last executing test programs: 2m47.16703109s ago: executing program 1 (id=13200): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}]}, 0x28}}, 0x0) shutdown(r0, 0x1) 2m46.831166867s ago: executing program 1 (id=13206): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x6, 0xb, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000840), &(0x7f0000000940)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r5, 0x4) sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x80) 2m46.4316298s ago: executing program 1 (id=13210): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100100085200000ad4f030095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m46.128362404s ago: executing program 1 (id=13212): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x5, 0xf8, &(0x7f0000000480)=""/248, 0x0, 0x2c}, 0x24) 2m45.755581205s ago: executing program 1 (id=13217): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000940)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x12, &(0x7f0000000a80)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x40}, @initr0, @exit, @printk={@x={0x18, 0x0}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, &(0x7f0000000b80)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m45.381330232s ago: executing program 1 (id=13222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x22044858}, 0x4844) 2m34.597126769s ago: executing program 4 (id=13346): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000140)) 2m34.380586947s ago: executing program 4 (id=13349): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000780)=0x59f8, 0x4) sendto$inet6(r0, &(0x7f00000007c0)="8d", 0x1, 0x80001, 0x0, 0x0) 2m34.187005362s ago: executing program 4 (id=13351): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x2004c000) 2m33.875522393s ago: executing program 4 (id=13355): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8000) close(r0) 2m33.701951832s ago: executing program 4 (id=13357): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000005c0)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000600)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x42, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x0, 0x1, 0x8, @loopback, @remote}, "1af57f06"}}}}}, 0x0) 2m33.475593385s ago: executing program 4 (id=13359): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000304fcff7fff0000000000000400", @ANYRES32=r1, @ANYBLOB="1404000010ff050014001680100001800c0005000800000007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000380)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000003c0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r4, 0x0, 0x483, &(0x7f0000000440), 0x0) setsockopt(r4, 0x0, 0x489, &(0x7f0000000480)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r4, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000680)={{0x6c, @multicast2, 0x4e24, 0x1, 'sh\x00', 0x28, 0x8, 0x51}, {@rand_addr=0x64010101, 0x4e22, 0x10000, 0xfffffff8, 0x7, 0xd}}, 0x28) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="30000000bb64ebf098afdd9afea5c6c1070c66b2f4168285b8123530c34e2d36504ef0f3114f750973c8748386f74b3c9b10d005119df37ef2b823a7a5ef680285a664474fd8f57d44954b6f13bc", @ANYRES16=r3, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x1, r5}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, 0x29, 0x5, 0x0, 0x0, {0xf}}, 0x14}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r9 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001a80)) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), r10) 2m29.937800175s ago: executing program 32 (id=13222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x22044858}, 0x4844) 2m17.761116949s ago: executing program 33 (id=13359): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000304fcff7fff0000000000000400", @ANYRES32=r1, @ANYBLOB="1404000010ff050014001680100001800c0005000800000007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000380)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000003c0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r4, 0x0, 0x483, &(0x7f0000000440), 0x0) setsockopt(r4, 0x0, 0x489, &(0x7f0000000480)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r4, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000680)={{0x6c, @multicast2, 0x4e24, 0x1, 'sh\x00', 0x28, 0x8, 0x51}, {@rand_addr=0x64010101, 0x4e22, 0x10000, 0xfffffff8, 0x7, 0xd}}, 0x28) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="30000000bb64ebf098afdd9afea5c6c1070c66b2f4168285b8123530c34e2d36504ef0f3114f750973c8748386f74b3c9b10d005119df37ef2b823a7a5ef680285a664474fd8f57d44954b6f13bc", @ANYRES16=r3, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x1, r5}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, 0x29, 0x5, 0x0, 0x0, {0xf}}, 0x14}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r9 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001a80)) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), r10) 7.067159091s ago: executing program 2 (id=14051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x60004804) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="01b1418d04d2f65828a30834bbfda0fa9c5d935a9cffab79", 0x18}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x5, 0xe, 0x0, &(0x7f0000000d00)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000005000000080000000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000840)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0xe, 0x0, &(0x7f0000000980)='\x00'/14, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000009c0)=r6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000600)='syz_tun\x00', 0x10) socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x8, 0x0, 0x1000}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="10", @ANYRES64=0x0], 0x20) r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x4e23, 0x20003ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$inet6_mtu(r8, 0x29, 0x1e, &(0x7f00000006c0), 0x4) 6.138570992s ago: executing program 2 (id=14055): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = epoll_create1(0x0) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0xa0000004}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, 0x0, &(0x7f0000000e80)) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x4, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34b5a}]}, &(0x7f0000001040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x200000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ec0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000007c0)=0x1c) 5.824174831s ago: executing program 3 (id=14057): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x6, 0x10008) getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f0000000000)=0xa4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001800010000000200fedbdf251d01070008000a00", @ANYRES32, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x44}}, 0x0) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, &(0x7f0000000080)) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d80050001"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.199063457s ago: executing program 3 (id=14061): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.clone_children\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x1f0000007}) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000780)={'bridge0\x00', &(0x7f00000007c0)=@ethtool_ringparam={0xe, 0x0, 0x4, 0x0, 0x3, 0x100}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r8, 0x7, 0x0, 0x9, &(0x7f0000000600)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$inet6_udp_int(r6, 0x11, 0x68, 0x0, &(0x7f00000003c0)) bind$bt_hci(r5, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000240)="46000000130001000242424242424242424242424242424242", 0x19) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000280)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x48052) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000002c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r11, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) 5.180132648s ago: executing program 2 (id=14062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000300)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x1e, 0x0, 0x0, 0xfffff010}, {0x7, 0x3, 0x40}]}, 0x10) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000340)=0xf3f, 0x4) sendto$packet(r5, &(0x7f0000000380)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000400)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/52, 0x34}], 0x4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000740)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000780)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r2], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$inet6(0xa, 0x1, 0x83) bind$inet6(r10, &(0x7f00000009c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000a00)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878316, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000b00)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000b40)=0x10) bind$alg(r2, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=r4, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) sendmsg$nl_generic(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) 4.683073956s ago: executing program 3 (id=14065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000090000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x15, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000fcfffffd000000000600000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x10, 0xa, 0x81}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x3, 0xc85, {{0x1a, 0x4, 0x2, 0x33, 0x68, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2, {[@end, @rr={0x7, 0x7, 0xf2, [@broadcast]}, @rr={0x7, 0xb, 0x99, [@rand_addr=0x64010100, @local]}, @end, @ssrr={0x89, 0x1f, 0xfd, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @remote, @multicast1]}, @ssrr={0x89, 0xb, 0xd1, [@local, @private=0xa010102]}, @generic={0x82, 0x3, 'a'}, @generic={0x7, 0x12, "abb43d102614f889d2f010e592244081"}]}}}}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000006c0)={r2, &(0x7f00000005c0)='\x00', 0x200, &(0x7f0000000600)={@_ha_fsid={[0x2, 0x3ff]}, {0x4, 0x2, 0x7f, 0x3ff}}, 0x400, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x5}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6c}}]}, {0x0, [0x2e, 0x5f, 0x30, 0x0, 0x0]}}, &(0x7f0000000380)=""/47, 0x37, 0x2f, 0x0, 0x7fffffff, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x23, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x810}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000180)='GPL\x00', 0xc9d7, 0x59, &(0x7f00000001c0)=""/89, 0x41000, 0x12, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r0], &(0x7f00000004c0)=[{0x3, 0x2, 0x6, 0x2}, {0x3, 0x5, 0x5, 0x8}, {0x0, 0x2, 0x1, 0x2}], 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000090000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x15, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000fcfffffd000000000600000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x10, 0xa, 0x81}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x3, 0xc85, {{0x1a, 0x4, 0x2, 0x33, 0x68, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2, {[@end, @rr={0x7, 0x7, 0xf2, [@broadcast]}, @rr={0x7, 0xb, 0x99, [@rand_addr=0x64010100, @local]}, @end, @ssrr={0x89, 0x1f, 0xfd, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @remote, @multicast1]}, @ssrr={0x89, 0xb, 0xd1, [@local, @private=0xa010102]}, @generic={0x82, 0x3, 'a'}, @generic={0x7, 0x12, "abb43d102614f889d2f010e592244081"}]}}}}}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000006c0)={r2, &(0x7f00000005c0)='\x00', 0x200, &(0x7f0000000600)={@_ha_fsid={[0x2, 0x3ff]}, {0x4, 0x2, 0x7f, 0x3ff}}, 0x400, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x5}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6c}}]}, {0x0, [0x2e, 0x5f, 0x30, 0x0, 0x0]}}, &(0x7f0000000380)=""/47, 0x37, 0x2f, 0x0, 0x7fffffff, 0x10000}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x23, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x810}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000180)='GPL\x00', 0xc9d7, 0x59, &(0x7f00000001c0)=""/89, 0x41000, 0x12, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r0], &(0x7f00000004c0)=[{0x3, 0x2, 0x6, 0x2}, {0x3, 0x5, 0x5, 0x8}, {0x0, 0x2, 0x1, 0x2}], 0x10, 0x9}, 0x94) (async) 4.300951564s ago: executing program 3 (id=14068): syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x400}}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x2, @in6={{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0x3fdb, 0x7fff, 0x2, 0x8, 0x6}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={r2, 0x5}, 0x8) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 4.260007099s ago: executing program 2 (id=14069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206010200000000000000010100000805000100070000000900020073797a30000000000c000780080012000000200a0500050002000000050004000100000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) 3.933891869s ago: executing program 2 (id=14071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @loopback}, 0x80) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac3c000104d23210"], 0x4a) 3.684330154s ago: executing program 6 (id=14072): r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000001c40)="ae", 0x1, 0x8080, &(0x7f0000002c40)={0x2, 0x4e23, @remote}, 0x10) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000040b0000", 0x40b}], 0x1) 3.327507514s ago: executing program 6 (id=14073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000700)) 3.153996073s ago: executing program 2 (id=14075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002d00)={0xffffffffffffffff, 0x20, &(0x7f0000002cc0)={&(0x7f0000002c40)=""/62, 0x3e, 0x0, &(0x7f0000002c80)=""/54, 0x36}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003380)=ANY=[@ANYBLOB="1e0000000000008062820000e508000002000000", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000400000005000000000002000000000000000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x6, 0x15, &(0x7f0000002f00)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000cdef0000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000002fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003000)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000003080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000030c0)={0xf, 0x10, &(0x7f0000001a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x922d, 0x0, 0x0, 0x0, 0xf88}, {}, {}, [@alu={0x4, 0x1, 0xa, 0x7, 0x1, 0x2, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b00)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001b40)=""/4096, 0x41100, 0x14, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000002c00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r2, r5, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000015c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f0000000740)={0xe0c, 0x1, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x2}, 0x2, 0x5, 0x100, 0x1000, 0x12, 'syz0\x00', "78c6af0bdc76432a82ce518de6b51cbca5ce63fe0934f43169ae39a5476ade76", "eba1f43551a040253ecd16644f607bde579d1f47f9f4dfa1da57eeca09c3aaae", [{0x7, 0x1, {0x3, 0xfff}}, {0x0, 0x100, {0x1, 0x4}}, {0x1000, 0x4fe1, {0x3, 0x80000001}}, {0x2, 0x3, {0x1, 0x3}}, {0xff, 0x3e, {0x3, 0x800}}, {0x7, 0x9, {0x0, 0x7}}, {0x1, 0x2, {0x3, 0x7}}, {0x9, 0x6, {0x2, 0x5}}, {0x6, 0x8, {0x3, 0x5}}, {0x4, 0x6, {0x1, 0x80000000}}, {0x0, 0x8, {0x3, 0xb}}, {0x4, 0x3, {0x2, 0x382}}, {0x2, 0x7d4, {0x3, 0x2}}, {0x1, 0x0, {0x2}}, {0x5, 0xfffa, {0x2, 0x9}}, {0x0, 0x3, {0x1, 0xbe6b}}, {0x0, 0xb140, {0x0, 0x80}}, {0x58c5, 0x8, {0x3, 0xb}}, {0x7, 0x8a, {0x2, 0x5}}, {0xa400, 0x6, {0x3, 0x7}}, {0x0, 0xaf05, {0x2, 0x101}}, {0x0, 0x7, {0x2, 0x7}}, {0x101, 0x1, {0x1, 0x1}}, {0x3728, 0x80, {0x0, 0x2}}, {0x6, 0x10, {0x2, 0x4042}}, {0x7, 0x80, {0x3, 0x8000}}, {0x7f, 0x7, {0x3, 0x5}}, {0x1db, 0x3, {0x2, 0x3}}, {0x7, 0xfa, {0x0, 0xd}}, {0xffff, 0x1, {0x0, 0x8}}, {0xd, 0x80, {0x0, 0x9}}, {0x1, 0x48, {0xb33d0ae8c3b7b419, 0x8f}}, {0x1, 0x0, {0x3, 0xb8}}, {0xee, 0x38, {0x3, 0x10000}}, {0x3, 0x5, {0x0, 0x2}}, {0x9, 0xd, {0x0, 0x8}}, {0x4, 0x2, {0x1, 0x2}}, {0x401, 0x2, {0x0, 0x7}}, {0x0, 0x5, {0x1, 0x9}}, {0xfffd, 0xa, {0x1, 0x1fc8}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x9, 0x7, 0x4, 0x101, 0x16, 'syz1\x00', "1f534bc8fae21643fcf29235d84ac7db5ba5f5c89b53bec8aa1d355c78544157", "0ac2c447e1777579fdb9a16c010d5dc573f3a8b394dcd363da52bf8dd7158c86", [{0x0, 0x1000, {0x1}}, {0x4, 0x401, {0x0, 0x86}}, {0x0, 0xff, {0x0, 0x8}}, {0x7ff, 0x8000, {0x2, 0x5}}, {0x8000, 0x5, {0x3, 0x5}}, {0x2, 0x1, {0x0, 0x7}}, {0x0, 0x6, {0x3, 0xaf27}}, {0x9, 0x81, {0x0, 0x101}}, {0x9, 0xfe, {0x0, 0xa}}, {0x2, 0x1, {0x6, 0x4}}, {0x7, 0xd, {0x0, 0x3}}, {0x32a, 0x6e3, {0x3, 0x1}}, {0xc, 0x2, {0x2, 0x9}}, {0x6, 0x1000, {0x3, 0x8}}, {0x6, 0x8, {0x1, 0x3ff}}, {0x0, 0x8000, {0x2}}, {0x9, 0x1, {0x2, 0xef}}, {0x1, 0xa, {0x2, 0x5}}, {0x1, 0x9, {0x0, 0x5ca3}}, {0x1000, 0xff94, {0x3, 0x4}}, {0x6, 0x8, {0x0, 0x9b4}}, {0x8, 0x100, {0x2, 0x1}}, {0x1, 0x51f9, {0x3, 0x90}}, {0x98, 0x0, {0x0, 0x2}}, {0x40, 0xd1, {0x2, 0x8}}, {0x2, 0xe303, {0x2, 0x80000}}, {0x1, 0x5, {0x3, 0x3}}, {0x2, 0x1000, {0x3}}, {0x5, 0x6, {0x0, 0x10}}, {0x6, 0x3, {0x1, 0x7}}, {0x100, 0xa, {0x0, 0x8}}, {0x8, 0x0, {0x3, 0x7ff}}, {0x8000, 0x4, {0x0, 0x5}}, {0x4, 0x1, {0x1, 0x9}}, {0x9, 0xfff, {0x1, 0x100}}, {0xd, 0x1, {0x2}}, {0x0, 0x40, {0x0, 0x8}}, {0x22, 0x5, {0x2}}, {0x0, 0x6, {0x3, 0x86}}, {0x100, 0x5, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x8, 0x2, 0x3ff, 0x5d, 0x9, 'syz1\x00', "f618027ad0530ee31aaa652d569ba5d2f4a91fdcea558656e4c0b512fb72647e", "674e98471237e94fed70c8b4e1f23893c4684f33f20c40ac44fdfac95f7f092a", [{0x3, 0xa, {0x0, 0x6}}, {0x300, 0x10, {0x3, 0x9}}, {0x45, 0x7, {0x2, 0x3}}, {0x8, 0x2, {0x0, 0x8e5b}}, {0x6f2, 0x5, {0x3, 0x81}}, {0x100, 0x800, {0x3, 0x4}}, {0x9, 0x7f, {0x0, 0x9}}, {0x81, 0x6, {0x3, 0x5}}, {0x4, 0xfff6, {0x0, 0x81}}, {0x2, 0xad, {0x1, 0x4}}, {0x4, 0x1, {0x1, 0x968a}}, {0x40, 0xe00, {0x2, 0x10000}}, {0x8, 0xfff, {0x0, 0x1}}, {0x1, 0x8, {0x0, 0x7}}, {0x4, 0xabfa, {0x2, 0x1}}, {0x6, 0xf800, {0x2, 0x4}}, {0x9, 0x9, {0x2, 0x9d}}, {0x1, 0xa, {0x2, 0xfffffff9}}, {0x6, 0x8d, {0x3, 0x6}}, {0x21ac, 0xc8f7, {0x0, 0x6}}, {0x16b, 0x7, {0x1, 0xb3b}}, {0x0, 0x9, {0x3, 0x519}}, {0x336, 0x9, {0x3, 0xf}}, {0x5900, 0x3, {0x3, 0x2d}}, {0x5, 0x2, {0x1, 0x4}}, {0x2, 0x3, {0x3, 0x401}}, {0x9, 0x1, {0x1, 0xfff}}, {0x9b, 0xf9, {0x1, 0x6}}, {0x1, 0x2, {0x3, 0x8001}}, {0x3, 0x1000, {0x2, 0xb}}, {0x800, 0x1ff, {0x1, 0x9}}, {0x7fff, 0x5, {0x3, 0x5}}, {0x8, 0x6, {0x3, 0x1000}}, {0x6, 0x9fc2, {0x0, 0x3}}, {0x1, 0x4, {0x1, 0x81}}, {0x800, 0x9, {0x1, 0x4}}, {0xfff, 0xd, {0x2}}, {0xba, 0x3, {0x3, 0x81}}, {0x9, 0x4, {0x1, 0x100}}, {0x3, 0x1, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x8, 0x8, 0x74, 0x3, 0x6, 'syz1\x00', "aeed250665fb868b79dea6fa4f34da77da144b7193e2cffbdd36b82387725457", "3a3a39cd6eaa23368949f3892213df9aac770d66e732f4350fe4bbd98ad3e5b6", [{0x3, 0x2, {0x3, 0xfffffd7e}}, {0xf150, 0xc92, {0x2, 0x200}}, {0x6000, 0x3, {0x3, 0x9}}, {0x6, 0xb, {0x2, 0x7fffffff}}, {0x2, 0xe, {0x1, 0x8}}, {0x0, 0x1, {0x2, 0x1}}, {0x101, 0x3, {0xfd557325a4d04451, 0xba}}, {0x3, 0x5, {0x3, 0x3}}, {0x2, 0xb, {0x3, 0xfffeffff}}, {0x8, 0x0, {0x2, 0x4}}, {0xe, 0x9, {0x1, 0xfffffffe}}, {0x8, 0x6, {0x3, 0x80000000}}, {0x100, 0x401, {0x3, 0x40}}, {0x81, 0x6e, {0x2, 0x3}}, {0x4, 0x4d, {0x3, 0xcaed}}, {0x9, 0x6, {0x3, 0xe}}, {0x80, 0x4, {0x2, 0x4}}, {0x964, 0x10, {0x3, 0x3}}, {0x5, 0x7f, {0x0, 0x3}}, {0xc9, 0x6, {0x2, 0xfffffff4}}, {0x24da, 0x0, {0x2, 0x7}}, {0xc, 0x1, {0x1, 0x2}}, {0x0, 0x6, {0x0, 0x3}}, {0x7, 0x6, {0x3, 0x800}}, {0x4, 0x7e, {0x0, 0x1}}, {0xfffc, 0x9, {0x1, 0x3}}, {0xdc, 0x438f, {0x3, 0x3}}, {0x1, 0x1000, {0x1, 0x6}}, {0x6, 0x6, {0x2}}, {0xe, 0x10, {0x2, 0x8000}}, {0xf, 0x1, {0x3, 0x5}}, {0xb, 0x80, {0x0, 0x6}}, {0xffff, 0x7, {0x0, 0x7}}, {0xffc0, 0xdc8, {0x1, 0xf4}}, {0x9, 0x6ee, {0xf335456355cf4de, 0x400}}, {0x1cc, 0x2}, {0x4, 0xe, {0x0, 0x6}}, {0x800, 0x2, {0x0, 0x9}}, {0x5, 0x3669, {0x3}}, {0x81, 0x0, {0x2, 0x8000000}}]}}}, {{0x254, 0x1, {{0x3, 0xf4}, 0xf7, 0x40, 0x6b55, 0x0, 0x5, 'syz0\x00', "37e82277351751fc202c210bfe8172b44a1e5a02098e292069219dd30683b488", "9929075fd9551f3ad9103e2963b00c33cba79ca6b56516c7288eebab7609a3fd", [{0x4, 0x4, {0x2, 0xfffffffa}}, {0x8, 0xf, {0x0, 0x6}}, {0x9, 0xec, {0x1, 0xfffffffc}}, {0x1000, 0x563, {0x2, 0x9c00}}, {0x1a46, 0x1fe, {0x1}}, {0x5, 0xa, {0x2, 0x2}}, {0x7, 0x1, {0x2, 0x80000001}}, {0x8, 0x1, {0x3, 0x3}}, {0x3, 0x51d0, {0x3, 0x2}}, {0x8, 0x0, {0x1, 0x7}}, {0x8001, 0x6, {0x1, 0xf882}}, {0x3, 0x4, {0x0, 0xcb}}, {0x2, 0x6, {0x1, 0x8}}, {0x8001, 0x1, {0x3, 0x8}}, {0x9, 0x64d, {0x0, 0x9}}, {0x200, 0x600, {0x3, 0x63}}, {0x8, 0x5, {0x2, 0x10001}}, {0x40, 0x2, {0x0, 0x1}}, {0x5, 0x7, {0x0, 0x6}}, {0x8, 0x8, {0x2, 0x4}}, {0xe, 0x2, {0x0, 0x8}}, {0x5, 0x1, {0x0, 0x2}}, {0x3, 0x3, {0x3, 0x3}}, {0x80, 0x5, {0x2, 0x7f}}, {0x0, 0x6, {0x3, 0xfffffff9}}, {0x7, 0x7ff, {0x0, 0xfffffffa}}, {0x5, 0x7, {0x3, 0x9}}, {0x7, 0x3ff, {0x0, 0x4}}, {0x100, 0x2, {0x3}}, {0xa61, 0x1, {0x1, 0xd6}}, {0x8, 0xf4fa, {0x2, 