last executing test programs: 9m57.047054893s ago: executing program 3 (id=996): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="7b27e60555b40c3bacf3c84aca70751c0264f2d04c58f3e0ff7b57aea57ec8bf6969d4a128b79a75839637ed21128786fe539fa67b2c164f4f1b33490b410977788c588edb17189abd6193e4034439f4ab7569a61734ab727da8d5b67f15b8f28471b91ca73ec4290e5644d558a955b327bc2ae0142d9fc5123dc116531bedae80935ec66cdbb58708b479c7dcdb996a581f29d690e259a3c1df01241b54da9f1a8764422b03c902aad595d73ca68c48ee9c474e2a3270d727b5f7b5e460bc24ee", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESDEC], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e1f, @broadcast}}, 0x7, 0x6191, 0xd7cf, 0x7, 0x11, 0x8, 0xf}, &(0x7f00000001c0)=0x9c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x6, 0x0, 0x82, 0x2, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0x1241, 0x97}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b0000000000000000000000dd09000000000000", @ANYRES32=r4, @ANYBLOB="07000000000000000100"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000100), 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 9m56.399336047s ago: executing program 3 (id=999): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@float={0x7, 0x0, 0x0, 0x10, 0x10}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0xfffffffe, [{0x2, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x46}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x6, 0x14e, 0x0, 0x0, @binary="49bf"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@generic="a16d"]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 9m55.35857664s ago: executing program 3 (id=1008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) 9m55.245885412s ago: executing program 3 (id=1010): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0xfffffffffffffffd, 0x6, 0x8000000000000000}, 0x0, 0x200}, [@algo_comp={0x82, 0x3, {{'lzjh\x00'}, 0x1d0, "83a71cd354ee004b52037060d9d86e3e3e9ecd9f04e2ac1ffcbc148cb5622c0fcfc0253ba8c60e383611c645d4562c1829704da7acdef2d7dace"}}]}, 0x13c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001800dd8d0000008000000000020000000000fd05000003000600150005000000280016"], 0x4c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xe, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 9m55.026416913s ago: executing program 3 (id=1012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "ea0ef4f3ff54ee90", "b1913a235552dba4d04f51b74ce5a855", "f9ba9628", "46645d51188cbaa2"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x782}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000400000192417702", @ANYRES32=0x0, @ANYBLOB="0000020000000000280012800b0001006d61637365630000180002800c0004000000000000000000050003000d000000"], 0x48}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r4}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x6, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="5fd82b6541f6981a2c3f2bdcfa287fd454cef8f3b37f170701e2518b74632ad3ae0375ecc98e387e4f4cd541cd9e7c6b5c360384cef64958a43f1fab9899593aec243e613b845402bd8ebd29488e755723d048946cdbce733f5d25527862614524b49d04cdcaff02419e6487040046a773b5a8d1b3a705b899f7b62bc80f3dcc3982e19b6c260b1117efbf68d14a5031ed6c26f4dd8b5c01bdaeb8c4a68f85fdec3f26ce2d809939b75e6eac87551756c7eee4a1d431f60508d746a79506236472182597afc5", @ANYRESOCT=r0, @ANYBLOB="0fce94827cba7d122dd2bcb64ab263c7d8def874f5058f33866e3e4166c47909c4a8c9f4bb85edcaa4d998a32e733bd45e5f3d37197170f5bc108c62c451058c845d1d9efd2b3c71bedecbafd773db"], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x12a1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x26a3, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x23, 0x2, 0x2}, 0x0, &(0x7f0000000240)={0x9, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x10000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYBLOB="c780d800e9c5a4d623fcce0b14b4e8c24fa05003ebeba9d63308c198376b38c5670042a3663b23dd7d125cf6399f315e3541c0140aeba09f9772abc7d9d7a602dc8189f4189d0df0ae38975e992c627e7d733fa17fb1821b23282c5f9dbb32a8572d50aad6fe4f29aa31f1e41af366b3975c5f6d0d6a654cd9c6", @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4841}, 0x24008850) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e000000a0000000050000003a05000000000400", @ANYRES32, @ANYBLOB="1f1f00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0500000004000000000000000000fcffffff00"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008604000095"], &(0x7f0000000200)='GPL\x00', 0x80000}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @local, 0x0, 0x9, 0x5, 0x0, 0x9, 0x100000}) r8 = socket$inet6(0xa, 0x6, 0x200000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x800, 0x4) close(0x4) 9m54.071735067s ago: executing program 3 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x2, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a80)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x81}, @broadcast, @device_b, @random="705a72a7389a", {0x0, 0x806}, "", @void, @value=@ver_80211n={0x0, 0x69, 0x3, 0x2, 0x0, 0x3}}, @a_msdu}, 0x1c) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 9m39.000151739s ago: executing program 32 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x2, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a80)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x81}, @broadcast, @device_b, @random="705a72a7389a", {0x0, 0x806}, "", @void, @value=@ver_80211n={0x0, 0x69, 0x3, 0x2, 0x0, 0x3}}, @a_msdu}, 0x1c) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 7.186706921s ago: executing program 0 (id=6566): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@empty, @in=@local, 0x4e23, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x7fff, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r3, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x144, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe06}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x13009d85}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8e}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff0000}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4020}, 0x24000011) socket$inet6(0xa, 0x3, 0xff) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e22, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x1ff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000001800)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000ec0)='O', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1) 6.83613477s ago: executing program 0 (id=6568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a0001a356bd7000000000000a0080"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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", 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0xb2}, {&(0x7f0000000940)="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", 0xfffffe38}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="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", 0x1d4}, {&(0x7f00000020c0)="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", 0x981}], 0x6}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1}, 0xce}], 0x1, 0x40002002, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001020010000000000000000000000000a50000000060a09040000000000000000020000002400048020000180070001006374000014000280080001400000000c080002400000000e0900010073797a30000000000900020073797abb000000001400000000000000000000000000000aeeadd3596d0dda8714dab650a3cd868c277039b7155cc1371717378dc1df7f1190fca74c930178e701af2eab42680bdd309226d597b6f0013eca3c83db65edf483e35964c6f0ee1103d75350060b84734de00b6d639d0500bec7b65643c5a88582401706b7524861f3"], 0x78}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a010400000000000000000200000058000480540001800b00010065787468647200004400028005000200830000000800034000000000080004400000003208000640000000020800014000000008080005400000000108000540d052aec108000640000000020900010073797a30000000000900020073797a32"], 0x6034}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000140)={'wg0\x00', {0x2, 0x4e23, @loopback}}) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008051}, 0x4000800) 6.418101236s ago: executing program 0 (id=6573): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1e00000009000000000000000900000003200500", @ANYRES32=r1, @ANYBLOB="0300000000000000000000000000000000000000e3d4d53a2debffbde13227af3c0dad6635a1d59dec465405d2e4654073542cac37ff7e5a4023d511810c80bb04f85cce8808478e1e3ef41cbefe8a391f6d8ebad9430dd06c5d62e75a78f5e513011b3ee7", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="0200000003000000000000000900"/24, @ANYRES32=r1, @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}, {&(0x7f00000007c0)="576394aca49500929bf5365d053cd61c2ae90fbf9c66904bbc52e16814ef1d02c80af8117c6b97bdf72f1d32c9e6d6cdfd8f8bfcb4a9b79fb784928faaa2eae584718a3daeb15a5ea874b2b546cfb78c954ce6f2fbebd6ac0353f251f240f2ca103ece275a7dd52bcbf6561a14dd4d65475169ce6db430487130afbcf141073c6de3e1745343525bae7a6a979c06aca558ec09f29a2b744d0a24898e8e11496a2e6c637707ff41c8e4eefc5ed1548881861d9b80b449841515aa7b993bdfc2bd9c8073ca664c9fa6b27d942ccf0e5ba8e8a1a1793c397b624f0d1d7b1c030f6eee4a4d5f0b8d6001197dd865f4d8994ef8e353beb4d94c03e6d839935e5fc490936cfd8d78925a938c30f517d1517e48282ec1b04f1235f6dfd3ca433b841ba779d5af0e163ab3098bcfaef9ba1f3148a0c1a3025435e89b8e56dd892c01a31e8db413ce701df1ba1731fb80a527f7ea8e43321ac04604f811c3dc50a36b38ae45bade67df344ab1ae9c4839aeebd81107edb041f136c7a6fe7e6b0b32266c53da09662fb247eabcdad826112a0091bcd28c1abf8530c2f65f8e02cffc4cad2744241f4407f00c39fddea08cf7131c1530925cc3eb66923bf6c52d00a0eb680a2512cfed7b3a415b5c7f7e8c609ebf42a33562bc63478f40840326f929a3636850e16af95444fded8bc5770db1987e094e94fb58d67ac9074413f0daffd850dace82378ba047f6ce440ddf828def09819e91479e6db3fd5e5804122ea45275a6caf142cc8f7d045c2b1c2ed4b25e88d68ce59ee820a057994d1d6746adf05b2d5b7aea58ce656ef9b3d7c5b9f86dc6952963aec82a0e7c87584aaeeabfbb724f4e22efd6b0c0d89fed4821e18d79886397557a7acd6f8006038f045d28cbeda01b00ff2dac89f4bfd51bb034f108f36ae365051bd96ae7a2406d67d0b415e6152d5dc9c970e08e6a6a1244499eb4d943732a161a30dd9d0f8df02f93cde9de2c53feb9b741c1915e324cdf41dded50b05c8ee13da1ab83b28b0b3b6fce68db2c2584a9b6ffb5a23dbbef9bc3ffd548bc545ad40525c89207121453051ffa03ac75b20c02571743adf64071c22e8859d7f86a02ebd5255d0b79bfa71a624fada501125baeeb0c59afdced30e23c00fb5e476b6a7e050ae0546948974ad7c1cd7720da45aa7581a1701725825c1f473e5411ae389e311a6955d1ec6a2319bcfd590227f1275a84a208b74e61803b3e039b7e0fd33ee9e6b6b873b78c5d66a8210139476390b481790bd6b289bf7c5a138e62bf03536295248316b3a5dd369427811ef7337539ca25ffd33bed0cf8abff74595f788a0f74d8a02e4762e7b5d7621ffd5292f64e7b8e4babd629de7ea5fbe5190440abee096790dc9d58116849412ab9c2bd94858b675e8bb21d66705f24aeb840432ee6c1ab02ccbdbf970fadfd8ce0739fdbf5310290e6b3a14a193b10343ed276f868ea533972234011ad97937ee9c8587d261680b98af74c07b9219150da64cebef57a4ddeb202e65985a0684c3fb265bfc302f86b19e15649e355ca1b0c1c321b243f89e5840800823470210dd6483ad9e627e9ae63b06ff712233d9cea49c55eda57e2fa0cca7c06d2b0e4ce8cc0db62bcee42e1d4a18b3ebcef7eade7d72f84300b1bc6293df937afd8876f084c17d1b9d18ed85adb6d9d4afc2a51e5cdbf5d84b5527d498225adc76afa4d974836284ae814c5e94f28ef613d3afa7478cc6066cf8292dbb03351aa6c4616e61931ed34e2c83dac8dd14a1a5bb4258fbfde96ff6c2da8cbf382d17b5675510b820ab40f742c161410075d4ce9f070b7f78ed0b993418f8016466f34f7686333f889b8b9fa48858651641dfffd47ef0ccb05f929aac90cc5c6671a6f944db7d4841acd7497b709ce4dc5e62fcd5dbda613b78a88550a0a806ce67643e70240ce181e8a3367ec8025f5ca2f0a8e471978d9330fff4432626d0acad146bfc83fae46f7b06b3406bee83dacb906ce0e2b39f73fe16d9c42ac2a6cec630089669f872c82a506d27c32ecac9a187eed2c981e41ea48eb23265fc4c4ff875a48552d78d6f41ae226bd0acbaa0261ebcb05785d6a871f0f01a0877d75ac8e98823e7442d80881e1dfdb5845646fafacbefaa8d6e96c93825966dff0516a07df41ddd21cc3351761246b01e4b9007b7d7acaceb1830c1928e7155a5d76f8bc34af09eec34aeedd4b48deed66a9f5c5142fdd816873a477c1208a2423de63cc67412701b1ca5f8a85910854bee32cd77a944206f718b2018f209984c78de5d5942c5a3e3046efadbc8ae5f1bd22b6ffb2541b40124511877487a15ea4660778c69d0c31e1d0565a267ffebd5aba1283f2d80fa3a37d05ed2bb912b9c1cf9632596f1b4edd9fb602e465085b8d81b5d0b9cba572bbba48a6e490b8003bec2ece889ffb03e1591bd170d5d18a0f34bc12aa98e440773d35cf71c421cad448b0d511cf9a923939cd430d51e3752909b4687e172f264c725d398dfda504953e9c1e88332e03f5eeba26641031c0ba5defb5040992c3a0dc21b9ccb3a2b5830a67c7e578c86216e7ac57023dadfea986665af96fa97d668faa54accddbba9e99fb9f325b46c39b9960d85a8a5d36b1f5287d281b66b7c090615ef7b339d34841b4a72eefe54e8801ccc275bb36ae94ceea32bf849d1235bf16a840fe1a66070491eaf71ab74e399cfdca81bc0d28b0098407750e8c19fce7ca7f04f08bc483c1d48118408fe428be4b7984e2c2e10786b6c6ffb62cc161952a3f58ee7089c773f8f9b7bb0b738bda447b0ed110def6061b385cd0b973dc15691a15a3383f94da0503d173d793866feea10378830a088101b7a320fbd489781a3be04ffd0de1166db4f2e4b7b752ce18630b093091b02f571a0cb4cc4c45df37a6498b70f685bae449fd5a370b9a94f603e08abe6e60856b5293ebf125cc9e06bb58a3c52a735614fedc38e4eb566e108c338725201f0d49a75e2d031cac072de232c0694e881cfd07bf06ee827bf5a7c38263b51e8d48bc3222f9bd96d2951bf5a98b1594248d8a1fe1c873605c249c62f01fec810ffccaa61ad49c20c1dd14beeb0ce1300613d6eb489d0f3ee45b7150100c444aa7af994f165b4687fddbbfda9a1e67896eec5c4af25af45d085042e6ca3edf2eab7e73aa4dd3fc1eb89c61b903b030b444fe7ee1d569019b44326f8f99136092f9a65ef8dbe1177b108c5c195a163245d99fb35b26be6ed973407afea1e8aa8b8f97e62680975773719a75fdf3c30a6b7ddefee0ba08b7ada660b1a77b1b157f2a41cc8fe2e29aae48d06367c7025592b6115b7d222e7d2a5e9ae1140d3b18ee3427bf92160c5e305eb3a89e89d98cbb5fbb2cd1db8c30f80b662e92f3648124ac77d2011152ca8e5e9caf747624183928f410a1aaea5bd47e7eec1e335689bf1a8be7838f8a45d9f00778482fccd98a1a0a9cfc01609837b922b66e49494393252f91fe07ae55d0ce45b969034ae08d8b5c57c73efba9cf89ca9d3596d1ccfc57581e1bcf906d2a1c1ff982e5e4a4e7333d696ac4052236bab567e37610d8e1bec805f4ef6283fe830fb2737f25d8e354ce2876396bc63f395b06e1fc1cf739cc8f65b3125380d06e9e7fd3ed117272ff87909ee28b0be34db51684ce04a1017298175bb1747b94c20f7ac64ab45aaa5a30459e02ba76211d377167e04b0c5d14b8c8fe9e1e0206a279d5c2630a49fa04a1dcb177cdc3b1ff7616b4a7b96a3cebb7d53986a7d876d8420c781d635a06de91c1cf5b485d6423549f90ff359278bf9447a48d9b102872843a44c1f881fc152f89c4bc73769c480193acd055ecf89864b2fa29057d443fe604e82fb297cbb022375105f630d1c675083cccb9686dd5478e79c1fc927b65a5bf46c0ac65f189e178ffe342f1c94eb881eaa1d166b3e3fde4833f6025e313ce7452f05741dff594b44d92ffa0675af45fc37fc4707f93ed1d3ed180f2c31af936a00063a6652528da580e06b08921b0854911cc401df07231de71dfaac37faf6e1a34feb9e6fff079edc4b30fc0c6329f14daaa465450b8292080193586ae7a50cb7d1290e6fcc813efbd0cf776471d7876ab0e96d891ebc85c48cf40354b74730a78b225e81be99890413e557ed68aea889333e28548ab20a4b2f6f7a63487bc679354c7498a1a1169d20ac66fc25499477fdae7b524d4c29fd11aa3d44ff09f1c855c104bb4c5358d865afe88ab6d78f84cb0d74343822449a4cf858f6d76ea7f61e4f29162e5e938641dd010fa51c3f39d496b7f7c7165078a291be1d0c701b0b67b5c80be80f9e6e4d797df06ca3dbd9c33eb670e8692bbfbe8cf6eac135d630e6051fbdbeab55c3a7b507c8eb72ecc71cd5ffdbe4444a9e97b31cda81a336a2eb6b3735b59ddf6e394156579e793e42a0de077ae04e5694f47b192cf79a51e3ab28e9b22792e638c47586fe2b45b4de8754b5c76627b25423edd6614c6f065881d819560228aabe853b28eea62f9420e1ab3978032454904bdd2188e5150343ceedd3cb68d49225e281815dea5ee9db39fb2dc015318b088d41168e89817fd52c8d5ec570086396c94cba34b66a547d6f099fc0389ffbb355fd1d7cbb8e5965ba7b7b6d4055280910234a8e40d06e9b4f35db125a98976d474454395349685eb1e4681af0635217a01c564e26374d205a274f5e4717a23eb611cd7c50bb26c7033ff9b8a46d898b22cb995e4b5502a1c77ce274369647658ccf6b5224efeef78d7bee9df374327ebda4480862905d53c9469977040dd1c5709782934ee3a833c6cecd50b62517768efaf0b872f3d25e3aa32218840b700e37f0b736818555cb08edb718550ba892cf3c7fe1799100232c83b71089200fc8b9217313d597c2e41c800b387fa2009fc137e994a2d652bdf83422ef5e0aeca3b93afc68f2e716caf4386afa41542d6bd804a5886610fc20ce8a167d7205cce08adc91717be701df9fbd8b4e69b1940f98bdea761b54079ca3e2cff61f4a9047689a9682fa175993d7c3de7cb37135c819ae308982e7b1660d3d46a5671a6063c1ed615558280f92e16ee28ba1afe017eeaeac7443e03ff1d4777431dae8f7c6737bc270cce35b10e0f08300d2da2c89329dcf007e5419c39e4573b5a443ece5107bb154887dabb50991528176a26c1f3efe87ef371acd6b727d3fb5b9e1e4d5f385e5c1fe5934b8535a60d0b3e9cf27b33fb992b97e4c729108b9ab5c9f9a3045ec06f194a043eb8e63c96cbe588e390a0f79019d03ea73b213faeb76d646f51ada64d12ef4ca0de6d1e65a723433a119403917beb7c59e1fba0fc111f3b85149ae65f1f77c797df8d7d018962cb4421bb3bb47911007f37ad9259e72be41dfecca36cf8b2ea7c67a77be38dab17082d8f9e870e1e3e2839f0593e3ae4e79c309303cca0af2bcddf35bf2c6adcab139b08c1217bfac957eac712f2b2b9d634604fc2b57f2ad55ea7d5fe4b49702e217e9be0a03412b7eaa56cc02eda96a3763dd96d71249d6b2dbb7f6506428f66b9cf166b9e79bc59e05ec48efa99928d122310c6ad89a6de1c0ab7c35d413436d07a19ce42116f0fb0c2535dea7770b5f5be71e81de729875d9ee8f96ad1f9f0e47d49df46991e1f40d3227dacd6a901dfec08ca2b7f53547a1327f64a1109e4cd5f00b92e7d4f15304a118fa7a55f2426b91c076ba9d0472de7bd6c254dcba96778db98fdf82f79f9601aff8593895e56d638ec790ef63f414737601a540734e1317c65ee", 0x1000}, {&(0x7f0000000180)="ca00aad670c33b76529bdc562eb67f8aee6cc09ffd547dbaa41c7bec892eaf7237b5819c974cc6aab4c0651fd9e0ec17c352c27cf88dccfad0bf3ef6236bbfa39f9cd4d55f40f375a5aa27041042a9acf566e2548c65eef2251120e106a0a0b4cc008feabc78e896a2d7a52cc020fab588f64dec491498930bfd0ed70aec8ca6fc6481fae10bd0b09e073640da1147211ebfca846a171a39481e9b62f00328c5c041f52354af10c741eb395e27ce73d970dae84b9516fd6bf5cfd586be9d2b290ba2e62351e830574405bd5cd813109b9a65f11e9be542519f5ab5b53203", 0xde}, {&(0x7f0000000540)="3e725722ee466faec6384bb148fd6d32df9cb1cb6a1c6deef7cec906494c9d7a6386e61887b877868fd8ca78dee6febd381e0f7d94067687e69f6dd16cea0cbdb01d8f02ce3f02da0b00f54752c4338226f9170acc6ffc1999eae16c4f70e51c642472e9f89c63abefc5563c0bc8f31649cec7c5b5ddb82d2fa4ee0b17a2615fbf2957310a7cc6f77baad800d33a7aeea76d44000000006ee1055c75288f2a23b386d100706b58531b750251454eb4203db51d887b9e81ab977e8a776591b96f3da684bd750c2af2a69fa49e1b31280323159f58081b44d8bc96ca72a794d3ada462cc02cc6afdba8c3351e22f16d9618722a6c3", 0xf4}, {&(0x7f0000001880)="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", 0x267}], 0x5}, 0x0) 5.980981492s ago: executing program 0 (id=6579): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) 5.659684109s ago: executing program 2 (id=6583): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xff, 0xfffff034}, {0xb1, 0x80, 0x0, 0x80000000}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000780)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0xe000}, 0x0) 5.658882192s ago: executing program 1 (id=6584): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x6, 0x5, 0x2) sendmsg$NL80211_CMD_LEAVE_MESH(r1, 0x0, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/4096}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) syz_genetlink_get_family_id$gtp(0x0, r2) 5.259899127s ago: executing program 2 (id=6585): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.898812052s ago: executing program 1 (id=6588): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x876, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x24000001) splice(0xffffffffffffffff, &(0x7f0000000080)=0xffff, r0, &(0x7f0000000180)=0xa, 0x3a659745, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000340)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r4) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) close(0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0xa00, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}], 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfbfffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r11, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) 4.874378495s ago: executing program 0 (id=6589): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1d, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x10010, r0, 0xbb6d0000) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000540)=0xf, 0x4) 4.526374141s ago: executing program 0 (id=6591): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf251600000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.176414064s ago: executing program 2 (id=6593): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r2}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380900000000000000bd70000000c93500000000a417e70f1be9eeeece5b03cf4fa3f3951ee3e490e6e52bb9a99ea9e4a1de8409c86a92414edfa4cb7534e82d4677321125c981cf4ae471e76570096e7ed14a01e7f68ac0b24dca8212e4437684e78f88a847dd4d16fb82c11b4cf1c6c9b40066826b10b885879c", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c0002800800030001000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0x10, 0x84, 0x2}], 0x10}}], 0x1, 0x40001) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x4}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003340)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0xfff2, 0xd}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) 3.820056069s ago: executing program 1 (id=6596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) close(r1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @remote}, &(0x7f0000000080)=0xc) close(0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000010025bd7000faf01f2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201004c00128009000100626f6e64000000003c000280080012"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 3.511417522s ago: executing program 2 (id=6598): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x80, 0x43, 0x20, 0x70bd2a, 0x25dfdbfc, {0x1c}, [@NDTA_PARMS={0x6c, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0xd4}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x7}, @NDTPA_APP_PROBES={0x8, 0x9, 0x5}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0xff}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x2}, @NDTPA_APP_PROBES={0x8, 0x9, 0x7}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0xfffffffffffffffa}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x2}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x7fffffff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'batadv_slave_0\x00'}}) 3.311768815s ago: executing program 2 (id=6600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, &(0x7f0000000780)=[@init={0x18, 0x84, 0x0, {0x99d1, 0x2, 0x0, 0x10}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x3, 0x9, 0x7fffffff}}], 0x50, 0x4}], 0x1, 0x40010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="01002cbd8300ffdbdf250a0000000c000380080001000100000051afa702000000c59de555ba1e599462149ba4e7e6dc6d4b2b80a7cc741e7099c196340480c20369f884a898a87199e3d10e07000000000000001324318391a96b27"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={{0x14, 0x3eb}, [], {0x14, 0x3f5}}, 0x28}, 0x1, 0x0, 0x0, 0x440d4}, 0x200000c4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000001400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x7af715c19c2d785d}, 0x20000004) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='siox_get_data\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$alg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x1403, 0x20, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x45}, 0x4048082) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2a, 0x2, 0x0) r10 = epoll_create1(0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000100)={0x1a000201d}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)={0x4}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@getaddr={0x0, 0x16, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r12 = openat$cgroup_ro(r7, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r12, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) 3.304067633s ago: executing program 1 (id=6601): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100240000000b9efa00010062726900d5c02abb7d14c705002b6ab426160fecf43211ad1d0002f7f205106c9a7d0b5e5e6611828ee8d50000000000000000000011b0b388ec"], 0x44}}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 3.160016115s ago: executing program 5 (id=6603): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x34}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x5a, 0x6}, @func={0x9, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/186, 0x37, 0xba, 0x1, 0x9}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x10000, 0x80000000, 0x34, 0xffffffffffffffff, 0x81, '\x00', 0x0, r6, 0x3, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) listen(r8, 0x1) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0xfffffffd) r11 = accept4(r10, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYBLOB="584eb5144cce08f782f99d3a0aa0533592cd4afeb9a52ba4694601653ff824036d1231d92aabc4e3f5cc057bbd7b6db69bad3738b2da77ad764250a466b1c15b9bc83b1537d936b2f61fdd57877a22ae54f7f9cabbaf6ad909423ff0f0ab4776e7b6146d85ac863022f253fd6b21b0eb13ceb398595003b70e700797a6d67200aaf24cc74d7a5ba3dff920b76ac708e86b4df93878934891cfd8b911559c228a204cbe1657b2729130f3ba797c9ad2063304572e6349284ebb0a65a2ca88523be24e9051a98101ee050c66a96ed5b9a91a624550b122f2fd2fef4db6ad13789b570677cf99d722bf642543c3777a29713e7c454e2d164ea678"], 0x7c}}, 0x80) 3.000016857s ago: executing program 4 (id=6604): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback={0x300}, 0x23}, 0x1c) 2.972253154s ago: executing program 2 (id=6605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 2.816959754s ago: executing program 4 (id=6606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.809457957s ago: executing program 5 (id=6607): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r5 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000040)={0x6ca}, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.200040096s ago: executing program 5 (id=6608): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket$unix(0x1, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 1.720458606s ago: executing program 1 (id=6609): socket(0x10, 0x3, 0x0) socket(0x2, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) 1.45185991s ago: executing program 4 (id=6610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) 1.372647674s ago: executing program 1 (id=6611): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x40}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1371}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="34000000120001002abd7000fedbdf2564010100000000000000000000000000000004d50a00ff"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) sendto(r1, &(0x7f0000000c80)="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", 0x1000, 0x20000000, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x4, 0x3, {0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x80) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.369169453s ago: executing program 5 (id=6612): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffff", 0x11, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (fail_nth: 1) 1.16508503s ago: executing program 4 (id=6613): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb03000040000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) 678.96317ms ago: executing program 5 (id=6614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xf, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000480)=@in6={0x2, 0x4e22, 0x8000, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, 0x0}, 0x4004800) socket$kcm(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_type(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES16, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x6}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYBLOB="41a7d3649bff84016267128608ad6616cf07e80573f8b4a25b390499c1018e0097eb36e8e11a15bd1e501489052e232ac52124cd1e67f9d3c624c282a16f26145141ba243131862d50f287f506cfb442eb1b51e9945e1a50e72935519ce8aa33e9d1074e812c4925f9368bd9f58fbfcb374c52169faa9910192fa45301a26f0caf399f984c396f99c35eb08e7018862409dc01daeac925eda139bae643c967dcf2a4adcec18bcdea56ef3e510dbf7c1c290bcb975ae2d0932fc035596d4ea7493c5208b86475f3bab3fda3993cc9efdccddff0e65c6ae6ff0f0b3c6dce6a139cb8cd66ecc9894476da9a7947d1a69aa03188ce1f6fe695d418c37130bc86", @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000020ffdbdf2501ffc48273b1a8ff000000000018001700200000000000006574683a7465616d30000000"], 0x34}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 245.101114ms ago: executing program 5 (id=6615): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_ts_info={0x1f}}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3ff, 0x103d, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg1\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffff", 0x11, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) 166.258378ms ago: executing program 4 (id=6616): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000980)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r6}, &(0x7f00000012c0), &(0x7f0000001300)=r4}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000000202010100860000200000000000000218000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0xc884) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000160a01080000000000000000020000000900020073797a30000000000900010073797a300000000004000380140000001100010000000000000000000000000a07cfad65fa10f1f2ce0a585e0742d990b5f50010e3b89103bc0616bd1188a9a50fc010a2d72b0227e44a90dfa11247b741f3ef2d071f"], 0x58}}, 0x24040884) write(r0, &(0x7f0000000000)="0a000000010000", 0x7) 0s ago: executing program 4 (id=6617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000150000000000000000000000000000fdff000000000000007273b8f55e162f9221198ecfcdc4bee710dffb8ba4cc08f116bb2c3a3639c8e8a6120fd2a07cd4b81d5d4690f3eed6fbae4a2ae7a31f5128b11c02d2633a75f3815dc7d448f4517e577e15100841e4a33a18093dfca33312bf81db335449d12ba70862c34673aff3bcef149bc34ca31cef65f25fb2ebfb2897a189fde40f29bd0f42beed00acdfaceded0a4eb898ef0438e91de566"], 0x50) r1 = socket(0xa, 0x3, 0x87) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0xf}, 0xffffffff, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000280)="72de10de", 0x4}, {0x0}], 0x2}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket(0xb, 0x80805, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008000000"], 0x24}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x18) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x890c, &(0x7f0000000000)=@generic={0x1, 0x6, 0x3}) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100e926415e622e0dcb01000a0000e207000500000000000c0007000000cb00000000e7070009007100000039b678d5c6b1c12290d34c8bef070006007272f59ccaa42288287cdf1d40b5db5ae78ba58d1f7eca729e143b25f1b6ccd1f1e60e02f5b21d56e8511304a827f1c20e6fc6a4d4076998ca91d0275f339cb863a4dfaece4a249d487722cca94bbd9dbe3ee7ba1c439d65fff82a54daeff68958da2fe9f4883bb501f8e7bd5e0801bae903daca6266fd84ccc8f1655b28afcd3444c22124c8d60000000000000000"], 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r2], &(0x7f0000000600)=""/99, 0x4d, 0x63, 0x1001, 0x80000001, 0x10000}, 0x28) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000000203010400000000000000000200000108000100010000080900020000000002010000005cd28f353634e75bc66e80749961797697ca43e67ea17cce407c22b302b5ac5f41689445e82daa50fbf917609611928afc528285dc4c8eca204528df9299c96c83"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) kernel console output (not intermixed with test programs): import_iovec+0x74/0xa0 [ 717.987212][T26334] ___sys_sendmsg+0x21f/0x2a0 [ 717.987233][T26334] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.987301][T26334] ? __fget_files+0x2a/0x420 [ 717.987316][T26334] ? __fget_files+0x3a0/0x420 [ 717.987344][T26334] __x64_sys_sendmsg+0x19b/0x260 [ 717.987367][T26334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.987396][T26334] ? __pfx_ksys_write+0x10/0x10 [ 717.987416][T26334] ? rcu_is_watching+0x15/0xb0 [ 717.987439][T26334] ? do_syscall_64+0xbe/0x3b0 [ 717.987467][T26334] do_syscall_64+0xfa/0x3b0 [ 717.987488][T26334] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.987510][T26334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.987528][T26334] ? clear_bhb_loop+0x60/0xb0 [ 717.987550][T26334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.987567][T26334] RIP: 0033:0x7fe181d8ebe9 [ 717.987583][T26334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.987598][T26334] RSP: 002b:00007fe182bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.987618][T26334] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8ebe9 [ 717.987631][T26334] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 717.987642][T26334] RBP: 00007fe182bec090 R08: 0000000000000000 R09: 0000000000000000 [ 717.987654][T26334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.987665][T26334] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 717.987697][T26334] [ 718.374334][T26339] netlink: 'syz.4.6079': attribute type 1 has an invalid length. [ 718.383697][T26339] netlink: 'syz.4.6079': attribute type 1 has an invalid length. [ 718.425188][ T5867] Bluetooth: hci0: command tx timeout [ 718.503056][T26342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6080'. [ 718.549436][T26339] netlink: 'syz.4.6079': attribute type 1 has an invalid length. [ 718.593885][T26347] FAULT_INJECTION: forcing a failure. [ 718.593885][T26347] name failslab, interval 1, probability 0, space 0, times 0 [ 718.607627][T26347] CPU: 0 UID: 0 PID: 26347 Comm: syz.1.6082 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 718.607652][T26347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 718.607663][T26347] Call Trace: [ 718.607671][T26347] [ 718.607680][T26347] dump_stack_lvl+0x189/0x250 [ 718.607705][T26347] ? __pfx____ratelimit+0x10/0x10 [ 718.607727][T26347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.607747][T26347] ? __pfx__printk+0x10/0x10 [ 718.607772][T26347] ? __lock_acquire+0xab9/0xd20 [ 718.607805][T26347] should_fail_ex+0x414/0x560 [ 718.607833][T26347] should_failslab+0xa8/0x100 [ 718.607859][T26347] kmem_cache_alloc_noprof+0x73/0x3c0 [ 718.607878][T26347] ? skb_clone+0x212/0x3a0 [ 718.607900][T26347] skb_clone+0x212/0x3a0 [ 718.607919][T26347] __netlink_deliver_tap+0x404/0x850 [ 718.607955][T26347] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.607979][T26347] netlink_deliver_tap+0x19c/0x1b0 [ 718.608004][T26347] netlink_unicast+0x7fa/0x9e0 [ 718.608036][T26347] ? __pfx_netlink_unicast+0x10/0x10 [ 718.608060][T26347] ? netlink_sendmsg+0x642/0xb30 [ 718.608082][T26347] ? skb_put+0x11b/0x210 [ 718.608103][T26347] netlink_sendmsg+0x805/0xb30 [ 718.608138][T26347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.608165][T26347] ? aa_sock_msg_perm+0xf1/0x1d0 [ 718.608193][T26347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 718.608219][T26347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.608244][T26347] __sock_sendmsg+0x219/0x270 [ 718.608270][T26347] ____sys_sendmsg+0x505/0x830 [ 718.608295][T26347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.608325][T26347] ? import_iovec+0x74/0xa0 [ 718.608350][T26347] ___sys_sendmsg+0x21f/0x2a0 [ 718.608372][T26347] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.608430][T26347] ? __fget_files+0x2a/0x420 [ 718.608444][T26347] ? __fget_files+0x3a0/0x420 [ 718.608470][T26347] __x64_sys_sendmsg+0x19b/0x260 [ 718.608492][T26347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.608520][T26347] ? __pfx_ksys_write+0x10/0x10 [ 718.608540][T26347] ? rcu_is_watching+0x15/0xb0 [ 718.608564][T26347] ? do_syscall_64+0xbe/0x3b0 [ 718.608593][T26347] do_syscall_64+0xfa/0x3b0 [ 718.608614][T26347] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.608636][T26347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.608655][T26347] ? clear_bhb_loop+0x60/0xb0 [ 718.608677][T26347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.608694][T26347] RIP: 0033:0x7fb49018ebe9 [ 718.608711][T26347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.608725][T26347] RSP: 002b:00007fb490f3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.608745][T26347] RAX: ffffffffffffffda RBX: 00007fb4903b5fa0 RCX: 00007fb49018ebe9 [ 718.608757][T26347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 718.608767][T26347] RBP: 00007fb490f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.608778][T26347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.608789][T26347] R13: 00007fb4903b6038 R14: 00007fb4903b5fa0 R15: 00007fff04d2c188 [ 718.608819][T26347] [ 718.686560][T26339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 719.014487][T26341] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 719.038192][T26351] vlan2: entered allmulticast mode [ 719.045461][T26351] veth1: entered allmulticast mode [ 719.956023][T26385] FAULT_INJECTION: forcing a failure. [ 719.956023][T26385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.988976][T26385] CPU: 0 UID: 0 PID: 26385 Comm: syz.0.6094 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 719.988999][T26385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 719.989009][T26385] Call Trace: [ 719.989015][T26385] [ 719.989022][T26385] dump_stack_lvl+0x189/0x250 [ 719.989043][T26385] ? __pfx____ratelimit+0x10/0x10 [ 719.989061][T26385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.989076][T26385] ? __pfx__printk+0x10/0x10 [ 719.989095][T26385] ? __might_fault+0xb0/0x130 [ 719.989122][T26385] should_fail_ex+0x414/0x560 [ 719.989145][T26385] _copy_from_user+0x2d/0xb0 [ 719.989161][T26385] ___sys_sendmsg+0x158/0x2a0 [ 719.989178][T26385] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.989232][T26385] ? __fget_files+0x2a/0x420 [ 719.989243][T26385] ? __fget_files+0x3a0/0x420 [ 719.989267][T26385] __x64_sys_sendmsg+0x19b/0x260 [ 719.989287][T26385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 719.989314][T26385] ? __pfx_ksys_write+0x10/0x10 [ 719.989331][T26385] ? rcu_is_watching+0x15/0xb0 [ 719.989353][T26385] ? do_syscall_64+0xbe/0x3b0 [ 719.989376][T26385] do_syscall_64+0xfa/0x3b0 [ 719.989391][T26385] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.989408][T26385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.989421][T26385] ? clear_bhb_loop+0x60/0xb0 [ 719.989437][T26385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.989450][T26385] RIP: 0033:0x7f0b93d8ebe9 [ 719.989463][T26385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.989474][T26385] RSP: 002b:00007f0b94bbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.989490][T26385] RAX: ffffffffffffffda RBX: 00007f0b93fb5fa0 RCX: 00007f0b93d8ebe9 [ 719.989499][T26385] RDX: 0000000000000800 RSI: 0000200000003080 RDI: 0000000000000003 [ 719.989508][T26385] RBP: 00007f0b94bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 719.989516][T26385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.989523][T26385] R13: 00007f0b93fb6038 R14: 00007f0b93fb5fa0 R15: 00007ffcd3e76518 [ 719.989546][T26385] [ 720.287833][T26225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.299377][T26225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.496452][T26405] netlink: 'syz.5.6100': attribute type 1 has an invalid length. [ 720.500981][T26225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.506755][ T5867] Bluetooth: hci0: command tx timeout [ 720.524982][T26405] netlink: 'syz.5.6100': attribute type 1 has an invalid length. [ 720.597801][T26225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.645658][T26402] bond0: option primary_reselect: invalid value (17) [ 720.649893][T26408] netlink: 'syz.5.6100': attribute type 1 has an invalid length. [ 720.734086][T26408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 720.773744][T26225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.785878][T26225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.812970][T26405] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 720.823128][T26411] tap0: tun_chr_ioctl cmd 1074025680 [ 720.845762][T26415] tipc: Enabled bearer , priority 0 [ 720.920688][T26225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.938856][T26225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.045391][T26422] tipc: Enabled bearer , priority 0 [ 721.054030][T26422] syzkaller0: entered promiscuous mode [ 721.060950][T26422] syzkaller0: entered allmulticast mode [ 721.136740][T26422] tipc: Resetting bearer [ 721.197403][T26421] tipc: Resetting bearer [ 721.224902][T26429] FAULT_INJECTION: forcing a failure. [ 721.224902][T26429] name failslab, interval 1, probability 0, space 0, times 0 [ 721.242148][T26429] CPU: 0 UID: 0 PID: 26429 Comm: syz.0.6108 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 721.242174][T26429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 721.242185][T26429] Call Trace: [ 721.242192][T26429] [ 721.242201][T26429] dump_stack_lvl+0x189/0x250 [ 721.242226][T26429] ? __pfx____ratelimit+0x10/0x10 [ 721.242250][T26429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.242270][T26429] ? __pfx__printk+0x10/0x10 [ 721.242299][T26429] ? __pfx___might_resched+0x10/0x10 [ 721.242320][T26429] should_fail_ex+0x414/0x560 [ 721.242347][T26429] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 721.242370][T26429] should_failslab+0xa8/0x100 [ 721.242395][T26429] __kvmalloc_node_noprof+0x161/0x5f0 [ 721.242419][T26429] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 721.242448][T26429] bpf_test_run_xdp_live+0x18e/0x1b10 [ 721.242475][T26429] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 721.242505][T26429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.242538][T26429] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 721.242560][T26429] ? bpf_dispatcher_xdp+0x800/0x1000 [ 721.242578][T26429] ? bpf_dispatcher_xdp+0x800/0x1000 [ 721.242641][T26429] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 721.242672][T26429] ? _copy_from_user+0x94/0xb0 [ 721.242692][T26429] ? bpf_test_init+0x133/0x170 [ 721.242711][T26429] ? xdp_convert_md_to_buff+0x5b/0x330 [ 721.242737][T26429] bpf_prog_test_run_xdp+0x713/0x1000 [ 721.242776][T26429] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 721.242805][T26429] ? __fget_files+0x2a/0x420 [ 721.242835][T26429] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 721.242859][T26429] bpf_prog_test_run+0x2c4/0x340 [ 721.242886][T26429] __sys_bpf+0x581/0x870 [ 721.242909][T26429] ? __pfx___sys_bpf+0x10/0x10 [ 721.242944][T26429] ? ksys_write+0x22a/0x250 [ 721.242968][T26429] ? __pfx_ksys_write+0x10/0x10 [ 721.242986][T26429] ? rcu_is_watching+0x15/0xb0 [ 721.243012][T26429] __x64_sys_bpf+0x7c/0x90 [ 721.243033][T26429] do_syscall_64+0xfa/0x3b0 [ 721.243056][T26429] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.243077][T26429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.243095][T26429] ? clear_bhb_loop+0x60/0xb0 [ 721.243117][T26429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.243134][T26429] RIP: 0033:0x7f0b93d8ebe9 [ 721.243150][T26429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.243165][T26429] RSP: 002b:00007f0b94bbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 721.243184][T26429] RAX: ffffffffffffffda RBX: 00007f0b93fb5fa0 RCX: 00007f0b93d8ebe9 [ 721.243197][T26429] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 721.243209][T26429] RBP: 00007f0b94bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 721.243220][T26429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.243232][T26429] R13: 00007f0b93fb6038 R14: 00007f0b93fb5fa0 R15: 00007ffcd3e76518 [ 721.243262][T26429] [ 721.244871][T26421] tipc: Disabling bearer [ 721.700184][T26442] __nla_validate_parse: 11 callbacks suppressed [ 721.700204][T26442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6112'. [ 721.739826][T26439] tap0: tun_chr_ioctl cmd 1074025680 [ 721.781759][T26439] tipc: Enabling of bearer rejected, already enabled [ 721.843249][T26225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 721.859805][T26438] lo speed is unknown, defaulting to 1000 [ 721.885936][T26225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 721.937507][T26225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 721.946538][T26447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6115'. [ 721.979792][T26225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 722.125768][T26459] FAULT_INJECTION: forcing a failure. [ 722.125768][T26459] name failslab, interval 1, probability 0, space 0, times 0 [ 722.164103][T26459] CPU: 1 UID: 0 PID: 26459 Comm: syz.4.6117 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 722.164129][T26459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 722.164141][T26459] Call Trace: [ 722.164148][T26459] [ 722.164156][T26459] dump_stack_lvl+0x189/0x250 [ 722.164183][T26459] ? __pfx____ratelimit+0x10/0x10 [ 722.164204][T26459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.164224][T26459] ? __pfx__printk+0x10/0x10 [ 722.164253][T26459] ? __pfx___might_resched+0x10/0x10 [ 722.164275][T26459] should_fail_ex+0x414/0x560 [ 722.164303][T26459] should_failslab+0xa8/0x100 [ 722.164329][T26459] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 722.164353][T26459] ? __alloc_skb+0x112/0x2d0 [ 722.164379][T26459] __alloc_skb+0x112/0x2d0 [ 722.164407][T26459] netlink_sendmsg+0x5c6/0xb30 [ 722.164439][T26459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.164467][T26459] ? aa_sock_msg_perm+0xf1/0x1d0 [ 722.164494][T26459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 722.164514][T26459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.164537][T26459] __sock_sendmsg+0x219/0x270 [ 722.164562][T26459] ____sys_sendmsg+0x505/0x830 [ 722.164586][T26459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.164612][T26459] ? import_iovec+0x74/0xa0 [ 722.164636][T26459] ___sys_sendmsg+0x21f/0x2a0 [ 722.164657][T26459] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.164711][T26459] ? __fget_files+0x2a/0x420 [ 722.164727][T26459] ? __fget_files+0x3a0/0x420 [ 722.164753][T26459] __x64_sys_sendmsg+0x19b/0x260 [ 722.164774][T26459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 722.164801][T26459] ? __pfx_ksys_write+0x10/0x10 [ 722.164821][T26459] ? rcu_is_watching+0x15/0xb0 [ 722.164845][T26459] ? do_syscall_64+0xbe/0x3b0 [ 722.164872][T26459] do_syscall_64+0xfa/0x3b0 [ 722.164892][T26459] ? lockdep_hardirqs_on+0x9c/0x150 [ 722.164913][T26459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.164931][T26459] ? clear_bhb_loop+0x60/0xb0 [ 722.164952][T26459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.164968][T26459] RIP: 0033:0x7f461958ebe9 [ 722.164984][T26459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.164999][T26459] RSP: 002b:00007f461a4b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.165016][T26459] RAX: ffffffffffffffda RBX: 00007f46197b5fa0 RCX: 00007f461958ebe9 [ 722.165027][T26459] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000004 [ 722.165046][T26459] RBP: 00007f461a4b4090 R08: 0000000000000000 R09: 0000000000000000 [ 722.165056][T26459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.165065][T26459] R13: 00007f46197b6038 R14: 00007f46197b5fa0 R15: 00007ffd93c631a8 [ 722.165091][T26459] [ 722.572010][ T5867] Bluetooth: hci0: command tx timeout [ 722.656938][T26461] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6118'. [ 722.666588][T26461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6118'. [ 722.717485][T26468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6119'. [ 722.764279][T26225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.780356][T26461] syz_tun: left allmulticast mode [ 722.785712][T26461] dvmrp1: left allmulticast mode [ 722.892537][T26225] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.943162][T23244] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.950383][T23244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.012389][T23247] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.019609][T23247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.069952][T26478] FAULT_INJECTION: forcing a failure. [ 723.069952][T26478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.121552][T26478] CPU: 0 UID: 0 PID: 26478 Comm: syz.4.6120 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 723.121579][T26478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 723.121589][T26478] Call Trace: [ 723.121596][T26478] [ 723.121605][T26478] dump_stack_lvl+0x189/0x250 [ 723.121629][T26478] ? __pfx____ratelimit+0x10/0x10 [ 723.121649][T26478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.121667][T26478] ? __pfx__printk+0x10/0x10 [ 723.121685][T26478] ? __might_fault+0xb0/0x130 [ 723.121715][T26478] should_fail_ex+0x414/0x560 [ 723.121753][T26478] _copy_from_iter+0x1db/0x16f0 [ 723.121775][T26478] ? rcu_is_watching+0x15/0xb0 [ 723.121794][T26478] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 723.121817][T26478] ? __pfx__copy_from_iter+0x10/0x10 [ 723.121836][T26478] ? __build_skb_around+0x257/0x3e0 [ 723.121863][T26478] ? netlink_sendmsg+0x642/0xb30 [ 723.121884][T26478] ? skb_put+0x11b/0x210 [ 723.121903][T26478] netlink_sendmsg+0x6b2/0xb30 [ 723.121935][T26478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.121963][T26478] ? aa_sock_msg_perm+0xf1/0x1d0 [ 723.121987][T26478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.122007][T26478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.122031][T26478] __sock_sendmsg+0x219/0x270 [ 723.122053][T26478] ____sys_sendmsg+0x505/0x830 [ 723.122077][T26478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.122105][T26478] ? import_iovec+0x74/0xa0 [ 723.122128][T26478] ___sys_sendmsg+0x21f/0x2a0 [ 723.122149][T26478] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.122201][T26478] ? __fget_files+0x2a/0x420 [ 723.122217][T26478] ? __fget_files+0x3a0/0x420 [ 723.122243][T26478] __x64_sys_sendmsg+0x19b/0x260 [ 723.122264][T26478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.122289][T26478] ? __pfx_ksys_write+0x10/0x10 [ 723.122307][T26478] ? rcu_is_watching+0x15/0xb0 [ 723.122329][T26478] ? do_syscall_64+0xbe/0x3b0 [ 723.122355][T26478] do_syscall_64+0xfa/0x3b0 [ 723.122376][T26478] ? lockdep_hardirqs_on+0x9c/0x150 [ 723.122396][T26478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.122410][T26478] ? clear_bhb_loop+0x60/0xb0 [ 723.122426][T26478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.122438][T26478] RIP: 0033:0x7f461958ebe9 [ 723.122453][T26478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.122467][T26478] RSP: 002b:00007f461a493038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.122486][T26478] RAX: ffffffffffffffda RBX: 00007f46197b6090 RCX: 00007f461958ebe9 [ 723.122498][T26478] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 723.122507][T26478] RBP: 00007f461a493090 R08: 0000000000000000 R09: 0000000000000000 [ 723.122518][T26478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.122529][T26478] R13: 00007f46197b6128 R14: 00007f46197b6090 R15: 00007ffd93c631a8 [ 723.122558][T26478] [ 723.641451][ T6440] vlan2: left promiscuous mode [ 723.805134][T26225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.814546][T26494] Bluetooth: MGMT ver 1.23 [ 723.996841][T26494] netlink: 'syz.4.6124': attribute type 7 has an invalid length. [ 724.030802][T26494] netlink: 'syz.4.6124': attribute type 8 has an invalid length. [ 724.056895][T26225] veth0_vlan: entered promiscuous mode [ 724.075730][T26494] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6124'. [ 724.097358][T26225] veth1_vlan: entered promiscuous mode [ 724.196292][T26225] veth0_macvtap: entered promiscuous mode [ 724.235559][T26225] veth1_macvtap: entered promiscuous mode [ 724.475485][T26225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.483755][T26517] netlink: 'syz.5.6134': attribute type 1 has an invalid length. [ 724.503653][T26517] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.6134'. [ 724.515156][T26225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.550025][T26517] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6134'. [ 724.579371][T23247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.588285][T23247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.626718][T23247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.650431][T23247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.711815][T26522] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 724.886824][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6137'. [ 724.896685][T23240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.926967][T23240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.013694][T23239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.034845][T23239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.091203][T26530] FAULT_INJECTION: forcing a failure. [ 725.091203][T26530] name failslab, interval 1, probability 0, space 0, times 0 [ 725.107804][T26530] CPU: 0 UID: 0 PID: 26530 Comm: syz.5.6140 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 725.107830][T26530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.107856][T26530] Call Trace: [ 725.107864][T26530] [ 725.107872][T26530] dump_stack_lvl+0x189/0x250 [ 725.107898][T26530] ? __pfx____ratelimit+0x10/0x10 [ 725.107919][T26530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.107940][T26530] ? __pfx__printk+0x10/0x10 [ 725.107966][T26530] ? __lock_acquire+0xab9/0xd20 [ 725.107998][T26530] should_fail_ex+0x414/0x560 [ 725.108026][T26530] should_failslab+0xa8/0x100 [ 725.108051][T26530] kmem_cache_alloc_noprof+0x73/0x3c0 [ 725.108071][T26530] ? skb_clone+0x212/0x3a0 [ 725.108094][T26530] skb_clone+0x212/0x3a0 [ 725.108115][T26530] __netlink_deliver_tap+0x404/0x850 [ 725.108149][T26530] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.108173][T26530] netlink_deliver_tap+0x19c/0x1b0 [ 725.108195][T26530] netlink_unicast+0x7fa/0x9e0 [ 725.108226][T26530] ? __pfx_netlink_unicast+0x10/0x10 [ 725.108249][T26530] ? netlink_sendmsg+0x642/0xb30 [ 725.108271][T26530] ? skb_put+0x11b/0x210 [ 725.108288][T26530] netlink_sendmsg+0x805/0xb30 [ 725.108329][T26530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.108354][T26530] ? aa_sock_msg_perm+0xf1/0x1d0 [ 725.108381][T26530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 725.108402][T26530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.108431][T26530] __sock_sendmsg+0x219/0x270 [ 725.108454][T26530] ____sys_sendmsg+0x505/0x830 [ 725.108478][T26530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.108504][T26530] ? import_iovec+0x74/0xa0 [ 725.108527][T26530] ___sys_sendmsg+0x21f/0x2a0 [ 725.108547][T26530] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.108607][T26530] ? __fget_files+0x2a/0x420 [ 725.108622][T26530] ? __fget_files+0x3a0/0x420 [ 725.108648][T26530] __x64_sys_sendmsg+0x19b/0x260 [ 725.108668][T26530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.108697][T26530] ? __pfx_ksys_write+0x10/0x10 [ 725.108716][T26530] ? rcu_is_watching+0x15/0xb0 [ 725.108737][T26530] ? do_syscall_64+0xbe/0x3b0 [ 725.108762][T26530] do_syscall_64+0xfa/0x3b0 [ 725.108782][T26530] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.108803][T26530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.108819][T26530] ? clear_bhb_loop+0x60/0xb0 [ 725.108839][T26530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.108865][T26530] RIP: 0033:0x7fe181d8ebe9 [ 725.108879][T26530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.108892][T26530] RSP: 002b:00007fe182bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.108907][T26530] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8ebe9 [ 725.108918][T26530] RDX: 0000000020000050 RSI: 0000200000000540 RDI: 0000000000000003 [ 725.108927][T26530] RBP: 00007fe182bec090 R08: 0000000000000000 R09: 0000000000000000 [ 725.108936][T26530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.108944][T26530] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 725.108965][T26530] [ 725.485394][T26534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.616732][T26540] lo speed is unknown, defaulting to 1000 [ 725.616773][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6138'. [ 726.287420][T26560] veth1_virt_wifi: entered allmulticast mode [ 726.330023][T26562] netlink: 'syz.5.6148': attribute type 23 has an invalid length. [ 726.748255][T26571] __nla_validate_parse: 5 callbacks suppressed [ 726.748273][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6151'. [ 726.832876][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.843025][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 726.865971][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 726.875522][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.884903][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 727.008202][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.144733][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.399923][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.425076][T26572] lo speed is