x2) bind$pptp(r1, &(0x7f0000001000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="080000100700000a000014000000456f001c00660000401190780a010102ac1414124e204e2000089078"], 0x2a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) 4m20.237814318s ago: executing program 3 (id=1797): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}, 0x1, 0x0, 0x0, 0x8805}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2e, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x30}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4m20.136934201s ago: executing program 3 (id=1798): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random}) 4m20.041517735s ago: executing program 6 (id=1799): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040043000000a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef409", 0x7e}], 0x1}, 0x4088040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000b80)={{0x0, 0xfffffffffffffff6, 0x4, 0x6, 0x0, 0x3, 0x3042, 0x7, 0x2, 0x8f, 0x0, 0x200, 0xffffffffffffffff, 0x80, 0x70}}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYRES16=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000010000108000000000000007c17000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c1"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4m19.993917955s ago: executing program 3 (id=1800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6(0xa, 0x800, 0x404) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES8=r1, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESDEC=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x200080c5}, 0xc001) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r1, 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000100001002cbd70002000000000000000", @ANYRES32=r8, @ANYBLOB="13019757c0204000140003006e657464657673696d300000000000000500110004000000500016804c00018028000100"], 0x8c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 4m19.780230284s ago: executing program 6 (id=1802): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40460000001400000011"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)}, {&(0x7f0000000140)}, {0x0}, {&(0x7f0000000300)}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000002900"/24], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001200010025bd7000fedbdf25296308674e244e240800000005000000060000000900000008000000010000000d00000006000000", @ANYRES32=0x0, @ANYBLOB="7e8c8ce1dd28ff004100010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x3) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d03000000000000000013000000080009"], 0x20}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) socket$kcm(0x2, 0x200000000000000, 0x106) r6 = socket(0x2, 0x80002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x8, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}], 0x48}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 4m19.327261266s ago: executing program 7 (id=1807): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000db2cd2ae0008000300", @ANYRES32=r3, @ANYBLOB="10005e8004000100080005003a000000"], 0x2c}}, 0x800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r6, 0x4, 0x1}, 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000020000103ff0f00000000000002000099"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180001801400ec007369743000"/38], 0x2c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 4m19.222210209s ago: executing program 7 (id=1808): bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x201}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000100008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020605000000000000000000ffec000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @printk={@x}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000640)=@newtaction={0x250, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x23c, 0x1, [@m_ct={0x1e8, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x1a6, 0x6, "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"}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x222}}, 0x0) 4m19.115796545s ago: executing program 3 (id=1810): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r3, 0x0, 0x100000000, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000005800048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c0800034000000004100001800a00010072656469720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a33af4fbb1c5c104c175d3723a7da6a1c795f493e4b3b58b9daa036e6c65f865e4df1a75ae462792d2ed2f3ca9bb10dc9705180167a1c1b536f2db0fe5f5487dd9502013be63e110e84656e2c9f65074b49e662fdf76523ef6ab81fe5b2ef3d6929947e15bdfaea0dcd6d0a302afb"], 0xa4}}, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r6, @ANYBLOB="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"], 0x8c8}}, 0x0) write$tun(r2, &(0x7f0000000a40)=ANY=[], 0x3321) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0xe91, 0x4) 4m19.054037651s ago: executing program 7 (id=1811): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111ad000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 4m18.864814129s ago: executing program 6 (id=1813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xf86}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}]}]}, 0x38}}, 0x0) 4m18.752320986s ago: executing program 3 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) 4m18.739736031s ago: executing program 6 (id=1815): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4048050) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) unshare(0x22020600) r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000540)=@req={0x3, 0x7, 0x7, 0x6}, 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000801) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_emit_ethernet(0x10d, &(0x7f0000000780)={@random="b0378aa76e5e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @generic={{0x24, 0x4, 0x1, 0x3, 0xff, 0x68, 0x0, 0x0, 0x33, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x1c, 0xe6, 0x1, 0xf, [{@loopback, 0x3}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x75da}]}, @cipso={0x86, 0x2d, 0x2, [{0x1, 0x3, 'b'}, {0x7, 0xb, "a9da40325026c0d3ff"}, {0x0, 0x7, "5185e76fd7"}, {0x1, 0x12, "85b1faa5548000"/16}]}, @cipso={0x86, 0x26, 0x2, [{0x7, 0xf, "938968c089f2ee0ab2d55ccdee"}, {0x6, 0xe, "d27d05589f9677fa20e856b5"}, {0x0, 0x3, "cc"}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x8, 0xb8, 0x0, 0x2, [0x7]}]}}, "d50d9c7321bfc2c68bfb3f111cce908a3f28867aeafd0100df68f164624df1c978fd2a9c5a5ad43c106b84b3188dd35c229afc13359551c6466fdb9761caa807cea51a418cbd26727c903f3a0e602c5ede26d672b4a2cf3b6a36dd1c4bc714009dccedd5b7694d38a366a806ce9c65"}}}}, 0x0) 4m18.665225953s ago: executing program 7 (id=1816): sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x208}, 0x40815) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[], 0x0) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r3 = socket$netlink(0x10, 0x3, 0x12) sendmmsg(r3, &(0x7f0000000800), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2062) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r4 = socket(0x23, 0x4, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2120, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0xfffffdd7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0xfe68, 0x1a}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r5) 4m18.354158965s ago: executing program 7 (id=1817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x9}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x3, 0x3, 0x0, 0x5, 0x0, 0x10}, @map_fd={0x18, 0xfcc54a98840bb534, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0xf4, &(0x7f0000000640)=""/244, 0x41000, 0x39, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x2c, 0x101, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000780)=[{0x5, 0x3, 0x6}, {0x5, 0x3, 0xc, 0x2}, {0x4, 0x4, 0x10}, {0x5, 0x4, 0x9}, {0x2, 0x1, 0x8, 0x9}, {0x0, 0x2, 0xa, 0x7}], 0x10, 0x80}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000800)={r1, r3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r5, 0x8ec6, 0x10}, 0xc) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) clock_gettime(0x4, &(0x7f0000000980)) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c}, 0x4008000) 4m18.314759364s ago: executing program 6 (id=1818): ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'dummy0\x00'}) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'dummy0\x00'}) r0 = socket(0x11, 0x4, 0x8) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xd3, 0xf, 0xa, 0x49, 0x7, 0x73, 0x7, 0x8, 0xe8, 0x7f, 0x6, 0xd, 0x7, 0x7}, 0xe) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xd3, 0xf, 0xa, 0x49, 0x7, 0x73, 0x7, 0x8, 0xe8, 0x7f, 0x6, 0xd, 0x7, 0x7}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004051) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x10000, 0x5, 0x7}) write$cgroup_int(r2, &(0x7f0000000200)=0x46b89411, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000003c0)=0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@getpolicy={0x140, 0x15, 0x422, 0x70bd28, 0x25dfdbfc, {{@in6=@mcast2, @in=@empty, 0x4e20, 0x5, 0x4e20, 0x2, 0xa, 0x20, 0x40, 0x33, r3, r4}, 0x6e6bb5}, [@sa={0xe4, 0x6, {{@in=@remote, @in=@multicast1, 0x4e20, 0xf85, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x0, r5, r7}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x3, 0x5, 0x6, 0x6, 0xffffffffffffffff, 0x6, 0x80000000, 0x9}, {0x2, 0x7, 0x6, 0xa}, {0x5, 0x4, 0x2}, 0x70bd26, 0x3505, 0xa, 0x3, 0x23, 0x8}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r8, 0x203, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000900)={0x0, 0x2, 0x0, 0x1, 0x2}, &(0x7f0000000940)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000980)={0x0, 0x40d}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000a00)={r9, 0x2, 0x2, 0x6, 0x3ff, 0x1, 0x6, 0x7f, {r10, @in={{0x2, 0x4e20, @empty}}, 0x64c, 0x10c, 0x4, 0x6, 0xfffffff3}}, &(0x7f0000000ac0)=0xb0) accept$inet6(r2, &(0x7f0000000b00)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000b40)=0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r12, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\\@'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000d00)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)='veth0_to_hsr\x00', 0xfffffffffffffffa, 0x7, 0x7}) bind$can_raw(r2, &(0x7f0000000d80)={0x1d, r6}, 0x10) (async) bind$can_raw(r2, &(0x7f0000000d80)={0x1d, r6}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x10000, '\x00', r6, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x87, 0x81, 0x1, 0x1862, r13, 0x16, '\x00', 0x0, r2, 0x0, 0x5, 0x4, 0x3}, 0x50) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r14, &(0x7f0000001040)={0x3000201c}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001080)={0x32, 0xc, 0x1, 0xd8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x68) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001080)={0x32, 0xc, 0x1, 0xd8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x68) 4m18.249853945s ago: executing program 3 (id=1821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r6, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001640)="a9", 0x1}], 0x1, &(0x7f0000001a40)=ANY=[@ANYBLOB="010001"], 0x10}}], 0x2, 0x20) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffe6, 0xb}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m17.849962077s ago: executing program 35 (id=1817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x9}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x3, 0x3, 0x0, 0x5, 0x0, 0x10}, @map_fd={0x18, 0xfcc54a98840bb534, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0xf4, &(0x7f0000000640)=""/244, 0x41000, 0x39, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x2c, 0x101, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000780)=[{0x5, 0x3, 0x6}, {0x5, 0x3, 0xc, 0x2}, {0x4, 0x4, 0x10}, {0x5, 0x4, 0x9}, {0x2, 0x1, 0x8, 0x9}, {0x0, 0x2, 0xa, 0x7}], 0x10, 0x80}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000800)={r1, r3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r5, 0x8ec6, 0x10}, 0xc) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) clock_gettime(0x4, &(0x7f0000000980)) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c}, 0x4008000) 4m17.682608038s ago: executing program 36 (id=1818): ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'dummy0\x00'}) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'dummy0\x00'}) r0 = socket(0x11, 0x4, 0x8) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xd3, 0xf, 0xa, 0x49, 0x7, 0x73, 0x7, 0x8, 0xe8, 0x7f, 0x6, 0xd, 0x7, 0x7}, 0xe) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xd3, 0xf, 0xa, 0x49, 0x7, 0x73, 0x7, 0x8, 0xe8, 0x7f, 0x6, 0xd, 0x7, 0x7}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004051) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x10000, 0x5, 0x7}) write$cgroup_int(r2, &(0x7f0000000200)=0x46b89411, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000003c0)=0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@getpolicy={0x140, 0x15, 0x422, 0x70bd28, 0x25dfdbfc, {{@in6=@mcast2, @in=@empty, 0x4e20, 0x5, 0x4e20, 0x2, 0xa, 0x20, 0x40, 0x33, r3, r4}, 0x6e6bb5}, [@sa={0xe4, 0x6, {{@in=@remote, @in=@multicast1, 0x4e20, 0xf85, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x0, r5, r7}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x3, 0x5, 0x6, 0x6, 0xffffffffffffffff, 0x6, 0x80000000, 0x9}, {0x2, 0x7, 0x6, 0xa}, {0x5, 0x4, 0x2}, 0x70bd26, 0x3505, 0xa, 0x3, 0x23, 0x8}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r8, 0x203, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000900)={0x0, 0x2, 0x0, 0x1, 0x2}, &(0x7f0000000940)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000980)={0x0, 0x40d}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000a00)={r9, 0x2, 0x2, 0x6, 0x3ff, 0x1, 0x6, 0x7f, {r10, @in={{0x2, 0x4e20, @empty}}, 0x64c, 0x10c, 0x4, 0x6, 0xfffffff3}}, &(0x7f0000000ac0)=0xb0) accept$inet6(r2, &(0x7f0000000b00)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000b40)=0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r12, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\\@'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000d00)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)='veth0_to_hsr\x00', 0xfffffffffffffffa, 0x7, 0x7}) bind$can_raw(r2, &(0x7f0000000d80)={0x1d, r6}, 0x10) (async) bind$can_raw(r2, &(0x7f0000000d80)={0x1d, r6}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x10000, '\x00', r6, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x87, 0x81, 0x1, 0x1862, r13, 0x16, '\x00', 0x0, r2, 0x0, 0x5, 0x4, 0x3}, 0x50) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r14, &(0x7f0000001040)={0x3000201c}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001080)={0x32, 0xc, 0x1, 0xd8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x68) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001080)={0x32, 0xc, 0x1, 0xd8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x68) 4m17.672250331s ago: executing program 37 (id=1821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r6, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001640)="a9", 0x1}], 0x1, &(0x7f0000001a40)=ANY=[@ANYBLOB="010001"], 0x10}}], 0x2, 0x20) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffe6, 0xb}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.675243004s ago: executing program 4 (id=4448): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 3.327902419s ago: executing program 4 (id=4454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$unix(0x1, 0x1, 0x0) close(0x3) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) shutdown(r2, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="cbaa00fea100000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x20800}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) 2.793622682s ago: executing program 0 (id=4455): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002e00090027bf7000000000000400000008001600", @ANYRES32=0x0, @ANYBLOB="88d186eb6f31a610940ee6762b16c741300bbc87800f607a2e28755223a07db56385c2de79e0538a4c3dffcd2ff5cd498d73d025d693184d97e79393cfc282413e3922d9e8782312573b70ec2de0019ad721c3a7b2d07bfa516fc8f6ea67c8c5e1ea383cffe9c9a2abd087761acace49550a30268a0cd0b8b17e7137540599ed479f0b73560aa65cac98481aac7ae71e084855703bd8c8e7fd35d1a5af480131dbbccedb03"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) accept4$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000600)=0x60, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r8, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x97}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4040010) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r9, 0x1, 0x70bd2b, 0x6b, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000084}, 0x80) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x148, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x48065}, 0x4000010) sendmsg$nl_route(r1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r11, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r12, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf87}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xae39}}]}, 0x64}, 0x1, 0x0, 0x0, 0x481}, 0x2600c004) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) 2.793088843s ago: executing program 9 (id=4456): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000800)={@remote, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@generic={0x60, "f3013418"}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000600)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x1f, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "de781887b9473f5321ef8f67590300"}}}}}}}, 0x49) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/78, 0x320000, 0x800, 0xffffff5c, 0x2}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.78520797s ago: executing program 0 (id=4457): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000002180)=[{&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000e00)=""/66, 0x42}, {&(0x7f0000000e80)=""/253, 0xfd}, {&(0x7f0000000f80)=""/165, 0xa5}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000001040)=""/119, 0x77}, {&(0x7f00000010c0)=""/175, 0xaf}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x9}, 0xfffffff8}], 0x2, 0x10022, 0x0) 2.677169862s ago: executing program 4 (id=4460): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0xfffffffffffffe27) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0xffffffff) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d00"/90, 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3, 0x0, 0x0, 0x15}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) socket$unix(0x1, 0x5, 0x0) 2.244274197s ago: executing program 1 (id=4465): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x14, 0x80, 0x1, 0x0, 0x2}}, 0x1c}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0x41, 0x0, &(0x7f0000000000)="63e4ed8e4601ff0480ffffffff863cb3f4d651436654788feafbd3453f14dd165ca27753e1f6023cd3063460778bc7694cbc659ac15afc381b371aef915688f6c7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.197517549s ago: executing program 9 (id=4466): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0xd, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x7f, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000880)=""/252, 0x2b, 0xfc, 0x1, 0xdb, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x8, 0xb, &(0x7f0000000e00)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES8], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000007c0)='inet_sk_error_report\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="7af7f2182e96", @private, @empty}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 0xd, 0x7, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3ff, 0x6, 0x40, 0x6, 0x0, 0x5, 'team_slave_1\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x6}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYRESHEX=r2, @ANYRES32=r7, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000800)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x0, 