0x7}}, {0x314, 0x6, {0x2}}, {0x401, 0x5, {0x2, 0x7}}, {0x5df3, 0x0, {0x2, 0x6}}, {0x7fff, 0x6, {0x1, 0x8}}, {0x101, 0xd, {0x0, 0x8}}, {0x0, 0x9, {0x3, 0x101}}, {0x80, 0x3, {0x7, 0x2}}, {0x0, 0x4, {0x0, 0xcc0}}, {0x8000, 0x401, {0x1, 0x10000}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x9, 0x4, 0x6, 0x1000, 0x1e, 'syz0\x00', "38c586639a1db71ae248011b86cbaf34a1dad50ca48df817c96455727b370060", "5feec4c15676be429d8c1b05f56461aa8786ace7f6850c512f6e32acc0acfb4f", [{0x6, 0x9, {0x0, 0x3764ebd1}}, {0x6, 0x9, {0x0, 0x5}}, {0x53, 0x7d, {0x0, 0x2}}, {0x5, 0xca98, {0x1, 0x1ff}}, {0x6, 0xfff8, {0x2, 0x8a}}, {0x80, 0x2, {0x3, 0x3}}, {0x5, 0x5, {0x2, 0x4}}, {0x3, 0x8, {0x1, 0xc7}}, {0x27, 0xfffa, {0x0, 0x3}}, {0xfd2c, 0x9, {0x0, 0xff}}, {0x6, 0x2d27, {0x1, 0xfffffff5}}, {0x7fff, 0xad, {0x2, 0x6}}, {0x800, 0xc, {0x0, 0x5}}, {0x7fff, 0x3, {0x1, 0x7}}, {0x758e, 0xff37, {0x1, 0x439}}, {0x0, 0x5, {0x0, 0x6}}, {0x0, 0x0, {0x0, 0xaa}}, {0x68de, 0xa21, {0x3, 0x6}}, {0xdd, 0x38, {0x3, 0xfffff296}}, {0x46cb, 0x2, {0x2, 0x6}}, {0x3, 0x7, {0x3, 0x8}}, {0x49, 0x8001, {0x2, 0x7}}, {0x800, 0x100, {0x1, 0xd6}}, {0xffff, 0x9, {0x2}}, {0xfffb, 0xac1, {0x2, 0xbeb}}, {0x1, 0x9, {0x1, 0x8}}, {0x2, 0x283, {0x2, 0x1ff}}, {0x5f1, 0xfffd, {0x2, 0x8}}, {0xb9, 0x4, {0x3, 0x6}}, {0x8, 0xca, {0x1, 0x1}}, {0x3578, 0x1000, {0x0, 0x7}}, {0xe, 0x1ff, {0x1, 0x7}}, {0x7, 0x8, {0x1, 0xd}}, {0xd91, 0x81, {0x2, 0x1}}, {0x0, 0xfff, {0x0, 0x10000}}, {0x4, 0x80, {0x0, 0x800}}, {0x8000, 0x6, {0x3, 0x200}}, {0x8, 0x8, {0x1, 0x81}}, {0x5, 0x0, {0x3, 0x5}}, {0x2, 0x2, {0x1, 0x5fe}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4891}, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001840)=@assoc_value={0x0}, &(0x7f0000001880)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000018c0)={r10, 0x3ff, 0x30, 0xe304, 0x1}, &(0x7f0000001900)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001940)={r10, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x4, 0x0, 0x7, 0x8, 0xe, 0x36, 0x7f}, 0x9c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) sendmsg(r6, &(0x7f0000000640)={0x0, 0x953a, &(0x7f0000000680)=[{&(0x7f00000006c0)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900020073797a32000000001400078008001340ffffffff080012400041e54a050005000a00000005000100060000000c000300686173683a6970"], 0x58}}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x3, 0xc, &(0x7f00000016c0)=ANY=[@ANYBLOB="1802000003001000000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b00000095"], &(0x7f0000001740)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r13, 0x0, 0xe, 0x0, &(0x7f0000001800)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r12, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 3.047749448s ago: executing program 6 (id=14076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x6, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x8, 0x1, 0x1, 0x2, 0xdea}, 0xef, 0x3}, [{0x14f8d02e, 0xa, 0x5, 0x101, 0x1, 0x6}, {0x1, 0x9, 0x0, 0x43, 0x4, 0x8}, {0xafd, 0x3, 0x3, 0x7, 0x9, 0x4}, {0x3, 0x4, 0x5, 0x4, 0x2, 0x3ff}, {0x9, 0x7fffffff, 0x5c8, 0x80, 0xc52, 0x200}, {0x2, 0x4, 0x8001, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x8383, 0xf35, 0x9, 0x1}, {0x7, 0x2, 0x7, 0x1, 0x2, 0x800}, {0x4, 0x0, 0x773, 0x7, 0x400, 0x4754}, {0xd, 0x8, 0x639f, 0x6, 0x4, 0x5}, {0xffff, 0x9, 0x9, 0xa, 0x8d, 0xf718}, {0x6, 0x4, 0xb6, 0x17, 0x8, 0x4}, {0xac, 0x0, 0x1, 0x3, 0x3, 0x7}, {0x4, 0x2, 0x10, 0xc, 0xdd3, 0x6}, {0x19, 0x70f, 0xfff, 0x7, 0x81, 0x5}, {0x8000, 0x1, 0x1, 0x0, 0x3, 0x1}, {0x3, 0x6, 0xfff, 0xc, 0x10, 0x9}, {0x5, 0x80000001, 0x4, 0x1, 0x0, 0x4}, {0x7, 0x5, 0xfff, 0x9, 0x1, 0x180000}, {0x5, 0x101, 0x4, 0x1, 0x4, 0x6}, {0x0, 0x1, 0x9, 0x9, 0x9e5, 0x26}, {0x9, 0x5, 0x2, 0x4, 0xee0000, 0x4278}, {0x10000, 0x8a5, 0x8, 0x8, 0x3, 0x2}, {0x800, 0x1, 0x9, 0xff, 0x7, 0x6}, {0xa9e6, 0x7, 0xa, 0x2, 0x1, 0x7ff}, {0x1, 0x4, 0x5, 0x46, 0x6, 0x6}, {0x1b7446e9, 0x6, 0x3, 0x8, 0x1, 0x1000}, {0xfffffe01, 0xfb, 0x675, 0x3, 0xd, 0x6}, {0x4, 0x5f7, 0xe4b, 0x8000, 0xfc3f, 0x3}, {0x0, 0x4, 0x53f, 0x7fff, 0x3}, {0x8, 0x7, 0x1, 0x2, 0x9, 0x49c}, {0x3, 0x78d2, 0x2, 0x401, 0x2, 0x7}, {0x2, 0x6, 0x5, 0x7fffffff, 0x101, 0x6}, {0x62, 0xa, 0x40, 0xabfe, 0x1fc, 0x7}, {0x54, 0xe610, 0x9, 0x200, 0x7f, 0x1}, {0xdb8, 0xa, 0xf, 0xffffffff, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x0, 0x7, 0x4}, {0x9, 0xe02d, 0x4, 0x3, 0xfffffff7, 0x8}, {0x1, 0x40, 0x1, 0xcbc, 0x4, 0x1}, {0xd, 0xe, 0x5, 0x0, 0x81, 0xdf44000}, {0x3, 0x6, 0x3, 0x6, 0x1, 0x4e14b830}, {0x81, 0x8, 0x4800000, 0x887, 0x9ee, 0x4}, {0x101, 0x6, 0x81, 0x8, 0x0, 0xffff}, {0xffffffff, 0xf0a8, 0x3, 0x1000, 0x10, 0xee3}, {0x5a1a, 0x6, 0x3, 0x2, 0xa, 0x4}, {0xc3d8, 0x5, 0x1, 0x5, 0x6, 0xc00}, {0x0, 0xc, 0x40e, 0x0, 0xfffffe01, 0x3}, {0x875, 0xffff1f01, 0x9, 0x6, 0x8, 0x4}, {0x5, 0x40, 0x4, 0x40, 0x41, 0xd090}, {0x1, 0x1, 0x1, 0x4, 0x0, 0x4}, {0x9, 0x24, 0x5f0, 0x7, 0x5, 0x2}, {0x1, 0xe2, 0xfffffffe, 0x0, 0x3, 0x67e}, {0xffff, 0x0, 0x6, 0x184df295, 0x7, 0x2}, {0xd, 0x2, 0x2, 0x2, 0x8, 0x853}, {0x7fffffff, 0x7, 0x3, 0x1, 0x7, 0xa9a}, {0x6, 0x3ff, 0x7fff, 0x2, 0x1, 0xf}, {0x4, 0x9937, 0x5f2, 0xffffffb9, 0x0, 0xfffffffd}, {0xfffff43d, 0x1, 0xf, 0x62ac, 0xfffffe01, 0xd3f3}, {0x9, 0x4, 0x985a, 0x0, 0x9, 0x9}, {0x81, 0x7f, 0x9, 0x90ba, 0x7fffffff}, {0xfffffffb, 0xffffffff, 0x6, 0x6, 0x4, 0x9}, {0x8, 0x6, 0x7ff, 0x1, 0x3, 0xfffffffb}, {0x8, 0x5, 0x5, 0x4, 0x9, 0x3}, {0x2, 0x441e, 0x1, 0x4677, 0x3, 0x1}, {0x40, 0x0, 0xffffffff, 0x0, 0x7, 0x8}, {0x49, 0x1, 0xd, 0x2, 0x2, 0xedd7}, {0x6, 0x8, 0x800, 0x1ff, 0x9e0, 0x1000}, {0xa, 0x7, 0xfffe00, 0x40, 0x2, 0x9}, {0x1, 0x3, 0x37, 0x80000000, 0xfffffffe, 0x400}, {0x2, 0x8, 0x2, 0x80000000, 0x5d9808ec, 0x2}, {0x9, 0x0, 0x8, 0x7, 0x4, 0xfffffff0}, {0x81, 0x1da, 0xd, 0x1, 0x5, 0x101}, {0x1, 0x5, 0x2a, 0xf7, 0xfffeffff, 0x8}, {0x3, 0x9, 0xe, 0x1, 0x400, 0xc}, {0xfffffff8, 0xb, 0xd7aa, 0x10000, 0x4, 0x8}, {0x0, 0x28, 0x0, 0x3, 0x401, 0x7}, {0x7e, 0xa2, 0x0, 0x6, 0x1, 0x2}, {0x6, 0x41e2c426, 0x98dc, 0x2, 0x9, 0x1}, {0x4, 0x8, 0x1000, 0x5, 0x4, 0x4}, {0x7, 0x0, 0x80000001, 0x1, 0x3, 0x3}, {0x101, 0x0, 0x7, 0x7fffffff, 0x9, 0x2}, {0x42, 0xfb, 0x7, 0x2, 0x7, 0x2}, {0xffffffff, 0x6, 0x7, 0x3, 0x5, 0x8}, {0x1, 0x4, 0xffffffff, 0xffffffff, 0x9a, 0x2}, {0xd8, 0x9, 0xc1f, 0x3, 0x1, 0x1}, {0x4, 0xffffff58, 0x10000, 0xfffffff7, 0x8, 0x7}, {0x5d, 0x2, 0x4, 0x3, 0x800, 0x10000}, {0x2, 0xfc07, 0x49, 0xe0d, 0x2, 0x2}, {0xb, 0x0, 0xf, 0x7d8f9e7c, 0x3, 0x8}, {0x6, 0x2, 0xa, 0x529, 0x8000000, 0x2}, {0x101, 0xfffffffe, 0x9, 0x5, 0x8001, 0x4}, {0x7fff, 0xd2e, 0xfff, 0xf, 0x9, 0x3}, {0x9, 0x5, 0x7, 0x800, 0xe, 0x1728}, {0x9a1, 0x5, 0x6, 0x1, 0x4746, 0x9}, {0x7, 0x0, 0xd5a, 0x6, 0xff, 0x1}, {0x3, 0x0, 0x1, 0x7, 0x400, 0x7b9b}, {0x0, 0xf8, 0xbb39, 0x0, 0x6, 0x165}, {0xfffffff8, 0xf5, 0x8000000, 0x5, 0x3, 0x7ec}, {0x70, 0x1400, 0x6, 0x8, 0xfffffff8, 0x69d}, {0x5, 0x3, 0x4, 0x8000, 0x7, 0xffff}, {0x0, 0x5, 0x3ff, 0x0, 0x200, 0x6}, {0x100, 0xa3, 0xb359, 0x3, 0x1, 0x9}, {0x7, 0x5, 0x9, 0x7, 0xb424, 0x622}, {0x3ff, 0xa, 0x4, 0x7, 0x1, 0x9}, {0x10001, 0x10000, 0x8, 0x7, 0x800, 0x3}, {0x3, 0x1, 0x10, 0x5, 0x6, 0x7fffffff}, {0x40, 0x814, 0xff, 0x8001, 0x5c68}, {0xbd0, 0x8, 0x7ff, 0x1, 0xe, 0x58bd}, {0x7, 0xb, 0x0, 0x9, 0x3, 0x991}, {0x9, 0x0, 0x1, 0x3, 0x7ab, 0x6}, {0x40, 0x6b2, 0x5, 0x5b, 0x8001, 0x6660}, {0xffffffff, 0x5, 0x80000001, 0x3, 0x4, 0x6}, {0x5, 0x380, 0x8, 0xfffffff9, 0xf, 0x4}, {0x100, 0x1, 0x6, 0x1, 0x7, 0x4}, {0x1, 0x2, 0x9, 0x7ff, 0x9, 0x5}, {0x4, 0x2, 0x4, 0x7fffffff, 0x40800, 0x1b}, {0xadbf, 0xf, 0x30, 0x5, 0x9, 0x81}, {0x58b15257, 0xffe00000, 0x1, 0x9, 0x9, 0x53cdb107}, {0xffffff5f, 0x53, 0x0, 0x2979f181, 0x2, 0x4}, {0x1ff, 0x1, 0x81, 0xffff, 0x8, 0x8}, {0x7, 0x4, 0xfffffffc, 0x5, 0x1f2, 0xda}, {0xfff, 0x6, 0x8, 0x100, 0xc, 0x6}, {0x40, 0x78ff, 0x8001, 0x1, 0x7fff, 0xfff}, {0x5, 0xffffffff, 0x3, 0x8, 0x7, 0x9}, {0x101, 0x7ff, 0x2, 0x200, 0x62d5, 0x6}, {0x6, 0x2, 0x5, 0x0, 0x1, 0x40f}, {0x6, 0x7, 0xcb, 0x3, 0x5, 0x2}, {0x7, 0x80000000, 0x800, 0x0, 0x1, 0x9c}], [{0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x4, 0x90eb88ae049296b3}, {}, {0x4976bd2423f32ea1, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x3}, {0x3}, {0x3}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x1}, {}, {}, {}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x4, 0x27dc3657f5fdbd95}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x68, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8001}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x18, 0x17, [0xe2, 0xffffffff, 0x5, 0x4, 0x2]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) socketpair(0x0, 0x5, 0x5, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fccedf250a0000000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x80, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x84b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x1}, {0x1, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r3) 2.902978046s ago: executing program 3 (id=14078): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.595784525s ago: executing program 5 (id=14079): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03032cbd7000008000001100000008000300", @ANYRES32=r4, @ANYBLOB='\n\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) 2.479446974s ago: executing program 3 (id=14080): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) unshare(0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x18}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c6572300000180012800800e722943856acf766000c0075c3e4af56c77d671ffd942c9f3399dc67c7c5bd439cccfcdc2e3848d74fb69f706dfb11809dd49738a0fe29af362230d361221b118aafb979a5a9d9986e4855979df207c1a8499f33a05a74160ed72093aeda4b7f4cf9a0a196e3b3a6e55309a1306d78733a962700a259f60f45d32b008262b0bfe0fc7d0b3d5c927c0c747cbb13f9959edc6abd0b57cd902f"], 0x48}, 0x1, 0x0, 0x0, 0x20044040}, 0x20040000) sendmmsg(r3, &(0x7f00000004c0), 0x4000000000001f2, 0xfc) socket$netlink(0x10, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x2c, 0x0, 0x21, 0x4070bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x18) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x8004) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000100)={0x0, 0xfffffff8, 0xff, 0x7f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x3b, 0x20}, 0x20) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20000400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r7, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket(0xa, 0x3, 0xff) 2.287308138s ago: executing program 0 (id=14081): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x814) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0xf000}], 0x18}], 0x1, 0x40800) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000100)='\x00', 0xb, 0x1, 0x4c4a, 0x4155, 0x9, 0x1, 0x1, 'syz0\x00'}) 2.250562384s ago: executing program 6 (id=14082): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000000a050000000000000000000500000014000000020a01010000000000000000000000012c000000180a01080000000000000000050000060c00054000000000000000020900010073037a3000000000140000001100010000000000000000000300000a", @ANYRES8=r0, @ANYRES64=r1], 0x7c}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000200", @ANYRESDEC, @ANYBLOB="000000000400"/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000050000000100"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000894) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x0, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x7e}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x5, 0x0) 2.063627809s ago: executing program 5 (id=14083): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0600000058ad000000c42e13b7e92126778f00000004000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r0], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001180)={{r0, &(0x7f00000014c0)='\xe9\xd5\xa4\xd3~\xf8\xfcE\xbe\xbcK\xbe\x16nl8\xf90\xd2C\x8aWd\xf3\x100211\x00\xc26{\xed\xc7\xd0\xfb!\x92%\xfeZ^\xdbx\x88\xaa\x024\xd1\x83\xb5\xa6Lf\xc3\xd0\xde\xc3\xa0\xe2\xee\x12\x03\x00\x00\x00\xed\x03\xc7\x88\xd0\r\xd9\x8b\xe6\x94\xbe\xffB\xd8\x8d\xa8?\x0f\xa2\x88', 0x28000, &(0x7f00000000c0)={@_ha_fsid={[0x6, 0x5]}, {0x6, 0x200, 0x0, 0x100000001}}, 0xf9, &(0x7f0000001880)={@_ha_fsid}, &(0x7f0000000140)=0x5}, {[0xcc, 0x6047, 0x41]}, 0x2, 0xffb, &(0x7f0000001ac0)=""/4091}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bind$inet(r3, &(0x7f0000001800)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000005300)=""/102400, &(0x7f000001e300)=0x19000) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000280), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f00000002c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x5f9200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001980)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a00)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001a40)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000001a80)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) 1.951616655s ago: executing program 0 (id=14084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}}, 0x0) 1.557386983s ago: executing program 5 (id=14085): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x0, 0xc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x6, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x6, 0xc, &(0x7f00000035c0)=ANY=[], &(0x7f0000003600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='dctcp', 0x3) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4, 0x200, @local, 0xa}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001cc0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001d80)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="7a0b000184136a88c5b3116be433e8e7b841e8d425a2df266473235ffcde185f1efbfbd30dd5a536ac89e249444481f6ef0b9d789cf395ecf3a7a2d36ea5b2b5b0429aecc6e17b84d30c128333b8ddbde1ecb016283ba5181f2e8d866bfafaf564f9ec08e86fa10ef1c29e2fa9b9721c0f26763e4674d7ec15e10a48b64e6ebe225bb366f7b6f9839450119e", @ANYRES16=r4, @ANYBLOB="000129bd7000fbdb", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80010) 1.551568677s ago: executing program 0 (id=14086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000700)) 1.427904858s ago: executing program 6 (id=14087): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x1e0, 0x1e0, 0xffffffff, 0x288, 0x288, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x48, {}, [@common=@unspec=@connlabel={{0x28}, {0x40}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@ip={@private=0xa010101, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'gretap0\x00', {}, {0xff}, 0x84, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x300000000000000}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x38}, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 1.195486554s ago: executing program 0 (id=14088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002a00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x3a, &(0x7f0000002d00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0xe0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 934.49815ms ago: executing program 6 (id=14089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x3, @loopback, 0x5}}, 0x0, 0x0, 0x20, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a38ea6c029607462029add09240005c6756267517308a3d40aa1c788df600"}, 0xd8) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000267fff031dbd7002f7dbdf2515000000140038801000ef800c00fd0000000000001000001ce6eb2e6d41ce0529a1535343a612c1bbff9e28cfcf01a3b75f8488590d9862e54e3d595155da53d8065fa2794b104e4f196193750d91f2c26cfec6bfe655bead346a7ec5979d1dc50dea206a12b84810b6"], 0x28}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880180001801400108004000b8004000f0090bb000000000000040002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000540)={0x2, 0x15, @loopback}, 0x10) write(r8, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) r9 = accept4(r7, 0x0, 0x0, 0x0) write(r9, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000006c0)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000780)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800", 0x6c}, {&(0x7f0000000800)="a68cde0d56b170df7710b54f17d9a39c4f98f35471", 0x15}, {&(0x7f0000000840)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000900)="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", 0xcb3}], 0x5}, 0x0) sendmsg$inet(r4, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002740)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c75da010ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e982cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000002800)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000002880)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {0x0}], 0x4, &(0x7f0000003640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5e) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000003680), 0x0) recvmsg$unix(r5, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003740)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120011"], 0x30}}, 0x0) 796.898171ms ago: executing program 5 (id=14090): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 787.952436ms ago: executing program 0 (id=14091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000aa6377a4fd842ddb6c7f723c665c70ff82a58270219fd2361d74452322ed17f01694c52aa0c6a780da", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf251500000004000180180001801400020064756d6d793000"/42], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4008044) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x306) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e24, @local}, {0x1, @broadcast}, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/de\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x8, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000b00), 0x56) sendmsg$kcm(r7, &(0x7f0000000b40)={&(0x7f0000000b80)=@xdp={0x2c, 0x0, r11, 0x21}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000c40)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000c80)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 355.611554ms ago: executing program 5 (id=14092): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x4000000, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 115.427955ms ago: executing program 0 (id=14093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03032cbd7000008000001100000008000300", @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) 0s ago: executing program 5 (id=14094): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x334, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) kernel console output (not intermixed with test programs): d while replacing table [ 1941.658189][T19711] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 1941.684113][T10926] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.684174][T10926] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.684232][T10926] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.684273][T10926] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.268214][T19724] ip_tables: iptables: counters copy to user failed while replacing table [ 1943.059121][T19751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 1943.269215][T19707] rxe_eth0 speed is unknown, defaulting to 1000 [ 1943.550892][T19768] ip_tables: iptables: counters copy to user failed while replacing table [ 1943.611570][ T6103] Bluetooth: hci2: command tx timeout [ 1944.566439][T19796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13413'. [ 1944.675849][T19800] openvswitch: netlink: Multiple metadata blocks provided [ 1945.689687][ T6103] Bluetooth: hci2: command tx timeout [ 1945.901679][T19707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.901877][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.902059][T19707] bridge_slave_0: entered allmulticast mode [ 1945.949003][T19707] bridge_slave_0: entered promiscuous mode [ 1945.975826][T19707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.975955][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.976104][T19707] bridge_slave_1: entered allmulticast mode [ 1946.008998][T19707] bridge_slave_1: entered promiscuous mode [ 1946.163367][T19707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1946.186330][T19707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1946.419736][T19707] team0: Port device team_slave_0 added [ 1946.445152][T19707] team0: Port device team_slave_1 added [ 1946.676061][T19707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1946.676081][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1946.676110][T19707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1946.740410][T19707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1946.740429][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1946.740460][T19707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1946.858517][T19707] hsr_slave_0: entered promiscuous mode [ 1946.866600][T19707] hsr_slave_1: entered promiscuous mode [ 1946.867492][T19707] debugfs: 'hsr0' already exists in 'hsr' [ 1946.867515][T19707] Cannot create hsr debugfs directory [ 1947.503158][T19861] netlink: 'syz.3.13430': attribute type 1 has an invalid length. [ 1947.503187][T19861] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13430'. [ 