unknown, defaulting to 1000 [ 727.520214][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.863874][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 727.883135][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 728.026726][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 728.037381][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 728.079027][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6161'. [ 728.201934][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 728.212696][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 728.300337][T26615] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6163'. [ 728.459866][ T13] team0: Port device geneve0 removed [ 728.843561][ T13] bond0 (unregistering): Released all slaves [ 728.967633][ T13] bond1 (unregistering): Released all slaves [ 728.974695][ T51] Bluetooth: hci1: command tx timeout [ 729.111927][T26622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6166'. [ 729.168053][ T13] bond2 (unregistering): (slave wlan0): Releasing active interface [ 729.176432][ T13] vlan2: entered promiscuous mode [ 729.186477][ T13] bond2 (unregistering): (slave vlan2): Releasing active interface [ 729.197960][ T13] bond2 (unregistering): Released all slaves [ 729.354080][T26626] FAULT_INJECTION: forcing a failure. [ 729.354080][T26626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.390076][T26626] CPU: 0 UID: 0 PID: 26626 Comm: syz.2.6167 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 729.390104][T26626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 729.390116][T26626] Call Trace: [ 729.390123][T26626] [ 729.390132][T26626] dump_stack_lvl+0x189/0x250 [ 729.390158][T26626] ? __pfx____ratelimit+0x10/0x10 [ 729.390182][T26626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.390202][T26626] ? __pfx__printk+0x10/0x10 [ 729.390226][T26626] ? __might_fault+0xb0/0x130 [ 729.390261][T26626] should_fail_ex+0x414/0x560 [ 729.390305][T26626] _copy_from_user+0x2d/0xb0 [ 729.390326][T26626] ___sys_sendmsg+0x158/0x2a0 [ 729.390348][T26626] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.390403][T26626] ? __fget_files+0x2a/0x420 [ 729.390418][T26626] ? __fget_files+0x3a0/0x420 [ 729.390445][T26626] __x64_sys_sendmsg+0x19b/0x260 [ 729.390464][T26626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.390490][T26626] ? __pfx_ksys_write+0x10/0x10 [ 729.390509][T26626] ? rcu_is_watching+0x15/0xb0 [ 729.390531][T26626] ? do_syscall_64+0xbe/0x3b0 [ 729.390555][T26626] do_syscall_64+0xfa/0x3b0 [ 729.390575][T26626] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.390595][T26626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.390612][T26626] ? clear_bhb_loop+0x60/0xb0 [ 729.390632][T26626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.390648][T26626] RIP: 0033:0x7fef9138ebe9 [ 729.390664][T26626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.390678][T26626] RSP: 002b:00007fef921b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.390698][T26626] RAX: ffffffffffffffda RBX: 00007fef915b5fa0 RCX: 00007fef9138ebe9 [ 729.390711][T26626] RDX: 000000000404c080 RSI: 0000200000000240 RDI: 0000000000000003 [ 729.390723][T26626] RBP: 00007fef921b6090 R08: 0000000000000000 R09: 0000000000000000 [ 729.390734][T26626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.390745][T26626] R13: 00007fef915b6038 R14: 00007fef915b5fa0 R15: 00007ffddde92478 [ 729.390775][T26626] [ 729.823814][T26636] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input131 [ 730.001779][T26572] chnl_net:caif_netlink_parms(): no params data found [ 730.140263][T26628] delete_channel: no stack [ 730.166813][T26647] sctp: [Deprecated]: syz.0.6173 (pid 26647) Use of int in max_burst socket option. [ 730.166813][T26647] Use struct sctp_assoc_value instead [ 730.381778][T26572] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.393517][T26572] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.402342][T26572] bridge_slave_0: entered allmulticast mode [ 730.412023][T26572] bridge_slave_0: entered promiscuous mode [ 730.429868][T26572] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.443174][T26572] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.454259][T26572] bridge_slave_1: entered allmulticast mode [ 730.476685][T26572] bridge_slave_1: entered promiscuous mode [ 730.643275][T26572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.686574][T26572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.767173][T26572] team0: Port device team_slave_0 added [ 730.784554][T26661] lo speed is unknown, defaulting to 1000 [ 730.793802][T26572] team0: Port device team_slave_1 added [ 731.052072][ T51] Bluetooth: hci1: command tx timeout [ 731.076230][ T13] tipc: Left network mode [ 731.105914][T26572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.146303][T26572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.201635][T26572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.213530][T26677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.305130][T26572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.312420][T26572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.339549][T26572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.385529][T26681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input132 [ 731.592927][ T13] mac80211_hwsim hwsim34 wlan1 (unregistering): left promiscuous mode [ 731.718594][T26688] netlink: 'syz.4.6185': attribute type 1 has an invalid length. [ 731.736617][T26688] netlink: 'syz.4.6185': attribute type 1 has an invalid length. [ 731.862285][T26572] hsr_slave_0: entered promiscuous mode [ 731.899674][T26572] hsr_slave_1: entered promiscuous mode [ 731.912017][T26572] debugfs: 'hsr0' already exists in 'hsr' [ 731.926472][T26572] Cannot create hsr debugfs directory [ 731.997785][T26695] netlink: 'syz.4.6185': attribute type 1 has an invalid length. [ 732.111414][T26698] __nla_validate_parse: 4 callbacks suppressed [ 732.111438][T26698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6188'. [ 732.113324][T26700] FAULT_INJECTION: forcing a failure. [ 732.113324][T26700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.207700][T26700] CPU: 1 UID: 0 PID: 26700 Comm: syz.5.6189 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 732.207726][T26700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.207737][T26700] Call Trace: [ 732.207746][T26700] [ 732.207754][T26700] dump_stack_lvl+0x189/0x250 [ 732.207779][T26700] ? __pfx____ratelimit+0x10/0x10 [ 732.207802][T26700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.207822][T26700] ? __pfx__printk+0x10/0x10 [ 732.207858][T26700] should_fail_ex+0x414/0x560 [ 732.207886][T26700] _copy_to_user+0x31/0xb0 [ 732.207909][T26700] simple_read_from_buffer+0xe1/0x170 [ 732.207939][T26700] proc_fail_nth_read+0x1b3/0x220 [ 732.207963][T26700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.207986][T26700] ? rw_verify_area+0x2a6/0x4d0 [ 732.208006][T26700] ? __lock_acquire+0xab9/0xd20 [ 732.208028][T26700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.208049][T26700] vfs_read+0x1fd/0xa30 [ 732.208070][T26700] ? fdget_pos+0x247/0x320 [ 732.208089][T26700] ? __pfx___mutex_lock+0x10/0x10 [ 732.208114][T26700] ? __pfx_vfs_read+0x10/0x10 [ 732.208137][T26700] ? __fget_files+0x2a/0x420 [ 732.208158][T26700] ? __fget_files+0x3a0/0x420 [ 732.208180][T26700] ? __fget_files+0x2a/0x420 [ 732.208206][T26700] ksys_read+0x145/0x250 [ 732.208230][T26700] ? __pfx_ksys_read+0x10/0x10 [ 732.208249][T26700] ? rcu_is_watching+0x15/0xb0 [ 732.208272][T26700] ? do_syscall_64+0xbe/0x3b0 [ 732.208300][T26700] do_syscall_64+0xfa/0x3b0 [ 732.208318][T26700] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.208340][T26700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.208358][T26700] ? clear_bhb_loop+0x60/0xb0 [ 732.208380][T26700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.208400][T26700] RIP: 0033:0x7fe181d8d5fc [ 732.208415][T26700] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 732.208428][T26700] RSP: 002b:00007fe182bec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.208446][T26700] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8d5fc [ 732.208459][T26700] RDX: 000000000000000f RSI: 00007fe182bec0a0 RDI: 0000000000000004 [ 732.208469][T26700] RBP: 00007fe182bec090 R08: 0000000000000000 R09: 0000000000000000 [ 732.208479][T26700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.208488][T26700] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 732.208518][T26700] [ 732.254284][T26695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.391917][T26706] netlink: 79 bytes leftover after parsing attributes in process `syz.5.6191'. [ 732.495501][T26699] vlan2: entered allmulticast mode [ 732.506863][T26699] bond2: (slave vlan2): making interface the new active one [ 732.517309][T26699] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 732.921266][T26724] sctp: [Deprecated]: syz.5.6195 (pid 26724) Use of int in max_burst socket option. [ 732.921266][T26724] Use struct sctp_assoc_value instead [ 732.925108][T26723] sctp: [Deprecated]: syz.0.6193 (pid 26723) Use of int in max_burst socket option. [ 732.925108][T26723] Use struct sctp_assoc_value instead [ 732.998104][T26720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6192'. [ 733.101230][T26713] lo speed is unknown, defaulting to 1000 [ 733.129012][ T51] Bluetooth: hci1: command tx timeout [ 733.136007][ T13] hsr_slave_0: left promiscuous mode [ 733.164862][T26728] FAULT_INJECTION: forcing a failure. [ 733.164862][T26728] name failslab, interval 1, probability 0, space 0, times 0 [ 733.177623][T26728] CPU: 1 UID: 0 PID: 26728 Comm: syz.4.6196 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 733.177649][T26728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.177659][T26728] Call Trace: [ 733.177667][T26728] [ 733.177675][T26728] dump_stack_lvl+0x189/0x250 [ 733.177700][T26728] ? __pfx____ratelimit+0x10/0x10 [ 733.177723][T26728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.177743][T26728] ? __pfx__printk+0x10/0x10 [ 733.177791][T26728] ? __lock_acquire+0xab9/0xd20 [ 733.177819][T26728] should_fail_ex+0x414/0x560 [ 733.177847][T26728] should_failslab+0xa8/0x100 [ 733.177871][T26728] kmem_cache_alloc_noprof+0x73/0x3c0 [ 733.177892][T26728] ? dst_alloc+0x105/0x170 [ 733.177916][T26728] dst_alloc+0x105/0x170 [ 733.177940][T26728] ip_route_input_rcu+0x1ed5/0x2ff0 [ 733.177969][T26728] ? do_xdp_generic+0x11a/0x11a0 [ 733.177989][T26728] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 733.178006][T26728] ? inet_ehashfn+0x8d/0x210 [ 733.178061][T26728] ? ip_route_input_noref+0x98/0x250 [ 733.178082][T26728] ip_route_input_noref+0x167/0x250 [ 733.178104][T26728] ? __pfx_ip_route_input_noref+0x10/0x10 [ 733.178126][T26728] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 733.178150][T26728] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 733.178180][T26728] ip_rcv_finish_core+0x5af/0x1c00 [ 733.178212][T26728] ip_rcv_finish+0x14c/0x2f0 [ 733.178237][T26728] NF_HOOK+0x309/0x3a0 [ 733.178258][T26728] ? __pfx_ip_rcv_finish+0x10/0x10 [ 733.178277][T26728] ? NF_HOOK+0x9a/0x3a0 [ 733.178297][T26728] ? __pfx_NF_HOOK+0x10/0x10 [ 733.178314][T26728] ? ip_rcv_core+0x7f7/0xd00 [ 733.178336][T26728] ? __pfx_ip_rcv_finish+0x10/0x10 [ 733.178365][T26728] ? __pfx_ip_rcv+0x10/0x10 [ 733.178396][T26728] __netif_receive_skb+0x143/0x380 [ 733.178417][T26728] ? read_tsc+0x9/0x20 [ 733.178442][T26728] ? netif_receive_skb+0x115/0x790 [ 733.178460][T26728] netif_receive_skb+0x1cb/0x790 [ 733.178483][T26728] ? __pfx_netif_receive_skb+0x10/0x10 [ 733.178511][T26728] ? tun_rx_batched+0x160/0x730 [ 733.178531][T26728] tun_rx_batched+0x1b9/0x730 [ 733.178546][T26728] ? __lock_acquire+0xab9/0xd20 [ 733.178574][T26728] ? __pfx_tun_rx_batched+0x10/0x10 [ 733.178593][T26728] ? tun_get_user+0x266c/0x3e20 [ 733.178623][T26728] tun_get_user+0x2aa2/0x3e20 [ 733.178647][T26728] ? tun_get_user+0x6f6/0x3e20 [ 733.178665][T26728] ? tun_get_user+0x266c/0x3e20 [ 733.178687][T26728] ? aa_file_perm+0x44d/0x1550 [ 733.178703][T26728] ? __pfx_tun_get_user+0x10/0x10 [ 733.178730][T26728] ? __lock_acquire+0xab9/0xd20 [ 733.178759][T26728] ? ref_tracker_alloc+0x318/0x460 [ 733.178780][T26728] ? __lock_acquire+0xab9/0xd20 [ 733.178806][T26728] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 733.178836][T26728] ? tun_get+0x1c/0x2f0 [ 733.178859][T26728] ? tun_get+0x1c/0x2f0 [ 733.178876][T26728] ? tun_get+0x1c/0x2f0 [ 733.178898][T26728] tun_chr_write_iter+0x113/0x200 [ 733.178927][T26728] vfs_write+0x5c6/0xb30 [ 733.178955][T26728] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 733.178982][T26728] ? __pfx_vfs_write+0x10/0x10 [ 733.179016][T26728] ? __fget_files+0x2a/0x420 [ 733.179043][T26728] ksys_write+0x145/0x250 [ 733.179068][T26728] ? __pfx_ksys_write+0x10/0x10 [ 733.179096][T26728] ? do_syscall_64+0xbe/0x3b0 [ 733.179123][T26728] do_syscall_64+0xfa/0x3b0 [ 733.179145][T26728] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.179166][T26728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.179184][T26728] ? clear_bhb_loop+0x60/0xb0 [ 733.179206][T26728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.179224][T26728] RIP: 0033:0x7f461958d69f [ 733.179242][T26728] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 733.179257][T26728] RSP: 002b:00007f461a4b4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 733.179276][T26728] RAX: ffffffffffffffda RBX: 00007f46197b5fa0 RCX: 00007f461958d69f [ 733.179290][T26728] RDX: 0000000000000042 RSI: 0000200000000180 RDI: 00000000000000c8 [ 733.179302][T26728] RBP: 00007f461a4b4090 R08: 0000000000000000 R09: 0000000000000000 [ 733.179313][T26728] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 733.179325][T26728] R13: 00007f46197b6038 R14: 00007f46197b5fa0 R15: 00007ffd93c631a8 [ 733.179357][T26728] [ 733.633519][ T13] hsr_slave_1: left promiscuous mode [ 733.656959][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.670450][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.689560][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.696978][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.901417][ T13] veth1_macvtap: left promiscuous mode [ 733.907007][ T13] veth0_macvtap: left promiscuous mode [ 733.913523][ T13] veth1_vlan: left promiscuous mode [ 733.918924][ T13] veth0_vlan: left promiscuous mode [ 734.686851][ T13] team0 (unregistering): Port device team_slave_1 removed [ 734.731085][ T13] team0 (unregistering): Port device team_slave_0 removed [ 735.208870][ T51] Bluetooth: hci1: command tx timeout [ 735.365796][T26755] netlink: 'syz.5.6201': attribute type 1 has an invalid length. [ 735.374453][T26755] netlink: 'syz.5.6201': attribute type 1 has an invalid length. [ 735.427484][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 735.599872][T26763] netlink: 'syz.5.6201': attribute type 1 has an invalid length. [ 735.739610][T26768] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6205'. [ 735.924191][T26763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.946988][T26767] vlan2: entered allmulticast mode [ 735.952322][T26767] veth1: entered allmulticast mode [ 735.963391][T26767] bond2: (slave vlan2): making interface the new active one [ 735.972293][T26767] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 736.035778][T26776] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 736.049526][T26776] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 736.071689][T26778] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6207'. [ 736.073800][ T13] IPVS: stop unused estimator thread 0... [ 736.309200][T26784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6209'. [ 736.337567][T26782] !: renamed from dummy0 (while UP) [ 736.574019][T26572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 736.624158][T26572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 736.685993][T26572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 736.743196][T26572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 737.258056][T26572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.363906][T26572] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.434023][T23246] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.441269][T23246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.516390][T23246] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.523659][T23246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.070800][T26836] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 738.132849][T26839] tipc: Enabled bearer , priority 0 [ 738.151511][T26839] syzkaller0: entered promiscuous mode [ 738.157075][T26839] syzkaller0: entered allmulticast mode [ 738.172169][T26842] netlink: 'syz.0.6222': attribute type 1 has an invalid length. [ 738.183375][T26842] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6222'. [ 738.213026][T26839] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 738.225554][T26839] tipc: Resetting bearer [ 738.253846][T26837] tipc: Resetting bearer [ 738.309567][T26837] tipc: Disabling bearer [ 738.352032][T26843] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6222'. [ 738.352713][T26846] netlink: 'syz.5.6224': attribute type 1 has an invalid length. [ 738.451958][T26846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.528307][T26848] bond1: (slave wlan0): Releasing active interface [ 738.577558][ T5952] IPVS: starting estimator thread 0... [ 738.600713][T26848] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 738.679487][T26855] IPVS: using max 36 ests per chain, 86400 per kthread [ 738.684808][T26572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.901382][T26572] veth0_vlan: entered promiscuous mode [ 738.941765][T26572] veth1_vlan: entered promiscuous mode [ 739.017714][T26870] IPv6: Can't replace route, no match found [ 739.061994][T26864] lo speed is unknown, defaulting to 1000 [ 739.100381][T26572] veth0_macvtap: entered promiscuous mode [ 739.141479][T26572] veth1_macvtap: entered promiscuous mode [ 739.192285][T26572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.239122][T26572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.288760][T23240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.307461][T23240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.350400][T23240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.378027][T23240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.765151][T23247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.773977][T26863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.805407][T23247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.861940][T26880] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6235'. [ 739.911856][T26880] pimreg3: entered allmulticast mode [ 739.983505][T26880] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6235'. [ 