0xa, 0x4, 0xffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[r7, r7, r7, r7, r7, r10, r7, r7], &(0x7f0000000c00)=[{0x4, 0x1, 0x2, 0xa}], 0x10, 0xa}, 0x94) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r12}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r12, 0xe}, &(0x7f00000001c0)=0x8) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x1843}, 0x18) ioctl$FS_IOC_GETFSLABEL(r13, 0x81009431, 0x0) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf25050000001400018006000100020000000800050003000000a9ace694f86c7185f345b6bf92844ba55367e11274303cb75917ca9788894c9a90027d2ca2479988d1daf05087e6101c986374f4e272464f94cacd58bc393404f8917f5e1c84"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.143835979s ago: executing program 1 (id=4468): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) connect$tipc(r0, &(0x7f0000000240)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10) 2.109540043s ago: executing program 8 (id=4469): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff5882654907046882323c8dc7fc9071eea5b8e569e4d6f842cde2a64d78c20581814c004ec569e643722ffe471bfc85ee8d238776e58e61fb268609cddfeb30d5c013b33e521977317c3b80d4ec4bffddf2e2e2", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x7726efe4e8efea6d}, 0x840) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000ffffff7f000000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffdfffb702000008000000b7030000030000008500000017000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) socket(0xb, 0x4, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000000)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 2.051485115s ago: executing program 1 (id=4470): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x5) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff56ca}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000dc0)={0x7, 'pim6reg\x00', {0x40}, 0x2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xf044, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}}, 0x0, 0xe000000, 0x4, 0x2c1, 0xff}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x3c, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x208a2a69, @mcast1, 0x9}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4eb4, @broadcast}]}, &(0x7f0000000400)=0x10) sendmsg$inet_sctp(r2, &(0x7f0000001000)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x38}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000000)="d6", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x38}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c001000c44caab9ac91baffb580dac1db9ebde747530ea504fd8dffa5b5cf91fe24cd969b540a83b580c8a97fb43bcbe17342461bccfd4cf2111ed9a54e38b0594d05a69b8bdb577f3f4602376ef7fd1821ab98d152b5f452d6e965c9f1704f674dd321b4b91e34fe1b55d9063055dee842c3aa70a090dd", @ANYRES16=r6, @ANYBLOB="000426bd7000ffdbdf25010000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x801) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x670, 0x480, 0x480, 0xffffffff, 0x0, 0x1a8, 0x5a0, 0x5a0, 0xffffffff, 0x5a0, 0x5a0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "1e7c"}}, @common=@srh1={{0x90}, {0x33, 0x8, 0x6c, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xff000000, 0xff000000, 0xff, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00], 0x17e8, 0x300}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@local, @ipv4=@rand_addr=0x64010101, @icmp_id=0x67, @port=0x4e22}}}, {{@uncond, 0x0, 0x188, 0x1e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0xff, 0xff], @ipv4=@loopback, [0xffffffff, 0xff, 0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xff, 0xffffff00, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0x0, 0xff], 0x1, 0x80000000, 0x0, 0x4e23, 0x4e20, 0x4e20, 0x4e23, 0x200, 0x60}, 0x6849670c7273fbbe, 0x40}}, @common=@icmp6={{0x28}, {0x5, "ea03"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 0xfff7, 0x4e23, 0x4e21, 0x4e24, 0x9, 0x6, 0xf, 0xd, 0x6}}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xffffffff, 0xff000000], [0xff, 0xff000000, 0xffffff, 0xff], 'virt_wifi0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x1d, 0xbf, 0x2, 0x53}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x5, @ipv6=@mcast1, @ipv6=@loopback, @icmp_id=0x65, @port=0x4e24}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x30}, @private0, [0x0, 0xff, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffff00], 'pim6reg1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0x9, 0x4, 0x6}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x0, 0x0, 0x7f, 0xfff8, 0x100, 0x2000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1a, @ipv4=@empty, @ipv6=@mcast1, @icmp_id=0x64, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 1.991338472s ago: executing program 8 (id=4471): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) close(0x3) 1.937062036s ago: executing program 8 (id=4472): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x5, 0x6, 0x40, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x40, 0x8}}) 1.85061469s ago: executing program 8 (id=4473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x6, 0xec, 0x1000}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40208d5}, 0x20004000) 1.79374183s ago: executing program 0 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (fail_nth: 33) 1.726302115s ago: executing program 1 (id=4475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 3) 1.302434741s ago: executing program 0 (id=4476): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000800)={@remote, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@generic={0x60, "f3013418"}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000600)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x1f, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "de781887b9473f5321ef8f67590300"}}}}}}}, 0x49) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/78, 0x320000, 0x800, 0xffffff5c, 0x2}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.251678137s ago: executing program 8 (id=4477): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2, 0x0, 0x0, 0x15}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) socket$unix(0x1, 0x5, 0x0) 1.244567807s ago: executing program 4 (id=4478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r7, 0x1) shutdown(r7, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r12, 0x29, 0x35, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r17, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf}) 990.612689ms ago: executing program 9 (id=4479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x4, 0x2) 989.072877ms ago: executing program 8 (id=4480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f2ffe4ff00000000050000009500000000000000"], 0x0, 0xf2, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d18b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)="f6893b79c2e5a142b29b8065", 0xc}], 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380), &(0x7f00000001c0)=0x8) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 821.288767ms ago: executing program 1 (id=4481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="140000000301010300000000000000"], 0x14}}, 0x20020084) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f40)=ANY=[@ANYBLOB="14000000150a0103000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x44004080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8c9}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xd4, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x36, 0x3, 0xb, 0x2, 0x16, 0x18, 0x2, 0x62a2cd822f09fa35, 0x18, 0x6c, 0x4, 0x48, 0x1b, 0x3, 0x12, 0xf, 0x30, 0x1b, 0x5, 0x16, 0xc, 0x2, 0xc, 0x9]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) unshare(0x6a040000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f0000001080)) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x8000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x3, 0xb7, 0x5, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 731.51979ms ago: executing program 9 (id=4482): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) close(0x3) 493.739572ms ago: executing program 0 (id=4483): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x5, 0x6, 0x40, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x40, 0x8}}) 417.952846ms ago: executing program 4 (id=4484): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000002180)=[{&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000e00)=""/66, 0x42}, {&(0x7f0000000e80)=""/253, 0xfd}, {&(0x7f0000000f80)=""/165, 0xa5}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000001040)=""/119, 0x77}, {&(0x7f00000010c0)=""/175, 0xaf}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x9}, 0xfffffff8}], 0x2, 0x10022, 0x0) 341.584256ms ago: executing program 9 (id=4485): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 157.50026ms ago: executing program 1 (id=4486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 127.541604ms ago: executing program 0 (id=4487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x1, 0x1, 0x3, 0x0, 0xa, 0xfffffffffffffffc}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) sendto(r1, &(0x7f0000000600)="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", 0x1000, 0x4c4c0, &(0x7f0000000380)=@ll={0x11, 0x17, r2, 0x1, 0x0, 0x6, @local}, 0x80) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000200)=""/123, 0x7b}], 0x2}}], 0x2, 0x10, 0x0) (rerun: 32) 102.455028ms ago: executing program 4 (id=4488): r0 = socket$unix(0x1, 0x5, 0x0) pipe(0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0xfffffffffffffe27) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xffffffff) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d00"/90, 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3, 0x0, 0x0, 0x15}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) socket$unix(0x1, 0x5, 0x0) 0s ago: executing program 9 (id=4489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (fail_nth: 34) kernel console output (not intermixed with test programs): 4.041570][T20156] ? __nla_validate_parse+0x2400/0x2d40 [ 624.041590][T20156] ? __x64_sys_sendmsg+0x19b/0x260 [ 624.041622][T20156] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 624.041648][T20156] ? __pfx___nla_validate_parse+0x10/0x10 [ 624.041682][T20156] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 624.041708][T20156] ? rcu_is_watching+0x15/0xb0 [ 624.041736][T20156] ? __nla_parse+0x40/0x60 [ 624.041766][T20156] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 624.041794][T20156] genl_family_rcv_msg_doit+0x215/0x300 [ 624.041819][T20156] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 624.041854][T20156] ? bpf_lsm_capable+0x9/0x20 [ 624.041875][T20156] ? security_capable+0x7e/0x2e0 [ 624.041904][T20156] genl_rcv_msg+0x60e/0x790 [ 624.041928][T20156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.041945][T20156] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 624.041979][T20156] netlink_rcv_skb+0x208/0x470 [ 624.042000][T20156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.042017][T20156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.042035][T20156] ? genl_rcv+0x19/0x40 [ 624.042077][T20156] ? down_read+0x274/0x2e0 [ 624.042095][T20156] ? genl_rcv+0xd/0x40 [ 624.042120][T20156] genl_rcv+0x28/0x40 [ 624.042142][T20156] netlink_unicast+0x82f/0x9e0 [ 624.042168][T20156] ? __pfx_netlink_unicast+0x10/0x10 [ 624.042187][T20156] ? __alloc_skb+0x198/0x3a0 [ 624.042204][T20156] ? netlink_sendmsg+0x642/0xb30 [ 624.042225][T20156] ? skb_put+0x11b/0x210 [ 624.042248][T20156] netlink_sendmsg+0x805/0xb30 [ 624.042281][T20156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.042308][T20156] ? aa_sock_msg_perm+0xf1/0x1b0 [ 624.042334][T20156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.042351][T20156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.042377][T20156] __sock_sendmsg+0x21c/0x270 [ 624.042407][T20156] ____sys_sendmsg+0x505/0x820 [ 624.042434][T20156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.042464][T20156] ? import_iovec+0x74/0xa0 [ 624.042488][T20156] ___sys_sendmsg+0x21f/0x2a0 [ 624.042511][T20156] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.042589][T20156] ? __fget_files+0x2a/0x420 [ 624.042612][T20156] ? __fget_files+0x3a0/0x420 [ 624.042645][T20156] __x64_sys_sendmsg+0x19b/0x260 [ 624.042670][T20156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.042702][T20156] ? __pfx_ksys_write+0x10/0x10 [ 624.042734][T20156] do_syscall_64+0xec/0xf80 [ 624.042753][T20156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.042777][T20156] ? trace_irq_disable+0x37/0x100 [ 624.042801][T20156] ? clear_bhb_loop+0x60/0xb0 [ 624.042824][T20156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.042842][T20156] RIP: 0033:0x7f0eb218f749 [ 624.042860][T20156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.042876][T20156] RSP: 002b:00007f0eb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.042897][T20156] RAX: ffffffffffffffda RBX: 00007f0eb23e5fa0 RCX: 00007f0eb218f749 [ 624.042912][T20156] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 624.042924][T20156] RBP: 00007f0eb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.042936][T20156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.042948][T20156] R13: 00007f0eb23e6038 R14: 00007f0eb23e5fa0 R15: 00007ffe34fdbc08 [ 624.042976][T20156] [ 624.422637][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.722729][T20175] sctp: [Deprecated]: syz.8.3450 (pid 20175) Use of int in max_burst socket option deprecated. [ 624.722729][T20175] Use struct sctp_assoc_value instead [ 624.776562][T20175] netlink: 'syz.8.3450': attribute type 27 has an invalid length. [ 624.986276][T20189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3456'. [ 625.051136][T20189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.135212][T20200] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3460'. [ 625.147679][T20200] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3460'. [ 625.174373][T20203] FAULT_INJECTION: forcing a failure. [ 625.174373][T20203] name failslab, interval 1, probability 0, space 0, times 0 [ 625.187373][T20203] CPU: 0 UID: 0 PID: 20203 Comm: syz.0.3462 Not tainted syzkaller #0 PREEMPT(full) [ 625.187399][T20203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.187410][T20203] Call Trace: [ 625.187418][T20203] [ 625.187425][T20203] dump_stack_lvl+0xe8/0x150 [ 625.187455][T20203] should_fail_ex+0x414/0x560 [ 625.187488][T20203] should_failslab+0xa8/0x100 [ 625.187514][T20203] kmem_cache_alloc_noprof+0x88/0x710 [ 625.187541][T20203] ? __asan_memcpy+0x40/0x70 [ 625.187556][T20203] ? __kernfs_new_node+0xdc/0x8a0 [ 625.187582][T20203] __kernfs_new_node+0xdc/0x8a0 [ 625.187610][T20203] ? __pfx___kernfs_new_node+0x10/0x10 [ 625.187632][T20203] ? kernfs_root+0x1c/0x230 [ 625.187658][T20203] ? kernfs_root+0x1c/0x230 [ 625.187689][T20203] ? kernfs_root+0x1c/0x230 [ 625.187714][T20203] kernfs_new_node+0x102/0x210 [ 625.187740][T20203] kernfs_create_link+0xa7/0x200 [ 625.187771][T20203] sysfs_do_create_link_sd+0x83/0x110 [ 625.187793][T20203] device_add_class_symlinks+0x1cf/0x240 [ 625.187819][T20203] device_add+0x475/0xb80 [ 625.187840][T20203] device_create+0x25b/0x2f0 [ 625.187862][T20203] ? timer_init_key+0x161/0x2b0 [ 625.187893][T20203] ? __pfx_device_create+0x10/0x10 [ 625.187913][T20203] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 625.187944][T20203] mac80211_hwsim_new_radio+0x40c/0x52f0 [ 625.187970][T20203] ? stack_trace_save+0x9c/0xe0 [ 625.187995][T20203] ? __pfx_stack_trace_save+0x10/0x10 [ 625.188025][T20203] ? __pfx_kasan_save_track+0x1/0x10 [ 625.188041][T20203] ? kasan_save_track+0x3e/0x80 [ 625.188062][T20203] ? kasan_save_track+0x4f/0x80 [ 625.188084][T20203] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 625.188101][T20203] ? __nla_validate_parse+0x2400/0x2d40 [ 625.188121][T20203] ? __x64_sys_sendmsg+0x19b/0x260 [ 625.188153][T20203] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 625.188186][T20203] ? __pfx___nla_validate_parse+0x10/0x10 [ 625.188221][T20203] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.188248][T20203] ? rcu_is_watching+0x15/0xb0 [ 625.188275][T20203] ? __nla_parse+0x40/0x60 [ 625.188299][T20203] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 625.188327][T20203] genl_family_rcv_msg_doit+0x215/0x300 [ 625.188353][T20203] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 625.188384][T20203] ? bpf_lsm_capable+0x9/0x20 [ 625.188406][T20203] ? security_capable+0x7e/0x2e0 [ 625.188434][T20203] genl_rcv_msg+0x60e/0x790 [ 625.188458][T20203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.188474][T20203] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.188495][T20203] ? __asan_memcpy+0x40/0x70 [ 625.188512][T20203] ? __pfx_ref_tracker_free+0x10/0x10 [ 625.188539][T20203] netlink_rcv_skb+0x208/0x470 [ 625.188563][T20203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.188583][T20203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.188603][T20203] ? genl_rcv+0x19/0x40 [ 625.188647][T20203] ? down_read+0x274/0x2e0 [ 625.188676][T20203] ? genl_rcv+0xd/0x40 [ 625.188705][T20203] genl_rcv+0x28/0x40 [ 625.188730][T20203] netlink_unicast+0x82f/0x9e0 [ 625.188758][T20203] ? __pfx_netlink_unicast+0x10/0x10 [ 625.188777][T20203] ? __alloc_skb+0x198/0x3a0 [ 625.188797][T20203] ? netlink_sendmsg+0x642/0xb30 [ 625.188816][T20203] ? skb_put+0x11b/0x210 [ 625.188839][T20203] netlink_sendmsg+0x805/0xb30 [ 625.188872][T20203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.188896][T20203] ? aa_sock_msg_perm+0xf1/0x1b0 [ 625.188920][T20203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.188937][T20203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.188961][T20203] __sock_sendmsg+0x21c/0x270 [ 625.188989][T20203] ____sys_sendmsg+0x505/0x820 [ 625.189016][T20203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.189048][T20203] ? import_iovec+0x74/0xa0 [ 625.189074][T20203] ___sys_sendmsg+0x21f/0x2a0 [ 625.189100][T20203] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.189155][T20203] ? __fget_files+0x2a/0x420 [ 625.189178][T20203] ? __fget_files+0x3a0/0x420 [ 625.189212][T20203] __x64_sys_sendmsg+0x19b/0x260 [ 625.189238][T20203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.189272][T20203] ? __pfx_ksys_write+0x10/0x10 [ 625.189303][T20203] do_syscall_64+0xec/0xf80 [ 625.189322][T20203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.189339][T20203] ? trace_irq_disable+0x37/0x100 [ 625.189362][T20203] ? clear_bhb_loop+0x60/0xb0 [ 625.189384][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.189401][T20203] RIP: 0033:0x7f532238f749 [ 625.189419][T20203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.189434][T20203] RSP: 002b:00007f53232aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.189454][T20203] RAX: ffffffffffffffda RBX: 00007f53225e5fa0 RCX: 00007f532238f749 [ 625.189468][T20203] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 625.189479][T20203] RBP: 00007f53232aa090 R08: 0000000000000000 R09: 0000000000000000 [ 625.189491][T20203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 625.189501][T20203] R13: 00007f53225e6038 R14: 00007f53225e5fa0 R15: 00007ffceae777a8 [ 625.189535][T20203] [ 625.199485][T20204] netlink: 'syz.4.3461': attribute type 4 has an invalid length. [ 625.378384][T20206] netlink: 'syz.4.3461': attribute type 4 has an invalid length. [ 625.559457][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3464'. [ 625.731534][T20217] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20003 [ 626.080447][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3469'. [ 626.187114][T20245] FAULT_INJECTION: forcing a failure. [ 626.187114][T20245] name failslab, interval 1, probability 0, space 0, times 0 [ 626.258309][T20245] CPU: 0 UID: 0 PID: 20245 Comm: syz.4.3473 