1947.770786][ T6103] Bluetooth: hci2: command tx timeout [ 1947.876323][T19867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13433'. [ 1947.907297][T19707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1947.968590][T19872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13433'. [ 1948.007808][T19707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1948.022602][T19707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1948.053707][T19707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1948.071194][T19707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1948.104119][T19707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1948.108500][T19707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1948.132733][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13432'. [ 1948.153507][T19707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1948.658061][T19707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1948.763820][T19892] openvswitch: netlink: Multiple metadata blocks provided [ 1948.907441][T19707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1948.988940][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.989063][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1949.043455][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.043577][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.850411][ T6103] Bluetooth: hci2: command tx timeout [ 1951.397399][T19707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1951.888278][T19939] xt_hashlimit: size too large, truncated to 1048576 [ 1952.507009][T19707] veth0_vlan: entered promiscuous mode [ 1952.543035][T19707] veth1_vlan: entered promiscuous mode [ 1952.776682][T19707] veth0_macvtap: entered promiscuous mode [ 1952.822225][T19707] veth1_macvtap: entered promiscuous mode [ 1953.000409][T19707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1953.063609][T19707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1953.083962][T19955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13442'. [ 1953.210216][ T1183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.281337][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.281395][ T1020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.281450][ T1020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.604229][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1953.659877][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1953.689273][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1953.760645][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1953.761366][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1953.871786][T19970] xt_hashlimit: size too large, truncated to 1048576 [ 1954.006096][T19975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13446'. [ 1954.095017][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.095043][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.154718][ T9946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.154744][ T9946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.757698][T19986] syzkaller1: entered promiscuous mode [ 1954.757914][T19986] syzkaller1: entered allmulticast mode [ 1955.502096][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13455'. [ 1955.851530][ T53] Bluetooth: hci6: command tx timeout [ 1956.229679][T19962] rxe_eth0 speed is unknown, defaulting to 1000 [ 1956.911394][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13460'. [ 1957.300966][T20046] ip_tables: iptables: counters copy to user failed while replacing table [ 1957.605597][T20055] FAULT_INJECTION: forcing a failure. [ 1957.605597][T20055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1957.605634][T20055] CPU: 1 UID: 0 PID: 20055 Comm: syz.0.13468 Not tainted syzkaller #0 PREEMPT(full) [ 1957.605660][T20055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1957.605714][T20055] Call Trace: [ 1957.605724][T20055] [ 1957.605734][T20055] dump_stack_lvl+0xe8/0x150 [ 1957.605775][T20055] should_fail_ex+0x410/0x560 [ 1957.605815][T20055] _copy_from_user+0x2d/0xb0 [ 1957.605853][T20055] kstrtouint_from_user+0xd6/0x180 [ 1957.605885][T20055] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1957.605926][T20055] ? lock_acquire+0x115/0x350 [ 1957.605958][T20055] proc_fail_nth_write+0x8e/0x210 [ 1957.605993][T20055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1957.606037][T20055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1957.606071][T20055] vfs_write+0x296/0xba0 [ 1957.606110][T20055] ? __pfx_vfs_write+0x10/0x10 [ 1957.606141][T20055] ? __fget_files+0x2a/0x420 [ 1957.606165][T20055] ? __fget_files+0x3a2/0x420 [ 1957.606190][T20055] ? __fget_files+0x2a/0x420 [ 1957.606221][T20055] ? fdget+0x1ac/0x250 [ 1957.606256][T20055] ksys_write+0x150/0x270 [ 1957.606288][T20055] ? __pfx_ksys_write+0x10/0x10 [ 1957.606331][T20055] do_syscall_64+0x166/0x520 [ 1957.606354][T20055] ? trace_irq_disable+0x3b/0x140 [ 1957.606382][T20055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.606406][T20055] ? clear_bhb_loop+0x70/0xc0 [ 1957.606436][T20055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.606461][T20055] RIP: 0033:0x7fac2915fd8e [ 1957.606483][T20055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1957.606503][T20055] RSP: 002b:00007fac2a116fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1957.606529][T20055] RAX: ffffffffffffffda RBX: 00007fac2a1176c0 RCX: 00007fac2915fd8e [ 1957.606546][T20055] RDX: 0000000000000001 RSI: 00007fac2a1170a0 RDI: 0000000000000004 [ 1957.606571][T20055] RBP: 00007fac2a117090 R08: 0000000000000000 R09: 0000000000000000 [ 1957.606585][T20055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.606600][T20055] R13: 00007fac29426128 R14: 00007fac29426090 R15: 00007ffc3e1f1a58 [ 1957.606640][T20055] [ 1957.930035][ T53] Bluetooth: hci6: command tx timeout [ 1959.317819][T20088] ip_tables: iptables: counters copy to user failed while replacing table [ 1959.355984][T19962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.357737][T19962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.357888][T19962] bridge_slave_0: entered allmulticast mode [ 1959.385561][T19962] bridge_slave_0: entered promiscuous mode [ 1959.399982][T19962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.400636][T19962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.400975][T19962] bridge_slave_1: entered allmulticast mode [ 1959.418529][T19962] bridge_slave_1: entered promiscuous mode [ 1959.715054][T19962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1959.757698][T19962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1960.010617][ T53] Bluetooth: hci6: command tx timeout [ 1960.109963][T19962] team0: Port device team_slave_0 added [ 1960.132789][T19962] team0: Port device team_slave_1 added [ 1960.414355][T19962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1960.414377][T19962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1960.414409][T19962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1960.468673][T19962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1960.468695][T19962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1960.468729][T19962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1960.674799][T20118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13482'. [ 1960.730844][T20121] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1960.781807][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13482'. [ 1960.850617][T20121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1960.885251][T20121] batman_adv: batadv0: Interface activated: veth0 [ 1960.931489][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13482'. [ 1961.155205][T20121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1961.222046][T20121] veth1_vlan: left promiscuous mode [ 1961.227246][T20121] veth0_vlan: left promiscuous mode [ 1961.247606][T20121] veth0_vlan: entered promiscuous mode [ 1961.286729][T20121] veth1_vlan: entered promiscuous mode [ 1961.422170][T20121] veth1_macvtap: left promiscuous mode [ 1961.440060][T20121] veth0_macvtap: left promiscuous mode [ 1961.456329][T20121] veth0_macvtap: entered promiscuous mode [ 1961.527476][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.527592][T10926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.548792][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.548909][T10926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.845807][T20142] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13486'. [ 1962.076452][T19962] hsr_slave_0: entered promiscuous mode [ 1962.094177][T19962] hsr_slave_1: entered promiscuous mode [ 1962.109854][ T53] Bluetooth: hci6: command tx timeout [ 1962.120185][T19962] debugfs: 'hsr0' already exists in 'hsr' [ 1962.120210][T19962] Cannot create hsr debugfs directory [ 1962.837724][T20151] ip_tables: iptables: counters copy to user failed while replacing table [ 1963.470035][T20166] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13493'. [ 1963.553458][T20166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.553780][T20166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.612223][T20169] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13493'. [ 1963.625549][T20169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.625885][T20169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1963.626737][T20169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.627074][T20169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1963.679011][T20169] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13493'. [ 1963.820439][T20171] ip_tables: iptables: counters copy to user failed while replacing table [ 1964.004293][T20169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.004508][T20169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.341785][T20195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13501'. [ 1965.384946][T19962] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1965.418791][T19962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1965.430590][T19962] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1965.456775][T19962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1965.467542][T19962] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1965.488504][T19962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1965.498286][T19962] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1965.520143][T19962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1965.634076][ T53] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 1965.634114][ T53] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1965.728761][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13504'. [ 1965.848022][T20214] ip_tables: iptables: counters copy to user failed while replacing table [ 1965.976489][T19962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1966.031768][T19962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1966.077363][T14592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.077482][T14592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1966.138979][T14592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.139121][T14592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1967.232183][T20246] ip_tables: iptables: counters copy to user failed while replacing table [ 1967.483619][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13515'. [ 1967.905526][T20260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13519'. [ 1968.704734][T20272] syzkaller0: entered promiscuous mode [ 1968.704955][T20272] syzkaller0: entered allmulticast mode [ 1968.777317][T20281] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13525'. [ 1969.213057][ T53] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 1969.213093][ T53] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1971.960028][T19962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1971.962041][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13529'. [ 1972.725836][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13532'. [ 1980.051714][T20326] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 1980.656260][T20345] openvswitch: netlink: Multiple metadata blocks provided [ 1980.826143][T19962] veth0_vlan: entered promiscuous mode [ 1980.863102][T19962] veth1_vlan: entered promiscuous mode [ 1980.918627][T19962] veth0_macvtap: entered promiscuous mode [ 1980.927861][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13542'. [ 1980.946641][T19962] veth1_macvtap: entered promiscuous mode [ 1980.977463][T19962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1981.045442][T19962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1981.133068][T10926] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.149809][T10926] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.150187][T10926] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.150268][T10926] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.603189][T20367] openvswitch: netlink: Multiple metadata blocks provided [ 1981.745016][T20369] openvswitch: netlink: Multiple metadata blocks provided [ 1981.768323][ T9946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.768348][ T9946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.967549][ T9946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.967577][ T9946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.714399][ T53] Bluetooth: hci2: unexpected cc 0x2003 length: 0 < 9 [ 1982.767033][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13547'. [ 1983.104913][T20395] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13549'. [ 1984.297598][T20407] FAULT_INJECTION: forcing a failure. [ 1984.297598][T20407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1984.297638][T20407] CPU: 1 UID: 0 PID: 20407 Comm: syz.0.13553 Not tainted syzkaller #0 PREEMPT(full) [ 1984.297668][T20407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1984.297684][T20407] Call Trace: [ 1984.297696][T20407] [ 1984.297707][T20407] dump_stack_lvl+0xe8/0x150 [ 1984.297753][T20407] should_fail_ex+0x410/0x560 [ 1984.297799][T20407] _copy_to_user+0x31/0xb0 [ 1984.297841][T20407] simple_read_from_buffer+0xe1/0x170 [ 1984.297878][T20407] proc_fail_nth_read+0x1bb/0x230 [ 1984.297926][T20407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1984.297968][T20407] ? rw_verify_area+0x24a/0x4c0 [ 1984.298000][T20407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1984.298037][T20407] vfs_read+0x213/0xa80 [ 1984.298075][T20407] ? __pfx___mutex_lock+0x10/0x10 [ 1984.298104][T20407] ? __pfx_vfs_read+0x10/0x10 [ 1984.298136][T20407] ? __fget_files+0x2a/0x420 [ 1984.298172][T20407] ? __fget_files+0x3a2/0x420 [ 1984.298199][T20407] ? __fget_files+0x2a/0x420 [ 1984.298233][T20407] ? fdget+0x1ac/0x250 [ 1984.298270][T20407] ksys_read+0x150/0x270 [ 1984.298305][T20407] ? __pfx_ksys_read+0x10/0x10 [ 1984.298352][T20407] do_syscall_64+0x166/0x520 [ 1984.298378][T20407] ? trace_irq_disable+0x3b/0x140 [ 1984.298408][T20407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.298434][T20407] ? clear_bhb_loop+0x70/0xc0 [ 1984.298468][T20407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.298493][T20407] RIP: 0033:0x7fac2915fd8e [ 1984.298518][T20407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1984.298540][T20407] RSP: 002b:00007fac2a137fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1984.298569][T20407] RAX: ffffffffffffffda RBX: 00007fac2a1386c0 RCX: 00007fac2915fd8e [ 1984.298589][T20407] RDX: 000000000000000f RSI: 00007fac2a1380a0 RDI: 0000000000000005 [ 1984.298606][T20407] RBP: 00007fac2a138090 R08: 0000000000000000 R09: 0000000000000000 [ 1984.298623][T20407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1984.298639][T20407] R13: 00007fac29426038 R14: 00007fac29425fa0 R15: 00007ffc3e1f1a58 [ 1984.298683][T20407] [ 1984.607534][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13555'. [ 1984.934530][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13556'. [ 1985.861989][T20444] openvswitch: netlink: Multiple metadata blocks provided [ 1985.888379][T20447] netlink: 'syz.3.13564': attribute type 1 has an invalid length. [ 1986.308067][T20456] ip_tables: iptables: counters copy to user failed while replacing table [ 1986.869303][T20467] FAULT_INJECTION: forcing a failure. [ 1986.869303][T20467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1986.869342][T20467] CPU: 1 UID: 0 PID: 20467 Comm: syz.2.13570 Not tainted syzkaller #0 PREEMPT(full) [ 1986.869369][T20467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1986.869385][T20467] Call Trace: [ 1986.869395][T20467] [ 1986.869405][T20467] dump_stack_lvl+0xe8/0x150 [ 1986.869449][T20467] should_fail_ex+0x410/0x560 [ 1986.869489][T20467] _copy_to_user+0x31/0xb0 [ 1986.869526][T20467] simple_read_from_buffer+0xe1/0x170 [ 1986.869558][T20467] proc_fail_nth_read+0x1bb/0x230 [ 1986.869594][T20467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1986.869631][T20467] ? rw_verify_area+0x24a/0x4c0 [ 1986.869669][T20467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1986.869700][T20467] vfs_read+0x213/0xa80 [ 1986.869731][T20467] ? __pfx___mutex_lock+0x10/0x10 [ 1986.869756][T20467] ? __pfx_vfs_read+0x10/0x10 [ 1986.869784][T20467] ? __fget_files+0x2a/0x420 [ 1986.869807][T20467] ? __fget_files+0x3a2/0x420 [ 1986.869829][T20467] ? __fget_files+0x2a/0x420 [ 1986.869858][T20467] ? fdget+0x1ac/0x250 [ 1986.869891][T20467] ksys_read+0x150/0x270 [ 1986.869921][T20467] ? __pfx_ksys_read+0x10/0x10 [ 1986.869963][T20467] do_syscall_64+0x166/0x520 [ 1986.869984][T20467] ? trace_irq_disable+0x3b/0x140 [ 1986.870012][T20467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.870036][T20467] ? clear_bhb_loop+0x70/0xc0 [ 1986.870066][T20467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.870089][T20467] RIP: 0033:0x7fe89555fd8e [ 1986.870111][T20467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1986.870131][T20467] RSP: 002b:00007fe8963b7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1986.870155][T20467] RAX: ffffffffffffffda RBX: 00007fe8963b86c0 RCX: 00007fe89555fd8e [ 1986.870173][T20467] RDX: 000000000000000f RSI: 00007fe8963b80a0 RDI: 0000000000000004 [ 1986.870187][T20467] RBP: 00007fe8963b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.870201][T20467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.870215][T20467] R13: 00007fe895826038 R14: 00007fe895825fa0 R15: 00007fffe5a45748 [ 1986.870254][T20467] [ 1987.123878][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13571'. [ 1987.975612][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13578'. [ 1987.975689][T20490] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13578'. [ 1988.246765][T20496] ip_tables: iptables: counters copy to user failed while replacing table [ 1988.380157][T20499] pim6reg: entered allmulticast mode [ 1988.454947][T20497] pim6reg: left allmulticast mode [ 1988.461552][T20502] FAULT_INJECTION: forcing a failure. [ 1988.461552][T20502] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.461636][T20502] CPU: 1 UID: 0 PID: 20502 Comm: syz.5.13581 Not tainted syzkaller #0 PREEMPT(full) [ 1988.461705][T20502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1988.461745][T20502] Call Trace: [ 1988.461773][T20502] [ 1988.461809][T20502] dump_stack_lvl+0xe8/0x150 [ 1988.461918][T20502] should_fail_ex+0x410/0x560 [ 1988.462012][T20502] ? __alloc_skb+0x1db/0x7a0 [ 1988.462095][T20502] should_failslab+0xa8/0x100 [ 1988.462189][T20502] ? __alloc_skb+0x1db/0x7a0 [ 1988.462261][T20502] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1988.462332][T20502] ? __alloc_skb+0x18d/0x7a0 [ 1988.462414][T20502] ? __alloc_skb+0x1db/0x7a0 [ 1988.462517][T20502] __alloc_skb+0x1db/0x7a0 [ 1988.462604][T20502] netlink_sendmsg+0x5cd/0xb20 [ 1988.462744][T20502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1988.462827][T20502] ? aa_sock_msg_perm+0x144/0x210 [ 1988.462906][T20502] ? apparmor_socket_sendmsg+0x98/0x360 [ 1988.462979][T20502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1988.463053][T20502] sock_sendmsg_nosec+0x14e/0x190 [ 1988.463135][T20502] ____sys_sendmsg+0x54e/0x850 [ 1988.463255][T20502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1988.463377][T20502] ? import_iovec+0x73/0xa0 [ 1988.463478][T20502] ___sys_sendmsg+0x2a5/0x360 [ 1988.463560][T20502] ? __lock_acquire+0x747/0x2de0 [ 1988.463634][T20502] ? __pfx____sys_sendmsg+0x10/0x10 [ 1988.463836][T20502] ? __fget_files+0x3a2/0x420 [ 1988.463902][T20502] ? __fget_files+0x2a/0x420 [ 1988.463936][T20502] __x64_sys_sendmsg+0x1b1/0x290 [ 1988.463962][T20502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1988.464022][T20502] do_syscall_64+0x166/0x520 [ 1988.464043][T20502] ? trace_irq_disable+0x3b/0x140 [ 1988.464070][T20502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.464093][T20502] ? clear_bhb_loop+0x70/0xc0 [ 1988.464122][T20502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.464145][T20502] RIP: 0033:0x7fc23359f559 [ 1988.464166][T20502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1988.464186][T20502] RSP: 