740.005381][T26880] tipc: Enabling of bearer rejected, already enabled [ 740.015282][T17859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.048800][T17859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.158355][T26890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6239'. [ 741.130362][T26919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6244'. [ 741.333797][T26926] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6245'. [ 741.358166][T26930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6247'. [ 741.538671][ T123] block nbd1: Possible stuck request ffff888025645080: control (read@0,4096B). Runtime 60 seconds [ 741.608154][T26935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6249'. [ 742.080994][T26950] netlink: 'syz.4.6256': attribute type 1 has an invalid length. [ 742.094158][T26948] lo speed is unknown, defaulting to 1000 [ 742.119059][T26950] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6256'. [ 742.188118][T26950] netlink: 'syz.4.6256': attribute type 3 has an invalid length. [ 742.334444][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 742.346983][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 742.356808][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 742.367748][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 742.385482][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 742.791547][T26967] Bluetooth: MGMT ver 1.23 [ 742.859406][T26973] sctp: [Deprecated]: syz.5.6261 (pid 26973) Use of int in max_burst socket option. [ 742.859406][T26973] Use struct sctp_assoc_value instead [ 742.884394][T26953] lo speed is unknown, defaulting to 1000 [ 742.903868][T23246] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.924720][T23246] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.002271][T23246] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.021509][T23246] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.499355][T26994] __nla_validate_parse: 2 callbacks suppressed [ 743.499373][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6268'. [ 743.648004][T26993] netlink: zone id is out of range [ 743.684335][T26993] netlink: zone id is out of range [ 743.697931][T26993] netlink: zone id is out of range [ 743.723507][T26993] netlink: zone id is out of range [ 743.744332][T26993] netlink: zone id is out of range [ 743.756473][T26993] netlink: zone id is out of range [ 743.786200][T26993] netlink: zone id is out of range [ 743.799339][T26993] netlink: zone id is out of range [ 743.806167][T26993] netlink: zone id is out of range [ 743.812011][T26993] netlink: zone id is out of range [ 744.380257][T26997] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 744.412730][ T51] Bluetooth: hci3: command tx timeout [ 744.451751][T26953] chnl_net:caif_netlink_parms(): no params data found [ 744.471367][T27017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6276'. [ 744.621649][T27021] tipc: Started in network mode [ 744.626561][T27021] tipc: Node identity c, cluster identity 4711 [ 744.676287][T27021] tipc: Node number set to 12 [ 744.769507][T27021] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6277'. [ 744.875667][T27034] FAULT_INJECTION: forcing a failure. [ 744.875667][T27034] name failslab, interval 1, probability 0, space 0, times 0 [ 744.891387][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6280'. [ 744.895455][T27034] CPU: 1 UID: 0 PID: 27034 Comm: syz.5.6283 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 744.895480][T27034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 744.895490][T27034] Call Trace: [ 744.895498][T27034] [ 744.895506][T27034] dump_stack_lvl+0x189/0x250 [ 744.895531][T27034] ? __pfx____ratelimit+0x10/0x10 [ 744.895550][T27034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.895567][T27034] ? __pfx__printk+0x10/0x10 [ 744.895591][T27034] ? __pfx___might_resched+0x10/0x10 [ 744.895608][T27034] ? fs_reclaim_acquire+0x7d/0x100 [ 744.895644][T27034] should_fail_ex+0x414/0x560 [ 744.895672][T27034] should_failslab+0xa8/0x100 [ 744.895697][T27034] __kmalloc_cache_noprof+0x70/0x3d0 [ 744.895720][T27034] ? alloc_netdev_mqs+0xb90/0x11b0 [ 744.895738][T27034] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 744.895759][T27034] alloc_netdev_mqs+0xb90/0x11b0 [ 744.895786][T27034] rtnl_create_link+0x31f/0xd10 [ 744.895813][T27034] rtnl_newlink_create+0x25c/0xb00 [ 744.895835][T27034] ? __mutex_lock+0x5b6/0x1360 [ 744.895865][T27034] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 744.895885][T27034] ? __pfx___mutex_lock+0x10/0x10 [ 744.895918][T27034] ? ns_capable+0x8a/0xf0 [ 744.895940][T27034] rtnl_newlink+0x16d6/0x1c70 [ 744.895963][T27034] ? netlink_sendmsg+0x805/0xb30 [ 744.895999][T27034] ? __pfx_rtnl_newlink+0x10/0x10 [ 744.896047][T27034] ? kasan_quarantine_put+0xdd/0x220 [ 744.896067][T27034] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.896095][T27034] ? nlmon_xmit+0xb0/0x100 [ 744.896110][T27034] ? kmem_cache_free+0x18f/0x400 [ 744.896140][T27034] ? __local_bh_enable_ip+0x12d/0x1c0 [ 744.896157][T27034] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.896179][T27034] ? __local_bh_enable_ip+0x12d/0x1c0 [ 744.896197][T27034] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 744.896218][T27034] ? __dev_queue_xmit+0x27b/0x3b50 [ 744.896237][T27034] ? __dev_queue_xmit+0x27b/0x3b50 [ 744.896253][T27034] ? __dev_queue_xmit+0x27b/0x3b50 [ 744.896272][T27034] ? __dev_queue_xmit+0x1d79/0x3b50 [ 744.896297][T27034] ? __lock_acquire+0xab9/0xd20 [ 744.896347][T27034] ? __pfx_rtnl_newlink+0x10/0x10 [ 744.896368][T27034] rtnetlink_rcv_msg+0x7cc/0xb70 [ 744.896400][T27034] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 744.896422][T27034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.896442][T27034] ? ref_tracker_free+0x63a/0x7d0 [ 744.896464][T27034] ? __asan_memcpy+0x40/0x70 [ 744.896487][T27034] ? __pfx_ref_tracker_free+0x10/0x10 [ 744.896520][T27034] netlink_rcv_skb+0x205/0x470 [ 744.896543][T27034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.896568][T27034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.896603][T27034] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.896639][T27034] netlink_unicast+0x82c/0x9e0 [ 744.896669][T27034] ? __pfx_netlink_unicast+0x10/0x10 [ 744.896693][T27034] ? netlink_sendmsg+0x642/0xb30 [ 744.896713][T27034] ? skb_put+0x11b/0x210 [ 744.896733][T27034] netlink_sendmsg+0x805/0xb30 [ 744.896765][T27034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.896792][T27034] ? aa_sock_msg_perm+0xf1/0x1d0 [ 744.896819][T27034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 744.896838][T27034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.896861][T27034] __sock_sendmsg+0x219/0x270 [ 744.896886][T27034] ____sys_sendmsg+0x505/0x830 [ 744.896910][T27034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.896937][T27034] ? import_iovec+0x74/0xa0 [ 744.896960][T27034] ___sys_sendmsg+0x21f/0x2a0 [ 744.896980][T27034] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.897036][T27034] ? __fget_files+0x2a/0x420 [ 744.897051][T27034] ? __fget_files+0x3a0/0x420 [ 744.897078][T27034] __x64_sys_sendmsg+0x19b/0x260 [ 744.897099][T27034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 744.897127][T27034] ? __pfx_ksys_write+0x10/0x10 [ 744.897146][T27034] ? rcu_is_watching+0x15/0xb0 [ 744.897169][T27034] ? do_syscall_64+0xbe/0x3b0 [ 744.897196][T27034] do_syscall_64+0xfa/0x3b0 [ 744.897217][T27034] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.897238][T27034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.897255][T27034] ? clear_bhb_loop+0x60/0xb0 [ 744.897276][T27034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.897293][T27034] RIP: 0033:0x7fe181d8ebe9 [ 744.897310][T27034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.897325][T27034] RSP: 002b:00007fe182bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.897343][T27034] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8ebe9 [ 744.897356][T27034] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 744.897367][T27034] RBP: 00007fe182bec090 R08: 0000000000000000 R09: 0000000000000000 [ 744.897378][T27034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.897389][T27034] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 744.897419][T27034] [ 744.965112][T26953] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.389652][T27046] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 745.397675][T27046] FAULT_INJECTION: forcing a failure. [ 745.397675][T27046] name failslab, interval 1, probability 0, space 0, times 0 [ 745.406931][T26953] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.417634][T27046] CPU: 0 UID: 0 PID: 27046 Comm: syz.2.6286 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 745.417661][T27046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.417672][T27046] Call Trace: [ 745.417681][T27046] [ 745.417689][T27046] dump_stack_lvl+0x189/0x250 [ 745.417719][T27046] ? __pfx____ratelimit+0x10/0x10 [ 745.417743][T27046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.417763][T27046] ? __pfx__printk+0x10/0x10 [ 745.417792][T27046] ? __pfx___might_resched+0x10/0x10 [ 745.417808][T27046] ? fs_reclaim_acquire+0x7d/0x100 [ 745.417838][T27046] should_fail_ex+0x414/0x560 [ 745.417865][T27046] should_failslab+0xa8/0x100 [ 745.417890][T27046] __kmalloc_cache_noprof+0x70/0x3d0 [ 745.417913][T27046] ? smc_pnet_add+0xe04/0x13d0 [ 745.417936][T27046] smc_pnet_add+0xe04/0x13d0 [ 745.417956][T27046] ? smc_pnet_add+0x9c1/0x13d0 [ 745.417976][T27046] ? __pfx_smc_pnet_add+0x10/0x10 [ 745.417999][T27046] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 745.418029][T27046] genl_family_rcv_msg_doit+0x215/0x300 [ 745.418056][T27046] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 745.418090][T27046] ? bpf_lsm_capable+0x9/0x20 [ 745.418111][T27046] ? security_capable+0x7e/0x2e0 [ 745.418141][T27046] genl_rcv_msg+0x60e/0x790 [ 745.418168][T27046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.418186][T27046] ? __pfx_smc_pnet_add+0x10/0x10 [ 745.418220][T27046] netlink_rcv_skb+0x205/0x470 [ 745.418241][T27046] ? __lock_acquire+0xab9/0xd20 [ 745.418265][T27046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.418287][T27046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.418337][T27046] ? down_read+0x1ad/0x2e0 [ 745.418357][T27046] genl_rcv+0x28/0x40 [ 745.418374][T27046] netlink_unicast+0x82c/0x9e0 [ 745.418403][T27046] ? __pfx_netlink_unicast+0x10/0x10 [ 745.418426][T27046] ? netlink_sendmsg+0x642/0xb30 [ 745.418445][T27046] ? skb_put+0x11b/0x210 [ 745.418464][T27046] netlink_sendmsg+0x805/0xb30 [ 745.418498][T27046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.418525][T27046] ? aa_sock_msg_perm+0xf1/0x1d0 [ 745.418551][T27046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 745.418569][T27046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.418594][T27046] __sock_sendmsg+0x219/0x270 [ 745.418620][T27046] ____sys_sendmsg+0x505/0x830 [ 745.418645][T27046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.418671][T27046] ? import_iovec+0x74/0xa0 [ 745.418695][T27046] ___sys_sendmsg+0x21f/0x2a0 [ 745.418716][T27046] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.418775][T27046] ? __fget_files+0x2a/0x420 [ 745.418791][T27046] ? __fget_files+0x3a0/0x420 [ 745.418817][T27046] __x64_sys_sendmsg+0x19b/0x260 [ 745.418838][T27046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.418866][T27046] ? __pfx_ksys_write+0x10/0x10 [ 745.418886][T27046] ? rcu_is_watching+0x15/0xb0 [ 745.418910][T27046] ? do_syscall_64+0xbe/0x3b0 [ 745.418938][T27046] do_syscall_64+0xfa/0x3b0 [ 745.418959][T27046] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.418982][T27046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.418998][T27046] ? clear_bhb_loop+0x60/0xb0 [ 745.419018][T27046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.419035][T27046] RIP: 0033:0x7fef9138ebe9 [ 745.419052][T27046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.419067][T27046] RSP: 002b:00007fef921b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.419086][T27046] RAX: ffffffffffffffda RBX: 00007fef915b5fa0 RCX: 00007fef9138ebe9 [ 745.419099][T27046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 745.419111][T27046] RBP: 00007fef921b6090 R08: 0000000000000000 R09: 0000000000000000 [ 745.419122][T27046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.419133][T27046] R13: 00007fef915b6038 R14: 00007fef915b5fa0 R15: 00007ffddde92478 [ 745.419160][T27046] [ 745.796273][T26953] bridge_slave_0: entered allmulticast mode [ 745.804547][T26953] bridge_slave_0: entered promiscuous mode [ 745.813991][T26953] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.821201][T26953] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.828538][T26953] bridge_slave_1: entered allmulticast mode [ 745.836318][T26953] bridge_slave_1: entered promiscuous mode [ 745.877145][T23245] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.886645][T23245] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.895468][T23245] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.902570][T27054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6289'. [ 745.904318][T23245] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.979828][T26953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.047937][T26953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.126068][T26953] team0: Port device team_slave_0 added [ 746.131340][T27062] netlink: 'syz.1.6292': attribute type 1 has an invalid length. [ 746.144049][T26953] team0: Port device team_slave_1 added [ 746.258011][T26953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.275449][T26953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.310603][T26953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.404919][T27062] veth3: entered promiscuous mode [ 746.452004][T26953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.468638][T26953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.498170][ T51] Bluetooth: hci3: command tx timeout [ 746.539210][T26953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.774718][T26953] hsr_slave_0: entered promiscuous mode [ 746.793898][T26953] hsr_slave_1: entered promiscuous mode [ 746.833948][T26953] debugfs: 'hsr0' already exists in 'hsr' [ 746.855044][T26953] Cannot create hsr debugfs directory [ 746.871350][T27081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6295'. [ 746.906853][T27081] FAULT_INJECTION: forcing a failure. [ 746.906853][T27081] name failslab, interval 1, probability 0, space 0, times 0 [ 746.965362][T27081] CPU: 1 UID: 0 PID: 27081 Comm: syz.2.6295 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 746.965389][T27081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 746.965400][T27081] Call Trace: [ 746.965409][T27081] [ 746.965418][T27081] dump_stack_lvl+0x189/0x250 [ 746.965451][T27081] ? __pfx____ratelimit+0x10/0x10 [ 746.965476][T27081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.965496][T27081] ? __pfx__printk+0x10/0x10 [ 746.965523][T27081] ? __pfx___might_resched+0x10/0x10 [ 746.965540][T27081] ? fs_reclaim_acquire+0x7d/0x100 [ 746.965570][T27081] should_fail_ex+0x414/0x560 [ 746.965597][T27081] ? nf_hook_entries_grow+0x27c/0x710 [ 746.965620][T27081] should_failslab+0xa8/0x100 [ 746.965644][T27081] __kvmalloc_node_noprof+0x161/0x5f0 [ 746.965668][T27081] ? nf_hook_entries_grow+0x27c/0x710 [ 746.965690][T27081] ? __pfx___mutex_lock+0x10/0x10 [ 746.965718][T27081] nf_hook_entries_grow+0x27c/0x710 [ 746.965757][T27081] __nf_register_net_hook+0x2c9/0x930 [ 746.965793][T27081] nf_register_net_hook+0x8a/0x190 [ 746.965820][T27081] nf_tables_register_hook+0x216/0x440 [ 746.965847][T27081] nf_tables_newchain+0x2469/0x2900 [ 746.965885][T27081] ? __pfx_nf_tables_newchain+0x10/0x10 [ 746.965941][T27081] ? nfnl_pernet+0x23/0x240 [ 746.965972][T27081] ? __nla_parse+0x40/0x60 [ 746.966001][T27081] nfnetlink_rcv+0x1132/0x2520 [ 746.966058][T27081] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 746.966098][T27081] ? ref_tracker_free+0x63a/0x7d0 [ 746.966151][T27081] ? __netlink_deliver_tap+0x807/0x850 [ 746.966175][T27081] ? netlink_deliver_tap+0x2e/0x1b0 [ 746.966217][T27081] netlink_unicast+0x82c/0x9e0 [ 746.966249][T27081] ? __pfx_netlink_unicast+0x10/0x10 [ 746.966273][T27081] ? netlink_sendmsg+0x642/0xb30 [ 746.966295][T27081] ? skb_put+0x11b/0x210 [ 746.966320][T27081] netlink_sendmsg+0x805/0xb30 [ 746.966354][T27081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.966382][T27081] ? aa_sock_msg_perm+0xf1/0x1d0 [ 746.966409][T27081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 746.966433][T27081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.966458][T27081] __sock_sendmsg+0x219/0x270 [ 746.966484][T27081] ____sys_sendmsg+0x505/0x830 [ 746.966509][T27081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.966537][T27081] ? import_iovec+0x74/0xa0 [ 746.966562][T27081] ___sys_sendmsg+0x21f/0x2a0 [ 746.966583][T27081] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.966641][T27081] ? __fget_files+0x2a/0x420 [ 746.966657][T27081] ? __fget_files+0x3a0/0x420 [ 746.966684][T27081] __x64_sys_sendmsg+0x19b/0x260 [ 746.966705][T27081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.966735][T27081] ? __pfx_ksys_write+0x10/0x10 [ 746.966755][T27081] ? rcu_is_watching+0x15/0xb0 [ 746.966780][T27081] ? do_syscall_64+0xbe/0x3b0 [ 746.966807][T27081] do_syscall_64+0xfa/0x3b0 [ 746.966829][T27081] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.966852][T27081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.966870][T27081] ? clear_bhb_loop+0x60/0xb0 [ 746.966891][T27081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.966909][T27081] RIP: 0033:0x7fef9138ebe9 [ 746.966926][T27081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.966942][T27081] RSP: 002b:00007fef921b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.966961][T27081] RAX: ffffffffffffffda RBX: 00007fef915b5fa0 RCX: 00007fef9138ebe9 [ 746.966974][T27081] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 746.966986][T27081] RBP: 00007fef921b6090 R08: 0000000000000000 R09: 0000000000000000 [ 746.966998][T27081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.967008][T27081] R13: 00007fef915b6038 R14: 00007fef915b5fa0 R15: 00007ffddde92478 [ 746.967040][T27081] [ 747.528341][T27084] pim6reg: entered allmulticast mode [ 747.535665][T27084] pim6reg: left allmulticast mode [ 747.654984][T27089] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6297'. [ 748.135053][T27097] lo speed is unknown, defaulting to 1000 [ 748.326591][T27104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6301'. [ 748.579316][ T51] Bluetooth: hci3: command tx timeout [ 