Not tainted syzkaller #0 PREEMPT(full) [ 626.258338][T20245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.258350][T20245] Call Trace: [ 626.258358][T20245] [ 626.258366][T20245] dump_stack_lvl+0xe8/0x150 [ 626.258393][T20245] should_fail_ex+0x414/0x560 [ 626.258424][T20245] should_failslab+0xa8/0x100 [ 626.258447][T20245] kmem_cache_alloc_noprof+0x88/0x710 [ 626.258474][T20245] ? __kernfs_new_node+0xdc/0x8a0 [ 626.258499][T20245] __kernfs_new_node+0xdc/0x8a0 [ 626.258524][T20245] ? __pfx___kernfs_new_node+0x10/0x10 [ 626.258555][T20245] ? kernfs_root+0x1c/0x230 [ 626.258580][T20245] ? kernfs_root+0x1c/0x230 [ 626.258599][T20245] ? kernfs_root+0x1c/0x230 [ 626.258616][T20245] ? kernfs_root+0x1c/0x230 [ 626.258641][T20245] kernfs_new_node+0x102/0x210 [ 626.258667][T20245] kernfs_create_dir_ns+0x44/0x130 [ 626.258692][T20245] internal_create_group+0x419/0x1170 [ 626.258721][T20245] ? device_add_attrs+0x553/0x5a0 [ 626.258742][T20245] ? __pfx_internal_create_group+0x10/0x10 [ 626.258764][T20245] ? kobject_put+0x52a/0x570 [ 626.258789][T20245] dpm_sysfs_add+0x6a/0x270 [ 626.258810][T20245] device_add+0x4d8/0xb80 [ 626.258832][T20245] device_create+0x25b/0x2f0 [ 626.258855][T20245] ? timer_init_key+0x161/0x2b0 [ 626.258885][T20245] ? __pfx_device_create+0x10/0x10 [ 626.258905][T20245] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 626.258934][T20245] mac80211_hwsim_new_radio+0x40c/0x52f0 [ 626.258959][T20245] ? stack_trace_save+0x9c/0xe0 [ 626.258986][T20245] ? __pfx_stack_trace_save+0x10/0x10 [ 626.259018][T20245] ? __pfx_kasan_save_track+0x1/0x10 [ 626.259037][T20245] ? kasan_save_track+0x3e/0x80 [ 626.259058][T20245] ? kasan_save_track+0x4f/0x80 [ 626.259083][T20245] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 626.259101][T20245] ? __nla_validate_parse+0x2400/0x2d40 [ 626.259121][T20245] ? __x64_sys_sendmsg+0x19b/0x260 [ 626.259153][T20245] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 626.259179][T20245] ? __pfx___nla_validate_parse+0x10/0x10 [ 626.259214][T20245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 626.259241][T20245] ? rcu_is_watching+0x15/0xb0 [ 626.259268][T20245] ? __nla_parse+0x40/0x60 [ 626.259292][T20245] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 626.259319][T20245] genl_family_rcv_msg_doit+0x215/0x300 [ 626.259344][T20245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 626.259376][T20245] ? bpf_lsm_capable+0x9/0x20 [ 626.259398][T20245] ? security_capable+0x7e/0x2e0 [ 626.259426][T20245] genl_rcv_msg+0x60e/0x790 [ 626.259451][T20245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.259468][T20245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 626.259489][T20245] ? __asan_memcpy+0x40/0x70 [ 626.259506][T20245] ? __pfx_ref_tracker_free+0x10/0x10 [ 626.259542][T20245] netlink_rcv_skb+0x208/0x470 [ 626.259568][T20245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.259587][T20245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 626.259608][T20245] ? genl_rcv+0x19/0x40 [ 626.259652][T20245] ? down_read+0x274/0x2e0 [ 626.259673][T20245] ? genl_rcv+0xd/0x40 [ 626.259702][T20245] genl_rcv+0x28/0x40 [ 626.259728][T20245] netlink_unicast+0x82f/0x9e0 [ 626.259758][T20245] ? __pfx_netlink_unicast+0x10/0x10 [ 626.259778][T20245] ? __alloc_skb+0x198/0x3a0 [ 626.259797][T20245] ? netlink_sendmsg+0x642/0xb30 [ 626.259823][T20245] ? skb_put+0x11b/0x210 [ 626.259850][T20245] netlink_sendmsg+0x805/0xb30 [ 626.259882][T20245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.259910][T20245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 626.259936][T20245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 626.259954][T20245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.259979][T20245] __sock_sendmsg+0x21c/0x270 [ 626.260010][T20245] ____sys_sendmsg+0x505/0x820 [ 626.260039][T20245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.260071][T20245] ? import_iovec+0x74/0xa0 [ 626.260098][T20245] ___sys_sendmsg+0x21f/0x2a0 [ 626.260124][T20245] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.260183][T20245] ? __fget_files+0x2a/0x420 [ 626.260206][T20245] ? __fget_files+0x3a0/0x420 [ 626.260240][T20245] __x64_sys_sendmsg+0x19b/0x260 [ 626.260266][T20245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 626.260298][T20245] ? __pfx_ksys_write+0x10/0x10 [ 626.260329][T20245] do_syscall_64+0xec/0xf80 [ 626.260349][T20245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.260366][T20245] ? trace_irq_disable+0x37/0x100 [ 626.260391][T20245] ? clear_bhb_loop+0x60/0xb0 [ 626.260414][T20245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.260433][T20245] RIP: 0033:0x7fcfaef8f749 [ 626.260450][T20245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.260466][T20245] RSP: 002b:00007fcfafe7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.260487][T20245] RAX: ffffffffffffffda RBX: 00007fcfaf1e5fa0 RCX: 00007fcfaef8f749 [ 626.260501][T20245] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 626.260514][T20245] RBP: 00007fcfafe7b090 R08: 0000000000000000 R09: 0000000000000000 [ 626.260533][T20245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 626.260545][T20245] R13: 00007fcfaf1e6038 R14: 00007fcfaf1e5fa0 R15: 00007ffc6f6cdf38 [ 626.260579][T20245] [ 626.273854][T20249] sctp: [Deprecated]: syz.1.3474 (pid 20249) Use of int in max_burst socket option deprecated. [ 626.273854][T20249] Use struct sctp_assoc_value instead [ 626.314985][T20251] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3475'. [ 626.391510][T20253] netlink: 'syz.1.3474': attribute type 27 has an invalid length. [ 626.716383][T20256] Cannot find del_set index 4 as target [ 626.732726][T20254] wg1 speed is unknown, defaulting to 1000 [ 626.897621][T20254] wg1 speed is unknown, defaulting to 1000 [ 627.002448][T20261] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3478'. [ 627.011962][T20261] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 627.185074][T20268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3479'. [ 627.339416][T20275] netlink: 'syz.1.3482': attribute type 10 has an invalid length. [ 627.460767][T20285] netlink: 'syz.0.3485': attribute type 3 has an invalid length. [ 627.469068][T20285] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3485'. [ 627.498216][T20284] netlink: 'syz.0.3485': attribute type 3 has an invalid length. [ 627.517284][T20284] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3485'. [ 627.535887][T20278] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 627.623529][T20288] bond6: option miimon: invalid value (18446744073709551607) [ 627.633857][T20288] bond6: option miimon: allowed values 0 - 2147483647 [ 627.651765][T20288] bond6 (unregistering): Released all slaves [ 627.773873][T20304] FAULT_INJECTION: forcing a failure. [ 627.773873][T20304] name failslab, interval 1, probability 0, space 0, times 0 [ 627.789724][T20304] CPU: 0 UID: 0 PID: 20304 Comm: syz.8.3489 Not tainted syzkaller #0 PREEMPT(full) [ 627.789752][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.789765][T20304] Call Trace: [ 627.789773][T20304] [ 627.789782][T20304] dump_stack_lvl+0xe8/0x150 [ 627.789812][T20304] should_fail_ex+0x414/0x560 [ 627.789847][T20304] should_failslab+0xa8/0x100 [ 627.789873][T20304] kmem_cache_alloc_noprof+0x88/0x710 [ 627.789904][T20304] ? __kernfs_new_node+0xdc/0x8a0 [ 627.789931][T20304] __kernfs_new_node+0xdc/0x8a0 [ 627.789960][T20304] ? __pfx___kernfs_new_node+0x10/0x10 [ 627.789983][T20304] ? kernfs_root+0x1c/0x230 [ 627.790021][T20304] ? kernfs_root+0x1c/0x230 [ 627.790041][T20304] ? kernfs_root+0x1c/0x230 [ 627.790059][T20304] ? kernfs_root+0x1c/0x230 [ 627.790083][T20304] kernfs_new_node+0x102/0x210 [ 627.790111][T20304] __kernfs_create_file+0x4b/0x2e0 [ 627.790141][T20304] sysfs_add_file_mode_ns+0x238/0x300 [ 627.790179][T20304] sysfs_merge_group+0x177/0x310 [ 627.790203][T20304] ? __pfx_sysfs_merge_group+0x10/0x10 [ 627.790226][T20304] ? kobject_put+0x52a/0x570 [ 627.790255][T20304] dpm_sysfs_add+0xd2/0x270 [ 627.790281][T20304] device_add+0x4d8/0xb80 [ 627.790304][T20304] device_create+0x25b/0x2f0 [ 627.790328][T20304] ? timer_init_key+0x161/0x2b0 [ 627.790361][T20304] ? __pfx_device_create+0x10/0x10 [ 627.790383][T20304] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 627.790417][T20304] mac80211_hwsim_new_radio+0x40c/0x52f0 [ 627.790443][T20304] ? stack_trace_save+0x9c/0xe0 [ 627.790478][T20304] ? __pfx_stack_trace_save+0x10/0x10 [ 627.790512][T20304] ? unwind_next_frame+0xa5/0x23d0 [ 627.790538][T20304] ? kasan_save_track+0x4f/0x80 [ 627.790565][T20304] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 627.790583][T20304] ? __nla_validate_parse+0x2400/0x2d40 [ 627.790603][T20304] ? __x64_sys_sendmsg+0x19b/0x260 [ 627.790635][T20304] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 627.790661][T20304] ? __pfx___nla_validate_parse+0x10/0x10 [ 627.790697][T20304] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 627.790728][T20304] ? rcu_is_watching+0x15/0xb0 [ 627.790755][T20304] ? __nla_parse+0x40/0x60 [ 627.790780][T20304] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 627.790809][T20304] genl_family_rcv_msg_doit+0x215/0x300 [ 627.790835][T20304] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 627.790868][T20304] ? bpf_lsm_capable+0x9/0x20 [ 627.790890][T20304] ? security_capable+0x7e/0x2e0 [ 627.790919][T20304] genl_rcv_msg+0x60e/0x790 [ 627.790945][T20304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.790962][T20304] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 627.790998][T20304] netlink_rcv_skb+0x208/0x470 [ 627.791023][T20304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.791043][T20304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.791064][T20304] ? genl_rcv+0x19/0x40 [ 627.791111][T20304] ? down_read+0x274/0x2e0 [ 627.791131][T20304] ? genl_rcv+0xd/0x40 [ 627.791161][T20304] genl_rcv+0x28/0x40 [ 627.791188][T20304] netlink_unicast+0x82f/0x9e0 [ 627.791220][T20304] ? __pfx_netlink_unicast+0x10/0x10 [ 627.791240][T20304] ? __alloc_skb+0x198/0x3a0 [ 627.791260][T20304] ? netlink_sendmsg+0x642/0xb30 [ 627.791283][T20304] ? skb_put+0x11b/0x210 [ 627.791308][T20304] netlink_sendmsg+0x805/0xb30 [ 627.791343][T20304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.791372][T20304] ? aa_sock_msg_perm+0xf1/0x1b0 [ 627.791399][T20304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.791417][T20304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.791443][T20304] __sock_sendmsg+0x21c/0x270 [ 627.791479][T20304] ____sys_sendmsg+0x505/0x820 [ 627.791509][T20304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.791542][T20304] ? import_iovec+0x74/0xa0 [ 627.791569][T20304] ___sys_sendmsg+0x21f/0x2a0 [ 627.791595][T20304] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.791654][T20304] ? __fget_files+0x2a/0x420 [ 627.791678][T20304] ? __fget_files+0x3a0/0x420 [ 627.791713][T20304] __x64_sys_sendmsg+0x19b/0x260 [ 627.791744][T20304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.791778][T20304] ? __pfx_ksys_write+0x10/0x10 [ 627.791810][T20304] do_syscall_64+0xec/0xf80 [ 627.791830][T20304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.791848][T20304] ? trace_irq_disable+0x37/0x100 [ 627.791873][T20304] ? clear_bhb_loop+0x60/0xb0 [ 627.791896][T20304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.791915][T20304] RIP: 0033:0x7f0a0138f749 [ 627.791933][T20304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.791951][T20304] RSP: 002b:00007f0a022eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.791973][T20304] RAX: ffffffffffffffda RBX: 00007f0a015e5fa0 RCX: 00007f0a0138f749 [ 627.791988][T20304] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 627.792000][T20304] RBP: 00007f0a022eb090 R08: 0000000000000000 R09: 0000000000000000 [ 627.792013][T20304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.792025][T20304] R13: 00007f0a015e6038 R14: 00007f0a015e5fa0 R15: 00007ffe9c758b98 [ 627.792059][T20304] [ 628.156039][T20312] sctp: [Deprecated]: syz.9.3490 (pid 20312) Use of int in max_burst socket option deprecated. [ 628.156039][T20312] Use struct sctp_assoc_value instead [ 628.735221][T20339] tipc: Enabled bearer , priority 0 [ 628.793180][T20339] syzkaller0: entered promiscuous mode [ 628.816012][T20339] syzkaller0: entered allmulticast mode [ 628.881224][T20339] tipc: Resetting bearer [ 628.890586][T20338] tipc: Resetting bearer [ 628.939915][T20338] tipc: Disabling bearer [ 629.213560][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.369930][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.424190][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.438300][T20383] netlink: 'syz.0.3510': attribute type 2 has an invalid length. [ 629.458071][T20384] sctp: [Deprecated]: syz.8.3509 (pid 20384) Use of int in max_burst socket option deprecated. [ 629.458071][T20384] Use struct sctp_assoc_value instead [ 629.501328][T20387] netlink: 'syz.0.3510': attribute type 2 has an invalid length. [ 629.502620][T20383] !: entered promiscuous mode [ 629.516532][T20384] netlink: 'syz.8.3509': attribute type 27 has an invalid length. [ 629.536098][T20387] !: left promiscuous mode [ 629.660401][T20395] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 629.724686][T20398] netlink: 'syz.9.3515': attribute type 39 has an invalid length. [ 629.879586][T20410] netlink: 'syz.4.3518': attribute type 9 has an invalid length. [ 630.012337][T20412] wg1 speed is unknown, defaulting to 1000 [ 630.023520][T20412] wg1 speed is unknown, defaulting to 1000 [ 630.422752][T20429] lo speed is unknown, defaulting to 1000 [ 630.449457][T20429] lo speed is unknown, defaulting to 1000 [ 630.455995][T20429] lo speed is unknown, defaulting to 1000 [ 630.525534][T20429] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 630.589096][T20429] lo speed is unknown, defaulting to 1000 [ 630.597090][T20429] lo speed is unknown, defaulting to 1000 [ 630.605206][T20429] lo speed is unknown, defaulting to 1000 [ 630.613164][T20429] lo speed is unknown, defaulting to 1000 [ 630.624114][T20429] lo speed is unknown, defaulting to 1000 [ 630.641235][T20429] lo speed is unknown, defaulting to 1000 [ 630.654432][T20429] lo speed is unknown, defaulting to 1000 [ 630.664423][T20429] lo speed is unknown, defaulting to 1000 [ 630.708951][T20445] netlink: 'syz.9.3528': attribute type 1 has an invalid length. [ 630.725623][T20453] wg1 speed is unknown, defaulting to 1000 [ 630.764106][T20445] __nla_validate_parse: 7 callbacks suppressed [ 630.764126][T20445] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3528'. [ 630.957076][T20453] wg1 speed is unknown, defaulting to 1000 [ 631.389113][T20453] lo speed is unknown, defaulting to 1000 [ 631.435212][T20469] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3534'. [ 631.532256][T20475] openvswitch: netlink: IPv4 tunnel dst address is zero [ 631.664657][T20481] sctp: [Deprecated]: syz.4.3535 (pid 20481) Use of int in max_burst socket option deprecated. [ 631.664657][T20481] Use struct sctp_assoc_value instead [ 631.712764][T20485] netlink: 'syz.4.3535': attribute type 27 has an invalid length. [ 632.027544][T14236] IPVS: starting estimator thread 0... [ 632.118524][T20503] IPVS: using max 53 ests per chain, 127200 per kthread [ 632.294340][T20518] netlink: 'syz.0.3545': attribute type 5 has an invalid length. [ 632.475324][T20520] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3547'. [ 632.916718][T20544] wg1 speed is unknown, defaulting to 1000 [ 632.925582][T20544] wg1 speed is unknown, defaulting to 1000 [ 632.965859][T20544] lo speed is unknown, defaulting to 1000 [ 633.157697][T20551] netlink: 'syz.0.3557': attribute type 4 has an invalid length. [ 633.162201][T20552] netlink: 'syz.4.3556': attribute type 4 has an invalid length. [ 633.172895][T20551] netlink: 'syz.0.3557': attribute type 4 has an invalid length. [ 633.193014][T20552] netlink: 'syz.4.3556': attribute type 4 has an invalid length. [ 633.224574][T20557] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3559'. [ 633.249512][T11422] bond0: (slave wlan1): link status definitely down, disabling slave [ 633.267459][T11422] bond0: now running without any active interface! [ 633.276606][T20558] sctp: [Deprecated]: syz.1.3558 (pid 20558) Use of int in max_burst socket option deprecated. [ 633.276606][T20558] Use struct sctp_assoc_value instead [ 633.316278][T20558] netlink: 'syz.1.3558': attribute type 27 has an invalid length. [ 633.443224][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'. [ 633.494281][T20570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3564'. [ 633.514495][T20570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3564'. [ 633.673381][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3570'. [ 633.683491][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3570'. [ 633.696322][T20584] wg1 speed is unknown, defaulting to 1000 [ 633.717268][T20584] wg1 speed is unknown, defaulting to 1000 [ 633.736361][T20584] lo speed is unknown, defaulting to 1000 [ 633.869350][T20595] netlink: 'syz.9.3571': attribute type 4 has an invalid length. [ 633.940140][T20597] netlink: 'syz.9.3571': attribute type 4 has an invalid length. [ 634.149454][T20601] netlink: 'syz.9.3573': attribute type 6 has an invalid length. [ 634.157751][T20601] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.636440][T20612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3575'. [ 635.097603][T20617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.691453][T20642] sctp: [Deprecated]: syz.9.3582 (pid 20642) Use of int in max_burst socket option deprecated. [ 635.691453][T20642] Use struct sctp_assoc_value instead [ 635.717568][ T5947] lo speed is unknown, defaulting to 1000 [ 635.717579][ T5951] lo speed is unknown, defaulting to 1000 [ 636.114784][T20671] wg1 speed is unknown, defaulting to 1000 [ 636.129641][T20675] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 636.130350][T20671] wg1 speed is unknown, defaulting to 1000 [ 636.162797][T20675] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 636.175020][T20671] lo speed is unknown, defaulting to 1000 [ 636.636245][T20699] ipt_ECN: cannot use operation on non-tcp rule [ 636.723820][T20703] validate_nla: 7 callbacks suppressed [ 636.723834][T20703] netlink: 'syz.0.3595': attribute type 4 has an invalid length. [ 636.755473][T20703] netlink: 'syz.0.3595': attribute type 4 has an invalid length. [ 636.892230][T20711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3598'. [ 636.965803][T20714] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3599'. [ 637.030858][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3600'. [ 637.096334][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3600'. [ 637.178088][T20728] netlink: 'syz.1.3602': attribute type 4 has an invalid length. [ 637.192749][T20729] sctp: [Deprecated]: syz.4.3601 (pid 20729) Use of int in max_burst socket option deprecated. [ 637.192749][T20729] Use struct sctp_assoc_value instead [ 637.235252][T20729] netlink: 'syz.4.3601': attribute type 27 has an invalid length. [ 637.361224][T20737] xt_cgroup: invalid path, errno=-2 [ 637.368965][T20741] netlink: 'syz.8.3606': attribute type 4 has an invalid length. [ 637.398981][ T5947] lo speed is unknown, defaulting to 1000 [ 637.406219][T20741] netlink: 'syz.8.3606': attribute type 4 has an invalid length. [ 637.415221][ T5947] syz2: Port: 1 Link DOWN [ 637.440330][ T5947] lo speed is unknown, defaulting to 1000 [ 637.449500][T20747] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 637.471982][ T5947] syz2: Port: 1 Link ACTIVE [ 637.481290][T20747] rdma_rxe: rxe_newlink: failed to add bond0 [ 637.639746][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 638.107524][T20774] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 638.124190][T20774] bond4 (unregistering): Released all slaves [ 