002b:00007fc2317ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1988.464210][T20502] RAX: ffffffffffffffda RBX: 00007fc233825fa0 RCX: 00007fc23359f559 [ 1988.464227][T20502] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1988.464243][T20502] RBP: 00007fc2317ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1988.464257][T20502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1988.464271][T20502] R13: 00007fc233826038 R14: 00007fc233825fa0 R15: 00007fff0804d928 [ 1988.464308][T20502] [ 1989.445059][T20519] pim6reg: entered allmulticast mode [ 1989.694539][T20517] pim6reg: left allmulticast mode [ 1989.910413][T20530] pimreg: entered allmulticast mode [ 1989.943335][T20536] xt_IDLETIMER: label is empty or not nul-terminated [ 1989.998727][T20537] bridge: RTM_NEWNEIGH with invalid ether address [ 1990.131088][T20549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13591'. [ 1990.149163][T20549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13591'. [ 1990.856050][T20527] pimreg: left allmulticast mode [ 1991.247548][T20566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13596'. [ 1991.248060][T20570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13596'. [ 1992.060676][T20588] vxcan2: entered allmulticast mode [ 1993.550002][ T53] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1993.556468][T20635] FAULT_INJECTION: forcing a failure. [ 1993.556468][T20635] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.556514][T20635] CPU: 0 UID: 0 PID: 20635 Comm: syz.2.13613 Not tainted syzkaller #0 PREEMPT(full) [ 1993.556543][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1993.556557][T20635] Call Trace: [ 1993.556568][T20635] [ 1993.556579][T20635] dump_stack_lvl+0xe8/0x150 [ 1993.556620][T20635] should_fail_ex+0x410/0x560 [ 1993.556663][T20635] should_failslab+0xa8/0x100 [ 1993.556702][T20635] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1993.556734][T20635] ? lockdep_hardirqs_on+0x7b/0x110 [ 1993.556760][T20635] ? __get_vm_area_node+0x155/0x2f0 [ 1993.556784][T20635] ? __get_vm_area_node+0x155/0x2f0 [ 1993.556822][T20635] __get_vm_area_node+0x155/0x2f0 [ 1993.556856][T20635] __vmalloc_node_range_noprof+0x343/0x1540 [ 1993.556886][T20635] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1993.556931][T20635] ? look_up_lock_class+0x57/0x110 [ 1993.556956][T20635] ? register_lock_class+0x31/0x2e0 [ 1993.556989][T20635] ? __lock_acquire+0x747/0x2de0 [ 1993.557024][T20635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1993.557067][T20635] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1993.557098][T20635] __vmalloc_noprof+0xd2/0x120 [ 1993.557126][T20635] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1993.557163][T20635] bpf_prog_alloc_no_stats+0x47/0x560 [ 1993.557195][T20635] ? bpf_prog_alloc+0x2a/0x1a0 [ 1993.557229][T20635] bpf_prog_alloc+0x3c/0x1a0 [ 1993.557265][T20635] __get_filter+0xf2/0x420 [ 1993.557304][T20635] sk_attach_filter+0x24/0x140 [ 1993.557340][T20635] tun_attach_filter+0x176/0x280 [ 1993.557373][T20635] __tun_chr_ioctl+0x1657/0x1e70 [ 1993.557411][T20635] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1993.557433][T20635] ? __fget_files+0x2a/0x420 [ 1993.557467][T20635] ? __fget_files+0x2a/0x420 [ 1993.557506][T20635] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1993.557533][T20635] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1993.557569][T20635] __se_sys_ioctl+0xfc/0x170 [ 1993.557606][T20635] do_syscall_64+0x166/0x520 [ 1993.557629][T20635] ? trace_irq_disable+0x3b/0x140 [ 1993.557657][T20635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.557682][T20635] ? clear_bhb_loop+0x70/0xc0 [ 1993.557712][T20635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.557737][T20635] RIP: 0033:0x7fe89559f559 [ 1993.557759][T20635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.557779][T20635] RSP: 002b:00007fe8963b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1993.557806][T20635] RAX: ffffffffffffffda RBX: 00007fe895825fa0 RCX: 00007fe89559f559 [ 1993.557824][T20635] RDX: 0000200000000100 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1993.557840][T20635] RBP: 00007fe8963b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.557856][T20635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.557871][T20635] R13: 00007fe895826038 R14: 00007fe895825fa0 R15: 00007fffe5a45748 [ 1993.557912][T20635] [ 1993.628262][T20635] warn_alloc: 1 callbacks suppressed [ 1993.628284][T20635] syz.2.13613: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1993.628426][T20635] CPU: 0 UID: 0 PID: 20635 Comm: syz.2.13613 Not tainted syzkaller #0 PREEMPT(full) [ 1993.628453][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1993.628467][T20635] Call Trace: [ 1993.628478][T20635] [ 1993.628488][T20635] dump_stack_lvl+0xe8/0x150 [ 1993.628529][T20635] warn_alloc+0x24d/0x270 [ 1993.628561][T20635] ? __kasan_kmalloc+0x22/0xb0 [ 1993.628614][T20635] ? __pfx_warn_alloc+0x10/0x10 [ 1993.628643][T20635] ? __get_vm_area_node+0x155/0x2f0 [ 1993.628678][T20635] ? __get_vm_area_node+0x2a9/0x2f0 [ 1993.628713][T20635] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1993.628755][T20635] ? look_up_lock_class+0x57/0x110 [ 1993.628780][T20635] ? register_lock_class+0x31/0x2e0 [ 1993.628812][T20635] ? __lock_acquire+0x747/0x2de0 [ 1993.628846][T20635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1993.628889][T20635] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1993.628920][T20635] __vmalloc_noprof+0xd2/0x120 [ 1993.628948][T20635] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1993.628984][T20635] bpf_prog_alloc_no_stats+0x47/0x560 [ 1993.629015][T20635] ? bpf_prog_alloc+0x2a/0x1a0 [ 1993.629059][T20635] bpf_prog_alloc+0x3c/0x1a0 [ 1993.629093][T20635] __get_filter+0xf2/0x420 [ 1993.629129][T20635] sk_attach_filter+0x24/0x140 [ 1993.629164][T20635] tun_attach_filter+0x176/0x280 [ 1993.629198][T20635] __tun_chr_ioctl+0x1657/0x1e70 [ 1993.629239][T20635] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1993.629262][T20635] ? __fget_files+0x2a/0x420 [ 1993.629297][T20635] ? __fget_files+0x2a/0x420 [ 1993.629335][T20635] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1993.629360][T20635] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1993.629397][T20635] __se_sys_ioctl+0xfc/0x170 [ 1993.629437][T20635] do_syscall_64+0x166/0x520 [ 1993.629458][T20635] ? trace_irq_disable+0x3b/0x140 [ 1993.629486][T20635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.629509][T20635] ? clear_bhb_loop+0x70/0xc0 [ 1993.629537][T20635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.629559][T20635] RIP: 0033:0x7fe89559f559 [ 1993.629580][T20635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.629600][T20635] RSP: 002b:00007fe8963b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1993.629624][T20635] RAX: ffffffffffffffda RBX: 00007fe895825fa0 RCX: 00007fe89559f559 [ 1993.629643][T20635] RDX: 0000200000000100 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1993.629659][T20635] RBP: 00007fe8963b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.629674][T20635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.629688][T20635] R13: 00007fe895826038 R14: 00007fe895825fa0 R15: 00007fffe5a45748 [ 1993.629728][T20635] [ 1993.835983][T20635] Mem-Info: [ 1993.836033][T20635] active_anon:7987 inactive_anon:0 isolated_anon:0 [ 1993.836033][T20635] active_file:45 inactive_file:44988 isolated_file:0 [ 1993.836033][T20635] unevictable:0 dirty:220 writeback:0 [ 1993.836033][T20635] slab_reclaimable:21815 slab_unreclaimable:118731 [ 1993.836033][T20635] mapped:40395 shmem:524 pagetables:5984 [ 1993.836033][T20635] sec_pagetables:0 bounce:0 [ 1993.836033][T20635] kernel_misc_reclaimable:0 [ 1993.836033][T20635] free:1178107 free_pcp:9606 free_cma:0 [ 1993.836212][T20635] Node 0 active_anon:31948kB inactive_anon:0kB active_file:180kB inactive_file:179748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141100kB dirty:876kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14572kB pagetables:23792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1993.836367][T20635] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1993.836514][T20635] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.836687][T20635] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 1993.836792][T20635] Node 0 DMA32 free:824484kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31948kB inactive_anon:0kB active_file:180kB inactive_file:179748kB unevictable:0kB writepending:876kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:38424kB local_pcp:20900kB free_cma:0kB [ 1993.836968][T20635] lowmem_reserve[]: 0 0 0 0 0 [ 1993.837577][T20635] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.837731][T20635] lowmem_reserve[]: 0 0 0 0 0 [ 1993.837834][T20635] Node 1 Normal free:3876680kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.837991][T20635] lowmem_reserve[]: 0 0 0 0 0 [ 1993.838085][T20635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1993.861100][T20635] Node 0 DMA32: 1181*4kB (M) 1036*8kB (UME) 819*16kB (UME) 1578*32kB (UME) 817*64kB (UME) 854*128kB (UME) 610*256kB (UME) 372*512kB (UME) 190*1024kB (UME) 8*2048kB (UME) 7*4096kB (U) = 824452kB [ 1993.861286][T20635] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1993.861398][T20635] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 6*16kB (UM) 4*32kB (UM) 9*64kB (UM) 6*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 945*4096kB (UM) = 3876680kB [ 1993.861578][T20635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.861597][T20635] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1993.861615][T20635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.861634][T20635] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1993.861652][T20635] 45552 total pagecache pages [ 1993.861662][T20635] 0 pages in swap cache [ 1993.861671][T20635] Free swap = 124996kB [ 1993.861680][T20635] Total swap = 124996kB [ 1993.861690][T20635] 2097051 pages RAM [ 1993.861699][T20635] 0 pages HighMem/MovableOnly [ 1993.861708][T20635] 433831 pages reserved [ 1993.861717][T20635] 0 pages cma reserved [ 1996.219689][T20680] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13624'. [ 1997.217692][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13633'. [ 1997.358592][ T53] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 1997.358628][ T53] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1997.395961][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13635'. [ 1997.658517][T20720] ip_tables: iptables: counters copy to user failed while replacing table [ 1997.670991][T20720] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 1997.800713][T20722] FAULT_INJECTION: forcing a failure. [ 1997.800713][T20722] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.800757][T20722] CPU: 0 UID: 0 PID: 20722 Comm: syz.0.13637 Not tainted syzkaller #0 PREEMPT(full) [ 1997.800788][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1997.800806][T20722] Call Trace: [ 1997.800817][T20722] [ 1997.800829][T20722] dump_stack_lvl+0xe8/0x150 [ 1997.800880][T20722] should_fail_ex+0x410/0x560 [ 1997.800926][T20722] should_failslab+0xa8/0x100 [ 1997.800970][T20722] __kmalloc_cache_noprof+0x9e/0x600 [ 1997.801007][T20722] ? xfrm_policy_alloc+0x78/0x2b0 [ 1997.801058][T20722] ? xfrm_policy_alloc+0x78/0x2b0 [ 1997.801096][T20722] ? __lock_acquire+0x747/0x2de0 [ 1997.801131][T20722] xfrm_policy_alloc+0x78/0x2b0 [ 1997.801171][T20722] xfrm_policy_construct+0x39/0x6b0 [ 1997.801216][T20722] xfrm_add_policy+0x273/0x690 [ 1997.801252][T20722] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1997.801276][T20722] ? apparmor_capable+0x126/0x170 [ 1997.801322][T20722] ? __nla_parse+0x40/0x60 [ 1997.801355][T20722] xfrm_user_rcv_msg+0x7a8/0xf30 [ 1997.801390][T20722] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1997.801460][T20722] ? __mutex_trylock_common+0x15f/0x270 [ 1997.801499][T20722] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1997.801539][T20722] ? rcu_is_watching+0x16/0xb0 [ 1997.801574][T20722] ? trace_contention_end+0x3d/0x140 [ 1997.801621][T20722] netlink_rcv_skb+0x226/0x4a0 [ 1997.801655][T20722] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1997.801685][T20722] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1997.801746][T20722] ? netlink_deliver_tap+0x2e/0x1b0 [ 1997.801779][T20722] ? netlink_deliver_tap+0x2e/0x1b0 [ 1997.801815][T20722] xfrm_netlink_rcv+0x79/0x90 [ 1997.801842][T20722] netlink_unicast+0x8ef/0xa80 [ 1997.801894][T20722] netlink_sendmsg+0x7f0/0xb20 [ 1997.801936][T20722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1997.801975][T20722] ? aa_sock_msg_perm+0x144/0x210 [ 1997.802014][T20722] ? apparmor_socket_sendmsg+0x98/0x360 [ 1997.802046][T20722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1997.802078][T20722] sock_sendmsg_nosec+0x14e/0x190 [ 1997.802114][T20722] ____sys_sendmsg+0x54e/0x850 [ 1997.802162][T20722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1997.802214][T20722] ? import_iovec+0x73/0xa0 [ 1997.802256][T20722] ___sys_sendmsg+0x2a5/0x360 [ 1997.802293][T20722] ? __lock_acquire+0x747/0x2de0 [ 1997.802348][T20722] ? __pfx____sys_sendmsg+0x10/0x10 [ 1997.802440][T20722] ? __fget_files+0x3a2/0x420 [ 1997.802468][T20722] ? __fget_files+0x2a/0x420 [ 1997.802510][T20722] __x64_sys_sendmsg+0x1b1/0x290 [ 1997.802541][T20722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1997.802612][T20722] do_syscall_64+0x166/0x520 [ 1997.802638][T20722] ? trace_irq_disable+0x3b/0x140 [ 1997.802669][T20722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.802705][T20722] ? clear_bhb_loop+0x70/0xc0 [ 1997.802739][T20722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.802766][T20722] RIP: 0033:0x7fac2919f559 [ 1997.802791][T20722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1997.802814][T20722] RSP: 002b:00007fac2a138028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1997.802843][T20722] RAX: ffffffffffffffda RBX: 00007fac29425fa0 RCX: 00007fac2919f559 [ 1997.802864][T20722] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1997.802881][T20722] RBP: 00007fac2a138090 R08: 0000000000000000 R09: 0000000000000000 [ 1997.802898][T20722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.802915][T20722] R13: 00007fac29426038 R14: 00007fac29425fa0 R15: 00007ffc3e1f1a58 [ 1997.802959][T20722] [ 1998.841362][T20732] ip_tables: iptables: counters copy to user failed while replacing table [ 1998.848375][T20732] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 1999.224691][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13646'. [ 1999.276561][T20748] FAULT_INJECTION: forcing a failure. [ 1999.276561][T20748] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.276598][T20748] CPU: 1 UID: 0 PID: 20748 Comm: syz.2.13648 Not tainted syzkaller #0 PREEMPT(full) [ 1999.276625][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1999.276640][T20748] Call Trace: [ 1999.276650][T20748] [ 1999.276661][T20748] dump_stack_lvl+0xe8/0x150 [ 1999.276701][T20748] should_fail_ex+0x410/0x560 [ 1999.276741][T20748] should_failslab+0xa8/0x100 [ 1999.276778][T20748] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1999.276815][T20748] ? __get_vm_area_node+0x155/0x2f0 [ 1999.276838][T20748] ? __get_vm_area_node+0x155/0x2f0 [ 1999.276871][T20748] __get_vm_area_node+0x155/0x2f0 [ 1999.276895][T20748] ? __pfx_process_measurement+0x10/0x10 [ 1999.276925][T20748] __vmalloc_node_range_noprof+0x343/0x1540 [ 1999.276954][T20748] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1999.276986][T20748] ? __lock_acquire+0x747/0x2de0 [ 1999.277040][T20748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1999.277080][T20748] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1999.277109][T20748] __vmalloc_noprof+0xd2/0x120 [ 1999.277143][T20748] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1999.277177][T20748] bpf_prog_alloc_no_stats+0x47/0x560 [ 1999.277207][T20748] ? bpf_prog_alloc+0x2a/0x1a0 [ 1999.277239][T20748] bpf_prog_alloc+0x3c/0x1a0 [ 1999.277274][T20748] bpf_prog_load+0x7f8/0x1c20 [ 1999.277319][T20748] ? __pfx_bpf_prog_load+0x10/0x10 [ 1999.277381][T20748] __sys_bpf+0xd0d/0xd90 [ 1999.277421][T20748] ? __pfx___sys_bpf+0x10/0x10 [ 1999.277463][T20748] ? __fget_files+0x2a/0x420 [ 1999.277509][T20748] ? ksys_write+0x242/0x270 [ 1999.277539][T20748] ? __pfx_ksys_write+0x10/0x10 [ 1999.277573][T20748] __x64_sys_bpf+0xba/0xd0 [ 1999.277612][T20748] do_syscall_64+0x166/0x520 [ 1999.277635][T20748] ? trace_irq_disable+0x3b/0x140 [ 1999.277662][T20748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1999.277686][T20748] ? clear_bhb_loop+0x70/0xc0 [ 1999.277715][T20748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1999.277738][T20748] RIP: 0033:0x7fe89559f559 [ 1999.277759][T20748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1999.277779][T20748] RSP: 002b:00007fe8963b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1999.277805][T20748] RAX: ffffffffffffffda RBX: 00007fe895825fa0 RCX: 00007fe89559f559 [ 1999.277823][T20748] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1999.277838][T20748] RBP: 00007fe8963b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1999.277853][T20748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1999.277867][T20748] R13: 00007fe895826038 R14: 00007fe895825fa0 R15: 00007fffe5a45748 [ 1999.277905][T20748] [ 1999.682319][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13647'. [ 1999.752640][T20746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13647'. [ 2000.343237][T20757] netlink: 'syz.2.13650': attribute type 9 has an invalid length. [ 2000.343268][T20757] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13650'. [ 2000.859916][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13653'. [ 2001.445043][T20787] FAULT_INJECTION: forcing a failure. [ 2001.445043][T20787] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.445082][T20787] CPU: 1 UID: 0 PID: 20787 Comm: syz.0.13655 Not tainted syzkaller #0 PREEMPT(full) [ 2001.445109][T20787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2001.445124][T20787] Call Trace: [ 2001.445134][T20787] [ 2001.445145][T20787] dump_stack_lvl+0xe8/0x150 [ 2001.445186][T20787] should_fail_ex+0x410/0x560 [ 2001.445228][T20787] should_failslab+0xa8/0x100 [ 2001.445269][T20787] __kmalloc_noprof+0xf9/0x710 [ 2001.445297][T20787] ? count_memcg_event_mm+0x21/0x260 [ 2001.445321][T20787] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2001.445345][T20787] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2001.445379][T20787] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2001.445413][T20787] genl_family_rcv_msg_doit+0xda/0x340 [ 2001.445470][T20787] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2001.445512][T20787] ? __pfx_genl_get_cmd+0x10/0x10 [ 2001.445544][T20787] ? __pfx_ovs_dp_cmd_get+0x10/0x10 [ 2001.445577][T20787] ? __pfx_ovs_dp_cmd_dump+0x10/0x10 [ 2001.445611][T20787] ? __lock_acquire+0x747/0x2de0 [ 2001.445647][T20787] genl_rcv_msg+0x614/0x7a0 [ 2001.445691][T20787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2001.445726][T20787] ? __pfx_ovs_dp_cmd_get+0x10/0x10 [ 2001.445777][T20787] netlink_rcv_skb+0x226/0x4a0 [ 2001.445809][T20787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2001.445846][T20787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2001.445893][T20787] ? down_read+0x2b9/0x320 [ 2001.445925][T20787] genl_rcv+0x28/0x40 [ 2001.445968][T20787] netlink_unicast+0x8ef/0xa80 [ 2001.446017][T20787] netlink_sendmsg+0x7f0/0xb20 [ 2001.446056][T20787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2001.446090][T20787] ? aa_sock_msg_perm+0x144/0x210 [ 2001.446126][T20787] ? apparmor_socket_sendmsg+0x98/0x360 [ 2001.446155][T20787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2001.446184][T20787] sock_sendmsg_nosec+0x14e/0x190 [ 2001.446217][T20787] ____sys_sendmsg+0x54e/0x850 [ 2001.446258][T20787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2001.446306][T20787] ? import_iovec+0x73/0xa0 [ 2001.446345][T20787] ___sys_sendmsg+0x2a5/0x360 [ 2001.446378][T20787] ? __lock_acquire+0x747/0x2de0 [ 2001.446410][T20787] ? __pfx____sys_sendmsg+0x10/0x10 [ 2001.446492][T20787] ? __fget_files+0x3a2/0x420 [ 2001.446517][T20787] ? __fget_files+0x2a/0x420 [ 2001.446555][T20787] __x64_sys_sendmsg+0x1b1/0x290 [ 2001.446581][T20787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2001.446642][T20787] do_syscall_64+0x166/0x520 [ 2001.446664][T20787] ? trace_irq_disable+0x3b/0x140 [ 2001.446691][T20787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.446715][T20787] ? clear_bhb_loop+0x70/0xc0 [ 2001.446744][T20787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.446768][T20787] RIP: 0033:0x7fac2919f559 [ 2001.446789][T20787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2001.446810][T20787] RSP: 002b:00007fac2a138028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.446834][T20787] RAX: ffffffffffffffda RBX: 00007fac29425fa0 RCX: 00007fac2919f559 [ 2001.446852][T20787] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2001.446867][T20787] RBP: 00007fac2a138090 R08: 0000000000000000 R09: 0000000000000000 [ 2001.446882][T20787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2001.446896][T20787] R13: 00007fac29426038 R14: 00007fac29425fa0 R15: 00007ffc3e1f1a58 [ 2001.446946][T20787] [ 2002.191943][ T9963] hid-generic 0005:04F3:4955.0001: unknown main item tag 0x0 [ 2002.241216][ T9963] hid-generic 0005:04F3:4955.