749.013943][T27111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6302'. [ 749.774713][T26953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.816113][T26953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.889351][T27128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6306'. [ 749.983140][T27125] tipc: Started in network mode [ 749.989420][T27125] tipc: Node identity c, cluster identity 4711 [ 750.006267][T27125] tipc: Node number set to 12 [ 750.045282][T27120] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6304'. [ 750.393488][T26953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.445764][T26953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.650316][ T51] Bluetooth: hci3: command tx timeout [ 750.963267][T26953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.024824][T26953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.161603][T27130] delete_channel: no stack [ 751.588028][T26953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.633213][T26953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.691142][T26953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 752.729656][T26953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 752.770869][T26953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 752.818165][T26953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 753.096169][T27166] netlink: 'syz.1.6314': attribute type 1 has an invalid length. [ 753.161548][T27166] netlink: 'syz.1.6314': attribute type 1 has an invalid length. [ 753.453111][T26953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.847326][T27175] vlan2: entered allmulticast mode [ 753.905149][T27175] veth1: entered allmulticast mode [ 754.074253][T27172] : entered promiscuous mode [ 754.183071][T26953] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.261933][T23240] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.269131][T23240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.410203][T23240] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.417427][T23240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.718056][T27190] netlink: 'syz.1.6321': attribute type 1 has an invalid length. [ 755.031004][T27190] veth3: entered promiscuous mode [ 755.218770][T27195] lo speed is unknown, defaulting to 1000 [ 755.598883][T17859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.606742][T17859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.301862][T27222] netlink: 'syz.1.6331': attribute type 11 has an invalid length. [ 756.772114][T26953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.405093][T27229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.443826][T27229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.520564][T27229] veth1_virt_wifi: left allmulticast mode [ 757.837359][T27229] vlan2: left allmulticast mode [ 757.878650][T27227] siw: device registration error -23 [ 757.967322][T23235] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.988155][T23235] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.006863][T23235] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.017271][T23235] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.127659][T23235] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.157591][T23235] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.158790][T27257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.179422][T23235] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.196846][T23235] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.273672][T27258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6336'. [ 758.339341][ T51] block nbd2: Receive control failed (result -107) [ 758.379613][T27258] nbd2: detected capacity change from 0 to 32 [ 758.397638][ T5880] block nbd2: Dead connection, failed to find a fallback [ 758.443380][ T5880] block nbd2: shutting down sockets [ 758.466456][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.482989][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.488690][T26953] veth0_vlan: entered promiscuous mode [ 758.496572][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.507632][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.516045][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.529916][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.537978][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.543469][T26953] veth1_vlan: entered promiscuous mode [ 758.548919][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.561660][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.571529][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.580068][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.589838][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.598307][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.612759][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.621063][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.630714][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.632696][T26953] veth0_macvtap: entered promiscuous mode [ 758.639157][ T5880] ldm_validate_partition_table(): Disk read failed. [ 758.656085][T26953] veth1_macvtap: entered promiscuous mode [ 758.658040][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.673931][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.682505][ T5880] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.692364][ T5880] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.704748][ T5880] Dev nbd2: unable to read RDB block 0 [ 758.721722][ T5880] nbd2: unable to read partition table [ 758.747775][ T5880] ldm_validate_partition_table(): Disk read failed. [ 758.767659][ T5880] Dev nbd2: unable to read RDB block 0 [ 758.782066][ T5880] nbd2: unable to read partition table [ 758.802161][T26953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.830001][T26953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.854289][T23235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.865921][T23235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.895213][T23235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.914436][T23235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.993530][T27270] netlink: 428 bytes leftover after parsing attributes in process `syz.2.6339'. [ 759.088295][T27270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6339'. [ 759.286720][T23239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.350315][T23239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.626063][T27288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6346'. [ 759.643612][T23239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.664518][T23239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.837967][T27295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6349'. [ 760.012739][T27303] FAULT_INJECTION: forcing a failure. [ 760.012739][T27303] name failslab, interval 1, probability 0, space 0, times 0 [ 760.034686][T27303] CPU: 0 UID: 0 PID: 27303 Comm: syz.4.6351 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 760.034713][T27303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.034725][T27303] Call Trace: [ 760.034733][T27303] [ 760.034742][T27303] dump_stack_lvl+0x189/0x250 [ 760.034769][T27303] ? __pfx____ratelimit+0x10/0x10 [ 760.034792][T27303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.034813][T27303] ? __pfx__printk+0x10/0x10 [ 760.034839][T27303] ? __pfx___might_resched+0x10/0x10 [ 760.034856][T27303] ? fs_reclaim_acquire+0x7d/0x100 [ 760.034884][T27303] should_fail_ex+0x414/0x560 [ 760.034909][T27303] should_failslab+0xa8/0x100 [ 760.034933][T27303] __kmalloc_cache_noprof+0x70/0x3d0 [ 760.034953][T27303] ? nft_trans_table_add+0x56/0x430 [ 760.034976][T27303] nft_trans_table_add+0x56/0x430 [ 760.034999][T27303] nf_tables_newtable+0xce3/0x1890 [ 760.035037][T27303] nfnetlink_rcv+0x1132/0x2520 [ 760.035093][T27303] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 760.035164][T27303] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.035205][T27303] netlink_unicast+0x82c/0x9e0 [ 760.035236][T27303] ? __pfx_netlink_unicast+0x10/0x10 [ 760.035260][T27303] ? netlink_sendmsg+0x642/0xb30 [ 760.035280][T27303] ? skb_put+0x11b/0x210 [ 760.035302][T27303] netlink_sendmsg+0x805/0xb30 [ 760.035335][T27303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.035361][T27303] ? aa_sock_msg_perm+0xf1/0x1d0 [ 760.035388][T27303] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.035408][T27303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.035432][T27303] __sock_sendmsg+0x219/0x270 [ 760.035458][T27303] ____sys_sendmsg+0x505/0x830 [ 760.035483][T27303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.035512][T27303] ? import_iovec+0x74/0xa0 [ 760.035536][T27303] ___sys_sendmsg+0x21f/0x2a0 [ 760.035555][T27303] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.035617][T27303] ? __fget_files+0x2a/0x420 [ 760.035633][T27303] ? __fget_files+0x3a0/0x420 [ 760.035661][T27303] __x64_sys_sendmsg+0x19b/0x260 [ 760.035683][T27303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.035712][T27303] ? __pfx_ksys_write+0x10/0x10 [ 760.035731][T27303] ? rcu_is_watching+0x15/0xb0 [ 760.035755][T27303] ? do_syscall_64+0xbe/0x3b0 [ 760.035783][T27303] do_syscall_64+0xfa/0x3b0 [ 760.035804][T27303] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.035825][T27303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.035847][T27303] ? clear_bhb_loop+0x60/0xb0 [ 760.035868][T27303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.035886][T27303] RIP: 0033:0x7f461958ebe9 [ 760.035902][T27303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.035918][T27303] RSP: 002b:00007f461a4b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.035938][T27303] RAX: ffffffffffffffda RBX: 00007f46197b5fa0 RCX: 00007f461958ebe9 [ 760.035951][T27303] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 760.035963][T27303] RBP: 00007f461a4b4090 R08: 0000000000000000 R09: 0000000000000000 [ 760.035975][T27303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.035987][T27303] R13: 00007f46197b6038 R14: 00007f46197b5fa0 R15: 00007ffd93c631a8 [ 760.036017][T27303] [ 760.094228][T27306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6352'. [ 760.298336][T27314] netlink: 'syz.4.6354': attribute type 9 has an invalid length. [ 760.525025][T27304] netlink: 'syz.0.6251': attribute type 7 has an invalid length. [ 760.571166][T27304] netlink: 'syz.0.6251': attribute type 8 has an invalid length. [ 760.623461][T27304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6251'. [ 760.888710][T17859] wlan0: Trigger new scan to find an IBSS to join [ 760.917930][T27324] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.925670][T27324] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.221872][T27324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.241008][T27324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.398872][T23240] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.408264][T23240] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.438017][T23240] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.542643][T27345] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6363'. [ 761.569520][T23240] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.622693][T27348] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 761.694349][T27347] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6363'. [ 761.703827][T27356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6367'. [ 762.556806][T27398] netlink: 'syz.4.6381': attribute type 1 has an invalid length. [ 762.928773][T17859] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.993151][T17859] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.032373][T23240] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.067099][T23240] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.512522][T27434] netlink: 'syz.0.6394': attribute type 1 has an invalid length. [ 763.543361][T27434] __nla_validate_parse: 7 callbacks suppressed [ 763.543379][T27434] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6394'. [ 763.735076][T27430] veth0_to_team: left promiscuous mode [ 763.752758][T27430] veth0_to_team: left allmulticast mode [ 763.826231][T27430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.879337][T27430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.930231][T23246] wlan0: Trigger new scan to find an IBSS to join [ 764.291864][T27430] ipvlan2: left promiscuous mode [ 764.349531][T27430] vlan2: left allmulticast mode [ 764.366087][T27430] veth1: left allmulticast mode [ 764.380903][T12282] lo speed is unknown, defaulting to 1000 [ 764.396214][T27434] tipc: Started in network mode [ 764.396952][T12282] syz0: Port: 1 Link DOWN [ 764.408601][T27434] tipc: Node identity c, cluster identity 4711 [ 764.414782][T27434] tipc: Node number set to 12 [ 764.466357][T27436] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6394'. [ 764.505695][T23247] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.524138][T23247] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.576216][T12282] lo speed is unknown, defaulting to 1000 [ 764.576238][T23247] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.641070][T23247] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.649353][T27458] FAULT_INJECTION: forcing a failure. [ 764.649353][T27458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.695219][T27458] CPU: 1 UID: 0 PID: 27458 Comm: syz.1.6401 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 764.695247][T27458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.695258][T27458] Call Trace: [ 764.695266][T27458] [ 764.695275][T27458] dump_stack_lvl+0x189/0x250 [ 764.695300][T27458] ? __pfx____ratelimit+0x10/0x10 [ 764.695324][T27458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.695344][T27458] ? __pfx__printk+0x10/0x10 [ 764.695381][T27458] should_fail_ex+0x414/0x560 [ 764.695410][T27458] _copy_to_user+0x31/0xb0 [ 764.695432][T27458] simple_read_from_buffer+0xe1/0x170 [ 764.695462][T27458] proc_fail_nth_read+0x1b3/0x220 [ 764.695485][T27458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.695508][T27458] ? rw_verify_area+0x2a6/0x4d0 [ 764.695529][T27458] ? __lock_acquire+0xab9/0xd20 [ 764.695551][T27458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.695573][T27458] vfs_read+0x1fd/0xa30 [ 764.695593][T27458] ? fdget_pos+0x247/0x320 [ 764.695614][T27458] ? __pfx___mutex_lock+0x10/0x10 [ 764.695638][T27458] ? __pfx_vfs_read+0x10/0x10 [ 764.695661][T27458] ? __fget_files+0x2a/0x420 [ 764.695682][T27458] ? __fget_files+0x3a0/0x420 [ 764.695696][T27458] ? __fget_files+0x2a/0x420 [ 764.695722][T27458] ksys_read+0x145/0x250 [ 764.695746][T27458] ? __pfx_ksys_read+0x10/0x10 [ 764.695765][T27458] ? rcu_is_watching+0x15/0xb0 [ 764.695789][T27458] ? do_syscall_64+0xbe/0x3b0 [ 764.695816][T27458] do_syscall_64+0xfa/0x3b0 [ 764.695837][T27458] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.695859][T27458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.695877][T27458] ? clear_bhb_loop+0x60/0xb0 [ 764.695897][T27458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.695912][T27458] RIP: 0033:0x7f8c84d8d5fc [ 764.695928][T27458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 764.695941][T27458] RSP: 002b:00007f8c85cb9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.695960][T27458] RAX: ffffffffffffffda RBX: 00007f8c84fb5fa0 RCX: 00007f8c84d8d5fc [ 764.695972][T27458] RDX: 000000000000000f RSI: 00007f8c85cb90a0 RDI: 0000000000000004 [ 764.695983][T27458] RBP: 00007f8c85cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 764.695993][T27458] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001 [ 764.696003][T27458] R13: 00007f8c84fb6038 R14: 00007f8c84fb5fa0 R15: 00007ffc3f720e48 [ 764.696029][T27458] [ 765.042763][T27466] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6404'. [ 765.066592][T27466] FAULT_INJECTION: forcing a failure. [ 765.066592][T27466] name failslab, interval 1, probability 0, space 0, times 0 [ 765.091092][T27466] CPU: 1 UID: 0 PID: 27466 Comm: syz.4.6404 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 765.091117][T27466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.091128][T27466] Call Trace: [ 765.091136][T27466] [ 765.091144][T27466] dump_stack_lvl+0x189/0x250 [ 765.091170][T27466] ? __pfx____ratelimit+0x10/0x10 [ 765.091193][T27466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.091213][T27466] ? __pfx__printk+0x10/0x10 [ 765.091243][T27466] ? __pfx___might_resched+0x10/0x10 [ 765.091266][T27466] should_fail_ex+0x414/0x560 [ 765.091293][T27466] should_failslab+0xa8/0x100 [ 765.091319][T27466] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 765.091343][T27466] ? __alloc_skb+0x112/0x2d0 [ 765.091372][T27466] __alloc_skb+0x112/0x2d0 [ 765.091401][T27466] ila_xlat_nl_cmd_get_mapping+0x101/0x570 [ 765.091431][T27466] ? __pfx_ila_xlat_nl_cmd_get_mapping+0x10/0x10 [ 765.091458][T27466] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 765.091487][T27466] genl_family_rcv_msg_doit+0x215/0x300 [ 765.091515][T27466] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 765.091550][T27466] ? stack_trace_save+0x9c/0xe0 [ 765.091578][T27466] genl_rcv_msg+0x60e/0x790 [ 765.091604][T27466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.091623][T27466] ? __pfx_ila_xlat_nl_cmd_get_mapping+0x10/0x10 [ 765.091660][T27466] netlink_rcv_skb+0x205/0x470 [ 765.091682][T27466] ? __lock_acquire+0xab9/0xd20 [ 765.091706][T27466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.091726][T27466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 765.091765][T27466] ? down_read+0x1ad/0x2e0 [ 765.091784][T27466] genl_rcv+0x28/0x40 [ 765.091801][T27466] netlink_unicast+0x82c/0x9e0 [ 765.091832][T27466] ? __pfx_netlink_unicast+0x10/0x10 [ 765.091857][T27466] ? netlink_sendmsg+0x642/0xb30 [ 765.091878][T27466] ? skb_put+0x11b/0x210 [ 765.091898][T27466] netlink_sendmsg+0x805/0xb30 [ 765.091932][T27466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.091960][T27466] ? aa_sock_msg_perm+0xf1/0x1d0 [ 765.091988][T27466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 765.092007][T27466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.092032][T27466] __sock_sendmsg+0x219/0x270 [ 765.092064][T27466] ____sys_sendmsg+0x505/0x830 [ 765.092090][T27466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.092118][T27466] ? import_iovec+0x74/0xa0 [ 765.092142][T27466] ___sys_sendmsg+0x21f/0x2a0 [ 765.092163][T27466] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.092221][T27466] ? __fget_files+0x2a/0x420 [ 765.092236][T27466] ? __fget_files+0x3a0/0x420 [ 765.092263][T27466] __x64_sys_sendmsg+0x19b/0x260 [ 765.092284][T27466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 765.092317][T27466] ? __pfx_ksys_write+0x10/0x10 [ 765.092336][T27466] ? rcu_is_watching+0x15/0xb0 [ 