638.203967][T20779] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3618'. [ 638.246703][T20779] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 638.270673][T20781] netlink: 'syz.8.3619': attribute type 4 has an invalid length. [ 638.324889][T20785] netlink: 'syz.8.3619': attribute type 4 has an invalid length. [ 638.343166][T20786] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3621'. [ 638.348901][T14236] lo speed is unknown, defaulting to 1000 [ 638.360908][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3621'. [ 638.375940][T20789] netlink: 'syz.0.3618': attribute type 46 has an invalid length. [ 638.390172][T14236] lo speed is unknown, defaulting to 1000 [ 638.428560][T20779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3618'. [ 638.587731][T20802] x_tables: duplicate underflow at hook 1 [ 638.915781][T20821] sctp: [Deprecated]: syz.8.3628 (pid 20821) Use of int in max_burst socket option deprecated. [ 638.915781][T20821] Use struct sctp_assoc_value instead [ 638.956818][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3630'. [ 638.981323][T20825] netlink: 'syz.8.3628': attribute type 27 has an invalid length. [ 639.143934][T20833] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 639.152569][T20833] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 639.796813][T20858] geneve3: entered promiscuous mode [ 640.323262][T20896] sctp: [Deprecated]: syz.0.3650 (pid 20896) Use of int in max_burst socket option deprecated. [ 640.323262][T20896] Use struct sctp_assoc_value instead [ 640.992544][T20907] lec:lec_atm_close: lec0: Shut down! [ 643.382683][T20927] hsr_slave_1 (unregistering): left promiscuous mode [ 643.542612][T20952] vxcan1: entered promiscuous mode [ 643.565024][T20958] __nla_validate_parse: 6 callbacks suppressed [ 643.565043][T20958] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3666'. [ 643.593593][T20952] team0: Device vxcan1 is of different type [ 643.606904][T20959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3665'. [ 643.964764][T20978] validate_nla: 9 callbacks suppressed [ 643.964781][T20978] netlink: 'syz.9.3673': attribute type 4 has an invalid length. [ 643.989251][T20978] netlink: 'syz.9.3673': attribute type 4 has an invalid length. [ 644.132378][T20990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.562709][T21011] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 644.573907][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 644.791997][T21023] netlink: 'syz.4.3684': attribute type 4 has an invalid length. [ 644.845822][T21027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3683'. [ 645.443814][T21070] netlink: 'syz.9.3696': attribute type 1 has an invalid length. [ 645.447164][T21072] netlink: 'syz.4.3697': attribute type 4 has an invalid length. [ 645.468848][T21070] netlink: 'syz.9.3696': attribute type 11 has an invalid length. [ 645.476793][T21070] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3696'. [ 645.542114][T21078] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3698'. [ 645.655184][T21083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3700'. [ 646.120093][T21101] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 646.179523][T21107] netlink: 'syz.1.3708': attribute type 4 has an invalid length. [ 646.325985][T21115] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3711'. [ 646.620863][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 647.084879][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3721'. [ 647.156132][T21154] netlink: 'syz.4.3723': attribute type 4 has an invalid length. [ 647.615071][T21172] Cannot find set identified by id 0 to match [ 647.728265][T21173] nbd4: detected capacity change from 0 to 63 [ 647.738068][T21181] block nbd4: NBD_DISCONNECT [ 647.758231][T21181] block nbd4: Disconnected due to user request. [ 647.767673][T21186] sctp: [Deprecated]: syz.8.3730 (pid 21186) Use of int in max_burst socket option deprecated. [ 647.767673][T21186] Use struct sctp_assoc_value instead [ 647.774272][T21181] block nbd4: shutting down sockets [ 647.842576][T21186] netlink: 'syz.8.3730': attribute type 27 has an invalid length. [ 647.848897][T21188] netlink: 'syz.1.3734': attribute type 4 has an invalid length. [ 648.410570][T21218] syzkaller0: entered promiscuous mode [ 648.417149][T21218] syzkaller0: entered allmulticast mode [ 648.652020][T21225] syzkaller0: entered promiscuous mode [ 648.662132][T21225] syzkaller0: entered allmulticast mode [ 651.250945][T21234] __nla_validate_parse: 2 callbacks suppressed [ 651.250963][T21234] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3746'. [ 651.272538][T21238] netlink: 'syz.4.3748': attribute type 4 has an invalid length. [ 651.291892][T21233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3747'. [ 651.384140][T21246] tap0: tun_chr_ioctl cmd 2148553947 [ 651.390253][T21246] tap0: tun_chr_ioctl cmd 2147767521 [ 651.397298][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3752'. [ 651.407442][T21246] batman_adv: batadv0: Removing interface: macsec1 [ 651.440620][T21244] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3751'. [ 651.470825][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 651.889065][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 651.987063][T21272] netlink: 'syz.4.3755': attribute type 27 has an invalid length. [ 652.094413][T21270] sctp: [Deprecated]: syz.4.3755 (pid 21270) Use of int in max_burst socket option deprecated. [ 652.094413][T21270] Use struct sctp_assoc_value instead [ 652.181122][T21278] dummy0: entered promiscuous mode [ 652.219631][T21276] dummy0: left promiscuous mode [ 652.396770][T21291] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3765'. [ 652.479569][T21293] ip6gre1: entered promiscuous mode [ 652.495029][T21293] ip6gre1: entered allmulticast mode [ 652.592858][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3770'. [ 652.636653][T21303] tipc: Started in network mode [ 652.645300][T21303] tipc: Node identity 0e7617e50de8, cluster identity 4711 [ 652.655956][T21303] tipc: Enabled bearer , priority 0 [ 652.717328][T21308] syzkaller0: entered promiscuous mode [ 652.732895][T21308] syzkaller0: entered allmulticast mode [ 652.774227][T21303] tipc: Resetting bearer [ 652.827643][T21302] tipc: Resetting bearer [ 652.909019][T21302] tipc: Disabling bearer [ 653.184261][T21340] netlink: 192 bytes leftover after parsing attributes in process `syz.8.3779'. [ 653.228844][T21340] openvswitch: netlink: Flow key attr not present in new flow. [ 653.272503][T21340] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 653.374131][T21348] sctp: [Deprecated]: syz.4.3783 (pid 21348) Use of int in max_burst socket option deprecated. [ 653.374131][T21348] Use struct sctp_assoc_value instead [ 654.144210][T21361] sit0: entered promiscuous mode [ 654.210464][T21365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.246343][T21361] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3788'. [ 654.673965][T21393] sctp: [Deprecated]: syz.0.3798 (pid 21393) Use of int in max_burst socket option deprecated. [ 654.673965][T21393] Use struct sctp_assoc_value instead [ 654.726108][T21398] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 654.742888][T21393] netlink: 'syz.0.3798': attribute type 27 has an invalid length. [ 655.011181][T21414] 8021q: VLANs not supported on vcan0 [ 655.127600][T21418] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 655.128187][T21418] block (null): Could not allocate knbd recv work queue. [ 655.178418][T21418] nbd: failed to add new device [ 655.371940][T21435] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 655.473684][T21439] tun0: tun_chr_ioctl cmd 1074025675 [ 655.479304][T21439] tun0: persist enabled [ 655.483921][T21439] tun0: tun_chr_ioctl cmd 1074025675 [ 655.502608][T21439] tun0: persist disabled [ 655.527526][T21439] tun0: tun_chr_ioctl cmd 1074025673 [ 657.993106][T21487] __nla_validate_parse: 9 callbacks suppressed [ 657.993125][T21487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3827'. [ 658.214777][T21497] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3831'. [ 658.217082][T21499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3832'. [ 658.269879][T21504] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3834'. [ 658.302949][T21505] netlink: 'syz.9.3829': attribute type 27 has an invalid length. [ 658.348056][T21502] sctp: [Deprecated]: syz.9.3829 (pid 21502) Use of int in max_burst socket option deprecated. [ 658.348056][T21502] Use struct sctp_assoc_value instead [ 658.635822][T21511] syzkaller0: entered promiscuous mode [ 658.642252][T21511] syzkaller0: entered allmulticast mode [ 658.826644][T21517] netlink: 212360 bytes leftover after parsing attributes in process `syz.9.3837'. [ 659.125331][T21540] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3842'. [ 660.968837][T21548] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3846'. [ 661.049788][T21551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3844'. [ 661.208770][T21555] sctp: [Deprecated]: syz.8.3847 (pid 21555) Use of int in max_burst socket option deprecated. [ 661.208770][T21555] Use struct sctp_assoc_value instead [ 661.237286][T21557] veth1_virt_wifi: mtu less than device minimum [ 661.248167][T21555] netlink: 'syz.8.3847': attribute type 27 has an invalid length. [ 661.685866][T21606] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 661.706750][T21602] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3858'. [ 661.715967][T21602] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 661.801667][T21606] batadv_slave_0: entered promiscuous mode [ 661.809810][T21606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3859'. [ 661.994463][T21613] 8021q: adding VLAN 0 to HW filter on device bond6 [ 662.422426][T21635] syzkaller0: entered promiscuous mode [ 662.438364][T21635] syzkaller0: entered allmulticast mode [ 664.025961][T21673] __nla_validate_parse: 5 callbacks suppressed [ 664.025980][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3878'. [ 664.130461][T21676] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3879'. [ 664.344979][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3879'. [ 665.126366][T21661] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 665.132251][T21664] tipc: Invalid UDP bearer configuration [ 665.141115][T21664] tipc: Enabling of bearer rejected, failed to enable media [ 665.163466][T21676] nbd: must specify at least one socket [ 665.489939][T21699] wg1 speed is unknown, defaulting to 1000 [ 665.497392][T21699] wg1 speed is unknown, defaulting to 1000 [ 665.522539][T21699] lo speed is unknown, defaulting to 1000 [ 665.772256][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3891'. [ 665.850479][T21727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 665.991691][T21733] sit0: left promiscuous mode [ 665.998765][T21733] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3895'. [ 666.008057][T21733] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 666.250514][T21745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3899'. [ 666.442010][T21759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3902'. [ 666.516719][T21765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3903'. [ 666.536692][T21765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3903'. [ 666.615302][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'. [ 666.688221][T21775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.879214][T21782] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 667.220135][T21797] netlink: 'syz.4.3912': attribute type 27 has an invalid length. [ 667.309034][T21796] sctp: [Deprecated]: syz.4.3912 (pid 21796) Use of int in max_burst socket option deprecated. [ 667.309034][T21796] Use struct sctp_assoc_value instead [ 667.526367][T21804] netlink: 'syz.9.3916': attribute type 1 has an invalid length. [ 667.624718][T21804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.683008][T21807] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.700953][T21807] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 667.746907][T21807] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 667.866733][T21804] veth5: entered promiscuous mode [ 667.934229][T21804] bond6: (slave veth5): Enslaving as an active interface with a down link [ 668.642248][T21835] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 668.778347][T21845] wg1 speed is unknown, defaulting to 1000 [ 668.799038][T21845] wg1 speed is unknown, defaulting to 1000 [ 668.829596][T21845] lo speed is unknown, defaulting to 1000 [ 669.392134][T21879] netlink: 'syz.4.3932': attribute type 27 has an invalid length. [ 669.426081][T21881] netlink: 'syz.0.3935': attribute type 4 has an invalid length. [ 669.457218][T21881] netlink: 'syz.0.3935': attribute type 4 has an invalid length. [ 669.505482][T21874] sctp: [Deprecated]: syz.4.3932 (pid 21874) Use of int in max_burst socket option deprecated. [ 669.505482][T21874] Use struct sctp_assoc_value instead [ 669.818401][T21905] __nla_validate_parse: 7 callbacks suppressed [ 669.818419][T21905] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3940'. [ 669.895000][T21910] netlink: 'syz.1.3942': attribute type 4 has an invalid length. [ 669.922549][T21910] netlink: 'syz.1.3942': attribute type 4 has an invalid length. [ 670.035076][T21915] bridge12: entered allmulticast mode [ 670.215433][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.227116][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.237185][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.247401][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.257375][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.267507][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.278674][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.313362][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.326677][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 670.338911][T21921] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 670.735688][T21949] netlink: 'syz.0.3954': attribute type 4 has an invalid length. [ 670.787066][T21954] netlink: 'syz.0.3954': attribute type 4 has an invalid length. [ 670.881853][T21959] netlink: 'syz.4.3955': attribute type 27 has an invalid length. [ 670.930544][T21955] sctp: [Deprecated]: syz.4.3955 (pid 21955) Use of int in max_burst socket option deprecated. [ 670.930544][T21955] Use struct sctp_assoc_value instead [ 671.881518][T22011] : entered promiscuous mode [ 672.049952][T22023] ieee802154 phy0 wpan0: encryption failed: -126 [ 672.543695][T22041] validate_nla: 4 callbacks suppressed [ 672.543713][T22041] netlink: 'syz.4.3982': attribute type 4 has an invalid length. [ 672.568357][T22041] netlink: 'syz.4.3982': attribute type 4 has an invalid length. [ 672.694154][T22050] wg1 speed is unknown, defaulting to 1000 [ 672.721273][T22050] wg1 speed is unknown, defaulting to 1000 [ 672.731031][T22050] lo speed is unknown, defaulting to 1000 [ 673.232231][T22083] bridge0: port 1(syz_tun) entered blocking state [ 673.239281][T22083] bridge0: port 1(syz_tun) entered disabled state [ 673.246002][T22083] syz_tun: entered allmulticast mode [ 673.254124][T22083] syz_tun: entered promiscuous mode [ 673.365167][T22091] netlink: 'syz.8.3995': attribute type 23 has an invalid length. [ 673.376200][T22092] netlink: 'syz.8.3995': attribute type 23 has an invalid length. [ 673.505133][T22099] netlink: 'syz.4.3999': attribute type 21 has an invalid length. [ 673.717570][T22103] wg1 speed is unknown, defaulting to 1000 [ 673.725475][T22103] wg1 speed is unknown, defaulting to 1000 [ 673.735212][T22103] lo speed is unknown, defaulting to 1000 [ 674.004022][T22125] bridge8: entered promiscuous mode [ 674.072354][T22125] bond7: option lacp_rate: invalid value (255) [ 674.084857][T22125] bond7 (unregistering): Released all slaves [ 674.460577][T22154] wg1 speed is unknown, defaulting to 1000 [ 674.472212][T22154] wg1 speed is unknown, defaulting to 1000 [ 674.484236][T22154] lo speed is unknown, defaulting to 1000 [ 674.951888][T22180] __nla_validate_parse: 79 callbacks suppressed [ 674.951909][T22180] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4021'. [ 674.996522][T22180] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:0 [ 675.025014][T22184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4024'. [ 675.052678][T22180] wg1 speed is unknown, defaulting to 1000 [ 675.069482][T22180] wg1 speed is unknown, defaulting to 1000 [ 675.099404][T22180] lo speed is unknown, defaulting to 1000 [ 675.116681][T22187] wg1 speed is unknown, defaulting to 1000 [ 675.140136][T22187] wg1 speed is unknown, defaulting to 1000 [ 675.171240][T22187] lo speed is unknown, defaulting to 1000 [ 675.459037][T22204] IPv6: addrconf: prefix option has invalid lifetime [ 675.683413][T22221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4031'. [ 675.804685][T22227] sctp: [Deprecated]: syz.1.4034 (pid 22227) Use of int in maxseg socket option. [ 675.804685][T22227] Use struct sctp_assoc_value instead [ 676.107704][T22248] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4040'. [ 676.142847][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4041'. [ 676.634473][T22275] netlink: 'syz.8.4051': attribute type 39 has an invalid length. [ 676.818617][T22279] sctp: [Deprecated]: syz.9.4052 (pid 22279) Use of int in max_burst socket option deprecated. [ 676.818617][T22279] Use struct sctp_assoc_value instead [ 676.837570][T22279] netlink: 'syz.9.4052': attribute type 27 has an invalid length. [ 676.869886][T22243] delete_channel: no stack [ 676.898303][T22282] sctp: [Deprecated]: syz.8.4053 (pid 22282) Use of int in max_burst socket option deprecated. [ 676.898303][T22282] Use struct sctp_assoc_value instead [ 676.925675][T22282] netlink: 'syz.8.4053': attribute type 27 has an invalid length. [ 676.964268][T22286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4055'. [ 677.007454][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4056'. [ 677.020278][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4056'. [ 677.678165][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 677.786465][T22318] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4066'. [ 677.824994][T22318] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 677.834350][T11421] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 677.836538][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4066'. [ 677.843857][T11421] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 677.860306][T11421] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 677.872962][T22318] bond7 (unregistering): (slave geneve3): Releasing backup interface [ 677.884024][T22318] bond7 (unregistering): Released all slaves [ 677.902325][T11421] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.912522][T11421] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.922509][T11421] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.997160][ T30] audit: type=1800 audit(1767790729.753:7): pid=22322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4067" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1440 res=0 errno=0 [ 678.295329][T22337] sctp: [Deprecated]: syz.8.4074 (pid 22337) Use of int in max_burst socket option deprecated. [ 678.295329][T22337] Use struct sctp_assoc_value instead [ 678.313300][T22337] netlink: 'syz.8.4074': attribute type 27 has an invalid length. [ 678.847187][T22348] erspan0: entered promiscuous mode [ 679.143314][T22369] FAULT_INJECTION: forcing a failure. [ 679.143314][T22369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.156839][T22369] CPU: 0 UID: 0 PID: 22369 Comm: syz.8.4085 Not tainted syzkaller #0 PREEMPT(full) [ 679.156867][T22369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.156880][T22369] Call Trace: [ 679.156888][T22369] [ 679.156896][T22369] dump_stack_lvl+0xe8/0x150 [ 679.156928][T22369] should_fail_ex+0x414/0x560 [ 679.156963][T22369] _copy_from_user+0x2d/0xb0 [ 679.156987][T22369] __sys_connect+0x123/0x440 [ 679.157008][T22369] ? __fget_files+0x3a0/0x420 [ 679.157033][T22369] ? __pfx___sys_connect+0x10/0x10 [ 679.157065][T22369] ? __pfx_ksys_write+0x10/0x10 [ 679.157093][T22369] __x64_sys_connect+0x7a/0x90 [ 679.157114][T22369] do_syscall_64+0xec/0xf80 [ 679.157134][T22369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.157153][T22369] ? trace_irq_disable+0x37/0x100 [ 679.157177][T22369] ? clear_bhb_loop+0x60/0xb0 [ 679.157199][T22369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.157218][T22369] RIP: 0033:0x7f0a0138f749 [ 679.157236][T22369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.157253][T22369] RSP: 002b:00007f0a022eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 679.157273][T22369] RAX: ffffffffffffffda RBX: 00007f0a015e5fa0 RCX: 00007f0a0138f749 [ 679.157287][T22369] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 679.157298][T22369] RBP: 00007f0a022eb090 R08: 0000000000000000 R09: 0000000000000000 [ 679.157310][T22369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.157320][T22369] R13: 00007f0a015e6038 R14: 00007f0a015e5fa0 R15: 00007ffe9c758b98 [ 679.157349][T22369] [ 679.321165][T22374] ieee802154 phy0 wpan0: encryption failed: -126 [ 679.539393][T22380] block nbd2: server does not support multiple connections per device. [ 679.554441][T22380] block nbd2: shutting down sockets [ 679.721360][T22395] wg1 speed is unknown, defaulting to 1000 [ 679.729041][T22395] wg1 speed is unknown, defaulting to 1000 [ 679.738575][T22395] lo speed is unknown, defaulting to 1000 [ 679.795768][T22403] sctp: [Deprecated]: syz.1.4095 (pid 22403) Use of int in max_burst socket option deprecated. [ 679.795768][T22403] Use struct sctp_assoc_value instead [ 679.949086][T22415] FAULT_INJECTION: forcing a failure. [ 679.949086][T22415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.965330][T22415] CPU: 0 UID: 0 PID: 22415 Comm: syz.4.4098 Not tainted syzkaller #0 PREEMPT(full) [ 679.965358][T22415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.965370][T22415] Call Trace: [ 679.965378][T22415] [ 679.965386][T22415] dump_stack_lvl+0xe8/0x150 [ 679.965415][T22415] should_fail_ex+0x414/0x560 [ 679.965447][T22415] _copy_to_user+0x31/0xb0 [ 679.965472][T22415] simple_read_from_buffer+0xe1/0x170 [ 679.965500][T22415] proc_fail_nth_read+0x1b3/0x220 [ 679.965524][T22415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.965546][T22415] ? rw_verify_area+0x2a6/0x4d0 [ 679.965563][T22415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.965584][T22415] vfs_read+0x200/0xa30 [ 679.965601][T22415] ? fdget_pos+0x247/0x320 [ 679.965628][T22415] ? __pfx___mutex_lock+0x10/0x10 [ 679.965649][T22415] ? __pfx_vfs_read+0x10/0x10 [ 679.965669][T22415] ? __fget_files+0x2a/0x420 [ 679.965696][T22415] ? __fget_files+0x3a0/0x420 [ 679.965718][T22415] ? __fget_files+0x2a/0x420 [ 679.965750][T22415] ksys_read+0x145/0x250 [ 679.965770][T22415] ? __pfx_ksys_read+0x10/0x10 [ 679.965799][T22415] do_syscall_64+0xec/0xf80 [ 679.965819][T22415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.965837][T22415] ? trace_irq_disable+0x37/0x100 [ 679.965857][T22415] ? clear_bhb_loop+0x60/0xb0 [ 679.965879][T22415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.965896][T22415] RIP: 0033:0x7fcfaef8e15c [ 679.965915][T22415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 679.965930][T22415] RSP: 002b:00007fcfafe7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.965949][T22415] RAX: ffffffffffffffda RBX: 00007fcfaf1e5fa0 RCX: 00007fcfaef8e15c [ 679.965963][T22415] RDX: 000000000000000f RSI: 00007fcfafe7b0a0 RDI: 0000000000000004 [ 679.965975][T22415] RBP: 00007fcfafe7b090 R08: 0000000000000000 R09: 0000000000000000 [ 679.965985][T22415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.965995][T22415] R13: 00007fcfaf1e6038 R14: 00007fcfaf1e5fa0 R15: 00007ffc6f6cdf38 [ 679.966025][T22415] [ 680.488978][T22393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.803089][T22445] syzkaller0: entered promiscuous mode [ 680.830459][T22445] syzkaller0: entered allmulticast mode [ 681.360866][T22475] sctp: [Deprecated]: syz.4.4116 (pid 22475) Use of int in max_burst socket option deprecated. [ 681.360866][T22475] Use struct sctp_assoc_value instead [ 681.380297][T22475] netlink: 'syz.4.4116': attribute type 27 has an invalid length. [ 682.800791][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 683.226054][T22449] wg1 speed is unknown, defaulting to 1000 [ 683.259113][T22449] wg1 speed is unknown, defaulting to 1000 [ 683.281727][T22449] lo speed is unknown, defaulting to 1000 [ 683.375233][T22486] netlink: 'syz.8.4119': attribute type 1 has an invalid length. [ 683.389656][T22486] netlink: 'syz.8.4119': attribute type 4 has an invalid length. [ 683.399504][T22486] __nla_validate_parse: 4 callbacks suppressed [ 683.399519][T22486] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4119'. [ 683.556304][T22501] syzkaller0: entered promiscuous mode [ 683.563174][T22501] syzkaller0: entered allmulticast mode [ 683.798433][T22509] tipc: Failed to remove unknown binding: 66,0,0/0:2275899513/2275899514 [ 683.810596][T22510] tipc: Failed to remove unknown binding: 66,0,0/0:2275899513/2275899514 [ 684.063337][T22523] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4130'. [ 684.085685][T22524] sctp: [Deprecated]: syz.0.4128 (pid 22524) Use of int in max_burst socket option deprecated. [ 684.085685][T22524] Use struct sctp_assoc_value instead [ 684.117573][T22524] netlink: 'syz.0.4128': attribute type 27 has an invalid length. [ 684.232770][T22532] wg1 speed is unknown, defaulting to 1000 [ 684.240785][T22532] wg1 speed is unknown, defaulting to 1000 [ 684.266016][T22532] lo speed is unknown, defaulting to 1000 [ 685.035547][T22576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'. [ 685.039818][T22569] netlink: 'syz.1.4146': attribute type 1 has an invalid length. [ 685.204957][T22582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4148'. [ 685.262684][T22587] netlink: 'syz.1.4150': attribute type 13 has an invalid length. [ 685.657898][T22602] sctp: [Deprecated]: syz.0.4155 (pid 22602) Use of int in max_burst socket option deprecated. [ 685.657898][T22602] Use struct sctp_assoc_value instead [ 685.676342][T22605] netlink: 'syz.0.4155': attribute type 27 has an invalid length. [ 685.720225][T22608] tipc: Enabling of bearer rejected, failed to enable media [ 685.756064][T22607] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:0 [ 685.756612][T22611] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 685.775858][T22607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4158'. [ 685.826378][T22613] xt_ecn: cannot match TCP bits for non-tcp packets [ 685.834111][T22613] syz_tun: entered allmulticast mode [ 685.853946][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.949663][T22612] syz_tun: left allmulticast mode [ 686.023607][T22624] veth11: entered promiscuous mode [ 686.029406][T22621] 8021q: VLANs not supported on lo [ 686.076350][T22627] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4165'. [ 686.094388][T22627] vlan3: entered promiscuous mode [ 686.099630][T22627] `: entered promiscuous mode [ 686.104416][T22627] team_slave_0: entered promiscuous mode [ 686.110622][T22627] team_slave_1: entered promiscuous mode [ 687.016323][T22671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4174'. [ 687.039765][T22671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4174'. [ 687.059023][T22671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4174'. [ 687.071448][T22677] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4175'. [ 687.157166][T22681] sctp: [Deprecated]: syz.8.4177 (pid 22681) Use of int in max_burst socket option deprecated. [ 687.157166][T22681] Use struct sctp_assoc_value instead [ 687.175409][T22681] netlink: 'syz.8.4177': attribute type 27 has an invalid length. [ 687.310067][T22671] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.317985][T22671] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.476257][T22671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.497205][T22671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.928147][T22680] wg1: entered promiscuous mode [ 687.942899][T22680] wg1: entered allmulticast mode [ 687.962243][T11421] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.973258][T11421] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.983146][T11421] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.992564][T11421] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.003782][T11421] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.047982][T11421] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.076264][T22707] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 688.078216][T11421] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.118347][T11421] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.190783][T22707] 8021q: adding VLAN 0 to HW filter on device bond8 [ 688.423174][T22707] bond8 (unregistering): Released all slaves [ 688.449426][T22712] batadv1: entered promiscuous mode [ 688.465124][T22721] __nla_validate_parse: 180 callbacks suppressed [ 688.465137][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4184'. [ 688.671350][T22721] syzkaller0: entered promiscuous mode [ 688.682929][T22721] syzkaller0: entered allmulticast mode [ 688.707329][T22739] netlink: 'syz.1.4187': attribute type 8 has an invalid length. [ 688.992538][T22758] netlink: 'syz.1.4194': attribute type 3 has an invalid length. [ 689.110644][T22762] sctp: [Deprecated]: syz.0.4193 (pid 22762) Use of int in max_burst socket option deprecated. [ 689.110644][T22762] Use struct sctp_assoc_value instead [ 689.130497][T22762] netlink: 'syz.0.4193': attribute type 27 has an invalid length. [ 689.849739][T22764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 691.451783][T22772] FAULT_INJECTION: forcing a failure. [ 691.451783][T22772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.528741][T22772] CPU: 0 UID: 0 PID: 22772 Comm: syz.1.4200 Not tainted syzkaller #0 PREEMPT(full) [ 691.528781][T22772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.528795][T22772] Call Trace: [ 691.528804][T22772] [ 691.528814][T22772] dump_stack_lvl+0xe8/0x150 [ 691.528848][T22772] should_fail_ex+0x414/0x560 [ 691.528884][T22772] _copy_from_user+0x2d/0xb0 [ 691.528910][T22772] ___sys_sendmsg+0x158/0x2a0 [ 691.528938][T22772] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.528996][T22772] ? __fget_files+0x2a/0x420 [ 691.529020][T22772] ? __fget_files+0x3a0/0x420 [ 691.529054][T22772] __x64_sys_sendmsg+0x19b/0x260 [ 691.529081][T22772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 691.529113][T22772] ? __pfx_ksys_write+0x10/0x10 [ 691.529144][T22772] do_syscall_64+0xec/0xf80 [ 691.529166][T22772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.529185][T22772] ? trace_irq_disable+0x37/0x100 [ 691.529211][T22772] ? clear_bhb_loop+0x60/0xb0 [ 691.529333][T22772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.529366][T22772] RIP: 0033:0x7f0eb218f749 [ 691.529385][T22772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.529403][T22772] RSP: 002b:00007f0eb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.529424][T22772] RAX: ffffffffffffffda RBX: 00007f0eb23e5fa0 RCX: 00007f0eb218f749 [ 691.529439][T22772] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 691.529451][T22772] RBP: 00007f0eb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 691.529464][T22772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.529476][T22772] R13: 00007f0eb23e6038 R14: 00007f0eb23e5fa0 R15: 00007ffe34fdbc08 [ 691.529508][T22772] [ 691.852205][T22783] raw_sendmsg: syz.0.4205 forgot to set AF_INET. Fix it! [ 691.878306][T22788] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4207'. [ 691.903621][T22788] syzkaller1: entered promiscuous mode [ 691.912752][T22788] syzkaller1: entered allmulticast mode [ 692.001661][T22797] tap0: tun_chr_ioctl cmd 2147767521 [ 692.249311][T22813] sctp: [Deprecated]: syz.8.4211 (pid 22813) Use of int in max_burst socket option deprecated. [ 692.249311][T22813] Use struct sctp_assoc_value instead [ 692.273119][T22814] netlink: 'syz.4.4213': attribute type 12 has an invalid length. [ 692.296564][T22813] netlink: 'syz.8.4211': attribute type 27 has an invalid length. [ 692.421486][T22818] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4216'. [ 692.777758][T22841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4223'. [ 692.790449][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'. [ 692.826629][T22842] wg1 speed is unknown, defaulting to 1000 [ 692.835812][T22842] wg1 speed is unknown, defaulting to 1000 [ 692.853249][T22842] lo speed is unknown, defaulting to 1000 [ 692.962408][T22846] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4224'. [ 692.981961][T22846] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4224'. [ 693.056698][T22851] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 262147, id = 0 [ 693.189847][T22857] wg1 speed is unknown, defaulting to 1000 [ 693.265513][T22857] wg1 speed is unknown, defaulting to 1000 [ 693.376356][T22867] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4229'. [ 693.415645][T22857] lo speed is unknown, defaulting to 1000 [ 693.469735][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4229'. [ 693.528526][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4229'. [ 693.548824][T22869] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4229'. [ 693.956888][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4236'. [ 693.997223][T22885] bridge13: port 1(veth0_to_bond) entered blocking state [ 694.014945][T22885] bridge13: port 1(veth0_to_bond) entered disabled state [ 694.023466][T22885] veth0_to_bond: entered allmulticast mode [ 694.032282][T22885] veth0_to_bond: entered promiscuous mode [ 694.042868][T22883] tipc: Enabled bearer , priority 0 [ 694.061706][T22891] syzkaller0: entered promiscuous mode [ 694.092774][T22891] syzkaller0: entered allmulticast mode [ 694.111130][T22857] wg1 speed is unknown, defaulting to 1000 [ 694.119483][T22857] wg1 speed is unknown, defaulting to 1000 [ 694.131997][T22883] tipc: Resetting bearer [ 694.150752][T22857] lo speed is unknown, defaulting to 1000 [ 694.157150][T22882] tipc: Resetting bearer [ 694.182874][T22882] tipc: Disabling bearer [ 694.200048][T22897] sctp: [Deprecated]: syz.4.4238 (pid 22897) Use of int in max_burst socket option deprecated. [ 694.200048][T22897] Use struct sctp_assoc_value instead [ 694.219020][T22897] netlink: 'syz.4.4238': attribute type 27 has an invalid length. [ 694.310066][T22902] openvswitch: netlink: Message has 4 unknown bytes. [ 694.317125][T22902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.340430][T22902] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4241'. [ 694.420125][T22907] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4241'. [ 694.708921][T22916] FAULT_INJECTION: forcing a failure. [ 694.708921][T22916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.740957][T22916] CPU: 0 UID: 0 PID: 22916 Comm: syz.1.4246 Not tainted syzkaller #0 PREEMPT(full) [ 694.740986][T22916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.740998][T22916] Call Trace: [ 694.741006][T22916] [ 694.741015][T22916] dump_stack_lvl+0xe8/0x150 [ 694.741047][T22916] should_fail_ex+0x414/0x560 [ 694.741084][T22916] _copy_from_iter+0x1cd/0x1630 [ 694.741116][T22916] ? __pfx__copy_from_iter+0x10/0x10 [ 694.741138][T22916] ? __build_skb_around+0x22d/0x3c0 [ 694.741162][T22916] ? __alloc_skb+0x198/0x3a0 [ 694.741182][T22916] ? netlink_sendmsg+0x642/0xb30 [ 694.741204][T22916] ? skb_put+0x11b/0x210 [ 694.741228][T22916] netlink_sendmsg+0x6b2/0xb30 [ 694.741262][T22916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.741290][T22916] ? aa_sock_msg_perm+0xf1/0x1b0 [ 694.741317][T22916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.741335][T22916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.741367][T22916] __sock_sendmsg+0x21c/0x270 [ 694.741399][T22916] ____sys_sendmsg+0x505/0x820 [ 694.741427][T22916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.741459][T22916] ? import_iovec+0x74/0xa0 [ 694.741484][T22916] ___sys_sendmsg+0x21f/0x2a0 [ 694.741507][T22916] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.741561][T22916] ? __fget_files+0x2a/0x420 [ 694.741586][T22916] ? __fget_files+0x3a0/0x420 [ 694.741620][T22916] __x64_sys_sendmsg+0x19b/0x260 [ 694.741648][T22916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.741679][T22916] ? __pfx_ksys_write+0x10/0x10 [ 694.741708][T22916] do_syscall_64+0xec/0xf80 [ 694.741728][T22916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.741747][T22916] ? trace_irq_disable+0x37/0x100 [ 694.741773][T22916] ? clear_bhb_loop+0x60/0xb0 [ 694.741797][T22916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.741814][T22916] RIP: 0033:0x7f0eb218f749 [ 694.741831][T22916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.741847][T22916] RSP: 002b:00007f0eb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.741867][T22916] RAX: ffffffffffffffda RBX: 00007f0eb23e5fa0 RCX: 00007f0eb218f749 [ 694.741883][T22916] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 694.741896][T22916] RBP: 00007f0eb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 694.741909][T22916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.741921][T22916] R13: 00007f0eb23e6038 R14: 00007f0eb23e5fa0 R15: 00007ffe34fdbc08 [ 694.741953][T22916] [ 695.121361][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4248'. [ 695.187428][T22923] netlink: 'syz.9.4245': attribute type 12 has an invalid length. [ 695.245920][T22929] netlink: 'syz.4.4249': attribute type 26 has an invalid length. [ 695.252964][T22922] ip6gretap1: entered promiscuous mode [ 695.281988][T22922] ip6gretap1: entered allmulticast mode [ 695.561017][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 695.647085][T22952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4257'. [ 695.751302][T22968] netlink: 'syz.9.4260': attribute type 4 has an invalid length. [ 695.791974][T22968] netlink: 'syz.9.4260': attribute type 4 has an invalid length. [ 695.849008][T22974] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4264'. [ 695.870669][T22974] vlan1: entered allmulticast mode [ 695.879638][T22974] gretap0: entered allmulticast mode [ 695.939288][T22977] wg1 speed is unknown, defaulting to 1000 [ 695.950707][T22979] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 695.970817][T22977] wg1 speed is unknown, defaulting to 1000 [ 695.990742][T22977] lo speed is unknown, defaulting to 1000 [ 696.544807][T23001] sctp: [Deprecated]: syz.1.4269 (pid 23001) Use of int in max_burst socket option deprecated. [ 696.544807][T23001] Use struct sctp_assoc_value instead [ 696.576590][T23001] netlink: 'syz.1.4269': attribute type 27 has an invalid length. [ 696.960355][T23007] netlink: 'syz.4.4272': attribute type 5 has an invalid length. [ 697.294771][T23016] netlink: 'syz.1.4275': attribute type 4 has an invalid length. [ 697.314171][T23016] netlink: 'syz.1.4275': attribute type 4 has an invalid length. [ 697.358687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.381499][T23018] FAULT_INJECTION: forcing a failure. [ 697.381499][T23018] name failslab, interval 1, probability 0, space 0, times 0 [ 697.409111][T23018] CPU: 1 UID: 0 PID: 23018 Comm: syz.4.4276 Not tainted syzkaller #0 PREEMPT(full) [ 697.409145][T23018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.409158][T23018] Call Trace: [ 697.409165][T23018] [ 697.409174][T23018] dump_stack_lvl+0xe8/0x150 [ 697.409204][T23018] should_fail_ex+0x414/0x560 [ 697.409239][T23018] should_failslab+0xa8/0x100 [ 