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 2002.309577][T20801] FAULT_INJECTION: forcing a failure. [ 2002.309577][T20801] name failslab, interval 1, probability 0, space 0, times 0 [ 2002.309615][T20801] CPU: 0 UID: 0 PID: 20801 Comm: syz.2.13661 Not tainted syzkaller #0 PREEMPT(full) [ 2002.309642][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2002.309657][T20801] Call Trace: [ 2002.309666][T20801] [ 2002.309677][T20801] dump_stack_lvl+0xe8/0x150 [ 2002.309717][T20801] should_fail_ex+0x410/0x560 [ 2002.309757][T20801] should_failslab+0xa8/0x100 [ 2002.309794][T20801] __kvmalloc_node_noprof+0x171/0x820 [ 2002.309830][T20801] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 2002.309860][T20801] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 2002.309898][T20801] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 2002.309932][T20801] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 2002.309976][T20801] ? __mutex_unlock_slowpath+0x731/0x900 [ 2002.310007][T20801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2002.310036][T20801] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2002.310068][T20801] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2002.310113][T20801] ? 0xffffffffa0403bd8 [ 2002.310165][T20801] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2002.310205][T20801] ? _copy_from_user+0x94/0xb0 [ 2002.310240][T20801] ? bpf_test_init+0x113/0x150 [ 2002.310266][T20801] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2002.310304][T20801] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 2002.310353][T20801] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2002.310388][T20801] ? __fget_files+0x2a/0x420 [ 2002.310420][T20801] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2002.310452][T20801] bpf_prog_test_run+0x2c5/0x340 [ 2002.310489][T20801] __sys_bpf+0xa22/0xd90 [ 2002.310529][T20801] ? __pfx___sys_bpf+0x10/0x10 [ 2002.310573][T20801] ? __fget_files+0x2a/0x420 [ 2002.310618][T20801] ? ksys_write+0x242/0x270 [ 2002.310648][T20801] ? __pfx_ksys_write+0x10/0x10 [ 2002.310682][T20801] __x64_sys_bpf+0xba/0xd0 [ 2002.310713][T20801] do_syscall_64+0x166/0x520 [ 2002.310735][T20801] ? trace_irq_disable+0x3b/0x140 [ 2002.310762][T20801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.310786][T20801] ? clear_bhb_loop+0x70/0xc0 [ 2002.310815][T20801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.310838][T20801] RIP: 0033:0x7fe89559f559 [ 2002.310859][T20801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2002.310881][T20801] RSP: 002b:00007fe8963b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2002.310906][T20801] RAX: ffffffffffffffda RBX: 00007fe895825fa0 RCX: 00007fe89559f559 [ 2002.310925][T20801] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 2002.310947][T20801] RBP: 00007fe8963b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2002.310963][T20801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2002.310977][T20801] R13: 00007fe895826038 R14: 00007fe895825fa0 R15: 00007fffe5a45748 [ 2002.311016][T20801] [ 2003.366254][T20815] syzkaller0: entered promiscuous mode [ 2003.366458][T20815] syzkaller0: entered allmulticast mode [ 2003.910855][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13668'. [ 2004.513459][T20845] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13671'. [ 2004.723670][T20851] netlink: 104 bytes leftover after parsing attributes in process `syz.6.13674'. [ 2004.723716][T20851] FAULT_INJECTION: forcing a failure. [ 2004.723716][T20851] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.723747][T20851] CPU: 0 UID: 0 PID: 20851 Comm: syz.6.13674 Not tainted syzkaller #0 PREEMPT(full) [ 2004.723774][T20851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2004.723788][T20851] Call Trace: [ 2004.723798][T20851] [ 2004.723809][T20851] dump_stack_lvl+0xe8/0x150 [ 2004.723864][T20851] should_fail_ex+0x410/0x560 [ 2004.723902][T20851] ? __alloc_skb+0x1db/0x7a0 [ 2004.723934][T20851] should_failslab+0xa8/0x100 [ 2004.723970][T20851] ? __alloc_skb+0x1db/0x7a0 [ 2004.724000][T20851] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 2004.724028][T20851] ? __alloc_skb+0x18d/0x7a0 [ 2004.724061][T20851] ? __alloc_skb+0x1db/0x7a0 [ 2004.724100][T20851] __alloc_skb+0x1db/0x7a0 [ 2004.724137][T20851] xfrm_get_policy+0x563/0xbf0 [ 2004.724162][T20851] ? __pfx___nla_validate_parse+0x10/0x10 [ 2004.724200][T20851] ? __pfx_xfrm_get_policy+0x10/0x10 [ 2004.724229][T20851] ? apparmor_capable+0x126/0x170 [ 2004.724270][T20851] ? __nla_parse+0x40/0x60 [ 2004.724298][T20851] xfrm_user_rcv_msg+0x7a8/0xf30 [ 2004.724329][T20851] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2004.724391][T20851] ? __mutex_trylock_common+0x15f/0x270 [ 2004.724426][T20851] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2004.724461][T20851] ? rcu_is_watching+0x16/0xb0 [ 2004.724496][T20851] ? trace_contention_end+0x3d/0x140 [ 2004.724536][T20851] netlink_rcv_skb+0x226/0x4a0 [ 2004.724569][T20851] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2004.724596][T20851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2004.724645][T20851] ? netlink_deliver_tap+0x2e/0x1b0 [ 2004.724675][T20851] ? netlink_deliver_tap+0x2e/0x1b0 [ 2004.724714][T20851] xfrm_netlink_rcv+0x79/0x90 [ 2004.724739][T20851] netlink_unicast+0x8ef/0xa80 [ 2004.724785][T20851] netlink_sendmsg+0x7f0/0xb20 [ 2004.724822][T20851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2004.724856][T20851] ? aa_sock_msg_perm+0x144/0x210 [ 2004.724891][T20851] ? apparmor_socket_sendmsg+0x98/0x360 [ 2004.724918][T20851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2004.724946][T20851] sock_sendmsg_nosec+0x14e/0x190 [ 2004.724978][T20851] ____sys_sendmsg+0x54e/0x850 [ 2004.725019][T20851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2004.725066][T20851] ? import_iovec+0x73/0xa0 [ 2004.725104][T20851] ___sys_sendmsg+0x2a5/0x360 [ 2004.725137][T20851] ? __lock_acquire+0x747/0x2de0 [ 2004.725168][T20851] ? __pfx____sys_sendmsg+0x10/0x10 [ 2004.725247][T20851] ? __fget_files+0x3a2/0x420 [ 2004.725271][T20851] ? __fget_files+0x2a/0x420 [ 2004.725306][T20851] __x64_sys_sendmsg+0x1b1/0x290 [ 2004.725332][T20851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2004.725393][T20851] do_syscall_64+0x166/0x520 [ 2004.725415][T20851] ? trace_irq_disable+0x3b/0x140 [ 2004.725461][T20851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.725484][T20851] ? clear_bhb_loop+0x70/0xc0 [ 2004.725514][T20851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.725538][T20851] RIP: 0033:0x7f849eb9f559 [ 2004.725559][T20851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2004.725579][T20851] RSP: 002b:00007f849fb31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2004.725604][T20851] RAX: ffffffffffffffda RBX: 00007f849ee25fa0 RCX: 00007f849eb9f559 [ 2004.725622][T20851] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2004.725637][T20851] RBP: 00007f849fb31090 R08: 0000000000000000 R09: 0000000000000000 [ 2004.725652][T20851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2004.725667][T20851] R13: 00007f849ee26038 R14: 00007f849ee25fa0 R15: 00007ffd881c82d8 [ 2004.725712][T20851] [ 2012.109068][T20874] FAULT_INJECTION: forcing a failure. [ 2012.109068][T20874] name failslab, interval 1, probability 0, space 0, times 0 [ 2012.109106][T20874] CPU: 0 UID: 0 PID: 20874 Comm: syz.3.13680 Not tainted syzkaller #0 PREEMPT(full) [ 2012.109131][T20874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2012.109146][T20874] Call Trace: [ 2012.109154][T20874] [ 2012.109165][T20874] dump_stack_lvl+0xe8/0x150 [ 2012.109204][T20874] should_fail_ex+0x410/0x560 [ 2012.109243][T20874] should_failslab+0xa8/0x100 [ 2012.109280][T20874] __kmalloc_noprof+0xf9/0x710 [ 2012.109309][T20874] ? bpf_test_init+0x9f/0x150 [ 2012.109335][T20874] ? bpf_test_init+0x9f/0x150 [ 2012.109369][T20874] bpf_test_init+0x9f/0x150 [ 2012.109402][T20874] bpf_prog_test_run_skb+0x31e/0x2230 [ 2012.109447][T20874] ? __fget_files+0x2a/0x420 [ 2012.109475][T20874] ? __fget_files+0x2a/0x420 [ 2012.109497][T20874] ? __fget_files+0x3a2/0x420 [ 2012.109519][T20874] ? __fget_files+0x2a/0x420 [ 2012.109550][T20874] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2012.109578][T20874] bpf_prog_test_run+0x2c5/0x340 [ 2012.109617][T20874] __sys_bpf+0xa22/0xd90 [ 2012.109657][T20874] ? __pfx___sys_bpf+0x10/0x10 [ 2012.109710][T20874] ? __fget_files+0x2a/0x420 [ 2012.109755][T20874] ? ksys_write+0x242/0x270 [ 2012.109783][T20874] ? __pfx_ksys_write+0x10/0x10 [ 2012.109817][T20874] __x64_sys_bpf+0xba/0xd0 [ 2012.109849][T20874] do_syscall_64+0x166/0x520 [ 2012.109872][T20874] ? trace_irq_disable+0x3b/0x140 [ 2012.109899][T20874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2012.109922][T20874] ? clear_bhb_loop+0x70/0xc0 [ 2012.109951][T20874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2012.109974][T20874] RIP: 0033:0x7f53cd79f559 [ 2012.109996][T20874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2012.110016][T20874] RSP: 002b:00007f53ce6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2012.110042][T20874] RAX: ffffffffffffffda RBX: 00007f53cda25fa0 RCX: 00007f53cd79f559 [ 2012.110059][T20874] RDX: 0000000000000050 RSI: 0000200000002000 RDI: 000000000000000a [ 2012.110075][T20874] RBP: 00007f53ce6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2012.110089][T20874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2012.110103][T20874] R13: 00007f53cda26038 R14: 00007f53cda25fa0 R15: 00007fffb73bc098 [ 2012.110141][T20874] [ 2012.974505][T20897] FAULT_INJECTION: forcing a failure. [ 2012.974505][T20897] name failslab, interval 1, probability 0, space 0, times 0 [ 2012.974544][T20897] CPU: 0 UID: 0 PID: 20897 Comm: syz.3.13685 Not tainted syzkaller #0 PREEMPT(full) [ 2012.974571][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2012.974587][T20897] Call Trace: [ 2012.974596][T20897] [ 2012.974607][T20897] dump_stack_lvl+0xe8/0x150 [ 2012.974657][T20897] should_fail_ex+0x410/0x560 [ 2012.974700][T20897] should_failslab+0xa8/0x100 [ 2012.974740][T20897] __kmalloc_cache_noprof+0x9e/0x600 [ 2012.974772][T20897] ? ip_set_create+0x38f/0x1a50 [ 2012.974803][T20897] ? ip_set_create+0x38f/0x1a50 [ 2012.974843][T20897] ip_set_create+0x38f/0x1a50 [ 2012.974885][T20897] ? rcu_is_watching+0x16/0xb0 [ 2012.974924][T20897] ? __pfx_ip_set_create+0x10/0x10 [ 2012.974961][T20897] ? lock_acquire+0x115/0x350 [ 2012.975030][T20897] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 2012.975061][T20897] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 2012.975113][T20897] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2012.975185][T20897] ? hook_capable+0x1c3/0x5e0 [ 2012.975229][T20897] netlink_rcv_skb+0x226/0x4a0 [ 2012.975261][T20897] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2012.975292][T20897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2012.975337][T20897] ? bpf_lsm_capable+0x9/0x20 [ 2012.975363][T20897] ? security_capable+0x7e/0x2c0 [ 2012.975400][T20897] nfnetlink_rcv+0x2b9/0x28c0 [ 2012.975436][T20897] ? __dev_queue_xmit+0x29b/0x3920 [ 2012.975467][T20897] ? __local_bh_enable_ip+0xd6/0x140 [ 2012.975495][T20897] ? lockdep_hardirqs_on+0x7b/0x110 [ 2012.975519][T20897] ? __dev_queue_xmit+0x29b/0x3920 [ 2012.975542][T20897] ? __local_bh_enable_ip+0xd6/0x140 [ 2012.975569][T20897] ? __dev_queue_xmit+0x29b/0x3920 [ 2012.975603][T20897] ? __dev_queue_xmit+0x1efb/0x3920 [ 2012.975632][T20897] ? __dev_queue_xmit+0x29b/0x3920 [ 2012.975671][T20897] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2012.975707][T20897] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2012.975743][T20897] ? __copy_skb_header+0xa3/0x4a0 [ 2012.975789][T20897] ? skb_clone+0x246/0x3a0 [ 2012.975815][T20897] ? __netlink_deliver_tap+0x681/0x6e0 [ 2012.975842][T20897] ? netlink_deliver_tap+0x2e/0x1b0 [ 2012.975877][T20897] ? netlink_deliver_tap+0x2e/0x1b0 [ 2012.975905][T20897] ? netlink_deliver_tap+0x2e/0x1b0 [ 2012.975939][T20897] netlink_unicast+0x8ef/0xa80 [ 2012.975984][T20897] netlink_sendmsg+0x7f0/0xb20 [ 2012.976020][T20897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2012.976053][T20897] ? aa_sock_msg_perm+0x144/0x210 [ 2012.976088][T20897] ? apparmor_socket_sendmsg+0x98/0x360 [ 2012.976115][T20897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2012.976143][T20897] sock_sendmsg_nosec+0x14e/0x190 [ 2012.976174][T20897] ____sys_sendmsg+0x54e/0x850 [ 2012.976215][T20897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2012.976259][T20897] ? import_iovec+0x73/0xa0 [ 2012.976296][T20897] ___sys_sendmsg+0x2a5/0x360 [ 2012.976328][T20897] ? __lock_acquire+0x747/0x2de0 [ 2012.976358][T20897] ? __pfx____sys_sendmsg+0x10/0x10 [ 2012.976436][T20897] ? __fget_files+0x3a2/0x420 [ 2012.976459][T20897] ? __fget_files+0x2a/0x420 [ 2012.976494][T20897] __x64_sys_sendmsg+0x1b1/0x290 [ 2012.976520][T20897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2012.976582][T20897] do_syscall_64+0x166/0x520 [ 2012.976604][T20897] ? trace_irq_disable+0x3b/0x140 [ 2012.976632][T20897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2012.976662][T20897] ? clear_bhb_loop+0x70/0xc0 [ 2012.976692][T20897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2012.976715][T20897] RIP: 0033:0x7f53cd79f559 [ 2012.976737][T20897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2012.976758][T20897] RSP: 002b:00007f53ce6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2012.976783][T20897] RAX: ffffffffffffffda RBX: 00007f53cda25fa0 RCX: 00007f53cd79f559 [ 2012.976801][T20897] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 2012.976816][T20897] RBP: 00007f53ce6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2012.976831][T20897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2012.976845][T20897] R13: 00007f53cda26038 R14: 00007f53cda25fa0 R15: 00007fffb73bc098 [ 2012.976884][T20897] [ 2013.486383][T20901] netlink: 'syz.3.13689': attribute type 10 has an invalid length. [ 2013.543414][T20899] sctp: [Deprecated]: syz.0.13686 (pid 20899) Use of int in max_burst socket option. [ 2013.543414][T20899] Use struct sctp_assoc_value instead [ 2013.587094][T20904] ip_tables: iptables: counters copy to user failed while replacing table [ 2013.588025][T20904] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 2013.726503][T20910] pim6reg: entered allmulticast mode [ 2013.814589][ T53] Bluetooth: hci6: unexpected cc 0x2003 length: 0 < 9 [ 2013.851492][T20912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13687'. [ 2013.876499][T20915] FAULT_INJECTION: forcing a failure. [ 2013.876499][T20915] name failslab, interval 1, probability 0, space 0, times 0 [ 2013.876536][T20915] CPU: 0 UID: 0 PID: 20915 Comm: syz.5.13693 Not tainted syzkaller #0 PREEMPT(full) [ 2013.876563][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2013.876577][T20915] Call Trace: [ 2013.876587][T20915] [ 2013.876598][T20915] dump_stack_lvl+0xe8/0x150 [ 2013.876638][T20915] should_fail_ex+0x410/0x560 [ 2013.876681][T20915] should_failslab+0xa8/0x100 [ 2013.876717][T20915] ? skb_clone+0x212/0x3a0 [ 2013.876742][T20915] kmem_cache_alloc_noprof+0x9c/0x600 [ 2013.876775][T20915] ? skb_clone+0x212/0x3a0 [ 2013.876808][T20915] skb_clone+0x212/0x3a0 [ 2013.876837][T20915] __netlink_deliver_tap+0x355/0x6e0 [ 2013.876882][T20915] ? netlink_deliver_tap+0x2e/0x1b0 [ 2013.876915][T20915] netlink_deliver_tap+0x19c/0x1b0 [ 2013.876947][T20915] netlink_unicast+0x8c1/0xa80 [ 2013.876996][T20915] netlink_sendmsg+0x7f0/0xb20 [ 2013.877033][T20915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2013.877067][T20915] ? aa_sock_msg_perm+0x144/0x210 [ 2013.877110][T20915] ? apparmor_socket_sendmsg+0x18b/0x360 [ 2013.877138][T20915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2013.877167][T20915] sock_sendmsg_nosec+0x14e/0x190 [ 2013.877198][T20915] ____sys_sendmsg+0x54e/0x850 [ 2013.877239][T20915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2013.877286][T20915] ? import_iovec+0x73/0xa0 [ 2013.877322][T20915] ___sys_sendmsg+0x2a5/0x360 [ 2013.877356][T20915] ? __lock_acquire+0x747/0x2de0 [ 2013.877387][T20915] ? __pfx____sys_sendmsg+0x10/0x10 [ 2013.877469][T20915] ? __fget_files+0x3a2/0x420 [ 2013.877493][T20915] ? __fget_files+0x2a/0x420 [ 2013.877529][T20915] __x64_sys_sendmsg+0x1b1/0x290 [ 2013.877556][T20915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2013.877618][T20915] do_syscall_64+0x166/0x520 [ 2013.877641][T20915] ? trace_irq_disable+0x3b/0x140 [ 2013.877667][T20915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.877691][T20915] ? clear_bhb_loop+0x70/0xc0 [ 2013.877719][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.877741][T20915] RIP: 0033:0x7fc23359f559 [ 2013.877763][T20915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2013.877783][T20915] RSP: 002b:00007fc2317ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2013.877807][T20915] RAX: ffffffffffffffda RBX: 00007fc233825fa0 RCX: 00007fc23359f559 [ 2013.877824][T20915] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 2013.877840][T20915] RBP: 00007fc2317ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2013.877854][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2013.877869][T20915] R13: 00007fc233826038 R14: 00007fc233825fa0 R15: 00007fff0804d928 [ 2013.877906][T20915] [ 2014.676936][T20932] netlink: 'syz.0.13695': attribute type 30 has an invalid length. [ 2014.816156][T20934] ip_tables: iptables: counters copy to user failed while replacing table [ 2014.909360][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13696'. [ 2014.910902][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13696'. [ 2015.088363][T20932] bond1: option arp_missed_max: invalid value (0) [ 2015.088391][T20932] bond1: option arp_missed_max: allowed values 1 - 255 [ 2015.176885][T20932] bond1 (unregistering): Released all slaves [ 2015.231640][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13696'. [ 2015.231705][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13696'. [ 2015.967287][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13700'. [ 2016.108580][T20957] gretap0: entered promiscuous mode [ 2016.108890][T20957] macvlan2: entered promiscuous mode [ 2016.145300][T20957] gretap0: left promiscuous mode [ 2016.311675][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13703'. [ 2016.311703][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13703'. [ 2016.567873][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13704'. [ 2016.584719][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13704'. [ 2016.735187][T20977] FAULT_INJECTION: forcing a failure. [ 2016.735187][T20977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.735225][T20977] CPU: 0 UID: 0 PID: 20977 Comm: syz.0.13706 Not tainted syzkaller #0 PREEMPT(full) [ 2016.735251][T20977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2016.735266][T20977] Call Trace: [ 2016.735276][T20977] [ 2016.735287][T20977] dump_stack_lvl+0xe8/0x150 [ 2016.735330][T20977] should_fail_ex+0x410/0x560 [ 2016.735372][T20977] _copy_from_iter+0x1d3/0x1660 [ 2016.735404][T20977] ? __alloc_skb+0x27a/0x7a0 [ 2016.735439][T20977] ? __alloc_skb+0x27a/0x7a0 [ 2016.735473][T20977] ? __alloc_skb+0x27a/0x7a0 [ 2016.735503][T20977] ? __pfx__copy_from_iter+0x10/0x10 [ 2016.735533][T20977] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 2016.735563][T20977] ? __alloc_skb+0x27a/0x7a0 [ 2016.735593][T20977] ? __alloc_skb+0x27a/0x7a0 [ 2016.735633][T20977] ? netlink_sendmsg+0x64f/0xb20 [ 2016.735664][T20977] ? skb_put+0x112/0x210 [ 2016.735700][T20977] netlink_sendmsg+0x6bb/0xb20 [ 2016.735736][T20977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2016.735771][T20977] ? aa_sock_msg_perm+0x144/0x210 [ 2016.735807][T20977] ? apparmor_socket_sendmsg+0x98/0x360 [ 2016.735836][T20977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2016.735866][T20977] sock_sendmsg_nosec+0x14e/0x190 [ 2016.735907][T20977] ____sys_sendmsg+0x54e/0x850 [ 2016.735949][T20977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2016.735995][T20977] ? import_iovec+0x73/0xa0 [ 2016.736032][T20977] ___sys_sendmsg+0x2a5/0x360 [ 2016.736065][T20977] ? __lock_acquire+0x747/0x2de0 [ 2016.736096][T20977] ? __pfx____sys_sendmsg+0x10/0x10 [ 2016.736178][T20977] ? __fget_files+0x3a2/0x420 [ 2016.736203][T20977] ? __fget_files+0x2a/0x420 [ 2016.736239][T20977] __x64_sys_sendmsg+0x1b1/0x290 [ 2016.736266][T20977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2016.736328][T20977] do_syscall_64+0x166/0x520 [ 2016.736350][T20977] ? trace_irq_disable+0x3b/0x140 [ 2016.736377][T20977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.736401][T20977] ? clear_bhb_loop+0x70/0xc0 [ 2016.736430][T20977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.736453][T20977] RIP: 