765.092360][T27466] ? do_syscall_64+0xbe/0x3b0 [ 765.092387][T27466] do_syscall_64+0xfa/0x3b0 [ 765.092409][T27466] ? lockdep_hardirqs_on+0x9c/0x150 [ 765.092430][T27466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.092448][T27466] ? clear_bhb_loop+0x60/0xb0 [ 765.092469][T27466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.092486][T27466] RIP: 0033:0x7f461958ebe9 [ 765.092503][T27466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.092518][T27466] RSP: 002b:00007f461a4b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.092538][T27466] RAX: ffffffffffffffda RBX: 00007f46197b5fa0 RCX: 00007f461958ebe9 [ 765.092550][T27466] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 765.092563][T27466] RBP: 00007f461a4b4090 R08: 0000000000000000 R09: 0000000000000000 [ 765.092574][T27466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.092585][T27466] R13: 00007f46197b6038 R14: 00007f46197b5fa0 R15: 00007ffd93c631a8 [ 765.092617][T27466] [ 765.467681][T23246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.503055][T27465] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.510800][T27465] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.627657][T27470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6406'. [ 765.775156][T27465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.792929][T27465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.918311][T23247] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.927511][T23247] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.937771][T23247] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.946848][T23247] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.959177][T27477] @ÿþ€: renamed from veth0_vlan [ 766.028523][T23247] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.037446][T23247] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.096875][T23247] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.118917][T27487] netlink: 'syz.2.6412': attribute type 10 has an invalid length. [ 766.131723][T23247] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.178810][T23246] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.178927][T27487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6412'. [ 766.199435][T23246] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.222227][T23246] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.240494][T23246] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.258465][T27498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6415'. [ 766.316117][T27487] team0: Port device geneve0 added [ 766.397970][T27506] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 766.457812][T27488] netlink: 'syz.5.6411': attribute type 1 has an invalid length. [ 766.465930][T27488] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6411'. [ 766.646062][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6424'. [ 766.719092][T27528] netlink: 'syz.1.6423': attribute type 6 has an invalid length. [ 766.733414][T27529] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 766.742627][ T5866] IPVS: starting estimator thread 0... [ 766.840334][T27530] IPVS: using max 29 ests per chain, 69600 per kthread [ 766.950208][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6427'. [ 767.376553][T27551] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6434'. [ 767.614978][T27562] hsr_slave_0: left promiscuous mode [ 767.629002][T27562] hsr_slave_1: left promiscuous mode [ 767.671403][T27564] netlink: 'syz.4.6437': attribute type 7 has an invalid length. [ 767.777822][T27558] bridge0: port 1(veth3) entered blocking state [ 767.806828][T27558] bridge0: port 1(veth3) entered disabled state [ 767.818859][T27558] veth3: entered allmulticast mode [ 767.829619][T27558] veth3: entered promiscuous mode [ 767.870984][T27575] FAULT_INJECTION: forcing a failure. [ 767.870984][T27575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.884112][T27575] CPU: 0 UID: 0 PID: 27575 Comm: syz.0.6442 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 767.884139][T27575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.884150][T27575] Call Trace: [ 767.884159][T27575] [ 767.884168][T27575] dump_stack_lvl+0x189/0x250 [ 767.884195][T27575] ? __pfx____ratelimit+0x10/0x10 [ 767.884218][T27575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.884238][T27575] ? __pfx__printk+0x10/0x10 [ 767.884261][T27575] ? exc_page_fault+0x9f/0xf0 [ 767.884294][T27575] should_fail_ex+0x414/0x560 [ 767.884322][T27575] strncpy_from_user+0x36/0x290 [ 767.884347][T27575] strncpy_from_user_nofault+0x72/0x150 [ 767.884372][T27575] bpf_probe_read_user_str+0x2a/0x70 [ 767.884389][T27575] ? bpf_test_run+0x197/0x7b0 [ 767.884411][T27575] bpf_prog_360870435e5d50e6+0x46/0x4c [ 767.884429][T27575] bpf_test_run+0x2d7/0x7b0 [ 767.884449][T27575] ? bpf_dispatcher_xdp+0x800/0x1000 [ 767.884471][T27575] ? 0xffffffffa0201758 [ 767.884500][T27575] ? __pfx_bpf_test_run+0x10/0x10 [ 767.884544][T27575] ? _copy_from_user+0x94/0xb0 [ 767.884563][T27575] ? bpf_test_init+0x133/0x170 [ 767.884583][T27575] ? xdp_convert_md_to_buff+0x5b/0x330 [ 767.884609][T27575] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 767.884649][T27575] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 767.884678][T27575] ? __fget_files+0x2a/0x420 [ 767.884699][T27575] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 767.884724][T27575] bpf_prog_test_run+0x2c4/0x340 [ 767.884752][T27575] __sys_bpf+0x581/0x870 [ 767.884778][T27575] ? __pfx___sys_bpf+0x10/0x10 [ 767.884813][T27575] ? ksys_write+0x22a/0x250 [ 767.884838][T27575] ? __pfx_ksys_write+0x10/0x10 [ 767.884856][T27575] ? rcu_is_watching+0x15/0xb0 [ 767.884888][T27575] __x64_sys_bpf+0x7c/0x90 [ 767.884909][T27575] do_syscall_64+0xfa/0x3b0 [ 767.884930][T27575] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.884952][T27575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.884968][T27575] ? clear_bhb_loop+0x60/0xb0 [ 767.884989][T27575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.885006][T27575] RIP: 0033:0x7efc4fb8ebe9 [ 767.885022][T27575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.885036][T27575] RSP: 002b:00007efc5093d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 767.885056][T27575] RAX: ffffffffffffffda RBX: 00007efc4fdb5fa0 RCX: 00007efc4fb8ebe9 [ 767.885068][T27575] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 767.885080][T27575] RBP: 00007efc5093d090 R08: 0000000000000000 R09: 0000000000000000 [ 767.885091][T27575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.885101][T27575] R13: 00007efc4fdb6038 R14: 00007efc4fdb5fa0 R15: 00007fff1338d298 [ 767.885130][T27575] [ 768.250794][T27579] netlink: 'syz.1.6443': attribute type 1 has an invalid length. [ 768.299683][T27579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.343045][T27579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.350329][T27579] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 768.362251][T27579] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 768.444406][T27586] netlink: 'syz.4.6444': attribute type 10 has an invalid length. [ 768.456341][T27582] veth3: entered promiscuous mode [ 768.482369][T27582] bond1: (slave veth3): Enslaving as an active interface with a down link [ 768.614304][T27586] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.650349][T27586] bond0: (slave team0): Enslaving as an active interface with an up link [ 768.683151][T23247] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 770.937511][T27625] netlink: 'syz.5.6453': attribute type 7 has an invalid length. [ 770.955898][T27625] netlink: 'syz.5.6453': attribute type 8 has an invalid length. [ 770.973390][T27634] __nla_validate_parse: 4 callbacks suppressed [ 770.973408][T27634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6456'. [ 771.011799][T27625] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6453'. [ 771.039113][T27628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6455'. [ 771.372912][T27647] lo speed is unknown, defaulting to 1000 [ 771.609273][ T123] block nbd1: Possible stuck request ffff888025645080: control (read@0,4096B). Runtime 90 seconds [ 771.847927][T27665] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6469'. [ 771.891146][T27667] netlink: 'syz.2.6468': attribute type 10 has an invalid length. [ 771.899132][T27667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6468'. [ 772.427527][T27688] netlink: 'syz.0.6475': attribute type 7 has an invalid length. [ 772.490057][T27688] netlink: 'syz.0.6475': attribute type 8 has an invalid length. [ 772.497825][T27688] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6475'. [ 772.776426][T27697] netlink: 'syz.2.6480': attribute type 1 has an invalid length. [ 772.784464][T27697] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6480'. [ 773.461378][T27709] netlink: 'syz.1.6487': attribute type 1 has an invalid length. [ 773.479188][T27709] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6487'. [ 773.699953][T27718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6489'. [ 773.824017][T27727] FAULT_INJECTION: forcing a failure. [ 773.824017][T27727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.870698][T27727] CPU: 1 UID: 0 PID: 27727 Comm: syz.5.6491 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 773.870726][T27727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.870738][T27727] Call Trace: [ 773.870746][T27727] [ 773.870755][T27727] dump_stack_lvl+0x189/0x250 [ 773.870783][T27727] ? __pfx____ratelimit+0x10/0x10 [ 773.870806][T27727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.870826][T27727] ? __pfx__printk+0x10/0x10 [ 773.870850][T27727] ? __might_fault+0xb0/0x130 [ 773.870883][T27727] should_fail_ex+0x414/0x560 [ 773.870911][T27727] _copy_from_user+0x2d/0xb0 [ 773.870931][T27727] ____sys_sendmsg+0x2fe/0x830 [ 773.870953][T27727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.870978][T27727] ? import_iovec+0x74/0xa0 [ 773.871002][T27727] ___sys_sendmsg+0x21f/0x2a0 [ 773.871021][T27727] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.871083][T27727] ? __might_fault+0xb0/0x130 [ 773.871110][T27727] __sys_sendmmsg+0x227/0x430 [ 773.871135][T27727] ? __pfx___sys_sendmmsg+0x10/0x10 [ 773.871151][T27727] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 773.871203][T27727] ? ksys_write+0x22a/0x250 [ 773.871228][T27727] ? __pfx_ksys_write+0x10/0x10 [ 773.871248][T27727] ? rcu_is_watching+0x15/0xb0 [ 773.871273][T27727] __x64_sys_sendmmsg+0xa0/0xc0 [ 773.871294][T27727] do_syscall_64+0xfa/0x3b0 [ 773.871318][T27727] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.871339][T27727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.871358][T27727] ? clear_bhb_loop+0x60/0xb0 [ 773.871378][T27727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.871399][T27727] RIP: 0033:0x7fe181d8ebe9 [ 773.871414][T27727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.871428][T27727] RSP: 002b:00007fe182bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 773.871447][T27727] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8ebe9 [ 773.871460][T27727] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 773.871470][T27727] RBP: 00007fe182bec090 R08: 0000000000000000 R09: 0000000000000000 [ 773.871480][T27727] R10: 0000000020040040 R11: 0000000000000246 R12: 0000000000000001 [ 773.871491][T27727] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 773.871519][T27727] [ 774.210477][T27731] wireguard0: entered promiscuous mode [ 774.216187][T27731] wireguard0: entered allmulticast mode [ 774.434321][T27738] lo speed is unknown, defaulting to 1000 [ 774.473343][T27741] netlink: 'syz.4.6495': attribute type 7 has an invalid length. [ 774.500633][T27741] netlink: 'syz.4.6495': attribute type 8 has an invalid length. [ 774.538586][T27741] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6495'. [ 774.619939][T27748] netlink: 'syz.0.6498': attribute type 83 has an invalid length. [ 774.790112][T27755] syzkaller0: entered promiscuous mode [ 774.795637][T27755] syzkaller0: entered allmulticast mode [ 774.979786][T27747] lo speed is unknown, defaulting to 1000 [ 775.027446][T27759] netlink: 'syz.2.6501': attribute type 21 has an invalid length. [ 775.980795][T27785] __nla_validate_parse: 5 callbacks suppressed [ 775.980814][T27785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6504'. [ 776.022883][T27785] tipc: Enabling of bearer rejected, failed to enable media [ 776.260538][T27807] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6512'. [ 776.421619][T27815] FAULT_INJECTION: forcing a failure. [ 776.421619][T27815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.435230][T27815] CPU: 0 UID: 0 PID: 27815 Comm: syz.0.6514 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 776.435257][T27815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.435268][T27815] Call Trace: [ 776.435275][T27815] [ 776.435283][T27815] dump_stack_lvl+0x189/0x250 [ 776.435308][T27815] ? __pfx____ratelimit+0x10/0x10 [ 776.435331][T27815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.435351][T27815] ? __pfx__printk+0x10/0x10 [ 776.435374][T27815] ? __might_fault+0xb0/0x130 [ 776.435410][T27815] should_fail_ex+0x414/0x560 [ 776.435438][T27815] _copy_from_iter+0x1db/0x16f0 [ 776.435461][T27815] ? rcu_is_watching+0x15/0xb0 [ 776.435480][T27815] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 776.435505][T27815] ? __pfx__copy_from_iter+0x10/0x10 [ 776.435525][T27815] ? __build_skb_around+0x257/0x3e0 [ 776.435554][T27815] ? netlink_sendmsg+0x642/0xb30 [ 776.435576][T27815] ? skb_put+0x11b/0x210 [ 776.435604][T27815] netlink_sendmsg+0x6b2/0xb30 [ 776.435638][T27815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.435665][T27815] ? aa_sock_msg_perm+0xf1/0x1d0 [ 776.435693][T27815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 776.435711][T27815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.435734][T27815] __sock_sendmsg+0x219/0x270 [ 776.435756][T27815] ____sys_sendmsg+0x505/0x830 [ 776.435780][T27815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 776.435808][T27815] ? import_iovec+0x74/0xa0 [ 776.435832][T27815] ___sys_sendmsg+0x21f/0x2a0 [ 776.435853][T27815] ? __pfx____sys_sendmsg+0x10/0x10 [ 776.435909][T27815] ? __fget_files+0x2a/0x420 [ 776.435925][T27815] ? __fget_files+0x3a0/0x420 [ 776.435952][T27815] __x64_sys_sendmsg+0x19b/0x260 [ 776.435973][T27815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 776.436002][T27815] ? __pfx_ksys_write+0x10/0x10 [ 776.436022][T27815] ? rcu_is_watching+0x15/0xb0 [ 776.436042][T27815] ? do_syscall_64+0xbe/0x3b0 [ 776.436068][T27815] do_syscall_64+0xfa/0x3b0 [ 776.436092][T27815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.436109][T27815] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 776.436127][T27815] ? clear_bhb_loop+0x60/0xb0 [ 776.436152][T27815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.436170][T27815] RIP: 0033:0x7efc4fb8ebe9 [ 776.436186][T27815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.436202][T27815] RSP: 002b:00007efc5093d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.436221][T27815] RAX: ffffffffffffffda RBX: 00007efc4fdb5fa0 RCX: 00007efc4fb8ebe9 [ 776.436234][T27815] RDX: 000000000000c800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 776.436247][T27815] RBP: 00007efc5093d090 R08: 0000000000000000 R09: 0000000000000000 [ 776.436258][T27815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.436270][T27815] R13: 00007efc4fdb6038 R14: 00007efc4fdb5fa0 R15: 00007fff1338d298 [ 776.436301][T27815] [ 777.017170][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6519'. [ 777.271016][T27841] netlink: 'syz.4.6525': attribute type 1 has an invalid length. [ 777.296149][T27843] net_ratelimit: 17 callbacks suppressed [ 777.296167][T27843] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 777.320161][T27843] tipc: Enabling of bearer rejected, failed to enable media [ 777.342121][T27843] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 777.891836][T27865] netlink: 'syz.2.6535': attribute type 83 has an invalid length. [ 777.982094][T27870] FAULT_INJECTION: forcing a failure. [ 777.982094][T27870] name failslab, interval 1, probability 0, space 0, times 0 [ 777.994921][T27870] CPU: 1 UID: 0 PID: 27870 Comm: syz.1.6537 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 777.994947][T27870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.994957][T27870] Call Trace: [ 777.994964][T27870] [ 777.994972][T27870] dump_stack_lvl+0x189/0x250 [ 777.994997][T27870] ? __pfx____ratelimit+0x10/0x10 [ 777.995019][T27870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.995038][T27870] ? __pfx__printk+0x10/0x10 [ 777.995067][T27870] ? __pfx___might_resched+0x10/0x10 [ 777.995089][T27870] should_fail_ex+0x414/0x560 [ 777.995115][T27870] should_failslab+0xa8/0x100 [ 777.995140][T27870] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 777.995164][T27870] ? __alloc_skb+0x112/0x2d0 [ 777.995191][T27870] __alloc_skb+0x112/0x2d0 [ 777.995218][T27870] netlink_sendmsg+0x5c6/0xb30 [ 777.995252][T27870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.995289][T27870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 777.995316][T27870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.995334][T27870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.995358][T27870] __sock_sendmsg+0x219/0x270 [ 777.995384][T27870] ____sys_sendmsg+0x505/0x830 [ 777.995408][T27870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.995436][T27870] ? import_iovec+0x74/0xa0 [ 777.995459][T27870] ___sys_sendmsg+0x21f/0x2a0 [ 777.995480][T27870] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.995533][T27870] ? __fget_files+0x2a/0x420 [ 777.995549][T27870] ? __fget_files+0x3a0/0x420 [ 777.995575][T27870] __x64_sys_sendmsg+0x19b/0x260 [ 777.995596][T27870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.995624][T27870] ? __pfx_ksys_write+0x10/0x10 [ 777.995644][T27870] ? rcu_is_watching+0x15/0xb0 [ 777.995667][T27870] ? do_syscall_64+0xbe/0x3b0 [ 777.995695][T27870] do_syscall_64+0xfa/0x3b0 [ 777.995716][T27870] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.995737][T27870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.995755][T27870] ? clear_bhb_loop+0x60/0xb0 [ 777.995776][T27870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.995792][T27870] RIP: 0033:0x7f8c84d8ebe9 [ 777.995809][T27870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.995824][T27870] RSP: 002b:00007f8c85cb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.995843][T27870] RAX: ffffffffffffffda RBX: 00007f8c84fb5fa0 RCX: 00007f8c84d8ebe9 [ 777.995855][T27870] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000004 [ 777.995867][T27870] RBP: 00007f8c85cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 