697.409266][T23018] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 697.409295][T23018] ? __alloc_skb+0x198/0x3a0 [ 697.409315][T23018] ? __alloc_skb+0x1dc/0x3a0 [ 697.409332][T23018] ? __local_bh_enable_ip+0xd0/0x130 [ 697.409354][T23018] ? __alloc_skb+0x198/0x3a0 [ 697.409374][T23018] __alloc_skb+0x1dc/0x3a0 [ 697.409398][T23018] netlink_ack+0x146/0xa50 [ 697.409419][T23018] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 697.409457][T23018] netlink_rcv_skb+0x28c/0x470 [ 697.409481][T23018] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 697.409504][T23018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.409538][T23018] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.409570][T23018] netlink_unicast+0x82f/0x9e0 [ 697.409600][T23018] ? __pfx_netlink_unicast+0x10/0x10 [ 697.409621][T23018] ? __alloc_skb+0x198/0x3a0 [ 697.409640][T23018] ? netlink_sendmsg+0x642/0xb30 [ 697.409663][T23018] ? skb_put+0x11b/0x210 [ 697.409687][T23018] netlink_sendmsg+0x805/0xb30 [ 697.409721][T23018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.409749][T23018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 697.409774][T23018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.409792][T23018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.409818][T23018] __sock_sendmsg+0x21c/0x270 [ 697.409849][T23018] ____sys_sendmsg+0x505/0x820 [ 697.409877][T23018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.409909][T23018] ? import_iovec+0x74/0xa0 [ 697.409936][T23018] ___sys_sendmsg+0x21f/0x2a0 [ 697.409961][T23018] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.410019][T23018] ? __fget_files+0x2a/0x420 [ 697.410043][T23018] ? __fget_files+0x3a0/0x420 [ 697.410078][T23018] __x64_sys_sendmsg+0x19b/0x260 [ 697.410104][T23018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.410142][T23018] ? __pfx_ksys_write+0x10/0x10 [ 697.410173][T23018] do_syscall_64+0xec/0xf80 [ 697.410194][T23018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.410212][T23018] ? trace_irq_disable+0x37/0x100 [ 697.410237][T23018] ? clear_bhb_loop+0x60/0xb0 [ 697.410260][T23018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.410279][T23018] RIP: 0033:0x7fcfaef8f749 [ 697.410296][T23018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.410313][T23018] RSP: 002b:00007fcfafe7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.410334][T23018] RAX: ffffffffffffffda RBX: 00007fcfaf1e5fa0 RCX: 00007fcfaef8f749 [ 697.410349][T23018] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 697.410362][T23018] RBP: 00007fcfafe7b090 R08: 0000000000000000 R09: 0000000000000000 [ 697.410374][T23018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.410386][T23018] R13: 00007fcfaf1e6038 R14: 00007fcfaf1e5fa0 R15: 00007ffc6f6cdf38 [ 697.410419][T23018] [ 697.722258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.915163][T23031] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 698.109859][T23035] syzkaller0: entered promiscuous mode [ 698.117159][T23035] syzkaller0: entered allmulticast mode [ 698.461880][T23055] sctp: [Deprecated]: syz.1.4286 (pid 23055) Use of int in max_burst socket option deprecated. [ 698.461880][T23055] Use struct sctp_assoc_value instead [ 698.482957][T23055] netlink: 'syz.1.4286': attribute type 27 has an invalid length. [ 698.520470][ T5902] lo speed is unknown, defaulting to 1000 [ 698.526465][ T5902] syz2: Port: 1 Link DOWN [ 698.543925][T19675] lo speed is unknown, defaulting to 1000 [ 698.550011][T19675] syz2: Port: 1 Link ACTIVE [ 698.601302][T23070] FAULT_INJECTION: forcing a failure. [ 698.601302][T23070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.621800][T23070] CPU: 1 UID: 0 PID: 23070 Comm: syz.8.4291 Not tainted syzkaller #0 PREEMPT(full) [ 698.621829][T23070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 698.621841][T23070] Call Trace: [ 698.621849][T23070] [ 698.621858][T23070] dump_stack_lvl+0xe8/0x150 [ 698.621889][T23070] should_fail_ex+0x414/0x560 [ 698.621924][T23070] _copy_from_user+0x2d/0xb0 [ 698.621950][T23070] kstrtouint_from_user+0xc4/0x170 [ 698.621974][T23070] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 698.622011][T23070] proc_fail_nth_write+0x88/0x200 [ 698.622033][T23070] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 698.622065][T23070] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 698.622088][T23070] vfs_write+0x27e/0xb30 [ 698.622118][T23070] ? __pfx_vfs_write+0x10/0x10 [ 698.622138][T23070] ? __fget_files+0x2a/0x420 [ 698.622167][T23070] ? __fget_files+0x3a0/0x420 [ 698.622190][T23070] ? __fget_files+0x2a/0x420 [ 698.622224][T23070] ksys_write+0x145/0x250 [ 698.622245][T23070] ? __pfx_ksys_write+0x10/0x10 [ 698.622278][T23070] do_syscall_64+0xec/0xf80 [ 698.622297][T23070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.622316][T23070] ? trace_irq_disable+0x37/0x100 [ 698.622341][T23070] ? clear_bhb_loop+0x60/0xb0 [ 698.622364][T23070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.622382][T23070] RIP: 0033:0x7f0a0138e1ff [ 698.622399][T23070] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 698.622416][T23070] RSP: 002b:00007f0a022eb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 698.622436][T23070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a0138e1ff [ 698.622449][T23070] RDX: 0000000000000001 RSI: 00007f0a022eb0a0 RDI: 0000000000000006 [ 698.622462][T23070] RBP: 00007f0a022eb090 R08: 0000000000000000 R09: 0000000000000000 [ 698.622473][T23070] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 698.622484][T23070] R13: 00007f0a015e6038 R14: 00007f0a015e5fa0 R15: 00007ffe9c758b98 [ 698.622518][T23070] [ 698.664817][T23071] tipc: Enabled bearer , priority 0 [ 698.855789][T23068] tipc: Resetting bearer [ 698.884738][T23067] tipc: Disabling bearer [ 699.003469][T23081] __nla_validate_parse: 6 callbacks suppressed [ 699.003489][T23081] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4295'. [ 699.054941][T23083] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4296'. [ 699.067978][T23083] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 699.283598][T23089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4299'. [ 699.298425][T23093] validate_nla: 2 callbacks suppressed [ 699.298444][T23093] netlink: 'syz.8.4301': attribute type 4 has an invalid length. [ 699.349726][T23096] netlink: 'syz.8.4301': attribute type 4 has an invalid length. [ 699.369279][T22685] lo speed is unknown, defaulting to 1000 [ 699.377183][T22684] lo speed is unknown, defaulting to 1000 [ 699.690763][T23121] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4311'. [ 699.700257][T23121] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 699.839604][T23126] sctp: [Deprecated]: syz.0.4310 (pid 23126) Use of int in max_burst socket option deprecated. [ 699.839604][T23126] Use struct sctp_assoc_value instead [ 699.863157][T23123] netlink: 'syz.0.4310': attribute type 27 has an invalid length. [ 699.999325][T23138] netlink: 'syz.4.4317': attribute type 4 has an invalid length. [ 700.024395][T23138] netlink: 'syz.4.4317': attribute type 4 has an invalid length. [ 700.211613][T23149] vlan3: entered promiscuous mode [ 700.216743][T23149] syz_tun: entered promiscuous mode [ 700.702411][T23170] netlink: 'syz.8.4328': attribute type 1 has an invalid length. [ 700.705506][T23167] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4327'. [ 700.710600][T23170] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4328'. [ 700.820665][T23173] netlink: 'syz.9.4326': attribute type 27 has an invalid length. [ 700.839861][T23175] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4329'. [ 700.860937][T23171] sctp: [Deprecated]: syz.9.4326 (pid 23171) Use of int in max_burst socket option deprecated. [ 700.860937][T23171] Use struct sctp_assoc_value instead [ 700.867956][T23175] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 700.907227][T23177] netlink: 'syz.1.4330': attribute type 4 has an invalid length. [ 700.928083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.965968][T23177] netlink: 'syz.1.4330': attribute type 4 has an invalid length. [ 701.025052][T23185] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4333'. [ 701.036968][T23189] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4333'. [ 701.048120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.154937][T23196] Cannot find add_set index 4 as target [ 701.286251][T23206] syzkaller0: entered promiscuous mode [ 701.297923][T23206] syzkaller0: entered allmulticast mode [ 701.325057][T23208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4341'. [ 701.582711][T23223] netlink: 'syz.1.4345': attribute type 4 has an invalid length. [ 701.648604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.992893][T23248] sctp: [Deprecated]: syz.1.4354 (pid 23248) Use of int in max_burst socket option deprecated. [ 701.992893][T23248] Use struct sctp_assoc_value instead [ 702.078395][T23253] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 702.094894][T23253] team0: Device ipvlan2 is already an upper device of the team interface [ 702.648058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.048094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.118090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.556380][T23324] sctp: [Deprecated]: syz.4.4378 (pid 23324) Use of int in max_burst socket option deprecated. [ 703.556380][T23324] Use struct sctp_assoc_value instead [ 703.594318][T23325] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 703.800450][T23325] vxcan1: left promiscuous mode [ 703.935742][T23325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.971422][T23325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.295955][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.386698][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.403153][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.420144][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.489203][T23359] xt_TCPMSS: Only works on TCP SYN packets [ 704.608382][T23363] __nla_validate_parse: 1 callbacks suppressed [ 704.608404][T23363] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4392'. [ 704.803255][T23376] sctp: [Deprecated]: syz.0.4394 (pid 23376) Use of int in max_burst socket option deprecated. [ 704.803255][T23376] Use struct sctp_assoc_value instead [ 704.851096][T23376] validate_nla: 11 callbacks suppressed [ 704.851116][T23376] netlink: 'syz.0.4394': attribute type 27 has an invalid length. [ 705.062926][T23390] netlink: 'syz.1.4401': attribute type 4 has an invalid length. [ 705.083003][T23390] netlink: 'syz.1.4401': attribute type 4 has an invalid length. [ 705.118135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.135914][T23393] FAULT_INJECTION: forcing a failure. [ 705.135914][T23393] name failslab, interval 1, probability 0, space 0, times 0 [ 705.150621][T23393] CPU: 1 UID: 0 PID: 23393 Comm: syz.1.4402 Not tainted syzkaller #0 PREEMPT(full) [ 705.150639][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.150646][T23393] Call Trace: [ 705.150651][T23393] [ 705.150657][T23393] dump_stack_lvl+0xe8/0x150 [ 705.150676][T23393] should_fail_ex+0x414/0x560 [ 705.150696][T23393] should_failslab+0xa8/0x100 [ 705.150710][T23393] __kmalloc_cache_noprof+0x84/0x700 [ 705.150721][T23393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 705.150733][T23393] ? kobject_uevent_env+0x28c/0x9f0 [ 705.150749][T23393] ? __pfx_dev_uevent_name+0x10/0x10 [ 705.150763][T23393] kobject_uevent_env+0x28c/0x9f0 [ 705.150781][T23393] device_add+0x557/0xb80 [ 705.150794][T23393] device_create+0x25b/0x2f0 [ 705.150806][T23393] ? timer_init_key+0x161/0x2b0 [ 705.150824][T23393] ? __pfx_device_create+0x10/0x10 [ 705.150836][T23393] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 705.150854][T23393] mac80211_hwsim_new_radio+0x40c/0x52f0 [ 705.150869][T23393] ? stack_trace_save+0x9c/0xe0 [ 705.150884][T23393] ? __pfx_stack_trace_save+0x10/0x10 [ 705.150914][T23393] ? kasan_save_track+0x4f/0x80 [ 705.150938][T23393] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 705.150956][T23393] ? __nla_validate_parse+0x2400/0x2d40 [ 705.150975][T23393] ? __x64_sys_sendmsg+0x19b/0x260 [ 705.151004][T23393] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 705.151030][T23393] ? __pfx___nla_validate_parse+0x10/0x10 [ 705.151062][T23393] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 705.151086][T23393] ? rcu_is_watching+0x15/0xb0 [ 705.151109][T23393] ? __nla_parse+0x40/0x60 [ 705.151122][T23393] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 705.151137][T23393] genl_family_rcv_msg_doit+0x215/0x300 [ 705.151151][T23393] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 705.151168][T23393] ? bpf_lsm_capable+0x9/0x20 [ 705.151181][T23393] ? security_capable+0x7e/0x2e0 [ 705.151197][T23393] genl_rcv_msg+0x60e/0x790 [ 705.151211][T23393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.151220][T23393] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 705.151238][T23393] netlink_rcv_skb+0x208/0x470 [ 705.151252][T23393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.151263][T23393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 705.151274][T23393] ? genl_rcv+0x19/0x40 [ 705.151304][T23393] ? down_read+0x274/0x2e0 [ 705.151315][T23393] ? genl_rcv+0xd/0x40 [ 705.151331][T23393] genl_rcv+0x28/0x40 [ 705.151345][T23393] netlink_unicast+0x82f/0x9e0 [ 705.151362][T23393] ? __pfx_netlink_unicast+0x10/0x10 [ 705.151372][T23393] ? __alloc_skb+0x198/0x3a0 [ 705.151383][T23393] ? netlink_sendmsg+0x642/0xb30 [ 705.151395][T23393] ? skb_put+0x11b/0x210 [ 705.151408][T23393] netlink_sendmsg+0x805/0xb30 [ 705.151426][T23393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.151441][T23393] ? aa_sock_msg_perm+0xf1/0x1b0 [ 705.151455][T23393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 705.151465][T23393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.151478][T23393] __sock_sendmsg+0x21c/0x270 [ 705.151495][T23393] ____sys_sendmsg+0x505/0x820 [ 705.151510][T23393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.151527][T23393] ? import_iovec+0x74/0xa0 [ 705.151544][T23393] ___sys_sendmsg+0x21f/0x2a0 [ 705.151558][T23393] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.151589][T23393] ? __fget_files+0x2a/0x420 [ 705.151602][T23393] ? __fget_files+0x3a0/0x420 [ 705.151621][T23393] __x64_sys_sendmsg+0x19b/0x260 [ 705.151635][T23393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.151652][T23393] ? __pfx_ksys_write+0x10/0x10 [ 705.151668][T23393] do_syscall_64+0xec/0xf80 [ 705.151679][T23393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.151689][T23393] ? trace_irq_disable+0x37/0x100 [ 705.151702][T23393] ? clear_bhb_loop+0x60/0xb0 [ 705.151714][T23393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.151725][T23393] RIP: 0033:0x7f0eb218f749 [ 705.151737][T23393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.151746][T23393] RSP: 002b:00007f0eb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.151758][T23393] RAX: ffffffffffffffda RBX: 00007f0eb23e5fa0 RCX: 00007f0eb218f749 [ 705.151766][T23393] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 705.151773][T23393] RBP: 00007f0eb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 705.151780][T23393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.151786][T23393] R13: 00007f0eb23e6038 R14: 00007f0eb23e5fa0 R15: 00007ffe34fdbc08 [ 705.151804][T23393] [ 705.628079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.761042][T23399] syzkaller0: entered promiscuous mode [ 705.769118][T23399] syzkaller0: entered allmulticast mode [ 705.962667][T23397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4404'. [ 706.521871][T23424] sctp: [Deprecated]: syz.8.4413 (pid 23424) Use of int in max_burst socket option deprecated. [ 706.521871][T23424] Use struct sctp_assoc_value instead [ 706.539893][T23428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4415'. [ 706.558551][T23430] netlink: 'syz.9.4414': attribute type 4 has an invalid length. [ 706.560465][T23424] netlink: 'syz.8.4413': attribute type 27 has an invalid length. [ 706.586929][T23430] netlink: 'syz.9.4414': attribute type 4 has an invalid length. [ 706.704417][T23435] FAULT_INJECTION: forcing a failure. [ 706.704417][T23435] name failslab, interval 1, probability 0, space 0, times 0 [ 706.760149][T23435] CPU: 0 UID: 0 PID: 23435 Comm: syz.9.4417 Not tainted syzkaller #0 PREEMPT(full) [ 706.760178][T23435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.760191][T23435] Call Trace: [ 706.760200][T23435] [ 706.760209][T23435] dump_stack_lvl+0xe8/0x150 [ 706.760239][T23435] should_fail_ex+0x414/0x560 [ 706.760274][T23435] should_failslab+0xa8/0x100 [ 706.760299][T23435] kmem_cache_alloc_noprof+0x88/0x710 [ 706.760330][T23435] ? __kernfs_new_node+0xdc/0x8a0 [ 706.760357][T23435] __kernfs_new_node+0xdc/0x8a0 [ 706.760386][T23435] ? __pfx___kernfs_new_node+0x10/0x10 [ 706.760409][T23435] ? kernfs_root+0x1c/0x230 [ 706.760435][T23435] ? kernfs_root+0x1c/0x230 [ 706.760454][T23435] ? kernfs_root+0x1c/0x230 [ 706.760472][T23435] ? kernfs_root+0x1c/0x230 [ 706.760497][T23435] kernfs_new_node+0x102/0x210 [ 706.760525][T23435] __kernfs_create_file+0x4b/0x2e0 [ 706.760555][T23435] sysfs_add_file_mode_ns+0x238/0x300 [ 706.760594][T23435] sysfs_merge_group+0x177/0x310 [ 706.760620][T23435] ? __pfx_sysfs_merge_group+0x10/0x10 [ 706.760643][T23435] ? kobject_put+0x52a/0x570 [ 706.760672][T23435] dpm_sysfs_add+0xd2/0x270 [ 706.760699][T23435] device_add+0x4d8/0xb80 [ 706.760723][T23435] device_create+0x25b/0x2f0 [ 706.760748][T23435] ? timer_init_key+0x161/0x2b0 [ 706.760780][T23435] ? __pfx_device_create+0x10/0x10 [ 706.760803][T23435] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 706.760837][T23435] mac80211_hwsim_new_radio+0x40c/0x52f0 [ 706.760863][T23435] ? stack_trace_save+0x9c/0xe0 [ 706.760892][T23435] ? __pfx_stack_trace_save+0x10/0x10 [ 706.760933][T23435] ? kasan_save_track+0x4f/0x80 [ 706.760960][T23435] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 706.760978][T23435] ? __nla_validate_parse+0x2400/0x2d40 [ 706.761001][T23435] ? __x64_sys_sendmsg+0x19b/0x260 [ 706.761033][T23435] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 706.761061][T23435] ? __pfx___nla_validate_parse+0x10/0x10 [ 706.761098][T23435] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 706.761125][T23435] ? rcu_is_watching+0x15/0xb0 [ 706.761160][T23435] ? __nla_parse+0x40/0x60 [ 706.761186][T23435] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 706.761216][T23435] genl_family_rcv_msg_doit+0x215/0x300 [ 706.761243][T23435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 706.761276][T23435] ? bpf_lsm_capable+0x9/0x20 [ 706.761300][T23435] ? security_capable+0x7e/0x2e0 [ 706.761331][T23435] genl_rcv_msg+0x60e/0x790 [ 706.761355][T23435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 706.761372][T23435] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 706.761392][T23435] ? __asan_memcpy+0x40/0x70 [ 706.761409][T23435] ? __pfx_ref_tracker_free+0x10/0x10 [ 706.761437][T23435] netlink_rcv_skb+0x208/0x470 [ 706.761464][T23435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 706.761484][T23435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 706.761505][T23435] ? genl_rcv+0x19/0x40 [ 706.761549][T23435] ? down_read+0x274/0x2e0 [ 706.761569][T23435] ? genl_rcv+0xd/0x40 [ 706.761599][T23435] genl_rcv+0x28/0x40 [ 706.761626][T23435] netlink_unicast+0x82f/0x9e0 [ 706.761657][T23435] ? __pfx_netlink_unicast+0x10/0x10 [ 706.761677][T23435] ? __alloc_skb+0x198/0x3a0 [ 706.761699][T23435] ? netlink_sendmsg+0x642/0xb30 [ 706.761726][T23435] ? skb_put+0x11b/0x210 [ 706.761752][T23435] netlink_sendmsg+0x805/0xb30 [ 706.761787][T23435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.761814][T23435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 706.761839][T23435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 