0033:0x7fac2919f559 [ 2016.736475][T20977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2016.736495][T20977] RSP: 002b:00007fac2a138028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2016.736520][T20977] RAX: ffffffffffffffda RBX: 00007fac29425fa0 RCX: 00007fac2919f559 [ 2016.736538][T20977] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2016.736553][T20977] RBP: 00007fac2a138090 R08: 0000000000000000 R09: 0000000000000000 [ 2016.736568][T20977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.736582][T20977] R13: 00007fac29426038 R14: 00007fac29425fa0 R15: 00007ffc3e1f1a58 [ 2016.736620][T20977] [ 2018.240500][T21000] FAULT_INJECTION: forcing a failure. [ 2018.240500][T21000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2018.240537][T21000] CPU: 0 UID: 0 PID: 21000 Comm: syz.5.13710 Not tainted syzkaller #0 PREEMPT(full) [ 2018.240562][T21000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2018.240576][T21000] Call Trace: [ 2018.240585][T21000] [ 2018.240595][T21000] dump_stack_lvl+0xe8/0x150 [ 2018.240634][T21000] should_fail_ex+0x410/0x560 [ 2018.240673][T21000] _copy_to_user+0x31/0xb0 [ 2018.240708][T21000] simple_read_from_buffer+0xe1/0x170 [ 2018.240739][T21000] proc_fail_nth_read+0x1bb/0x230 [ 2018.240781][T21000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2018.240817][T21000] ? rw_verify_area+0x24a/0x4c0 [ 2018.240864][T21000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2018.240896][T21000] vfs_read+0x213/0xa80 [ 2018.240929][T21000] ? __pfx___mutex_lock+0x10/0x10 [ 2018.240954][T21000] ? __pfx_vfs_read+0x10/0x10 [ 2018.240982][T21000] ? __fget_files+0x2a/0x420 [ 2018.241007][T21000] ? __fget_files+0x3a2/0x420 [ 2018.241030][T21000] ? __fget_files+0x2a/0x420 [ 2018.241071][T21000] ? fdget+0x1ac/0x250 [ 2018.241102][T21000] ksys_read+0x150/0x270 [ 2018.241131][T21000] ? __pfx_ksys_read+0x10/0x10 [ 2018.241171][T21000] do_syscall_64+0x166/0x520 [ 2018.241192][T21000] ? trace_irq_disable+0x3b/0x140 [ 2018.241219][T21000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.241242][T21000] ? clear_bhb_loop+0x70/0xc0 [ 2018.241278][T21000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.241318][T21000] RIP: 0033:0x7fc23355fd8e [ 2018.241339][T21000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2018.241358][T21000] RSP: 002b:00007fc2317edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2018.241383][T21000] RAX: ffffffffffffffda RBX: 00007fc2317ee6c0 RCX: 00007fc23355fd8e [ 2018.241399][T21000] RDX: 000000000000000f RSI: 00007fc2317ee0a0 RDI: 0000000000000004 [ 2018.241415][T21000] RBP: 00007fc2317ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2018.241431][T21000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2018.241445][T21000] R13: 00007fc233826038 R14: 00007fc233825fa0 R15: 00007fff0804d928 [ 2018.241486][T21000] [ 2018.973877][T21020] ip6erspan0: entered allmulticast mode [ 2019.166245][T21020] xt_hashlimit: size too large, truncated to 1048576 [ 2020.132420][T21045] gre1: entered allmulticast mode [ 2020.648988][T21052] __nla_validate_parse: 4 callbacks suppressed [ 2020.649010][T21052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13729'. [ 2020.677210][T21052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13729'. [ 2020.715649][T21068] netlink: 'syz.6.13730': attribute type 1 has an invalid length. [ 2020.783577][ T53] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 2020.783625][ T53] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 2021.083226][T21074] macvlan2: entered promiscuous mode [ 2021.083255][T21074] macvlan2: entered allmulticast mode [ 2021.084518][T21074] bond1: entered promiscuous mode [ 2021.108396][T21074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2021.152825][T21074] bond1: left promiscuous mode [ 2021.347720][T21081] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13733'. [ 2021.524056][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13732'. [ 2021.578788][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13734'. [ 2022.372960][T21103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13740'. [ 2022.552907][T21110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13743'. [ 2022.749815][T21114] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13745'. [ 2024.132791][T21158] netlink: 'syz.0.13756': attribute type 1 has an invalid length. [ 2024.217516][T21158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2024.277059][T21167] bond1: (slave gretap1): making interface the new active one [ 2024.278387][T21167] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2024.595641][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13760'. [ 2024.757109][T21182] netlink: 'syz.5.13763': attribute type 1 has an invalid length. [ 2024.859386][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13762'. [ 2025.130133][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2025.171594][T21203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2025.408646][T21205] netlink: 'syz.3.13766': attribute type 2 has an invalid length. [ 2025.523335][T21207] ip_tables: iptables: counters copy to user failed while replacing table [ 2025.847570][T21215] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13770'. [ 2025.962322][T21219] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13770'. [ 2026.020373][T21225] x_tables: ip_tables: cluster.0 match: invalid size 16 (kernel) != (user) 352 [ 2026.028372][T21205] batman_adv: batadv0: Interface deactivated: veth0 [ 2026.291395][T21205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2027.282184][T21243] netlink: 15672 bytes leftover after parsing attributes in process `syz.6.13775'. [ 2027.282217][T21243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13775'. [ 2027.282239][T21243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13775'. [ 2027.466993][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13775'. [ 2027.895572][T21256] hsr0: entered allmulticast mode [ 2027.895598][T21256] hsr_slave_0: entered allmulticast mode [ 2027.895618][T21256] hsr_slave_1: entered allmulticast mode [ 2027.919390][T21255] hsr0: left allmulticast mode [ 2027.919413][T21255] hsr_slave_0: left allmulticast mode [ 2027.924431][T21255] hsr_slave_1: left allmulticast mode [ 2028.657224][ T1183] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 2028.952670][T21293] batadv_slave_1: entered promiscuous mode [ 2028.970350][T21291] batadv_slave_1: left promiscuous mode [ 2029.630696][T21310] netlink: 'syz.5.13794': attribute type 1 has an invalid length. [ 2029.630724][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13794'. [ 2029.831334][T21315] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2031.354988][T21280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2032.069588][T21334] netlink: 'syz.0.13801': attribute type 1 has an invalid length. [ 2032.181490][T21336] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 2032.189001][T21337] macvlan2: entered promiscuous mode [ 2032.189024][T21337] macvlan2: entered allmulticast mode [ 2032.212829][T21337] bond2: entered promiscuous mode [ 2032.212852][T21337] bridge2: entered promiscuous mode [ 2032.213896][T21337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2032.273259][T21337] bond2: left promiscuous mode [ 2032.273286][T21337] bridge2: left promiscuous mode [ 2032.744989][T21348] tipc: Enabled bearer , priority 0 [ 2032.851325][T21347] tipc: Disabling bearer [ 2033.259364][T21367] xt_hashlimit: max too large, truncated to 1048576 [ 2033.274433][T21367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2033.760991][T21379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 2034.265547][T21388] netlink: 27 bytes leftover after parsing attributes in process `syz.6.13815'. [ 2034.265601][T21388] netlink: 'syz.6.13815': attribute type 1 has an invalid length. [ 2034.828482][T21405] ip_tables: iptables: counters copy to user failed while replacing table [ 2034.952692][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13822'. [ 2035.009683][T21412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input10 [ 2035.206031][T21418] ip_tables: iptables: counters copy to user failed while replacing table [ 2035.607043][T21403] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.135111][T21428] syzkaller0: entered promiscuous mode [ 2036.141564][T21428] syzkaller0: entered allmulticast mode [ 2036.259881][T21403] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.293161][T21446] netlink: 'syz.5.13830': attribute type 14 has an invalid length. [ 2036.362945][T21450] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 2044.705837][T21403] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.862296][T21477] FAULT_INJECTION: forcing a failure. [ 2044.862296][T21477] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.862339][T21477] CPU: 0 UID: 0 PID: 21477 Comm: syz.2.13838 Not tainted syzkaller #0 PREEMPT(full) [ 2044.862370][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2044.862387][T21477] Call Trace: [ 2044.862398][T21477] [ 2044.862410][T21477] dump_stack_lvl+0xe8/0x150 [ 2044.862458][T21477] should_fail_ex+0x410/0x560 [ 2044.862507][T21477] should_failslab+0xa8/0x100 [ 2044.862548][T21477] ? dst_alloc+0x105/0x170 [ 2044.862581][T21477] kmem_cache_alloc_noprof+0x9c/0x600 [ 2044.862613][T21477] ? lock_acquire+0x115/0x350 [ 2044.862651][T21477] ? dst_alloc+0x105/0x170 [ 2044.862692][T21477] dst_alloc+0x105/0x170 [ 2044.862731][T21477] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 2044.862784][T21477] ? ip_route_output_key_hash_rcu+0x1cd1/0x2720 [ 2044.862837][T21477] ? ip_route_output_key_hash+0xd8/0x2a0 [ 2044.862891][T21477] ip_route_output_key_hash+0x18d/0x2a0 [ 2044.862937][T21477] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2044.862984][T21477] ? lock_acquire+0x115/0x350 [ 2044.863030][T21477] ip_route_output_flow+0x2a/0x150 [ 2044.863066][T21477] ? security_skb_classify_flow+0x74/0x280 [ 2044.863104][T21477] ip_send_unicast_reply+0x727/0x18b0 [ 2044.863132][T21477] ? nf_nat_decode_session+0x21/0x260 [ 2044.863195][T21477] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 2044.863284][T21477] tcp_v4_send_reset+0x1626/0x27d0 [ 2044.863323][T21477] ? tcp_v4_send_reset+0x685/0x27d0 [ 2044.863370][T21477] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 2044.863404][T21477] ? ip_vs_conn_out_get+0xfb0/0x1030 [ 2044.863444][T21477] ? inet_lhash2_lookup+0x5ae/0x5e0 [ 2044.863474][T21477] ? __inet_lookup_established+0x87b/0x920 [ 2044.863529][T21477] ? tcp_v4_fill_cb+0x3d/0x4b0 [ 2044.863567][T21477] ? __asan_memmove+0x40/0x70 [ 2044.863601][T21477] ? tcp_v4_fill_cb+0x25c/0x4b0 [ 2044.863634][T21477] ? tcp_checksum_complete+0x152/0x200 [ 2044.863673][T21477] tcp_v4_rcv+0x2137/0x3170 [ 2044.863759][T21477] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2044.863791][T21477] ? raw_local_deliver+0x345/0x1010 [ 2044.863842][T21477] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2044.863896][T21477] ip_protocol_deliver_rcu+0x21d/0x440 [ 2044.863930][T21477] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 2044.863964][T21477] ip_local_deliver_finish+0x3bb/0x6f0 [ 2044.864008][T21477] NF_HOOK+0x336/0x3c0 [ 2044.864042][T21477] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2044.864074][T21477] ? NF_HOOK+0x9e/0x3c0 [ 2044.864103][T21477] ? __pfx_NF_HOOK+0x10/0x10 [ 2044.864138][T21477] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2044.864180][T21477] ? ip_local_deliver+0x113/0x190 [ 2044.864216][T21477] NF_HOOK+0x336/0x3c0 [ 2044.864250][T21477] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2044.864280][T21477] ? NF_HOOK+0x9e/0x3c0 [ 2044.864310][T21477] ? __pfx_NF_HOOK+0x10/0x10 [ 2044.864346][T21477] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2044.864388][T21477] ? netif_receive_skb+0x102/0xbf0 [ 2044.864421][T21477] ? __pfx_ip_rcv+0x10/0x10 [ 2044.864451][T21477] netif_receive_skb+0x45b/0xbf0 [ 2044.864493][T21477] ? __pfx_netif_receive_skb+0x10/0x10 [ 2044.864532][T21477] ? rcu_is_watching+0x16/0xb0 [ 2044.864565][T21477] ? tun_rx_batched+0x185/0x790 [ 2044.864595][T21477] tun_rx_batched+0x1de/0x790 [ 2044.864629][T21477] ? __pfx_tun_rx_batched+0x10/0x10 [ 2044.864656][T21477] ? lock_acquire+0x115/0x350 [ 2044.864709][T21477] tun_get_user+0x2b78/0x4470 [ 2044.864747][T21477] ? tun_get_user+0x275c/0x4470 [ 2044.864788][T21477] ? aa_file_perm+0x4ed/0x15f0 [ 2044.864824][T21477] ? __pfx_tun_get_user+0x10/0x10 [ 2044.864877][T21477] ? __lock_acquire+0x747/0x2de0 [ 2044.864936][T21477] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2044.864981][T21477] ? lock_acquire+0x115/0x350 [ 2044.865010][T21477] ? tun_get+0x1c/0x2f0 [ 2044.865058][T21477] ? tun_get+0x1c/0x2f0 [ 2044.865097][T21477] ? tun_get+0x1c/0x2f0 [ 2044.865145][T21477] tun_chr_write_iter+0x113/0x200 [ 2044.865189][T21477] vfs_write+0x612/0xba0 [ 2044.865234][T21477] ? __pfx_vfs_write+0x10/0x10 [ 2044.865270][T21477] ? __fget_files+0x3a2/0x420 [ 2044.865298][T21477] ? __fget_files+0x2a/0x420 [ 2044.865332][T21477] ? fdget+0x1ac/0x250 [ 2044.865371][T21477] ksys_write+0x150/0x270 [ 2044.865406][T21477] ? __pfx_ksys_write+0x10/0x10 [ 2044.865458][T21477] do_syscall_64+0x166/0x520 [ 2044.865482][T21477] ? trace_irq_disable+0x3b/0x140 [ 2044.865513][T21477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.865540][T21477] ? clear_bhb_loop+0x70/0xc0 [ 2044.865572][T21477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.865598][T21477] RIP: 0033:0x7fe89555fd8e [ 2044.865622][T21477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2044.865644][T21477] RSP: 002b:00007fe8963b7fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2044.865673][T21477] RAX: ffffffffffffffda RBX: 00007fe8963b86c0 RCX: 00007fe89555fd8e [ 2044.865692][T21477] RDX: 0000000000000036 RSI: 0000200000000700 RDI: 00000000000000c8 [ 2044.865709][T21477] RBP: 00007fe8963b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2044.865726][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2044.865742][T21477] R13: 00007fe895826038 R14: 00007fe895825fa0 R15: 00007fffe5a45748 [ 2044.865788][T21477] [ 2045.686459][T21403] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.902741][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13839'. [ 2045.960030][T21493] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13841'. [ 2046.569893][ T1020] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.770169][ T1020] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.770231][ T1020] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.849740][ T1183] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2047.075829][T27939] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 2047.113637][T27939] hid-generic 0005:4C4A:4155.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 2047.212459][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13851'. [ 2047.213974][T21519] tipc: Enabling of bearer rejected, failed to enable media [ 2047.604916][T21535] FAULT_INJECTION: forcing a failure. [ 2047.604916][T21535] name failslab, interval 1, probability 0, space 0, times 0 [ 2047.604955][T21535] CPU: 0 UID: 0 PID: 21535 Comm: syz.5.13852 Not tainted syzkaller #0 PREEMPT(full) [ 2047.604985][T21535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2047.605001][T21535] Call Trace: [ 2047.605011][T21535] [ 2047.605023][T21535] dump_stack_lvl+0xe8/0x150 [ 2047.605066][T21535] should_fail_ex+0x410/0x560 [ 2047.605109][T21535] should_failslab+0xa8/0x100 [ 2047.605149][T21535] __kmalloc_noprof+0xf9/0x710 [ 2047.605182][T21535] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2047.605239][T21535] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2047.605292][T21535] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2047.605330][T21535] genl_family_rcv_msg_doit+0xda/0x340 [ 2047.605400][T21535] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2047.605470][T21535] ? apparmor_capable+0x126/0x170 [ 2047.605518][T21535] ? bpf_lsm_capable+0x9/0x20 [ 2047.605554][T21535] ? security_capable+0x7e/0x2c0 [ 2047.605628][T21535] genl_rcv_msg+0x614/0x7a0 [ 2047.605679][T21535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2047.605727][T21535] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 2047.605777][T21535] ? __pfx_nl802154_add_llsec_seclevel+0x10/0x10 [ 2047.605813][T21535] ? __pfx_nl802154_post_doit+0x10/0x10 [ 2047.605896][T21535] netlink_rcv_skb+0x226/0x4a0 [ 2047.605942][T21535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2047.605994][T21535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2047.606043][T21535] ? down_read+0x2b9/0x320 [ 2047.606075][T21535] genl_rcv+0x28/0x40 [ 2047.606108][T21535] netlink_unicast+0x8ef/0xa80 [ 2047.606156][T21535] netlink_sendmsg+0x7f0/0xb20 [ 2047.606195][T21535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2047.606230][T21535] ? aa_sock_msg_perm+0x144/0x210 [ 2047.606266][T21535] ? apparmor_socket_sendmsg+0x98/0x360 [ 2047.606295][T21535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2047.606324][T21535] sock_sendmsg_nosec+0x14e/0x190 [ 2047.606365][T21535] ____sys_sendmsg+0x54e/0x850 [ 2047.606408][T21535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2047.606457][T21535] ? import_iovec+0x73/0xa0 [ 2047.606495][T21535] ___sys_sendmsg+0x2a5/0x360 [ 2047.606529][T21535] ? __lock_acquire+0x747/0x2de0 [ 2047.606562][T21535] ? __pfx____sys_sendmsg+0x10/0x10 [ 2047.606645][T21535] ? __fget_files+0x3a2/0x420 [ 2047.606676][T21535] ? __fget_files+0x2a/0x420 [ 2047.606729][T21535] __x64_sys_sendmsg+0x1b1/0x290 [ 2047.606757][T21535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2047.606819][T21535] do_syscall_64+0x166/0x520 [ 2047.606849][T21535] ? trace_irq_disable+0x3b/0x140 [ 2047.606885][T21535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2047.606909][T21535] ? clear_bhb_loop+0x70/0xc0 [ 2047.606939][T21535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2047.606963][T21535] RIP: 0033:0x7fc23359f559 [ 2047.606985][T21535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2047.607005][T21535] RSP: 002b:00007fc2317ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2047.607030][T21535] RAX: ffffffffffffffda RBX: 00007fc233825fa0 RCX: 00007fc23359f559 [ 2047.607048][T21535] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000004 [ 2047.607063][T21535] RBP: 00007fc2317ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2047.607078][T21535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2047.607092][T21535] R13: 00007fc233826038 R14: 00007fc233825fa0 R15: 00007fff0804d928 [ 2047.607131][T21535] [ 2049.813773][T21571] bond2: (slave lo): Releasing backup interface [ 2049.830088][T21571] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2049.830515][T21571] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2051.207497][T21611] tipc: Enabled bearer , priority 0 [ 2051.277603][T21610] tipc: Disabling bearer [ 2051.716811][T21626] xt_SECMARK: invalid mode: 9 [ 2051.827835][T21631] openvswitch: netlink: Multiple metadata blocks provided [ 2052.692681][T21659] tipc: Enabled bearer , priority 0 [ 2052.723680][T21655] syzkaller0: entered promiscuous mode [ 2052.723897][T21655] syzkaller0: entered allmulticast mode [ 2052.896459][T21655] tipc: Resetting bearer [ 2053.432580][T21653] tipc: Resetting bearer [ 2053.665688][T21653] tipc: Disabling bearer [ 2054.466645][T21705] netlink: 'syz.5.13890': attribute type 4 has an invalid length. [ 2054.466672][T21705] netlink: 17 bytes leftover after parsing attributes in process `syz.5.13890'. [ 2054.642649][T21705] netlink: 'syz.5.13890': attribute type 21 has an invalid length. [ 2054.642676][T21705] netlink: 128 bytes leftover after parsing attributes in process `syz.5.13890'. [ 2054.642772][T21705] netlink: 3 bytes leftover after parsing attributes in process `syz.5.13890'. [ 2054.782697][T21705] ip6gretap1: entered allmulticast mode [ 2054.821581][T21705] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2054.821603][T21705] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.821642][T21705] batman_adv: batadv0: Interface activated: ip6gretap1 [ 2055.413261][T21729] openvswitch: netlink: Multiple metadata blocks provided [ 2055.448891][T21729] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 2055.467459][ T8409] hid-generic 0005:04F3:4955.0003: unknown main item tag 0x0 [ 2055.563528][ T8409] hid-generic 0005:04F3:4955.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 2055.811811][T21744] set match dimension is over the limit! [ 2055.906736][T21745] netlink: 'syz.6.13904': attribute type 16 has an invalid length. [ 2055.906763][T21745] netlink: 'syz.6.13904': attribute type 17 has an invalid length. [ 2056.159300][T21742] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.178761][T21742] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.322323][T21745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.322463][T21745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2056.326464][T21745] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.326592][T21745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2056.393841][T21745] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2056.489523][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 2057.417652][T27946] hid-generic 0005:04F3:4955.0004: unknown main item tag 0x0 [ 2057.455401][T27946] hid-generic 0005:04F3:4955.