777.995878][T27870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.995888][T27870] R13: 00007f8c84fb6038 R14: 00007f8c84fb5fa0 R15: 00007ffc3f720e48 [ 777.995918][T27870] [ 778.289048][ T30] audit: type=1107 audit(1755238885.379:8): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 778.404825][T27878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6538'. [ 778.701671][T27888] syzkaller0: entered promiscuous mode [ 778.726632][T27888] syzkaller0: entered allmulticast mode [ 778.824703][T27894] netlink: 'syz.2.6544': attribute type 2 has an invalid length. [ 778.860634][T27894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6544'. [ 778.862769][T27888] lo speed is unknown, defaulting to 1000 [ 778.884044][T27896] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6546'. [ 778.926237][T27893] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6545'. [ 778.957609][T27889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 779.399327][T27914] FAULT_INJECTION: forcing a failure. [ 779.399327][T27914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.416337][T27912] netlink: 'syz.4.6551': attribute type 7 has an invalid length. [ 779.438783][T27912] netlink: 'syz.4.6551': attribute type 8 has an invalid length. [ 779.458569][T27914] CPU: 0 UID: 0 PID: 27914 Comm: syz.5.6553 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 779.458596][T27914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.458608][T27914] Call Trace: [ 779.458616][T27914] [ 779.458625][T27914] dump_stack_lvl+0x189/0x250 [ 779.458651][T27914] ? __pfx____ratelimit+0x10/0x10 [ 779.458675][T27914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.458695][T27914] ? __pfx__printk+0x10/0x10 [ 779.458719][T27914] ? __might_fault+0xb0/0x130 [ 779.458755][T27914] should_fail_ex+0x414/0x560 [ 779.458785][T27914] _copy_from_user+0x2d/0xb0 [ 779.458806][T27914] ethtool_get_sset_info+0x9a/0x5f0 [ 779.458829][T27914] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.458852][T27914] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 779.458874][T27914] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 779.458896][T27914] ? __pfx_ethtool_get_sset_info+0x10/0x10 [ 779.458929][T27914] dev_ethtool+0x128a/0x19b0 [ 779.458962][T27914] ? __pfx_dev_ethtool+0x10/0x10 [ 779.458999][T27914] ? dev_load+0x21/0x1f0 [ 779.459025][T27914] dev_ioctl+0x392/0x1150 [ 779.459053][T27914] sock_do_ioctl+0x22c/0x300 [ 779.459078][T27914] ? __pfx_sock_do_ioctl+0x10/0x10 [ 779.459096][T27914] ? __lock_acquire+0xab9/0xd20 [ 779.459138][T27914] sock_ioctl+0x576/0x790 [ 779.459169][T27914] ? __pfx_sock_ioctl+0x10/0x10 [ 779.459190][T27914] ? __fget_files+0x2a/0x420 [ 779.459205][T27914] ? __fget_files+0x3a0/0x420 [ 779.459220][T27914] ? __fget_files+0x2a/0x420 [ 779.459240][T27914] ? bpf_lsm_file_ioctl+0x9/0x20 [ 779.459262][T27914] ? __pfx_sock_ioctl+0x10/0x10 [ 779.459281][T27914] __se_sys_ioctl+0xf9/0x170 [ 779.459305][T27914] do_syscall_64+0xfa/0x3b0 [ 779.459327][T27914] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.459349][T27914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.459367][T27914] ? clear_bhb_loop+0x60/0xb0 [ 779.459390][T27914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.459406][T27914] RIP: 0033:0x7fe181d8ebe9 [ 779.459422][T27914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.459436][T27914] RSP: 002b:00007fe182bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.459456][T27914] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8ebe9 [ 779.459469][T27914] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 779.459481][T27914] RBP: 00007fe182bec090 R08: 0000000000000000 R09: 0000000000000000 [ 779.459492][T27914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.459503][T27914] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 779.459535][T27914] [ 779.753519][T27912] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6551'. [ 780.202280][T27926] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6558'. [ 780.803162][T27951] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6566'. [ 781.491310][T27974] netlink: 'syz.1.6570': attribute type 7 has an invalid length. [ 781.516088][T27974] netlink: 'syz.1.6570': attribute type 8 has an invalid length. [ 781.564669][T27974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6570'. [ 781.626335][T27979] netlink: 'syz.0.6573': attribute type 10 has an invalid length. [ 781.672899][T27979] team0: Device ipvlan1 failed to register rx_handler [ 781.687362][T27982] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6574'. [ 781.905720][T27986] netlink: 'syz.5.6578': attribute type 1 has an invalid length. [ 782.068146][T27994] netlink: 'syz.0.6579': attribute type 1 has an invalid length. [ 782.162553][T27986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 782.208881][ T30] audit: type=1107 audit(1755238889.299:9): pid=28001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 782.296340][T27995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 782.414242][T27995] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 782.434288][T27995] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 782.547931][T27996] veth3: entered promiscuous mode [ 782.560043][T27996] bond4: (slave veth3): Enslaving as an active interface with a down link [ 782.648017][T27994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.674361][T27999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.681725][T27999] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 782.693878][T27999] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 782.726577][T28002] tipc: Invalid UDP bearer configuration [ 782.726740][T28002] tipc: Enabling of bearer rejected, failed to enable media [ 782.793099][T28014] netlink: 'syz.2.6585': attribute type 1 has an invalid length. [ 782.841282][T28003] veth3: entered promiscuous mode [ 782.854640][T28014] netlink: 'syz.2.6585': attribute type 1 has an invalid length. [ 782.896689][T28003] bond1: (slave veth3): Enslaving as an active interface with a down link [ 782.947720][T28014] netlink: 'syz.2.6585': attribute type 1 has an invalid length. [ 783.095022][T28014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 783.225436][T28022] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6586'. [ 783.255586][T28025] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 783.535865][T28014] vlan2: entered allmulticast mode [ 783.555867][T28014] veth1: entered allmulticast mode [ 783.576478][T28014] veth1: entered promiscuous mode [ 783.583514][T28014] veth1: left promiscuous mode [ 783.605224][T28014] bond1: (slave vlan2): making interface the new active one [ 783.642553][T28014] veth1: entered promiscuous mode [ 783.648882][T28014] vlan2: entered promiscuous mode [ 783.654530][T28014] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 783.890042][T28045] lo speed is unknown, defaulting to 1000 [ 784.004862][T28062] FAULT_INJECTION: forcing a failure. [ 784.004862][T28062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.096205][T28062] CPU: 0 UID: 0 PID: 28062 Comm: syz.5.6595 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 784.096232][T28062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.096243][T28062] Call Trace: [ 784.096251][T28062] [ 784.096260][T28062] dump_stack_lvl+0x189/0x250 [ 784.096285][T28062] ? __pfx____ratelimit+0x10/0x10 [ 784.096308][T28062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.096328][T28062] ? __pfx__printk+0x10/0x10 [ 784.096351][T28062] ? __might_fault+0xb0/0x130 [ 784.096385][T28062] should_fail_ex+0x414/0x560 [ 784.096413][T28062] _copy_from_user+0x2d/0xb0 [ 784.096434][T28062] btf_new_fd+0x33a/0xc90 [ 784.096453][T28062] ? apparmor_capable+0x137/0x1b0 [ 784.096481][T28062] ? __pfx_btf_new_fd+0x10/0x10 [ 784.096502][T28062] ? bpf_token_put+0x143/0x160 [ 784.096525][T28062] ? bpf_btf_load+0x126/0x190 [ 784.096550][T28062] __sys_bpf+0x406/0x870 [ 784.096574][T28062] ? __pfx___sys_bpf+0x10/0x10 [ 784.096609][T28062] ? ksys_write+0x22a/0x250 [ 784.096633][T28062] ? __pfx_ksys_write+0x10/0x10 [ 784.096662][T28062] __x64_sys_bpf+0x7c/0x90 [ 784.096683][T28062] do_syscall_64+0xfa/0x3b0 [ 784.096705][T28062] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.096727][T28062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.096744][T28062] ? clear_bhb_loop+0x60/0xb0 [ 784.096766][T28062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.096783][T28062] RIP: 0033:0x7fe181d8ebe9 [ 784.096799][T28062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.096814][T28062] RSP: 002b:00007fe182bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.096834][T28062] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8ebe9 [ 784.096847][T28062] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 784.096858][T28062] RBP: 00007fe182bec090 R08: 0000000000000000 R09: 0000000000000000 [ 784.096869][T28062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.096880][T28062] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 784.096909][T28062] [ 784.157761][T28066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6596'. [ 784.458001][T28066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.475525][T28071] netlink: 'syz.5.6599': attribute type 4 has an invalid length. [ 784.519028][T28071] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6599'. [ 784.795811][T28083] macsec1: entered allmulticast mode [ 784.804263][T28083] syz_tun: entered allmulticast mode [ 784.865766][T28083] syz_tun: left allmulticast mode [ 785.089022][T28084] macsec1: entered allmulticast mode [ 785.114717][T28084] syz_tun: entered allmulticast mode [ 785.192610][T28084] syz_tun: left allmulticast mode [ 785.213341][T28095] netlink: 'syz.4.6606': attribute type 1 has an invalid length. [ 785.256957][T28095] netlink: 'syz.4.6606': attribute type 1 has an invalid length. [ 785.438015][T28102] netlink: 'syz.4.6606': attribute type 1 has an invalid length. [ 785.797286][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6608'. [ 785.845614][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6608'. [ 786.085151][T28102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 786.222388][T28104] bond1: (slave wlan0): Releasing active interface [ 786.276635][T28104] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 786.323652][T28107] batadv0: entered promiscuous mode [ 786.349506][T28107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 786.640424][T28115] FAULT_INJECTION: forcing a failure. [ 786.640424][T28115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.690833][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6611'. [ 786.736028][T28115] CPU: 1 UID: 0 PID: 28115 Comm: syz.5.6612 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 786.736054][T28115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.736066][T28115] Call Trace: [ 786.736074][T28115] [ 786.736081][T28115] dump_stack_lvl+0x189/0x250 [ 786.736109][T28115] ? __pfx____ratelimit+0x10/0x10 [ 786.736131][T28115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.736152][T28115] ? __pfx__printk+0x10/0x10 [ 786.736174][T28115] ? __might_fault+0xb0/0x130 [ 786.736208][T28115] should_fail_ex+0x414/0x560 [ 786.736236][T28115] _copy_from_user+0x2d/0xb0 [ 786.736257][T28115] do_tcp_setsockopt+0x47d/0x1f10 [ 786.736288][T28115] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 786.736315][T28115] ? __pfx_aa_sk_perm+0x10/0x10 [ 786.736343][T28115] ? __fget_files+0x2a/0x420 [ 786.736357][T28115] ? aa_sock_opt_perm+0xff/0x1b0 [ 786.736375][T28115] ? sock_common_setsockopt+0x36/0xc0 [ 786.736396][T28115] ? tcp_setsockopt+0x3d/0xe0 [ 786.736427][T28115] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 786.736452][T28115] do_sock_setsockopt+0x17c/0x1b0 [ 786.736475][T28115] __x64_sys_setsockopt+0x13f/0x1b0 [ 786.736499][T28115] do_syscall_64+0xfa/0x3b0 [ 786.736521][T28115] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.736543][T28115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.736561][T28115] ? clear_bhb_loop+0x60/0xb0 [ 786.736582][T28115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.736599][T28115] RIP: 0033:0x7fe181d8ebe9 [ 786.736615][T28115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.736631][T28115] RSP: 002b:00007fe182bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 786.736650][T28115] RAX: ffffffffffffffda RBX: 00007fe181fb5fa0 RCX: 00007fe181d8ebe9 [ 786.736664][T28115] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 786.736675][T28115] RBP: 00007fe182bec090 R08: 0000000000000004 R09: 0000000000000000 [ 786.736692][T28115] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 786.736703][T28115] R13: 00007fe181fb6038 R14: 00007fe181fb5fa0 R15: 00007ffd822ea898 [ 786.736733][T28115] [ 786.964708][T28120] netlink: 'syz.4.6613': attribute type 1 has an invalid length. [ 787.263067][T28120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.349290][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6614'. [ 787.415424][T28128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6614'. [ 787.422491][T28121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.443651][T28121] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 787.457018][T28121] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 787.563757][T28122] veth5: entered promiscuous mode [ 787.577955][T28122] bond4: (slave veth5): Enslaving as an active interface with a down link [ 787.767554][T28117] tipc: Resetting bearer [ 787.787642][T28135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6616'. [ 787.827624][T28117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.846819][T28117] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 787.883253][T28117] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 787.917543][T28117] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 787.981242][T26159] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 787.993174][T26159] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 788.001590][T26159] CPU: 1 UID: 0 PID: 26159 Comm: kbnepd bnep0 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 788.013843][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.023908][T26159] RIP: 0010:klist_del+0x49/0x110 [ 788.028859][T26159] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 9e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 9e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 788.048472][T26159] RSP: 0018:ffffc90002e37768 EFLAGS: 00010202 [ 788.054554][T26159] RAX: 000000000000000b RBX: ffff88814271f460 RCX: ffff888068b50000 [ 788.062534][T26159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 788.070497][T26159] RBP: ffffc90002e37890 R08: ffff888040dd5f03 R09: 1ffff110081babe0 [ 788.078456][T26159] R10: dffffc0000000000 R11: ffffed10081babe1 R12: dffffc0000000000 [ 788.086417][T26159] R13: 1ffff110284e3e8c R14: 0000000000000000 R15: ffff88802f4b8750 [ 788.094379][T26159] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 788.103304][T26159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.109878][T26159] CR2: 000000110c352816 CR3: 000000006ba8e000 CR4: 00000000003526f0 [ 788.117844][T26159] Call Trace: [ 788.121110][T26159] [ 788.124028][T26159] device_del+0x280/0x8e0 [ 788.128345][T26159] ? _raw_spin_unlock_irq+0x2e/0x50 [ 788.133531][T26159] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 788.139577][T26159] ? __pfx_device_del+0x10/0x10 [ 788.144408][T26159] ? netdev_unregister_kobject+0x344/0x450 [ 788.150197][T26159] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 788.156600][T26159] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 788.163351][T26159] ? rtnl_net_dev_lock+0x257/0x2f0 [ 788.168452][T26159] unregister_netdevice_queue+0x33c/0x380 [ 788.174155][T26159] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 788.180378][T26159] ? rtnl_net_dev_lock+0x36/0x2f0 [ 788.185472][T26159] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 788.190567][T26159] unregister_netdev+0x1f/0x60 [ 788.195311][T26159] bnep_session+0x294d/0x2b40 [ 788.199967][T26159] ? rcu_is_watching+0x15/0xb0 [ 788.204712][T26159] ? trace_sched_exit_tp+0x36/0x110 [ 788.209901][T26159] ? __lock_acquire+0xab9/0xd20 [ 788.214748][T26159] ? __pfx_bnep_session+0x10/0x10 [ 788.219754][T26159] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 788.225631][T26159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 788.231954][T26159] ? __pfx_woken_wake_function+0x10/0x10 [ 788.237593][T26159] ? __kthread_parkme+0x7b/0x200 [ 788.242530][T26159] ? __kthread_parkme+0x1a1/0x200 [ 788.247545][T26159] kthread+0x70e/0x8a0 [ 788.251611][T26159] ? __pfx_bnep_session+0x10/0x10 [ 788.256626][T26159] ? __pfx_kthread+0x10/0x10 [ 788.261207][T26159] ? _raw_spin_unlock_irq+0x23/0x50 [ 788.266389][T26159] ? lockdep_hardirqs_on+0x9c/0x150 [ 788.271569][T26159] ? __pfx_kthread+0x10/0x10 [ 788.276166][T26159] ret_from_fork+0x3f9/0x770 [ 788.280753][T26159] ? __pfx_ret_from_fork+0x10/0x10 [ 788.285862][T26159] ? __switch_to_asm+0x39/0x70 [ 788.290616][T26159] ? __switch_to_asm+0x33/0x70 [ 788.295380][T26159] ? __pfx_kthread+0x10/0x10 [ 788.299971][T26159] ret_from_fork_asm+0x1a/0x30 [ 788.304731][T26159] [ 788.307745][T26159] Modules linked in: [ 788.312427][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061150800: rx timeout, send abort [ 788.320700][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061152000: rx timeout, send abort [ 788.329167][T26159] ---[ end trace 0000000000000000 ]--- [ 788.334952][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061150800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.335020][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061152000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.366407][T26159] RIP: 0010:klist_del+0x49/0x110 [ 788.371428][T26159] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 9e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 9e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 788.391244][T26159] RSP: 0018:ffffc90002e37768 EFLAGS: 00010202 [ 788.397455][T26159] RAX: 000000000000000b RBX: ffff88814271f460 RCX: ffff888068b50000 [ 788.405526][T26159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 788.413651][T26159] RBP: ffffc90002e37890 R08: ffff888040dd5f03 R09: 1ffff110081babe0 [ 788.421705][T26159] R10: dffffc0000000000 R11: ffffed10081babe1 R12: dffffc0000000000 [ 788.429707][T26159] R13: 1ffff110284e3e8c R14: 0000000000000000 R15: ffff88802f4b8750 [ 788.437707][T26159] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 788.446697][T26159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.453315][T26159] CR2: 000000110c352816 CR3: 0000000077864000 CR4: 00000000003526f0 [ 788.461332][T26159] Kernel panic - not syncing: Fatal exception [ 788.467664][T26159] Kernel Offset: disabled [ 788.471971][T26159] Rebooting in 86400 seconds..