706.761855][T23435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.761879][T23435] __sock_sendmsg+0x21c/0x270 [ 706.761909][T23435] ____sys_sendmsg+0x505/0x820 [ 706.761939][T23435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.761972][T23435] ? import_iovec+0x74/0xa0 [ 706.762000][T23435] ___sys_sendmsg+0x21f/0x2a0 [ 706.762027][T23435] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.762089][T23435] ? __fget_files+0x2a/0x420 [ 706.762113][T23435] ? __fget_files+0x3a0/0x420 [ 706.762157][T23435] __x64_sys_sendmsg+0x19b/0x260 [ 706.762185][T23435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 706.762220][T23435] ? __pfx_ksys_write+0x10/0x10 [ 706.762253][T23435] do_syscall_64+0xec/0xf80 [ 706.762273][T23435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.762292][T23435] ? trace_irq_disable+0x37/0x100 [ 706.762318][T23435] ? clear_bhb_loop+0x60/0xb0 [ 706.762342][T23435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.762362][T23435] RIP: 0033:0x7f6c5df8f749 [ 706.762381][T23435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.762398][T23435] RSP: 002b:00007f6c5ed64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.762419][T23435] RAX: ffffffffffffffda RBX: 00007f6c5e1e5fa0 RCX: 00007f6c5df8f749 [ 706.762434][T23435] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 706.762446][T23435] RBP: 00007f6c5ed64090 R08: 0000000000000000 R09: 0000000000000000 [ 706.762458][T23435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 706.762470][T23435] R13: 00007f6c5e1e6038 R14: 00007f6c5e1e5fa0 R15: 00007ffdde6fc1e8 [ 706.762502][T23435] [ 707.732636][T23428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4415'. [ 707.803357][T23463] vxcan3: entered promiscuous mode [ 708.024067][T23475] netlink: 'syz.1.4428': attribute type 4 has an invalid length. [ 708.092476][T23475] netlink: 'syz.1.4428': attribute type 4 has an invalid length. [ 708.140950][T23481] FAULT_INJECTION: forcing a failure. [ 708.140950][T23481] name failslab, interval 1, probability 0, space 0, times 0 [ 708.158111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.185955][T23481] CPU: 1 UID: 0 PID: 23481 Comm: syz.4.4430 Not tainted syzkaller #0 PREEMPT(full) [ 708.185985][T23481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 708.185998][T23481] Call Trace: [ 708.186006][T23481] [ 708.186015][T23481] dump_stack_lvl+0xe8/0x150 [ 708.186054][T23481] should_fail_ex+0x414/0x560 [ 708.186088][T23481] should_failslab+0xa8/0x100 [ 708.186113][T23481] __kmalloc_noprof+0xdf/0x800 [ 708.186131][T23481] ? kobject_get_path+0xc5/0x2f0 [ 708.186152][T23481] ? __kasan_kmalloc+0x93/0xb0 [ 708.186177][T23481] kobject_get_path+0xc5/0x2f0 [ 708.186194][T23481] ? kobject_uevent_env+0x28c/0x9f0 [ 708.186221][T23481] kobject_uevent_env+0x2a1/0x9f0 [ 708.186251][T23481] device_add+0x557/0xb80 [ 708.186274][T23481] device_create+0x25b/0x2f0 [ 708.186296][T23481] ? timer_init_key+0x161/0x2b0 [ 708.186325][T23481] ? __pfx_device_create+0x10/0x10 [ 708.186347][T23481] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 708.186378][T23481] mac80211_hwsim_new_radio+0x40c/0x52f0 [ 708.186404][T23481] ? stack_trace_save+0x9c/0xe0 [ 708.186430][T23481] ? __pfx_stack_trace_save+0x10/0x10 [ 708.186463][T23481] ? unwind_next_frame+0xa5/0x23d0 [ 708.186489][T23481] ? kasan_save_track+0x4f/0x80 [ 708.186514][T23481] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 708.186530][T23481] ? __nla_validate_parse+0x2400/0x2d40 [ 708.186550][T23481] ? __x64_sys_sendmsg+0x19b/0x260 [ 708.186580][T23481] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 708.186606][T23481] ? __pfx___nla_validate_parse+0x10/0x10 [ 708.186639][T23481] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 708.186665][T23481] ? rcu_is_watching+0x15/0xb0 [ 708.186693][T23481] ? __nla_parse+0x40/0x60 [ 708.186718][T23481] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 708.186745][T23481] genl_family_rcv_msg_doit+0x215/0x300 [ 708.186771][T23481] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 708.186804][T23481] ? bpf_lsm_capable+0x9/0x20 [ 708.186826][T23481] ? security_capable+0x7e/0x2e0 [ 708.186852][T23481] genl_rcv_msg+0x60e/0x790 [ 708.186876][T23481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.186894][T23481] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 708.186927][T23481] netlink_rcv_skb+0x208/0x470 [ 708.186952][T23481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.186970][T23481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.186989][T23481] ? genl_rcv+0x19/0x40 [ 708.187039][T23481] ? down_read+0x274/0x2e0 [ 708.187060][T23481] ? genl_rcv+0xd/0x40 [ 708.187089][T23481] genl_rcv+0x28/0x40 [ 708.187121][T23481] netlink_unicast+0x82f/0x9e0 [ 708.187152][T23481] ? __pfx_netlink_unicast+0x10/0x10 [ 708.187178][T23481] ? __alloc_skb+0x198/0x3a0 [ 708.187198][T23481] ? netlink_sendmsg+0x642/0xb30 [ 708.187221][T23481] ? skb_put+0x11b/0x210 [ 708.187245][T23481] netlink_sendmsg+0x805/0xb30 [ 708.187278][T23481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.187307][T23481] ? aa_sock_msg_perm+0xf1/0x1b0 [ 708.187332][T23481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 708.187351][T23481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.187377][T23481] __sock_sendmsg+0x21c/0x270 [ 708.187407][T23481] ____sys_sendmsg+0x505/0x820 [ 708.187435][T23481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.187468][T23481] ? import_iovec+0x74/0xa0 [ 708.187495][T23481] ___sys_sendmsg+0x21f/0x2a0 [ 708.187521][T23481] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.187581][T23481] ? __fget_files+0x2a/0x420 [ 708.187604][T23481] ? __fget_files+0x3a0/0x420 [ 708.187636][T23481] __x64_sys_sendmsg+0x19b/0x260 [ 708.187662][T23481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.187695][T23481] ? __pfx_ksys_write+0x10/0x10 [ 708.187727][T23481] do_syscall_64+0xec/0xf80 [ 708.187745][T23481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.187764][T23481] ? trace_irq_disable+0x37/0x100 [ 708.187789][T23481] ? clear_bhb_loop+0x60/0xb0 [ 708.187811][T23481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.187827][T23481] RIP: 0033:0x7fcfaef8f749 [ 708.187845][T23481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.187861][T23481] RSP: 002b:00007fcfafe7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.187880][T23481] RAX: ffffffffffffffda RBX: 00007fcfaf1e5fa0 RCX: 00007fcfaef8f749 [ 708.187893][T23481] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 708.187904][T23481] RBP: 00007fcfafe7b090 R08: 0000000000000000 R09: 0000000000000000 [ 708.187915][T23481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.187927][T23481] R13: 00007fcfaf1e6038 R14: 00007fcfaf1e5fa0 R15: 00007ffc6f6cdf38 [ 708.187959][T23481] [ 708.648099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.701184][T23486] sctp: [Deprecated]: syz.9.4432 (pid 23486) Use of int in max_burst socket option deprecated. [ 708.701184][T23486] Use struct sctp_assoc_value instead [ 708.746972][T23484] netlink: 'syz.9.4432': attribute type 27 has an invalid length. [ 708.916613][T23502] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4439'. [ 708.925704][T23502] nbd: must specify at least one socket [ 708.943972][T23504] netlink: 'syz.4.4440': attribute type 13 has an invalid length. [ 709.163694][T23504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.177386][T23504] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.217264][T23504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.454428][ T6711] lo speed is unknown, defaulting to 1000 [ 709.458254][T23531] FAULT_INJECTION: forcing a failure. [ 709.458254][T23531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.473861][T23531] CPU: 1 UID: 0 PID: 23531 Comm: syz.4.4447 Not tainted syzkaller #0 PREEMPT(full) [ 709.473890][T23531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.473904][T23531] Call Trace: [ 709.473912][T23531] [ 709.473921][T23531] dump_stack_lvl+0xe8/0x150 [ 709.473960][T23531] should_fail_ex+0x414/0x560 [ 709.473997][T23531] _copy_from_user+0x2d/0xb0 [ 709.474023][T23531] __sys_bpf+0x1e3/0x860 [ 709.474052][T23531] ? __pfx___sys_bpf+0x10/0x10 [ 709.474099][T23531] ? __might_fault+0xb0/0x130 [ 709.474128][T23531] ? rcu_is_watching+0x15/0xb0 [ 709.474159][T23531] __x64_sys_bpf+0x7c/0x90 [ 709.474185][T23531] do_syscall_64+0xec/0xf80 [ 709.474205][T23531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.474225][T23531] ? trace_irq_disable+0x37/0x100 [ 709.474250][T23531] ? clear_bhb_loop+0x60/0xb0 [ 709.474273][T23531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.474292][T23531] RIP: 0033:0x7fcfaef8f749 [ 709.474311][T23531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.474327][T23531] RSP: 002b:00007fcfafe7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.474347][T23531] RAX: ffffffffffffffda RBX: 00007fcfaf1e5fa0 RCX: 00007fcfaef8f749 [ 709.474361][T23531] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 709.474373][T23531] RBP: 00007fcfafe7b090 R08: 0000000000000000 R09: 0000000000000000 [ 709.474384][T23531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.474396][T23531] R13: 00007fcfaf1e6038 R14: 00007fcfaf1e5fa0 R15: 00007ffc6f6cdf38 [ 709.474426][T23531] [ 709.478112][ T6711] lo speed is unknown, defaulting to 1000 [ 709.728514][T23535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4448'. [ 709.740663][T23533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4448'. [ 709.764794][T23539] bond5: (slave bridge4): making interface the new active one [ 709.775197][T23539] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 709.784965][T23542] sctp: [Deprecated]: syz.8.4449 (pid 23542) Use of int in max_burst socket option deprecated. [ 709.784965][T23542] Use struct sctp_assoc_value instead [ 709.844029][T23535] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 709.873461][T23533] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 709.913374][T23546] netlink: 'syz.0.4452': attribute type 11 has an invalid length. [ 709.929445][T23548] FAULT_INJECTION: forcing a failure. [ 709.929445][T23548] name failslab, interval 1, probability 0, space 0, times 0 [ 709.946575][T23548] CPU: 0 UID: 0 PID: 23548 Comm: syz.1.4453 Not tainted syzkaller #0 PREEMPT(full) [ 709.946603][T23548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.946614][T23548] Call Trace: [ 709.946622][T23548] [ 709.946630][T23548] dump_stack_lvl+0xe8/0x150 [ 709.946660][T23548] should_fail_ex+0x414/0x560 [ 709.946693][T23548] should_failslab+0xa8/0x100 [ 709.946717][T23548] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 709.946739][T23548] ? __kernfs_new_node+0x9c/0x8a0 [ 709.946765][T23548] kstrdup+0x42/0x100 [ 709.946789][T23548] __kernfs_new_node+0x9c/0x8a0 [ 709.946813][T23548] ? kernfs_root+0x1c/0x230 [ 709.946832][T23548] ? __pfx___kernfs_new_node+0x10/0x10 [ 709.946854][T23548] ? kernfs_root+0x1c/0x230 [ 709.946881][T23548] ? kernfs_root+0x1c/0x230 [ 709.946911][T23548] ? kernfs_root+0x1c/0x230 [ 709.946937][T23548] kernfs_new_node+0x102/0x210 [ 709.946965][T23548] kernfs_create_link+0xa7/0x200 [ 709.946996][T23548] sysfs_do_create_link_sd+0x83/0x110 [ 709.947024][T23548] driver_sysfs_add+0x89/0x210 [ 709.947049][T23548] device_bind_driver+0x17/0x60 [ 709.947070][T23548] mac80211_hwsim_new_radio+0x497/0x52f0 [ 709.947096][T23548] ? stack_trace_save+0x9c/0xe0 [ 709.947124][T23548] ? __pfx_stack_trace_save+0x10/0x10 [ 709.947157][T23548] ? unwind_next_frame+0xa5/0x23d0 [ 709.947184][T23548] ? kasan_save_track+0x4f/0x80 [ 709.947211][T23548] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 709.947230][T23548] ? __nla_validate_parse+0x2400/0x2d40 [ 709.947251][T23548] ? __x64_sys_sendmsg+0x19b/0x260 [ 709.947284][T23548] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 709.947311][T23548] ? __pfx___nla_validate_parse+0x10/0x10 [ 709.947347][T23548] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 709.947375][T23548] ? rcu_is_watching+0x15/0xb0 [ 709.947401][T23548] ? __nla_parse+0x40/0x60 [ 709.947429][T23548] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 709.947455][T23548] genl_family_rcv_msg_doit+0x215/0x300 [ 709.947481][T23548] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 709.947514][T23548] ? bpf_lsm_capable+0x9/0x20 [ 709.947535][T23548] ? security_capable+0x7e/0x2e0 [ 709.947561][T23548] genl_rcv_msg+0x60e/0x790 [ 709.947586][T23548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.947603][T23548] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 709.947636][T23548] netlink_rcv_skb+0x208/0x470 [ 709.947659][T23548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.947678][T23548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.947698][T23548] ? genl_rcv+0x19/0x40 [ 709.947739][T23548] ? down_read+0x274/0x2e0 [ 709.947761][T23548] ? genl_rcv+0xd/0x40 [ 709.947787][T23548] genl_rcv+0x28/0x40 [ 709.947811][T23548] netlink_unicast+0x82f/0x9e0 [ 709.947840][T23548] ? __pfx_netlink_unicast+0x10/0x10 [ 709.947859][T23548] ? __alloc_skb+0x198/0x3a0 [ 709.947878][T23548] ? netlink_sendmsg+0x642/0xb30 [ 709.947907][T23548] ? skb_put+0x11b/0x210 [ 709.947929][T23548] netlink_sendmsg+0x805/0xb30 [ 709.947963][T23548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.947992][T23548] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.948019][T23548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 709.948036][T23548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.948062][T23548] __sock_sendmsg+0x21c/0x270 [ 709.948093][T23548] ____sys_sendmsg+0x505/0x820 [ 709.948121][T23548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.948152][T23548] ? import_iovec+0x74/0xa0 [ 709.948180][T23548] ___sys_sendmsg+0x21f/0x2a0 [ 709.948206][T23548] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.948267][T23548] ? __fget_files+0x2a/0x420 [ 709.948291][T23548] ? __fget_files+0x3a0/0x420 [ 709.948326][T23548] __x64_sys_sendmsg+0x19b/0x260 [ 709.948353][T23548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.948383][T23548] ? __might_fault+0xb0/0x130 [ 709.948411][T23548] ? rcu_is_watching+0x15/0xb0 [ 709.948435][T23548] ? trace_sys_enter+0x25/0xf0 [ 709.948463][T23548] do_syscall_64+0xec/0xf80 [ 709.948483][T23548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.948501][T23548] ? trace_irq_disable+0x37/0x100 [ 709.948525][T23548] ? clear_bhb_loop+0x60/0xb0 [ 709.948548][T23548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.948566][T23548] RIP: 0033:0x7f0eb218f749 [ 709.948585][T23548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.948602][T23548] RSP: 002b:00007f0eb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.948623][T23548] RAX: ffffffffffffffda RBX: 00007f0eb23e5fa0 RCX: 00007f0eb218f749 [ 709.948638][T23548] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 709.948651][T23548] RBP: 00007f0eb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 709.948663][T23548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.948676][T23548] R13: 00007f0eb23e6038 R14: 00007f0eb23e5fa0 R15: 00007ffe34fdbc08 [ 709.948708][T23548] [ 710.564415][T23558] validate_nla: 5 callbacks suppressed [ 710.564435][T23558] netlink: 'syz.8.4459': attribute type 4 has an invalid length. [ 710.720768][T23569] FAULT_INJECTION: forcing a failure. [ 710.720768][T23569] name failslab, interval 1, probability 0, space 0, times 0 [ 710.762840][T23569] CPU: 1 UID: 0 PID: 23569 Comm: syz.8.4462 Not tainted syzkaller #0 PREEMPT(full) [ 710.762870][T23569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.762884][T23569] Call Trace: [ 710.762892][T23569] [ 710.762902][T23569] dump_stack_lvl+0xe8/0x150 [ 710.762932][T23569] should_fail_ex+0x414/0x560 [ 710.762970][T23569] should_failslab+0xa8/0x100 [ 710.762996][T23569] __kmalloc_noprof+0xdf/0x800 [ 710.763017][T23569] ? bpf_test_init+0x9f/0x150 [ 710.763045][T23569] bpf_test_init+0x9f/0x150 [ 710.763081][T23569] bpf_prog_test_run_xdp+0x503/0x10e0 [ 710.763123][T23569] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 710.763154][T23569] ? __fget_files+0x2a/0x420 [ 710.763184][T23569] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 710.763211][T23569] bpf_prog_test_run+0x2c7/0x340 [ 710.763244][T23569] __sys_bpf+0x562/0x860 [ 710.763273][T23569] ? __pfx___sys_bpf+0x10/0x10 [ 710.763317][T23569] ? ksys_write+0x22a/0x250 [ 710.763339][T23569] ? __pfx_ksys_write+0x10/0x10 [ 710.763367][T23569] __x64_sys_bpf+0x7c/0x90 [ 710.763393][T23569] do_syscall_64+0xec/0xf80 [ 710.763414][T23569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.763435][T23569] ? clear_bhb_loop+0x60/0xb0 [ 710.763459][T23569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.763479][T23569] RIP: 0033:0x7f0a0138f749 [ 710.763497][T23569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.763514][T23569] RSP: 002b:00007f0a022eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.763535][T23569] RAX: ffffffffffffffda RBX: 00007f0a015e5fa0 RCX: 00007f0a0138f749 [ 710.763548][T23569] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 710.763561][T23569] RBP: 00007f0a022eb090 R08: 0000000000000000 R09: 0000000000000000 [ 710.763573][T23569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.763586][T23569] R13: 00007f0a015e6038 R14: 00007f0a015e5fa0 R15: 00007ffe9c758b98 [ 710.763616][T23569] [ 711.020912][T23574] netlink: 'syz.8.4464': attribute type 1 has an invalid length. [ 711.195014][T23586] x_tables: duplicate underflow at hook 2 [ 711.274647][T23590] netlink: 'syz.8.4471': attribute type 4 has an invalid length. [ 711.301949][T23593] sctp: [Deprecated]: syz.9.4466 (pid 23593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.301949][T23593] Use struct sctp_sack_info instead [ 711.338587][T23593] sctp: [Deprecated]: syz.9.4466 (pid 23593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.338587][T23593] Use struct sctp_sack_info instead [ 711.401623][T23596] sctp: [Deprecated]: syz.1.4470 (pid 23596) Use of int in max_burst socket option deprecated. [ 711.401623][T23596] Use struct sctp_assoc_value instead [ 711.449447][T23592] netlink: 'syz.1.4470': attribute type 27 has an invalid length. [ 711.467174][T23599] FAULT_INJECTION: forcing a failure. [ 711.467174][T23599] name failslab, interval 1, probability 0, space 0, times 0 [ 711.482379][T23599] CPU: 1 UID: 0 PID: 23599 Comm: syz.0.4474 Not tainted syzkaller #0 PREEMPT(full) [ 711.482406][T23599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.482418][T23599] Call Trace: [ 711.482427][T23599] [ 711.482436][T23599] dump_stack_lvl+0xe8/0x150 [ 711.482466][T23599] should_fail_ex+0x414/0x560 [ 711.482502][T23599] should_failslab+0xa8/0x100 [ 711.482529][T23599] kmem_cache_alloc_noprof+0x88/0x710 [ 711.482559][T23599] ? __asan_memcpy+0x40/0x70 [ 711.482576][T23599] ? __kernfs_new_node+0xdc/0x8a0 [ 711.482603][T23599] __kernfs_new_node+0xdc/0x8a0 [ 711.482632][T23599] ? __pfx___kernfs_new_node+0x10/0x10 [ 711.482653][T23599] ? kernfs_root+0x1c/0x230 [ 711.482679][T23599] ? kernfs_root+0x1c/0x230 [ 711.482699][T23599] ? kernfs_root+0x1c/0x230 [ 711.482725][T23599] kernfs_new_node+0x102/0x210 [ 711.482753][T23599] kernfs_create_link+0xa7/0x200 [ 711.482781][T23599] sysfs_do_create_link_sd+0x83/0x110 [ 711.482805][T23599] driver_sysfs_add+0x89/0x210 [ 711.482830][T23599] device_bind_driver+0x17/0x60 [ 711.482850][T23599] mac80211_hwsim_new_radio+0x497/0x52f0 [ 711.482877][T23599] ? stack_trace_save+0x9c/0xe0 [ 711.482904][T23599] ? __pfx_stack_trace_save+0x10/0x10 [ 711.482943][T23599] ? kasan_save_track+0x4f/0x80 [ 711.482970][T23599] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 711.482988][T23599] ? __nla_validate_parse+0x2400/0x2d40 [ 711.483008][T23599] ? __x64_sys_sendmsg+0x19b/0x260 [ 711.483048][T23599] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 711.483075][T23599] ? __pfx___nla_validate_parse+0x10/0x10 [ 