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 2057.712136][T21774] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13911'. [ 2057.712199][T21774] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2057.811861][ T53] Bluetooth: hci6: unexpected cc 0x2003 length: 0 < 9 [ 2057.882682][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13910'. [ 2057.966214][T21774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13911'. [ 2058.795124][T21805] FAULT_INJECTION: forcing a failure. [ 2058.795124][T21805] name failslab, interval 1, probability 0, space 0, times 0 [ 2058.795162][T21805] CPU: 0 UID: 0 PID: 21805 Comm: syz.5.13919 Not tainted syzkaller #0 PREEMPT(full) [ 2058.795187][T21805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2058.795202][T21805] Call Trace: [ 2058.795211][T21805] [ 2058.795220][T21805] dump_stack_lvl+0xe8/0x150 [ 2058.795258][T21805] should_fail_ex+0x410/0x560 [ 2058.795294][T21805] ? __alloc_skb+0x1db/0x7a0 [ 2058.795324][T21805] should_failslab+0xa8/0x100 [ 2058.795358][T21805] ? __alloc_skb+0x1db/0x7a0 [ 2058.795426][T21805] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 2058.795454][T21805] ? __alloc_skb+0x18d/0x7a0 [ 2058.795484][T21805] ? __alloc_skb+0x1db/0x7a0 [ 2058.795522][T21805] __alloc_skb+0x1db/0x7a0 [ 2058.795557][T21805] netlink_sendmsg+0x5cd/0xb20 [ 2058.795594][T21805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2058.795627][T21805] ? aa_sock_msg_perm+0x144/0x210 [ 2058.795660][T21805] ? apparmor_socket_sendmsg+0x98/0x360 [ 2058.795687][T21805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2058.795713][T21805] sock_sendmsg_nosec+0x14e/0x190 [ 2058.795744][T21805] ____sys_sendmsg+0x54e/0x850 [ 2058.795783][T21805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2058.795827][T21805] ? import_iovec+0x73/0xa0 [ 2058.795864][T21805] ___sys_sendmsg+0x2a5/0x360 [ 2058.795898][T21805] ? __lock_acquire+0x747/0x2de0 [ 2058.795931][T21805] ? __pfx____sys_sendmsg+0x10/0x10 [ 2058.796012][T21805] ? __fget_files+0x3a2/0x420 [ 2058.796041][T21805] ? __fget_files+0x2a/0x420 [ 2058.796079][T21805] __x64_sys_sendmsg+0x1b1/0x290 [ 2058.796105][T21805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2058.796158][T21805] do_syscall_64+0x166/0x520 [ 2058.796177][T21805] ? trace_irq_disable+0x3b/0x140 [ 2058.796201][T21805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.796221][T21805] ? clear_bhb_loop+0x70/0xc0 [ 2058.796245][T21805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.796264][T21805] RIP: 0033:0x7fc23359f559 [ 2058.796283][T21805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2058.796301][T21805] RSP: 002b:00007fc2317ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2058.796323][T21805] RAX: ffffffffffffffda RBX: 00007fc233825fa0 RCX: 00007fc23359f559 [ 2058.796338][T21805] RDX: 0000000000044080 RSI: 00002000000008c0 RDI: 0000000000000003 [ 2058.796351][T21805] RBP: 00007fc2317ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2058.796364][T21805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2058.796376][T21805] R13: 00007fc233826038 R14: 00007fc233825fa0 R15: 00007fff0804d928 [ 2058.796421][T21805] [ 2059.234804][T21811] openvswitch: netlink: Multiple metadata blocks provided [ 2060.378243][ T53] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 2060.378280][ T53] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 2060.458906][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13925'. [ 2061.942214][T21869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2062.553132][T21889] netlink: 'syz.0.13938': attribute type 21 has an invalid length. [ 2062.744543][ T53] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 2062.744580][ T53] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 2062.777357][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13939'. [ 2063.297613][T21908] openvswitch: netlink: Multiple metadata blocks provided [ 2063.425966][T21914] syzkaller1: entered allmulticast mode [ 2063.462824][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13947'. [ 2063.729727][T21922] FAULT_INJECTION: forcing a failure. [ 2063.729727][T21922] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.730160][T21922] CPU: 0 UID: 0 PID: 21922 Comm: syz.2.13949 Not tainted syzkaller #0 PREEMPT(full) [ 2063.730189][T21922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2063.730205][T21922] Call Trace: [ 2063.730215][T21922] [ 2063.730226][T21922] dump_stack_lvl+0xe8/0x150 [ 2063.730276][T21922] should_fail_ex+0x410/0x560 [ 2063.730318][T21922] should_failslab+0xa8/0x100 [ 2063.730353][T21922] ? skb_clone+0x212/0x3a0 [ 2063.730379][T21922] kmem_cache_alloc_noprof+0x9c/0x600 [ 2063.730415][T21922] ? skb_clone+0x212/0x3a0 [ 2063.730447][T21922] skb_clone+0x212/0x3a0 [ 2063.730477][T21922] __netlink_deliver_tap+0x355/0x6e0 [ 2063.730521][T21922] ? netlink_deliver_tap+0x2e/0x1b0 [ 2063.730554][T21922] netlink_deliver_tap+0x19c/0x1b0 [ 2063.730586][T21922] netlink_sendskb+0x68/0x140 [ 2063.730617][T21922] nfnetlink_rcv+0x260c/0x28c0 [ 2063.730688][T21922] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2063.730789][T21922] ? skb_clone+0x246/0x3a0 [ 2063.730831][T21922] ? netlink_deliver_tap+0x2e/0x1b0 [ 2063.730862][T21922] ? netlink_deliver_tap+0x2e/0x1b0 [ 2063.730900][T21922] netlink_unicast+0x8ef/0xa80 [ 2063.730949][T21922] netlink_sendmsg+0x7f0/0xb20 [ 2063.730988][T21922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2063.731024][T21922] ? aa_sock_msg_perm+0x144/0x210 [ 2063.731070][T21922] ? apparmor_socket_sendmsg+0x98/0x360 [ 2063.731100][T21922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2063.731131][T21922] sock_sendmsg_nosec+0x14e/0x190 [ 2063.731164][T21922] ____sys_sendmsg+0x54e/0x850 [ 2063.731209][T21922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2063.731258][T21922] ? import_iovec+0x73/0xa0 [ 2063.731297][T21922] ___sys_sendmsg+0x2a5/0x360 [ 2063.731331][T21922] ? __lock_acquire+0x747/0x2de0 [ 2063.731365][T21922] ? __pfx____sys_sendmsg+0x10/0x10 [ 2063.731447][T21922] ? __fget_files+0x3a2/0x420 [ 2063.731473][T21922] ? __fget_files+0x2a/0x420 [ 2063.731511][T21922] __x64_sys_sendmsg+0x1b1/0x290 [ 2063.731539][T21922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2063.731603][T21922] do_syscall_64+0x166/0x520 [ 2063.731626][T21922] ? trace_irq_disable+0x3b/0x140 [ 2063.731656][T21922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.731680][T21922] ? clear_bhb_loop+0x70/0xc0 [ 2063.731712][T21922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.731735][T21922] RIP: 0033:0x7fe89559f559 [ 2063.731758][T21922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2063.731779][T21922] RSP: 002b:00007fe8963b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2063.731805][T21922] RAX: ffffffffffffffda RBX: 00007fe895825fa0 RCX: 00007fe89559f559 [ 2063.731823][T21922] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2063.731839][T21922] RBP: 00007fe8963b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2063.731854][T21922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2063.731876][T21922] R13: 00007fe895826038 R14: 00007fe895825fa0 R15: 00007fffe5a45748 [ 2063.731916][T21922] [ 2063.815976][T21926] FAULT_INJECTION: forcing a failure. [ 2063.815976][T21926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2063.816074][T21926] CPU: 1 UID: 0 PID: 21926 Comm: syz.3.13950 Not tainted syzkaller #0 PREEMPT(full) [ 2063.816138][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2063.816177][T21926] Call Trace: [ 2063.816199][T21926] [ 2063.816221][T21926] dump_stack_lvl+0xe8/0x150 [ 2063.816328][T21926] should_fail_ex+0x410/0x560 [ 2063.816421][T21926] prepare_alloc_pages+0x21e/0x5f0 [ 2063.816461][T21926] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2063.816498][T21926] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2063.816589][T21926] ? __pfx_policy_nodemask+0x10/0x10 [ 2063.816675][T21926] ? __get_vm_area_node+0x155/0x2f0 [ 2063.816735][T21926] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 2063.816800][T21926] ? __vmalloc_noprof+0xd2/0x120 [ 2063.816862][T21926] ? bpf_check+0x115b/0x2ef0 [ 2063.816934][T21926] ? bpf_prog_load+0x14d1/0x1c20 [ 2063.817014][T21926] ? __x64_sys_bpf+0xba/0xd0 [ 2063.817077][T21926] ? do_syscall_64+0x166/0x520 [ 2063.817148][T21926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.817230][T21926] alloc_pages_mpol+0x21e/0x390 [ 2063.817334][T21926] alloc_pages_noprof+0xb1/0x2b0 [ 2063.817399][T21926] get_free_pages_noprof+0xf/0x80 [ 2063.817481][T21926] __kasan_populate_vmalloc+0x38/0x1c0 [ 2063.817564][T21926] ? do_raw_spin_unlock+0xf5/0x200 [ 2063.817662][T21926] alloc_vmap_area+0xd10/0x1410 [ 2063.817768][T21926] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2063.817828][T21926] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 2063.817905][T21926] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 2063.817980][T21926] ? __get_vm_area_node+0x155/0x2f0 [ 2063.818064][T21926] __get_vm_area_node+0x200/0x2f0 [ 2063.818163][T21926] __vmalloc_node_range_noprof+0x343/0x1540 [ 2063.818237][T21926] ? bpf_check+0x115b/0x2ef0 [ 2063.818344][T21926] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2063.818443][T21926] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2063.818534][T21926] ? apparmor_capable+0x126/0x170 [ 2063.818629][T21926] ? bpf_lsm_capable+0x9/0x20 [ 2063.818699][T21926] ? security_capable+0x7e/0x2c0 [ 2063.818781][T21926] ? bpf_check+0x115b/0x2ef0 [ 2063.818850][T21926] __vmalloc_noprof+0xd2/0x120 [ 2063.818914][T21926] ? bpf_check+0x115b/0x2ef0 [ 2063.818998][T21926] bpf_check+0x115b/0x2ef0 [ 2063.819128][T21926] ? __pfx_bpf_check+0x10/0x10 [ 2063.819213][T21926] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2063.819272][T21926] bpf_prog_load+0x14d1/0x1c20 [ 2063.819399][T21926] ? __pfx_bpf_prog_load+0x10/0x10 [ 2063.819579][T21926] __sys_bpf+0xd0d/0xd90 [ 2063.819683][T21926] ? __pfx___sys_bpf+0x10/0x10 [ 2063.819790][T21926] ? __fget_files+0x2a/0x420 [ 2063.819907][T21926] ? ksys_write+0x242/0x270 [ 2063.819989][T21926] ? __pfx_ksys_write+0x10/0x10 [ 2063.820039][T21926] __x64_sys_bpf+0xba/0xd0 [ 2063.820108][T21926] do_syscall_64+0x166/0x520 [ 2063.820162][T21926] ? trace_irq_disable+0x3b/0x140 [ 2063.820227][T21926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.820289][T21926] ? clear_bhb_loop+0x70/0xc0 [ 2063.820363][T21926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.820425][T21926] RIP: 0033:0x7f53cd79f559 [ 2063.820477][T21926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2063.820531][T21926] RSP: 002b:00007f53ce6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2063.820594][T21926] RAX: ffffffffffffffda RBX: 00007f53cda25fa0 RCX: 00007f53cd79f559 [ 2063.820644][T21926] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2063.820678][T21926] RBP: 00007f53ce6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2063.820719][T21926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2063.820748][T21926] R13: 00007f53cda26038 R14: 00007f53cda25fa0 R15: 00007fffb73bc098 [ 2063.820785][T21926] [ 2063.868155][T21926] warn_alloc: 1 callbacks suppressed [ 2063.868200][T21926] syz.3.13950: vmalloc error: size 2584, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2063.868598][T21926] CPU: 1 UID: 0 PID: 21926 Comm: syz.3.13950 Not tainted syzkaller #0 PREEMPT(full) [ 2063.868677][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2063.868728][T21926] Call Trace: [ 2063.868757][T21926] [ 2063.868781][T21926] dump_stack_lvl+0xe8/0x150 [ 2063.868914][T21926] warn_alloc+0x24d/0x270 [ 2063.868997][T21926] ? lockdep_hardirqs_on+0x7b/0x110 [ 2063.869055][T21926] ? __pfx_warn_alloc+0x10/0x10 [ 2063.869126][T21926] ? kfree+0x1c5/0x650 [ 2063.869202][T21926] ? __get_vm_area_node+0x219/0x2f0 [ 2063.869295][T21926] __vmalloc_node_range_noprof+0x36b/0x1540 [ 2063.869401][T21926] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2063.869508][T21926] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2063.869593][T21926] ? apparmor_capable+0x126/0x170 [ 2063.869694][T21926] ? bpf_lsm_capable+0x9/0x20 [ 2063.869763][T21926] ? security_capable+0x7e/0x2c0 [ 2063.869836][T21926] ? bpf_check+0x115b/0x2ef0 [ 2063.869902][T21926] __vmalloc_noprof+0xd2/0x120 [ 2063.869973][T21926] ? bpf_check+0x115b/0x2ef0 [ 2063.870050][T21926] bpf_check+0x115b/0x2ef0 [ 2063.870194][T21926] ? __pfx_bpf_check+0x10/0x10 [ 2063.870277][T21926] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2063.870358][T21926] bpf_prog_load+0x14d1/0x1c20 [ 2063.870473][T21926] ? __pfx_bpf_prog_load+0x10/0x10 [ 2063.870646][T21926] __sys_bpf+0xd0d/0xd90 [ 2063.870760][T21926] ? __pfx___sys_bpf+0x10/0x10 [ 2063.870859][T21926] ? __fget_files+0x2a/0x420 [ 2063.870974][T21926] ? ksys_write+0x242/0x270 [ 2063.871041][T21926] ? __pfx_ksys_write+0x10/0x10 [ 2063.871124][T21926] __x64_sys_bpf+0xba/0xd0 [ 2063.871199][T21926] do_syscall_64+0x166/0x520 [ 2063.871261][T21926] ? trace_irq_disable+0x3b/0x140 [ 2063.871326][T21926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.871380][T21926] ? clear_bhb_loop+0x70/0xc0 [ 2063.871466][T21926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.871549][T21926] RIP: 0033:0x7f53cd79f559 [ 2063.871602][T21926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2063.871654][T21926] RSP: 002b:00007f53ce6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2063.871715][T21926] RAX: ffffffffffffffda RBX: 00007f53cda25fa0 RCX: 00007f53cd79f559 [ 2063.871757][T21926] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2063.871785][T21926] RBP: 00007f53ce6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2063.871825][T21926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2063.871858][T21926] R13: 00007f53cda26038 R14: 00007f53cda25fa0 R15: 00007fffb73bc098 [ 2063.871952][T21926] [ 2064.238182][T21926] Mem-Info: [ 2064.238223][T21926] active_anon:8344 inactive_anon:0 isolated_anon:0 [ 2064.238223][T21926] active_file:45 inactive_file:45016 isolated_file:0 [ 2064.238223][T21926] unevictable:0 dirty:195 writeback:0 [ 2064.238223][T21926] slab_reclaimable:22023 slab_unreclaimable:116305 [ 2064.238223][T21926] mapped:41737 shmem:845 pagetables:6048 [ 2064.238223][T21926] sec_pagetables:0 bounce:0 [ 2064.238223][T21926] kernel_misc_reclaimable:0 [ 2064.238223][T21926] free:1179297 free_pcp:10628 free_cma:0 [ 2064.238370][T21926] Node 0 active_anon:33376kB inactive_anon:0kB active_file:180kB inactive_file:179860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146468kB dirty:780kB writeback:0kB shmem:3380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14916kB pagetables:24048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2064.238540][T21926] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2064.239175][T21926] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2064.239350][T21926] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 2064.239984][T21926] Node 0 DMA32 free:829244kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33376kB inactive_anon:0kB active_file:180kB inactive_file:179860kB unevictable:0kB writepending:780kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:42512kB local_pcp:21280kB free_cma:0kB [ 2064.240649][T21926] lowmem_reserve[]: 0 0 0 0 0 [ 2064.240761][T21926] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2064.240932][T21926] lowmem_reserve[]: 0 0 0 0 0 [ 2064.241022][T21926] Node 1 Normal free:3876680kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2064.241174][T21926] lowmem_reserve[]: 0 0 0 0 0 [ 2064.345637][T21926] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 2064.345767][T21926] Node 0 DMA32: 1767*4kB (UME) 1141*8kB (UME) 707*16kB (UME) 1465*32kB (UME) 792*64kB (UME) 854*128kB (UME) 611*256kB (UME) 372*512kB (UME) 190*1024kB (UME) 10*2048kB (UME) 8*4096kB (U) = 829076kB [ 2064.346127][T21926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2064.346393][T21926] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 6*16kB (UM) 4*32kB (UM) 9*64kB (UM) 6*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 945*4096kB (UM) = 3876680kB [ 2064.346836][T21926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2064.346882][T21926] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2064.346926][T21926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2064.346974][T21926] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2064.347006][T21926] 45952 total pagecache pages [ 2064.347027][T21926] 0 pages in swap cache [ 2064.347048][T21926] Free swap = 124996kB [ 2064.347077][T21926] Total swap = 124996kB [ 2064.347098][T21926] 2097051 pages RAM [ 2064.347119][T21926] 0 pages HighMem/MovableOnly [ 2064.347140][T21926] 433831 pages reserved [ 2064.347160][T21926] 0 pages cma reserved [ 2065.449964][T21930] ip_tables: iptables: counters copy to user failed while replacing table [ 2065.477652][T21936] FAULT_INJECTION: forcing a failure. [ 2065.477652][T21936] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.477693][T21936] CPU: 0 UID: 0 PID: 21936 Comm: syz.6.13954 Not tainted syzkaller #0 PREEMPT(full) [ 2065.477722][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2065.477739][T21936] Call Trace: [ 2065.477750][T21936] [ 2065.477761][T21936] dump_stack_lvl+0xe8/0x150 [ 2065.477806][T21936] should_fail_ex+0x410/0x560 [ 2065.477852][T21936] should_failslab+0xa8/0x100 [ 2065.477893][T21936] __kmalloc_cache_noprof+0x9e/0x600 [ 2065.477929][T21936] ? nf_tables_newchain+0x1098/0x28b0 [ 2065.477958][T21936] ? nf_tables_newchain+0x1098/0x28b0 [ 2065.477999][T21936] nf_tables_newchain+0x1098/0x28b0 [ 2065.478051][T21936] ? __pfx_nf_tables_newchain+0x10/0x10 [ 2065.478128][T21936] ? nfnl_pernet+0x23/0x240 [ 2065.478176][T21936] ? __nla_parse+0x40/0x60 [ 2065.478220][T21936] nfnetlink_rcv+0x1288/0x28c0 [ 2065.478313][T21936] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2065.478413][T21936] ? skb_clone+0x246/0x3a0 [ 2065.478458][T21936] ? netlink_deliver_tap+0x2e/0x1b0 [ 2065.478492][T21936] ? netlink_deliver_tap+0x2e/0x1b0 [ 2065.478533][T21936] netlink_unicast+0x8ef/0xa80 [ 2065.478586][T21936] netlink_sendmsg+0x7f0/0xb20 [ 2065.478629][T21936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2065.478668][T21936] ? aa_sock_msg_perm+0x144/0x210 [ 2065.478709][T21936] ? apparmor_socket_sendmsg+0x98/0x360 [ 2065.478742][T21936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2065.478774][T21936] sock_sendmsg_nosec+0x14e/0x190 [ 2065.478812][T21936] ____sys_sendmsg+0x54e/0x850 [ 2065.478861][T21936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2065.478915][T21936] ? import_iovec+0x73/0xa0 [ 2065.478957][T21936] ___sys_sendmsg+0x2a5/0x360 [ 2065.478996][T21936] ? __lock_acquire+0x747/0x2de0 [ 2065.479033][T21936] ? __pfx____sys_sendmsg+0x10/0x10 [ 2065.479125][T21936] ? __fget_files+0x3a2/0x420 [ 2065.479152][T21936] ? __fget_files+0x2a/0x420 [ 2065.479194][T21936] __x64_sys_sendmsg+0x1b1/0x290 [ 2065.479224][T21936] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2065.479296][T21936] do_syscall_64+0x166/0x520 [ 2065.479321][T21936] ? trace_irq_disable+0x3b/0x140 [ 2065.479352][T21936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.479379][T21936] ? clear_bhb_loop+0x70/0xc0 [ 2065.479420][T21936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.479446][T21936] RIP: 0033:0x7f849eb9f559 [ 2065.479471][T21936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2065.479500][T21936] RSP: 002b:00007f849fb31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2065.479530][T21936] RAX: ffffffffffffffda RBX: 00007f849ee25fa0 RCX: 00007f849eb9f559 [ 2065.479551][T21936] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 2065.479568][T21936] RBP: 00007f849fb31090 R08: 0000000000000000 R09: 0000000000000000 [ 2065.479585][T21936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2065.479602][T21936] R13: 00007f849ee26038 R14: 00007f849ee25fa0 R15: 00007ffd881c82d8 [ 2065.479648][T21936] [ 2065.866262][T21937] netlink: 'syz.3.13952': attribute type 9 has an invalid length. [ 2065.866287][T21937] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13952'. [ 2066.056441][ T53] Bluetooth: unknown link type 128 [ 2066.345940][T21949] ip_tables: iptables: counters copy to user failed while replacing table [ 2067.363352][T21967] sctp: [Deprecated]: syz.0.13963 (pid 21967) Use of int in max_burst socket option. [ 2067.363352][T21967] Use struct sctp_assoc_value instead [ 2068.089741][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 2069.951861][T21996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13970'. [ 2070.055104][T21998] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2070.173648][T22003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13970'. [ 2070.179730][T22003] Set syz1 is full, maxelem 0 reached [ 2070.258528][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 2070.878715][T22015] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13972'. [ 2070.949519][T22016] FAULT_INJECTION: forcing a failure. [ 2070.949519][T22016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2070.949557][T22016] CPU: 1 UID: 0 PID: 22016 Comm: syz.6.13974 Not tainted syzkaller #0 PREEMPT(full) [ 2070.949583][T22016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2070.949597][T22016] Call Trace: [ 2070.949607][T22016] [ 2070.949617][T22016] dump_stack_lvl+0xe8/0x150 [ 2070.949656][T22016] should_fail_ex+0x410/0x560 [ 2070.949697][T22016] prepare_alloc_pages+0x21e/0x5f0 [ 2070.949736][T22016] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2070.949774][T22016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2070.949811][T22016] ? __pfx_policy_nodemask+0x10/0x10 [ 2070.949847][T22016] ? __mutex_unlock_slowpath+0x731/0x900 [ 2070.949880][T22016] alloc_pages_mpol+0x21e/0x390 [ 2070.949922][T22016] ___kmalloc_large_node+0x4f/0x120 [ 2070.949953][T22016] __kmalloc_large_noprof+0x1a/0x90 [ 2070.949984][T22016] hidp_connection_add+0x3bd/0x1a00 [ 2070.950028][T22016] hidp_sock_ioctl+0x403/0x650 [ 2070.950066][T22016] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 2070.950154][T22016] ? do_vfs_ioctl+0x116f/0x1530 [ 2070.950209][T22016] sock_do_ioctl+0x101/0x320 [ 2070.950254][T22016] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2070.950301][T22016] sock_ioctl+0x57a/0x7e0 [ 2070.950327][T22016] ? __fget_files+0x2a/0x420 [ 2070.950352][T22016] ? __pfx_sock_ioctl+0x10/0x10 [ 2070.950376][T22016] ? __fget_files+0x2a/0x420 [ 2070.950400][T22016] ? __fget_files+0x2a/0x420 [ 2070.950430][T22016] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2070.950453][T22016] ? __pfx_sock_ioctl+0x10/0x10 [ 2070.950478][T22016] __se_sys_ioctl+0xfc/0x170 [ 2070.950512][T22016] do_syscall_64+0x166/0x520 [ 2070.950535][T22016] ? trace_irq_disable+0x3b/0x140 [ 2070.950562][T22016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.950586][T22016] ? clear_bhb_loop+0x70/0xc0 [ 2070.950615][T22016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.950638][T22016] RIP: 0033:0x7f849eb9f559 [ 2070.950659][T22016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2070.950681][T22016] RSP: 002b:00007f849fb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.950705][T22016] RAX: ffffffffffffffda RBX: 00007f849ee25fa0 RCX: 00007f849eb9f559 [ 2070.950723][T22016] RDX: 0000200000000280 RSI: 00000000400448c8 RDI: 0000000000000005 [ 2070.950739][T22016] RBP: 00007f849fb31090 R08: 0000000000000000 R09: 0000000000000000 [ 2070.950753][T22016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.950767][T22016] R13: 00007f849ee26038 R14: 00007f849ee25fa0 R15: 00007ffd881c82d8 [ 2070.950808][T22016] [ 2071.459867][T22022] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13973'. [ 2071.589089][T22033] netlink: 'syz.6.13976': attribute type 10 has an invalid length. [ 2071.670373][T22035] netlink: 'syz.6.13976': attribute type 10 has an invalid length. [ 2072.197988][T22033] team0: Port device dummy0 added [ 2072.746986][T22035] team0: Port device dummy0 removed [ 2073.233493][T22060] netlink: 642 bytes leftover after parsing attributes in process `syz.0.13984'. [ 2073.267754][T22060] netlink: 'syz.0.13984': attribute type 1 has an invalid length. [ 2073.322974][T22056] netlink: 'syz.3.13983': attribute type 3 has an invalid length. [ 2073.323008][T22056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13983'. [ 2073.390438][T22060] bond3: entered promiscuous mode [ 2073.393974][T22060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2073.497619][T22060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13984'. [ 2073.652957][T22070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13987'. [ 2073.912665][T22086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2075.507993][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2075.826062][T22136] batman_adv: batadv0: Removing interface: veth0 [ 2076.036722][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.066580][T22141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14007'. [ 2076.121855][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.122353][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.122833][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.123358][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.123826][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.124297][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.157024][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.158929][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14006'. [ 2076.639786][T22172] netlink: 'syz.0.14012': attribute type 31 has an invalid length. [ 2076.934884][T22180] nbd: couldn't find a device at index 0 [ 2077.460583][T22194] tipc: Enabled bearer , priority 7 [ 2078.151109][T22214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2078.582266][ T9956] tipc: Node number set to 2201180708 [ 2078.758238][T22226] ip6gretap0: left promiscuous mode [ 2078.774577][T22226] batadv0: left promiscuous mode [ 2079.615646][T22254] xt_hashlimit: size too large, truncated to 1048576 [ 2081.282603][ T9956] hid-generic 0005:04F3:4955.0005: unknown main item tag 0x0 [ 2081.308886][ T9956] hid-generic 0005:04F3:4955.0005: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 2081.566787][T22296] __nla_validate_parse: 10 callbacks suppressed [ 2081.566822][T22296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14042'. [ 2081.761213][ T207] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 2081.786390][T22298] ip_tables: iptables: counters copy to user failed while replacing table [ 2082.017347][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14044'. [ 2082.017380][T22300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14044'. [ 2082.118153][T22300] bond4: invalid ARP target 0.0.0.0 specified for addition [ 2082.118184][T22300] bond4: option arp_ip_target: invalid value (0) [ 2082.118203][T22300] bond4: Removing last arp target with arp_interval on [ 2082.127253][T22246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2082.167025][T22300] bond4 (unregistering): Released all slaves [ 2082.619440][T22310] syzkaller0: entered promiscuous mode [ 2082.619619][T22310] syzkaller0: entered allmulticast mode [ 2082.658061][T22311] netlink: 'syz.5.14048': attribute type 2 has an invalid length. [ 2082.658088][T22311] netlink: 228 bytes leftover after parsing attributes in process `syz.5.14048'. [ 2082.659040][T22310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14047'. [ 2082.705482][T22310] netlink: 76 bytes leftover after parsing attributes in process `syz.6.14047'. [ 2082.912886][T22310] tipc: Started in network mode [ 2082.917535][T22310] tipc: Node identity 46e79cd36cc1, cluster identity 4711 [ 2082.917834][T22310] tipc: Enabled bearer , priority 0 [ 2083.068298][T22323] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14048'. [ 2083.177205][T22325] netlink: 'syz.0.14050': attribute type 11 has an invalid length. [ 2083.797734][T22307] tipc: Resetting bearer [ 2084.091943][T22307] tipc: Disabling bearer [ 2084.155355][ T9956] tipc: Node number set to 707173587 [ 2084.417104][T22341] tipc: Enabled bearer , priority 0 [ 2084.810424][T22339] tipc: Disabling bearer [ 2084.986950][T22355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14057'. [ 2085.746998][T22375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2086.009851][T22394] openvswitch: netlink: Multiple metadata blocks provided [ 2086.329264][T22411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2086.496637][T22416] netlink: 'syz.0.14070': attribute type 3 has an invalid length. [ 2086.496662][T22416] netlink: 'syz.0.14070': attribute type 2 has an invalid length. [ 2086.529934][T22418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2087.559760][T22446] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14076'. [ 2087.580116][T22444] sctp: [Deprecated]: syz.2.14075 (pid 22444) Use of int in max_burst socket option. [ 2087.580116][T22444] Use struct sctp_assoc_value instead [ 2087.733745][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14076'. [ 2087.737988][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14076'. [ 2087.973120][T22464] pim6reg: entered allmulticast mode [ 2087.998500][T22444] xt_CT: No such helper "netbios-ns" [ 2088.038949][T22460] pim6reg: left allmulticast mode [ 2089.444229][T22491] ip_tables: iptables: counters copy to user failed while replacing table [ 2089.670973][T22494] openvswitch: netlink: Multiple metadata blocks provided [ 2089.837724][T22496] syzkaller0: entered promiscuous mode [ 2089.837750][T22496] syzkaller0: entered allmulticast mode [ 2089.946360][T22496] simple: /de_1 [ 2090.570669][ T33] INFO: task syz.4.13359:19607 blocked for more than 143 seconds. [ 2090.570696][ T33] Not tainted syzkaller #0 [ 2090.570709][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2090.570721][ T33] task:syz.4.13359 state:D stack:26728 pid:19607 tgid:19606 ppid:15021 task_flags:0x400140 flags:0x00080002 [ 2090.570793][ T33] Call Trace: [ 2090.570802][ T33] [ 2090.570818][ T33] __schedule+0x17dd/0x5820 [ 2090.570891][ T33] ? __pfx___schedule+0x10/0x10 [ 2090.570937][ T33] ? schedule+0x90/0x2b0 [ 2090.570976][ T33] schedule+0x164/0x2b0 [ 2090.571013][ T33] schedule_preempt_disabled+0x13/0x30 [ 2090.571047][ T33] __mutex_lock+0x7c4/0x15a0 [ 2090.571076][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 2090.571106][ T33] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 2090.571243][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 2090.571266][ T33] ? net_generic+0x1e/0x240 [ 2090.571297][ T33] ? net_generic+0x1e/0x240 [ 2090.571320][ T33] ? net_generic+0x1e/0x240 [ 2090.571341][ T33] ? net_generic+0x1e/0x240 [ 2090.571371][ T33] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 2090.571400][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 2090.571446][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2090.571499][ T33] ? bpf_lsm_capable+0x9/0x20 [ 2090.571526][ T33] ? security_capable+0x7e/0x2c0 [ 2090.571562][ T33] genl_rcv_msg+0x614/0x7a0 [ 2090.571605][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2090.571648][ T33] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 2090.571693][ T33] netlink_rcv_skb+0x226/0x4a0 [ 2090.571724][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2090.571762][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2090.571811][ T33] ? down_read+0x2b9/0x320 [ 2090.571842][ T33] genl_rcv+0x28/0x40 [ 2090.571876][ T33] netlink_unicast+0x8ef/0xa80 [ 2090.571925][ T33] netlink_sendmsg+0x7f0/0xb20 [ 2090.571963][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2090.572035][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 2090.572073][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 2090.572103][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2090.572133][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 2090.572167][ T33] ____sys_sendmsg+0x54e/0x850 [ 2090.572211][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2090.572259][ T33] ? import_iovec+0x73/0xa0 [ 2090.572298][ T33] ___sys_sendmsg+0x2a5/0x360 [ 2090.572333][ T33] ? __lock_acquire+0x747/0x2de0 [ 2090.572367][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 2090.572410][ T33] ? futex_wait+0x2a2/0x390 [ 2090.572474][ T33] ? __fget_files+0x3a2/0x420 [ 2090.572498][ T33] ? __fget_files+0x2a/0x420 [ 2090.572534][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 2090.572563][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2090.572671][ T33] do_syscall_64+0x166/0x520 [ 2090.572696][ T33] ? trace_irq_disable+0x3b/0x140 [ 2090.572725][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.572749][ T33] ? clear_bhb_loop+0x70/0xc0 [ 2090.572779][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.572803][ T33] RIP: 0033:0x7fbe7ed9f559 [ 2090.572824][ T33] RSP: 002b:00007fbe7fd4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2090.572850][ T33] RAX: ffffffffffffffda RBX: 00007fbe7f025fa0 RCX: 00007fbe7ed9f559 [ 2090.572869][ T33] RDX: 0000000000000020 RSI: 0000200000000840 RDI: 0000000000000007 [ 2090.572885][ T33] RBP: 00007fbe7ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 2090.572901][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2090.572916][ T33] R13: 00007fbe7f026038 R14: 00007fbe7f025fa0 R15: 00007ffd88ad6708 [ 2090.572996][ T33] [ 2090.573036][ T33] [ 2090.573036][ T33] Showing all locks held in the system: [ 2090.573049][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 2090.573068][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2090.573153][ T33] locks held by udevd/4998: 2, last CPU#1: [ 2090.573170][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2090.573268][ T33] #1: ffff8880b853bea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 2090.573338][ T33] locks held by getty/5387: 2, on CPU#1: [ 2090.573354][ T33] #0: ffff8880368c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2090.573484][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2090.573559][ T33] locks held by syz.1.13222/19248: 2, on CPU#1: [ 2090.573577][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2090.573651][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 2090.573709][ T33] locks held by syz.4.13359/19607: 2, on CPU#1: [ 2090.573725][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2090.573786][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 2090.573841][ T33] locks held by syz.2.14075/22454: 1, last CPU#1: [ 2090.573857][ T33] #0: ffffffff9bf4aa40 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 2090.573932][ T33] locks held by syz.3.14080/22498: 2, last CPU#0: [ 2090.573949][ T33] #0: ffff888031ec6540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 2090.574015][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 2090.574081][ T33] locks held by syz.6.14089/22492: 1, on CPU#1: [ 2090.574098][ T33] #0: ffff888053ebccc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 2090.574161][ T33] locks held by syz.6.14089/22500: 1, last CPU#0: [ 2090.574252][ T33] #0: ffff888053ebccc0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 2090.574321][ T33] locks held by sed/22508: 1, last CPU#0: [ 2090.574337][ T33] #0: ffff88802cbd9bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 2090.574402][ T33] locks held by syz.0.14093/22510: 2, last CPU#1: [ 2090.574420][ T33] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0xc40/0xf80 [ 2090.574481][ T33] #1: ffff8880b8528618 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 2090.574540][ T33] [ 2090.574547][ T33] ============================================= [ 2090.574547][ T33] [ 2090.574569][ T33] NMI backtrace for cpu 0 [ 2090.574586][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2090.574628][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2090.574641][ T33] Call Trace: [ 2090.574651][ T33] [ 2090.574661][ T33] dump_stack_lvl+0xe8/0x150 [ 2090.574697][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 2090.574731][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2090.574760][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2090.574797][ T33] sys_info+0x135/0x170 [ 2090.574825][ T33] watchdog+0xfd2/0x1030 [ 2090.574862][ T33] ? watchdog+0x1c7/0x1030 [ 2090.574900][ T33] kthread+0x38b/0x480 [ 2090.574924][ T33] ? __pfx_watchdog+0x10/0x10 [ 2090.574953][ T33] ? __pfx_kthread+0x10/0x10 [ 2090.574980][ T33] ret_from_fork+0x514/0xb70 [ 2090.575010][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 2090.575035][ T33] ? __switch_to+0xc78/0x1410 [ 2090.575073][ T33] ? __pfx_kthread+0x10/0x10 [ 2090.575097][ T33] ret_from_fork_asm+0x1a/0x30 [ 2090.575137][ T33] [ 2090.575171][ T33] Sending NMI from CPU 0 to CPUs 1: [ 2090.575210][ C1] NMI backtrace for cpu 1 [ 2090.575226][ C1] CPU: 1 UID: 0 PID: 22510 Comm: syz.0.14093 Not tainted syzkaller #0 PREEMPT(full) [ 2090.575248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2090.575260][ C1] RIP: 0010:ipv6_mc_init_dev+0x38c/0xa50 [ 2090.575284][ C1] Code: 31 c9 6a 00 e8 95 81 fe f6 48 83 c4 08 4c 8d b3 58 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 d4 76 94 f7 <4c> 89 b3 58 02 00 00 48 8d bb 60 02 00 00 48 89 f8 48 c1 e8 03 42 [ 2090.575302][ C1] RSP: 0018:ffffc90003d87440 EFLAGS: 00000246 [ 2090.575319][ C1] RAX: 1ffff11006959c4b RBX: ffff888034ace000 RCX: 0000000000000001 [ 2090.575334][ C1] RDX: ffffffff9bf72920 RSI: ffffffff8d3497e0 RDI: ffff888034ace270 [ 2090.575349][ C1] RBP: ffff888034ace5ac R08: 0000000000000000 R09: 0000000000000000 [ 2090.575362][ C1] R10: dffffc0000000000 R11: fffffbfff22f8258 R12: ffff888061dc60a8 [ 2090.575377][ C1] R13: dffffc0000000000 R14: ffff888034ace258 R15: 001fffffffc00000 [ 2090.575393][ C1] FS: 00007fac2a1386c0(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 2090.575411][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2090.575424][ C1] CR2: 000055558a5904e8 CR3: 00000000455fa000 CR4: 00000000003526f0 [ 2090.575442][ C1] Call Trace: [ 2090.575450][ C1] [ 2090.575457][ C1] ? ipv6_add_dev+0xb2e/0x1400 [ 2090.575479][ C1] ipv6_add_dev+0xccd/0x1400 [ 2090.575504][ C1] addrconf_notify+0x771/0x1050 [ 2090.575532][ C1] notifier_call_chain+0x1a5/0x3d0 [ 2090.575559][ C1] register_netdevice+0x1bfe/0x2280 [ 2090.575590][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 2090.575610][ C1] ? alloc_netdev_mqs+0xd5b/0x1240 [ 2090.575637][ C1] ? alloc_netdev_mqs+0xe92/0x1240 [ 2090.575665][ C1] mif6_add+0x476/0xcc0 [ 2090.575686][ C1] ? ip6_mroute_setsockopt+0xc40/0xf80 [ 2090.575709][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 2090.575728][ C1] ? __pfx_mif6_add+0x10/0x10 [ 2090.575758][ C1] ip6_mroute_setsockopt+0xe5e/0xf80 [ 2090.575785][ C1] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 2090.575811][ C1] ? lock_acquire+0x115/0x350 [ 2090.575852][ C1] do_ipv6_setsockopt+0x34d/0x2960 [ 2090.575882][ C1] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2090.575907][ C1] ? begin_current_label_crit_section+0x299/0x830 [ 2090.575936][ C1] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 2090.575970][ C1] ? try_to_wake_up+0x8ce/0x14e0 [ 2090.575997][ C1] ? aa_inet_opt_perm+0x94d/0xcd0 [ 2090.576027][ C1] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 2090.576057][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 2090.576092][ C1] ? do_futex+0x3e7/0x4e0 [ 2090.576210][ C1] ? __asan_memcpy+0x40/0x70 [ 2090.576249][ C1] ipv6_setsockopt+0x59/0x170 [ 2090.576282][ C1] rawv6_setsockopt+0x276/0x5e0 [ 2090.576312][ C1] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 2090.576340][ C1] ? sock_common_setsockopt+0x36/0xc0 [ 2090.576365][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2090.576392][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 2090.576425][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 2090.576457][ C1] do_syscall_64+0x166/0x520 [ 2090.576477][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.576497][ C1] ? clear_bhb_loop+0x70/0xc0 [ 2090.576519][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2090.576538][ C1] RIP: 0033:0x7fac2919f559 [ 2090.576558][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2090.576575][ C1] RSP: 002b:00007fac2a138028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2090.576596][ C1] RAX: ffffffffffffffda RBX: 00007fac29425fa0 RCX: 00007fac2919f559 [ 2090.576611][ C1] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000003 [ 2090.576623][ C1] RBP: 00007fac29236b20 R08: 000000000000000c R09: 0000000000000000 [ 2090.576636][ C1] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 2090.576650][ C1] R13: 00007fac29426038 R14: 00007fac29425fa0 R15: 00007ffc3e1f1a58 [ 2090.576675][ C1] [ 2090.643890][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 2091.677289][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2091.686442][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2091.696533][ T33] Call Trace: [ 2091.699847][ T33] [ 2091.702811][ T33] vpanic+0x56d/0xa60 [ 2091.706870][ T33] ? __pfx___schedule+0x10/0x10 [ 2091.711767][ T33] ? __pfx_vpanic+0x10/0x10 [ 2091.716326][ T33] panic+0xc5/0xd0 [ 2091.720087][ T33] ? __pfx_panic+0x10/0x10 [ 2091.724547][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 2091.730063][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 2091.735477][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 2091.741699][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 2091.747901][ T33] watchdog+0x102b/0x1030 [ 2091.752314][ T33] ? watchdog+0x1c7/0x1030 [ 2091.756801][ T33] kthread+0x38b/0x480 [ 2091.760905][ T33] ? __pfx_watchdog+0x10/0x10 [ 2091.765639][ T33] ? __pfx_kthread+0x10/0x10 [ 2091.770269][ T33] ret_from_fork+0x514/0xb70 [ 2091.774939][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 2091.780096][ T33] ? __switch_to+0xc78/0x1410 [ 2091.784818][ T33] ? __pfx_kthread+0x10/0x10 [ 2091.789441][ T33] ret_from_fork_asm+0x1a/0x30 [ 2091.794259][ T33] [ 2091.797901][ T33] Kernel Offset: disabled [ 2091.802281][ T33] Rebooting in 86400 seconds..