711.483111][T23599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 711.483139][T23599] ? rcu_is_watching+0x15/0xb0 [ 711.483168][T23599] ? __nla_parse+0x40/0x60 [ 711.483210][T23599] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 711.483235][T23599] genl_family_rcv_msg_doit+0x215/0x300 [ 711.483261][T23599] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 711.483292][T23599] ? bpf_lsm_capable+0x9/0x20 [ 711.483313][T23599] ? security_capable+0x7e/0x2e0 [ 711.483342][T23599] genl_rcv_msg+0x60e/0x790 [ 711.483367][T23599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 711.483389][T23599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 711.483425][T23599] netlink_rcv_skb+0x208/0x470 [ 711.483451][T23599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 711.483471][T23599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 711.483493][T23599] ? genl_rcv+0x19/0x40 [ 711.483539][T23599] ? down_read+0x274/0x2e0 [ 711.483560][T23599] ? genl_rcv+0xd/0x40 [ 711.483591][T23599] genl_rcv+0x28/0x40 [ 711.483618][T23599] netlink_unicast+0x82f/0x9e0 [ 711.483648][T23599] ? __pfx_netlink_unicast+0x10/0x10 [ 711.483670][T23599] ? __alloc_skb+0x198/0x3a0 [ 711.483690][T23599] ? netlink_sendmsg+0x642/0xb30 [ 711.483714][T23599] ? skb_put+0x11b/0x210 [ 711.483739][T23599] netlink_sendmsg+0x805/0xb30 [ 711.483773][T23599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.483802][T23599] ? aa_sock_msg_perm+0xf1/0x1b0 [ 711.483830][T23599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 711.483848][T23599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.483875][T23599] __sock_sendmsg+0x21c/0x270 [ 711.483907][T23599] ____sys_sendmsg+0x505/0x820 [ 711.483936][T23599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.483971][T23599] ? import_iovec+0x74/0xa0 [ 711.483998][T23599] ___sys_sendmsg+0x21f/0x2a0 [ 711.484031][T23599] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.484088][T23599] ? __fget_files+0x2a/0x420 [ 711.484112][T23599] ? __fget_files+0x3a0/0x420 [ 711.484145][T23599] __x64_sys_sendmsg+0x19b/0x260 [ 711.484171][T23599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 711.484205][T23599] ? __pfx_ksys_write+0x10/0x10 [ 711.484238][T23599] do_syscall_64+0xec/0xf80 [ 711.484257][T23599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.484275][T23599] ? trace_irq_disable+0x37/0x100 [ 711.484297][T23599] ? clear_bhb_loop+0x60/0xb0 [ 711.484319][T23599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.484338][T23599] RIP: 0033:0x7f532238f749 [ 711.484356][T23599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.484374][T23599] RSP: 002b:00007f53232aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.484396][T23599] RAX: ffffffffffffffda RBX: 00007f53225e5fa0 RCX: 00007f532238f749 [ 711.484411][T23599] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 711.484424][T23599] RBP: 00007f53232aa090 R08: 0000000000000000 R09: 0000000000000000 [ 711.484436][T23599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.484448][T23599] R13: 00007f53225e6038 R14: 00007f53225e5fa0 R15: 00007ffceae777a8 [ 711.484483][T23599] [ 712.005023][T23602] FAULT_INJECTION: forcing a failure. [ 712.005023][T23602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.028598][T23602] CPU: 1 UID: 0 PID: 23602 Comm: syz.1.4475 Not tainted syzkaller #0 PREEMPT(full) [ 712.028625][T23602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.028637][T23602] Call Trace: [ 712.028645][T23602] [ 712.028653][T23602] dump_stack_lvl+0xe8/0x150 [ 712.028685][T23602] should_fail_ex+0x414/0x560 [ 712.028713][T23602] _copy_from_user+0x2d/0xb0 [ 712.028737][T23602] bpf_test_init+0xd8/0x150 [ 712.028765][T23602] bpf_prog_test_run_xdp+0x503/0x10e0 [ 712.028803][T23602] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 712.028832][T23602] ? __fget_files+0x2a/0x420 [ 712.028859][T23602] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 712.028883][T23602] bpf_prog_test_run+0x2c7/0x340 [ 712.028913][T23602] __sys_bpf+0x562/0x860 [ 712.028947][T23602] ? __pfx___sys_bpf+0x10/0x10 [ 712.028988][T23602] ? ksys_write+0x22a/0x250 [ 712.029010][T23602] ? __pfx_ksys_write+0x10/0x10 [ 712.029037][T23602] __x64_sys_bpf+0x7c/0x90 [ 712.029064][T23602] do_syscall_64+0xec/0xf80 [ 712.029084][T23602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.029104][T23602] ? trace_irq_disable+0x37/0x100 [ 712.029130][T23602] ? clear_bhb_loop+0x60/0xb0 [ 712.029155][T23602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.029175][T23602] RIP: 0033:0x7f0eb218f749 [ 712.029193][T23602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.029211][T23602] RSP: 002b:00007f0eb03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.029237][T23602] RAX: ffffffffffffffda RBX: 00007f0eb23e5fa0 RCX: 00007f0eb218f749 [ 712.029253][T23602] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 712.029267][T23602] RBP: 00007f0eb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 712.029280][T23602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.029293][T23602] R13: 00007f0eb23e6038 R14: 00007f0eb23e5fa0 R15: 00007ffe34fdbc08 [ 712.029326][T23602] [ 712.338264][T23608] netlink: 'syz.4.4478': attribute type 1 has an invalid length. [ 712.692639][T23633] netlink: 'syz.9.4482': attribute type 4 has an invalid length. [ 712.789548][T23613] wg1 speed is unknown, defaulting to 1000 [ 712.797046][T23613] wg1 speed is unknown, defaulting to 1000 [ 712.871893][T23613] lo speed is unknown, defaulting to 1000 [ 713.297451][T23650] FAULT_INJECTION: forcing a failure. [ 713.297451][T23650] name failslab, interval 1, probability 0, space 0, times 0 [ 713.315684][T23650] CPU: 0 UID: 0 PID: 23650 Comm: syz.9.4489 Not tainted syzkaller #0 PREEMPT(full) [ 713.315713][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.315727][T23650] Call Trace: [ 713.315735][T23650] [ 713.315745][T23650] dump_stack_lvl+0xe8/0x150 [ 713.315776][T23650] should_fail_ex+0x414/0x560 [ 713.315813][T23650] should_failslab+0xa8/0x100 [ 713.315839][T23650] kmem_cache_alloc_noprof+0x88/0x710 [ 713.315867][T23650] ? __asan_memcpy+0x40/0x70 [ 713.315882][T23650] ? __kernfs_new_node+0xdc/0x8a0 [ 713.315909][T23650] __kernfs_new_node+0xdc/0x8a0 [ 713.315938][T23650] ? __pfx___kernfs_new_node+0x10/0x10 [ 713.315959][T23650] ? kernfs_root+0x1c/0x230 [ 713.315987][T23650] ? kernfs_root+0x1c/0x230 [ 713.316007][T23650] ? kernfs_root+0x1c/0x230 [ 713.316036][T23650] kernfs_new_node+0x102/0x210 [ 713.316065][T23650] kernfs_create_link+0xa7/0x200 [ 713.316096][T23650] sysfs_do_create_link_sd+0x83/0x110 [ 713.316120][T23650] driver_sysfs_add+0x89/0x210 [ 713.316145][T23650] device_bind_driver+0x17/0x60 [ 713.316166][T23650] mac80211_hwsim_new_radio+0x497/0x52f0 [ 713.316194][T23650] ? stack_trace_save+0x9c/0xe0 [ 713.316220][T23650] ? __pfx_stack_trace_save+0x10/0x10 [ 713.316257][T23650] ? kasan_save_track+0x4f/0x80 [ 713.316283][T23650] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 713.316301][T23650] ? __nla_validate_parse+0x2400/0x2d40 [ 713.316323][T23650] ? __x64_sys_sendmsg+0x19b/0x260 [ 713.316355][T23650] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 713.316383][T23650] ? __pfx___nla_validate_parse+0x10/0x10 [ 713.316420][T23650] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.316447][T23650] ? rcu_is_watching+0x15/0xb0 [ 713.316476][T23650] ? __nla_parse+0x40/0x60 [ 713.316501][T23650] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 713.316531][T23650] genl_family_rcv_msg_doit+0x215/0x300 [ 713.316558][T23650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 713.316592][T23650] ? bpf_lsm_capable+0x9/0x20 [ 713.316621][T23650] ? security_capable+0x7e/0x2e0 [ 713.316651][T23650] genl_rcv_msg+0x60e/0x790 [ 713.316678][T23650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.316696][T23650] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.316718][T23650] ? __asan_memcpy+0x40/0x70 [ 713.316736][T23650] ? __pfx_ref_tracker_free+0x10/0x10 [ 713.316764][T23650] netlink_rcv_skb+0x208/0x470 [ 713.316791][T23650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.316811][T23650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.316833][T23650] ? genl_rcv+0x19/0x40 [ 713.316878][T23650] ? down_read+0x274/0x2e0 [ 713.316901][T23650] ? genl_rcv+0xd/0x40 [ 713.316931][T23650] genl_rcv+0x28/0x40 [ 713.316958][T23650] netlink_unicast+0x82f/0x9e0 [ 713.316988][T23650] ? __pfx_netlink_unicast+0x10/0x10 [ 713.317009][T23650] ? __alloc_skb+0x198/0x3a0 [ 713.317031][T23650] ? netlink_sendmsg+0x642/0xb30 [ 713.317053][T23650] ? skb_put+0x11b/0x210 [ 713.317078][T23650] netlink_sendmsg+0x805/0xb30 [ 713.317114][T23650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.317144][T23650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 713.317171][T23650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.317190][T23650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.317215][T23650] __sock_sendmsg+0x21c/0x270 [ 713.317247][T23650] ____sys_sendmsg+0x505/0x820 [ 713.317277][T23650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.317310][T23650] ? import_iovec+0x74/0xa0 [ 713.317339][T23650] ___sys_sendmsg+0x21f/0x2a0 [ 713.317364][T23650] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.317428][T23650] ? __fget_files+0x2a/0x420 [ 713.317452][T23650] ? __fget_files+0x3a0/0x420 [ 713.317488][T23650] __x64_sys_sendmsg+0x19b/0x260 [ 713.317514][T23650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.317548][T23650] ? __pfx_ksys_write+0x10/0x10 [ 713.317581][T23650] do_syscall_64+0xec/0xf80 [ 713.317601][T23650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.317626][T23650] ? trace_irq_disable+0x37/0x100 [ 713.317651][T23650] ? clear_bhb_loop+0x60/0xb0 [ 713.317675][T23650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.317694][T23650] RIP: 0033:0x7f6c5df8f749 [ 713.317712][T23650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.317729][T23650] RSP: 002b:00007f6c5ed64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.317751][T23650] RAX: ffffffffffffffda RBX: 00007f6c5e1e5fa0 RCX: 00007f6c5df8f749 [ 713.317766][T23650] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 713.317777][T23650] RBP: 00007f6c5ed64090 R08: 0000000000000000 R09: 0000000000000000 [ 713.317787][T23650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 713.317797][T23650] R13: 00007f6c5e1e6038 R14: 00007f6c5e1e5fa0 R15: 00007ffdde6fc1e8 [ 713.317827][T23650] [ 714.893527][T17648] ------------[ cut here ]------------ [ 714.899527][T17648] refcount_t: underflow; use-after-free. [ 714.905191][T17648] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#1: syz-executor/17648 [ 714.915599][T17648] Modules linked in: [ 714.919982][T17648] CPU: 1 UID: 0 PID: 17648 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 714.929778][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.939931][T17648] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 714.946013][T17648] Code: d4 91 fe 0a 67 48 0f b9 3a eb 4a e8 c8 0c 33 fd 48 8d 3d d1 91 fe 0a 67 48 0f b9 3a eb 37 e8 b5 0c 33 fd 48 8d 3d ce 91 fe 0a <67> 48 0f b9 3a eb 24 e8 a2 0c 33 fd 48 8d 3d cb 91 fe 0a 67 48 0f [ 714.965852][T17648] RSP: 0018:ffffc900030575b8 EFLAGS: 00010293 [ 714.972018][T17648] RAX: ffffffff848deb0b RBX: 0000000000000003 RCX: ffff88802a9e3d00 [ 714.980249][T17648] RDX: 0000000000000000 RSI: ffffffff8e68e200 RDI: ffffffff8f8c7ce0 [ 714.988619][T17648] RBP: 0000000000000000 R08: ffff88802a9e3d00 R09: 0000000000000005 [ 714.996633][T17648] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88806a78a000 [ 715.004814][T17648] R13: ffff888059678060 R14: ffff888059678078 R15: dffffc0000000000 [ 715.012872][T17648] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 715.021903][T17648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.028545][T17648] CR2: 0000200000abd030 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 715.036535][T17648] Call Trace: [ 715.039963][T17648] [ 715.042909][T17648] klist_dec_and_del+0x3c7/0x3d0 [ 715.047967][T17648] klist_remove+0x1bd/0x340 [ 715.052487][T17648] ? __pfx_klist_children_put+0x10/0x10 [ 715.058110][T17648] ? __pfx_klist_remove+0x10/0x10 [ 715.063151][T17648] ? kobject_move+0x5a6/0x6e0 [ 715.067927][T17648] ? __pfx_kobject_move+0x10/0x10 [ 715.072970][T17648] ? do_raw_spin_unlock+0x122/0x240 [ 715.078290][T17648] ? get_device_parent+0x366/0x3a0 [ 715.083430][T17648] device_move+0x193/0x730 [ 715.087920][T17648] hci_conn_del_sysfs+0xb8/0x1a0 [ 715.092888][T17648] hci_conn_del+0xc36/0x1240 [ 715.097515][T17648] hci_conn_hash_flush+0x191/0x260 [ 715.102715][T17648] hci_dev_close_sync+0x821/0x1100 [ 715.107911][T17648] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 715.113483][T17648] ? up_write+0x1ac/0x410 [ 715.118622][T17648] ? rcu_is_watching+0x15/0xb0 [ 715.123437][T17648] hci_unregister_dev+0x21a/0x5b0 [ 715.128542][T17648] vhci_release+0x152/0x1a0 [ 715.133086][T17648] ? __pfx_vhci_release+0x10/0x10 [ 715.138239][T17648] __fput+0x44c/0xa70 [ 715.142289][T17648] task_work_run+0x1d4/0x260 [ 715.146901][T17648] ? __pfx_task_work_run+0x10/0x10 [ 715.152111][T17648] ? kmem_cache_free+0x197/0x620 [ 715.157066][T17648] ? do_exit+0x68f/0x22f0 [ 715.161485][T17648] do_exit+0x694/0x22f0 [ 715.165674][T17648] ? cgroup1_freezing+0x20/0x350 [ 715.170691][T17648] ? __pfx_do_exit+0x10/0x10 [ 715.175323][T17648] do_group_exit+0x21c/0x2d0 [ 715.179984][T17648] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.185289][T17648] get_signal+0x1285/0x1340 [ 715.189917][T17648] arch_do_signal_or_restart+0x9a/0x7a0 [ 715.195508][T17648] ? __pfx_get_timespec64+0x10/0x10 [ 715.200903][T17648] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 715.207106][T17648] ? __se_sys_clock_nanosleep+0x339/0x390 [ 715.212959][T17648] exit_to_user_mode_loop+0x87/0x4e0 [ 715.218301][T17648] ? rcu_is_watching+0x15/0xb0 [ 715.223097][T17648] do_syscall_64+0x2b7/0xf80 [ 715.227703][T17648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.233851][T17648] ? trace_irq_disable+0x37/0x100 [ 715.238937][T17648] ? clear_bhb_loop+0x60/0xb0 [ 715.243642][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.249621][T17648] RIP: 0033:0x7fcfaefc2005 [ 715.254051][T17648] Code: Unable to access opcode bytes at 0x7fcfaefc1fdb. [ 715.261185][T17648] RSP: 002b:00007ffc6f6ce250 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 715.269717][T17648] RAX: 0000000000000000 RBX: 000000000000041f RCX: 00007fcfaefc2005 [ 715.277706][T17648] RDX: 00007ffc6f6ce290 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.286339][T17648] RBP: 00007ffc6f6ce2fc R08: 0000000000000000 R09: 0000000000000000 [ 715.294397][T17648] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 715.302429][T17648] R13: 00000000000927c0 R14: 00000000000ae52b R15: 00007ffc6f6ce350 [ 715.310479][T17648] [ 715.313516][T17648] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 715.320798][T17648] CPU: 1 UID: 0 PID: 17648 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 715.330336][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 715.340386][T17648] Call Trace: [ 715.343664][T17648] [ 715.346596][T17648] vpanic+0x1e0/0x670 [ 715.350586][T17648] panic+0xb9/0xc0 [ 715.354309][T17648] ? __pfx_panic+0x10/0x10 [ 715.358743][T17648] __warn+0x317/0x4b0 [ 715.362729][T17648] ? refcount_warn_saturate+0xb2/0x110 [ 715.368191][T17648] ? refcount_warn_saturate+0xb2/0x110 [ 715.373881][T17648] __report_bug+0x288/0x500 [ 715.378380][T17648] ? __pfx_stack_trace_save+0x10/0x10 [ 715.383758][T17648] ? refcount_warn_saturate+0xb2/0x110 [ 715.389223][T17648] ? __pfx___report_bug+0x10/0x10 [ 715.394253][T17648] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 715.400498][T17648] ? __lock_acquire+0x146f/0x2cf0 [ 715.405532][T17648] report_bug_entry+0x19a/0x290 [ 715.410381][T17648] ? refcount_warn_saturate+0xb2/0x110 [ 715.415844][T17648] ? refcount_warn_saturate+0xb7/0x110 [ 715.421306][T17648] handle_bug+0xca/0x200 [ 715.425556][T17648] exc_invalid_op+0x1a/0x50 [ 715.430058][T17648] asm_exc_invalid_op+0x1a/0x20 [ 715.434909][T17648] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 715.440984][T17648] Code: d4 91 fe 0a 67 48 0f b9 3a eb 4a e8 c8 0c 33 fd 48 8d 3d d1 91 fe 0a 67 48 0f b9 3a eb 37 e8 b5 0c 33 fd 48 8d 3d ce 91 fe 0a <67> 48 0f b9 3a eb 24 e8 a2 0c 33 fd 48 8d 3d cb 91 fe 0a 67 48 0f [ 715.460596][T17648] RSP: 0018:ffffc900030575b8 EFLAGS: 00010293 [ 715.466685][T17648] RAX: ffffffff848deb0b RBX: 0000000000000003 RCX: ffff88802a9e3d00 [ 715.474658][T17648] RDX: 0000000000000000 RSI: ffffffff8e68e200 RDI: ffffffff8f8c7ce0 [ 715.482631][T17648] RBP: 0000000000000000 R08: ffff88802a9e3d00 R09: 0000000000000005 [ 715.490602][T17648] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88806a78a000 [ 715.498569][T17648] R13: ffff888059678060 R14: ffff888059678078 R15: dffffc0000000000 [ 715.506560][T17648] ? refcount_warn_saturate+0xab/0x110 [ 715.512091][T17648] ? refcount_warn_saturate+0xab/0x110 [ 715.517555][T17648] klist_dec_and_del+0x3c7/0x3d0 [ 715.522500][T17648] klist_remove+0x1bd/0x340 [ 715.527000][T17648] ? __pfx_klist_children_put+0x10/0x10 [ 715.532549][T17648] ? __pfx_klist_remove+0x10/0x10 [ 715.537567][T17648] ? kobject_move+0x5a6/0x6e0 [ 715.542244][T17648] ? __pfx_kobject_move+0x10/0x10 [ 715.547352][T17648] ? do_raw_spin_unlock+0x122/0x240 [ 715.552561][T17648] ? get_device_parent+0x366/0x3a0 [ 715.557672][T17648] device_move+0x193/0x730 [ 715.562136][T17648] hci_conn_del_sysfs+0xb8/0x1a0 [ 715.567077][T17648] hci_conn_del+0xc36/0x1240 [ 715.571675][T17648] hci_conn_hash_flush+0x191/0x260 [ 715.576798][T17648] hci_dev_close_sync+0x821/0x1100 [ 715.582011][T17648] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 715.587562][T17648] ? up_write+0x1ac/0x410 [ 715.591893][T17648] ? rcu_is_watching+0x15/0xb0 [ 715.596667][T17648] hci_unregister_dev+0x21a/0x5b0 [ 715.601709][T17648] vhci_release+0x152/0x1a0 [ 715.606220][T17648] ? __pfx_vhci_release+0x10/0x10 [ 715.611334][T17648] __fput+0x44c/0xa70 [ 715.615343][T17648] task_work_run+0x1d4/0x260 [ 715.619940][T17648] ? __pfx_task_work_run+0x10/0x10 [ 715.625058][T17648] ? kmem_cache_free+0x197/0x620 [ 715.629996][T17648] ? do_exit+0x68f/0x22f0 [ 715.634332][T17648] do_exit+0x694/0x22f0 [ 715.638499][T17648] ? cgroup1_freezing+0x20/0x350 [ 715.643444][T17648] ? __pfx_do_exit+0x10/0x10 [ 715.648049][T17648] do_group_exit+0x21c/0x2d0 [ 715.652643][T17648] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.657943][T17648] get_signal+0x1285/0x1340 [ 715.662477][T17648] arch_do_signal_or_restart+0x9a/0x7a0 [ 715.668027][T17648] ? __pfx_get_timespec64+0x10/0x10 [ 715.673269][T17648] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 715.679447][T17648] ? __se_sys_clock_nanosleep+0x339/0x390 [ 715.685212][T17648] exit_to_user_mode_loop+0x87/0x4e0 [ 715.690520][T17648] ? rcu_is_watching+0x15/0xb0 [ 715.695559][T17648] do_syscall_64+0x2b7/0xf80 [ 715.700155][T17648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.706219][T17648] ? trace_irq_disable+0x37/0x100 [ 715.711335][T17648] ? clear_bhb_loop+0x60/0xb0 [ 715.716102][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.721994][T17648] RIP: 0033:0x7fcfaefc2005 [ 715.726411][T17648] Code: Unable to access opcode bytes at 0x7fcfaefc1fdb. [ 715.733429][T17648] RSP: 002b:00007ffc6f6ce250 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 715.741843][T17648] RAX: 0000000000000000 RBX: 000000000000041f RCX: 00007fcfaefc2005 [ 715.749809][T17648] RDX: 00007ffc6f6ce290 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.757776][T17648] RBP: 00007ffc6f6ce2fc R08: 0000000000000000 R09: 0000000000000000 [ 715.765756][T17648] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 715.773811][T17648] R13: 00000000000927c0 R14: 00000000000ae52b R15: 00007ffc6f6ce350 [ 715.781801][T17648] [ 715.785202][T17648] Kernel Offset: disabled [ 715.789524][T17648] Rebooting in 86400 seconds..